last executing test programs: 2m20.494982896s ago: executing program 3 (id=1537): r0 = socket(0xa, 0x2400000001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000a40)={0x1, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000b00)={0x3, {{0xa, 0x4, 0x0, @mcast1}}}, 0x88) socket(0x2d, 0x2, 0x0) (async) r1 = socket(0x2d, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x10, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000000600)='GPL\x00', 0x2, 0xfd90, &(0x7f0000000640)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r2) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{r3}, &(0x7f00000007c0), &(0x7f0000000800)=r2}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{r3, 0xffffffffffffffff}, &(0x7f00000007c0), &(0x7f0000000800)=r2}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0xc, &(0x7f0000000940)=ANY=[@ANYRES16, @ANYRES64=r4, @ANYBLOB="01c1d7944e587efd5a79d3ced9b72570753fff618fa80700000000000000c2329e96bb5f101ef662db3145aa16d6f529aab4142fcb58265af75d4605b1ab9f446e85a2a3a0c0c53ef0", @ANYRES8=r1, @ANYBLOB="8f6ae6bca838d7d842bf18a7a944b1a4bef6d6317dce686f523316f88d873b420bb5454f613bbdf25a717cd0d135bc178fffc816ededc271c3756044f71863bc0c5005f72e5a367de46a7baa94836d8107fb664b86dd9cdba64eaa44255102a098df598354851abf1389d5665885d802c2e0505bdf2fb756464ededf46279e296564ace7520d156807ab5eb64c97952db4564c66a9575c33"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0xc, &(0x7f0000000940)=ANY=[@ANYRES16, @ANYRES64=r4, @ANYBLOB="01c1d7944e587efd5a79d3ced9b72570753fff618fa80700000000000000c2329e96bb5f101ef662db3145aa16d6f529aab4142fcb58265af75d4605b1ab9f446e85a2a3a0c0c53ef0", @ANYRES8=r1, @ANYBLOB="8f6ae6bca838d7d842bf18a7a944b1a4bef6d6317dce686f523316f88d873b420bb5454f613bbdf25a717cd0d135bc178fffc816ededc271c3756044f71863bc0c5005f72e5a367de46a7baa94836d8107fb664b86dd9cdba64eaa44255102a098df598354851abf1389d5665885d802c2e0505bdf2fb756464ededf46279e296564ace7520d156807ab5eb64c97952db4564c66a9575c33"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000020000000c00000000140000", @ANYRES32, @ANYBLOB="0000f5a1b185528c264f7e81a4d300"/32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r6 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r6, 0x1, 0x2, &(0x7f00000001c0)=0x6, 0x4) (async) setsockopt$sock_int(r6, 0x1, 0x2, &(0x7f00000001c0)=0x6, 0x4) bind$inet6(r6, &(0x7f0000000240)={0xa, 0x4e1e, 0x19fb, @empty, 0x75c41ba2}, 0x1c) r7 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r7, &(0x7f0000000440)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r8, &(0x7f0000000480)={0xa, 0x4e22, 0xfffffffd, @empty, 0x7}, 0x1c) (async) bind$inet6(r8, &(0x7f0000000480)={0xa, 0x4e22, 0xfffffffd, @empty, 0x7}, 0x1c) listen(r8, 0xfffffffc) (async) listen(r8, 0xfffffffc) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$mptcp(&(0x7f00000004c0), 0xffffffffffffffff) socket$inet_mptcp(0x2, 0x1, 0x106) (async) r11 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r11, &(0x7f0000000840)={0x2, 0x4e22, @local}, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r9, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000900)={0x28, r10, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) (async) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r9, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000900)={0x28, r10, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) socket$inet6(0xa, 0x1, 0x0) (async) r12 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r12, 0x1, 0x2, &(0x7f00000003c0)=0x6, 0x4) bind$inet6(r12, &(0x7f0000000400)={0xa, 0x4e1e, 0x19fb, @empty, 0x75c41ba2}, 0x1c) (async) bind$inet6(r12, &(0x7f0000000400)={0xa, 0x4e1e, 0x19fb, @empty, 0x75c41ba2}, 0x1c) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) listen(r12, 0x3) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={r5, 0x68, &(0x7f00000002c0)}, 0x10) ioctl$SIOCX25SSUBSCRIP(r1, 0x89e1, &(0x7f0000000000)={'pim6reg1\x00', 0x6, 0x10000}) 2m19.195016455s ago: executing program 3 (id=1541): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond0\x00', 0x0}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={0xffffffffffffffff, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r3, &(0x7f0000000340)={0xa, 0x4e23, 0x3, @mcast1, 0x2}, 0x1c) connect$inet6(r3, 0x0, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r3, 0x29, 0x1, &(0x7f0000000380), 0x4) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000003c0)={r2, &(0x7f0000000400)="dc", &(0x7f0000000440)=@udp}, 0x20) sendmsg$nl_route_sched(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000d40)=@newqdisc={0x3c, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0x1}, {0xffff, 0x9}}, [@TCA_INGRESS_BLOCK={0x8}, @qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x3c}}, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f0000000600)="f11fbb8829b1e3cabcf88a010946bacf02d7f5ba42b4c369a0d48bc9d71c2eb5228190a7c4ef909a8a1bf96cb3337157222b227abc68dadef349fbf88119631a240b188b9ca995ee00183d54d5bc0b51cdbc5e8c25372612dc788f9b0ca39ddd5b30c0c2800a956c505cafad6643f19550a01f787b95ac00773e3773d51ae5a929d645bf9e76f8c05319b505e23be94df1902112db08a85020c6126b18aee60f1280ab2040519f69174a988d3fb8059629c8179766369eea815b1840cb1d168bedb1d7b37b5d1f8f697177147d8207acba63e25e00a86f3f920bc6d044", 0xdd, 0x4000040, &(0x7f0000000700)={0x11, 0x15, r1, 0x1, 0x80, 0x6, @local}, 0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newqdisc={0x34, 0x24, 0x501, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0x2}, {0x1, 0x1}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x4, 0x16, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000a00)='GPL\x00'}, 0x48) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x30, 0x40, 0x1, 0x7fffc, 0x4, {0x1}, [@nested={0x4, 0x48}, @nested={0x10, 0x1, 0x0, 0x1, [@nested={0xc, 0x10, 0x0, 0x1, [@nested={0x5, 0xb, 0x0, 0x1, [@generic="8e"]}]}]}, @typed={0x8, 0x2, 0x0, 0x0, @fd=r4}]}, 0x30}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000a40), 0x2, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000a80)={'syzkaller1\x00', 0x5001}) r6 = socket$inet_udp(0x2, 0x2, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r8, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c) syz_emit_ethernet(0x9a, &(0x7f0000000540)=ANY=[@ANYBLOB="0180c200000eaaaaaaaaaa1686dd6ae60000006411000000ff0200000000000000000000000000014e214e200064907802000000030000000400000029624e40c6e6d79b1911f4834b435dd2518f63061278f30c5371048e8e0b180f73e1acf1dea2d14aface79d29d1c09f76bc6cfc3555269e081b5c52d82dc756383337f41945f3a2ae6928d0ba0bfa400"/154], 0x0) recvmmsg(r8, &(0x7f0000000e80)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x42, 0x0) r9 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000ac0)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000b80)=@newqdisc={0x30, 0x24, 0x601, 0x1, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x40081) sendmsg$nl_route_sched(r7, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000c40)=@newtfilter={0x80, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0xb, 0x7}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4c, 0x2, [@TCA_MATCHALL_ACT={0x48, 0x2, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x5}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x80}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f0000000cc0)={'syzkaller1\x00', 0x1}) write$tun(r5, &(0x7f0000000d00)=ANY=[@ANYBLOB="03031b003000320006006300000000442fff"], 0x76) 2m15.894849965s ago: executing program 3 (id=1551): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000840)={&(0x7f0000000380)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1c0000000400000008000000000000000100"/48, @ANYRES32=r1, @ANYBLOB="0100000002"], 0x40) syz_emit_ethernet(0x22, &(0x7f00000007c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x44}, @void, {@arp={0x806, @generic={0x108, 0x8864, 0x6, 0x0, 0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}}}}, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000400)={r2, 0x0, 0x0}, 0x20) mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, r0, 0x0) r3 = socket(0x10, 0x3, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000004c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000500)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) r5 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f0000000540)={0x0, 0x2}, 0x8) ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000280)={{0x2, 0x4e21, @remote}, {0x1, @multicast}, 0x0, {0x2, 0x4e24, @loopback}, 'geneve1\x00'}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x48241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000580)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f00000005c0)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000040000000160a01000900000000000000010000000900010073797a30000000000900020073797a3000000000140003800800014000000000080002400000000048000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000001c00038018000380140002"], 0xd0}, 0x1, 0x0, 0x0, 0x24040841}, 0x0) write$tun(r6, &(0x7f0000000740)={@val={0x0, 0x890d}, @void, @eth={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @remote, @val={@void, {0x8100, 0x0, 0x0, 0x22}}, {@ipv4={0x800, @tipc={{0x5, 0x4, 0x1, 0x2a, 0x40, 0x65, 0x0, 0x7, 0x6, 0x0, @private=0xa010100, @loopback}, @payload_mcast={{{{{{0x2c, 0x0, 0x0, 0x1, 0x1, 0xb, 0x1, 0x2, 0x9000, 0x0, 0x0, 0x4, 0x4, 0x1, 0x6, 0xf5, 0x2, 0x4e23, 0x4e21}, 0x1}}, 0x2}}}}}}}}, 0x56) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newqdisc={0x50, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r10, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x20, 0x2, {{}, [@TCA_NETEM_DELAY_DIST={0x4, 0xd}]}}}]}, 0x50}}, 0x0) r11 = socket$kcm(0x29, 0x2, 0x0) write$cgroup_pressure(r11, &(0x7f0000000140)={'full'}, 0xfffffdef) sendmsg$kcm(r11, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x20000818) ioctl$int_in(r11, 0x5452, &(0x7f0000000000)=0xe) setsockopt$sock_attach_bpf(r11, 0x1, 0x7, &(0x7f0000000340), 0x4) 2m13.820068803s ago: executing program 3 (id=1559): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x1}, 0x50) (async) r1 = socket(0x10, 0x3, 0x0) (async) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newqdisc={0xc8, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x74, 0x2, [@TCA_HTB_INIT={0xf}, @TCA_HTB_INIT={0x18}, @TCA_HTB_DIRECT_QLEN={0x8}, @TCA_HTB_DIRECT_QLEN={0x8}, @TCA_HTB_DIRECT_QLEN={0x8}, @TCA_HTB_INIT={0x18}, @TCA_HTB_DIRECT_QLEN={0x8}, @TCA_HTB_DIRECT_QLEN={0x8}]}}, @qdisc_kind_options=@q_fq_codel={{}, {0x0, 0x2, [@TCA_FQ_CODEL_INTERVAL]}}]}, 0xc8}}, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000400)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0x9, '\x00', r3, 0xffffffffffffffff, 0x4, 0x4, 0x1}, 0x50) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$nl_generic(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)={0x1c, 0x17, 0x1, 0x70bd26, 0x25dfdbfd, {0x8}, [@typed={0x8, 0x5, 0x0, 0x0, @u32=0x7}]}, 0xff2e}}, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) (async) r6 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (async) sendmsg$NFQNL_MSG_VERDICT(r1, &(0x7f0000002400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000023c0)={&(0x7f0000001300)={0x1088, 0x1, 0x3, 0x401, 0x0, 0x0, {0x3, 0x0, 0x4}, [@NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x10}, @NFQA_VLAN={0x1c, 0x13, 0x0, 0x1, [@NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x8100}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0xe}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x2}]}, @NFQA_PAYLOAD={0x1004, 0xa, "c51f58dcf26b1324dc8cb4aa4ba21804df5a3d034362d4701c87bc4a15c35e9f20a95c855c74d2f5f6fc88960f0aff054bc4fb77905dd3048f0c568138a18462150ceb56371a8440b90b625ad4a4bd2547eb88252a7a2101f84e16035b2de41869d6143012a6de73a824351431b003b48a0136b9d4e3d6675f82d947a18dd08329c909556b03817d2652734961912d958f6b943ab2639f1f79833f9e4879d828add145e1b23210e590b0c911f965edb57302c5684076784df7a606d41c0319572e9e808095abd3dd348b8d9151a013d6e3220413ac6e39d197406755fde5c7f7dbaf2473675835869a32267cdaafa86567241a6e07b4973d0f52e00c2723ea74ee0e24f514d811b0ab7fa264f62590820aeeadf6a7e3af522ec480e0b309821739b90a01cd6e24b0faa80f9e320d5ad953357045b1e104f0961162489aa4343e0107b9a81ab1f8a4768f770184f9a10626f3e2c635f9ab31fa78b1bfc6c2b338fb7e985868f3b6ec412626242e2c8e47d2fcaf4d2da5db03f0bec6ffd68424fa8882bd310aa2b89150b689bfd91657b570c19d87689adf5e22c24cb20bb01e368e46760fcf11d783b98479b2075c7dffb4bbf420a92bb99f02ab04f2aa1e513c2c6dcb4714406ba3c155129003fe7cc7a4bad528d7419810cbc5d0c55ce4269fe222858254c43012b2b027580fae634e45dca7985a48aec271bae7d86510e2d522c0f440516faf8527fdaf0aa5b9ebf21a9e42eb4c3974fa49da412da4822a550a5072513978c756ef0d3e22955379464cd7023cd4a962ba0373660f24dde771dc34ce43b76ab8463788eab0800f97a3498e3fd50560af2eeb26b01ba52e7866257ecfd432481d88beae22fd61dfc693923881dbbb3d64d374fd703be88dccaef02f810cc1ff9bd1ff7955d50ad5896fbe84fa4e8edda7479ea737c2615d796dc15b17d5a2edda996a841d2056c8d66521166ca189f113d0d1cf88d5e0eb75e7d6c9eb06c7879e62c438c036a3aed3db3d6326a02aeba7cb259a9cb41ed382a691ad0f412b58bebe623f0f32568a7ab60b775c37e5f3e4a995f14e6fd2e7d7111f8abe59cb6b2d3e723acbe13e52c556d7e82934b6cabca62c2dd1cb0dbe101a909b1fd7972016a986d76b92cdb8590e770f631ebf734a5e9657623b075c4a55f6704a69950a30fcec29ef40bfcc434f95f7a2d6f84ea8c799179512d46a8386b26e8453ae17105bae8d8ba74036b18355d27477b7e19a4c4c3e8fd506e4f6004c9d3a4f49e0ed5f7b839ca34942661fe4617533edc5f032e261c2ef7a3e138b77772d14ff87821ed716a8bcbb02639f61a4214dce4d1fd4111c44e3e30a00d1e3b96fd4953fde54f6f7f4b6026f3247e4861619aca28a8f218a3896bac7a85c5efb943043e27cf881af5a75ca7589f2672f3578db0bb7e081aff11ae375c008fd81862c49bc769d2e0fa455cc50e78bcc13aa6785850a30ea772d76ff8f8ff2c4a32f3d75226d7efc3fbed4ca8a86b5d566c3f6192f30e16e579cc877f4573b30fc91b8e3ef85fc0ebeb072ea6aab8f329d09a5b143cca1b7d4025551a1a165108a37f445a7d3cfc549213bcbbf5d9e25f459d18c22125935efbb30296b8cbbd3c723aef07e378a598a602528802b42d74eda0ef9ab9af0d2e193c08130b44253b3a52c9ea50c27bacd1243ff11e25d1ab74d3275afb66d4588314eea3469891e31785495ebd6dd833319a6c3a99d930a65942b11fa1252526733dc44ce1e23776592d81847738a087660426c443766e05849230eeb2a1a9fb972bbd344e24a4e7f04d766b6a421659fd048e3b9dae11f6922101d5c8d486db6e585414237be55b81971ef23e7ce68abaed024d36acd55eb435a281ced931998f3dca84d301763e5a7ef4fd8ee93207e89f352f1ab63b38d3376acc7981bee5c2e825ac17bca19f0f7d510df823fdc83b540a817f8794d39beeebe024d00fd96142ffadbdaed3944ccf1f1a3cb9831a18289e8827903ca37e5e3223adccee2bcc6688273d521b322b76f1929a88719c122528cc480493af6899d7a466da63f50dfe6ae839795cb9e0afb4a850b64fbd02f71859bb8be5c93a830353037221c1309208bb9a9e93145b5de0bff598ed6ee0a7c1eabed0285ec99809d087956ebca65da8180cfafde0d6d49aa9109023148752dbe37e343ee70ccd225858bb53ea983b352e48abe9b8f3db84ffcb18340626de7f4748a1c446bd1c51479b20959a0426898cc2fc8c8e91c873da5146e42740ebe51313f9847985e83fa07b8704212986c6812f9a8e43aba7d332365c72b92b2fbd3414d48dec4587c5a1b0f6cb709f9b5cf3709bc1d7c7734102b81493fbb6bdfba8091af53fc3be52122843aefcd69fa7d40beaa005bf0c8d2a737eb8d922eb1d32d0208bfbdc769b2e5cb605b1c1673f42e2a91d371eacf444e1632ef618baba60b21bd89256f971e5cdf4154b60058dc11578b85804198ae6dbb91ad7c3832a1b6fc81380b54ae89a6ef2b7069af8cadd3ee41b52a183825aa303424fe0d65ec64ddea662c40e2f960fe4e8a6296606228c0027567c461bdfc620ee95850465df07795232fba4fb2624e03ea733eb1b612970182d743ea0d8704bb7fb9e3aeadcf330f21120d2a7267c0b428b42fe202347c8d174b70c4399f291e0f125b7b2643f41911074ad8d9c16bd37d1017f33d0b00a200f73647a042ea771865da1d883a045ea761d7a050febe9ae23298142cea98f494fbeb8bbd0fb5a5b879c1bceb28a3713734d29c906bc32548bc1588724ef81cf8b692d8483525a7e3105cbe8beda877ca9260a8d2924e13c90490858780f85a015517613ae9f410e2d73fe8db561421c36b6363d38b3c9d4d74e5bba577d7afa3f07a6dd8322d09ed92bc3b502d1c28383fc8927f93506f8504e4bbe884f9a98871278b6804c5fa1fb9d41bfc1ae61d951d97fa92f51e7e22f278db0007d9a8dad80ec54f0bf024f2f5ef5d5ca3141ded1b57e1f386def085e593642f7d7e121d8e5cb7bb7c6af1fc9de2ee19e6786bfde31d9649c45567c892c5ad60b1028fa84fbf9ad48a44ab35ebf70b68c727450ed2bd4ac1524b43185acd72eab703cd48c4e81445656c010ef1f1e9456c82df8cf27ee6937680f7b851e62acfe5d187acf2b106bff532eeb7fbb7e8cac097d6e15033edf357a1dcb1dcc52bf694a9c5f441c671d453dc8dcf35e34b0618304c573d3b3883bf24e4de4cd1bd289900157db333350b0a77c92f7b25b8e8a77f976c6b592d53a39288250306b06a7abef099220f0de095c540d010af8ac6094182cff80845e747461ab01f12b02d53a66c9dd7b546674d86ccfb5a251991fc8811b42f87976c3f36618ea1819d304ae5ca4705547d8b23bb02ee934a80c90d67e53e5e705518bacbf45392fd4516dae8edd2c245db92acd33ebf18d9239dd74626bf629f71fd228e2f1f739cad1effc8a91c52bccbd2c50ecafdfc097b421ec724df55ee5a7c051994b63ed3f31ec1fa992bfdb7b785bc948f0a13cd0c6ec3fee28ff7ca8ac72bc8b0fecfeff5f4cb6397ce1898d32fdecfb9418bfa4e65faf35126cbe2176f93edbfc0674910359f0cc44743c9f8483865dc5ea009bce6cb0b38495050c4a1ce2fbf8545049806e1c4774dff43a262784b759982c2929d13f28983f9cbe19f2ea98f446196370abf6443d8e659432fdc5828f1f008ee0641756ad7013b88d2a3ebd440e015ca9069ac2c012e9c60ca994923f34addd1cb4d721d0a1097d310dc934006d24f3304c2b6ef5666e9d85addb4eaae27aef95ffcf77e0a6abcd7d1b12bf53138f3d92a778021fecd28ee7dee4780240fd1f951331cb5c57433b052b0b594b0906138f8c130e4b23b0daad7e6f71632992cecda962cf87d4994007cda245c22d0c12dbd7053a6324e929e150cd7fe9bf6db57bc1b10716a8c6259267a21e8140ffde40568c73c150fdf277ddb95fcb0b1518e7cb87f99b7c5295c6ec8301e2e44cad8a1b753b82afa560fb9d4bde7ba3d2ecf589eb7a5c880ec37f90455fc525fadb82647d8e6cb4a6ba0347cbc79c428ac9d4f3a0bbc80131fdc0254c03775c2ad30880757f21d0b364693496d1b506698fe72100019975b5cef035c226f27fafb484c893e0c40191d7868d61c6451b55c163c454586e85eacd120a0f7650ac1d8db4d06699455c0b02425587e2650565285d6b38935508665942db34fd522a6ac014437fd64ba19f1bed30db3a328fb112a455fa66f4323912564a2db4aa930de42c6c384ffbac22526ad4f18e475fbf35f0504961309d1c08fc0a33bf67138a3f95784c52dc32757351f34451ee41d8a3f03cc8da791046a5b2d97704c3a83a570507652aa976e7dae1903583a31fb51389ca099e2aff4851e3b8284bbb7aa32229abc3686bd60541b15c9be96874cad13b31a99ffb2ad62da33223b7de00d39e23c5cff52ff490c671568301fd77e7f93fc933fa0436dcfd815c309f36054fe9fdf36874e18dafdbf684fd2bcf1ea8c985b3e13c1060cfbbda6126561c6e7ec67d6a1881d6d41a2dcad79c9e95512afdf1dc2704196904982c8102cbe076521e3ee82df8b64ece62f2e76d743200078774eb755077452ec029a674eb976772e15ecfc4ffcd62cfbeb03198d8972572a3e3fbe418f69779af6d8d8444a1c68d51dd7862595e031bf3d7d072460054331f52c733a8aa1f6d7a9e5d4c8f6af4555820033b13fe29faf414224ada3e5677080067c6ed0f32b6ff9893d5f7a0af3280ea8ef47cb3141929b2a128120b19201ee3eaa2da01220ba7a9636b1d2a68531b37c7a56af0f91d5dfb6c91fec2f329bb59bbbf6b71829a67a3046865e63a257204b504c699b997d89acd3abc4308f23573d97dc50cf0512f7c4bd4c241b9ea3b3e03425df0c71ac2f39638b2a8973843ca2e15d09318c1ea5306eb13fab034238e675b58e4dcdd7dccb362b7c25a06493f3ef9c76e7c0dcea8c51e5ff3e1b48c4018dc3952192ca55d8b7cc9f6fd38e6b5b3182375b82fe1c8cfb7f974b4a337745a953974f199bbf4f56ff94a16fedacd060bb761b46c6edf1cddd4706b244762d2ad8f5a492b5abb79978f0f1c06f9ae2a7a3f56374c513e31d6f56d3c4a937438b7b299219521d48a222d576fd532e133f02509df2d0533f6609f258558c587304d7f0c76a55d9afdc5596ef30c534800921e8b479ed027727155970d5a2eb2cee658d2695d8bf7d8880b85ab4dbf3c1e533fb5e21b8b80c318e626e62b2bd13731e9ab1232127c18254d471c9b256cd7a34d78c6e4be05275e16c37c256c199a2345d533df4340d618d89be2a973fcc2615f8fb1da5eda0d5298cd1234044ca7b3eb551e48045395e0dd7e9cab4a303154ecaa21c4f71673e1893875c3a640ce44fef79fd5fab9656e4d4a9fb2a5139b5eae927999c64d07b1506fac252dc2fb0ec1f620276f564c910fd477e29932d82324d47909450120552ef6820d65c9631a379215f60c82d71a7e1aefe03e9f5841ae5a02c102af68dec3f3d4b1b2ab438d4e3825c2f4e5b63c60e358a4bb9ccae8f78e79e133bae78d205db45b3c5683249048763ba302724cafac1e055a9689bbe59b8968f61fddd028bac83c384e308b1643cf1bce2cb8d5140f46f51f068401430ba6b9db75e7255fa59a37d2ed123294369624e01a97161109fd378f27c8f594d86f9b8247a94c0f12b164be28f188fb19279a652c04b99591bf57b7ddca6cb0dba63dc4402868329758d7e94d728f45b"}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffb, 0xa2}}, @NFQA_VLAN={0x24, 0x13, 0x0, 0x1, [@NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x8100}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x401}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0xdd9c}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x8100}]}, @NFQA_PAYLOAD={0x1c, 0xa, "53df12e66d07dfa4c2c2f78b318d1968fffc207becc4ac08"}]}, 0x1088}, 0x1, 0x0, 0x0, 0x44800}, 0x4040) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) (async) sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtfilter={0x44, 0x2c, 0xd3f, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0xc, 0x4}, {0x0, 0x9}, {0xf, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x4}]}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) 2m11.352757735s ago: executing program 3 (id=1569): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) close(r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), r1) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000040)=0x100, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000008c0)={'macvlan0\x00', 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000980)=ANY=[@ANYBLOB="2c0000001000010428bd70000000000000000000", @ANYRES32=r7, @ANYBLOB="02000005a20800000b0001"], 0x2c}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0x50, 0x24, 0xf0b, 0x70bd2a, 0x0, {0x0, 0x0, 0x12, r4, {}, {0xffff, 0xffff}, {0x2, 0xc}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x24, 0x2, [@TCA_HHF_ADMIT_BYTES={0x8, 0x5, 0x4}, @TCA_HHF_RESET_TIMEOUT={0x8, 0x4, 0xffff85fd}, @TCA_HHF_ADMIT_BYTES={0x8, 0x5, 0x9}, @TCA_HHF_QUANTUM={0x8, 0x2, 0x6}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x40800}, 0x0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000440), r10) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000640)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="0100000000000400000003740006140006006970366772653000000000000000000008000700000000000800040064310101080005"], 0x40}, 0x1, 0xffffffff00000003}, 0x0) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0) ioctl$TUNSETIFF(r12, 0x400454ca, &(0x7f0000000240)={'syzkaller0\x00', 0x2}) r13 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000280)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r13, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56d43, 0x1, 0x25d7dbfd, {0x0, 0x0, 0x0, r14, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x7, 0xa, 0x5ae, 0x70000000}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000090}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000540)={'syzkaller0\x00', @multicast}) r15 = socket$nl_route(0x10, 0x3, 0x0) r16 = socket$nl_generic(0x10, 0x3, 0x10) r17 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r16, 0x8933, &(0x7f0000000780)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r16, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000840)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r17, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r18, @ANYBLOB="0c00990000000000000000000800a000ea15000008009f000b000000080026000816"], 0x40}}, 0x0) ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f0000000580)={'syzkaller0\x00'}) 2m9.714912813s ago: executing program 3 (id=1576): r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0}, &(0x7f0000000140)=0xc) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x1c, 0x4f, 0x1, 0x0, 0x0, {}, [@typed={0x8, 0x1, 0x0, 0x0, @uid=r3}]}, 0x1c}}, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000280)={{{@in=@empty, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4e24, 0x9, 0x4e20, 0x9, 0x2, 0x80, 0x80, 0x3a, 0x0, r3}, {0x2, 0xa16e, 0x9, 0x8000000000000000, 0x8, 0x98, 0x0, 0x1}, {0x401, 0x4, 0x9, 0x1}, 0x6, 0x6e6bb2, 0x0, 0x1, 0x3}, {{@in=@private=0xa010100, 0x4d3, 0x2b}, 0x2, @in=@private=0xa010102, 0x3507, 0x2, 0x3, 0x3, 0x3, 0x5, 0x6}}, 0xe8) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4001, 0x1, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3e}, 0x1c) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000040)=0x36, 0x4) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x38, 0x1403, 0x1, 0x70bd2c, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'tunl0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0xc000}, 0x40084) 1m54.479652565s ago: executing program 32 (id=1576): r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0}, &(0x7f0000000140)=0xc) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x1c, 0x4f, 0x1, 0x0, 0x0, {}, [@typed={0x8, 0x1, 0x0, 0x0, @uid=r3}]}, 0x1c}}, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000280)={{{@in=@empty, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4e24, 0x9, 0x4e20, 0x9, 0x2, 0x80, 0x80, 0x3a, 0x0, r3}, {0x2, 0xa16e, 0x9, 0x8000000000000000, 0x8, 0x98, 0x0, 0x1}, {0x401, 0x4, 0x9, 0x1}, 0x6, 0x6e6bb2, 0x0, 0x1, 0x3}, {{@in=@private=0xa010100, 0x4d3, 0x2b}, 0x2, @in=@private=0xa010102, 0x3507, 0x2, 0x3, 0x3, 0x3, 0x5, 0x6}}, 0xe8) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4001, 0x1, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3e}, 0x1c) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000040)=0x36, 0x4) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x38, 0x1403, 0x1, 0x70bd2c, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'tunl0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0xc000}, 0x40084) 32.218406478s ago: executing program 0 (id=1815): r0 = socket$kcm(0x2, 0x2, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000280)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0x9, 0x60, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty, {[@generic={0x94, 0x2}]}}, {0x0, 0x0, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "6d4dfdeb8cf7bbfe143803bec2ce783e04cd32308cdd8dde", "c71cb8adfce542a4bc5a026c208fd0c45787e4aa384e3d26b21ea41cc128364c"}}}}}}, 0x0) (async) setsockopt$sock_attach_bpf(r0, 0x1, 0xf, &(0x7f0000000040), 0x161) (async) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x31, &(0x7f00000000c0), 0x4) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0xf, &(0x7f0000000880)=@framed={{0x18, 0x5}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd, @generic, @initr0, @exit, @tail_call]}, &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="a4000000", @ANYRES16=r2, @ANYBLOB="010026bd7000fddbdf250300000008000400fffbffff3800018014000400fe880000000000000000000000000101080006"], 0xa4}, 0x1, 0x0, 0x0, 0x890}, 0x0) (async) r3 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r3, &(0x7f0000000240)=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e24, 0xb, @ipv4={'\x00', '\xff\xff', @local}, 0x9}}, 0x24) (async, rerun: 32) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r1) (rerun: 32) 31.507200013s ago: executing program 2 (id=1817): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x52d35ce30131f272}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x25dddbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xffff, 0xffff}, {0x1, 0xd}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r3, {0x0, 0xffe0}, {}, {0xa}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x2}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x5, 0x3, 0x2a}]}]}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x22004868}, 0x20044804) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000600)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', r3, 0xffffffffffffffff, 0x2, 0x0, 0x3}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000700)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000680), &(0x7f00000006c0)='%pK \x00'}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x6, 0x0, &(0x7f0000000400), &(0x7f0000000440)='GPL\x00', 0xff, 0xd5, &(0x7f0000000480)=""/213, 0x40f00, 0x28, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000580)={0x3, 0x5}, 0x8, 0x10, &(0x7f00000005c0)={0x4, 0x10, 0x3, 0x6}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000740)=[0xffffffffffffffff, r4, r5], &(0x7f0000000780)=[{0x3, 0x1, 0x4, 0x4}], 0x10, 0x2e6}, 0x94) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b00010067726574617000002400028008000700640101000600030010"], 0x5c}}, 0x40) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, 0xfffffffffffffffd) 30.960542818s ago: executing program 0 (id=1819): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x2}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f00000005c0)={0x1, &(0x7f0000000600)=[{0x20, 0x0, 0x0, 0xfffff00a}]}, 0x10) r2 = socket$packet(0x11, 0x3, 0x300) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xa}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x3, 0x3, 0x6364, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x8000000000000000}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x4014) sendmsg$nl_route_sched(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r5, {0x0, 0x10}, {0x1, 0xb}, {0xc, 0x8}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x4, 0x10, 0x6, 0x8, 0x4fbee}, 0x13, 0x1, 0x4000003, 0x7, 0x10, 0x4, 0x17, 0x0, 0x5, 0x2, {0x6, 0x8001, 0xfffffffc, 0x0, 0xffffffff, 0x5}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x240048e4}, 0x4890) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r4, 0x84009422, &(0x7f0000000bc0)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000440)={'syzkaller0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x18}}) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) setsockopt$sock_linger(r6, 0x1, 0xd, &(0x7f0000000b80)={0x208001}, 0x8) shutdown(r6, 0x0) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000480)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000004c0)={'syzkaller0\x00', 0x0}) sendto$packet(r2, &(0x7f0000000500)="05031614d3fc140000004788031c09102c28", 0xfd1e, 0x4, &(0x7f0000000540)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @multicast}, 0x14) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) connect$inet6(r8, 0x0, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a40), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000a80)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r9, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000b40)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r11, @ANYBLOB="0a00340002020202020200001800490001ac0f0002ac0f00"], 0x40}}, 0x0) socket(0x2, 0xa, 0x6) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r12) sendmsg$IEEE802154_SET_MACPARAMS(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="000010", @ANYRES16=r13, @ANYBLOB="0f0c29bd70000700000023000000"], 0x14}, 0x1, 0x0, 0x0, 0x4040}, 0x0) 