last executing test programs: 2.125157534s ago: executing program 0 (id=6568): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000200)="a10100001400add427323b470c45b45602067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="0500000000000000060000000000000085100000020000008500000000000000c3b9ffff100000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0xc, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x6}, 0x94) ioctl$TUNSETLINK(r2, 0x400454cd, 0x339) r3 = socket$kcm(0x2, 0x7, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) getsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f0000000300)={{{@in=@broadcast, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@private}}, &(0x7f0000000900)=0xfffffe7a) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000005200010000000000000000000a00000008000400", @ANYRES32=r5, @ANYBLOB="82ce3bc8493e2be9715434d49d6d6c377bc4e80c76fadc1e30"], 0x1c}}, 0x840) r6 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r6, &(0x7f0000000280)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) connect$inet(r6, &(0x7f0000000180)={0x2, 0x4e21, @empty}, 0x10) sendto$inet(r6, &(0x7f00000002c0)="2e552f5d9fd8b0d9627c4980f0d1ea2bf8f617a682acd2841acd878bd68344d4f50f83b0c51fa9025a01c95d", 0x2c, 0x8013, 0x0, 0x0) shutdown(r6, 0x1) close(0x3) socket(0x2, 0x80805, 0x0) r7 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_CONTEXT(r4, 0x84, 0x11, &(0x7f00000001c0)={0x0, 0x24000000}, &(0x7f00000008c0)=0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r4, 0x84, 0x6d, &(0x7f00000007c0)={r8, 0xb0, "d4268ea6d20f5fecccae83b53863952a0f7aa8d695422a47f65d0e45fe059507f6efa48cbcdaaeac7cd7e00fcbb586dac1ae90fd424114f5a169ed791ce1d71304027e2920083453b1ff155bf62509d1f838e7b66699e8580e729b11aa376d37f22ee4c2581f39b1e5a442da769dbf0195457bfb27c5a5145e51ab878d82fe59c411e280bb61cda3f9d173070a9fc11e2466fd6a3cc657646a341c2d792d65248ecf8c58891df518055ca42b3c2bcfb4"}, &(0x7f0000000880)=0xb8) r9 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r9, 0x10e, 0x2, &(0x7f0000000100)=0xc, 0x4) recvmsg$unix(r4, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000500)=""/199, 0xc7}, {&(0x7f0000000600)=""/223, 0xdf}], 0x2, &(0x7f0000000740)=[@cred={{0x1c}}], 0x20}, 0x2060) 2.042774909s ago: executing program 4 (id=6569): ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000000)='\'.-(+#\\!&[\xdd^\xa1)[+=-\x00', 0x101000, &(0x7f0000000040)={@_ha_fsid={[0x7, 0xff]}, {0x2, 0x3, 0xfff}}, 0xfffffff8, &(0x7f0000000080), &(0x7f00000000c0)=0x101}) sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x29001004}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x78, 0x0, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_REG_RULES={0x58, 0x22, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x5}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x7}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x6}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x40}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x7}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0xd}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x9}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x1}]}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x4}, 0x4008041) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), r0) sendmsg$IPVS_CMD_DEL_SERVICE(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x3c, r1, 0x20, 0x70bd2b, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40001}, 0x8000) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, 0x0, 0x100, 0x3, 0x25dfdbfb, {{}, {}, {0x14, 0x18, {0x3, @bearer=@l2={'eth', 0x3a, 'vxcan1\x00'}}}}, [""]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x800) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000500), r0) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x44, r2, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@GTPA_PEER_ADDR6={0x14, 0xb, @remote}, @GTPA_PEER_ADDR6={0x14, 0xb, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @GTPA_I_TEI={0x8}]}, 0x44}}, 0x40) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000640)=0x0) syz_open_procfs$namespace(r3, &(0x7f0000000680)='ns/time_for_children\x00') r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$team(&(0x7f0000000700), r0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000740)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000780)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000840)={'syztnl2\x00', &(0x7f00000007c0)={'syztnl2\x00', 0x0, 0x2f, 0xfd, 0x9, 0x3, 0x23, @mcast1, @mcast2, 0x8000, 0x8000, 0x7, 0x1}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000900)={'syztnl1\x00', &(0x7f0000000880)={'gretap0\x00', 0x0, 0x700, 0x10, 0xd, 0x2340c38b, {{0xf, 0x4, 0x3, 0x0, 0x3c, 0x65, 0x0, 0xe, 0x2d, 0x0, @local, @private=0xa010101, {[@ra={0x94, 0x4}, @ssrr={0x89, 0xb, 0x93, [@rand_addr=0x64010101, @multicast1]}, @noop, @rr={0x7, 0x17, 0xc8, [@rand_addr=0x64010102, @loopback, @dev={0xac, 0x14, 0x14, 0x25}, @rand_addr=0x64010102, @rand_addr=0x64010100]}]}}}}}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000940)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000980)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000009c0)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000a00)={'team0\x00', 0x0}) getsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f0000000a40)={@private0, 0x0}, &(0x7f0000000a80)=0x14) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000ac0)={0x0, @local, @private}, &(0x7f0000000b00)=0xc) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000b40)={'wg2\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000c00)={'ip6tnl0\x00', &(0x7f0000000b80)={'ip6gre0\x00', 0x0, 0x4, 0x7f, 0x7f, 0x1, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, @empty, 0x8, 0x10, 0x6, 0x80d}}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000cc0)={0xffffffffffffffff, 0x58, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000d80)={'erspan0\x00', &(0x7f0000000d00)={'erspan0\x00', 0x0, 0x78a8, 0x7800, 0x80000000, 0x21c, {{0x10, 0x4, 0x2, 0x1b, 0x40, 0x65, 0x0, 0x60, 0xe8c1a2ef94757e70, 0x0, @private=0xa010100, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@ra={0x94, 0x4, 0x1}, @noop, @timestamp_prespec={0x44, 0x24, 0xed, 0x3, 0x1, [{@empty, 0xa5}, {@rand_addr=0x64010101, 0x7}, {@broadcast, 0x80000001}, {@dev={0xac, 0x14, 0x14, 0x2b}, 0x800}]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000e40)={'tunl0\x00', &(0x7f0000000dc0)={'sit0\x00', 0x0, 0x7800, 0x10, 0x1, 0x10001, {{0x9, 0x4, 0x3, 0x3, 0x24, 0x67, 0x0, 0xd8, 0x2f, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x26}, {[@lsrr={0x83, 0xb, 0xcb, [@loopback, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @generic={0x83, 0x3, '6'}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000e80)={'team0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000f40)={'erspan0\x00', &(0x7f0000000ec0)={'syztnl0\x00', 0x0, 0x8000, 0x1, 0x10001, 0x2, {{0xd, 0x4, 0x0, 0x7, 0x34, 0x67, 0x0, 0x7, 0x2f, 0x0, @private=0xa010100, @empty, {[@end, @end, @ssrr={0x89, 0x1b, 0x9d, [@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @dev={0xac, 0x14, 0x14, 0x43}, @remote, @remote]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000001000)={'syztnl0\x00', &(0x7f0000000f80)={'syztnl0\x00', 0x0, 0x29, 0x27, 0x3, 0x0, 0x38, @private0, @mcast2, 0x1, 0x8, 0x0, 0xbfc}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000001100)={'syztnl0\x00', &(0x7f0000001040)={'syztnl2\x00', 0x0, 0xdca073b7ffa91992, 0x7, 0x8, 0xfffffff4, {{0x1d, 0x4, 0x3, 0x5, 0x74, 0x67, 0x0, 0x3, 0x29, 0x0, @empty, @loopback, {[@timestamp_prespec={0x44, 0x3c, 0x65, 0x3, 0xf, [{@local, 0x5dc}, {@broadcast, 0x4}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xfffffffd}, {@private=0xa010100, 0x7}, {@loopback, 0xfff}, {@broadcast, 0x9}, {@local, 0x4f0}]}, @timestamp_addr={0x44, 0x1c, 0xe4, 0x1, 0xb, [{@dev={0xac, 0x14, 0x14, 0x3c}, 0x3}, {@private=0xa010100, 0x1}, {@remote, 0x3}]}, @ra={0x94, 0x4}, @end]}}}}}) sendmsg$TEAM_CMD_OPTIONS_GET(r4, &(0x7f0000001fc0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001f80)={&(0x7f0000001680)={0x8e8, r5, 0x100, 0x70bd26, 0x25dfdbff, {}, [{{0x8, 0x1, r6}, {0x84, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8, 0x1, r7}, {0x1b4, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r9}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r10}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}]}}, {{0x8, 0x1, r11}, {0xc0, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r12}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r13}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r14}}}]}}, {{0x8}, {0x268, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r15}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4a}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r16}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r17}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r18}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0xff9e, 0x37, 0x2, 0x9}, {0xa0, 0x2, 0x5, 0x7}, {0x5, 0xb, 0x0, 0x8}]}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r19}}}]}}, {{0x8, 0x1, r20}, {0xf4, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r21}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r22}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r23}}}]}}, {{0x8}, {0x250, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x8, 0x4, 0x6, 0x10}, {0xffb0, 0x8, 0x10, 0x4}]}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7ff}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}]}, 0x8e8}, 0x1, 0x0, 0x0, 0x40040000}, 0x20008000) 2.041202248s ago: executing program 3 (id=6570): r0 = socket$inet(0x10, 0x3, 0x0) (async, rerun: 64) r1 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001840)=ANY=[@ANYBLOB="740000001000010400000006000000000000ffff", @ANYRES32=0x0, @ANYBLOB="00000000000000001c001280090001007866726d000000000c00028008000200ea000000140003007866726d30000000000000000000000024000e00"/69], 0x74}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x38, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r2, {0x0, 0x3}, {0xffff, 0xffff}, {0x3}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x7, 0x2, 0x7f}}]}, 0x38}}, 0x4048010) (async) syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), r3) (async, rerun: 32) mmap(&(0x7f00004f1000/0x3000)=nil, 0x3000, 0x200000a, 0x110, 0xffffffffffffffff, 0x728d9000) (rerun: 32) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.kill\x00', 0x275a, 0x0) mmap(&(0x7f00004f1000/0x2000)=nil, 0x2000, 0x2000000, 0x11, r4, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@broadcast, @local, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x2, @remote, @dev={0xac, 0x14, 0x14, 0x19}, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @multicast2}}}}, 0x0) (async, rerun: 32) ioctl$FS_IOC_SETFSLABEL(r4, 0x41009432, &(0x7f0000000000)="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") (async, rerun: 32) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) (async, rerun: 32) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 32) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x20, 0x1c, 0xff, 0xfffff014}, {0x6}]}, 0x10) (async) ioctl$FS_IOC_RESVSP(r5, 0x40305829, &(0x7f0000000540)={0x1100, 0x0, 0x6, 0x10000}) 1.973212569s ago: executing program 1 (id=6571): socket(0x2, 0x80805, 0xfffffffc) 1.863929628s ago: executing program 4 (id=6572): r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = socket$unix(0x1, 0x1, 0x0) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r3 = socket(0x400000000010, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x5, r5, 0x0, 0xffffffff00000000}, 0x38) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x2}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000880)=@newtfilter={0x478, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0xd, 0x5}, {}, {0x7, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x448, 0x2, [@TCA_BASIC_POLICE={0x444, 0x4, [@TCA_POLICE_TBF={0x3c, 0x1, {0x80000000, 0x20000000, 0x2, 0x7, 0x80000000, {0x6, 0x1, 0x3, 0x6, 0x200, 0xc6}, {0x0, 0x0, 0x1, 0x5, 0x4, 0x10001}, 0x7fffffff, 0x6}}, @TCA_POLICE_RATE={0x404, 0x2, [0xaffd, 0x3, 0x3, 0x1, 0x2, 0x6327, 0x8, 0x0, 0x40, 0x1, 0x3, 0x8, 0x7, 0xfffffff9, 0xffffffff, 0x80000000, 0x1, 0xc3, 0x10, 0x5, 0x200, 0x7, 0x7, 0x7d, 0x0, 0x80, 0x6, 0xfffffffd, 0x7f, 0x9, 0x400, 0x0, 0x7, 0x1, 0x2, 0x40, 0xfffffff9, 0xffffffff, 0x1, 0x1, 0x400, 0xfffffffe, 0x3, 0x0, 0x5, 0x4, 0x4, 0xfffff800, 0x4, 0x401, 0x3, 0x7fffffff, 0x1, 0x1, 0x8001, 0xf, 0x2f37, 0x6, 0x9, 0x4, 0x5, 0x101, 0x83, 0x1, 0x4, 0x7, 0x58b, 0x8f, 0x8001, 0x3, 0x5, 0x6, 0x80, 0x5, 0x81, 0x3, 0x7, 0x0, 0x3, 0xd3aa, 0xc690, 0x800, 0x3, 0x1, 0x0, 0x9, 0x0, 0x4, 0x10, 0xac3, 0x9, 0x728, 0x1, 0x0, 0x3, 0x8001, 0x7, 0x1, 0x8000, 0xa1f9, 0x2, 0x8, 0x0, 0x5415, 0xf1, 0x3, 0x7fffffff, 0xbb35, 0x1, 0x4, 0x0, 0x0, 0x5, 0xac, 0x7ff, 0x4, 0x1, 0x4, 0x4, 0x8000, 0x10, 0x7f, 0x8, 0x6, 0x2, 0x8, 0x800, 0x7, 0x9a2e, 0x1398, 0x5, 0xf7b1, 0x7fffffff, 0x5, 0x7f, 0x4, 0x5, 0x1000, 0x0, 0x5, 0xb, 0x0, 0x5, 0x7, 0x6, 0x6, 0x7, 0x0, 0x8, 0xe, 0xb03c, 0x7, 0x7ff, 0x80000001, 0x7fff, 0xffffffff, 0x6, 0x9, 0x9, 0x5, 0x200, 0x7fff, 0x1, 0x5, 0x6, 0x0, 0x80000000, 0x5, 0x80, 0x9, 0x7, 0x8, 0x363, 0x610b, 0xfff, 0x8, 0x4, 0x9, 0x6, 0x2, 0xffffffff, 0x2, 0x2, 0x1, 0x1, 0x10, 0x2, 0xd9, 0x0, 0xffff2dae, 0x7fff, 0x6, 0x7, 0x6b85, 0x8, 0x5, 0x5, 0xffff, 0x0, 0x80, 0x6, 0x4, 0x11a1, 0x0, 0xf3, 0x1, 0x2, 0xb5, 0x4, 0x7, 0x0, 0x7ff, 0x4, 0x4, 0xc585, 0x10001, 0x5bb7, 0x3, 0x1, 0x5, 0x4, 0x8001, 0x8, 0x9, 0x9, 0x94, 0x3, 0xb, 0x4, 0x63, 0x1, 0x9, 0x1000, 0x1, 0x6, 0x8, 0x6d1, 0x0, 0x9, 0x5, 0x400, 0x81, 0x401, 0x7, 0x5, 0x4d, 0x2, 0x8d46, 0x4, 0x81, 0xff, 0xfd9, 0x7, 0x5ad, 0x7, 0x16b3]}]}]}}]}, 0x478}, 0x1, 0x0, 0x0, 0x404c000}, 0x0) sendmsg$inet6(r0, &(0x7f00000009c0)={&(0x7f0000000380)={0xa, 0x4e20, 0x3, @dev={0xfe, 0x80, '\x00', 0xa}, 0x3}, 0x1c, &(0x7f00000008c0), 0x0, &(0x7f0000000940)=[@hopopts_2292={{0x28, 0x29, 0x36, {0x67, 0x1, '\x00', [@calipso={0x7, 0x8, {0x2, 0x0, 0xf0, 0x8000}}]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x2}}, @flowinfo={{0x14, 0x29, 0xb, 0x1}}], 0x58}, 0x8000) 1.808704099s ago: executing program 2 (id=6573): r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/net\x00') bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@cgroup=r0, 0x11, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0}, 0x40) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) socket(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c00000010001fff000000000000000000060000", @ANYRES32=0x0, @ANYBLOB="00000000da000000001c00fc800b00010067656e65766500000c00028005000d007f000000"], 0x3c}}, 0x0) r4 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f00000001c0)={0x80000042}, 0x10) r5 = socket$tipc(0x1e, 0x2, 0x0) sendmsg$tipc(r5, &(0x7f0000002340)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10, 0x0}, 0x20000010) mmap(&(0x7f0000329000/0x1000)=nil, 0x1000, 0x2000002, 0x42073, 0xffffffffffffffff, 0x0) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0xe373b684d2526e78, 0x1000}, 0x20) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$cgroup_freezer_state(0xffffffffffffffff, 0x0, 0x2, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x300) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f0000000180)={'vxcan0\x00', 0x0}) connect$can_bcm(r9, &(0x7f0000000140)={0x1d, r10}, 0x10) sendmsg$can_bcm(r9, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) r11 = socket$can_bcm(0x1d, 0x2, 0x2) r12 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r12, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r12, &(0x7f0000000380)={0x1d, r13, 0x1, {0x0, 0x0, 0x1}, 0xfd}, 0x18) ioctl$ifreq_SIOCGIFINDEX_vcan(r11, 0x8933, &(0x7f0000000100)={'vxcan0\x00'}) sendmsg$nl_route_sched(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@delchain={0x2c, 0x65, 0x200, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xfff3, 0x7}, {0x10, 0xfff1}, {0x5, 0x5}}, [@TCA_CHAIN={0x8, 0xb, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x44060}, 0x98) 1.74010703s ago: executing program 1 (id=6574): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)={0x2, 0x9, 0x0, 0x9, 0x2, 0x0, 0xffffffff, 0x25dfdc01}, 0x10}}, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000100)={0x2, &(0x7f0000000000)=[{0x74, 0x0, 0x0, 0x1}, {0x6}]}, 0x10) 1.656968605s ago: executing program 0 (id=6575): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x40, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{r0, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f00000000c0)='%-010d \x00'}, 0x20) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000004a"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x10, 0xb, &(0x7f00000009c0)=@framed={{0x18, 0x2}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}}, @func={0x85, 0x0, 0x1, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @exit]}, &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0xa}, 0x94) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f0000000340), 0x11000) vmsplice(r4, &(0x7f0000000280)=[{&(0x7f0000000680)="85", 0x1}], 0x1, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000005c0)={0x45c5, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1, 0xf, &(0x7f0000000800)=ANY=[@ANYBLOB="180000000900000000000000010000001811000021a0c68c1e4b7180278a138169e04287d556a6b15f41d0a062ef11ac5f5ba898ae6f15ae532a9291bde6", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000440)='syzkaller\x00', 0x5, 0x90, &(0x7f0000000480)=""/144, 0x41000, 0x4, '\x00', 0x0, @fallback=0x9, r4, 0x8, &(0x7f0000000540)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x4, 0xe, 0x63, 0xe2}, 0x10, r5, r4, 0x7, &(0x7f0000000600)=[0xffffffffffffffff, r1, r0, r4, r4, r1, r0, r1], &(0x7f00000006c0)=[{0x4, 0x3, 0x6, 0x5}, {0x1, 0x4, 0xf, 0x2}, {0x4, 0x5, 0x0, 0x4}, {0x4, 0x5, 0xa, 0x3}, {0x2, 0x3, 0x0, 0x12}, {0x5, 0x3, 0x10, 0xc}, {0x3, 0x1, 0xd, 0xc}], 0x10, 0x5}, 0x94) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r0}, 0x4) r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r6, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) getpeername$llc(r6, 0x0, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$inet_tcp(0x2, 0x1, 0x0) r9 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r7, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="0100ffffffff0000000001000000100007800c00018008000100", @ANYRES32=r10, @ANYBLOB="0c0005006c010000000000000c000200ff7f000000000000400007800c00018008000100", @ANYRES32=r10, @ANYBLOB="0c00018008000100", @ANYRES32=r8], 0x7c}}, 0x20000000) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x10, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r11, 0x0, 0xe, 0x0, &(0x7f0000000100)="b34715ecd04550d3abc89b6f7bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.604264313s ago: executing program 3 (id=6576): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="240000001800010000000000000000000a008000", @ANYRES32=0x0, @ANYBLOB="008000000800020000000000"], 0x24}}, 0x0) 1.554536943s ago: executing program 1 (id=6577): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0xa, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f00000001c0)={0xffffffffffffffff, &(0x7f0000000080)='hash:net\x00', 