29.325497387s ago: executing program 2 (id=1825): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000000)=@bpf_lsm={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000100)='GPL\x00'}, 0x80) r1 = socket(0x1e, 0x1, 0x0) connect$tipc(r1, &(0x7f0000000240)=@name={0x1e, 0x2, 0x0, {{0x7ffffffe, 0x1}}}, 0x10) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000140)={r0}, 0x8) close(r2) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xd, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x38}, 0x94) 29.110647737s ago: executing program 0 (id=1826): r0 = socket(0x400000000010, 0x3, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000340)={@multicast2, @loopback}, 0x40) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f0000000380)=[{&(0x7f00000003c0)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r2, &(0x7f0000000400)=[{&(0x7f0000000440)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) setsockopt$inet_msfilter(r1, 0x0, 0x29, 0x0, 0x57) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000800)={0x0, 0x0}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x0, 0x0, &(0x7f0000000980)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f00000009c0), 0x10}, 0x94) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x4e, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa30e, 0x1, 0xfffffffa}}}}]}, 0x44}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000004580)={&(0x7f00000045c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_HASH_LEN={0x8, 0x3, 0x1, 0x0, 0x72}, @NFTA_HASH_DREG={0x8, 0x2, 0x1, 0x0, 0x15}, @NFTA_HASH_SREG={0x8, 0x1, 0x1, 0x0, 0x11}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x84}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000ac0)=@newtfilter={0x346c, 0x2c, 0xd3f, 0x70b524, 0x25dfdbfa, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0xffe0}, {}, {0x7, 0xb}}, [@filter_kind_options=@f_flow={{0x9}, {0x343c, 0x2, [@TCA_FLOW_EMATCHES={0x48, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x3c, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x38, 0x1, 0x0, 0x0, {{0x80, 0x0, 0x9}, "08386388da2ab8e89780ed5025116bf2279d7960f8255cd894b211e2a3cc51c93e5885c0aebda7a5a0ec"}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x8}}]}, @TCA_FLOW_ACT={0x33e8, 0x9, 0x0, 0x1, [@m_police={0x33e4, 0xf, 0x0, 0x0, {{0xb}, {0x32b8, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x480000000000}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0x14, 0x99, 0x9, 0x7, 0x3, 0xd, 0x4, 0x4, 0x5, 0x2c6, 0xb269, 0x7, 0x0, 0x80000000, 0x5, 0x8c5f, 0x7, 0x2f, 0x1, 0x9, 0x8, 0x8000, 0x0, 0x0, 0x4, 0x3, 0x3, 0x10001, 0xd0, 0x9, 0x3c0, 0x0, 0xdf9, 0x3, 0x2, 0x7, 0x77a, 0x4, 0x0, 0x7fffffff, 0x800, 0x0, 0x5, 0xd, 0x8, 0xffffffff, 0x1, 0x800, 0xebe, 0x10, 0x3, 0x9, 0x1, 0x5, 0xc, 0x3, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x16c4, 0x1, 0x4, 0x7, 0x4, 0x21dc, 0x2, 0x7, 0x7, 0x7, 0x3, 0x1, 0x3, 0xffff, 0x0, 0x6753, 0x2, 0x5, 0x9, 0x0, 0x1ff, 0x1, 0x7fffffff, 0x0, 0x81, 0x7, 0x6a, 0x4, 0x94, 0x8, 0x9, 0x3, 0x4, 0x8, 0xeb7d3d8, 0x9, 0x6, 0x6, 0x1, 0x8, 0x80000000, 0x7801, 0xc, 0x4, 0x9, 0x4, 0x101, 0x9, 0x3, 0x100, 0x4fc650a3, 0x80000001, 0x8001, 0x1df6, 0x0, 0x5, 0x800, 0x0, 0xfffffffa, 0x6, 0x2, 0x1, 0x7, 0x1, 0x7, 0x0, 0xc, 0x3e, 0xffff4c0b, 0x67ae, 0x4116, 0xfff, 0xfffffffd, 0x4, 0x0, 0x80, 0x9, 0x3, 0xffffffff, 0x7, 0x8, 0x401, 0x9, 0x3, 0x4, 0x0, 0xa, 0x5, 0x7, 0x9, 0x9, 0x3, 0x4, 0x3, 0x3, 0x2, 0x3, 0xa, 0x0, 0x4, 0x101, 0x3c1, 0xfffffff8, 0x7, 0xe3, 0x7, 0x7, 0x3, 0x0, 0x8, 0x3, 0x4, 0x5, 0xfff, 0xa6d, 0x5, 0x4, 0x0, 0xb, 0x8, 0x1, 0x0, 0x6, 0xffffffe1, 0x3, 0x80000001, 0x80, 0xfffffffb, 0x9, 0x8, 0x3, 0x75, 0x6, 0x8, 0x2, 0x5, 0x5, 0xbb, 0x7, 0x62e0, 0x0, 0x1, 0x0, 0x2, 0xfffffff7, 0x1, 0xffffff01, 0xc, 0xf, 0x10, 0x5, 0x5, 0x0, 0x0, 0x4, 0xd5, 0x81, 0xc7a, 0x3, 0x4b, 0x3b3e, 0x5, 0xfc, 0x5, 0x2, 0x800, 0x8, 0x9, 0x8, 0x3, 0xfffff948, 0x3, 0x0, 0x7fff, 0x8, 0x37, 0xf, 0xfffffff7, 0x9, 0x4, 0x800, 0x8001, 0x4, 0x3, 0x6, 0x7, 0x7, 0xa91c, 0x1, 0x8, 0x4, 0x7fffffff]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x2}, @TCA_POLICE_RATE64={0xc, 0x8, 0x2}, @TCA_POLICE_TBF={0x3c, 0x1, {0x8, 0x2, 0xfffffc9f, 0x4, 0x0, {0x4, 0x1, 0x5, 0x9, 0x0, 0x9}, {0x2, 0x1, 0x3, 0x8, 0x1, 0x1}, 0x4, 0x8fe, 0x1}}, @TCA_POLICE_RATE={0x404, 0x2, [0x9, 0x10001, 0x401, 0x3260f1be, 0x1000, 0x1, 0x10000, 0x7, 0x40, 0x6c, 0x0, 0x10000, 0xf164, 0xc, 0x36, 0x4, 0x0, 0x2, 0x10000, 0xfffffffc, 0x1, 0x624, 0x3, 0x6, 0xbd5, 0x2, 0xffffff81, 0x46, 0x5, 0x1, 0x841, 0x1, 0x3, 0x4, 0x7, 0x2, 0x9, 0x4, 0xb, 0x5, 0x8, 0x0, 0x3, 0xe, 0x2000, 0x3, 0x2, 0x9, 0x4, 0x5, 0x6, 0x40ca, 0xbfb4, 0x3, 0xffff, 0x1, 0x13, 0x0, 0x3, 0xb7ca, 0x62, 0x7, 0x1800000, 0x4, 0x5, 0x2cbd, 0xfffffbff, 0x1b, 0x9, 0xf, 0x4, 0x579, 0x9, 0x10001, 0xfffffffd, 0x601a93c2, 0x8, 0xfffffc00, 0x5b5a, 0x157, 0xfffffffa, 0x0, 0x3ff, 0x3, 0x15, 0x1c1a, 0x7, 0x9, 0x7, 0x8000, 0x46, 0x81, 0x7, 0x6, 0x9c6b, 0x80000000, 0xffff, 0x9, 0xa73e, 0x264, 0x6, 0x1ff, 0xe94, 0x6dc7f069, 0x1, 0x100, 0xd, 0x1, 0x7, 0xc, 0x7fffffff, 0x7, 0x9, 0x80000000, 0xcd4, 0x373, 0x3ff, 0x6, 0x44, 0x1, 0x9, 0x8, 0x8, 0xffff, 0x9, 0x400, 0xfffff801, 0x40aa031f, 0xe, 0x86, 0x2, 0x2, 0x4, 0x6, 0x7, 0xc0, 0x6, 0x0, 0x8, 0x8000, 0x7, 0x5c, 0x81, 0x1, 0x9, 0x8, 0x8000, 0x5, 0x8, 0x244, 0x9, 0x5, 0x4, 0x7, 0x0, 0x6, 0x1, 0x609f, 0xef7, 0x9, 0x5, 0x8, 0xbcfc, 0xfff, 0x4, 0xffff, 0x8, 0x4, 0x0, 0x2e, 0x7fffffff, 0xe158, 0xa92, 0xfffffffc, 0x7c, 0xd706, 0xe, 0x8, 0x6, 0x401, 0x7, 0x10000, 0x0, 0x8000, 0x1, 0x6, 0xfffffffe, 0x8, 0x4b, 0x2, 0xcfde, 0x0, 0x7ff, 0x3e, 0x2e0, 0x3ff, 0x2, 0x9, 0x4, 0x3, 0x2, 0x1000000, 0x3, 0xffffffff, 0x401, 0xc4, 0x6, 0xff, 0x800, 0xffffffff, 0x8, 0x8, 0x5, 0x600, 0x8, 0xbd, 0x9, 0x4, 0x401, 0x7fff, 0x2d03960e, 0x5, 0x1000, 0x3ab, 0xb9f, 0x3cd, 0x7, 0x6, 0x8, 0x9d19, 0x4, 0x3ff, 0x5, 0x5, 0xc52, 0x5, 0x1ff, 0x8, 0x8, 0xc, 0x5, 0x3, 0x6, 0x6, 0x5, 0x1ff, 0x5add, 0x8, 0x4, 0xaf, 0x6, 0x0, 0x0, 0x7fff, 0x5, 0x9]}, @TCA_POLICE_RATE={0x404, 0x2, [0x5, 0x9, 0xffffffff, 0xfffffffd, 0x7, 0x8, 0x81, 0xb94b, 0x6887, 0x7, 0x1, 0x80000001, 0xfffffffe, 0x52377599, 0x8, 0x5, 0x80000000, 0xffff, 0xfffffff8, 0xac, 0x2, 0xea5, 0xcb1, 0x8, 0x2, 0x1, 0x7, 0x8, 0x3, 0xe69, 0x24f6, 0xc, 0x1000, 0xfffffffd, 0x1, 0x4c2, 0x3, 0x5, 0x6, 0xc, 0x8, 0x1, 0x629a, 0x9, 0x8, 0x3, 0x1, 0x0, 0x6, 0x3ff, 0x9, 0x80, 0x6, 0x7, 0x1, 0x7, 0x35940000, 0x2, 0x0, 0x8, 0x8d8f, 0x9, 0x0, 0x5, 0x9, 0x3ff, 0x0, 0x1, 0x6, 0x0, 0x4, 0x4, 0xfa, 0x1ff, 0x4, 0x7ff, 0xc, 0x8, 0x7, 0x1, 0x10001, 0x401, 0x3, 0x0, 0x4, 0x9, 0x8, 0x1, 0x8001, 0x9, 0x2, 0x6, 0xab, 0x400, 0x7, 0x80, 0x6, 0x3805, 0x1, 0x40, 0xfd, 0x3, 0x1, 0xffffffff, 0xfffffffc, 0x6, 0x6, 0x665e, 0x3f36, 0x5, 0x1, 0x8, 0x1, 0xff, 0x1, 0xd, 0x401, 0x0, 0x4, 0x5, 0x10, 0x0, 0x800, 0x0, 0x0, 0xb64d, 0x5, 0x583d, 0x0, 0xdf, 0x5, 0x9, 0x5, 0x1000, 0x40000, 0x7f, 0x1ff, 0x9, 0xffe, 0x529, 0x80000000, 0x9, 0x1, 0x0, 0x2, 0x3, 0x1, 0xb, 0x2, 0x5, 0x3ff, 0x401, 0x321, 0xffff, 0x9, 0x207e, 0x4, 0x2, 0x7, 0x1, 0x670, 0x2, 0x1000000, 0x200, 0xffffffff, 0x81, 0x6, 0xc66, 0x8, 0x80000000, 0xfdfa, 0x7f, 0x0, 0x2, 0x0, 0x5, 0xffffffff, 0xfffffff7, 0x4, 0x1, 0xff, 0x7, 0x9, 0x6, 0x1, 0x8, 0x3, 0x9, 0x7, 0xf, 0x8, 0x7, 0x5, 0xfc7, 0x1, 0x7ff, 0xfffff9d6, 0x800, 0x7, 0x7, 0x7, 0xf417, 0x1, 0x80000000, 0xffffffff, 0x0, 0x400, 0x6, 0x5, 0x4, 0xffffffff, 0xfffffffc, 0xfffffffe, 0x3, 0x7fff, 0x80000001, 0x9, 0x8f6, 0xfa, 0x0, 0xd, 0x3, 0x2, 0x7, 0x3, 0x60a, 0x5, 0x4, 0x1, 0x73, 0x5, 0x402c, 0x7, 0x6, 0x80b, 0xfffffffb, 0xc, 0x6, 0x200, 0x800, 0xfffffff9, 0x4, 0x7, 0x80000000, 0x3ff, 0x2, 0x3, 0x4, 0x9, 0x4, 0x0, 0x7fffffff, 0xffff, 0xe0000000, 0x4, 0x6]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x2d82, 0x4, 0x3aa, 0xd5, 0x9, 0x50e8, 0xfffffff8, 0x81, 0x5, 0x9f, 0xc51, 0x1, 0x4, 0x40, 0x1c2, 0x3, 0x493, 0xfffffffe, 0xfffffffc, 0x800, 0xa16, 0xfffffffa, 0x2, 0x828, 0x0, 0x6, 0x7, 0x1c, 0x2, 0x5, 0x1, 0x2, 0xfffffff7, 0x8, 0x5, 0xe286, 0x8, 0x1, 0x4, 0x100, 0x10, 0x9, 0x7fffffff, 0x0, 0x5, 0xb8cf59, 0x8, 0xffff, 0x8, 0x7fffffff, 0xbf2, 0x100, 0x80, 0x9, 0x59, 0x6, 0x2, 0x85, 0x7, 0x800, 0x7, 0xffffffff, 0x1, 0x7ff, 0xd, 0xe, 0x2, 0x34a7, 0x3, 0x0, 0x5, 0xed, 0x5a, 0x10, 0x7fffffff, 0x1, 0x4, 0xda8, 0x9, 0x6, 0x1000, 0x4, 0x0, 0x6, 0x1, 0x1, 0x9, 0x7f, 0x80000000, 0x7, 0xa, 0x9, 0x200, 0x8001, 0x3, 0x9, 0x0, 0x0, 0xd4, 0x3768, 0x4, 0x25200, 0xd91, 0x4, 0x291, 0x7f, 0x2, 0x6, 0xec2, 0x9, 0x9, 0x8, 0x3ff, 0xfffffffd, 0x7, 0x2, 0x1, 0x9, 0x1, 0x7fffffff, 0x77d00000, 0x3, 0x5, 0x7cb73b4c, 0x40, 0x800, 0x477, 0x38, 0x3, 0x7, 0x8000, 0x3, 0xffffffff, 0x8bb, 0xa, 0xe6, 0x2, 0x7, 0x6, 0x0, 0x7, 0x6, 0xcd0d, 0x9, 0x4, 0x3, 0x8, 0x97b, 0x2, 0x1, 0x9, 0x7, 0x2, 0xafa, 0x4, 0x8, 0x7f, 0xe8, 0x80000001, 0x7, 0x91, 0x31, 0x401, 0x8, 0x80000001, 0x4, 0x3, 0x7ff, 0xfffff801, 0x7ff, 0x2, 0x2, 0x401, 0x81, 0x6, 0x5, 0x4e0, 0x4, 0x4, 0x8, 0xf8d, 0x7fff, 0x20, 0x0, 0x974, 0x9, 0x6, 0x5, 0xfffffff9, 0x8cd, 0x6, 0xfffffffd, 0x5, 0x3, 0x5b, 0x8, 0x36, 0x0, 0x1, 0xfffffffa, 0x200, 0x8, 0x4, 0x9b, 0x40, 0x80000000, 0x6, 0x31, 0x6, 0x7, 0x4, 0x1, 0x80000001, 0x10, 0x9, 0x400, 0x4, 0x2, 0x14d1c00, 0x6, 0xfff, 0x800, 0x10, 0x1, 0x10000, 0x7, 0xffffffff, 0x2, 0x6, 0x6, 0x8, 0x1, 0xffffff6d, 0x6, 0x2, 0x4, 0x1, 0x4, 0x6072, 0x0, 0x5, 0x81, 0x8, 0x0, 0x7, 0x6000, 0x3, 0x7, 0x4, 0x7f, 0xb286, 0x9, 0x0, 0x4, 0x7, 0x2]}], [@TCA_POLICE_RATE={0x404, 0x2, [0xa53c, 0x2, 0x9, 0x5, 0xa, 0x1, 0x9, 0x1000, 0x792b, 0x6, 0x9ee5, 0x7c09, 0x8, 0x7, 0x6, 0x0, 0x101, 0x101, 0x1cdf, 0x78, 0xfffff7f5, 0x6, 0x0, 0x7, 0xfffffffa, 0x9, 0x3, 0xc, 0x1, 0xfffffffe, 0xd, 0x5, 0x2, 0x0, 0x400, 0x2, 0x80000000, 0x7, 0x7, 0x7, 0x5, 0x8, 0x7, 0x0, 0x7fffffff, 0x4, 0x0, 0x9, 0x9, 0x401, 0x5, 0x9, 0x80000000, 0xef, 0x3, 0x0, 0xfffffffc, 0xb, 0xfffffffc, 0xffff, 0x1, 0x4, 0xed2, 0x3, 0x4, 0xfff, 0x7, 0xffff0820, 0x9a4f, 0x803b, 0x2, 0x6, 0x80, 0x1, 0x7ff, 0x7, 0x3, 0x4, 0x180, 0x1, 0x1, 0xc1, 0x8, 0x9, 0x10000, 0x0, 0x6, 0x0, 0x3, 0x4, 0x9, 0x2, 0x80000000, 0x8, 0x0, 0x0, 0xd68, 0x4, 0x2579, 0x0, 0xe, 0x7, 0x5, 0x4, 0xffffffff, 0x10001, 0x8001, 0x13, 0x5, 0x4, 0x6, 0x1, 0x1, 0x40, 0x7, 0x9, 0x5, 0x8, 0x4, 0x7, 0x835a, 0x2, 0x1, 0x2, 0x4, 0xff, 0xffffffe0, 0x32d65698, 0x2, 0x588, 0x2, 0x6, 0xfffffff7, 0x2, 0xff, 0x2, 0x1, 0x9, 0x9, 0x40, 0x10001, 0x2, 0x898, 0x2, 0x8, 0x4, 0xd, 0x8, 0x9, 0x1, 0x7, 0x84, 0x3, 0x6, 0x5, 0x8, 0x4, 0x7, 0x80, 0x0, 0xffffffff, 0xd, 0x5, 0x9, 0x80000000, 0x2, 0x7, 0x401, 0x5, 0x5, 0x20, 0x7, 0x3ff, 0xffff, 0x1680, 0x7fff, 0x7, 0xec36, 0x5, 0x7, 0x8001, 0x101, 0x83, 0x3, 0x6, 0x1, 0x8001, 0x7, 0x77d8, 0x6, 0x200000, 0xffffff00, 0x6, 0x200, 0x4, 0x2, 0x2, 0x7fffffff, 0x48, 0x6, 0x5, 0x0, 0x3, 0x2, 0x3, 0x518, 0x0, 0xef, 0x5d6b, 0x81, 0x8000, 0x9, 0x160, 0x8, 0xdb1d, 0xfffffffc, 0x7, 0x5, 0xfffffffe, 0x9, 0x1, 0x7fff, 0x40, 0x3d1d603d, 0x9, 0x9386, 0x386c, 0x72d3, 0x9, 0x5, 0x1b, 0x4, 0x101, 0x200, 0x1, 0x101, 0xbe44, 0x45, 0x1ff, 0x3f318cfc, 0xffffffff, 0x9, 0x6, 0xffffa738, 0xd, 0x1, 0x6, 0x3, 0x45de, 0xf9e, 0x5, 0xaaa, 0xe5b4, 0x2, 0x10, 0x978]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x4}, @TCA_POLICE_RESULT={0x8}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xfffffffffffffffd}], [@TCA_POLICE_AVRATE={0x8, 0x4, 0x9}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1, 0x8, 0x5800, 0xffff, 0x8, 0xfff, 0x6, 0x7, 0x1, 0x5, 0x1857, 0x7, 0x2, 0x6, 0x2, 0x4, 0x9, 0x9, 0x7, 0x6, 0xc2ca, 0xf, 0x55, 0x5, 0x8, 0x4, 0x9, 0x1, 0x100, 0x865, 0x400, 0x4, 0xffffffff, 0x4, 0x6, 0x80000001, 0xffe00000, 0xe, 0x7, 0x3, 0x0, 0xffffffff, 0x19, 0xec7, 0x6a, 0x7, 0x1, 0x10001, 0x8, 0x8, 0x80000000, 0x800, 0x0, 0x9, 0x6, 0x4, 0x9, 0x5, 0x6, 0xc2, 0x0, 0xe47, 0x5, 0x5, 0xffffffff, 0x400, 0x9, 0xfffffff7, 0x0, 0x9, 0x171, 0xfffffff9, 0x4, 0x5, 0x5, 0xffff, 0x7, 0x5, 0x9, 0x6, 0xed1, 0x5, 0x76, 0x5, 0x0, 0xa, 0x7, 0x8000, 0x10001, 0x9, 0x80000000, 0x5, 0x1, 0xb, 0x5674, 0x200, 0x8a6, 0xd, 0xd, 0x3, 0x0, 0x4, 0xf, 0x7b39, 0x7, 0x536, 0x8c06, 0x1, 0x4, 0x1, 0x10000, 0x2, 0xda, 0x4, 0x5, 0x56c, 0x80, 0xb, 0x10000, 0xff, 0x80, 0xfff, 0x3, 0x100, 0x8001, 0x1, 0x9, 0x36cb2de2, 0xfff, 0x80000001, 0xac17, 0x9, 0x7af7fe27, 0x10001, 0x5, 0xfffffff9, 0x2, 0x0, 0x3, 0x100, 0xb, 0xd, 0x0, 0xffff, 0x7, 0xffffffff, 0x8000, 0x8, 0x80, 0xc5c3, 0x10001, 0xe99, 0x2, 0x4, 0x93, 0x8001, 0x101, 0x4, 0x62, 0x5, 0xf74, 0x0, 0x8, 0x2, 0xfffffffa, 0x0, 0x3, 0x8, 0x8, 0x9, 0x7, 0x5, 0x6, 0xa, 0x6537277d, 0x0, 0xffffff7f, 0xb87, 0x7, 0x6, 0x2, 0x8, 0x3ff, 0x3, 0x28, 0x9c, 0xcda, 0xffff0001, 0x8001, 0x9, 0x9, 0xc8, 0x9d8, 0xfff, 0x1000000, 0x5, 0x2, 0x8, 0x81, 0x5, 0x27d1, 0x5, 0x1, 0xffff, 0x6, 0x6, 0x0, 0x0, 0x3, 0x4, 0x401, 0x4, 0x0, 0x400, 0x4, 0x4ff0, 0x2, 0x8, 0xf46c, 0x4, 0x7, 0xffff, 0xcc, 0xc590, 0x7, 0x3, 0x6, 0x3dd, 0x0, 0x8, 0xf, 0x6, 0xd2d2, 0x7, 0xaef, 0x5, 0x8001, 0x6, 0x0, 0x800, 0xffffc944, 0x9, 0x10001, 0x81, 0x578, 0x15, 0xffffffff, 0xb, 0xc97, 0x2, 0x2, 0x8, 0x4, 0x8, 0x401, 0x7e]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xfffffffc, 0xdba, 0x3, 0x81, 0xf, 0x10001, 0x8, 0x4, 0x9, 0x80, 0x5ec3, 0xfffffffd, 0x1, 0x1, 0x0, 0x7, 0x2, 0x80, 0x7, 0x5, 0xb5, 0xcef, 0x3, 0x7fff, 0x7, 0x4, 0x5, 0x0, 0x6, 0xfffffff9, 0x8, 0x6, 0xffffffec, 0x200, 0x2, 0x2, 0x7, 0xfffffff8, 0x0, 0x7, 0x9, 0x8001, 0x8, 0xf55, 0x7, 0x0, 0x5, 0x5, 0x9, 0x5, 0x6, 0x3, 0x3, 0x8001, 0x1c3, 0x1, 0x8, 0x7, 0x8, 0x401, 0x4, 0x80000001, 0xfffff864, 0x81, 0xfffffffd, 0x18, 0x7, 0x7f, 0x8, 0xfd79, 0x10000, 0x5, 0xfffffff1, 0x8, 0x200, 0x200, 0x6, 0xb750, 0x9, 0x5, 0x1, 0x6, 0x891, 0x9, 0x4, 0x9, 0x7fffffff, 0x8, 0x10, 0x7, 0x8, 0x7, 0x4, 0x7ff800, 0x6, 0x3, 0x9, 0x5, 0x6, 0xe690, 0xfffffffd, 0x752d, 0x9, 0x1, 0x0, 0x1, 0x0, 0xf0, 0x280000, 0x4, 0x1, 0x5, 0x0, 0x0, 0x7ff, 0x10001, 0x5, 0x5, 0x1, 0x8, 0x1, 0x8, 0x2, 0x6d4, 0xfffffffa, 0x2, 0x0, 0x446, 0xfffffff8, 0x2, 0x452f, 0x80000000, 0x4, 0x4c, 0x6e2, 0x2, 0x2, 0x9bf3, 0x5, 0x5, 0x4b5, 0xe, 0x8, 0x1, 0x80000000, 0x4d, 0x5, 0x3, 0x2, 0x1, 0x3, 0x2, 0x2, 0x2, 0x1, 0x2, 0xf2a, 0x50b7de8a, 0x9, 0x10000, 0x2, 0x9, 0x2, 0x6, 0x3ff, 0xfffffff8, 0x0, 0x80, 0x8000, 0xfd7, 0x4, 0x8000, 0x9d9a, 0x24c, 0x1, 0x9, 0xb, 0x1, 0x7ff, 0x2, 0x4, 0x6, 0x10001000, 0x5, 0x880, 0x8, 0x8, 0x8, 0x9, 0x9, 0x9, 0x10001, 0x10, 0x2313, 0x800, 0x9, 0x8, 0x8, 0x1ea, 0x6, 0x1000, 0x0, 0x7, 0x19c, 0x10, 0x5, 0x8000, 0x9, 0x0, 0x9, 0x1, 0x7, 0x5, 0x1, 0x5, 0xadd, 0x9, 0x3ff, 0x6, 0x6e, 0x8, 0x200, 0xa5a0, 0xfffffff7, 0x5, 0xdb8, 0xd, 0x7, 0x8, 0x9, 0x42d4, 0x5, 0x8000, 0x6, 0xbb8a, 0x5, 0x1, 0x9, 0x7, 0x9, 0x6, 0x3, 0x2, 0x2, 0xb07, 0x6, 0x5a8, 0xf9, 0x800, 0x5, 0x9, 0x9, 0xce4, 0xff, 0xc3, 0x3]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x7fff}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x3, 0x6, 0x2, 0x5, 0x6, 0x57, 0x9, 0x1, 0xfffffff5, 0x3ff, 0x9, 0x8, 0x400, 0x5, 0x5, 0x6, 0x7, 0x7, 0x1, 0x80000000, 0x8, 0x6, 0x9, 0x2, 0xf, 0x38000000, 0x9, 0x7, 0x401, 0x3, 0x7, 0x86, 0xd57, 0x9, 0x3, 0x4, 0xd2, 0x1, 0x85c, 0x2, 0x7, 0x3, 0xf, 0x2, 0x6, 0x401, 0x2, 0xffffffff, 0x5, 0x0, 0x0, 0x0, 0xec, 0x400, 0x5, 0x8, 0xfffffffc, 0xf, 0x1, 0x3, 0x800, 0xd, 0x2, 0x3, 0x3, 0x5, 0x40, 0x6, 0x6, 0x81, 0x0, 0x800, 0x9, 0x5, 0xc0, 0xa, 0x2, 0x4, 0x0, 0x3, 0x3, 0x9, 0x80, 0x3, 0x2, 0x7, 0x4, 0x200, 0x2, 0x9, 0x7ff, 0x101, 0x100, 0x2, 0x8, 0x0, 0x4, 0x80, 0x2, 0x80000001, 0x0, 0x80000000, 0x8, 0x2, 0xd53, 0x2, 0x183, 0x9, 0x8, 0xf, 0x6, 0x6, 0x9, 0x9, 0x2, 0xfffffff7, 0x8001, 0x24, 0xd, 0x1, 0x8000, 0x8, 0x37, 0x200, 0xf, 0x6, 0xefe, 0x3, 0x6, 0x8, 0x7fffffff, 0x8, 0x50e, 0xe6, 0x2, 0x1, 0x7, 0x3, 0x4, 0x8, 0x7, 0x379aa27c, 0x80, 0x400, 0x2, 0x3, 0x5, 0xf, 0x6, 0x62, 0x8, 0x2b1, 0x7, 0x7fffffff, 0x4f7, 0xd, 0x6, 0x9, 0x2, 0x8, 0x253, 0x8, 0x100, 0x54, 0x1, 0x1ff, 0x400, 0x7fffffff, 0x8, 0xd76, 0x5, 0x8, 0xbc, 0x4, 0x4, 0x80, 0x5, 0x1, 0xfffffff9, 0x4235, 0x1, 0x6, 0x8, 0xb, 0x64f, 0x9a, 0x7fff, 0x1, 0x9, 0x58, 0x1, 0x5, 0x7f, 0x0, 0x1, 0xfffffeff, 0x19a000, 0x2, 0x4, 0x400, 0xff, 0x6, 0x8000, 0x1, 0xfffffff4, 0xffff, 0xe, 0x2, 0x4, 0xc855d9d2, 0x2a, 0x5, 0x1, 0x8, 0x9, 0x6, 0x80, 0x8, 0x6, 0x2, 0x3, 0x6, 0x1, 0x1000, 0x8, 0x80, 0x0, 0x9, 0x4, 0x0, 0x9, 0x80000000, 0x3, 0x0, 0x5, 0x3, 0x7, 0x3f7c, 0x7f, 0x7, 0xa70, 0xf, 0x7, 0x1, 0x0, 0x4ad, 0x5, 0xde1, 0x5, 0xdb, 0x5, 0x5, 0xa3c, 0x5, 0x80, 0x800]}], [@TCA_POLICE_AVRATE={0x8, 0x4, 0x1ff}, @TCA_POLICE_RATE64={0xc, 0x8, 0x7}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0xa1b84502f7a68a2a, 0x10, 0x100, 0x6, {0x4, 0x0, 0x8, 0x3, 0x7ff, 0x9}, {0x8, 0x0, 0xff37, 0x8, 0x4, 0x800}, 0x1ff, 0xffffff90, 0x5}}, @TCA_POLICE_TBF={0x3c, 0x1, {0x6, 0x8, 0x7, 0xfffffff7, 0x101, {0x2, 0x2, 0x0, 0x101, 0x4, 0x9}, {0x6, 0xd9d770fab019f2bc, 0x0, 0x9, 0xfc74, 0x401}, 0x0, 0x98b, 0xffff8000}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xf}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x3, 0x9, 0x8, 0x0, 0x7, 0x165, 0x10000, 0x8, 0x401, 0x9, 0x8, 0x48, 0x9aa, 0x7ff, 0x1, 0x5, 0x7, 0x2, 0x7, 0xe, 0xcc7, 0xa, 0xffffffff, 0x5, 0x3, 0x0, 0xfffff44e, 0x8, 0x9, 0xfffff110, 0x800, 0x40000, 0x6, 0x9, 0x5, 0xb58, 0x4, 0x5, 0x8, 0x80, 0x80, 0x7f, 0x1, 0x7, 0x8, 0xa, 0x4, 0x2, 0x8001, 0x656, 0x7, 0x7, 0x2, 0x8, 0x5, 0x40000000, 0x7f, 0x3, 0xe, 0x1b01, 0x1, 0xa, 0x7, 0x9, 0x1, 0x7, 0x6, 0x6, 0x2000000, 0xfb5, 0x6, 0x6, 0x1, 0x7f, 0x7, 0x6, 0x80000001, 0x1, 0x1, 0x55, 0x97d, 0x7fffffff, 0x2, 0x8, 0x29919a80, 0x1, 0x1da, 0x3, 0x4, 0x2, 0x6, 0x52, 0x4, 0x3, 0x9, 0x40, 0xd, 0xea, 0x3, 0xff, 0xb, 0x6, 0xa0e1, 0x3, 0xe96b, 0x3, 0x3, 0x8d, 0x7aa2, 0xa6, 0x9, 0x6, 0x1, 0x2, 0xa3, 0x4f8, 0x4, 0x6, 0x4, 0x9, 0x2d, 0x7, 0x5, 0x4, 0x8, 0xf, 0xc, 0x2, 0x80000001, 0xffffffff, 0x7, 0xfff, 0x5, 0x7, 0xe2, 0x41c4, 0x9, 0x2, 0x7, 0x4, 0x80, 0x4, 0x80000000, 0x5, 0x3, 0x8, 0x2, 0x1, 0xffffffff, 0x200, 0x1, 0x941f, 0x6, 0xd8, 0x2, 0x6, 0x7, 0x5, 0x9, 0xffffcccb, 0x6, 0x7, 0x3, 0x3, 0x4, 0x1000, 0x4, 0x8b, 0x0, 0x7fffffff, 0x3, 0x6, 0x7ff, 0x6, 0x9, 0x6, 0x9, 0x9, 0x8, 0x9, 0x5, 0x9, 0x8001, 0x3, 0x2, 0x1ff, 0xfffff712, 0x7a7, 0x9, 0x2, 0x0, 0x4, 0x5, 0x0, 0x1, 0x0, 0x7, 0x8, 0x1, 0x7, 0x7, 0x5, 0xfffffffe, 0x9, 0x29e6, 0x6, 0x0, 0x7f, 0x3, 0xd, 0x4, 0x0, 0x10000, 0x53e8, 0x6, 0xb, 0x3, 0xdd, 0x9, 0x1, 0x8, 0x0, 0x6, 0x4, 0xfffffffd, 0xa, 0x9, 0x2, 0x0, 0x8, 0x100, 0x1, 0xfffffff8, 0x2, 0x8, 0x1, 0x1, 0xf05, 0xc8, 0xbc, 0x9, 0x1, 0x3, 0x6, 0xff, 0x1000, 0xffff, 0x33a9, 0xf9, 0x7, 0x3, 0x2, 0x400, 0x1, 0x2a]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x400, 0x3, 0x2, 0x5ae, 0x80000000, {0xff, 0x2, 0xb, 0x3, 0x8e, 0x10001}, {0x3, 0x0, 0xd9be, 0xff01, 0xfff, 0x7f}, 0x1, 0x1e, 0x7fffffff}}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x7}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xa}, @TCA_POLICE_TBF={0x3c, 0x1, {0x2, 0x2, 0x7, 0x6, 0x5, {0x10, 0x2, 0x2, 0x2, 0xfff, 0xdb02}, {0x6, 0x1, 0x4, 0xf, 0x1, 0x5}, 0xfffffff8, 0x2, 0x15c}}], [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xffffffffffffff3e}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x20000000, 0x9, 0x3, 0x8, {0x1, 0x0, 0xfff, 0x5, 0x3, 0x2}, {0x2, 0x3, 0x800, 0x65cc, 0x9, 0x2}, 0xf, 0x7, 0x86}}, @TCA_POLICE_TBF={0x3c, 0x1, {0x8, 0x1, 0x2, 0x9, 0x9, {0x8, 0x2, 0x100, 0x6, 0x5, 0xf}, {0xf, 0x2, 0x7fff, 0x9, 0x7, 0xff}, 0x8000, 0x80000001, 0x7}}, @TCA_POLICE_RATE64={0xc, 0x8, 0x7fffffffffffffff}, @TCA_POLICE_TBF={0x3c, 0x1, {0xc0, 0x5, 0x8, 0x2, 0x3, {0xfe, 0x1, 0x7ff, 0x3, 0x8, 0x7}, {0xff, 0x2, 0x5, 0x6, 0x4, 0x5}, 0xf, 0x7, 0x80000000}}], [@TCA_POLICE_RATE={0x404, 0x2, [0x2, 0x800, 0x9, 0x6, 0xff8f, 0x9, 0x0, 0xfffffcbf, 0x8, 0x3, 0x9, 0xa, 0x7e9, 0xb2c6, 0x800, 0xe, 0x0, 0x5, 0x3, 0x5, 0x8, 0x5, 0xe0, 0x5, 0x0, 0x9, 0x3, 0x9, 0x300, 0x0, 0x2, 0x4, 0xfffffff7, 0x2, 0xdfa, 0x6, 0x2, 0x2, 0x5, 0x2000000, 0x800, 0x80, 0x7f, 0xfff, 0xb, 0x0, 0x4, 0x1, 0x7, 0x2, 0x2ccf457e, 0x1, 0x6, 0x100, 0x8, 0x4, 0x4, 0x7, 0x6, 0x2, 0x6, 0x2, 0x5, 0x398, 0x1, 0x2, 0x9, 0x6, 0x9, 0x3, 0xfffffff8, 0x7, 0xfffff5fb, 0xfffffc01, 0xff, 0x0, 0x3, 0x1, 0x1, 0x3, 0x0, 0x4, 0x401, 0x7f, 0x5, 0xe, 0x7, 0x3, 0x0, 0xfffffffb, 0x7, 0xf, 0xc75, 0x9, 0xff, 0x4, 0x81, 0x8, 0x9, 0x38, 0xfffffffe, 0x200, 0x1ff, 0x40, 0x3, 0x6da1, 0x700000, 0x80, 0xc, 0x4, 0x0, 0x6, 0x7fffffff, 0x7, 0x7, 0x1ba9, 0x4, 0x8, 0x6, 0x6, 0x8, 0x6, 0x343b, 0x4, 0x1, 0x7, 0x9d40, 0x5, 0x3, 0xef2, 0x2, 0x0, 0xfffffffa, 0x81, 0x1, 0x7, 0x4, 0x5, 0x0, 0x978, 0xfff, 0x3, 0x6, 0xfffffff9, 0x2f61, 0x7, 0x6, 0x7, 0xf813, 0xff, 0x5, 0x400, 0x9, 0x2, 0x8001, 0x800, 0x4, 0x10000, 0x0, 0x401, 0x0, 0x4, 0xf, 0x1, 0xb, 0x1, 0x80, 0x7, 0x8, 0x7f04c5b8, 0x8000, 0x9, 0x7, 0x8, 0x2, 0x8be6, 0x7f, 0x2, 0x7, 0x9, 0xff, 0x80000001, 0x86, 0x3ff, 0xd, 0xfffffff9, 0x0, 0x8, 0x6, 0xc2, 0x1, 0x1f8, 0x101, 0x70f, 0x4, 0xb, 0xffff, 0x400, 0x9, 0x1000, 0x2, 0x1d68, 0x7, 0x3, 0x1ff, 0x3, 0x1, 0x5, 0x2, 0x3, 0x6, 0x2155, 0x7, 0x80000001, 0x0, 0x3, 0x80000001, 0x4d0, 0x1ff, 0x800, 0x4, 0x0, 0x5, 0xfff, 0x100, 0x3, 0x0, 0x8, 0x6, 0x2fbe, 0x7fff, 0x9, 0x51, 0x6, 0x6, 0x5, 0x10, 0x8, 0x1, 0xbe, 0xe8, 0x2, 0x7, 0x6, 0x2, 0x80, 0x8, 0x5289, 0x400, 0x9, 0x4, 0x7, 0x4bd, 0x8, 0x8, 0x1ad4]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1, 0x101, 0x8, 0x9f3, 0xc, 0xba4, 0xf, 0x7, 0x7, 0x4, 0x81, 0x6c39, 0x1, 0x100, 0x7, 0x8, 0x5, 0x0, 0x6, 0x1, 0xac, 0x0, 0x1, 0xdf3a, 0x0, 0x6, 0x6, 0x3, 0x2, 0x0, 0xb, 0x0, 0x8, 0x7ed7, 0xe, 0xa5, 0x401, 0x100, 0x4, 0x1, 0x2, 0x9, 0x1, 0xc, 0x4, 0x8, 0x8, 0x80000001, 0xeb8, 0xfffffffb, 0x7, 0x3, 0x1, 0x5, 0x1ff, 0x80000001, 0x6, 0x4, 0x10001, 0xa75a, 0x2, 0x8000, 0xe9, 0x8, 0x6, 0xcae7, 0x5, 0x7, 0xfffffffc, 0xf, 0x9, 0x1, 0x6, 0x9, 0xc, 0x6, 0x5, 0xffffffff, 0xe232, 0x100, 0x3, 0x3d20, 0x9, 0xac6, 0x5, 0x712, 0x4, 0x5, 0x1d3e, 0x8, 0x7ff, 0xfff, 0x5e, 0x2, 0x4, 0x47, 0x2b203665, 0x0, 0x6, 0x5, 0x4, 0x0, 0x7, 0x9, 0xfffffff4, 0x4, 0x4, 0x2, 0x7, 0x4, 0x7, 0x400, 0x2, 0x6, 0x7, 0xd2, 0x8, 0x4, 0x0, 0x2, 0x101, 0x1, 0x8fd6, 0x10001, 0x7, 0xfffffff5, 0x800, 0x8, 0x7, 0x1, 0xffff, 0x9, 0x3, 0x5, 0x5, 0x4, 0x7, 0x0, 0x17, 0x9, 0x8, 0xfffffffd, 0x2, 0xf, 0xff, 0xfffffffb, 0x1, 0x9, 0x9, 0x4, 0x3, 0x8, 0x6, 0x9, 0x3, 0x7, 0x2c000, 0x0, 0xf7c2, 0x2800000, 0x6, 0xc796, 0xfffffffe, 0x400, 0x1ff, 0x5, 0xff, 0xb0, 0xf1, 0x7ff, 0x6, 0x4, 0x0, 0x5, 0x5, 0xdd, 0x0, 0x3, 0x1, 0x8001, 0x401, 0x2, 0x6, 0x0, 0x7, 0x10, 0xfff, 0x6, 0x6, 0x9, 0x8, 0x3, 0x3, 0x2, 0xe7, 0x66f5faaa, 0x2, 0x100, 0x6015, 0xca4, 0x200, 0x81, 0x4, 0x4, 0x4, 0x9, 0x8000000, 0xa8, 0x8, 0x7, 0x2, 0x4, 0x5, 0x3, 0x4, 0x5, 0x3b, 0x4bac, 0xa, 0x9, 0x7, 0x1, 0x7, 0xb0d5, 0x3, 0x8001, 0x5, 0x1ff, 0xe6b, 0x9, 0xe287, 0xbde2, 0x3, 0x0, 0xffff, 0x6c971f30, 0x7, 0x3, 0x4, 0x3, 0x400, 0x4, 0x100, 0x7, 0x7, 0xf, 0xffffffff, 0x10, 0x30, 0xc0, 0x10, 0x9, 0x1, 0xffffffff, 0xb, 0x1]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x2}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x2, 0xf44d, 0x6, 0x9, 0xcc, 0x7, 0x6b, 0x0, 0xc, 0x3ff, 0xfffffffb, 0x9, 0x62dc, 0x3, 0x848, 0x9bc, 0x5, 0x17cca57b, 0x6, 0x9, 0xa, 0xf0f9, 0x7f, 0x8, 0xfff, 0x0, 0x1, 0x78000000, 0x80, 0x2, 0xb1c, 0x3, 0x9, 0xe78e, 0x8000, 0x4, 0x7, 0x80000001, 0x1, 0x6, 0x4, 0x3, 0x3da3, 0xfff, 0x5, 0x3, 0x40, 0xf, 0x7, 0x80000001, 0x6, 0x9d, 0x7fff, 0xa0, 0x8, 0x81, 0x5, 0xfb4, 0x40, 0x7, 0x0, 0x0, 0x8, 0x2, 0x5, 0x9, 0xad12, 0xfffffffa, 0x1afc, 0x3, 0x101, 0x5, 0x7ff, 0x1, 0xffce, 0x5, 0x7, 0xe, 0x9a, 0x2, 0x5, 0x1, 0x9, 0x3, 0x5, 0xcf, 0x7e2, 0x1, 0x8, 0x80, 0x3, 0x7, 0x4, 0x4, 0x0, 0x33e, 0x800, 0x3ff, 0x7fffffff, 0x73, 0x8, 0x164, 0x9, 0x8, 0x156, 0xe, 0x9, 0x7fffffff, 0x9, 0x8, 0x5, 0x4, 0x1, 0x2, 0x3ff, 0x1, 0x9, 0x5, 0x2b3, 0x7fff, 0x5, 0x6, 0x82, 0x6, 0x3, 0x0, 0xff, 0x2, 0x2, 0x4, 0x2, 0x5, 0x80000001, 0x2, 0x2, 0x5, 0xc5, 0x6, 0x8001, 0x7, 0x3ff, 0xf, 0x10000, 0x2, 0x400, 0x1, 0xff, 0x3, 0x6, 0xb, 0x7fffffff, 0x58000, 0x5, 0x1, 0xf40, 0x6, 0x7, 0x3, 0x10000, 0x7ff, 0x7fff, 0x7f, 0x7, 0x6, 0x1, 0xff, 0x6, 0x8, 0x5, 0x29fe7da2, 0x3d9, 0xd53, 0x7ff, 0x3, 0xff, 0xaf, 0x1, 0xcf53f08, 0x12e, 0x6, 0x1, 0x5, 0x2, 0xcfc, 0x9, 0x2, 0xfffffffe, 0x401, 0x7, 0xe5d, 0x80000000, 0x8, 0xb54, 0x4, 0x0, 0x101, 0x5, 0x5, 0x10000, 0x4, 0x401, 0x80000001, 0x7fff, 0x2, 0x8, 0x5, 0x0, 0x200, 0x3, 0xffff, 0x6, 0xe1b4, 0x3, 0x706, 0x3, 0x0, 0x7f, 0x80, 0x6, 0x2, 0xc0, 0x8, 0x0, 0x0, 0xfffffffe, 0x7, 0x5, 0x7f, 0x0, 0x2, 0x60, 0x12, 0x4, 0x40, 0x7, 0xa8f2, 0x8, 0x0, 0x7, 0x0, 0xfffff754, 0x8, 0x6, 0xa, 0x1, 0x7fffffff, 0x6, 0x40, 0x9, 0x5, 0x2, 0x4, 0x4, 0x8a, 0x5, 0x8]}]]}, {0x101, 0x6, "5637ed5e1cdf9d7019b62364d4b1303fcbefca099ce36655fc169ecc72f0aa0ca61f56a8b9548d6ab3d3b8d528b44b2c8d30da91d015652f4ebea371c8897667c56b2eed6e64b7eb8c3a372bc5aa19b8fa4d0dc5286ca87158f666d2fa5e997dfccd60f8b6ed541cb4998d5863a695af47704c1e693991bb58b024d39b57877c05aaa6cd70918dbf147a4e614c6b013b1e93244edf818ac0e93da5ad7a5074e2f6547f24f7307be8ba8076bd9c6813057626057153fc0dcb55c41ae8bee3f875212ebcab03233c74eca75af29ae76e0d8565adc1510b161ef8040354b54168ea057b1088caf41295c98d76ee0768794082217bf2ca57cc4e8b0012dad8"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3}}}}]}, @TCA_FLOW_RSHIFT={0x8, 0x4, 0x5}]}}]}, 0x346c}, 0x1, 0x0, 0x0, 0x4008848}, 0xc884) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, 0x0) socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000004340)={{{@in6=@private1, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@multicast2}}, &(0x7f0000004440)=0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000004480)={{{@in=@broadcast, @in6=@mcast2, 0x4e21, 0x0, 0x4e23, 0x2, 0x6, 0x40, 0x40, 0x19, 0x0, r6}, {0x81, 0x78b, 0x7, 0x1ff, 0x5255, 0x100000001, 0x4, 0x6}, {0xf378, 0x5, 0x7, 0x10000}, 0x5, 0x6e6bc0, 0x0, 0x1, 0x3}, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4d6, 0x32}, 0x2, @in6=@ipv4={'\x00', '\xff\xff', @empty}, 0x0, 0x0, 0x1, 0x7, 0x7fff, 0x2}}, 0xe8) 28.642777283s ago: executing program 2 (id=1827): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101}) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_ADD_DEV(r1, 0x5000940a, &(0x7f00000009c0)={{r2}, "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"}) (async) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) (async) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r3, {0x4}, {0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0x40048d1}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0xb, 0x3, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={r5, 0x0, 0x0, 0x0, &(0x7f00000007c0), 0x0, 0xa1b, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000800)={r5, 0xfeffff, 0xffffff69, 0x3f000002, &(0x7f0000000880)="c45c57ce395de5b289f07d637a223920f181c2e57d71483cfb2d075a3ff07258e080a194805cdb0c26d3f7ffb1e0d9cf4fa36dcb2168b72de48ac8f93e6804f1c4d70898d0810e044d7e1778eaac5dfdcc9f1208905522025bcfdf1b6f969b094d5c022c2b7ffefde71e0627b9a2069cc1e0175c4b8860aad4b0a103c589f676b6c4e85eb3950c533b6e62c39ccf9ae9bfe54ee5887358d44f46337fbe090d7c7e55847edee8130ffd3d1e719e01a68b0e691c0d35b0b56e0b514036342fd56f08ac0083f3c2fe41a1295a3d23cf3d160d4fd90f66beba68860456ed41272e1e68d16c2564c85f5556e18784113c493d13253e14d6eb891707fba3c30d07d5ee8619e4426cafec4cf6a3723c455d09b586b248", 0x0, 0xf0, 0x0, 0xf0, 0xffffff0c, &(0x7f00000009c0), &(0x7f0000000a00)}, 0x40) r6 = accept4$x25(0xffffffffffffffff, &(0x7f0000000300), &(0x7f0000000340)=0x12, 0x80800) connect$x25(r6, &(0x7f0000000380)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x3}}, 0x12) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x16, 0xb, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r7, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000005c0)="7c5331fc9356b5b1000600008100", 0x0, 0xd5a2, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000000000000950000000000007800"/32], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) 28.622244418s ago: executing program 1 (id=1828): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1, 0x4, &(0x7f0000000ac0)=ANY=[@ANYBLOB="180000000000000000000000000000006301530000000000950000"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x58, 0x0, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0x44, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x6}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e62}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x1f}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x9}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x40}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xba4}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x2}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x8000}, 0x200848c5) (async) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x58, 0x0, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0x44, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x6}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e62}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x1f}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x9}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x40}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xba4}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x2}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x8000}, 0x200848c5) r2 = socket$inet_sctp(0x2, 0x1, 0x84) socket$inet(0x2, 0xa, 0x3) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000740)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0xb8, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x150, 0xffffffff, 0xffffffff, 0x150, 0xffffffff, 0x7fffffe, 0x0, {[{{@uncond, 0x6, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0xb8, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}, {{@ip={@local, @local, 0xff, 0x0, 'hsr0\x00', 'veth1_virt_wifi\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE0={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) (async) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000740)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0xb8, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x150, 0xffffffff, 0xffffffff, 0x150, 0xffffffff, 0x7fffffe, 0x0, {[{{@uncond, 0x6, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0xb8, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}, {{@ip={@local, @local, 0xff, 0x0, 'hsr0\x00', 'veth1_virt_wifi\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE0={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r3, 0x6, 0x2000000000000022, &(0x7f00000000c0)=0x1, 0x4) sendto$inet6(r3, &(0x7f00000003c0)='j', 0x1, 0x2404c081, &(0x7f0000000400)={0xa, 0x2, 0x8000000d, @loopback, 0x9}, 0x1c) (async) sendto$inet6(r3, &(0x7f00000003c0)='j', 0x1, 0x2404c081, &(0x7f0000000400)={0xa, 0x2, 0x8000000d, @loopback, 0x9}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000440)='highspeed', 0x9) shutdown(r3, 0x1) syz_emit_ethernet(0xe7, &(0x7f00000009c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff0800450000d900000000fd019078ac1e0001ac1414aa03059078000500014f2406860067fff9072f1000e0000001640101024404c7c34414f221ac1e000100000000ffffffff0000000689235fe0000001ac1414bb64010102ac1e0001ac1414aae0000001ac1414bbac1414aa831bf7ac1414bbe00000020a010102e0000002e0006b41ac1414354420b3d0000000020000000d0000000880000001ffffffff000000050000b2a0832f7100000000ac1414aae0000002ac141441ac1414aaac141432e0000002ac141415640101000a010102ac141439000000bc"], 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000d40)={{r0}, &(0x7f0000000cc0), &(0x7f0000000d00)='%pS \x00'}, 0x20) socket$igmp(0x2, 0x3, 0x2) (async) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r4, 0x0, 0xd4, &(0x7f0000000200)=0x2, 0x4) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r5, &(0x7f0000000b40)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) (async) bind$bt_l2cap(r5, &(0x7f0000000b40)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) setsockopt$bt_BT_DEFER_SETUP(r5, 0x112, 0xf, &(0x7f0000000b80)=0x4, 0x4) (async) setsockopt$bt_BT_DEFER_SETUP(r5, 0x112, 0xf, &(0x7f0000000b80)=0x4, 0x4) listen(r5, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x10, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000b7080000000000007b8af8ff00000000b70800000000010026cea77b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018ca2b3de7a8c488f433290e3c9c3161ad7cbac6c1d00f4772898b1fdf998c35a9447bbb746752f3d537a5fb23bb0e7e72060eb91d1d52499eda0cc5da680f7912defce23d2c215dde4797cb4a1d64dc1184a389b4ddec21f2fc0ae92971170fe859deabe8c197198992804a600fed15f12d26cc98566deb20dc01c8eb036a", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a50000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x10, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000b7080000000000007b8af8ff00000000b70800000000010026cea77b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018ca2b3de7a8c488f433290e3c9c3161ad7cbac6c1d00f4772898b1fdf998c35a9447bbb746752f3d537a5fb23bb0e7e72060eb91d1d52499eda0cc5da680f7912defce23d2c215dde4797cb4a1d64dc1184a389b4ddec21f2fc0ae92971170fe859deabe8c197198992804a600fed15f12d26cc98566deb20dc01c8eb036a", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a50000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r6, 0x2f08, 0x10, 0x10, &(0x7f00000006c0)="0000000000000005", &(0x7f0000000700)=""/8, 0x447, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 27.53445104s ago: executing program 1 (id=1830): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000180)={'team0\x00', 0x8000}) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000003c0)={'syztnl1\x00', &(0x7f0000000340)={'ip6_vti0\x00', 0x0, 0x2f, 0x9, 0x4, 0x7fffffff, 0x6, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x8000, 0x80b, 0x7}}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f00000009c0), r7) getsockname$packet(r7, &(0x7f0000000a00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000a40)=0x40) sendmsg$nl_route(r6, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000b00)=ANY=[@ANYBLOB="060000001000070500000020357d94cde0a64400", @ANYRES32=r8, @ANYBLOB="01600000000000001c0012800900010069706970000000000c00028008000100", @ANYRES32=r8, @ANYBLOB], 0x3c}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000001000010400000000ffdbdf2500000000", @ANYRES32=r8, @ANYBLOB="132207590357a9f2ca737f5cb68404c2badd157c1e19b300918068719e83f20b0500140012800900"], 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x20000010) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000ec0)={0xffffffffffffffff, 0xe0, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000c00), ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, &(0x7f0000000c40)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000c80)=[0x0], 0x0, 0x63, &(0x7f0000000cc0)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000000d00), &(0x7f0000000040), 0x8, 0x52, 0x8, 0x8, &(0x7f0000000d80)}}, 0x10) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000001200)={'syzkaller0\x00', 0x0}) r13 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r13, 0x107, 0xf, &(0x7f0000001240), 0x56) sendmsg$kcm(r13, &(0x7f0000001280)={&(0x7f00000015c0)=@xdp={0x2c, 0x0, r12, 0x3e}, 0x80, &(0x7f0000001340)=[{&(0x7f0000001380)="27030200590214000600002fb96dbcf706e10500000088a8ffff0806ee1611d4b8bf4a31accb", 0x26}], 0x1}, 0x80) r14 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r14, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001500)=ANY=[@ANYBLOB="1c0000005e00679a3601ffc4910700004f78d4c1a0731cccff"], 0x1c}}, 0x0) recvmmsg$unix(r14, &(0x7f0000001540)=[{{0x0, 0x402, &(0x7f0000001580)=[{&(0x7f0000001c00)=""/4096, 0x1041}], 0x1}}], 0x14, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f00000013c0)={'team0\x00', 0x0}) r16 = socket$nl_route(0x10, 0x3, 0x0) r17 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r17, 0x8933, &(0x7f0000001400)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r16, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001480)={&(0x7f00000014c0)=@newqdisc={0x2c, 0x24, 0x4, 0x3, 0x0, {0x0, 0x0, 0x0, r18, {}, {0xfff1, 0x10}, {0x8}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x3}]}, 0x2c}}, 0x0) sendmmsg$inet(r4, &(0x7f0000001ac0)=[{{&(0x7f0000000100)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000080)="c767a9b38fb980e37a0dc64ece03e7dd3d6d0ee00d080901f546ae79876901ed62547c518a249dbde7fca95d38b6f5a5d240ce48fe6c5eea2da6efb4", 0x3c}], 0x1, &(0x7f00000012c0)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x53668de3}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @empty, @remote}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xb7}}, @ip_ttl={{0x14}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x80000001}}], 0x80}}, {{&(0x7f0000000480)={0x2, 0x4e22, @local}, 0x10, &(0x7f0000000700)=[{&(0x7f0000000240)="52f207d6f450eb726f7fa68c36d7", 0xe}, {&(0x7f0000000500)="b134d19abdab75691978ae92621aa5a845228f1082e07c76fb6feed81c8a5559117c6c5a3c3867f31e2e1f8112009a4e0eb9302b6f3784847a5d9297346e462e26dbc76ef151ee3a1111963f35eccd6ea8b92ce2db6dbbfdedbc64141200cfe89afadf2900f43d2d826d47280b4191056a054fb27f0658f7e466fac20841c083ad81e5c4944f2d29edf82f74fc21f4140fca837ed626eb025e6fd21ba33ab5d75a47ad4f6fc815b86debd480abe21742634ed544248fe60c4a32f848666815b6963a41c504f4b7712ff418c69a087e9e037e0ce8ca35e6df9978d31feeb39e56b90f3ed344b539efde76922da8b65894e9f47dfd1993c8", 0xf7}, {&(0x7f0000000600)="d112f7c15b6a0da3be3bf61802b40b8d116dd101ac0a57c901173a13c7f13ce6af5ef128fb3d56840efd1d2c05f7f5f96f193ae885891be5670233cd646b6ac8e665980de3929acedf17c0b0e1a68aed39eee74de6141a611ef5cdd04999691bd2efb088339e48c214bded54292225f3bfcc3967a02441ff937e33507bd958af50cb098758e7a327b4b316274d6a78202d626cbcd0790390fbf38ae31e3111cb369c83dd2ffd1e10c0c92d4fad55034bd12797f5c4d975172fa9f8cd01ccad13bd144ff3e184a04e7b7c33d93eee", 0xce}], 0x3, &(0x7f0000000740)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @broadcast, @remote}}}], 0x20}}, {{&(0x7f0000000780)={0x2, 0x4e20, @remote}, 0x10, &(0x7f0000000980)=[{&(0x7f00000007c0)="66d10709f201caef3b3439755c81d944d5fb078f6909bfe6f7354bc4a10cc3ab2a87e08a3e5b8ade95dfae3d7cae650ffa87e33b41ebc3f38bb4abd64ba8f3ed8c2e64eb5022a0c3062eca6313cfbfdc21ce3474cfb2dda0588f232121fc1d11bf70db12fa259ef91001f10a3cbcc9caa5b991c713b3ad6124111163449749ebfc", 0x81}, {&(0x7f0000000880)="39631217ad3509553178c0d7d3969d69cb259213cbdc578ec1b2a0ad5ad0b79a439a07783163cca3d567a1d45324ea9bacc7c80ab861d0b2eaf755cafeed44791d3042", 0x43}, {&(0x7f0000000900)="89504cd7b74bf39b37e84d9b11675fe32767de5fd454402f9d36fb833af53bc956e1f94b89ef00fb838cd1235436b938aceb305534032a02671131382aaa2e4e8b9b19b22d08003df7f20b50709c0adf6fee4cb7c9869445c41d47d7f49367a3186207045b98f04e16c696", 0x6b}], 0x3, &(0x7f0000000f00)=ANY=[@ANYBLOB="1cebffffffffffffff00000008000000", @ANYRES32=r8, @ANYBLOB="64010102ac1e000100000000110000000000000000000000010000000700000000000000140000000000000000000000020000000300000000000000140000000000000000000000020000009d0700000000000014000000000000000000000002000000050000000000000014000000000000000000000002000000a3000000000000001100000000000000000000000100000045000000000000001c000000000000000000000008000000", @ANYRES32=r10, @ANYBLOB="64010102ac14142b0000000090000000000000000000000007000000890ffeac141442ac1414bb64010101890ff4ac1414bb00000000ac1414aa4424216300000000000008000a01010000000001ac1414aa00000007ac14142a0000000a8620000000030605cd49df0102020a0bcd1393835c1238010641784ced0403a8890f340a010100ac1414aaac1e0001890e8d47ae1aeab565d68d3eea3900180000000000000000000000070000009404000088020000"], 0x178}}, {{&(0x7f0000001080)={0x2, 0x4e21, @empty}, 0x10, &(0x7f00000011c0)=[{&(0x7f00000010c0)="68770782ab344fb3e87f3ebd99db7b5c1a2856c308b384db6ed6fecccd46c046b39485619fcf5dfdf552fc5f9f03f5e8d53cfac27797fa46d79f2a5f6bc77768b8c4b678998af94a4c40ae9db8562aac592e195d3208c197b70ecbdef1bf2e30ee697e4e9fa8c196c3364d46dc81fdbb7a5f4487d1fd02074becd11c0140927b1bb9f3f6e9e70d445c6570c47d0cab42a39d7468a1211666f627a6b2b1f5c3fcd53055b63fcb315342bf8d9eb02b47b7ec5e72d12d75cc653250bcbf66f9a12a10250121ed249e69d58b30e2c3dbd4d317448dfab4525185ac7a44438f77c48706e36b230ac37dcc1337642ac546c1", 0xef}], 0x1, &(0x7f0000002c00)=ANY=[@ANYBLOB="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", @ANYRES32=r12, @ANYBLOB="7f00000100000000000000002c000000000000000000000007000000831b7964010100ac1414aa0a010100ac1414bbac141444ffffffff00000000001c000000000000000000000008000000", @ANYRES32=r15, @ANYBLOB="0a010102e0000001000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYRESHEX=r9, @ANYRES32=r1, @ANYBLOB="64010102e000000100000000"], 0x1e0}}, {{&(0x7f0000001840)={0x2, 0x4e23, @local}, 0x10, &(0x7f0000001a80)=[{&(0x7f0000001880)="29130df954941c3f37777a29d4f56fa1eb94e27b8d99273d423ce0369e4ea6cae10bbd6c920f573a910c427b81f6b685e1e5c842fbd092bd2735f1692052b5017572e6698a1fd1df57723bd916d985d5236d4c88d027c7e95f5b0cc9be00cfed9d84944a73fda96f5bebbd6e01e56daaccdc47b0c741c5e7f73ea6280c8aae705ea0abbbe90bec0a338004dde366e5d6c311eb12524fc3ae9f9eae54af47441541005168a213b81d67fe27bd7ab4f19d2dce89b00e6bfd5b266c671aec088ce29226e7d2f65061fa32f6fe226a5ac42991d2ad34ace0c9739137d307e8d6c2f471e152cc2339723bb4", 0xe9}, {&(0x7f0000001980)="540a8e297029f0065d00f3f3", 0xc}, {&(0x7f00000019c0)="14618ada0dfc17557739a8516951cc635b2e65c01b47946995bb114109baf842df6e8df7a52bb323cbcbbccaa22d59c38067d215daec742059394d9c6859092176591a5fb2a30339269b638b3fbfb84e7e0bcedbd04e1e23acd9c1a703a9b738fc128d16daba1f0411b8b8fa53af54739c8e389b8fd3edd0e581890068c9a0905ef1b5a1e68d1e1aa64345154ec3cf3a99196b15", 0x94}], 0x3}}], 0x5, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'rose0\x00'}) 27.398595829s ago: executing program 0 (id=1831): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a010400000000000000000100ffff0900010073797a30000000002c000000030a01010001000000000000010040000900010073797a30000000000900030073797a310000000f94000000060a010400000000000000000100000008000b40000000006c000480340001800b000100657874686472000024000280080001400000000c080003400000000008000440000000220500020007000000340001800c00010062697477697365002400028008000140000000140800034000000002080002400000001208000800000000000900010073797a30"], 0x108}}, 0x0) 27.135791882s ago: executing program 2 (id=1832): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000100), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000040000e41300050003030000000a0000005dc000000000010800020005000000140006"], 0x4c}, 0x1, 0x0, 0x0, 0x8004}, 0x4040000) r2 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000200)={'bond0\x00', &(0x7f0000000240)=@ethtool_gstrings={0x1b, 0x8}}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb01001800000000000000bca39d613cdc35c95840000000400000000b000000000000000000000905000000070000000000000e0100000000000000000000000000000d02000000000000000000000d000000000a00000000000009000000000000"], 0x0, 0x63}, 0x28) syz_80211_inject_frame(&(0x7f0000000000)=@device_b, 0x0, 0x0) 26.827676302s ago: executing program 4 (id=1833): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0xc201}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}], {0x14}}, 0x54}}, 0x0) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1c}}) write$tun(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001000000000000000000000000070000000000000000000000860090780000000000000000000000000000ee3f000000002b036f8c006e75021d683910c3090b3188a7c747eb2278a273c1b80029442911892704"], 0xfdef) 26.203385943s ago: executing program 0 (id=1834): sendmsg$netlink(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{0x0}], 0x1}, 0x0) (async, rerun: 32) r0 = socket$netlink(0x10, 0x3, 0x0) (rerun: 32) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="480000001c00110c0000006a00000f0007000000", @ANYRES32=r1, @ANYBLOB="800202000a000200166d"], 0x48}}, 0x0) (async, rerun: 64) r2 = socket$netlink(0x10, 0x3, 0x10) (rerun: 64) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 25.712949648s ago: executing program 4 (id=1835): bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x4, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x3, 0x2, 0x3, 0x1, 0x0, 0x3f}]}, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94) 25.602886758s ago: executing program 1 (id=1836): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r0, &(0x7f00000003c0)={&(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x1, {0x0, 0x2, 0x3}}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000880)="11ff6293380a05f6955933674f2f6de2e189bb566cdc426e1a9a84ab68f1523dbd802ce1038c8e0ab8aedec9f5d8b14fa90258f1fb00786fd81775760ac38447c544fc03edbb1c6af6023e6d3909d60a66a8bb30701c433516b016c7d92bcf3b954820a496656157d7baacd66138358e803de2075f81fb304a40585e758bc61029f83d7cd4dfd210984a8a53b7a2a0f8b22458444c1265f9eedabaf829c0e7c96104f2db0b8d10038b821fcb5220e3c85635efb556cc9d66fff85e5626b2a1f4a0f001eecb8edaa089f33f7903667a703b96e039eb0af4f8e192414ee8f91dca6bd5310561438b1411e718b4f441206459", 0xf1}], 0x1, 0x0, 0x0, 0x8010}, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x9, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000003000000000000008000000095000000000000002ef555aa5d4d38049cf1c4bbd17bbed0176798639eae858d11b10c9fbb15fc72efcd3ca61478f1f734e484f59759f89b2002ddd8c7d0c8fa4fa53a4d4a50b1184459fdbf82ad2744a13d584e3fcbfa573621f8a2d2e820b337b6af448e3a910be2"], 0x0, 0x2, 0x0, 0x0, 0x41000, 0x64, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4bd}, 0x94) (async, rerun: 32) setsockopt$sock_attach_bpf(r1, 0x1, 0x21, &(0x7f0000000040), 0x4) (rerun: 32) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_PIM(r2, 0x0, 0xcf, 0x0, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) (async) r6 = socket$phonet_pipe(0x23, 0x5, 0x2) (async) r7 = socket$netlink(0x10, 0x3, 0x10) (async) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r7, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x44, r8, 0x615, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x44}, 0x5}, 0x0) (async, rerun: 32) listen(r6, 0x0) (async, rerun: 32) listen(r6, 0x0) socket$kcm(0x29, 0x5, 0x0) (async) sendmsg$NL80211_CMD_DEL_PMKSA(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002bbd7000fbdbdf253500000008000300", @ANYRES32=r5, @ANYBLOB="4ec3cde56d22638d4e4c13cbee06e15bc12dd629362512cd7dd9aa1837bdabf9ff06f95ec0f21f23c1a024394e227cf07ec50b6d7f214f3516d93d99dcc3e30ddee4ae380fdc17a8423af35504523d0b016b26a83778f1cf87fa8bb0812e51bb51e0def498b8d958d553a65c18433ab348cc82043775ad73127a3bb2bcc7cf92bc1e82dd57249a2942146853a7c13ac11b9986b83f568b1f66d3754abcb990aa65f7691503225dac0895a9729dd639383f4ab5f8b0eb7eeecde833c081067ba3342b7e70"], 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x4080) (async) sendmmsg(r1, &(0x7f000000d500)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x5, 0x20000004) (async) r9 = socket$kcm(0x2, 0xa, 0x2) (async) r10 = socket$nl_route(0x10, 0x3, 0x0) (async) r11 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f00000001c0)={'bond0\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000640)=ANY=[@ANYBLOB="54000000100003040400"/20, @ANYRES32=0x0, @ANYBLOB="01010200000000002400128009000100766c616e000000001400028006000100000000000600050088a8000008000500", @ANYRES32=r12], 0x54}, 0x1, 0xba01}, 0x810) (async) ioctl$sock_SIOCETHTOOL(r9, 0x8946, &(0x7f00000006c0)={'bond0\x00', &(0x7f0000000700)=@ethtool_sfeatures={0x3b, 0x2, [{0x1200}, {0xfffffffe, 0x80003}]}}) (async) close(0x4) 25.371564517s ago: executing program 2 (id=1837): r0 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b05, &(0x7f0000000000)={'wlan0\x00'}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0xffffff1f, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, 0xffffff81}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_TTL={0x5, 0x8, 0x5}]}}}]}, 0x3c}}, 0x0) socket$unix(0x1, 0x2, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b05, &(0x7f0000000000)={'wlan0\x00'}) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0xffffff1f, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, 0xffffff81}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_TTL={0x5, 0x8, 0x5}]}}}]}, 0x3c}}, 0x0) (async) 24.925265923s ago: executing program 4 (id=1838): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000cc0)={0x4, 0x2000}, 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xbc}, 0x1, 0x0, 0x0, 0x801}, 0x0) r2 = socket(0x2d, 0x2, 0x0) sendmsg$IPVS_CMD_FLUSH(r2, &(0x7f0000000e00)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x20044085) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f0000000280)=0x79, 0x4) bind$inet(r3, &(0x7f00000002c0)={0x2, 0x4e23, @empty}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000e40)={0x0, 0xfffffffffffffed6, &(0x7f0000000e80)={&(0x7f0000000ec0)=@newqdisc={0x148, 0x24, 0x10, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x1, {0x2, 0x1}, {0x4, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_red={{0x8}, {0x11c, 0x2, [@TCA_RED_PARMS={0x14, 0x1, {0x5, 0x5, 0x84, 0x8, 0x9, 0x8, 0x4}}, @TCA_RED_EARLY_DROP_BLOCK={0x0, 0x5, 0x2}]}}]}, 0x148}}, 0x20008051) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000300)={0x1, &(0x7f0000000340)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x20004ffd, &(0x7f0000000380)={0x2, 0x4e23, @empty}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f00000003c0)='bbr', 0x3) sendmmsg$inet(r3, &(0x7f0000003b80)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000004c0)="91f8a984851bdef38491bbc4173c3c6f357d028feff84ab17c417789f9fc9b8572c98172b7319130feaab952ac47037fc26e0000ea4feb931647fc5393de25000000000000000000f4922da20bf1f802970c30f03cc271337e892c99bda9475d51361f8b78938a6a68ba85987219000000eb52c9ff439180b413ec4d4fe130b41d113ce7efb5ed838379c5a554eb896f7808d5904cd8da06fd5159085c9275f49e775e92fb106c2f10442d508891e58a3f117fc203f787901de99a6a1b851ff5c85244beacba25d854577d68ca555e88fc249340ab9bdd8680abbbde02b0307ef45cb7ffffffff984c", 0xe9}], 0x1}}, {{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000800)="9cf1495e028e22049259947af7", 0xd}, {0x0}], 0x2}}, {{0x0, 0x0, &(0x7f0000001000)=[{&(0x7f0000000f40)="a4c6fa0c957ff0d22fe96e18a1dc336e07bff7110ff62d1aa60026f3a0544ed831e7a3da3822491b0620435ac17a6203eecf22a612b3528b75d94396972269e44b6eb0aa963f66f98891724b4dbd4fd792d31e37", 0x54}], 0x1, &(0x7f0000001380)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @rand_addr=0x64010101, @empty}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @private=0xa010101}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x6}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x62a957b2}}, @ip_retopts={{0xd0, 0x0, 0x7, {[@noop, @lsrr={0x83, 0x17, 0xde, [@multicast1, @empty, @multicast1, @loopback, @local]}, @ssrr={0x89, 0x23, 0xc, [@multicast2, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @local, @dev={0xac, 0x14, 0x14, 0xe}, @local, @multicast2, @local]}, @end, @timestamp_addr={0x44, 0x2c, 0x41, 0x1, 0x1, [{@loopback, 0x9}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xfffffff9}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x2}, {@remote, 0x7}, {@local, 0x4}]}, @timestamp_prespec={0x44, 0x2c, 0x27, 0x3, 0xd, [{@dev={0xac, 0x14, 0x14, 0x3e}, 0x401}, {@multicast1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xf0f5}, {@loopback, 0x5}, {@dev={0xac, 0x14, 0x14, 0x3b}, 0x4}]}, @lsrr={0x83, 0x13, 0x19, [@empty=0xb0100040, @multicast1, @rand_addr=0x64010100, @loopback]}, @end, @noop, @timestamp={0x44, 0x14, 0xff, 0x0, 0x1, [0xe, 0x7fff, 0x2, 0x24da]}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x4}}], 0x158}}, {{0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000001540)="502802f4ae5ce7304170fcfc1dbc648900b2dafc6051c5856f3a7b8e523fe032906cc74a0872e0b7d3f38ceeb027ba13e96ba895f90acbca18f8", 0x3a}], 0x1, &(0x7f00000015c0)=[@ip_ttl={{0x14, 0x0, 0x2, 0xbea6}}], 0x18}}, {{&(0x7f0000001600)={0x2, 0x4e22, @loopback}, 0x10, &(0x7f0000001700)=[{&(0x7f0000001640)}], 0x1}}, {{&(0x7f0000001780)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xd}}, 0x10, &(0x7f0000001900)=[{&(0x7f00000017c0)="0d8152c39ce6d5d67e9f8ebe19044f068df3fc2ddf8f5290e77d973779eba7d0084d02e701bbd838b8cc587f2964cbaabdc5b635093ba87532d2aa50c7d0a61777c97980d211136dcc5c5169bc8aa2fbf4eae8f81823ad24f8c89139c16be6c71a8522da3895e3c0b490af444f60a47ea350a74812d3ed332a1dfb128879b800d3054b8ff1", 0x85}, {0x0}], 0x2, &(0x7f0000001940)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @loopback, @broadcast}}}], 0x20}}, {{&(0x7f0000001980)={0x2, 0x4e20, @empty}, 0x10, &(0x7f0000003b00), 0x0, &(0x7f0000003b40)=[@ip_tos_int={{0x14}}, @ip_ttl={{0x14}}], 0x30}}], 0x7, 0x2090) r5 = socket(0x10, 0x3, 0x0) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r6, 0x0, 0xc8, 0x0, 0x0) setsockopt$MRT_ADD_VIF(r6, 0x0, 0xca, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendto(r7, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, 0x0, 0x0) write(r5, 0x0, 0x0) 24.342703067s ago: executing program 1 (id=1839): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="2200000004"], 0x48) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x5, 0x32, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x3, &(0x7f0000001880)=ANY=[@ANYBLOB="1800000005000000000000000000000095"], &(0x7f00000018c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000040)={0x0, @empty, @empty}, &(0x7f0000000080)=0xc) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x12, 0x1, &(0x7f0000000840)=@raw=[@generic={0x7b, 0xa, 0x1, 0xfff8}], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r4, @cgroup_sock_addr=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="2100000000000000000000000200000000020400401f911afe77183316c5efb21be65b29c92c8c98073d9604cff4a9e7f11b319eb31efea8079f7fa16e96ed5aff1d26ecded1e56cd99e85dfa237d49d3542fdaaddde89", @ANYRES32, @ANYBLOB='\b\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="05000000050000000500"/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r6}, &(0x7f0000000280), &(0x7f00000002c0)=r0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r1}, &(0x7f0000000400), &(0x7f0000000440)=r3}, 0x20) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) r7 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r7, &(0x7f0000000100)=[{&(0x7f00000004c0)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r2}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000640)={r1, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0x1c, &(0x7f0000000680)=ANY=[@ANYBLOB="18080000cbb60000000000000000000018110000", @ANYRES32=r2, @ANYRESDEC=r5, @ANYRES32=r8, @ANYBLOB="0000000000020000b7050000080000001c00000000000000bf980000000000000d080000000000008500000006000000b70000000200000095"], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000800}, 0x94) 23.694174609s ago: executing program 0 (id=1840): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = epoll_create1(0x80000) (async) r2 = socket(0x1, 0x80802, 0x0) (async) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f00000000c0)={0xa000000d}) (async) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000140)) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000540)={{0x14, 0x10, 0x7c, 0x0, 0x6000, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_DATA_LEN={0x0, 0x7, 0x1, 0x0, 0xa}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWRULE={0x0, 0x6, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x6}, [@NFTA_RULE_TABLE={0x0, 0x1, 'syz1\x00'}, @NFTA_RULE_USERDATA={0x0, 0x7, 0x1, 0x0, "86a1ac5a5c42683f37da495f7f778e2e64bb3b803c78d903a783cdb0aa7f3cf0753b127e67298251c84dcee8b9b78a2d3bb2"}, @NFTA_RULE_CHAIN={0x0, 0x2, 'syz2\x00'}, @NFTA_RULE_ID, @NFTA_RULE_CHAIN_ID={0x0, 0xb, 0x1, 0x0, 0x3}, @NFTA_RULE_EXPRESSIONS={0x0, 0x4, 0x0, 0x1, [{0x0, 0x1, 0x0, 0x1, @byteorder={{}, @void}}, {0x0, 0x1, 0x0, 0x1, @dup_ipv6={{}, @void}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xe4}}, 0x40) close(r1) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'geneve0\x00', 0x0}) (async) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) (async) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000007c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000880)=ANY=[@ANYBLOB="5400000013000500010000000000000007000000", @ANYRES32=r9, @ANYBLOB="000000000000000034001a0006000000020000002800048024000a80"], 0x54}}, 0x0) (async) r10 = socket$nl_route(0x10, 0x3, 0x0) (async) r11 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r11, &(0x7f0000000440)={0x0, 0x4076cbba9945d516, &(0x7f0000000480)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r11, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) sendmsg$nl_route(r10, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0x60000, {0x0, 0x0, 0x0, r12, 0x15809}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @broadcast}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async) sendmsg$nl_route(r6, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)=@bridge_delneigh={0x3c, 0x1c, 0xc07, 0x70bd2e, 0x25dfdbfe, {0xa, 0x0, 0x0, r12, 0x40, 0x10, 0x72748f52b8af0932}, [@NDA_DST_IPV6={0x14, 0x1, @mcast1}, @NDA_LLADDR={0xa, 0x2, @remote}]}, 0x3c}}, 0x20024090) (async) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=@newtaction={0x78, 0x30, 0xb, 0x0, 0x0, {}, [{0x64, 0x1, [@m_ct={0x60, 0x1, 0x0, 0x0, {{0x7}, {0x38, 0x2, 0x0, 0x1, [@TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @rand_addr=0x64010100}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @multicast1}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @dev}, @TCA_CT_NAT_PORT_MIN={0x6}, @TCA_CT_ACTION={0x6, 0x3, 0x19}]}, {0x4}, {0xc}, {0xc, 0x8, {0x3}}}}]}]}, 0x78}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@newlink={0x68, 0x10, 0x300, 0x70bd26, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x28, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_EGRESS_QOS={0x1c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xff, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1ff, 0x9}}]}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x68}}, 0x0) 23.572163008s ago: executing program 2 (id=1841): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000004c0)={'rose0\x00', 0x112}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$TUNSETOWNER(r0, 0x400454cc, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000540)={'rose0\x00', 0x112}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x78, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x1}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private}}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0}, @IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x20000011) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000400)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) openat$cgroup_ro(r3, &(0x7f0000000440)='blkio.bfq.io_service_bytes_recursive\x00', 0x0, 0x0) r4 = socket(0x10, 0x3, 0x0) write(r4, &(0x7f00000000c0)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000100)={'bridge0\x00', &(0x7f00000003c0)=@ethtool_sset_info={0x31, 0xe, 0xffffffff}}) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={r6, &(0x7f00000003c0)}, 0x20) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xd, 0xf, &(0x7f00000007c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0xba6}, {{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x20}}, {{0x6, 0x0, 0x6, 0x9, 0x0, 0x1, 0xe7030000}, {0x16, 0x0, 0x0, 0x6}}, [], {{0x4, 0x1, 0x3, 0x2, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 22.762279686s ago: executing program 4 (id=1842): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$bt_hci(r0, 0x84, 0x81, &(0x7f0000000040)=""/4107, &(0x7f0000001080)=0x100b) (async) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000001580)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000001600)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x44004000) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000001680)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000001700)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @dynset={{0xb}, @val={0x4}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) bind$bt_l2cap(r1, &(0x7f0000001100)={0x1f, 0x0, @none}, 0xe) (async) setsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0xf, &(0x7f0000001140)=0x2, 0x4) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) (async) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000001340)=@newsa={0x148, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@rand_addr=' \x01\x00', 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d8, 0x6c}, @in=@local, {0x0, 0x192, 0x6, 0xffff, 0x8253c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x800, 0x1}, {0x3, 0x8}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @sa_dir={0x5, 0x21, 0x1}, @extra_flags={0x8, 0x18, 0x1}]}, 0x148}, 0x1, 0x0, 0x0, 0x8801}, 0x0) (async) r5 = socket$inet_udp(0x2, 0x2, 0x0) (async) r6 = socket$inet6(0xa, 0x2, 0x3a) (async) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r7, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000001540)=ANY=[@ANYBLOB="100000001914019e"], 0x10}}, 0x0) sendto$inet6(r6, &(0x7f0000001180)="800034ca269bb73c", 0x8, 0x2004c080, &(0x7f00000011c0)={0xa, 0xfffd, 0xc9, @mcast2}, 0x1c) (async) getsockopt$inet_int(r5, 0x0, 0x18, 0x0, &(0x7f00000010c0)) (async) r8 = accept4(r3, &(0x7f0000001200)=@ax25={{0x3, @netrom}, [@remote, @remote, @remote, @remote, @rose, @null, @rose, @bcast]}, &(0x7f0000001280)=0x80, 0x800) ioctl$SIOCX25GFACILITIES(r8, 0x89e2, &(0x7f0000000000)) 21.599101172s