0x4000, &(0x7f00000000c0)={@align=0x7, {0x8, 0xfff5, 0xffff7fff, 0x4}}, 0x4, &(0x7f0000000140)={@_ha_fsid}, &(0x7f0000000180)=0x2}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r2, 0x800448f0, &(0x7f00000007c0)="c16977f1ac") ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SURVEY(r1, &(0x7f0000000580)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000540)={&(0x7f0000001680)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRESOCT=r3, @ANYBLOB="080028bd7000ffdbdf253200000900000800", @ANYRES16, @ANYBLOB="0c0099000010000027000000", @ANYRES32=r3], 0x28}, 0x1, 0x0, 0x0, 0x24004001}, 0x8000) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f00000015c0)=ANY=[@ANYBLOB="13f000009d5cadb32596e733a68c43a2e1794aa9fbbb9ee345ca343d1f5aabf1ac5eabdafccf940d4476d7d2f93f66fbb5ac299b7bbf5510d2cf980b14bd956401fa522271105bee04ac3f9021be69e46c3b74adffe2e8df7ada0ddb013e53580da2afb2eb9f90dbf3d1ad38ad1cac4627819529c88fe53b175faab06ceec8f44abd1d02cf0118496fa4a798e63b569938ff0ae6edb1f044"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x1a, 0x0, &(0x7f0000001480)=ANY=[@ANYRESHEX=r1, @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x59, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r4, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2000) ioctl$int_out(r6, 0x5460, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000001940)=@base={0x1f, 0x2, 0x8, 0x5, 0xd6ea9043dd433c27, 0xffffffffffffffff, 0x5, '\x00', 0x0, r1, 0x1, 0x1}, 0x50) r8 = bpf$TOKEN_CREATE(0x24, &(0x7f0000001b00)={0x0, r1}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000001500)={0x1, 0x1d, &(0x7f0000001300)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001400)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0xaa2e48d820f520b5, '\x00', 0x0, @fallback=0x2b, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001440)={0x4, 0x4, 0xf, 0x3}, 0x10, 0x0, r0, 0x2, &(0x7f00000019c0)=[r1, 0xffffffffffffffff, r1, r1, r1, 0xffffffffffffffff, r1, r6, r7], &(0x7f0000001a00)=[{0x0, 0x1, 0x9, 0xa}, {0x3, 0x1, 0xe, 0x7}], 0x10, 0xfffffff8, @value=r8}, 0x94) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x5000009, 0x10012, r9, 0x0) write$cgroup_pid(r9, &(0x7f00000012c0)=0xffffffffffffffff, 0x12) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) r11 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_CONGESTION(r11, 0x6, 0xd, &(0x7f0000000000)='cubic', 0xa) setsockopt$inet_int(r11, 0x0, 0x18, &(0x7f0000000040)=0x6, 0x4) sendmsg$IPSET_CMD_CREATE(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)={0x5c, 0x2, 0x6, 0x8f7b80029b167919, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0xfc}, @IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r12 = socket$alg(0x26, 0x5, 0x0) bind$alg(r12, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-aes-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r12, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) r13 = accept$alg(r12, 0x0, 0x0) sendmmsg$alg(r13, &(0x7f0000007a40)=[{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000100)="d27e096c28b61f97670f283a7de80ecc00bacc33bd8a94d2dc0db0cc", 0x1c}], 0x1, 0x0, 0x0, 0x80}], 0x1, 0x4004041) recvmmsg(r13, &(0x7f0000000940)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000240)=""/13, 0xd}, {&(0x7f0000000340)=""/15, 0xf}], 0x2}, 0xd}], 0x1, 0x40010120, 0x0) syz_emit_ethernet(0x1a5, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c20000000800417001970068000001ff9078e0000001ac1414bb890b5fe0000002ffffffff831732e0000001ac1414bbac1414327f00000164010102831b37ac1414bbe00000020a0101000a010102e0000002ac141440891b30ac14141d00007fff7f000001ac141421ac1e0101ffffffff442c3771ac1414aa000000010000000000000008e00000020000007f0a01010100000002ac1414aa2302869e442cc4f10000000000000800ac14142d00000004e0000001000000000000000000000006ac1e000100000000f0a277237b60404ff93f0e55b056bc6353b748036a60900518f840796d0d708faabd9dabf3691ab2dfa99655593b1824e00d395e6d7ddeca1a1f6d3dd159bc596d0d86eb5cf3fa37b6b7ad0940acd549eeb4452564d2a204ac105f89edb6813483062ad7079f97a62ffb9bbaddcb9521f67735a7eb858aa69491e894ca1635f3c784149110cfc70a9ee2ef73e788989edcedc2074800baed8a519247a51ae4f1df38777a6073fc03100070ac4be46569cf4122b6008c934839cfbf378a0c98d25529686343"], 0x0) 1.546951865s ago: executing program 2 (id=6578): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x38, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x4}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x4048801) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="318126bd0200766975745f7769666930000020000300"], 0x2c}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r3 = syz_genetlink_get_family_id$gtp(&(0x7f00000001c0), r0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000300)={'syztnl1\x00', &(0x7f0000000280)={'ip6tnl0\x00', 0x0, 0x2f, 0x2, 0x6d, 0x81, 0x4b, @private2, @remote, 0x1, 0x7800, 0xffff, 0x3}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000003c0)={'ip6tnl0\x00', &(0x7f0000000340)={'ip6tnl0\x00', 0x0, 0x29, 0x1, 0x40, 0x1, 0x0, @loopback, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x10, 0x7, 0x41, 0x6}}) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000540)={&(0x7f0000000140), 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x68, r3, 0x20, 0x70bd28, 0x25dfdbfe, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_LINK={0x8, 0x1, r4}, @GTPA_PEER_ADDRESS={0x8, 0x4, @broadcast}, @GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_FAMILY={0x5, 0xd, 0x25}, @GTPA_LINK={0x8, 0x1, r5}, @GTPA_FLOW={0x6}, @GTPA_PEER_ADDR6={0x14, 0xb, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x68}, 0x1, 0x0, 0x0, 0x20054090}, 0x8000) syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), r0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_sfeatures={0x3b, 0x2, [{0x80001}, {0xfbfffffa, 0x1c3ff}]}}) 1.42026835s ago: executing program 3 (id=6579): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x840000000002, 0x3, 0xff) setsockopt$inet_int(r1, 0x0, 0xd, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$alg(0x26, 0x5, 0x0) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(r3, 0x89e3, &(0x7f00000000c0)={0x0, 0x0, 0xa, 0xb}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001380), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r4, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001440)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010025bd7000ffdbdf257000000008000300", @ANYRES32=r7, @ANYBLOB="797edba1d6137185b48cf3ab32e6b1201bc10220a2dbdfb25e9f95feac7fb65a06767490be7ebf8d62615bf5873af0b46b7786358d3759c4630163e77b45277a034323ebdaf216a18d4391eb27cf93620906df88fb5a921c4e79668865dc7aa377a80911a8366c8f76845d1ba093fbc3b94779e87ac3b683864920c1"], 0x1c}, 0x1, 0x0, 0x0, 0x4008811}, 0x844) bind$alg(r2, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-blowfish-asm\x00'}, 0x58) accept$alg(r2, 0x0, 0x0) close(0x4) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0xffffffffffffff8f, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a40000000060a0b0400000000000000000200000014000480100001800b00010064796e73657400000900010073797a30000000000900010073797a300000000014000000fbff010000000000000000000000000a"], 0x68}}, 0x0) 1.365021349s ago: executing program 4 (id=6580): syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) r2 = socket(0x29, 0x5, 0x1ff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000000000000000000030000005800018044000400200001e6f8b1830149b12e00000001d900000000000000000000000100000000200002000a00000000000000fe800000000000000004000000000000000000000d0001007564703a73"], 0x6c}}, 0x0) sendmsg$TIPC_NL_PUBL_GET(r2, &(0x7f0000000b00)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000680)=ANY=[@ANYBLOB="04040000", @ANYRES16=r4, @ANYBLOB="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"], 0x404}, 0x1, 0x0, 0x0, 0x4004050}, 0x10) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r5, 0x84, 0x6c, &(0x7f0000000540)={r1}, &(0x7f0000000640)=0x8) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0xa, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0), 0x10}, 0x94) ioctl$XFS_IOC_START_COMMIT(r5, 0x80585882, &(0x7f0000000100)={0xffffffffffffffff}) r7 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r7, 0x6, 0x16, &(0x7f0000000300)=[@sack_perm, @sack_perm, @timestamp], 0x3) r8 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r8, &(0x7f00000001c0), 0x10) close(0x3) ioctl$FS_IOC_GETFSLABEL(r6, 0x81009431, &(0x7f0000000200)) 1.361802292s ago: executing program 2 (id=6581): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x3, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18020000ffffffff00000000fdfffdff18010000646c6c2500000000002020207b1af8ff001c0000bfa100000000000007010000f8ffffffb702000008000000b7030000fdffffff85000000700000009500000000000000018c7b5f4267"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000100)="e09f547ed3f02dc1fd3d6487775b", 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000080)='notify_on_release\x00', 0x2, 0x0) writev(r4, &(0x7f0000000a40)=[{&(0x7f00000007c0)='t', 0x1}], 0x1) r5 = socket$inet_sctp(0x2, 0x4, 0x84) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000040)={0x0, 0xc2ea}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp_SCTP_CONTEXT(r5, 0x84, 0x11, &(0x7f0000000140)={r6, 0x800}, &(0x7f00000001c0)=0x8) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)="991347c388249d2e", 0x8}, 0x1, 0x0, 0x0, 0x40000c0}, 0x10) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x5, 0x1}, 0x50) r10 