ago: executing program 1 (id=1843): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a010400000000000000000100ffff0900010073797a30000000002c000000030a01010001000000000000010040000900010073797a30000000000900030073797a310000001094000000060a010400000000000000000100000008000b40000000006c000480340001800b000100657874686472000024000280080001400000000c080003400000000008000440000000220500020007000000340001800c00010062697477697365002400028008000140000000140800034000000002080002400000001208000800000000000900010073797a30"], 0x108}}, 0x0) 20.765122961s ago: executing program 4 (id=1844): sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="654671ca4b48f31b5f810e5e09c8", 0xe}], 0x1, 0x0, 0x0, 0xd0}, 0x0) r0 = socket(0x2, 0x3, 0x6) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000140)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3b8, 0x0, 0x98, 0x130, 0x1c8, 0x288, 0x0, 0x98, 0x130, 0x288, 0x320, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ip={@empty, @empty, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x6}, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@inet=@ecn={{0x28}, {0x10}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x450) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='memory.events\x00', 0x275a, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF_FLAGS(r2, 0x84, 0x7a, &(0x7f00000007c0)={0x0, 0xffffffffffffffff}, &(0x7f0000000800)=0xc) setsockopt$inet6_IPV6_ADDRFORM(r3, 0x29, 0x1, &(0x7f0000000840), 0x4) (async) write$cgroup_subtree(r2, &(0x7f0000000640)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) (async, rerun: 64) sendto$inet(r0, &(0x7f0000000680)="8ce2ad4d4f95e087a7846d3f81", 0xfdef, 0x0, &(0x7f00000006c0)={0x2, 0x0, @multicast2}, 0x10) (async, rerun: 64) r4 = socket(0x400000000010, 0x3, 0x0) (async, rerun: 32) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) (async, rerun: 32) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r6, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)={0x30, r5, 0x701, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x7c}, @void, @val={0xc}}}, [@NL80211_ATTR_VENDOR_ID={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x85}, 0x0) (async) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=@newlink={0x58, 0x10, 0x401, 0x70bd28, 0x8848, {0x0, 0x0, 0x0, 0x0, 0x8405}, [@IFLA_IFNAME={0x14, 0x3, 'bridge0\x00'}, @IFLA_MAP={0x24, 0xe, {0x2, 0x4, 0x9e, 0xe52, 0x10, 0xfe}}]}, 0x58}}, 0x40) 19.550235745s ago: executing program 1 (id=1845): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0xc201}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}], {0x14}}, 0x54}}, 0x0) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1c}}) write$tun(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001000000000000000000000010080000000000000000000000860090780000000000000000000000000000ee3f000000002b036f8c006e75021d683910c3090b3188a7c747eb2278a273c1b80029442911892704"], 0xfdef) 15.444207027s ago: executing program 4 (id=1846): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfb, 0x40000}, 0xc) sendmsg$nl_generic(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c00000031e21c002abd96000000ddff0400000008001700", @ANYRES32=r0], 0x1c}, 0x1, 0x0, 0x0, 0x4000010}, 0x84) 0s ago: executing program 33 (id=1840): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = epoll_create1(0x80000) (async) r2 = socket(0x1, 0x80802, 0x0) (async) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f00000000c0)={0xa000000d}) (async) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000140)) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000540)={{0x14, 0x10, 0x7c, 0x0, 0x6000, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_DATA_LEN={0x0, 0x7, 0x1, 0x0, 0xa}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWRULE={0x0, 0x6, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x6}, [@NFTA_RULE_TABLE={0x0, 0x1, 'syz1\x00'}, @NFTA_RULE_USERDATA={0x0, 0x7, 0x1, 0x0, "86a1ac5a5c42683f37da495f7f778e2e64bb3b803c78d903a783cdb0aa7f3cf0753b127e67298251c84dcee8b9b78a2d3bb2"}, @NFTA_RULE_CHAIN={0x0, 0x2, 'syz2\x00'}, @NFTA_RULE_ID, @NFTA_RULE_CHAIN_ID={0x0, 0xb, 0x1, 0x0, 0x3}, @NFTA_RULE_EXPRESSIONS={0x0, 0x4, 0x0, 0x1, [{0x0, 0x1, 0x0, 0x1, @byteorder={{}, @void}}, {0x0, 0x1, 0x0, 0x1, @dup_ipv6={{}, @void}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xe4}}, 0x40) close(r1) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'geneve0\x00', 0x0}) (async) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) (async) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000007c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000880)=ANY=[@ANYBLOB="5400000013000500010000000000000007000000", @ANYRES32=r9, @ANYBLOB="000000000000000034001a0006000000020000002800048024000a80"], 0x54}}, 0x0) (async) r10 = socket$nl_route(0x10, 0x3, 0x0) (async) r11 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r11, &(0x7f0000000440)={0x0, 0x4076cbba9945d516, &(0x7f0000000480)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r11, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) sendmsg$nl_route(r10, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0x60000, {0x0, 0x0, 0x0, r12, 0x15809}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @broadcast}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async) sendmsg$nl_route(r6, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)=@bridge_delneigh={0x3c, 0x1c, 0xc07, 0x70bd2e, 0x25dfdbfe, {0xa, 0x0, 0x0, r12, 0x40, 0x10, 0x72748f52b8af0932}, [@NDA_DST_IPV6={0x14, 0x1, @mcast1}, @NDA_LLADDR={0xa, 0x2, @remote}]}, 0x3c}}, 0x20024090) (async) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=@newtaction={0x78, 0x30, 0xb, 0x0, 0x0, {}, [{0x64, 0x1, [@m_ct={0x60, 0x1, 0x0, 0x0, {{0x7}, {0x38, 0x2, 0x0, 0x1, [@TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @rand_addr=0x64010100}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @multicast1}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @dev}, @TCA_CT_NAT_PORT_MIN={0x6}, @TCA_CT_ACTION={0x6, 0x3, 0x19}]}, {0x4}, {0xc}, {0xc, 0x8, {0x3}}}}]}]}, 0x78}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@newlink={0x68, 0x10, 0x300, 0x70bd26, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x28, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_EGRESS_QOS={0x1c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xff, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1ff, 0x9}}]}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x68}}, 0x0) kernel console output (not intermixed with test programs): arameter 8192 [ 122.215178][ T7991] Bluetooth: hci0: unsupported parameter 5134 [ 122.215189][ T7991] Bluetooth: hci0: unsupported parameter 8192 [ 122.215198][ T7991] Bluetooth: hci0: unsupported parameter 5134 [ 122.215208][ T7991] Bluetooth: hci0: unsupported parameter 8192 [ 122.215395][ T7991] Bluetooth: hci0: unsupported parameter 5134 [ 122.215405][ T7991] Bluetooth: hci0: unsupported parameter 8192 [ 122.215415][ T7991] Bluetooth: hci0: unsupported parameter 5134 [ 122.215425][ T7991] Bluetooth: hci0: unsupported parameter 8192 [ 122.215610][ T7991] Bluetooth: hci0: unsupported parameter 5134 [ 122.215621][ T7991] Bluetooth: hci0: unsupported parameter 8192 [ 122.215630][ T7991] Bluetooth: hci0: unsupported parameter 5134 [ 122.215639][ T7991] Bluetooth: hci0: unsupported parameter 8192 [ 122.234421][ T7991] Bluetooth: hci0: unsupported parameter 5134 [ 122.234441][ T7991] Bluetooth: hci0: unsupported parameter 8192 [ 122.234452][ T7991] Bluetooth: hci0: unsupported parameter 5134 [ 122.234462][ T7991] Bluetooth: hci0: unsupported parameter 8192 [ 122.234656][ T7991] Bluetooth: hci0: unsupported parameter 5134 [ 122.234667][ T7991] Bluetooth: hci0: unsupported parameter 8192 [ 122.234676][ T7991] Bluetooth: hci0: unsupported parameter 5134 [ 122.234687][ T7991] Bluetooth: hci0: unsupported parameter 8192 [ 122.234949][ T7991] Bluetooth: hci0: unsupported parameter 5134 [ 122.234960][ T7991] Bluetooth: hci0: unsupported parameter 8192 [ 122.234969][ T7991] Bluetooth: hci0: unsupported parameter 5134 [ 122.234979][ T7991] Bluetooth: hci0: unsupported parameter 8192 [ 122.236042][ T7991] Bluetooth: hci0: unsupported parameter 5134 [ 122.236057][ T7991] Bluetooth: hci0: unsupported parameter 8192 [ 122.236067][ T7991] Bluetooth: hci0: unsupported parameter 5134 [ 122.236077][ T7991] Bluetooth: hci0: unsupported parameter 8192 [ 122.237325][ T7991] Bluetooth: hci0: unsupported parameter 5134 [ 122.237338][ T7991] Bluetooth: hci0: unsupported parameter 8192 [ 122.237348][ T7991] Bluetooth: hci0: unsupported parameter 5134 [ 122.237358][ T7991] Bluetooth: hci0: unsupported parameter 8192 [ 122.242833][ T7991] Bluetooth: hci0: unsupported parameter 5134 [ 122.242850][ T7991] Bluetooth: hci0: unsupported parameter 8192 [ 122.242860][ T7991] Bluetooth: hci0: unsupported parameter 5134 [ 122.242870][ T7991] Bluetooth: hci0: unsupported parameter 8192 [ 122.243061][ T7991] Bluetooth: hci0: unsupported parameter 5134 [ 122.243071][ T7991] Bluetooth: hci0: unsupported parameter 8192 [ 122.243081][ T7991] Bluetooth: hci0: unsupported parameter 5134 [ 122.243091][ T7991] Bluetooth: hci0: unsupported parameter 8192 [ 122.243318][ T7991] Bluetooth: hci0: unsupported parameter 5134 [ 122.243329][ T7991] Bluetooth: hci0: unsupported parameter 8192 [ 122.243338][ T7991] Bluetooth: hci0: unsupported parameter 5134 [ 122.243347][ T7991] Bluetooth: hci0: unsupported parameter 8192 [ 122.257732][ T7991] Bluetooth: hci0: unsupported parameter 5134 [ 122.257752][ T7991] Bluetooth: hci0: unsupported parameter 8192 [ 122.257763][ T7991] Bluetooth: hci0: unsupported parameter 5134 [ 122.257773][ T7991] Bluetooth: hci0: unsupported parameter 8192 [ 122.258035][ T7991] Bluetooth: hci0: unsupported parameter 5134 [ 122.258047][ T7991] Bluetooth: hci0: unsupported parameter 8192 [ 122.258056][ T7991] Bluetooth: hci0: unsupported parameter 5134 [ 122.258066][ T7991] Bluetooth: hci0: unsupported parameter 8192 [ 122.258261][ T7991] Bluetooth: hci0: unsupported parameter 5134 [ 122.258272][ T7991] Bluetooth: hci0: unsupported parameter 8192 [ 122.258282][ T7991] Bluetooth: hci0: unsupported parameter 5134 [ 122.258292][ T7991] Bluetooth: hci0: unsupported parameter 8192 [ 122.263239][ T7991] Bluetooth: hci0: unsupported parameter 5134 [ 122.263257][ T7991] Bluetooth: hci0: unsupported parameter 8192 [ 122.263268][ T7991] Bluetooth: hci0: unsupported parameter 5134 [ 122.263277][ T7991] Bluetooth: hci0: unsupported parameter 8192 [ 122.322396][ T7991] Bluetooth: hci0: unsupported parameter 5134 [ 122.322418][ T7991] Bluetooth: hci0: unsupported parameter 8192 [ 122.322429][ T7991] Bluetooth: hci0: unsupported parameter 5134 [ 122.322439][ T7991] Bluetooth: hci0: unsupported parameter 8192 [ 122.322721][ T7991] Bluetooth: hci0: unsupported parameter 5134 [ 122.322733][ T7991] Bluetooth: hci0: unsupported parameter 8192 [ 122.322743][ T7991] Bluetooth: hci0: unsupported parameter 5134 [ 122.322753][ T7991] Bluetooth: hci0: unsupported parameter 8192 [ 122.323015][ T7991] Bluetooth: hci0: unsupported parameter 5134 [ 122.323026][ T7991] Bluetooth: hci0: unsupported parameter 8192 [ 122.323036][ T7991] Bluetooth: hci0: unsupported parameter 5134 [ 122.323046][ T7991] Bluetooth: hci0: unsupported parameter 8192 [ 122.323241][ T7991] Bluetooth: hci0: unsupported parameter 5134 [ 122.323285][ T7991] Bluetooth: hci0: unsupported parameter 8192 [ 122.323295][ T7991] Bluetooth: hci0: unsupported parameter 5134 [ 122.323305][ T7991] Bluetooth: hci0: unsupported parameter 8192 [ 122.727006][ T8006] netlink: 8 bytes leftover after parsing attributes in process `syz.2.614'. [ 122.739587][ T8006] netlink: 'syz.2.614': attribute type 1 has an invalid length. [ 122.834856][ T8010] netlink: 28 bytes leftover after parsing attributes in process `syz.2.614'. [ 122.872782][ T8006] 8021q: adding VLAN 0 to HW filter on device bond1 [ 122.901183][ T8013] macvlan2: entered promiscuous mode [ 122.901204][ T8013] macvlan2: entered allmulticast mode [ 122.926987][ T8013] bond1: entered promiscuous mode [ 122.927173][ T8013] bond1: entered allmulticast mode [ 122.931583][ T8013] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 122.960685][ T8013] bond1: left allmulticast mode [ 122.960757][ T8013] bond1: left promiscuous mode [ 123.043198][ T8020] netlink: 'syz.4.620': attribute type 11 has an invalid length. [ 124.336312][ T8078] can: request_module (can-proto-0) failed. [ 124.563166][ T8102] batman_adv: batadv0: Adding interface: syzkaller0 [ 124.563184][ T8102] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 124.563213][ T8102] batman_adv: batadv0: Interface activated: syzkaller0 [ 124.750749][ T8091] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 124.808480][ T8091] batman_adv: batadv0: Removing interface: syzkaller0 [ 125.122869][ T8137] netlink: 'syz.1.648': attribute type 1 has an invalid length. [ 125.186319][ T8137] 8021q: adding VLAN 0 to HW filter on device bond1 [ 125.379945][ T8153] netlink: 'syz.3.654': attribute type 4 has an invalid length. [ 125.402480][ T8153] netlink: 'syz.3.654': attribute type 4 has an invalid length. [ 125.957900][ T8171] __nla_validate_parse: 6 callbacks suppressed [ 125.957920][ T8171] netlink: 4 bytes leftover after parsing attributes in process `syz.1.659'. [ 126.032847][ T8180] xt_MASQUERADE: bad rangesize 2147483646 [ 126.054658][ T8180] netlink: 'syz.0.663': attribute type 1 has an invalid length. [ 126.054680][ T8180] netlink: 228 bytes leftover after parsing attributes in process `syz.0.663'. [ 126.056106][ T8180] netlink: 4 bytes leftover after parsing attributes in process `syz.0.663'. [ 126.101395][ T8183] ip_tables: iptables: counters copy to user failed while replacing table [ 126.280563][ T8195] netlink: 8 bytes leftover after parsing attributes in process `syz.4.667'. [ 126.280584][ T8195] netlink: 28 bytes leftover after parsing attributes in process `syz.4.667'. [ 126.485859][ T8213] netlink: 'syz.1.673': attribute type 21 has an invalid length. [ 126.485919][ T8213] netlink: 'syz.1.673': attribute type 6 has an invalid length. [ 126.485933][ T8213] netlink: 132 bytes leftover after parsing attributes in process `syz.1.673'. [ 126.765894][ T8232] netlink: 32 bytes leftover after parsing attributes in process `syz.4.678'. [ 126.889886][ T8247] netlink: 12 bytes leftover after parsing attributes in process `syz.3.680'. [ 127.049854][ T8259] ip_tables: iptables: counters copy to user failed while replacing table [ 127.180353][ T8264] gre0: Caught tx_queue_len zero misconfig [ 127.191388][ T8264] netlink: 8 bytes leftover after parsing attributes in process `syz.3.686'. [ 127.258948][ T8268] batman_adv: batadv0: Adding interface: syzkaller0 [ 127.258970][ T8268] batman_adv: batadv0: Interface activated: syzkaller0 [ 127.359751][ T8276] netlink: 4 bytes leftover after parsing attributes in process `syz.0.691'. [ 127.359874][ T8276] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 127.474800][ T8276] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 128.037854][ T8322] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 128.090328][ T8324] IPVS: set_ctl: invalid protocol: 58 255.255.255.255:20003 [ 128.160695][ T8329] syz_tun: entered allmulticast mode [ 128.248330][ T8323] syz_tun: left allmulticast mode [ 128.399313][ T8339] IPVS: ovf: TCP 172.20.20.170:21 - no destination available [ 128.675396][ T8357] syzkaller1: entered promiscuous mode [ 128.675419][ T8357] syzkaller1: entered allmulticast mode [ 128.733263][ T8364] sctp: [Deprecated]: syz.3.720 (pid 8364) Use of int in max_burst socket option. [ 128.733263][ T8364] Use struct sctp_assoc_value instead [ 128.734100][ T8364] netlink: 'syz.3.720': attribute type 12 has an invalid length. [ 128.737548][ T8358] block nbd0: Unsupported socket: should be TCP or UNIX. [ 128.957724][ T8362] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 129.018778][ T8371] 8021q: adding VLAN 0 to HW filter on device bond3 [ 129.307414][ T8386] netlink: 'syz.2.728': attribute type 4 has an invalid length. [ 129.307434][ T8386] netlink: 'syz.2.728': attribute type 10 has an invalid length. [ 129.307527][ T8386] bond_slave_0: mtu greater than device maximum [ 129.531247][ T8399] tipc: Failed to remove unknown binding: 66,0,2/150994944:2778888010/2778888011 [ 129.555822][ T8400] 8021q: VLANs not supported on ip_vti0 [ 129.589793][ T8407] x_tables: duplicate underflow at hook 2 [ 129.606955][ T8407] lo: entered promiscuous mode [ 129.612249][ T8407] tunl0: entered promiscuous mode [ 129.628996][ T8407] gre0: entered promiscuous mode [ 129.680314][ T8407] gretap0: entered promiscuous mode [ 129.692909][ T8407] erspan0: entered promiscuous mode [ 129.710020][ T8407] ip_vti0: entered promiscuous mode [ 129.713278][ T8404] syzkaller1: entered promiscuous mode [ 129.713295][ T8404] syzkaller1: entered allmulticast mode [ 130.092967][ T8435] block nbd0: not configured, cannot reconfigure [ 130.541425][ T8464] mac80211_hwsim hwsim7 syzkaller1: entered promiscuous mode [ 130.541453][ T8464] mac80211_hwsim hwsim7 syzkaller1: entered allmulticast mode [ 130.972348][ T8489] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 131.101160][ T8499] netlink: 'syz.0.758': attribute type 8 has an invalid length. [ 131.135998][ T8491] tipc: Started in network mode [ 131.136038][ T8491] tipc: Node identity ac1414aa, cluster identity 4711 [ 131.136788][ T8491] tipc: New replicast peer: 172.20.20.187 [ 131.147686][ T8491] tipc: Enabled bearer , priority 10 [ 131.439317][ T8510] syzkaller1: entered promiscuous mode [ 131.439341][ T8510] syzkaller1: entered allmulticast mode [ 131.671894][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 131.710532][ T8515] __nla_validate_parse: 9 callbacks suppressed [ 131.710552][ T8515] netlink: 28 bytes leftover after parsing attributes in process `syz.0.767'. [ 131.843935][ T8528] netlink: 8 bytes leftover after parsing attributes in process `syz.2.772'. [ 131.887864][ T8528] vlan3: entered promiscuous mode [ 131.887886][ T8528] bond0: entered promiscuous mode [ 131.887898][ T8528] bond_slave_0: entered promiscuous mode [ 131.888122][ T8528] bond_slave_1: entered promiscuous mode [ 132.070510][ T8546] netlink: 12 bytes leftover after parsing attributes in process `syz.0.775'. [ 132.234442][ T8415] tipc: Node number set to 2886997162 [ 132.304724][ T8556] netlink: 8 bytes leftover after parsing attributes in process `syz.0.780'. [ 132.368866][ T8558] netlink: 24 bytes leftover after parsing attributes in process `syz.0.782'. [ 132.551631][ T8567] netlink: 8 bytes leftover after parsing attributes in process `syz.1.784'. [ 132.551653][ T8567] netlink: 8 bytes leftover after parsing attributes in process `syz.1.784'. [ 132.557045][ T8569] netlink: 9720 bytes leftover after parsing attributes in process `syz.2.785'. [ 132.828281][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.828337][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.937012][ T8596] netlink: 'syz.4.791': attribute type 11 has an invalid length. [ 132.943922][ T8596] netlink: 12 bytes leftover after parsing attributes in process `syz.4.791'. [ 133.094608][ T8607] netlink: 'syz.0.798': attribute type 10 has an invalid length. [ 133.166993][ T8610] netlink: 260 bytes leftover after parsing attributes in process `syz.0.799'. [ 133.169470][ T8610] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 133.387108][ T8572] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 133.758792][ T8644] bond3: entered promiscuous mode [ 133.760450][ T8644] bond3: entered allmulticast mode [ 133.760875][ T8644] 8021q: adding VLAN 0 to HW filter on device bond3 [ 133.941732][ T8655] netlink: 'syz.2.810': attribute type 29 has an invalid length. [ 133.942351][ T8655] netlink: 'syz.2.810': attribute type 29 has an invalid length. [ 133.999761][ T8657] syzkaller1: entered promiscuous mode [ 133.999775][ T8657] syzkaller1: entered allmulticast mode [ 134.199175][ T8669] dvmrp1: entered allmulticast mode [ 134.290460][ T8680] mac80211_hwsim hwsim7 syzkaller1: left promiscuous mode [ 134.290485][ T8680] mac80211_hwsim hwsim7 syzkaller1: left allmulticast mode [ 134.330155][ T8678] trusted_key: syz.3.818 sent an empty control message without MSG_MORE. [ 134.552993][ T8695] netlink: 'syz.2.823': attribute type 1 has an invalid length. [ 134.562186][ T8694] ip_tables: iptables: counters copy to user failed while replacing table [ 134.576532][ T8694] ip_tables: iptables: counters copy to user failed while replacing table [ 134.576857][ T8694] ip_tables: iptables: counters copy to user failed while replacing table [ 134.577136][ T8694] ip_tables: iptables: counters copy to user failed while replacing table [ 134.579178][ T8694] ip_tables: iptables: counters copy to user failed while replacing table [ 134.579471][ T8694] ip_tables: iptables: counters copy to user failed while replacing table [ 134.579760][ T8694] ip_tables: iptables: counters copy to user failed while replacing table [ 134.582384][ T8694] ip_tables: iptables: counters copy to user failed while replacing table [ 134.582718][ T8694] ip_tables: iptables: counters copy to user failed while replacing table [ 134.586433][ T8694] ip_tables: iptables: counters copy to user failed while replacing table [ 134.647851][ T8695] 8021q: adding VLAN 0 to HW filter on device bond2 [ 134.679977][ T8698] bond2: (slave veth0_to_bond): making interface the new active one [ 134.692175][ T8700] netlink: 'syz.1.824': attribute type 2 has an invalid length. [ 134.701622][ T8698] bond2: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 134.730920][ T8695] bond2: entered promiscuous mode [ 134.730944][ T8695] veth0_to_bond: entered promiscuous mode [ 134.731150][ T8695] bond2: entered allmulticast mode [ 134.731163][ T8695] veth0_to_bond: entered allmulticast mode [ 134.830447][ T8695] macvlan2: entered promiscuous mode [ 134.830471][ T8695] macvlan2: entered allmulticast mode [ 134.839817][ T8695] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 134.852236][ T8695] bond2: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of veth0_to_bond [ 135.221156][ T8733] xt_hashlimit: size too large, truncated to 1048576 [ 135.291994][ T8723] syzkaller1: entered promiscuous mode [ 135.292019][ T8723] syzkaller1: entered allmulticast mode [ 135.333734][ T8740] xt_hashlimit: size too large, truncated to 1048576 [ 135.456150][ T8742] syzkaller0: entered promiscuous mode [ 135.456195][ T8742] syzkaller0: entered allmulticast mode [ 135.698721][ T8765] SET target dimension over the limit! [ 135.735868][ T8765] netlink: 'syz.2.836': attribute type 10 has an invalid length. [ 136.182110][ T8798] syzkaller1: entered promiscuous mode [ 136.182126][ T8798] syzkaller1: entered allmulticast mode [ 136.469497][ T8811] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.470904][ T8811] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.956591][ T8842] netlink: 'syz.0.859': attribute type 2 has an invalid length. [ 137.031167][ T8848] __nla_validate_parse: 11 callbacks suppressed [ 137.031187][ T8848] netlink: 8 bytes leftover after parsing attributes in process `syz.0.860'. [ 137.031199][ T8848] netlink: 4 bytes leftover after parsing attributes in process `syz.0.860'. [ 137.071583][ T8848] xt_socket: unknown flags 0xc [ 137.071998][ T8848] netlink: 8 bytes leftover after parsing attributes in process `syz.0.860'. [ 137.072013][ T8848] netlink: 4 bytes leftover after parsing attributes in process `syz.0.860'. [ 137.103353][ T8848] netlink: 8 bytes leftover after parsing attributes in process `syz.0.860'. [ 137.103490][ T8848] netlink: 4 bytes leftover after parsing attributes in process `syz.0.860'. [ 137.123603][ T6132] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 137.123645][ T6132] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 137.125264][ T6132] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 137.125299][ T6132] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 137.240514][ T8852] xt_hashlimit: size too large, truncated to 1048576 [ 137.369688][ T8861] xt_TPROXY: Can be used only with -p tcp or -p udp [ 137.732298][ T8883] netlink: 4 bytes leftover after parsing attributes in process `syz.4.870'. [ 137.732414][ T8883] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 137.803285][ T8883] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 137.854899][ T8893] netlink: 'syz.3.872': attribute type 9 has an invalid length. [ 137.854920][ T8893] netlink: 134780 bytes leftover after parsing attributes in process `syz.3.872'. [ 138.000462][ T8900] syzkaller1: entered promiscuous mode [ 138.000483][ T8900] syzkaller1: entered allmulticast mode [ 138.002364][ T8900] FAULT_INJECTION: forcing a failure. [ 138.002364][ T8900] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 138.002403][ T8900] CPU: 0 UID: 0 PID: 8900 Comm: syz.4.875 Not tainted syzkaller #0 PREEMPT(full) [ 138.002443][ T8900] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 138.002461][ T8900] Call Trace: [ 138.002468][ T8900] [ 138.002476][ T8900] dump_stack_lvl+0xe8/0x150 [ 138.002509][ T8900] should_fail_ex+0x3eb/0x540 [ 138.002539][ T8900] _copy_from_iter+0x1d3/0x1680 [ 138.002560][ T8900] ? rcu_is_watching+0x16/0xb0 [ 138.002584][ T8900] ? __kasan_check_byte+0x12/0x40 [ 138.002618][ T8900] ? __lock_acquire+0x747/0x2de0 [ 138.002641][ T8900] ? __pfx__copy_from_iter+0x10/0x10 [ 138.002661][ T8900] ? check_noncircular+0xdb/0x150 [ 138.002703][ T8900] tun_get_user+0x265/0x4470 [ 138.002743][ T8900] ? aa_file_perm+0x18b/0x15f0 [ 138.002768][ T8900] ? aa_file_perm+0x4ed/0x15f0 [ 138.002786][ T8900] ? __pfx_tun_get_user+0x10/0x10 [ 138.002810][ T8900] ? __lock_acquire+0x747/0x2de0 [ 138.002833][ T8900] ? kstrtoull+0x137/0x1d0 [ 138.002865][ T8900] ? ref_tracker_alloc+0x172/0x530 [ 138.002887][ T8900] ? lock_acquire+0x115/0x350 [ 138.002928][ T8900] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 138.002954][ T8900] ? lock_acquire+0x115/0x350 [ 138.002975][ T8900] ? tun_get+0x1c/0x2f0 [ 138.003002][ T8900] ? tun_get+0x1c/0x2f0 [ 138.003022][ T8900] ? tun_get+0x1c/0x2f0 [ 138.003046][ T8900] tun_chr_write_iter+0x113/0x200 [ 138.003070][ T8900] vfs_write+0x612/0xba0 [ 138.003102][ T8900] ? __pfx_vfs_write+0x10/0x10 [ 138.003129][ T8900] ? __fget_files+0x3a2/0x420 [ 138.003150][ T8900] ? __fget_files+0x2a/0x420 [ 138.003175][ T8900] ? fdget+0x1ac/0x250 [ 138.003204][ T8900] ksys_write+0x150/0x270 [ 138.003231][ T8900] ? __pfx_ksys_write+0x10/0x10 [ 138.003269][ T8900] do_syscall_64+0x166/0x520 [ 138.003291][ T8900] ? trace_irq_disable+0x3b/0x140 [ 138.003316][ T8900] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.003335][ T8900] ? clear_bhb_loop+0x70/0xc0 [ 138.003358][ T8900] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.003376][ T8900] RIP: 0033:0x7f0ae31a8f19 [ 138.003392][ T8900] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 138.003405][ T8900] RSP: 002b:00007f0ae13f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 138.003431][ T8900] RAX: ffffffffffffffda RBX: 00007f0ae3425fa0 RCX: 00007f0ae31a8f19 [ 138.003450][ T8900] RDX: 000000000000008f RSI: 00002000000010c0 RDI: 0000000000000003 [ 138.003461][ T8900] RBP: 00007f0ae13f6090 R08: 0000000000000000 R09: 0000000000000000 [ 138.003472][ T8900] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 138.003483][ T8900] R13: 00007f0ae3426038 R14: 00007f0ae3425fa0 R15: 00007ffe6710a698 [ 138.003515][ T8900] [ 138.007266][ T8898] netlink: 12 bytes leftover after parsing attributes in process `syz.1.873'. [ 138.639448][ T8922] netlink: 44 bytes leftover after parsing attributes in process `syz.2.883'. [ 138.749402][ T8928] xt_HMARK: spi-set and port-set can't be combined [ 138.822692][ T8934] syzkaller1: entered promiscuous mode [ 138.822713][ T8934] syzkaller1: entered allmulticast mode [ 138.840262][ T8934] FAULT_INJECTION: forcing a failure. [ 138.840262][ T8934] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 138.840290][ T8934] CPU: 0 UID: 0 PID: 8934 Comm: syz.3.889 Not tainted syzkaller #0 PREEMPT(full) [ 138.840311][ T8934] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 138.840321][ T8934] Call Trace: [ 138.840329][ T8934] [ 138.840336][ T8934] dump_stack_lvl+0xe8/0x150 [ 138.840377][ T8934] should_fail_ex+0x3eb/0x540 [ 138.840406][ T8934] _copy_from_iter+0x1d3/0x1680 [ 138.840431][ T8934] ? lock_acquire+0x115/0x350 [ 138.840457][ T8934] ? __lock_acquire+0x747/0x2de0 [ 138.840480][ T8934] ? __pfx__copy_from_iter+0x10/0x10 [ 138.840518][ T8934] tun_get_user+0x51a/0x4470 [ 138.840562][ T8934] ? aa_file_perm+0x18b/0x15f0 [ 138.840582][ T8934] ? aa_file_perm+0x4ed/0x15f0 [ 138.840596][ T8934] ? __pfx_tun_get_user+0x10/0x10 [ 138.840613][ T8934] ? __lock_acquire+0x747/0x2de0 [ 138.840632][ T8934] ? kstrtoull+0x137/0x1d0 [ 138.840658][ T8934] ? ref_tracker_alloc+0x172/0x530 [ 138.840675][ T8934] ? lock_acquire+0x115/0x350 [ 138.840692][ T8934] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 138.840711][ T8934] ? lock_acquire+0x115/0x350 [ 138.840727][ T8934] ? tun_get+0x1c/0x2f0 [ 138.840747][ T8934] ? tun_get+0x1c/0x2f0 [ 138.840762][ T8934] ? tun_get+0x1c/0x2f0 [ 138.840781][ T8934] tun_chr_write_iter+0x113/0x200 [ 138.840800][ T8934] vfs_write+0x612/0xba0 [ 138.840826][ T8934] ? __pfx_vfs_write+0x10/0x10 [ 138.840847][ T8934] ? __fget_files+0x3a2/0x420 [ 138.840864][ T8934] ? __fget_files+0x2a/0x420 [ 138.840883][ T8934] ? fdget+0x1ac/0x250 [ 138.840906][ T8934] ksys_write+0x150/0x270 [ 138.840926][ T8934] ? __pfx_ksys_write+0x10/0x10 [ 138.840952][ T8934] do_syscall_64+0x166/0x520 [ 138.840969][ T8934] ? trace_irq_disable+0x3b/0x140 [ 138.840988][ T8934] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.841003][ T8934] ? clear_bhb_loop+0x70/0xc0 [ 138.841020][ T8934] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.841033][ T8934] RIP: 0033:0x7f5c945a8f19 [ 138.841049][ T8934] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 138.841062][ T8934] RSP: 002b:00007f5c9551b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 138.841078][ T8934] RAX: ffffffffffffffda RBX: 00007f5c94825fa0 RCX: 00007f5c945a8f19 [ 138.841088][ T8934] RDX: 000000000000008f RSI: 00002000000010c0 RDI: 0000000000000003 [ 138.841097][ T8934] RBP: 00007f5c9551b090 R08: 0000000000000000 R09: 0000000000000000 [ 138.841107][ T8934] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 138.841116][ T8934] R13: 00007f5c94826038 R14: 00007f5c94825fa0 R15: 00007ffcfc16fa88 [ 138.841142][ T8934] [ 139.038012][ T8939] netlink: 'syz.1.888': attribute type 11 has an invalid length. [ 139.167585][ T8932] netlink: 'syz.1.888': attribute type 2 has an invalid length. [ 139.167607][ T8932] netlink: 'syz.1.888': attribute type 8 has an invalid length. [ 139.332425][ T8950] netlink: 'syz.0.894': attribute type 3 has an invalid length. [ 139.333277][ T8951] netlink: 'syz.0.894': attribute type 3 has an invalid length. [ 139.500761][ T8968] pimreg3: entered allmulticast mode [ 139.658261][ T8972] x_tables: duplicate underflow at hook 3 [ 139.755258][ T8975] netlink: 'syz.1.903': attribute type 7 has an invalid length. [ 139.755277][ T8975] netlink: 'syz.1.903': attribute type 8 has an invalid length. [ 139.930941][ T8982] netlink: 'syz.1.906': attribute type 2 has an invalid length. [ 140.159213][ T8986] netlink: 'syz.4.908': attribute type 16 has an invalid length. [ 140.159315][ T8986] lo: left promiscuous mode [ 140.161673][ T8986] tunl0: left promiscuous mode [ 140.164908][ T8986] gre0: left promiscuous mode [ 140.191891][ T8987] net_ratelimit: 59 callbacks suppressed [ 140.191910][ T8987] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 140.192262][ T8988] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 140.240633][ T8986] gretap0: left promiscuous mode [ 140.259952][ T8986] erspan0: left promiscuous mode [ 140.267186][ T8986] ip_vti0: left promiscuous mode [ 140.304252][ T8986] veth0_to_bond: left allmulticast mode [ 140.360515][ T8986] 8021q: adding VLAN 0 to HW filter on device bond1 [ 140.402940][ T8989] bond_slave_0: mtu greater than device maximum [ 140.658040][ T9015] ip_tables: iptables: counters copy to user failed while replacing table [ 140.679546][ T1025] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 140.680951][ T1025] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 140.715073][ T5863] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 140.855102][ T50] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 140.855235][ T50] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 140.883719][ T2028] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 140.937489][ T2028] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 141.216569][ T5758] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 141.334332][ T5737] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 141.574824][ T1025] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 141.575807][ T12] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 141.575842][ T12] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 141.575871][ T12] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 141.609745][ T9060] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 141.610998][ T9060] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 141.640036][ T5758] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 141.861038][ T9073] openvswitch: netlink: Missing valid actions attribute. [ 141.861059][ T9073] openvswitch: netlink: Actions may not be safe on all matching packets [ 143.229877][ T8993] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 143.398966][ T9077] __nla_validate_parse: 16 callbacks suppressed [ 143.398985][ T9077] netlink: 32 bytes leftover after parsing attributes in process `syz.1.929'. [ 143.469077][ T9081] team_slave_0: entered allmulticast mode [ 143.475431][ T9085] netlink: 4 bytes leftover after parsing attributes in process `syz.1.932'. [ 143.475470][ T9085] netlink: 4 bytes leftover after parsing attributes in process `syz.1.932'. [ 143.506565][ T9082] netlink: 8 bytes leftover after parsing attributes in process `syz.4.928'. [ 143.619947][ T9082] validate_nla: 4 callbacks suppressed [ 143.619967][ T9082] netlink: 'syz.4.928': attribute type 32 has an invalid length. [ 143.619979][ T9082] netlink: 8 bytes leftover after parsing attributes in process `syz.4.928'. [ 143.669446][ T9082] bond4: Setting coupled_control to off (0) [ 143.776399][ T9101] netlink: 20 bytes leftover after parsing attributes in process `syz.2.935'. [ 143.800455][ T9091] netlink: 9 bytes leftover after parsing attributes in process `syz.1.934'. [ 143.815862][ T9091] gretap0: entered promiscuous mode [ 143.821463][ T9101] ip_tables: iptables: counters copy to user failed while replacing table [ 143.846352][ T9109] netlink: 'syz.0.936': attribute type 3 has an invalid length. [ 143.849136][ T9091] netlink: 5 bytes leftover after parsing attributes in process `syz.1.934'. [ 143.849237][ T9091] 0ªî{X¹¦: renamed from gretap0 [ 143.859905][ T9091] 0ªî{X¹¦: left promiscuous mode [ 143.859927][ T9091] 0ªî{X¹¦: entered allmulticast mode [ 143.868517][ T9091] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 143.916723][ T9109] netlink: 'syz.0.936': attribute type 3 has an invalid length. [ 143.986998][ T9105] netlink: 8 bytes leftover after parsing attributes in process `syz.4.937'. [ 144.176204][ T9132] netlink: 12 bytes leftover after parsing attributes in process `syz.0.940'. [ 144.240863][ T9135] xfrm1: entered promiscuous mode [ 144.240883][ T9135] xfrm1: entered allmulticast mode [ 144.424002][ T9145] netlink: 'syz.2.945': attribute type 3 has an invalid length. [ 144.634190][ T9166] syzkaller0: entered promiscuous mode [ 144.634212][ T9166] syzkaller0: entered allmulticast mode [ 144.757675][ T9172] tipc: Started in network mode [ 144.757704][ T9172] tipc: Node identity ac14140f, cluster identity 4711 [ 144.757993][ T9172] tipc: New replicast peer: 255.255.255.255 [ 144.758354][ T9172] tipc: Enabled bearer , priority 10 [ 144.834488][ T9179] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 144.896793][ T9187] netlink: 'syz.1.959': attribute type 1 has an invalid length. [ 145.017300][ T9187] bridge2: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 145.078532][ T9200] xt_bpf: check failed: parse error [ 145.754757][ T5758] tipc: Node number set to 2886997007 [ 146.213182][ T9281] IPVS: stopping master sync thread 6369 ... [ 146.565157][ T9300] netlink: 'syz.2.983': attribute type 7 has an invalid length. [ 146.565177][ T9300] netlink: 'syz.2.983': attribute type 8 has an invalid length. [ 146.715364][ T9310] net_ratelimit: 3 callbacks suppressed [ 146.715383][ T9310] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 146.759918][ T9308] TC_ACT_REPEAT abuse ? [ 146.818200][ T9316] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 146.940120][ T9316] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 146.956135][ T9317] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 146.985927][ T9325] h: entered promiscuous mode [ 147.021982][ T9325] pimreg: entered allmulticast mode [ 147.136894][ T9330] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 147.176627][ T9333] syzkaller1: entered promiscuous mode [ 147.176650][ T9333] syzkaller1: entered allmulticast mode [ 147.442729][ T9353] netlink: set zone limit has 4 unknown bytes [ 147.716251][ T9367] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 147.917935][ T9370] syzkaller1: entered promiscuous mode [ 147.917958][ T9370] syzkaller1: entered allmulticast mode [ 148.156877][ T9398] xt_LOG: level 8 >= 8 [ 148.159753][ T9400] xt_LOG: level 8 >= 8 [ 148.476767][ T9425] syz_tun: entered allmulticast mode [ 149.328829][ T9461] __nla_validate_parse: 33 callbacks suppressed [ 149.328848][ T9461] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1027'. [ 149.455750][ T9465] 8021q: VLANs not supported on syzkaller0 [ 149.697481][ T9477] bridge3: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 149.803115][ T9484] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1035'. [ 149.982156][ T9492] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1037'. [ 150.142820][ T9509] netlink: 'syz.4.1044': attribute type 126 has an invalid length. [ 150.177829][ T9500] Cannot find set identified by id 0 to match [ 150.212824][ T9511] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1043'. [ 150.295296][ T9520] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1047'. [ 150.457466][ T9529] netlink: 13 bytes leftover after parsing attributes in process `syz.2.1049'. [ 150.533814][ T9534] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1051'. [ 150.568228][ T9536] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1050'. [ 150.572743][ T9534] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1051'. [ 150.594011][ T9536] netlink: 256 bytes leftover after parsing attributes in process `syz.3.1050'. [ 150.614226][ T9536] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check. [ 150.667743][ T9536] team0: Device xfrm0 is of different type [ 150.705710][ T9538] bond4: Removing last ns target with arp_interval on [ 150.706862][ T9540] tipc: Started in network mode [ 150.706889][ T9540] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 150.707062][ T9540] tipc: Enabled bearer , priority 0 [ 150.782850][ T9544] ip_tables: iptables: counters copy to user failed while replacing table [ 150.795419][ T9544] mac80211_hwsim hwsim7 syzkaller1: entered promiscuous mode [ 150.795442][ T9544] mac80211_hwsim hwsim7 syzkaller1: entered allmulticast mode [ 150.876246][ T9544] bond5: option lp_interval: invalid value (0) [ 150.876266][ T9544] bond5: option lp_interval: allowed values 1 - 2147483647 [ 150.878684][ T9544] bond5 (unregistering): Released all slaves [ 151.304112][ T9580] syzkaller1: entered promiscuous mode [ 151.304135][ T9580] syzkaller1: entered allmulticast mode [ 151.757539][ T9619] mac80211_hwsim hwsim7 syzkaller1: left promiscuous mode [ 151.757564][ T9619] mac80211_hwsim hwsim7 syzkaller1: left allmulticast mode [ 151.823643][ T5863] tipc: Node number set to 11578026 [ 152.275065][ T5736] ip6_tnl_xmit_ctl: 2 callbacks suppressed [ 152.275084][ T5736] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 152.294383][ T5736] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 152.401185][ T9655] netlink: 'syz.2.1083': attribute type 1 has an invalid length. [ 152.446941][ T9655] 8021q: adding VLAN 0 to HW filter on device bond3 [ 152.514392][ T9660] bond3: (slave geneve3): making interface the new active one [ 152.516330][ T9660] bond3: (slave geneve3): Enslaving as an active interface with an up link [ 152.663854][ C1] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 152.688851][ T9671] netlink: 'syz.3.1085': attribute type 9 has an invalid length. [ 152.706400][ T9671] veth0_to_bridge: Caught tx_queue_len zero misconfig [ 152.765998][ T8414] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 152.844756][ T8414] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 153.239460][ T9698] netlink: 'syz.4.1094': attribute type 1 has an invalid length. [ 153.243046][ T9698] netlink: 'syz.4.1094': attribute type 2 has an invalid length. [ 153.303847][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 153.672164][ T9734] ip6gre2: entered promiscuous mode [ 153.672187][ T9734] ip6gre2: entered allmulticast mode [ 153.711160][ T9736] veth2: entered promiscuous mode [ 153.711180][ T9736] veth2: entered allmulticast mode [ 154.017546][ T9757] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 154.018276][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 154.074591][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 154.074846][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 154.108017][ T5736] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 154.273124][ T9770] ip6_vti0: Caught tx_queue_len zero misconfig [ 154.537919][ T9782] IPv6: sit3: Disabled Multicast RS [ 154.762060][ T9789] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 154.872262][ T9797] netlink: 'syz.0.1123': attribute type 1 has an invalid length. [ 154.917901][ T9797] bond5: entered promiscuous mode [ 154.918338][ T9797] 8021q: adding VLAN 0 to HW filter on device bond5 [ 155.088281][ T9808] __nla_validate_parse: 15 callbacks suppressed [ 155.088301][ T9808] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1124'. [ 155.127441][ T9811] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.1127'. [ 155.141436][ T9808] mac80211_hwsim hwsim9 wlan1: entered promiscuous mode [ 155.146053][ T8414] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 155.151495][ T9813] ip6tnl0: Caught tx_queue_len zero misconfig [ 155.160109][ T9811] lo speed is unknown, defaulting to 1000 [ 155.167991][ T9811] lo speed is unknown, defaulting to 1000 [ 155.168775][ T9811] lo speed is unknown, defaulting to 1000 [ 155.178366][ T9298] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 155.178617][ T9298] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 155.223716][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 155.272315][ T9821] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1131'. [ 155.285353][ T9824] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1131'. [ 155.491305][ T9811] infiniband syz0: set active [ 155.491361][ T5758] lo speed is unknown, defaulting to 1000 [ 155.498736][ T9811] infiniband syz0: added lo [ 155.544831][ T9811] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 155.544865][ T9811] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 155.544903][ T9811] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 155.701720][ T9811] RDS/IB: syz0: added [ 155.701778][ T9811] smc: adding ib device syz0 with port count 1 [ 155.701796][ T9811] smc: ib device syz0 port 1 has no pnetid [ 155.701875][ T5736] lo speed is unknown, defaulting to 1000 [ 155.727904][ T9811] lo speed is unknown, defaulting to 1000 [ 156.183873][ T5758] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 156.299377][ T9811] lo speed is unknown, defaulting to 1000 [ 156.694378][ T9868] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1142'. [ 156.701137][ T9868] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1142'. [ 156.702704][ T9868] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1142'. [ 156.741175][ T9872] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1142'. [ 156.750840][ T9871] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1142'. [ 157.252293][ T9894] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1147'. [ 157.321929][ T9896] netlink: 'syz.1.1148': attribute type 1 has an invalid length. [ 157.321952][ T9896] netlink: 'syz.1.1148': attribute type 2 has an invalid length. [ 157.322271][ T9811] lo speed is unknown, defaulting to 1000 [ 157.352727][ T9894] xt_REDIRECT: bad rangesize 26624. [ 157.630643][ T9910] bond0: (slave dummy0): Error: Device can not be enslaved while up [ 157.740477][ T9913] 0ªX¹¦Dö»: renamed from gretap0 (while UP) [ 157.762037][ T9913] 0ªX¹¦Dö»: entered allmulticast mode [ 157.888837][ T9923] bridge0: entered promiscuous mode [ 157.888874][ T9923] bridge0: entered allmulticast mode [ 158.092953][ T9811] lo speed is unknown, defaulting to 1000 [ 158.115618][ T30] audit: type=1800 audit(1794278319.548:3): pid=9932 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1159" name="memory.events" dev="tmpfs" ino=1244 res=0 errno=-22 [ 158.489441][ T9952] pimreg: entered allmulticast mode [ 158.520459][ T9951] pimreg: left allmulticast mode [ 158.630045][ T9811] lo speed is unknown, defaulting to 1000 [ 158.783311][ T5637] Bluetooth: hci1: connection err: -111 [ 159.200674][ T9986] netlink: 'syz.3.1176': attribute type 1 has an invalid length. [ 159.304861][ T8414] net_ratelimit: 10 callbacks suppressed [ 159.304881][ T8414] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 159.338922][ T9986] 8021q: adding VLAN 0 to HW filter on device bond4 [ 159.372717][ T9994] netlink: 'syz.3.1176': attribute type 1 has an invalid length. [ 159.412163][ T9988] bond4: (slave geneve3): making interface the new active one [ 159.422683][ T9988] bond4: (slave geneve3): Enslaving as an active interface with an up link [ 159.427629][ T9992] veth0: entered promiscuous mode [ 159.584971][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 159.585394][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 159.626899][T10002] xt_hashlimit: size too large, truncated to 1048576 [ 159.709433][T10003] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.760956][T10003] bridge_slave_0 (unregistering): left allmulticast mode [ 159.760984][T10003] bridge_slave_0 (unregistering): left promiscuous mode [ 159.761072][T10003] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.118011][T10013] ip_tables: iptables: counters copy to user failed while replacing table [ 160.138715][ T9990] veth0: left promiscuous mode [ 160.189546][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 160.349261][ T2028] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 160.438251][T10039] netlink: 'syz.0.1190': attribute type 10 has an invalid length. [ 160.438656][T10039] veth1_vlan: left promiscuous mode [ 160.451375][T10039] macvlan1: entered promiscuous mode [ 160.451397][T10039] macvlan1: entered allmulticast mode [ 160.500086][T10039] veth1_vlan: entered promiscuous mode [ 160.500110][T10039] veth1_vlan: entered allmulticast mode [ 160.539862][T10039] veth1_vlan: left allmulticast mode [ 160.540110][T10039] veth1_vlan: left promiscuous mode [ 160.686097][ T6131] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 160.686380][ T6131] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 160.924203][T10065] openvswitch: netlink: IP tunnel dst address not specified [ 161.019950][T10068] __nla_validate_parse: 7 callbacks suppressed [ 161.019969][T10068] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1198'. [ 161.027288][T10069] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1197'. [ 161.055599][T10068] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1198'. [ 161.079977][T10068] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1198'. [ 161.080004][T10068] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1198'. [ 161.215955][T10078] IPVS: ovf: TCP 172.20.20.170:21 - no destination available [ 161.256520][T10082] netlink: 256 bytes leftover after parsing attributes in process `syz.4.1202'. [ 161.256879][T10083] netlink: 256 bytes leftover after parsing attributes in process `syz.4.1202'. [ 162.051619][T10109] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1209'. [ 162.432446][T10118] netlink: 'syz.4.1211': attribute type 15 has an invalid length. [ 162.942489][T10138] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1216'. [ 163.042671][T10124] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1213'. [ 163.880568][T10166] xt_TCPMSS: Only works on TCP SYN packets [ 163.985408][T10170] syzkaller1: entered promiscuous mode [ 163.985598][T10170] syzkaller1: entered allmulticast mode [ 164.075023][T10170] netlink: 'syz.2.1224': attribute type 11 has an invalid length. [ 164.604968][ T2028] net_ratelimit: 11 callbacks suppressed [ 164.604988][ T2028] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 165.106237][ T9291] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 165.106483][ T9291] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 165.247149][T10212] pim6reg: entered allmulticast mode [ 165.768159][T10231] netlink: 'syz.1.1239': attribute type 4 has an invalid length. [ 165.798536][T10231] netlink: 'syz.1.1239': attribute type 4 has an invalid length. [ 165.829744][T10233] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 165.870627][ T8414] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 166.104112][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 166.203985][T10242] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 166.224666][ T9291] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 166.224912][ T9291] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 166.475321][T10253] __nla_validate_parse: 5 callbacks suppressed [ 166.475341][T10253] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1244'. [ 166.537254][ T5758] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 166.962046][ T2028] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 167.192169][T10273] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1248'. [ 167.606441][T10297] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1252'. [ 167.665491][T10300] netlink: 'syz.1.1253': attribute type 3 has an invalid length. [ 167.665511][T10300] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1253'. [ 167.692587][T10301] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1252'. [ 167.869292][T10311] hsr0: entered allmulticast mode [ 167.869314][T10311] hsr_slave_0: entered allmulticast mode [ 167.869331][T10311] hsr_slave_1: entered allmulticast mode [ 167.869724][T10312] hsr0: entered promiscuous mode [ 167.879288][T10314] netlink: 144 bytes leftover after parsing attributes in process `syz.2.1257'. [ 167.919334][T10313] bridge0: port 3(veth1_to_bridge) entered blocking state [ 167.919838][T10313] bridge0: port 3(veth1_to_bridge) entered disabled state [ 167.920136][T10317] netlink: 88 bytes leftover after parsing attributes in process `syz.0.1255'. [ 167.920172][T10313] veth1_to_bridge: entered allmulticast mode [ 167.932923][T10318] netlink: 'syz.0.1255': attribute type 7 has an invalid length. [ 167.932942][T10318] netlink: 'syz.0.1255': attribute type 5 has an invalid length. [ 167.932953][T10318] netlink: 17 bytes leftover after parsing attributes in process `syz.0.1255'. [ 167.935193][T10313] veth1_to_bridge: entered promiscuous mode [ 167.955640][T10309] hsr0: left promiscuous mode [ 167.997872][T10309] hsr0: left allmulticast mode [ 167.997893][T10309] hsr_slave_0: left allmulticast mode [ 167.997907][T10309] hsr_slave_1: left allmulticast mode [ 168.048394][T10321] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1258'. [ 168.051420][T10321] netlink: 'syz.3.1258': attribute type 21 has an invalid length. [ 168.276054][T10327] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1262'. [ 168.663566][ C1] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 168.813207][T10348] sctp: [Deprecated]: syz.2.1267 (pid 10348) Use of int in max_burst socket option. [ 168.813207][T10348] Use struct sctp_assoc_value instead [ 169.157290][T10368] x_tables: duplicate underflow at hook 2 [ 169.224220][ T5636] Bluetooth: hci4: command 0x0405 tx timeout [ 169.278769][T10372] netlink: 'syz.2.1270': attribute type 1 has an invalid length. [ 169.612010][T10372] bond4: entered promiscuous mode [ 169.612710][T10372] 8021q: adding VLAN 0 to HW filter on device bond4 [ 169.613734][T10374] bond4: entered allmulticast mode [ 169.788406][T10378] bond4: (slave bridge4): making interface the new active one [ 169.788431][T10378] bridge4: entered promiscuous mode [ 169.788629][T10378] bridge4: entered allmulticast mode [ 169.789623][T10378] bond4: (slave bridge4): Enslaving as an active interface with an up link [ 169.946290][T10388] netlink: 'syz.1.1275': attribute type 49 has an invalid length. [ 170.106426][ T8414] net_ratelimit: 9 callbacks suppressed [ 170.106444][ T8414] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 170.151163][T10388] ip6gretap0: entered promiscuous mode [ 170.151186][T10388] ip6gretap0: entered allmulticast mode [ 170.260668][T10400] tipc: New replicast peer: 172.20.20.187 [ 170.265525][T10400] tipc: Enabled bearer , priority 10 [ 170.299604][T10400] tipc: Enabling of bearer rejected, failed to enable media [ 170.564839][T10413] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 170.583608][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 170.594175][T10412] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 170.638511][T10411] netlink: 'syz.1.1280': attribute type 2 has an invalid length. [ 170.704919][ T9291] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 170.705164][ T9291] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 171.146189][ T8414] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 171.600803][T10452] __nla_validate_parse: 6 callbacks suppressed [ 171.600822][T10452] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1289'. [ 171.626432][T10452] Bluetooth: MGMT ver 1.23 [ 171.671899][T10452] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1289'. [ 171.805014][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 171.805263][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 171.863919][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 171.864508][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 172.090169][T10472] netlink: 'syz.1.1293': attribute type 4 has an invalid length. [ 172.125032][T10472] netlink: 'syz.1.1293': attribute type 4 has an invalid length. [ 172.942279][T10504] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1302'. [ 173.300730][T10530] tls_set_device_offload: netdev not found [ 173.303512][T10530] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1308'. [ 173.366328][T10530] netlink: 'syz.1.1308': attribute type 11 has an invalid length. [ 173.433061][T10535] syzkaller1: entered promiscuous mode [ 173.433083][T10535] syzkaller1: entered allmulticast mode [ 173.570064][T10539] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1310'. [ 173.599394][T10545] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1312'. [ 173.909059][T10555] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1316'. [ 173.943859][T10555] 8021q: adding VLAN 0 to HW filter on device bond5 [ 174.010386][T10556] netlink: 'syz.3.1315': attribute type 1 has an invalid length. [ 174.317521][T10578] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1323'. [ 174.317547][T10578] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1323'. [ 174.520506][T10583] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1325'. [ 174.520587][T10583] dummy0: Caught tx_queue_len zero misconfig [ 175.114175][ T6128] net_ratelimit: 10 callbacks suppressed [ 175.114193][ T6128] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 175.114431][ T6128] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 175.304869][ T5736] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 175.371056][T10612] netlink: 'syz.3.1331': attribute type 11 has an invalid length. [ 175.465429][T10618] netlink: 'syz.1.1334': attribute type 1 has an invalid length. [ 175.471642][T10617] netlink: 'syz.4.1333': attribute type 2 has an invalid length. [ 175.471699][T10617] netlink: 'syz.4.1333': attribute type 11 has an invalid length. [ 175.506459][T10617] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 175.506659][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 175.507050][T10620] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 175.626259][ T5863] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 175.728637][T10626] erspan0: entered promiscuous mode [ 175.728809][T10626] vlan3: entered promiscuous mode [ 176.214990][ T6131] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 176.215248][ T6131] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 176.346553][ T8414] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 176.504793][T10656] ip6gre0: Caught tx_queue_len zero misconfig [ 176.780103][T10667] netlink: 'syz.3.1347': attribute type 1 has an invalid length. [ 176.780123][T10667] __nla_validate_parse: 10 callbacks suppressed [ 176.780135][T10667] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1347'. [ 176.780149][T10667] nbd: must specify at least one socket [ 176.798430][T10671] veth0: entered promiscuous mode [ 176.800159][T10671] veth1_to_bridge: entered promiscuous mode [ 176.805239][T10671] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1349'. [ 176.805257][T10671] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1349'. [ 176.805272][T10671] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1349'. [ 176.807500][T10669] veth1_to_bridge: left promiscuous mode [ 176.807560][T10669] veth0: left promiscuous mode [ 176.893315][T10667] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1347'. [ 176.911313][T10667] netlink: 'syz.3.1347': attribute type 10 has an invalid length. [ 176.911332][T10667] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1347'. [ 177.265861][T10687] netlink: 'syz.3.1355': attribute type 1 has an invalid length. [ 177.325574][T10693] ip6t_REJECT: ECHOREPLY is not supported [ 177.443308][T10687] 8021q: adding VLAN 0 to HW filter on device bond5 [ 177.846414][T10707] Cannot find del_set index 3 as target [ 178.102017][T10717] tipc: Enabling of bearer rejected, failed to enable media [ 178.102889][T10717] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1360'. [ 178.339997][T10723] netlink: 'syz.4.1364': attribute type 1 has an invalid length. [ 178.632532][T10728] bond6: (slave bridge2): making interface the new active one [ 178.641543][T10728] bond6: (slave bridge2): Enslaving as an active interface with an up link [ 179.276001][T10765] vcan0: tx drop: invalid sa for name 0x0000000000000002 [ 179.313646][T10768] netlink: 184 bytes leftover after parsing attributes in process `syz.4.1376'. [ 179.546577][T10778] Unsupported ieee802154 address type: 0 [ 179.872282][T10789] syzkaller0: entered promiscuous mode [ 179.872316][T10789] syzkaller0: entered allmulticast mode [ 180.236824][T10803] net_ratelimit: 13 callbacks suppressed [ 180.236844][T10803] skbuff: bad partial csum: csum=65535/2 headroom=178 headlen=65543 [ 180.508058][ T8414] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 180.652579][T10814] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1391'. [ 180.654793][ T6128] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 180.655354][ T6128] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 180.791398][T10820] netlink: 'syz.3.1392': attribute type 1 has an invalid length. [ 180.792284][T10820] netlink: 'syz.3.1392': attribute type 1 has an invalid length. [ 180.793148][T10820] netlink: 'syz.3.1392': attribute type 1 has an invalid length. [ 180.808025][T10820] netlink: 'syz.3.1392': attribute type 1 has an invalid length. [ 180.820077][T10820] netlink: 'syz.3.1392': attribute type 1 has an invalid length. [ 180.820931][T10820] netlink: 'syz.3.1392': attribute type 1 has an invalid length. [ 180.821754][T10820] netlink: 'syz.3.1392': attribute type 1 has an invalid length. [ 180.822574][T10820] netlink: 