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000009c0)={&(0x7f0000000800)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xfd, 0xfd, 0x7, [@func_proto={0x0, 0xa, 0x0, 0xd, 0x0, [{0x8, 0x1}, {0x6, 0x4}, {0x6, 0x5}, {0xb, 0x1}, {0x2, 0x5}, {0xf}, {0xe, 0x4}, {0x6, 0x2}, {0xb, 0x1}, {0x2, 0x3}]}, @var={0xa, 0x0, 0x0, 0xe, 0x3}, @enum={0xa, 0x1, 0x0, 0x6, 0x4, [{0xb, 0x8}]}, @datasec={0x9, 0x3, 0x0, 0xf, 0x3, [{0x4, 0xfff, 0x6}, {0x3, 0x9, 0x4}, {0x3, 0x6, 0x7fffffff}], "6ac7ef"}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x5, 0x1}}, @datasec={0xa, 0x2, 0x0, 0xf, 0x2, [{0x5, 0xff, 0x2}, {0x5, 0x65f7, 0x9}], "a640"}, @volatile={0x6, 0x0, 0x0, 0x9, 0x3}]}, {0x0, [0x0, 0x5f, 0x61, 0x30, 0x0]}}, &(0x7f0000000940)=""/84, 0x11f, 0x54, 0x1, 0x7, 0x10000, @value=r7}, 0x28) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a80)={0x1, 0xffffffffffffffff}, 0x4) r12 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r12}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x1a, 0xc, &(0x7f0000000440)=@raw=[@map_idx_val={0x18, 0x0, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x7}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @map_fd={0x18, 0x2, 0x1, 0x0, r9}, @jmp={0x5, 0x0, 0xd4f5bcffd2a1a92a, 0xa, 0x3, 0xfffffffffffffffe, 0x10}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @call={0x85, 0x0, 0x0, 0x4e}, @cb_func={0x18, 0x9, 0x4, 0x0, 0xfffffffffffffffc}], &(0x7f00000004c0)='syzkaller\x00', 0x9, 0xeb, &(0x7f0000000500)=""/235, 0x0, 0x76, '\x00', 0x0, @fallback, r10, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000a00)={0x1, 0x5, 0x200, 0x6}, 0x10, 0xffffffffffffffff, r2, 0x0, &(0x7f0000000ac0)=[r11, r12], 0x0, 0x10, 0x4}, 0x94) sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0x1c, 0x21, 0x9, 0x70bd27, 0x25dfdbfc, {0x1}, [@typed={0x8, 0x8, 0x0, 0x0, @fd}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) write$tun(r0, &(0x7f0000000280)={@val={0x0, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0xb, 0x0, 0x0, 0x0, 0x4, {[@mptcp=@mp_join={0x1e, 0x3, 0x4}, @timestamp={0x5, 0xa}, @generic={0x0, 0x8, "d58838068b91"}, @fastopen={0x22, 0x3, 'a'}]}}}}}}, 0x4e) 1.069662825s ago: executing program 2 (id=6582): r0 = socket$netlink(0x10, 0x3, 0x15) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0x3, 0x2) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f00000008c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000a40)=ANY=[@ANYBLOB="680200001300000227bd7000ffdbdf250502080a4e244e22ff070000ad010000000000000000000001000000e80000000100000067d90000", @ANYRES32=0x0, @ANYBLOB="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"], 0x268}, 0x1, 0x0, 0x0, 0x488c3}, 0x4000000) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) syz_emit_ethernet(0x5e, &(0x7f0000000600)=ANY=[@ANYBLOB="aaaaaaaaaaaaaa16d32dee70ba25d73028dd00283afffe8000000000000000000000000000bbff0200000000000000000000000000018900907800000000fe8000000000000000000000000000bb0002122b472e41e24b11f34b608816e5366955902098f2cc4e7004d85643f5708aefb77406f3a7abc41089ec0212c884d018f10e24afffcade141b06c5e40c667fd6d025a61cba53cdf94a9ee98d10c8a141e284722a5136f19610f5be120077d74f866ad9186b04c94532a328b76bc3"], 0x0) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_OPER(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000067632594172e3ee58cc8b74b06", @ANYRES16=r4, @ANYBLOB="010000000000fddbdf250800000008000300", @ANYRES32=0x0, @ANYBLOB="0c0099001d70000000010000"], 0x28}}, 0x11) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni-avx2\x00'}, 0x58) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, 0x0, 0x0) r7 = accept4(r6, 0x0, 0x0, 0x800) sendmsg$kcm(r7, &(0x7f00000044c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000005dc0)=ANY=[@ANYBLOB="10100000000000001701"], 0x2308}, 0x20000814) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000300)={'vxcan0\x00', 0x0}) connect$can_j1939(r7, &(0x7f0000000340)={0x1d, r8, 0x1, {0x2, 0x0, 0x3}, 0x1}, 0x18) r9 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r9, 0x891b, 0x0) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r10 = accept4(r5, 0x0, 0x0, 0x800) sendmmsg$alg(r10, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r10, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0xff40}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000003c0)={0x0, {0x2, 0x4e20, @private=0xa010100}, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x12}}, {0x2, 0x4e21, @empty}, 0x4, 0x0, 0x0, 0x0, 0x2008, 0x0, 0x200001, 0x1ff, 0x9}) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000001600)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1d, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) write$tun(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="080000fa"], 0xdc) r11 = socket$alg(0x26, 0x5, 0x0) bind$alg(r11, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'adiantum(xts-twofish-avx,camellia-asm,cbcmac(aes))\x00'}, 0x58) 776.023655ms ago: executing program 3 (id=6583): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x4}, 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r5 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r3, r4, 0x26, 0x0, @void}, 0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000040)=r5, 0x4) close(r5) sendmsg$NFT_MSG_GETOBJ(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x28, 0x13, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x40810}, 0x4) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x4c, r2, 0x1, 0x70bd2b, 0x25dfdbff, {{}, {@void, @val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x1, 0x5b}}}}, [@NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'dvmrp0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x62b4e7cbb8b4f193}, 0x8040) 774.765436ms ago: executing program 4 (id=6584): ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000000)='*+.\x00', 0x10801, &(0x7f0000000040)={@_ha_fsid={[0x4]}, {0x9, 0x5, 0x78f, 0x4}}, 0x8, &(0x7f0000000080)={@_ha_fsid}, &(0x7f00000000c0)=0x10000}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r0, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0xc4, 0x0, 0x4, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x7, 0x41}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xf}], @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x2}, @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x6}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xfffffffb}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x6}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0xf5}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x13c}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x16}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xa9}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}]]}, 0xc4}, 0x1, 0x0, 0x0, 0x4000000}, 0x20008000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000340)={'wlan0\x00'}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000400)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000440)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000480)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000004c0)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000500)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000540)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000580)=0x0) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000680)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x5c, r3, 0x4, 0x70bd2d, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r8}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r9}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r10}]}, 0x5c}, 0x1, 0x0, 0x0, 0x50}, 0x0) r11 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000006c0), 0x10002, 0x0) read$rfkill(r11, &(0x7f0000000700), 0x8) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000007c0)={'syztnl1\x00', &(0x7f0000000740)={'gre0\x00', 0x0, 0x80, 0x0, 0x6, 0x7, {{0xb, 0x4, 0x1, 0x38, 0x2c, 0x64, 0x9, 0x2, 0x29, 0x0, @private=0xa010101, @rand_addr=0x64010100, {[@generic={0x7, 0x3, "1f"}, @end, @lsrr={0x83, 0x13, 0x39, [@rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0x2b}, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback]}, @noop]}}}}}) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000800)={@rand_addr=' \x01\x00', @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x6, 0x0, 0x7f, 0x0, 0x4, 0xa, r12}) bind$packet(r0, &(0x7f0000000880)={0x11, 0x15, r12, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) ioctl$SIOCX25SCALLUSERDATA(r0, 0x89e5, &(0x7f00000008c0)={0x42, "1852a161d23fcfc89a4669d7051e6a7cd0157876e96860ed16f67b3cb6bbfc9899b33af63c350439f001de4eb1f3982af3c47cb7848e45e5d4f7898f0a41acffbe53ea99eb954f3bbe3a5facf4ad1e0a7d152ecded0121e292e8c1a440cba73c2c4422d13d3eb1c5e66a3c49c53b83d83d3bd7dde7bf6b82dd972f45a9d12df9"}) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f0000000980)={0x2, 'bridge_slave_1\x00', 0x2}, 0x18) r13 = accept4$phonet_pipe(r0, &(0x7f00000009c0), &(0x7f0000000a00)=0x10, 0x80800) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r13, 0x8933, &(0x7f0000000a40)={'batadv_slave_1\x00', 0x0}) r15 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_inet_SIOCSIFADDR(r15, 0x8916, &(0x7f0000000a80)={'veth1_to_hsr\x00', {0x2, 0x4e21, @broadcast}}) ioctl$sock_inet6_SIOCSIFADDR(r15, 0x8916, &(0x7f0000000ac0)={@private1, 0x61, r14}) write$tun(r0, &(0x7f0000000b00)={@void, @void, @arp=@generic={0x4, 0xf9, 0x6, 0xb, 0x8, @multicast, "b311fb05a44c5d9ac39b11", @random='~[gL\fw', "81d7a4424c0f71d48e7159b504647768"}}, 0x2f) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r0, 0x8982, &(0x7f0000000b40)) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r13, 0x8933, &(0x7f0000000b80)={'batadv_slave_0\x00'}) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r15, 0x84, 0x1e, &(0x7f0000000bc0), &(0x7f0000000c00)=0x4) 746.416625ms ago: executing program 0 (id=6585): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="010000000000fcdbdf251200000018000180140002007665746830000000000000000800000008"], 0x3c}, 0x1, 0x0, 0x0, 0x400c000}, 0x2004c0a0) r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000190001000000000000000000021800000000fd000000ed0008000100ac1414003400080004"], 0x2c}}, 0x0) sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) 564.754474ms ago: executing program 1 (id=6586): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)=@migrate={0x138, 0x21, 0x1, 0x0, 0x0, {{@in, @in6=@remote}, 0x6e6bb2}, [@migrate={0xe8, 0x11, [{@in=@multicast1, @in=@local, @in=@local, @in=@broadcast}, {@in=@empty, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@multicast2, @in6=@empty}, {@in=@empty, @in=@private, @in6=@remote, @in6=@mcast2}]}]}, 0x138}}, 0x0) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) r2 = accept$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000005c0)=0x14) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000002c0)=0x14) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000440)={'ip_vti0\x00', &(0x7f0000000340)={'sit0\x00', 0x0, 0x1, 0x1, 0x0, 0x4, {{0x23, 0x4, 0x2, 0x7, 0x8c, 0x65, 0x0, 0x3, 0x4, 0x0, @broadcast, @rand_addr=0x64010101, {[@end, @cipso={0x86, 0x6}, @timestamp_addr={0x44, 0x4, 0x54, 0x1, 0x4}, @timestamp={0x44, 0x20, 0xf7, 0x0, 0x4, [0x7, 0x3, 0x9, 0x3bf, 0x6, 0x2, 0xe]}, @rr={0x7, 0x27, 0x4, [@dev={0xac, 0x14, 0x14, 0x34}, @local, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @local, @remote, @loopback, @broadcast, @multicast1]}, @timestamp_addr={0x44, 0x24, 0x75, 0x1, 0x0, [{@local, 0x4}, {@remote, 0x80}, {@rand_addr=0x64010100, 0x4fe8}, {@local, 0x7ff}]}]}}}}}) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) close(0x3) bind$alg(r6, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r7 = accept4(r6, 0x0, 0x0, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1, 0x9, 0x10001, 0x9, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r8, &(0x7f00000003c0), &(0x7f00000000c0)=""/109}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000ac0)={r8, &(0x7f0000000040), &(0x7f00000009c0)=@tcp6, 0x1}, 0x20) sendmsg$alg(r7, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180), 0x0, 0x400d4}, 0x4000810) sendto$inet(r5, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r5, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x3e8, 0x0, 0xfffffffffffffd25) sendmsg$MPTCP_PM_CMD_SET_FLAGS(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000780)=ANY=[@ANYBLOB="ac00000064c00237dabbce28b1985a71d700f30c4ef69468f1d607abe4b497cf1a887dc6c42e98969b28e4d52b19a8b335780c7bf1747029a40105c597980f6a8866f15ed87645fb99fc75d1381085f5573f3dce9eb7f8ef63", @ANYRES16=r1, @ANYBLOB="000127bd7000fedbdf25070000003c00068014000400fe80000000000000000000000000002814000400fc00000000000000000000000000000008000600050000000500020012000000080002000000000040000180060005004e200000060005004e20000014000400fe800000000000000000000000000033080006000000000008000700", @ANYRES32=r3, @ANYBLOB="060005004e2100001400068008000700", @ANYRES16=r4, @ANYRESOCT=r5, @ANYRES32=r4, @ANYBLOB], 0xac}, 0x1, 0x0, 0x0, 0x800}, 0x10) socket$inet_sctp(0x2, 0x5, 0x84) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r9, 0x0) r10 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_TIME_STAMP(r10, 0x0, 0x3, &(0x7f0000000080), 0x4) unshare(0x20000400) socket(0x10, 0x3, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r13 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r12, @ANYBLOB="00000000100000001c001a80", @ANYRES16=r13], 0x44}}, 0x2000800) 519.936456ms ago: executing program 0 (id=6587): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r1 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt(r1, 0x28, 0x6, &(0x7f00000012c0)=""/4096, &(0x7f0000000080)=0x1000) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, &(0x7f0000000340), &(0x7f0000000380)=r2}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 518.887557ms ago: executing program 2 (id=6588): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@ipv6_newaddrlabel={0x30, 0x48, 0x3, 0x0, 0x0, {}, [@IFAL_ADDRESS={0x14, 0x1, @empty}]}, 0x30}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x6, 0xe8c}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="3800000012002102000000001000000000"], 0x38}}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000500)=ANY=[@ANYBLOB="05000000000000007111ad00000000008510000002000000850000000500000095000000000000009500a505000000005160b53d4aaf0ecda3e967683918fabfc90ec1e06c5f48cb9ce64e815b7b74d0c3e9365f188f6a00591b"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={r1, 0xe0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffd8a, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x8, 0x0, 0x0}}, 0x10) 504.184839ms ago: executing program 4 (id=6589): sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x34, 0x0, 0x1, 0x70bd2b, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_RX={0x5, 0x19, 0x1}]}, 0x34}}, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000100)={@multicast, @random="8a0a63cdec59", @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x14}, @remote, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}, @remote}}}}, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r1, &(0x7f0000001600)={&(0x7f0000000040)={0x2, 0x0, @private=0xa010100}, 0x10, 0x0, 0x0, &(0x7f0000000300)=[@rdma_dest={0x10, 0x114, 0xc}], 0x18}, 0x0) (async) r2 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r0}, 0x8) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000002a00)={0x20, 0x2d, 0x107, 0x70bd2b, 0x25dfdbfb, {0x5, 0x7c}, [@nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0xdd}]}, @nested={0x4, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x4040084}, 0x80b1) r4 = socket(0x400000000010, 0x3, 0x0) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r4) sendmsg$IPVS_CMD_NEW_DEST(r4, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x68, r5, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_DEST={0x44, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x2ad}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x9}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x9}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xfffffff4}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}]}, 0x68}}, 0x4008845) (async) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000bc0)={0x0, 0x0, 0x0}, 0x0) (async) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000c00)=@newtfilter={0x850, 0x2c, 0xd3f, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0x0, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_bpf={{0x8}, {0x824, 0x2, [@TCA_BPF_POLICE={0x820, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0xffffff80, 0x9, 0xffff, 0xc, 0x7, 0x1000, 0x7, 0xe731, 0x10, 0x27, 0x0, 0x4, 0xd, 0xbd, 0x10, 0x3, 0x5, 0x4, 0x9, 0x10000, 0x7ff, 0x22, 0xd, 0xffffff80, 0x0, 0xfffffffa, 0xfffffffc, 0x8, 0x6, 0x4, 0x80000000, 0xc0a, 0x8, 0xfffff04a, 0x2, 0x9, 0x5, 0x59be, 0x90, 0x0, 0xf1, 0x40, 0xca20, 0x6, 0xfffffff8, 0x33f, 0xcf, 0x3, 0x1fe3, 0x9, 0x0, 0x3, 0xf78, 0x1ff, 0x8001, 0x3, 0x7, 0x3, 0x9, 0x0, 0x4000101, 0xfffffffd, 0x900, 0x4, 0x3, 0x1, 0xcec101e, 0x101, 0x5, 0x3, 0x101, 0x6, 0x3, 0x8, 0x2, 0x1000, 0xd, 0x82, 0x10, 0x3, 0x4000000, 0x1ff, 0x7, 0x8, 0x3, 0x9, 0x21, 0xb, 0xffffffff, 0x0, 0x1, 0x8, 0x80000000, 0x9, 0xef, 0x7f, 0x0, 0x8, 0x8, 0xd2, 0x9, 0x3, 0x703c47b4, 0x6, 0xfff, 0x6, 0x6, 0x3, 0x5, 0x6, 0x100, 0x8000, 0x77, 0x0, 0x8, 0x5, 0x101, 0x8, 0x5, 0x7, 0x1ff, 0x0, 0x8bb7, 0xff, 0xffff, 0xfffffc01, 0x5, 0x7, 0x2, 0x5, 0x5, 0xa3b4, 0x3, 0xf, 0x2, 0x10000, 0x795, 0xc4, 0x96ba81bb, 0x272, 0x3, 0x3ff, 0x7fffffff, 0x2, 0x4, 0x0, 0x9, 0x6, 0xfffffffc, 0x196b4eb5, 0x6c, 0x2, 0x0, 0x8001, 0x0, 0x6, 0x8001, 0x4, 0x5, 0x1, 0x2, 0x80, 0x1, 0x2, 0x8001, 0xffffffff, 0x5, 0x1, 0x3, 0x0, 0xa, 0x42, 0x834, 0x101, 0xab1, 0x9, 0x1c7, 0x35f3, 0x7, 0x4, 0x9, 0x6, 0x8, 0x80000000, 0x3, 0x9, 0x1, 0x4, 0x9cdf070, 0x12000, 0xf2f, 0x0, 0x3, 0x7fff, 0xa4, 0x3, 0x9, 0xe, 0x5, 0x1, 0x3, 0x8, 0x2, 0x6, 0xfffff000, 0x3b84, 0x7, 0x8001, 0x5, 0x1000, 0x1c00, 0x0, 0x8, 0x8, 0x9, 0x5, 0x9, 0x283a, 0xffffff48, 0xd0fa, 0x1, 0x5, 0xfffffffc, 0x4, 0x2bc3, 0x6, 0x9, 0x2, 0xff, 0x5, 0x3, 0x8, 0x0, 0x63, 0xd, 0x0, 0x9, 0x40, 0x6, 0xfffffffc, 0x4, 0x2, 0x5, 0xfffffff9, 0x9, 0xffff0001, 0x9, 0x1, 0x2, 0x6f7, 0x400, 0xa, 0x100, 0x6, 0x4, 0x8]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x8000}, @TCA_POLICE_RATE={0x404, 0x2, [0xf, 0x7, 0x80000000, 0x5, 0x5, 0x7, 0x6, 0x7, 0x7, 0x1, 0x7, 0x1ed4, 0x3, 0x9, 0x400, 0xd, 0x3, 0xa4ed00, 0x9, 0x7, 0x3be, 0xfb57, 0x40, 0xffffffff, 0x8000, 0x5, 0x8, 0x2, 0x401, 0x5c, 0x9, 0x10000, 0x9, 0x1, 0x0, 0x8, 0x355, 0x0, 0x9, 0x5, 0x100, 0x8003, 0xf, 0xf, 0x0, 0x0, 0xfffffffb, 0x7, 0x10, 0x7ff, 0x10001, 0x5, 0x0, 0x5, 0xaa9, 0xfffffe00, 0x1c, 0x10, 0xd, 0x5, 0x2, 0xcda, 0x0, 0x9, 0x1, 0x800, 0x7, 0x1, 0x4, 0x5, 0x1a5b809d, 0x4e, 0x6, 0x48000, 0x3, 0x8, 0x3, 0x2, 0x6, 0x2, 0x1, 0x10000, 0x3, 0x4, 0x8, 0x5, 0x7, 0x7, 0xa6, 0x0, 0x0, 0x0, 0x35b33ced, 0x0, 0x9, 0x80, 0xf, 0x50fc, 0x2, 0x3, 0xfa37, 0x8, 0x3, 0x2, 0x7b, 0x3, 0x4, 0x1f63, 0xfffffe00, 0x0, 0x5, 0x40, 0x1, 0x1, 0x0, 0x6, 0x71, 0x7, 0xfffff8a7, 0x0, 0xc, 0x1, 0x7, 0x3b, 0x2, 0x8, 0x81, 0xfff, 0x101, 0x4, 0xfffffff7, 0x1, 0x2, 0x1000, 0x3, 0xffff, 0x5, 0x7, 0xe, 0x2, 0x80000001, 0x3, 0x8, 0x6461, 0x80000001, 0x6, 0xc456, 