'syz.3.1392': attribute type 1 has an invalid length. [ 180.851400][T10820] netlink: 'syz.3.1392': attribute type 1 has an invalid length. [ 180.865057][T10820] netlink: 'syz.3.1392': attribute type 1 has an invalid length. [ 181.545135][ T5736] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 181.710304][ T5758] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 181.804548][ T6128] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 181.805151][ T6128] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 181.844753][T10849] netlink: ct family unspecified [ 181.914318][T10853] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 181.915439][T10853] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1404'. [ 181.958961][T10853] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1404'. [ 183.038422][T10893] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1412'. [ 183.530372][T10909] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1415'. [ 183.530404][T10909] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1415'. [ 183.532800][T10909] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1415'. [ 183.532828][T10909] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1415'. [ 183.608841][T10909] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1415'. [ 183.608872][T10909] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1415'. [ 183.609548][T10909] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1415'. [ 184.229238][T10934] 8021q: adding VLAN 0 to HW filter on device bond7 [ 185.315685][ T50] net_ratelimit: 15 callbacks suppressed [ 185.315706][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 185.316395][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 185.710349][ T8414] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 185.787201][ T5863] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 186.149010][T10988] ip_tables: iptables: counters copy to user failed while replacing table [ 186.496516][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 186.497167][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 186.627892][T11001] validate_nla: 64 callbacks suppressed [ 186.627912][T11001] netlink: 'syz.4.1434': attribute type 2 has an invalid length. [ 186.759977][ T5737] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 187.030831][T11003] xt_CONNSECMARK: invalid mode: 0 [ 187.282226][T11011] netlink: 'syz.3.1438': attribute type 1 has an invalid length. [ 187.282246][T11011] netlink: 'syz.3.1438': attribute type 2 has an invalid length. [ 187.282258][T11011] __nla_validate_parse: 10 callbacks suppressed [ 187.282268][T11011] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1438'. [ 187.399146][T11013] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1436'. [ 187.505363][T11019] netlink: 'syz.3.1438': attribute type 1 has an invalid length. [ 187.505384][T11019] netlink: 'syz.3.1438': attribute type 2 has an invalid length. [ 187.505396][T11019] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1438'. [ 187.678010][ T6131] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 187.678681][ T6131] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 187.742170][T11017] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1437'. [ 187.927388][T11008] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 187.933874][T11008] batman_adv: batadv0: Adding interface: gretap1 [ 187.933891][T11008] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 187.933919][T11008] batman_adv: batadv0: Interface activated: gretap1 [ 188.367194][T11032] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1441'. [ 188.367229][T11032] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1441'. [ 188.436739][T11032] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1441'. [ 188.436771][T11032] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1441'. [ 188.764381][T11037] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1442'. [ 188.764418][T11037] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1442'. [ 188.833599][ T9291] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 188.833643][ T9291] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 188.833674][ T9291] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 188.833704][ T9291] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 189.029161][T11051] netlink: 'syz.3.1444': attribute type 8 has an invalid length. [ 190.172618][T11070] bridge4: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 190.269808][T11080] bridge4: entered promiscuous mode [ 190.270831][T11080] bridge4: entered allmulticast mode [ 190.613904][T11086] net_ratelimit: 9 callbacks suppressed [ 190.613924][T11086] ip_tables: iptables: counters copy to user failed while replacing table [ 190.652228][T11098] IPVS: ovf: TCP 172.20.20.170:21 - no destination available [ 190.820614][T11093] bridge5: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 190.912460][ T5736] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 191.276228][ T6131] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 191.276888][ T6131] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 191.718146][T11112] bond8: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 191.874935][ T5758] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 191.881129][T11112] bond8 (unregistering): Released all slaves [ 191.945814][ T5736] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 192.524939][ T6131] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 192.525591][ T6131] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 192.745489][T11128] __nla_validate_parse: 3 callbacks suppressed [ 192.745510][T11128] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1462'. [ 192.973141][T11136] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_team, syncid = 4, id = 0 [ 193.007611][ T5736] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 193.130704][T11129] netlink: 576 bytes leftover after parsing attributes in process `syz.2.1461'. [ 194.269492][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.289570][T11153] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1469'. [ 195.717673][T11153] bond0: (slave bond_slave_0): Releasing backup interface [ 195.762242][T11181] net_ratelimit: 9 callbacks suppressed [ 195.762262][T11181] ip_tables: iptables: counters copy to user failed while replacing table [ 195.805452][T11153] bond_slave_0: entered promiscuous mode [ 195.805649][T11153] bond_slave_0: entered allmulticast mode [ 195.884919][T11164] IPVS: Unknown mcast interface: vcan0 [ 195.942572][T11167] erspan0: entered promiscuous mode [ 195.986253][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 195.986932][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 196.104966][ T5736] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 196.132391][T11167] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1470'. [ 196.144939][ T5758] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 196.344104][ T5636] Bluetooth: hci1: command 0x0406 tx timeout [ 196.344184][ T5636] Bluetooth: hci2: command 0x0406 tx timeout [ 196.344229][ T5636] Bluetooth: hci3: command 0x0406 tx timeout [ 197.106903][ T62] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 197.107575][ T62] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 197.144720][ T8414] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 197.636411][T11206] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1480'. [ 197.636439][T11206] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1480'. [ 197.702547][T11206] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 197.937881][T11211] netlink: 'syz.1.1482': attribute type 4 has an invalid length. [ 197.937904][T11211] netlink: 17 bytes leftover after parsing attributes in process `syz.1.1482'. [ 198.148776][T11214] tipc: Can't bind to reserved service type 2 [ 198.185397][ T5736] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 198.743661][ C1] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 198.827982][T11228] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1487'. [ 198.971402][T11233] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1487'. [ 199.320257][T11243] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1487'. [ 199.593409][T11228] 8021q: adding VLAN 0 to HW filter on device bond6 [ 199.674361][T11233] macvlan4: entered promiscuous mode [ 199.674549][T11233] macvlan4: entered allmulticast mode [ 199.746003][T11243] macvlan5: entered promiscuous mode [ 199.746193][T11243] macvlan5: entered allmulticast mode [ 200.332346][T11265] netlink: 'syz.4.1491': attribute type 11 has an invalid length. [ 200.448117][T11265] netlink: 'syz.4.1491': attribute type 1 has an invalid length. [ 200.462915][T11269] netlink: 'syz.0.1492': attribute type 1 has an invalid length. [ 200.462935][T11269] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1492'. [ 201.058826][T11265] bond8: entered promiscuous mode [ 201.061748][T11265] 8021q: adding VLAN 0 to HW filter on device bond8 [ 201.224521][T11270] bond8: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 201.224551][T11270] bond8: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 201.224566][T11270] bond8: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 201.306301][ T8414] net_ratelimit: 10 callbacks suppressed [ 201.306323][ T8414] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 201.586093][T11283] bond8: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 201.586119][T11283] bond8: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 201.747786][ T6128] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 201.748436][ T6128] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 202.321563][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 202.345380][ T5736] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 202.916074][ T9298] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 202.918542][ T9298] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 203.335129][T11314] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1501'. [ 203.385969][ T8414] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 203.431477][ T5758] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 203.811259][T11328] netlink: 256 bytes leftover after parsing attributes in process `syz.2.1503'. [ 203.895309][T11328] netlink: 'syz.2.1503': attribute type 2 has an invalid length. [ 204.047872][T11325] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 204.086201][ T85] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 204.764311][T11340] tipc: Enabling of bearer rejected, failed to enable media [ 204.918306][T11339] netlink: 'syz.1.1506': attribute type 1 has an invalid length. [ 204.918329][T11339] netlink: 'syz.1.1506': attribute type 2 has an invalid length. [ 204.918342][T11339] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1506'. [ 204.986075][T11339] af_packet: tpacket_rcv: packet too big, clamped from 54 to 4294967286. macoff=82 [ 205.143593][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 205.266208][T11345] xt_addrtype: ipv6 does not support BROADCAST matching [ 205.274649][T11346] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 205.364118][T11344] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 205.592718][T11355] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1509'. [ 206.423763][ C0] net_ratelimit: 8 callbacks suppressed [ 206.423786][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 206.512663][ T5736] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 206.522864][ T6131] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 206.543028][ T6131] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 206.920618][T11374] netlink: 'syz.0.1513': attribute type 3 has an invalid length. [ 206.941671][T11374] hsr0: entered allmulticast mode [ 206.941693][T11374] hsr_slave_0: entered allmulticast mode [ 206.942034][T11374] hsr_slave_1: entered allmulticast mode [ 206.967949][T11374] hsr0: entered promiscuous mode [ 207.177589][T11376] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1513'. [ 207.197949][T11376] hsr_slave_0: left promiscuous mode [ 207.228266][T11376] hsr_slave_1: left promiscuous mode [ 207.673899][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 207.674561][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 207.797807][ T8414] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 208.339408][T11390] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1516'. [ 208.471610][T11396] RDS: rds_bind could not find a transport for 400:0:1200:0:1030:0:ffff:ffff, load rds_tcp or rds_rdma? [ 208.487020][ T5758] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 208.794444][ T9298] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 208.795105][ T9298] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 209.127982][T11399] netlink: 'syz.0.1521': attribute type 1 has an invalid length. [ 209.128005][T11399] netlink: 'syz.0.1521': attribute type 2 has an invalid length. [ 210.647073][T11427] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1527'. [ 211.474919][T11434] net_ratelimit: 8 callbacks suppressed [ 211.474939][T11434] ip_tables: iptables: counters copy to user failed while replacing table [ 211.544438][ T5863] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 211.993254][ T5737] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 212.179177][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 212.179816][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 212.345020][T11463] netlink: 'syz.2.1534': attribute type 32 has an invalid length. [ 212.345044][T11463] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1534'. [ 212.465817][T11466] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1534'. [ 213.059953][ T5758] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 213.065368][ T5737] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 213.280620][ T9298] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 213.281268][ T9298] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 214.076097][T11496] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 214.303771][T11501] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1543'. [ 215.541239][T11513] bridge5: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 216.564749][T11540] netlink: 'syz.0.1549': attribute type 1 has an invalid length. [ 216.714500][ T9298] net_ratelimit: 11 callbacks suppressed [ 216.714522][ T9298] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 216.715167][ T9298] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 217.344510][T11540] 8021q: adding VLAN 0 to HW filter on device bond6 [ 217.422206][ T5736] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 217.498766][T11534] bond6: (slave gretap0): making interface the new active one [ 217.514266][T11534] bond6: (slave gretap0): Enslaving as an active interface with an up link [ 217.892091][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 217.892746][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 217.910936][ T5758] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 217.960507][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 217.964379][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 218.121842][T11559] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1553'. [ 218.455168][ T8414] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 218.830023][T11579] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1556'. [ 218.850866][T11578] netlink: 'syz.0.1557': attribute type 4 has an invalid length. [ 218.977001][T11584] netlink: 'syz.0.1557': attribute type 4 has an invalid length. [ 219.044468][ T6128] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 219.667432][T11591] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1559'. [ 220.639569][T11597] bond5 (unregistering): Released all slaves [ 221.316332][T11617] TCP: TCP_TX_DELAY enabled [ 221.389900][T11619] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1565'. [ 221.392020][T11619] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1565'. [ 221.791547][ T9298] net_ratelimit: 11 callbacks suppressed [ 221.791569][ T9298] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 221.857135][T11631] bond0: Caught tx_queue_len zero misconfig [ 222.009305][T11635] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1570'. [ 222.075113][T11635] netlink: 288 bytes leftover after parsing attributes in process `syz.1.1570'. [ 222.146967][T11631] tipc: Enabled bearer , priority 0 [ 222.171653][T11631] syzkaller0: entered promiscuous mode [ 222.171841][T11631] syzkaller0: entered allmulticast mode [ 222.389182][T11628] tipc: Resetting bearer [ 222.424571][ T5863] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 222.425417][ T9298] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 222.426186][ T9298] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 222.584612][ T5737] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 222.751549][T11628] tipc: Disabling bearer [ 223.173388][T11657] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1575'. [ 223.587664][ T9298] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 223.588314][ T9298] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 223.624436][ T5736] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 223.650050][T11659] tunl0 speed is unknown, defaulting to 1000 [ 223.651380][T11659] tunl0 speed is unknown, defaulting to 1000 [ 223.656876][T11659] tunl0 speed is unknown, defaulting to 1000 [ 223.726330][ T6131] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 224.004819][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 224.223112][T11678] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1579'. [ 224.234999][T11680] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1579'. [ 226.051561][T11694] syzkaller1: entered promiscuous mode [ 226.051769][T11694] syzkaller1: entered allmulticast mode [ 226.591894][T11659] infiniband syz1: set active [ 226.592819][T11659] infiniband syz1: added tunl0 [ 226.699497][T11659] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 226.757978][T11659] infiniband syz1: Couldn't open port 1 [ 226.768708][T11659] smbdirect: ib_dev[syz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 226.768743][T11659] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 226.768780][T11659] smbdirect: ib_dev[syz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 226.830626][ T5736] tunl0 speed is unknown, defaulting to 1000 [ 226.830924][ T5736] net_ratelimit: 8 callbacks suppressed [ 226.830936][ T5736] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 227.048790][T11659] RDS/IB: syz1: added [ 227.048845][T11659] smc: adding ib device syz1 with port count 1 [ 227.048864][T11659] smc: ib device syz1 port 1 has no pnetid [ 227.048936][ T10] tunl0 speed is unknown, defaulting to 1000 [ 227.078284][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 227.088915][T11659] tunl0 speed is unknown, defaulting to 1000 [ 227.186147][ T6131] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 227.186694][ T6131] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 227.565734][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 227.868970][ T5736] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 228.004529][T11711] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1586'. [ 228.315934][ T6131] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 228.316576][ T6131] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 228.602116][T11722] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1590'. [ 228.762291][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 228.905562][ T5737] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 228.941777][T11728] netlink: 'syz.2.1593': attribute type 33 has an invalid length. [ 229.257143][T11728] bond5: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 229.480690][T11728] bond5 (unregistering): Released all slaves [ 229.662304][T11737] netlink: 'syz.0.1592': attribute type 3 has an invalid length. [ 229.668845][T11741] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1594'. [ 229.700365][T11737] netlink: 'syz.0.1592': attribute type 3 has an invalid length. [ 229.721185][T11659] tunl0 speed is unknown, defaulting to 1000 [ 229.748518][T11741] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 230.568851][T11741] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 230.854126][T11742] sch_tbf: burst 4398 is lower than device lo mtu (11337746) ! [ 231.685185][T11771] netlink: 'syz.4.1598': attribute type 1 has an invalid length. [ 231.685209][T11771] netlink: 'syz.4.1598': attribute type 2 has an invalid length. [ 232.134139][T11659] tunl0 speed is unknown, defaulting to 1000 [ 232.717852][ T6131] net_ratelimit: 8 callbacks suppressed [ 232.717873][ T6131] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 233.018822][T11788] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1601'. [ 233.822988][T11807] block nbd2: not configured, cannot reconfigure [ 233.965198][T11807] 8021q: adding VLAN 0 to HW filter on device ipvlan0 [ 234.593558][ T1025] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 234.774115][T11659] tunl0 speed is unknown, defaulting to 1000 [ 235.224018][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 235.764830][T11832] syzkaller1: entered promiscuous mode [ 235.765018][T11832] syzkaller1: entered allmulticast mode [ 235.765083][T11835] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1610'. [ 236.816989][T11659] tunl0 speed is unknown, defaulting to 1000 [ 237.019923][T11852] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1613'. [ 237.161438][ T9291] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 237.819409][ T6131] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 239.736967][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 239.982814][T11909] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1623'. [ 240.161985][T11904] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1622'. [ 240.553910][ T5644] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 240.590623][ T5644] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 240.605852][ T5644] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 240.633238][ T5644] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 240.645944][ T5644] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 241.049031][T11916] bond7: option downdelay: invalid value (18446744073709551615) [ 241.075169][T11916] bond7: option downdelay: allowed values 0 - 2147483647 [ 241.345190][T11916] bond7 (unregistering): Released all slaves [ 241.379954][T11933] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1627'. [ 241.453385][T11932] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1626'. [ 241.453408][T11932] netlink: 2 bytes leftover after parsing attributes in process `syz.4.1626'. [ 242.282831][ T6131] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 242.702742][T11949] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 242.743572][ T53] Bluetooth: hci5: command tx timeout [ 243.393261][T11959] netlink: 'syz.0.1630': attribute type 1 has an invalid length. [ 243.406717][T11969] ip_tables: iptables: counters copy to user failed while replacing table [ 243.529358][T11973] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1632'. [ 243.566777][ T6128] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 243.756389][T11969] C: renamed from lo (while UP) [ 243.948193][T11969] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 244.776481][ T50] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.776518][ T50] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 244.834470][ T53] Bluetooth: hci5: command tx timeout [ 244.964524][T11952] netlink: 'syz.4.1631': attribute type 1 has an invalid length. [ 245.066629][T11988] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1636'. [ 245.270625][T11952] bond9: option mode: invalid value (8) [ 245.347641][T11952] bond9 (unregistering): Released all slaves [ 245.436022][T11997] netlink: 244 bytes leftover after parsing attributes in process `syz.4.1631'. [ 245.492643][ T85] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 245.938472][ T50] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.938507][ T50] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 245.941752][T12003] netlink: 'syz.2.1638': attribute type 4 has an invalid length. [ 245.996840][T12004] netlink: 'syz.2.1638': attribute type 4 has an invalid length. [ 246.703293][T11919] rxe_eth0 speed is unknown, defaulting to 1000 [ 246.904800][ T53] Bluetooth: hci5: command tx timeout [ 246.905805][T12023] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 246.906540][T12023] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 246.953090][T12023] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 246.972118][T12023] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 246.972952][T12023] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 247.083650][ T50] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.083686][ T50] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 247.135363][T12023] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 247.985654][T12031] netlink: 220 bytes leftover after parsing attributes in process `syz.2.1642'. [ 248.090690][ T50] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.090726][ T50] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 248.136321][T12038] netlink: 220 bytes leftover after parsing attributes in process `syz.2.1642'. [ 248.952316][T11919] lo speed is unknown, defaulting to 1000 [ 248.984127][ T53] Bluetooth: hci5: command tx timeout [ 249.311258][ T9291] net_ratelimit: 28 callbacks suppressed [ 249.311278][ T9291] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 250.436506][T12072] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1647'. [ 250.508203][T12072] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1647'. [ 250.618245][ T1025] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 250.715789][T12078] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1648'. [ 250.721475][T12072] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1647'. [ 250.773089][ T50] bridge_slave_1: left allmulticast mode [ 250.782007][ T50] bridge_slave_1: left promiscuous mode [ 250.792307][ T50] bridge0: port 2(bridge_slave_1) entered disabled state [ 252.464588][ T9291] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 253.626766][ T50] ip6gretap0 (unregistering): left promiscuous mode [ 253.812502][ T50] bond2 (unregistering): (slave ip6gre1): Releasing backup interface [ 253.812563][ T50] ip6gre1 (unregistering): left promiscuous mode [ 255.091564][ T6131] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 255.216876][ T50] bond4 (unregistering): (slave geneve3): Releasing active interface [ 255.708392][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.935164][ T50] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 255.939195][ T50] bond_slave_0: left promiscuous mode [ 255.994759][ T50] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 256.003503][ T50] bond_slave_1: left promiscuous mode [ 256.051652][ T50] bond0 (unregistering): Released all slaves [ 256.266477][ T50] bond1 (unregistering): Released all slaves [ 256.352252][ T9291] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 256.381441][ T50] bond2 (unregistering): Released all slaves [ 256.484798][ T50] bond3 (unregistering): Released all slaves [ 256.592592][ T50] bond4 (unregistering): Released all slaves [ 256.795480][ T50] bond5 (unregistering): Released all slaves [ 257.142589][ T50] bond6 (unregistering): Released all slaves [ 257.409639][ T8416] infiniband syz1: ib_query_port failed (-19) [ 257.415031][ T6132] smc: removing ib device syz1 [ 257.562378][ T9298] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 257.980444][T12100] netlink: 'syz.0.1652': attribute type 1 has an invalid length. [ 258.038385][ T6132] smbdirect: ib_dev[syz1] removed [ 259.031978][T12100] 8021q: adding VLAN 0 to HW filter on device bond7 [ 259.038124][T12102] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1652'. [ 259.978051][T12124] team0: Device xfrm0 is of different type [ 260.825138][ C1] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 260.843197][ T6131] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 261.583361][T12154] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1666'. [ 262.044231][T12154] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1666'. [ 262.111703][ T6131] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 262.513975][T12154] bridge0: port 2(bridge_slave_1) entered disabled state [ 262.630760][T12169] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1669'. [ 263.383356][T12178] netlink: 'syz.2.1670': attribute type 4 has an invalid length. [ 263.401410][ T6131] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 263.437612][T12183] netlink: 'syz.2.1670': attribute type 4 has an invalid length. [ 263.703242][T12189] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1673'. [ 264.503114][ T5297] 8021q: adding VLAN 0 to HW filter on device eth2 [ 265.528186][T12228] netlink: 'syz.1.1678': attribute type 10 has an invalid length. [ 265.771348][T12228] 8021q: adding VLAN 0 to HW filter on device team0 [ 265.783309][T12233] netlink: 260 bytes leftover after parsing attributes in process `syz.0.1679'. [ 265.829116][T12228] bond0: (slave team0): Enslaving as an active interface with an up link [ 266.602026][ T1025] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 267.064209][T12247] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1681'. [ 267.327128][T12253] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1683'. [ 267.402765][T12253] ip_tables: iptables: counters copy to user failed while replacing table [ 267.434584][T12254] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1683'. [ 267.642375][T12261] ip_tables: iptables: counters copy to user failed while replacing table [ 267.798414][T12265] netlink: 'syz.4.1684': attribute type 4 has an invalid length. [ 267.945516][ T1207] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 267.969462][T12266] netlink: 'syz.4.1684': attribute type 4 has an invalid length. [ 