0x0, 0x0, 0x2, 0x80, 0x510e, 0x2, 0x7, 0xffffffff, 0x775, 0x2, 0xfffff9c3, 0x5, 0x80, 0x8, 0x3, 0xd7, 0x7f, 0x8, 0x2, 0x2b86, 0x9, 0x0, 0x5, 0x1f, 0x5, 0x53c, 0xc, 0x3c, 0xb4, 0x7, 0x0, 0xfffffffb, 0xc, 0xffffff00, 0x1, 0x2, 0x0, 0xaef, 0xf969, 0x3, 0x8, 0x9, 0x8, 0x401, 0x80, 0x1, 0xfffff89a, 0xd5f4, 0x8000, 0x400, 0x3, 0x3, 0x4, 0x1, 0x4, 0x3, 0x7, 0x8, 0xfff, 0x1, 0x8, 0x3ff, 0x6, 0x8fc, 0x5, 0xa3, 0xff, 0xffffffff, 0x9, 0x57c, 0x14, 0x1, 0x3, 0x3, 0x1, 0x72, 0xfffffff7, 0xffffffff, 0xffff, 0x4, 0x2, 0x2, 0x5, 0x0, 0x6, 0x1, 0x8, 0x11a, 0x7fff, 0x8, 0xfffffffc, 0xc9, 0x8, 0x5, 0x2, 0x8, 0x2, 0xcb, 0x0, 0x7, 0x6, 0x7, 0x5, 0x5, 0x6, 0x80000000, 0x80, 0x101, 0x80]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x7f}]}]}}]}, 0x850}, 0x1, 0x0, 0x0, 0x24008050}, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0x4, &(0x7f0000000040)=ANY=[@ANYRESHEX=r2], &(0x7f00000000c0)='syzkaller\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x41100, 0x48, '\x00', r7, @xdp}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x3, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5}, [@ldst={0x1, 0x2, 0x4, 0x0, 0x1, 0xbb}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6e2e12bede68ed35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000002a40)=@newchain={0x1ca0, 0x64, 0x200, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x2, 0xe}, {0x4, 0xffff}, {0x5, 0x9}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}, @filter_kind_options=@f_cgroup={{0xb}, {0x1c5c, 0x2, [@TCA_CGROUP_EMATCHES={0x14, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}]}, @TCA_CGROUP_EMATCHES={0x8, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x4}]}, @TCA_CGROUP_POLICE={0x408, 0x2, [@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x9, 0x8, 0x6, 0x0, 0x6, 0x800, 0xfffff99e, 0x3, 0x1, 0xff, 0x5286063b, 0x8000, 0x1, 0x0, 0x882a, 0xfffffff9, 0x3, 0x7, 0x4, 0xfffeffff, 0x9, 0x20, 0x3, 0x7, 0x371, 0xfffff583, 0x1, 0x1, 0x8c05, 0x6, 0x8, 0x7, 0x7, 0x6, 0x6, 0x8, 0x3, 0xf0, 0x0, 0x7fff, 0x5, 0xfffffff9, 0x7, 0x4, 0x7f, 0x7, 0x10, 0xffffc506, 0x8, 0x1000, 0x2, 0x1c0000, 0x4, 0xc, 0xb, 0x8, 0x3ff, 0x5, 0x6, 0x7f, 0x9, 0xfffffff9, 0x9, 0x1, 0x80, 0x30930284, 0x7, 0x0, 0xfc, 0x8, 0x0, 0x5, 0x0, 0x1, 0x3, 0x7fff, 0x8, 0x357, 0x8000, 0x7, 0xce0, 0xf5e, 0x5, 0x2, 0x480, 0x7, 0xffffffff, 0x1, 0xfffffffa, 0x0, 0x1000, 0x2, 0xf73, 0xfffffff7, 0x5, 0x1, 0x705, 0x7, 0xfffffffa, 0xfffffffe, 0x9, 0x8, 0x10001, 0x3f5bd928, 0x6, 0x6ec, 0x4, 0x0, 0x30000000, 0x5, 0x35, 0xc, 0x200, 0x2, 0x8, 0x0, 0x6, 0x277, 0x9, 0x401, 0x3, 0x654, 0x49, 0xb2, 0xa17, 0x10, 0x3, 0xe2c, 0x10, 0x10001, 0x5, 0xfd, 0x9, 0x433, 0xdd, 0x0, 0x6, 0x8, 0x6, 0x9, 0xd3, 0x5, 0x9, 0x7f, 0x0, 0x2, 0x3, 0x3ff, 0x2, 0x2, 0x8, 0x8, 0x6, 0x3, 0x1, 0x2, 0x1, 0x80000000, 0x2, 0x5, 0x1, 0x3, 0xeac, 0x4aea, 0x5, 0x7, 0x6, 0x9, 0x1, 0x0, 0xffffffff, 0x7ac2, 0x3, 0x2, 0xa9d7, 0x80000001, 0x2, 0x7, 0xace, 0x5, 0x0, 0x4, 0x8000, 0x5, 0x0, 0x7, 0x3ff, 0x5, 0x0, 0x1, 0xa00000, 0x5, 0x674f83e, 0x6, 0x2, 0xa, 0xe87c, 0xfff, 0x200, 0x4, 0xea, 0x3ff, 0xf0, 0xeb, 0x8, 0x8fe2, 0x7fffffff, 0x7, 0x80000000, 0x9, 0x7, 0xfa1, 0x4, 0x3, 0x9, 0x8, 0x31, 0x1ff, 0x6, 0x2, 0x9ac8, 0x4, 0x7fffffff, 0xffffffff, 0xff9, 0x6, 0x8001, 0x7, 0x3, 0x101, 0x2, 0x3ff, 0x8, 0x5, 0x3, 0x3, 0x6, 0x770, 0xf30, 0x2, 0x3, 0x5, 0x2, 0x10000, 0x4, 0x50, 0xfff, 0x4, 0x61, 0x2b, 0x4, 0x6, 0x5, 0x1, 0xf0]}]}, @TCA_CGROUP_ACT={0x1834, 0x1, [@m_mpls={0x120, 0x9, 0x0, 0x0, {{0x9}, {0x14, 0x2, 0x0, 0x1, [@TCA_MPLS_LABEL={0x8, 0x5, 0x5a57d}, @TCA_MPLS_BOS={0x5}]}, {0xe4, 0x6, "3e32b988206995cb75361c9be9e7ed8da3b313961f3283e07d2a8123ac365a6aa2bff1ab99ec585be127efbf310ce185ca904ccf9941344ba33a0e6cba70028f28cad086064c6fcabfa0b7ccc63768aad919f605678867f0007d2b5c0152c20f57b96a34129578d9f4bbbb2be1499958927fc7b380cf500deeb068cac1f9cb1e6c4189f35b9c8d2f8359a0d0b512b091db3322a9025a443d121a91eeea31b9c14fc64c88942290e23d6a91b3aa83fc3012975ef0a5d8fc455a8c6551ab62cefca400f004cb11b4584208134c5ff3ebd3c4ab2c073e32d5214a1d98b1a50a5989"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_simple={0x138, 0x1b, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x8, 0x101, 0x6, 0x6, 0xcd2}}]}, {0xf1, 0x6, "cc8daa17612e7355a7cd7786b3b815f5ef4e9c2a38467b0a64db08657abe773316062549d1a691bd2644f5731ac0e94db3cca6df7367a595f737996030786806223c5074b66cc9ffc2a057374306771205dffc7a5ffadedbb3324a408ba5140b04cf8443db3455d58614b025f7adb61fdfed05c1bd3a74e2784e4ba628ae2abedd429f0c9aa761751e8413cb14e5d1775722cc7b9fb2ef0921b259d27ef7cd78736f80e9858ae3ef958ce162b13f0e32cdd39e1b4e1dd786fce1b4e70625d2562de977d2416951e713519121282f74707d3235f93dea3d1f3c1399501e9fe7a7f7a73181373fd3a376817a2e7f"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_ct={0x174, 0x14, 0x0, 0x0, {{0x7}, {0x9c, 0x2, 0x0, 0x1, [@TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @private=0xa010102}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @rand_addr=' \x01\x00'}, @TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @private2={0xfc, 0x2, '\x00', 0x1}}, @TCA_CT_ZONE={0x6, 0x4, 0x3d6b}, @TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}, @TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @private1={0xfc, 0x1, '\x00', 0x1}}, @TCA_CT_LABELS_MASK={0x14, 0x8, "c3c1e8a439a875de3fac92acfb4b102b"}, @TCA_CT_ZONE={0x6, 0x4, 0x8be}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @remote}, @TCA_CT_LABELS={0x14, 0x7, "777aceb4bdfca01bd29ac745a3b1778c"}]}, {0xb2, 0x6, "8b3080dde4f99e84c3fb06e6bd2dcdcea293751f8dc6281f783c8fe78d3c45fe8a7f2fff6c15c9cbeee6297c52cb54d7854981da03981a912cbb96f31cc3ccddd22e21e238f78db51ac665ed3cd5a70b1f9f8e04d2c63aa1cb5ab818d26baf91fc72cd98d69e75dab8d835a8eb7a3d3db9bb99f351daf5c708174b19f90a9d22e758a401c98f45503c6ff5275daf6e39c3c6c3d2caaa09ae92c44a7ad2cb8b45210231b8569f7504c64cb57c880d"}, {0xc}, {0xc, 0x8, {0x3, 0x1}}}}, @m_nat={0x174, 0xa, 0x0, 0x0, {{0x8}, {0x11c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x6, 0x5, 0x0, 0x100, 0x9}, @broadcast, @multicast1, 0xffffff00}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x6, 0x1, 0x6, 0x1, 0x4}, @loopback, @local, 0xff000000}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x1, 0x5, 0xfffffffffffffffd, 0x101, 0xa}, @remote, @empty, 0x0, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x4fc1, 0x4, 0x0, 0xfffffff7, 0x9}, @dev={0xac, 0x14, 0x14, 0x2b}, @loopback}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x4, 0x9, 0x3, 0x0, 0x1b7}, @empty, @local, 0xff000000, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x8, 0x8001, 0x8, 0xb, 0x59}, @multicast1, @rand_addr=0x64010102, 0xff000000}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x2, 0x3, 0x0, 0x30000, 0xd1}, @initdev={0xac, 0x1e, 0x1, 0x0}, @local, 0x0, 0x1}}]}, {0x33, 0x6, "7c59bd0d12230fa3f9811d3457ce9504d03d134e63db0bfce826835a90c70287e38edfe9eafa64fb74c9229390be76"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_gact={0x103c, 0x12, 0x0, 0x0, {{0x9}, {0x10, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x1, 0x26b3, 0x1}}]}, {0x1004, 0x6, "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"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}, @m_mirred={0x98, 0x1c, 0x0, 0x0, {{0xb}, {0x64, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x7, 0xa9b5, 0x0, 0x6}, 0x4, r7}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x8000, 0x200, 0x0, 0x2, 0x8}, 0x4, r7}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x8, 0x8, 0xffffffffffffffff, 0x1000}, 0x3, r7}}]}, {0xc, 0x6, "e6ae778cf8420ff7"}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}, @m_xt={0xc4, 0x5, 0x0, 0x0, {{0x7}, {0x14, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8}, @TCA_IPT_INDEX={0x8, 0x3, 0xb7}]}, {0x8a, 0x6, "06c6a4cb0b62c91856463d47b83c94dc9322f0d9736020461dfcbc12d79c805d2979cff38c39567957e1c4ef213be8d555277ee6e519b71e7328e973841df1160c355439be3c6e513ae79773b272c84509009df75342226dd3980594e3a41ab0ab4fbcbb89f391b4c6e2530dcdbfe817119305b2fc2daa10a7c53bb249271176fb536f606919"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_tunnel_key={0x158, 0x18, 0x0, 0x0, {{0xf}, {0x4c, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @local}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0xfffffff7}, @TCA_TUNNEL_KEY_NO_CSUM={0x5}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @empty}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x2}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e24}]}, {0xdf, 0x6, "78bae3df2cce819531cbab9b7ff9c9b17ab09d2fee8c2ce9b48ec4401bc193c73bcdd4655f8d0f01ec91a166311dffa330e445293d759e0478e2f64eb6c4361d63f56f19341fd723cea9eda14f6f41d6807b03191b452a0f43601ab32ed0bb8a5a6e4829aa208fd1dff3117e5d0dd8118e7b0924af4618a37de03cbb63156eda78449e8fb1a0894b6886190b00db7cf4c11bfaa4eedcf0e9aac94e5c51a18a1d27b75e75c1efa9cd9560d48e22817c31210f3bab016bb108230bc33661c40991f8c486e3fb70950cf7880aee623b1989409e47638dce7ec5474876"}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x7f, 0x9}}]}, 0x1ca0}}, 0x44080) (async) ioctl$sock_SIOCGPGRP(r6, 0x8904, &(0x7f0000000480)=0x0) (async) getsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000001480)={{{@in6=@loopback, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private1}, 0x0, @in=@empty}}, &(0x7f0000001580)=0xe8) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r12 = getpid() bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r11, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x1, 0x0, r12}}, 0x40) getsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f0000001800)={{{@in=@loopback, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}}}, &(0x7f0000001900)=0xe8) r14 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r14, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000006c0)=@newlink={0x50, 0x10, 0x405, 0xfffffffc, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x45502, 0x4}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r15}, @IFLA_IFNAME={0x14}]}, 0x50}, 0x1, 0x0, 0x0, 0x4001}, 0x44010) r16 = getgid() sendmsg$netlink(r4, &(0x7f0000001980)={&(0x7f0000000340)=@kern={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000017c0)=[{&(0x7f0000000440)={0x18, 0x10, 0x200, 0x70bd26, 0x25dfdbfd, "", [@typed={0x8, 0x26, 0x0, 0x0, @ipv4=@broadcast}]}, 0x18}, {&(0x7f0000000640)={0x12c, 0x12, 0x8, 0x70bd26, 0x25dfdbfc, "", [@generic="2e4d432e51bb7865d8182d113f5e5bbf577b77a90aec6f65782380c3e726f832638abfa2780d3385fb51c51906f94e4aa8a8a86b7666bb350b40e223ebd7eba4c2a0ccac383ac098f2b16efc5f9fe18d46530e15cd89326281f88008a025eb9ec4f83edb9fe1402dacbc6909c01e1ea3b74306f9a7dd9af949967176f889e2857fb9204fce6fdf69b51eee829f889f65d48c31b042f1eef029df5e359273d64c9df33c3abdde86e3641105dc683866b1dfd364a9abdd5a47dff7bd60dbbd94824a", @nested={0x55, 0x143, 0x0, 0x1, [@nested={0x4, 0xe8}, @nested={0x4, 0x121}, @typed={0x8, 0x5f, 0x0, 0x0, @pid=r9}, @generic="4f71321fc72b906cec8d7a03022d142623b30bdd1a4b576067f32a9e9e8bc896db1bb8ca596e3f5b68e7bb99b53154371779644ebf2be701f6a8d035d24dbbe044"]}]}, 0x12c}, {&(0x7f00000015c0)={0x1ec, 0x2a, 0x800, 0x70bd25, 0x25dfdbfd, "", [@nested={0x13d, 0x52, 0x0, 0x1, [@typed={0x8, 0x138, 0x0, 0x0, @uid=r10}, @typed={0xc, 0x166, 0x0, 0x0, @u64=0x7}, @typed={0x14, 0x140, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @nested={0x4, 0x1f}, @nested={0x4, 0x61}, @generic="b070e97111e525e57f6c8ce06454f72647cb72c93c0c3cf27729e53affb760fd927d50d7412c", @nested={0x4, 0x15}, @generic="8d2aa176733a00cb20507acc692ddacea4452f470de8005307ab50d986a25ece46d8f92832785520d19671ba03646cb8cbe7084e2382a6f71ec32cef42f1ff3da3699c1dd767418533cae3fa10348fd98e3756e78b146012be51506e74295f0fd6564855f23ab7f1a41f8950915ac88b01f2b306b9c832e0906201512ddea7c4a13cfd50fdd293d3d5597d1a93cdac8cfad1701379092f98e0776563d01825badd357d0c5a8605938a992357cf574e183497ca61a414c424230ba0dacbc0150c7009e2db4e5db18287843013de423efac54a3af98a371b", @typed={0x8, 0x56, 0x0, 0x0, @ipv4=@multicast2}]}, @generic="e66bfd9468660576ca1b785a8df740dc1f9963445c243bebd72eb84421fc9bb39b6ecbb606c265c6f9bb0a7ad3222dfe403cf3e7977d2b7559e47ad73934b2b3e2e00f8f034195da81e9dea54995effc872381baaba7eb970ead15fa5fc9a15f571e26bcb8afe4b80d50f72f6c16a0b670751336bcedb45b09f3682eab691eb9449912c7ebd76d31630ebc9426310087700b2a0ff9df380a2c"]}, 0x1ec}], 0x3, &(0x7f0000001940)=[@rights={{0x14, 0x1, 0x1, [r8]}}, @cred={{0x1c, 0x1, 0x2, {r12, r13, r16}}}], 0x38, 0x1}, 0x20000000) 489.066189ms ago: executing program 3 (id=6590): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000c80)={0x168, 0x0, 0x2, 0x301, 0x0, 0x0, {0x7, 0x0, 0x10}, [@CTA_EXPECT_NAT={0x154, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x58, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x2d}}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}, @CTA_EXPECT_NAT_TUPLE={0x74, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}]}, @CTA_EXPECT_NAT_TUPLE={0x84, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x10}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @broadcast}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @rand_addr=0x64010101}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}]}]}]}, 0x168}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) (async) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000c40)="120000001200e7ef007b0000000000faffa0", 0x12, 0x8800, 0x0, 0x0) (async, rerun: 32) r1 = socket$packet(0x11, 0x3, 0x300) (async, rerun: 32) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c00018006000600800a00001400028010000b800c0011"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x3, 0x3}, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a00)={0xffffffffffffffff, 0xe0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0], 0x0, 0x79, &(0x7f0000000300)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000400), &(0x7f0000000440), 0x8, 0x36, 0x8, 0x8, &(0x7f00000006c0)}}, 0x10) setsockopt$packet_drop_memb(r1, 0x107, 0x2, &(0x7f0000000a40)={r3, 0x1, 0x6, @multicast}, 0x10) (async) close(r1) (async) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) 369.796413ms ago: executing program 1 (id=6591): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000140)=0x7, 0x4) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001280)=@newtaction={0x18, 0x31, 0x3d, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0xcc, 0x30, 0xffff, 0x70bd27, 0x0, {}, [{0xb8, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x10000, 0x0, 0x0, 0x0, 0x0, {0x0, 0x2, 0x0, 0x0, 0x27}, {0x0, 0x0, 0x0, 0x0, 0xfffd}}}]]}, {0x4}, {0xfffffffffffffd8e}, {0xc, 0x8, {0x0, 0x2}}}}, @m_gact={0x48, 0x2, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x1}}]}, {0x4}, {0xc, 0x3}, {0xc}}}]}]}, 0xcc}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000700)={0x0, 0x1e5, &(0x7f00000006c0)={&(0x7f0000000440)=@deltaction={0x28, 0x31, 0x101, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}]}, 0x28}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000080), 0xfffffffffffffdbb}, 0x48) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x137b, 0x10}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER_INTVL={0xc}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8004}, 0x0) 356.445209ms ago: executing program 0 (id=6592): socket$inet_tcp(0x2, 0x1, 0x0) 193.250837ms ago: executing program 4 (id=6593): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4001, 0x1, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3e}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x8000000004) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) socket$kcm(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xc, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r4, 0x3e8, 0xf, 0x0, &(0x7f0000000000)="c1df07000000d30a298ee68888a887", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) writev(r1, &(0x7f0000000280)=[{&(0x7f00000005c0)="580000001400192340834b80040d8c560a06ffffff7f000000010000000058000b480400945f64009400050038925a01000000800000008004000000ff0109000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1) 104.545483ms ago: executing program 2 (id=6594): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000340)={'syztnl1\x00', &(0x7f00000002c0)={'ip6tnl0\x00', 0x0, 0x0, 0x0, 0x8f, 0x2255, 0x22, @mcast1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x80, 0x7800, 0x1, 0x6}}) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xfffeffff, {0x0, 0x0, 0x0, r5, {0xffff, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r4, {0xffff}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0xfff3}, {0xffff, 0xffff}, {0xffef, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0xdc}, 0x0) 40.75044ms ago: executing program 0 (id=6595): mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x1000001, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) r0 = socket$igmp6(0xa, 0x3, 0x3a) r1 = socket(0x1d, 0x2, 0x6) getsockname$packet(r1, 0x0, &(0x7f00000006c0)) getsockopt$MRT6(r0, 0x29, 0xce, 0x0, &(0x7f0000000040)) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000002600010125bd569ff4f22ad3557d00000800030047"], 0x1c}, 0x1, 0x0, 0x0, 0x409d6}, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), 0xffffffffffffffff) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x1000001, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) (async) socket$igmp6(0xa, 0x3, 0x3a) (async) socket(0x1d, 0x2, 0x6) (async) getsockname$packet(r1, 0x0, &(0x7f00000006c0)) (async) getsockopt$MRT6(r0, 0x29, 0xce, 0x0, &(0x7f0000000040)) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000002600010125bd569ff4f22ad3557d00000800030047"], 0x1c}, 0x1, 0x0, 0x0, 0x409d6}, 0x0) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), 0xffffffffffffffff) (async) 37.299754ms ago: executing program 3 (id=6596): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000d08000640ffffff000800034000000038580000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000002c000380280000800800034000000002040002800c0004400000000000000d9d0c0005400097"], 0xec}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x4) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000280)={'ip6gre0\x00', &(0x7f00000001c0)={'ip6gre0\x00', 0x0, 0x2f, 0x5, 0x8, 0x1, 0x10, @private0, @loopback, 0x7800, 0x1, 0x1000, 0x7}}) sendmsg$BATADV_CMD_GET_VLAN(r2, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x54, r3, 0x4, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x6}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x3}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x400}]}, 0x54}, 0x1, 0x0, 0x0, 0x880}, 0x44850) (async) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) (async) setsockopt$packet_fanout_data(r5, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x7}, {0x6}]}, 0x10) (async) sendmsg$kcm(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f3317000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100001400a0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x4004010) 0s ago: executing program 1 (id=6597): bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb01001800000000000000840000008400000004000000080000000000000c040000000f00000009000004020000000100000005000000040000000100000002000000270c00000600000004000000c64a00000300000001000000474c87feffaeddf7488942325a3b800000000b00000005000000080000000900000002000000050000000d00000002000000030000000c000000030000001c0000000e00"], &(0x7f0000000400)=""/188, 