268.512565][T12269] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1686'. [ 268.693212][T12269] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1686'. [ 268.701756][T12276] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1686'. [ 268.820354][ T8416] lo speed is unknown, defaulting to 1000 [ 268.822379][ T5737] lo speed is unknown, defaulting to 1000 [ 268.865118][T11919] bridge0: port 1(bridge_slave_0) entered blocking state [ 268.871096][T11919] bridge0: port 1(bridge_slave_0) entered disabled state [ 268.871450][T11919] bridge_slave_0: entered allmulticast mode [ 269.175409][T11919] bridge_slave_0: entered promiscuous mode [ 269.188733][T11919] bridge0: port 2(bridge_slave_1) entered blocking state [ 269.189175][T11919] bridge0: port 2(bridge_slave_1) entered disabled state [ 269.189482][T11919] bridge_slave_1: entered allmulticast mode [ 269.203155][T11919] bridge_slave_1: entered promiscuous mode [ 269.281434][T12276] vcan0: Master is either lo or non-ether device [ 269.299772][ T8414] lo speed is unknown, defaulting to 1000 [ 269.321590][ T9298] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 270.179017][T11919] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 270.234948][T12300] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1690'. [ 270.486039][T12306] sctp: [Deprecated]: syz.0.1691 (pid 12306) Use of int in maxseg socket option. [ 270.486039][T12306] Use struct sctp_assoc_value instead [ 270.605999][T12303] mac80211_hwsim hwsim7 syzkaller1: entered promiscuous mode [ 270.606184][T12303] mac80211_hwsim hwsim7 syzkaller1: entered allmulticast mode [ 270.827088][T12311] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1692'. [ 270.857772][T12311] netlink: 9720 bytes leftover after parsing attributes in process `syz.2.1692'. [ 271.061981][T11919] team0: Port device team_slave_0 added [ 271.260901][T11919] team0: Port device team_slave_1 added [ 271.482307][ T5297] 8021q: adding VLAN 0 to HW filter on device eth3 [ 271.746666][ T1025] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 272.582652][ T50] tipc: Disabling bearer [ 272.591901][ T50] tipc: Left network mode [ 272.598305][T11919] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 272.598321][T11919] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 272.598347][T11919] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 272.647246][T11919] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 272.647264][T11919] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 272.647583][T11919] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 272.894659][T12336] pimreg: entered allmulticast mode [ 272.942318][T12336] Cannot find set identified by id 65534 to match [ 273.083053][T12340] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1696'. [ 273.676758][ T6131] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 274.231865][T12355] sctp: [Deprecated]: syz.1.1701 (pid 12355) Use of int in maxseg socket option. [ 274.231865][T12355] Use struct sctp_assoc_value instead [ 274.394570][T11919] hsr_slave_0: entered promiscuous mode [ 274.425524][T11919] hsr_slave_1: entered promiscuous mode [ 274.434212][T11919] debugfs: 'hsr0' already exists in 'hsr' [ 274.434252][T11919] Cannot create hsr debugfs directory [ 275.049978][ T6131] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 275.288884][T12363] bridge_slave_0: left allmulticast mode [ 275.289247][T12363] bridge_slave_0: left promiscuous mode [ 275.290232][T12363] bridge0: port 1(bridge_slave_0) entered disabled state [ 275.455654][T12363] veth1_to_bridge: left allmulticast mode [ 275.456011][T12363] veth1_to_bridge: left promiscuous mode [ 275.458896][T12363] bridge0: port 3(veth1_to_bridge) entered disabled state [ 275.515008][T12371] netlink: 'syz.4.1706': attribute type 1 has an invalid length. [ 275.663107][T12363] bridge_slave_1: left allmulticast mode [ 275.663358][T12363] bridge_slave_1: left promiscuous mode [ 275.664966][T12363] bridge0: port 2(bridge_slave_1) entered disabled state [ 275.838319][T12363] bond2: (slave veth0_to_bond): Releasing active interface [ 275.838346][T12363] veth0_to_bond: left promiscuous mode [ 275.839119][T12363] veth0_to_bond: left allmulticast mode [ 275.892642][T12384] netlink: 'syz.4.1706': attribute type 10 has an invalid length. [ 275.892663][T12384] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1706'. [ 276.003145][T12363] bond0: (slave bond_slave_0): Releasing backup interface [ 276.012819][T12363] bond_slave_0: left promiscuous mode [ 276.084243][T12363] bond0: (slave bond_slave_1): Releasing backup interface [ 276.092937][T12363] bond_slave_1: left promiscuous mode [ 276.184501][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 276.679471][T12363] team0: Port device team_slave_0 removed [ 276.875867][T12363] team0: Port device team_slave_1 removed [ 276.929645][T12363] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 276.929838][T12363] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 276.983153][T12363] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 276.983372][T12363] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 277.018053][T12363] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 277.261456][T12363] syz.2.1703 (12363) used greatest stack depth: 19336 bytes left [ 277.303831][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 277.304040][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 277.304237][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 277.304469][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 277.380812][T12371] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 277.472267][ T1025] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 277.938613][T12384] dummy0: entered promiscuous mode [ 278.752607][ T1025] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 279.032783][T12418] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 279.042295][T12418] netlink: 208 bytes leftover after parsing attributes in process `syz.4.1710'. [ 280.011762][T12429] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1713'. [ 280.011790][T12429] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1713'. [ 280.011804][T12429] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1713'. [ 280.682342][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 281.851057][T12457] veth0: entered promiscuous mode [ 281.912220][T12457] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1721'. [ 282.412473][T12456] veth0: left promiscuous mode [ 283.276143][ T6131] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 284.521687][ T1025] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 285.766794][T12522] ip_tables: iptables: counters copy to user failed while replacing table [ 285.771959][T12522] ip_tables: iptables: counters copy to user failed while replacing table [ 285.794139][ T9298] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 285.811546][T12522] ip_tables: iptables: counters copy to user failed while replacing table [ 285.824220][T12522] ip_tables: iptables: counters copy to user failed while replacing table [ 285.860531][T12522] ip_tables: iptables: counters copy to user failed while replacing table [ 285.861394][T12522] ip_tables: iptables: counters copy to user failed while replacing table [ 285.862204][T12522] ip_tables: iptables: counters copy to user failed while replacing table [ 286.856393][T12516] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1733'. [ 287.243206][ T50] hsr_slave_0: left promiscuous mode [ 287.276999][ T50] hsr_slave_1: left promiscuous mode [ 287.279029][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 287.279270][ T50] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 287.296065][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 287.296248][ T50] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 287.618918][ T50] veth1_macvtap: left promiscuous mode [ 287.619585][ T50] veth0_macvtap: left promiscuous mode [ 287.622174][ T50] veth1_vlan: left promiscuous mode [ 287.778630][T12546] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1738'. [ 288.626118][T12554] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1738'. [ 289.023433][ T6128] net_ratelimit: 27 callbacks suppressed [ 289.023455][ T6128] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 289.612582][ T6128] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 291.592086][ T6128] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 293.760454][ T50] team0 (unregistering): Port device team_slave_1 removed [ 294.015458][ T50] team0 (unregistering): Port device team_slave_0 removed [ 294.761387][ T9298] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 295.402298][ T62] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 295.814188][T12520] syzkaller1: entered promiscuous mode [ 295.814383][T12520] syzkaller1: entered allmulticast mode [ 296.010030][ T5297] 8021q: adding VLAN 0 to HW filter on device eth4 [ 296.278063][T12545] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1736'. [ 296.861056][T12561] netlink: 'syz.2.1740': attribute type 1 has an invalid length. [ 296.861080][T12561] netlink: 244 bytes leftover after parsing attributes in process `syz.2.1740'. [ 297.109884][T11919] netdevsim netdevsim5 netdevsim0: renamed from eth6 [ 297.202505][T12570] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1741'. [ 297.202545][T12570] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1741'. [ 297.335812][T11919] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 297.416539][ T9291] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 297.706146][T11919] netdevsim netdevsim5 netdevsim1: renamed from eth7 [ 298.088563][T11919] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 298.186407][T11919] netdevsim netdevsim5 netdevsim2: renamed from eth8 [ 299.813577][T11919] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 299.815718][T11919] netdevsim netdevsim5 netdevsim3: renamed from eth9 [ 300.060048][T12587] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1746'. [ 300.060082][T12587] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1746'. [ 300.065124][T11919] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 300.284746][ T50] IPVS: stop unused estimator thread 0... [ 300.511307][ T9291] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 301.158448][ T9291] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 301.160239][ T5644] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 301.164890][ T5644] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 301.176068][ T5644] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 301.190747][ T5644] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 301.197315][ T5644] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 301.347396][T12607] netlink: 'syz.1.1752': attribute type 83 has an invalid length. [ 302.380227][T12614] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1754'. [ 302.487318][T12616] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1755'. [ 302.524269][T12614] vlan2: entered promiscuous mode [ 302.524294][T12614] bond0: entered promiscuous mode [ 302.524307][T12614] bond_slave_0: entered promiscuous mode [ 302.525244][T12614] bond_slave_1: entered promiscuous mode [ 302.531471][ T6132] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 302.722613][T12623] netlink: 'syz.2.1757': attribute type 1 has an invalid length. [ 302.893253][T12624] openvswitch: netlink: IP tunnel TTL not specified. [ 303.102660][T12626] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1757'. [ 303.304419][ T53] Bluetooth: hci0: command tx timeout [ 303.346224][T12623] bond6: entered promiscuous mode [ 303.362613][T12623] 8021q: adding VLAN 0 to HW filter on device bond6 [ 303.829560][T12624] 8021q: adding VLAN 0 to HW filter on device bond6 [ 303.831680][T12624] bond6: (slave ip6gre2): The slave device specified does not support setting the MAC address [ 303.831705][T12624] bond6: (slave ip6gre2): Setting fail_over_mac to active for active-backup mode [ 303.851421][T12624] bond6: (slave ip6gre2): making interface the new active one [ 303.851444][T12624] ip6gre2: entered promiscuous mode [ 303.861056][T12624] bond6: (slave ip6gre2): Enslaving as an active interface with an up link [ 305.384352][ T53] Bluetooth: hci0: command tx timeout [ 305.902125][T12671] syz.4.1768: vmalloc error: size 8589938688, exceeds total pages, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 305.902379][T12671] CPU: 0 UID: 0 PID: 12671 Comm: syz.4.1768 Not tainted syzkaller #0 PREEMPT(full) [ 305.902403][T12671] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 305.902420][T12671] Call Trace: [ 305.902428][T12671] [ 305.902437][T12671] dump_stack_lvl+0xe8/0x150 [ 305.902475][T12671] warn_alloc+0x24d/0x270 [ 305.902498][T12671] ? stack_depot_save_flags+0x33/0x810 [ 305.902532][T12671] ? __pfx_warn_alloc+0x10/0x10 [ 305.902554][T12671] ? kasan_save_track+0x4f/0x80 [ 305.902580][T12671] ? __kasan_kmalloc+0x93/0xb0 [ 305.902609][T12671] ? xsk_init_queue+0x8a/0xe0 [ 305.902630][T12671] ? xsk_setsockopt+0x52a/0x960 [ 305.902652][T12671] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 305.902686][T12671] __vmalloc_node_range_noprof+0x12c/0x16f0 [ 305.902739][T12671] ? rcu_is_watching+0x16/0xb0 [ 305.902775][T12671] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 305.902798][T12671] ? __kmalloc_cache_noprof+0x31c/0x600 [ 305.902824][T12671] ? __kmalloc_cache_noprof+0x148/0x600 [ 305.902849][T12671] ? xskq_create+0x56/0x220 [ 305.902876][T12671] xskq_create+0x148/0x220 [ 305.902900][T12671] ? xsk_init_queue+0x8a/0xe0 [ 305.902933][T12671] xsk_init_queue+0x8a/0xe0 [ 305.902959][T12671] xsk_setsockopt+0x52a/0x960 [ 305.902984][T12671] ? __pfx_xsk_setsockopt+0x10/0x10 [ 305.903007][T12671] ? __pfx_aa_sk_perm+0x10/0x10 [ 305.903048][T12671] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 305.903074][T12671] ? __pfx_xsk_setsockopt+0x10/0x10 [ 305.903098][T12671] do_sock_setsockopt+0x17c/0x1b0 [ 305.903125][T12671] __x64_sys_setsockopt+0x13d/0x1b0 [ 305.903153][T12671] do_syscall_64+0x166/0x520 [ 305.903177][T12671] ? trace_irq_disable+0x3b/0x140 [ 305.903204][T12671] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 305.903224][T12671] ? clear_bhb_loop+0x70/0xc0 [ 305.903249][T12671] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 305.903269][T12671] RIP: 0033:0x7f0ae31a8f19 [ 305.903288][T12671] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 305.903307][T12671] RSP: 002b:00007f0ae13f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 305.903325][T12671] RAX: ffffffffffffffda RBX: 00007f0ae3425fa0 RCX: 00007f0ae31a8f19 [ 305.903338][T12671] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000004 [ 305.903350][T12671] RBP: 00007f0ae3237f6d R08: 0000000000000004 R09: 0000000000000000 [ 305.903362][T12671] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000000 [ 305.903375][T12671] R13: 00007f0ae3426038 R14: 00007f0ae3425fa0 R15: 00007ffe6710a698 [ 305.903408][T12671] [ 305.956978][T12671] Mem-Info: [ 305.956994][T12671] active_anon:6333 inactive_anon:0 isolated_anon:0 [ 305.956994][T12671] active_file:0 inactive_file:43324 isolated_file:0 [ 305.956994][T12671] unevictable:0 dirty:107 writeback:0 [ 305.956994][T12671] slab_reclaimable:11553 slab_unreclaimable:108154 [ 305.956994][T12671] mapped:29413 shmem:586 pagetables:3485 [ 305.956994][T12671] sec_pagetables:0 bounce:0 [ 305.956994][T12671] kernel_misc_reclaimable:0 [ 305.956994][T12671] free:1308036 free_pcp:10306 free_cma:0 [ 305.957052][T12671] Node 0 active_anon:25332kB inactive_anon:0kB active_file:0kB inactive_file:173096kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:117652kB dirty:428kB writeback:0kB shmem:2344kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13144kB pagetables:13820kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 305.957108][T12671] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:120kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 305.957159][T12671] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 305.957217][T12671] lowmem_reserve[]: 0 2463 2465 2465 2465 [ 305.957251][T12671] Node 0 DMA32 free:1277756kB boost:0kB min:33920kB low:42400kB high:50880kB reserved_highatomic:0kB free_highatomic:0kB active_anon:25332kB inactive_anon:0kB active_file:0kB inactive_file:173096kB unevictable:0kB writepending:428kB zspages:0kB present:3129332kB managed:2522828kB mlocked:0kB bounce:0kB free_pcp:41220kB local_pcp:20084kB free_cma:0kB [ 305.957309][T12671] lowmem_reserve[]: 0 0 1 1 1 [ 305.957341][T12671] Node 0 Normal free:0kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1392kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB [ 305.957395][T12671] lowmem_reserve[]: 0 0 0 0 0 [ 305.957426][T12671] Node 1 Normal free:3939028kB boost:0kB min:55960kB low:69948kB high:83936kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 305.957482][T12671] lowmem_reserve[]: 0 0 0 0 0 [ 305.957513][T12671] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 305.957626][T12671] Node 0 DMA32: 1147*4kB (UME) 578*8kB (UM) 292*16kB (UM) 274*32kB (UME) 401*64kB (UM) 453*128kB (UME) 346*256kB (UME) 253*512kB (UE) 177*1024kB (UME) 5*2048kB (ME) 186*4096kB (UM) = 1277756kB [ 305.957772][T12671] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 305.957864][T12671] Node 1 Normal: 3*4kB (UM) 1*8kB (M) 10*16kB (UM) 13*32kB (UM) 6*64kB (UM) 6*128kB (UM) 4*256kB [ 306.352979][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 306.362818][T12671] (UM) 4*512kB (UM) 2*1024kB (UM) 0*2048kB 960*4096kB (M) = 3939028kB [ 306.362886][T12671] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 306.362902][T12671] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 306.362917][T12671] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 306.362940][T12671] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 306.362954][T12671] 43906 total pagecache pages [ 306.362976][T12671] 0 pages in swap cache [ 306.362983][T12671] Free swap = 124996kB [ 306.362990][T12671] Total swap = 124996kB [ 306.362999][T12671] 2097051 pages RAM [ 306.363006][T12671] 0 pages HighMem/MovableOnly [ 306.363012][T12671] 434380 pages reserved [ 306.363019][T12671] 0 pages cma reserved [ 306.830430][T12601] rxe_eth0 speed is unknown, defaulting to 1000 [ 306.924885][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 307.464011][ T53] Bluetooth: hci0: command tx timeout [ 307.660355][T12688] netlink: 288 bytes leftover after parsing attributes in process `syz.0.1772'. [ 307.955652][T12687] netlink: 144 bytes leftover after parsing attributes in process `syz.2.1773'. [ 308.072978][T12685] syzkaller0: entered promiscuous mode [ 308.073164][T12685] syzkaller0: entered allmulticast mode [ 308.226949][T12685] 0: reclassify loop, rule prio 0, protocol 800 [ 308.361465][T12685] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1771'. [ 308.899155][T12706] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1775'. [ 308.899202][T12706] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1775'. [ 309.146098][T12712] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1776'. [ 309.428380][T12717] ip_tables: iptables: counters copy to user failed while replacing table [ 309.544102][ T53] Bluetooth: hci0: command tx timeout [ 310.095309][T12601] lo speed is unknown, defaulting to 1000 [ 310.111478][ T62] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 310.665213][T12726] bond0: (slave team0): Releasing backup interface [ 310.823406][T12726] bridge_slave_0: left allmulticast mode [ 310.831879][T12726] bridge0: port 1(bridge_slave_0) entered disabled state [ 310.969413][T12726] bridge_slave_1: left allmulticast mode [ 310.969794][T12726] bridge_slave_1: left promiscuous mode [ 310.971708][T12726] bridge0: port 2(bridge_slave_1) entered disabled state [ 311.205540][T12726] bond0: (slave bond_slave_0): Releasing backup interface [ 311.354482][T12726] bond0: (slave bond_slave_1): Releasing backup interface [ 311.373043][T12746] netlink: 'syz.0.1783': attribute type 4 has an invalid length. [ 311.439162][T12747] netlink: 'syz.0.1783': attribute type 4 has an invalid length. [ 311.734167][T12726] team0: Port device team_slave_0 removed [ 311.868296][T12726] team0: Port device team_slave_1 removed [ 311.899829][T12726] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 312.041556][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 312.126215][T12727] team0: Port device xfrm0 added [ 312.681922][ T1207] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 313.389548][T12762] : entered promiscuous mode [ 313.497950][T12764] openvswitch: : Dropping previously announced user features [ 315.365138][T12803] veth0: entered promiscuous mode [ 315.879839][ T6128] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 315.957727][T12601] bridge0: port 1(bridge_slave_0) entered blocking state [ 315.959356][T12601] bridge0: port 1(bridge_slave_0) entered disabled state [ 315.962966][T12601] bridge_slave_0: entered allmulticast mode [ 316.010891][T12601] bridge_slave_0: entered promiscuous mode [ 316.058241][T12601] bridge0: port 2(bridge_slave_1) entered blocking state [ 316.081781][T12601] bridge0: port 2(bridge_slave_1) entered disabled state [ 316.082123][T12601] bridge_slave_1: entered allmulticast mode [ 316.122543][T12601] bridge_slave_1: entered promiscuous mode [ 316.255736][T12799] veth0: left promiscuous mode [ 316.328059][T12818] netlink: 'syz.4.1797': attribute type 4 has an invalid length. [ 316.353642][T12601] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 316.381237][T12820] netlink: 'syz.4.1797': attribute type 4 has an invalid length. [ 316.381658][T12601] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 316.605005][ T5863] lo speed is unknown, defaulting to 1000 [ 316.605046][ T5863] syz0: Port: 1 Link DOWN [ 316.622687][ T5863] lo speed is unknown, defaulting to 1000 [ 316.718700][ T5863] lo speed is unknown, defaulting to 1000 [ 316.718743][ T5863] syz0: Port: 1 Link ACTIVE [ 316.719057][ T5863] lo speed is unknown, defaulting to 1000 [ 316.939961][T12601] team0: Port device team_slave_0 added [ 316.970619][T12601] team0: Port device team_slave_1 added [ 317.153828][ T1317] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 317.155520][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.492826][T12601] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 317.492845][T12601] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 317.492870][T12601] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 317.506081][T12601] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 317.506097][T12601] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 317.506121][T12601] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 318.001792][T12841] Bluetooth: MGMT ver 1.23 [ 318.025608][T12837] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1801'. [ 318.026900][T12846] x_tables: duplicate underflow at hook 2 [ 318.046884][T12837] x_tables: duplicate underflow at hook 1 [ 318.067276][T12601] hsr_slave_0: entered promiscuous mode [ 318.071127][T12601] hsr_slave_1: entered promiscuous mode [ 318.086817][T12601] debugfs: 'hsr0' already exists in 'hsr' [ 318.086838][T12601] Cannot create hsr debugfs directory [ 318.433139][ T9298] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 318.970883][T12852] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1806'. [ 319.722146][T12862] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 320.119202][T12870] netlink: 'syz.2.1812': attribute type 4 has an invalid length. [ 320.178707][T12869] netlink: 'syz.2.1812': attribute type 4 has an invalid length. [ 320.395831][T12872] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 320.989056][T12880] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1815'. [ 320.989077][T12880] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1815'. [ 320.989092][T12880] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1815'. [ 321.127051][T12883] netlink: 'syz.4.1814': attribute type 3 has an invalid length. [ 321.127073][T12883] netlink: 'syz.4.1814': attribute type 3 has an invalid length. [ 321.642234][ T6128] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 321.758087][T12890] netlink: 256 bytes leftover after parsing attributes in process `syz.4.1818'. [ 321.761921][T12889] netlink: 256 bytes leftover after parsing attributes in process `syz.4.1818'. [ 322.086846][T12885] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1817'. [ 322.086881][T12885] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1817'. [ 323.060274][T12921] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1824'. [ 324.061606][ T5297] 8021q: adding VLAN 0 to HW filter on device eth5 [ 324.243455][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 324.291934][T12930] netlink: 'syz.0.1826': attribute type 4 has an invalid length. [ 324.396393][T12932] netlink: 'syz.0.1826': attribute type 4 has an invalid length. [ 324.668996][T12945] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1827'. [ 325.427800][T12601] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 325.548958][T12601] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 325.557220][T12601] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 325.621202][T12601] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 325.770819][T12601] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 325.832570][T12601] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 325.882826][T12601] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 325.957946][T12601] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 326.008794][T12957] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1830'. [ 326.136112][ T6128] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 326.394439][T12963] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1832'. [ 326.636856][T12976] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 326.764545][ T6128] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 327.285721][T12984] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1834'. [ 327.286562][T12984] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1834'. [ 327.287396][T12984] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1834'. [ 327.288288][T12984] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1834'. [ 327.289026][T12984] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1834'. [ 327.289869][T12984] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1834'. [ 327.485116][T12601] 8021q: adding VLAN 0 to HW filter on device bond0 [ 327.649819][T12601] 8021q: adding VLAN 0 to HW filter on device team0 [ 327.879570][ T6131] bridge0: port 1(bridge_slave_0) entered blocking state [ 327.879683][ T6131] bridge0: port 1(bridge_slave_0) entered forwarding state [ 328.079625][T12984] __nla_validate_parse: 31 callbacks suppressed [ 328.079677][T12984] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1834'. [ 328.174217][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 328.174336][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 329.328646][ T6131] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 331.247065][ T6128] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 331.317431][T13023] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1841'. [ 332.526836][ T9298] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 333.445536][T13041] ip_tables: iptables: counters copy to user failed while replacing table [ 334.432039][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 335.940777][T13015] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1840'. [ 339.273326][ C1] sched: DL replenish lagged too much [ 339.698823][ T6132] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 345.674717][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 349.242303][ T1025] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 350.133628][ T62] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 364.331246][ T9291] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 365.858910][ T5644] Bluetooth: hci4: command 0x0405 tx timeout [ 366.919708][ T9298] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 370.416944][ T6131] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 373.471210][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 373.795722][ T9293] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 375.042031][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 378.592123][ C1] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 380.954566][ T1025] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 381.285940][ T1317] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 381.365030][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 384.741326][ T6132] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 387.665741][ T85] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 391.903047][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 393.864195][ T1025] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 397.749727][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 399.304634][ T62] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 401.638680][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 409.034014][ T150] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 411.786488][ T9293] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 416.305690][ T150] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 417.859534][ T9291] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 419.553654][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 423.598967][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 427.092304][ T5644] Bluetooth: hci0: command 0x0406 tx timeout [ 428.222617][ T85] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 434.646784][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 438.885468][ T1025] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 440.494781][ T1317] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 441.555871][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 450.617430][ T9291] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 454.515236][ T150] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 459.596878][ T9294] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 460.442385][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 467.914312][ T9291] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 475.853571][ T9294] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 482.121992][ T62] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 489.057772][ T1198] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 492.312984][ T32] INFO: task dhcpcd:5297 blocked for more than 159 seconds. [ 492.313009][ T32] Not tainted syzkaller #0 [ 492.313019][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 492.313028][ T32] task:dhcpcd state:D stack:21416 pid:5297 tgid:5297 ppid:5296 task_flags:0x400140 flags:0x00080000 [ 492.313088][ T32] Call Trace: [ 492.313164][ T32] [ 492.313187][ T32] __schedule+0x17dd/0x5830 [ 492.343991][ T32] ? is_bpf_text_address+0x292/0x2b0 [ 492.344134][ T32] ? is_bpf_text_address+0x26/0x2b0 [ 492.344161][ T32] ? __pfx___schedule+0x10/0x10 [ 492.344195][ T32] ? schedule+0x90/0x2b0 [ 492.344220][ T32] schedule+0x164/0x2b0 [ 492.344246][ T32] schedule_preempt_disabled+0x13/0x30 [ 492.344268][ T32] __mutex_lock+0x7c4/0x15a0 [ 492.344297][ T32] ? __mutex_lock+0x5cd/0x15a0 [ 492.344324][ T32] ? inet_rtm_newaddr+0x470/0x19f0 [ 492.344453][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 492.344490][ T32] ? __nla_parse+0x40/0x60 [ 492.344591][ T32] inet_rtm_newaddr+0x470/0x19f0 [ 492.344614][ T32] ? kernel_text_address+0xa5/0xe0 [ 492.344656][ T32] ? __pfx_hook_capable+0x10/0x10 [ 492.344719][ T32] ? unwind_get_return_address+0x4d/0x90 [ 492.344751][ T32] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 492.344787][ T32] ? __pfx_inet_rtm_newaddr+0x10/0x10 [ 492.344830][ T32] ? __pfx_inet_rtm_newaddr+0x10/0x10 [ 492.344849][ T32] rtnetlink_rcv_msg+0x802/0xc00 [ 492.344921][ T32] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 492.344941][ T32] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 492.344963][ T32] ? __lock_acquire+0x747/0x2de0 [ 492.345007][ T32] netlink_rcv_skb+0x226/0x4a0 [ 492.345076][ T32] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 492.345099][ T32] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 492.345140][ T32] ? netlink_deliver_tap+0x2e/0x1b0 [ 492.345167][ T32] ? netlink_deliver_tap+0x2e/0x1b0 [ 492.345200][ T32] netlink_unicast+0x8ef/0xa80 [ 492.345245][ T32] netlink_sendmsg+0x7f0/0xb20 [ 492.345280][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 492.345312][ T32] ? aa_sock_msg_perm+0x144/0x210 [ 492.345401][ T32] ? apparmor_socket_sendmsg+0x98/0x360 [ 492.345430][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 492.345457][ T32] sock_sendmsg_nosec+0x14e/0x190 [ 492.345563][ T32] ____sys_sendmsg+0x54e/0x850 [ 492.345591][ T32] ? __pfx_____sys_sendmsg+0x10/0x10 [ 492.345622][ T32] ? import_iovec+0x73/0xa0 [ 492.345687][ T32] ___sys_sendmsg+0x2a5/0x360 [ 492.345709][ T32] ? __asan_memcpy+0x40/0x70 [ 492.345761][ T32] ? __pfx____sys_sendmsg+0x10/0x10 [ 492.345807][ T32] ? vfs_read+0x804/0xa80 [ 492.345902][ T32] __x64_sys_sendmsg+0x1b1/0x290 [ 492.345928][ T32] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 492.345973][ T32] do_syscall_64+0x166/0x520 [ 492.346027][ T32] ? trace_irq_disable+0x3b/0x140 [ 492.346052][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 492.346095][ T32] ? clear_bhb_loop+0x70/0xc0 [ 492.346119][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 492.346144][ T32] RIP: 0033:0x7f591a27b407 [ 492.346195][ T32] RSP: 002b:00007ffee4b74ef0 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 492.346247][ T32] RAX: ffffffffffffffda RBX: 00007f591a1f1780 RCX: 00007f591a27b407 [ 492.346261][ T32] RDX: 0000000000000000 RSI: 00007ffee4b890d0 RDI: 0000000000000004 [ 492.346274][ T32] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 492.346285][ T32] R10: 0000000000000000 R11: 0000000000000202 R12: 00007ffee4b99300 [ 492.346297][ T32] R13: 00007f591a1f1708 R14: 0000000000000044 R15: 00007ffee4b890d0 [ 492.346330][ T32] [ 492.346372][ T32] INFO: task kworker/u8:11:6128 blocked for more than 159 seconds. [ 492.346388][ T32] Not tainted syzkaller #0 [ 492.346397][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 492.346406][ T32] task:kworker/u8:11 state:D stack:22568 pid:6128 tgid:6128 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 492.346452][ T32] Workqueue: ipv6_addrconf addrconf_dad_work [ 492.346532][ T32] Call Trace: [ 492.346539][ T32] [ 492.346551][ T32] __schedule+0x17dd/0x5830 [ 492.346605][ T32] ? __pfx___schedule+0x10/0x10 [ 492.346637][ T32] ? schedule+0x90/0x2b0 [ 492.346663][ T32] schedule+0x164/0x2b0 [ 492.346688][ T32] schedule_preempt_disabled+0x13/0x30 [ 492.346710][ T32] __mutex_lock+0x7c4/0x15a0 [ 492.346740][ T32] ? __mutex_lock+0x5cd/0x15a0 [ 492.346768][ T32] ? addrconf_dad_work+0x116/0x15c0 [ 492.346795][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 492.346840][ T32] addrconf_dad_work+0x116/0x15c0 [ 492.346875][ T32] ? __pfx_addrconf_dad_work+0x10/0x10 [ 492.346909][ T32] ? rcu_is_watching+0x16/0xb0 [ 492.346946][ T32] ? process_scheduled_works+0x97a/0x1630 [ 492.346975][ T32] process_scheduled_works+0xc3d/0x1630 [ 492.347034][ T32] ? __pfx_process_scheduled_works+0x10/0x10 [ 492.347070][ T32] ? assign_work+0x3cf/0x5d0 [ 492.347102][ T32] worker_thread+0xa47/0xfb0 [ 492.347159][ T32] kthread+0x38b/0x480 [ 492.347182][ T32] ? __pfx_worker_thread+0x10/0x10 [ 492.347207][ T32] ? __pfx_kthread+0x10/0x10 [ 492.347230][ T32] ret_from_fork+0x514/0xb70 [ 492.347276][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 492.347298][ T32] ? __switch_to+0xc78/0x1410 [ 492.347329][ T32] ? __pfx_kthread+0x10/0x10 [ 492.347353][ T32] ret_from_fork_asm+0x1a/0x30 [ 492.347401][ T32] [ 492.347436][ T32] INFO: task syz.2.1841:13034 blocked for more than 159 seconds. [ 492.347451][ T32] Not tainted syzkaller #0 [ 492.347460][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 492.347469][ T32] task:syz.2.1841 state:D stack:28784 pid:13034 tgid:13017 ppid:5638 task_flags:0x400140 flags:0x00080002 [ 492.347524][ T32] Call Trace: [ 492.347530][ T32] [ 492.347542][ T32] __schedule+0x17dd/0x5830 [ 492.347595][ T32] ? __pfx___schedule+0x10/0x10 [ 492.347627][ T32] ? schedule+0x90/0x2b0 [ 492.347653][ T32] schedule+0x164/0x2b0 [ 492.347677][ T32] schedule_preempt_disabled+0x13/0x30 [ 492.347699][ T32] __mutex_lock+0x7c4/0x15a0 [ 492.347728][ T32] ? __mutex_lock+0x5cd/0x15a0 [ 492.347757][ T32] ? dev_ethtool+0x3a0/0x29e0 [ 492.347840][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 492.347872][ T32] ? dev_get_by_name+0x21/0x200 [ 492.347944][ T32] ? dev_get_by_name+0x21/0x200 [ 492.347978][ T32] dev_ethtool+0x3a0/0x29e0 [ 492.347998][ T32] ? __lock_acquire+0x747/0x2de0 [ 492.348036][ T32] ? __pfx_dev_ethtool+0x10/0x10 [ 492.348058][ T32] ? kasan_quarantine_put+0xbb/0x1f0 [ 492.348089][ T32] ? lock_acquire+0x115/0x350 [ 492.348122][ T32] ? dev_load+0x21/0x1f0 [ 492.348176][ T32] ? dev_load+0x21/0x1f0 [ 492.348198][ T32] dev_ioctl+0x392/0x1150 [ 492.348224][ T32] sock_do_ioctl+0x23e/0x320 [ 492.348252][ T32] ? __pfx_sock_do_ioctl+0x10/0x10 [ 492.348275][ T32] ? do_futex+0x3e7/0x4e0 [ 492.348323][ T32] sock_ioctl+0x57a/0x7e0 [ 492.348348][ T32] ? __fget_files+0x2a/0x420 [ 492.348411][ T32] ? __pfx_sock_ioctl+0x10/0x10 [ 492.348435][ T32] ? __fget_files+0x2a/0x420 [ 492.348458][ T32] ? __fget_files+0x2a/0x420 [ 492.348486][ T32] ? bpf_lsm_file_ioctl+0x9/0x20 [ 492.348532][ T32] ? __pfx_sock_ioctl+0x10/0x10 [ 492.348556][ T32] __se_sys_ioctl+0xfc/0x170 [ 492.348613][ T32] do_syscall_64+0x166/0x520 [ 492.348636][ T32] ? trace_irq_disable+0x3b/0x140 [ 492.348661][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 492.348681][ T32] ? clear_bhb_loop+0x70/0xc0 [ 492.348704][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 492.348724][ T32] RIP: 0033:0x7f2122ba8f19 [ 492.348741][ T32] RSP: 002b:00007f212399f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 492.348760][ T32] RAX: ffffffffffffffda RBX: 00007f2122e26180 RCX: 00007f2122ba8f19 [ 492.348775][ T32] RDX: 0000200000000100 RSI: 0000000000008946 RDI: 0000000000000007 [ 492.348787][ T32] RBP: 00007f2122c37f6d R08: 0000000000000000 R09: 0000000000000000 [ 492.348800][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 492.348811][ T32] R13: 00007f2122e26218 R14: 00007f2122e26180 R15: 00007ffcc5a46238 [ 492.348844][ T32] [ 492.348861][ T32] [ 492.348861][ T32] Showing all locks held in the system: [ 492.348876][ T32] locks held by kthreadd/2: 2, last CPU#0: [ 492.348949][ T32] #0: ffffffff902b1d10 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 492.349033][ T32] #1: ffffffff9015a2a0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 492.349086][ T32] locks held by kworker/0:0/9: 4, last CPU#0: [ 492.349099][ T32] #0: ffff88807e79a148 ((wq_completion)wg-kex-wg2#2){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 492.349155][ T32] #1: ffffc900000e7c40 ((work_completion)(&({ do { const void __attribute__((btf_type_tag("percpu"))) *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 492.349221][ T32] #2: ffff88807cf19480 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x1a2/0x9b0 [ 492.349349][ T32] #3: ffff888033b6f028 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x59c/0x9b0 [ 492.349396][ T32] locks held by kworker/0:1/10: 3, last CPU#0: [ 492.349410][ T32] #0: ffff88807a03c148 ((wq_completion)wg-kex-wg0#2){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 492.349466][ T32] #1: ffffc900000f7c40 ((work_completion)(&({ do { const void __attribute__((btf_type_tag("percpu"))) *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 492.349538][ T32] #2: ffff88807a7df028 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_begin_session+0x36/0xbf0 [ 492.349585][ T32] locks held by kworker/u8:0/12: 2, on CPU#1: [ 492.349598][ T32] #0: ffff88813fe4c148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 492.349650][ T32] #1: ffffc90000117c40 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 492.349703][ T32] locks held by kworker/u8:1/13: 4, last CPU#0: [ 492.349716][ T32] #0: ffff88807d198948 ((wq_completion)wg-kex-wg0#5){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 492.349771][ T32] #1: ffffc90000127c40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 492.349824][ T32] #2: ffff888076e79480 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x12e/0x810 [ 492.349871][ T32] #3: ffff88807a7d8d18 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x13f/0x810 [ 492.349920][ T32] locks held by khungtaskd/32: 1, last CPU#0: [ 492.349933][ T32] #0: ffffffff9015a2a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 492.349992][ T32] locks held by kworker/u8:2/43: 3, last CPU#0: [ 492.350005][ T32] #0: ffff88813fe4c148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 492.350056][ T32] #1: ffffc90000b37c40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 492.350109][ T32] #2: ffff88807ea3b258 (&devlink->lock_key#7){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xb30 [ 492.350238][ T32] locks held by kworker/u8:3/50: 4, last CPU#0: [ 492.350252][ T32] #0: ffff88807d199148 ((wq_completion)wg-kex-wg1#9){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 492.350308][ T32] #1: ffffc90000ba7c40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 492.350360][ T32] #2: ffff888036b35480 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x12e/0x810 [ 492.350406][ T32] #3: ffff888022bd4888 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x13f/0x810 [ 492.350454][ T32] locks held by kworker/u8:4/62: 4, last CPU#0: [ 492.350467][ T32] #0: ffff88807d198148 ((wq_completion)wg-kex-wg2#9){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 492.350530][ T32] #1: ffffc9000203fc40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 492.350582][ T32] #2: ffff88803434d480 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x12e/0x810 [ 492.350632][ T32] #3: ffff888033b6c888 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x13f/0x810 [ 492.350679][ T32] locks held by kworker/u8:5/85: 4, last CPU#0: [ 492.350692][ T32] #0: ffff88807d199148 ((wq_completion)wg-kex-wg1#9){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 492.350747][ T32] #1: ffffc900024efc40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 492.350799][ T32] #2: ffff888036b35480 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x12e/0x810 [ 492.350845][ T32] #3: ffff888022bd3ea0 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x13f/0x810 [ 492.350895][ T32] locks held by kworker/u8:6/141: 3, last CPU#0: [ 492.350908][ T32] #0: ffff88813fe4c148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 492.350960][ T32] #1: ffffc90002dd7c40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 492.351013][ T32] #2: ffff88807bfa5258 (&devlink->lock_key#2){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xb30 [ 492.351065][ T32] locks held by kworker/u8:7/150: 4, last CPU#1: [ 492.351078][ T32] #0: ffff888033ef7948 ((wq_completion)bat_events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 492.351130][ T32] #1: ffffc90002e77c40 ((work_completion)(&(&bat_priv->dat.work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 492.351183][ T32] #2: ffffffff9015a2a0 (rcu_read_lock){....}-{1:3}, at: process_backlog+0x3de/0x18b0 [ 492.351256][ T32] #3: ffffffff9015a2a0 (rcu_read_lock){....}-{1:3}, at: NF_HOOK+0x9e/0x3c0 [ 492.351373][ T32] locks held by kworker/0:2/992: 3, on CPU#0: [ 492.351387][ T32] #0: ffff88813fe0ed48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 492.351439][ T32] #1: ffffc9000506fc40 (netdev_work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 492.351488][ T32] #2: ffffffff91693720 (rtnl_mutex){+.+.}-{4:4}, at: netdev_work_proc+0x209/0x780 [ 492.351595][ T32] locks held by kworker/u8:8/1025: 2, on CPU#0: [ 492.351609][ T32] #0: ffff88813fe4c148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 492.351661][ T32] #1: ffffc900050afc40 ((work_completion)(&pool->idle_cull_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 492.351715][ T32] locks held by kworker/u8:9/1198: 4, last CPU#0: [ 492.351728][ T32] #0: ffff88802d4fd148 ((wq_completion)wg-kex-wg2#7){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 492.351784][ T32] #1: ffffc900055cfc40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 492.351836][ T32] #2: ffff8880341d5480 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x12e/0x810 [ 492.351883][ T32] #3: ffff888033b68330 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x13f/0x810 [ 492.351929][ T32] locks held by kworker/u8:10/1207: 3, on CPU#1: [ 492.351943][ T32] #0: ffff88813fe4c148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 492.351995][ T32] #1: ffffc9000585fc40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 492.352045][ T32] #2: ffffffff91693720 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 492.352107][ T32] locks held by klogd/4991: 1, last CPU#0: [ 492.352121][ T32] #0: ffffffff902b1d10 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 492.352170][ T32] locks held by udevd/5002: 2, last CPU#0: [ 492.352183][ T32] #0: ffffffff902b1d10 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 492.352228][ T32] #1: ffffffff9015a2a0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 492.352277][ T32] locks held by dhcpcd/5297: 1, on CPU#1: [ 492.352290][ T32] #0: ffffffff91693720 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x470/0x19f0 [ 492.352335][ T32] locks held by crond/5372: 2, last CPU#0: [ 492.352348][ T32] #0: ffffffff902b1d10 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 492.352396][ T32] #1: ffffffff9015a2a0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 492.352445][ T32] locks held by getty/5388: 2, on CPU#1: [ 492.352458][ T32] #0: ffff8880373380a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 492.352554][ T32] #1: ffffc9000322e2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 492.352598][ T32] locks held by syz-executor/5631: 1, last CPU#0: [ 492.352612][ T32] #0: ffffffff9015a2a0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 492.352662][ T32] locks held by syz-executor/5641: 1, last CPU#0: [ 492.352675][ T32] #0: ffff888084d20260 (sk_lock-AF_INET){+.+.}-{0:0}, at: do_ip_getsockopt+0x10f5/0x1cf0 [ 492.352729][ T32] locks held by kworker/1:4/5736: 2, last CPU#1: [ 492.352742][ T32] #0: ffff88813fe0dd48 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 492.352794][ T32] #1: ffffc90004aefc40 ((work_completion)(&(&tbl->gc_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 492.352847][ T32] locks held by kworker/1:5/5737: 3, on CPU#1: [ 492.352860][ T32] #0: ffff88807e79a148 ((wq_completion)wg-kex-wg2#2){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 492.352917][ T32] #1: ffffc90004affc40 ((work_completion)(&({ do { const void __attribute__((btf_type_tag("percpu"))) *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 492.352982][ T32] #2: ffff888033b6f028 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_begin_session+0x36/0xbf0 [ 492.353031][ T32] locks held by kworker/u8:11/6128: 3, on CPU#1: [ 492.353044][ T32] #0: ffff88801cb26948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 492.353095][ T32] #1: ffffc9000580fc40 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 492.353147][ T32] #2: ffffffff91693720 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x116/0x15c0 [ 492.353195][ T32] locks held by kworker/u8:12/6131: 3, last CPU#0: [ 492.353208][ T32] #0: ffff88813fe4c148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 492.382543][ T32] #1: ffffc90005aafc40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 492.382599][ T32] #2: ffff888035ad1258 (&devlink->lock_key){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xb30 [ 492.382650][ T32] locks held by kworker/u8:13/6132: 3, last CPU#0: [ 492.382664][ T32] #0: ffff88813fe4c148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 492.382716][ T32] #1: ffffc90005b47c40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 492.382768][ T32] #2: ffff8880798c3258 (&devlink->lock_key#5){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xb30 [ 492.382823][ T32] locks held by kworker/1:11/8414: 3, last CPU#1: [ 492.382837][ T32] #0: ffff88813fe0ed48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 492.382888][ T32] #1: ffffc9000e0d7c40 ((work_completion)(&w->work)#2){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 492.382944][ T32] #2: ffffffff91707980 (nf_conntrack_mutex){+.+.}-{4:4}, at: nf_ct_iterate_cleanup+0x3a/0x4f0 [ 492.383061][ T32] locks held by kworker/u8:14/9291: 4, last CPU#0: [ 492.383075][ T32] #0: ffff888027070148 ((wq_completion)wg-kex-wg2#5){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 492.383131][ T32] #1: ffffc900043e7c40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 492.383183][ T32] #2: ffff88807c519480 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x12e/0x810 [ 492.757176][ T9291] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 500.018714][ T32] #3: ffff8880b823c5e0 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2d/0x160 [ 500.018809][ T32] locks held by kworker/u8:15/9293: 4, last CPU#0: [ 500.018823][ T32] #0: ffff888027070148 ((wq_completion)wg-kex-wg2#5){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 500.018888][ T32] #1: ffffc90003987c40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 500.018941][ T32] #2: ffff88807c519480 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x12e/0x810 [ 500.018988][ T32] #3: ffff888022bd5c58 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x13f/0x810 [ 500.019035][ T32] locks held by kworker/u8:16/9294: 4, last CPU#0: [ 500.019048][ T32] #0: ffff88802d4f9148 ((wq_completion)wg-kex-wg0#7){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 500.019113][ T32] #1: ffffc90004dc7c40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 500.019164][ T32] #2: ffff88802dbf5480 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x12e/0x810 [ 500.019210][ T32] #3: ffff888033b6aad0 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x13f/0x810 [ 500.019256][ T32] locks held by kworker/u8:17/9298: 4, last CPU#0: [ 500.019269][ T32] #0: ffff88807d199948 ((wq_completion)wg-kex-wg2){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 500.019319][ T32] #1: ffffc900038b7c40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 500.019371][ T32] #2: ffff88807cf19480 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x12e/0x810 [ 500.019416][ T32] #3: ffff888033b6e640 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x13f/0x810 [ 500.019470][ T32] locks held by syz-executor/12601: 1, on CPU#1: [ 500.019483][ T32] #0: ffffffff91693720 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x470/0x19f0 [ 500.019530][ T32] locks held by syz.2.1841/13017: 1, on CPU#1: [ 500.019542][ T32] #0: ffffffff91693720 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 500.019655][ T32] locks held by syz.2.1841/13023: 1, last CPU#0: [ 500.019669][ T32] #0: ffffffff91693720 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_dellink+0x419/0x810 [ 500.019714][ T32] locks held by syz.2.1841/13034: 1, on CPU#1: [ 500.019727][ T32] #0: ffffffff91693720 (rtnl_mutex){+.+.}-{4:4}, at: dev_ethtool+0x3a0/0x29e0 [ 500.019773][ T32] locks held by syz.1.1845/13046: 1, on CPU#1: [ 500.019786][ T32] #0: ffffffff91693720 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 500.019830][ T32] locks held by syz.1.1845/13047: 1, on CPU#0: [ 500.019842][ T32] #0: ffffffff91693720 (rtnl_mutex){+.+.}-{4:4}, at: devinet_ioctl+0x2fb/0x1c50 [ 500.019900][ T32] locks held by syz-executor/13050: 2, last CPU#0: [ 500.019913][ T32] #0: ffff888033699bc0 (&mm->mmap_lock){++++}-{4:4}, at: vm_mmap_pgoff+0x1ed/0x520 [ 500.019968][ T32] #1: ffffffff902b1d10 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 500.020017][ T32] locks held by kworker/u8:18/13051: 7, last CPU#1: [ 500.020030][ T32] #0: ffff888036b1f948 ((wq_completion)wg-kex-wg1#5){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 500.020086][ T32] #1: ffffc90003227c40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 500.020137][ T32] #2: ffff888034349480 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x12e/0x810 [ 500.020184][ T32] #3: ffff888022bd7028 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x13f/0x810 [ 500.020230][ T32] #4: ffffffff9015a2a0 (rcu_read_lock){....}-{1:3}, at: process_backlog+0x3de/0x18b0 [ 500.020273][ T32] #5: ffffffff9015a2a0 (rcu_read_lock){....}-{1:3}, at: NF_HOOK+0x9e/0x3c0 [ 500.020321][ T32] #6: ffffffff9015a2a0 (rcu_read_lock){....}-{1:3}, at: ip_output+0x5a/0x450 [ 500.020365][ T32] locks held by modprobe/13052: 2, last CPU#0: [ 500.020377][ T32] #0: ffff8880680e4cc0 (&mm->mmap_lock){++++}-{4:4}, at: vm_mmap_pgoff+0x1ed/0x520 [ 500.020423][ T32] #1: ffffffff902b1d10 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 500.020471][ T32] locks held by kworker/u8:19/13053: 4, last CPU#0: [ 500.020484][ T32] #0: ffff8880555f7148 ((wq_completion)krds_cp_wq#7/0){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 500.020535][ T32] #1: ffffc900043a7c40 ((work_completion)(&(&cp->cp_conn_w)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 500.020587][ T32] #2: ffff88807e456780 (&tc->t_conn_path_lock){+.+.}-{4:4}, at: rds_tcp_conn_path_connect+0x1cc/0x920 [ 500.020720][ T32] #3: ffffffff902b1d10 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 500.020770][ T32] locks held by kworker/u8:20/13055: 1, last CPU#0: [ 500.020783][ T32] #0: ffffffff902b1d10 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 500.020834][ T32] [ 500.020840][ T32] ============================================= [ 500.020840][ T32] [ 500.020854][ T32] NMI backtrace for cpu 0 [ 500.020877][ T32] CPU: 0 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 500.020898][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 500.020908][ T32] Call Trace: [ 500.020916][ T32] [ 500.020925][ T32] dump_stack_lvl+0xe8/0x150 [ 500.020956][ T32] nmi_cpu_backtrace+0x274/0x2d0 [ 500.021010][ T32] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 500.021041][ T32] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 500.021065][ T32] sys_info+0x135/0x170 [ 500.021081][ T32] watchdog+0x1073/0x10f0 [ 500.021122][ T32] ? watchdog+0x209/0x10f0 [ 500.021153][ T32] kthread+0x38b/0x480 [ 500.021175][ T32] ? __pfx_watchdog+0x10/0x10 [ 500.021197][ T32] ? __pfx_kthread+0x10/0x10 [ 500.021220][ T32] ret_from_fork+0x514/0xb70 [ 500.021244][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 500.021265][ T32] ? __switch_to+0xc78/0x1410 [ 500.021295][ T32] ? __pfx_kthread+0x10/0x10 [ 500.021318][ T32] ret_from_fork_asm+0x1a/0x30 [ 500.021354][ T32] [ 500.021361][ T32] Sending NMI from CPU 0 to CPUs 1: [ 500.021401][ C1] NMI backtrace for cpu 1 [ 500.021413][ C1] CPU: 1 UID: 0 PID: 13051 Comm: kworker/u8:18 Not tainted syzkaller #0 PREEMPT(full) [ 500.021435][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 500.021446][ C1] Workqueue: wg-kex-wg1 wg_packet_handshake_send_worker [ 500.021473][ C1] RIP: 0010:unwind_get_return_address+0x56/0x90 [ 500.021501][ C1] Code: 83 c3 48 49 89 df 49 c1 ef 03 43 80 3c 37 00 74 08 48 89 df e8 5b 22 c8 00 48 8b 3b e8 23 25 19 00 85 c0 74 14 43 80 3c 37 00 <74> 08 48 89 df e8 40 22 c8 00 48 8b 03 eb 02 31 c0 5b 41 5e 41 5f [ 500.021516][ C1] RSP: 0018:ffffc90000a079e8 EFLAGS: 00000246 [ 500.021531][ C1] RAX: 0000000000000001 RBX: ffffc90000a07a50 RCX: 8000000000000300 [ 500.021544][ C1] RDX: ffffc90000a07a01 RSI: ffffffff8e9347f3 RDI: ffffffff8a26fe1b [ 500.021558][ C1] RBP: ffffc90000a07a90 R08: ffffc90000a08320 R09: 0000000000000000 [ 500.021571][ C1] R10: ffffc90000a07a58 R11: fffff52000140f4d R12: ffff88807d2bbe80 [ 500.021584][ C1] R13: ffffffff82346141 R14: dffffc0000000000 R15: 1ffff92000140f4a [ 500.021598][ C1] FS: 0000000000000000(0000) GS:ffff88812350a000(0000) knlGS:0000000000000000 [ 500.021613][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 500.021626][ C1] CR2: 00007fa5e3eabf82 CR3: 000000000ff48000 CR4: 00000000003526f0 [ 500.021642][ C1] Call Trace: [ 500.021649][ C1] [ 500.021655][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 500.021680][ C1] arch_stack_walk+0xfb/0x150 [ 500.021707][ C1] ? synproxy_send_client_synack+0x89b/0xde0 [ 500.021798][ C1] ? skb_clone+0x212/0x3a0 [ 500.021880][ C1] stack_trace_save+0xa9/0x100 [ 500.021901][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 500.021931][ C1] kasan_save_track+0x3e/0x80 [ 500.021955][ C1] ? kasan_save_track+0x3e/0x80 [ 500.021978][ C1] ? __kasan_slab_alloc+0x6c/0x80 [ 500.022002][ C1] ? kmem_cache_alloc_noprof+0x2b4/0x600 [ 500.022030][ C1] ? skb_clone+0x212/0x3a0 [ 500.022049][ C1] ? netem_enqueue+0xecb/0x32c0 [ 500.022128][ C1] ? dev_qdisc_enqueue+0x4e/0x260 [ 500.022177][ C1] ? __dev_queue_xmit+0x1b6c/0x3920 [ 500.022199][ C1] ? ip_finish_output2+0xbda/0x10b0 [ 500.022220][ C1] ? ip_output+0x29f/0x450 [ 500.022265][ C1] __kasan_slab_alloc+0x6c/0x80 [ 500.022291][ C1] kmem_cache_alloc_noprof+0x2b4/0x600 [ 500.022312][ C1] ? skb_clone+0x212/0x3a0 [ 500.022331][ C1] ? kmem_cache_alloc_noprof+0x151/0x600 [ 500.022352][ C1] ? skb_clone+0x212/0x3a0 [ 500.022381][ C1] skb_clone+0x212/0x3a0 [ 500.022401][ C1] ? netem_enqueue+0xeb8/0x32c0 [ 500.022426][ C1] netem_enqueue+0xecb/0x32c0 [ 500.022450][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 500.022475][ C1] dev_qdisc_enqueue+0x4e/0x260 [ 500.022499][ C1] ? __dev_queue_xmit+0x1b54/0x3920 [ 500.022522][ C1] __dev_queue_xmit+0x1b6c/0x3920 [ 500.022547][ C1] ? __dev_queue_xmit+0x29b/0x3920 [ 500.022574][ C1] ? ipv4_synproxy_hook+0x246/0xd00 [ 500.022598][ C1] ? __lock_acquire+0x747/0x2de0 [ 500.022622][ C1] ? __pfx___dev_queue_xmit+0x10/0x10 [ 500.022645][ C1] ? __pfx_nf_confirm+0x10/0x10 [ 500.022706][ C1] ? ip_finish_output2+0x972/0x10b0 [ 500.022730][ C1] ip_finish_output2+0xbda/0x10b0 [ 500.022752][ C1] ? ip_finish_output2+0x3de/0x10b0 [ 500.022778][ C1] ip_output+0x29f/0x450 [ 500.022797][ C1] ? ip_output+0x5a/0x450 [ 500.022816][ C1] synproxy_send_client_synack+0x89b/0xde0 [ 500.022848][ C1] ? __pfx_synproxy_send_client_synack+0x10/0x10 [ 500.022871][ C1] ? nft_log_dump+0x244/0x4e0 [ 500.022924][ C1] ? synproxy_pernet+0x45/0x270 [ 500.022952][ C1] nft_synproxy_eval_v4+0x362/0x4e0 [ 500.022981][ C1] ? __pfx_nft_synproxy_eval_v4+0x10/0x10 [ 500.023005][ C1] ? __pfx___sanitizer_cov_trace_pc+0x10/0x10 [ 500.023029][ C1] ? nf_ip_checksum+0x13c/0x510 [ 500.023080][ C1] nft_synproxy_do_eval+0x389/0x5d0 [ 500.023108][ C1] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 500.023143][ C1] nft_do_chain+0x48d/0x1b10 [ 500.023177][ C1] ? __pfx_nft_do_chain+0x10/0x10 [ 500.023206][ C1] ? __local_bh_enable_ip+0xd6/0x140 [ 500.023237][ C1] ? lockdep_hardirqs_on+0x7b/0x110 [ 500.023304][ C1] nft_do_chain_ipv4+0x195/0x290 [ 500.023383][ C1] ? ipt_do_table+0x2b9/0x15d0 [ 500.023456][ C1] ? __pfx_nft_do_chain_ipv4+0x10/0x10 [ 500.023484][ C1] ? iptable_mangle_hook+0x18a/0x4c0 [ 500.023513][ C1] ? __pfx_nft_do_chain_ipv4+0x10/0x10 [ 500.023540][ C1] nf_hook_slow+0xc5/0x220 [ 500.023565][ C1] NF_HOOK+0x21f/0x3c0 [ 500.023591][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 500.023618][ C1] ? NF_HOOK+0x9e/0x3c0 [ 500.023643][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 500.023671][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 500.023702][ C1] ? ip_local_deliver+0x113/0x190 [ 500.023730][ C1] NF_HOOK+0x336/0x3c0 [ 500.023757][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 500.023780][ C1] ? NF_HOOK+0x9e/0x3c0 [ 500.023801][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 500.023827][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 500.023851][ C1] ? ip_rcv_core+0x88d/0xd50 [ 500.023877][ C1] ? __pfx_ip_rcv+0x10/0x10 [ 500.023900][ C1] ? __pfx_ip_rcv+0x10/0x10 [ 500.023918][ C1] process_backlog+0xa6b/0x18b0 [ 500.023934][ C1] ? process_backlog+0x3de/0x18b0 [ 500.023952][ C1] __napi_poll+0xaa/0x330 [ 500.023973][ C1] net_rx_action+0x61d/0xf50 [ 500.023991][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 500.024016][ C1] handle_softirqs+0x265/0x8d0 [ 500.024038][ C1] ? kernel_fpu_end+0x62/0x80 [ 500.024057][ C1] do_softirq+0x77/0xd0 [ 500.024074][ C1] [ 500.024078][ C1]