0xa0, 0xbc, 0x1}, 0x28) kernel console output (not intermixed with test programs): netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 623.322065][T23794] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4872'. [ 623.325017][ T197] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 623.380306][T23798] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 623.410863][T23798] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 623.434616][ T197] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 623.443663][ T197] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 623.524548][T23798] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 623.546193][T23798] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 623.715942][T23798] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 623.744978][T23798] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 623.814705][T23798] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 623.825441][T23798] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 624.042299][ T197] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 624.070398][ T197] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 624.170209][ T144] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 624.210163][ T144] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 624.226654][ T30] audit: type=1107 audit(1782867908.951:13): pid=23830 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='¯"tíÛÎQ}qÎFõì[Ka‹qoý¦uûÐmüñ½xH¢ÔhÒá–GF¹‹á' [ 624.379374][T17778] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 624.389732][T17778] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 624.419302][T17778] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 624.428736][T17778] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 624.441874][T23839] netlink: 'syz.0.4887': attribute type 11 has an invalid length. [ 624.462949][T23839] netlink: 'syz.0.4887': attribute type 4 has an invalid length. [ 624.857514][T23853] syzkaller0: entered promiscuous mode [ 624.876087][T23853] syzkaller0: entered allmulticast mode [ 625.298348][T23887] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 628.158000][T23902] xfrm0 speed is unknown, defaulting to 1000 [ 628.165972][T23902] lo speed is unknown, defaulting to 1000 [ 628.377929][T23918] netlink: 'syz.2.4910': attribute type 3 has an invalid length. [ 628.402564][T23918] __nla_validate_parse: 68 callbacks suppressed [ 628.402584][T23918] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4910'. [ 628.465805][T23927] netlink: 'syz.2.4910': attribute type 2 has an invalid length. [ 628.703528][T23930] IPVS: set_ctl: invalid protocol: 48 224.0.0.1:20004 [ 629.488221][T23972] netlink: 'syz.1.4925': attribute type 1 has an invalid length. [ 629.703646][T23972] 8021q: adding VLAN 0 to HW filter on device bond10 [ 629.848671][T23984] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4927'. [ 629.950094][T23990] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4929'. [ 630.010288][T23995] bond4: entered promiscuous mode [ 630.017918][T23995] bond4: entered allmulticast mode [ 630.024269][T23995] 8021q: adding VLAN 0 to HW filter on device bond4 [ 630.118763][T24002] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4934'. [ 630.144095][T24004] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4933'. [ 630.255300][T24002] bond11: (slave bridge0): Enslaving as an active interface with an up link [ 630.276280][T24013] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4933'. [ 630.369412][T24010] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4934'. [ 630.517612][T24010] bond11: entered promiscuous mode [ 630.537006][T24010] bridge0: entered promiscuous mode [ 630.564241][T24010] bond11: entered allmulticast mode [ 630.583645][T24010] bridge0: entered allmulticast mode [ 630.600877][T24010] 8021q: adding VLAN 0 to HW filter on device bond11 [ 631.282333][T24060] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4947'. [ 631.301906][T24060] workqueue: Failed to create a rescuer kthread for wq "bond12": -EINTR [ 631.444440][T24074] tipc: Failed to remove unknown binding: 66,1,1/0:770946464/770946467 [ 631.477107][T24077] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4950'. [ 631.483905][T24074] tipc: Failed to remove unknown binding: 66,1,1/0:770946464/770946467 [ 631.946146][T24103] bond8: option packets_per_slave: invalid value (18446744073709551615) [ 631.955632][T24103] bond8: option packets_per_slave: allowed values 0 - 65535 [ 631.967429][T24103] bond8 (unregistering): Released all slaves [ 632.105176][T24109] nft_compat: unsupported protocol 0 [ 632.132709][T24111] xt_CT: You must specify a L4 protocol and not use inversions on it [ 632.259783][T24118] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4964'. [ 632.517070][T24120] team0: Port device team_slave_0 removed [ 632.982798][T24147] tipc: Enabling of bearer rejected, failed to enable media [ 633.436296][T24173] __nla_validate_parse: 2 callbacks suppressed [ 633.436318][T24173] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4979'. [ 633.461517][T24174] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4978'. [ 633.462060][T24175] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4978'. [ 633.483730][T24173] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4979'. [ 633.635460][T24174] macvtap1: entered promiscuous mode [ 633.640810][T24174] vlan0: entered promiscuous mode [ 633.646236][T24174] bond0: entered promiscuous mode [ 633.651963][T24174] bond_slave_0: entered promiscuous mode [ 633.657895][T24174] bond_slave_1: entered promiscuous mode [ 633.667580][T24174] macvtap1: entered allmulticast mode [ 633.807111][T24175] macvtap2: entered promiscuous mode [ 633.812912][T24175] macvtap2: entered allmulticast mode [ 633.820652][T24186] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 633.831844][T24186] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 634.300473][T24191] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 634.539755][T24211] team0: No ports can be present during mode change [ 634.567917][T24211] lo: entered allmulticast mode [ 634.578266][T24211] tunl0: entered allmulticast mode [ 634.589953][T24211] gre0: entered allmulticast mode [ 634.606945][T24211] 0ªX¹¦Dö»: entered allmulticast mode [ 634.624555][T24211] erspan0: entered allmulticast mode [ 634.640835][T24211] ip_vti0: entered allmulticast mode [ 634.659126][T24211] ip6_vti0: entered allmulticast mode [ 634.672909][T24211] sit0: entered allmulticast mode [ 634.695936][T24211] ip6tnl0: entered allmulticast mode [ 634.715369][T24211] ip6gre0: entered allmulticast mode [ 634.741656][T24218] No such timeout policy "syz0" [ 634.748397][T24213] syzkaller0: entered promiscuous mode [ 634.755895][T24219] No such timeout policy "syz0" [ 634.765863][T24213] syzkaller0: entered allmulticast mode [ 634.793319][T24213] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4994'. [ 634.963270][T24235] bridge0: port 1(dummy0) entered blocking state [ 635.001605][T24235] bridge0: port 1(dummy0) entered disabled state [ 635.023894][T24235] dummy0: entered allmulticast mode [ 635.057936][T24235] dummy0: entered promiscuous mode [ 635.067060][T24237] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 635.212060][T24247] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 635.298371][T24255] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5005'. [ 635.614000][T24275] netlink: 'syz.0.5009': attribute type 8 has an invalid length. [ 635.628406][T24275] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5009'. [ 635.694509][T24276] openvswitch: netlink: Tunnel attr 3 has unexpected len 8 expected 1 [ 636.217470][T24310] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5021'. [ 636.296908][T24314] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5020'. [ 636.465721][T24304] syzkaller0: entered promiscuous mode [ 636.478977][T24304] syzkaller0: entered allmulticast mode [ 636.558394][T24325] netlink: 'syz.0.5023': attribute type 58 has an invalid length. [ 636.576578][T24325] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5023'. [ 638.965811][T24306] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 639.008595][T24345] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5028'. [ 639.777521][T24390] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5040'. [ 640.194600][T24415] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5047'. [ 640.206574][T24413] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5046'. [ 640.240818][T24415] netlink: 72 bytes leftover after parsing attributes in process `syz.2.5047'. [ 640.279057][T24415] netlink: 'syz.2.5047': attribute type 49 has an invalid length. [ 640.490175][T24428] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5051'. [ 640.604240][T24436] netlink: 'syz.3.5054': attribute type 1 has an invalid length. [ 640.647244][T24436] netlink: 244 bytes leftover after parsing attributes in process `syz.3.5054'. [ 640.996847][T24450] syzkaller1: entered promiscuous mode [ 641.009644][T24450] syzkaller1: entered allmulticast mode [ 641.267255][T24469] netlink: 48 bytes leftover after parsing attributes in process `syz.3.5063'. [ 641.285154][T24469] netlink: 48 bytes leftover after parsing attributes in process `syz.3.5063'. [ 641.402675][T24476] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5065'. [ 641.465852][T24478] netlink: 'syz.3.5066': attribute type 4 has an invalid length. [ 641.584375][T24486] lo: left allmulticast mode [ 641.611528][T24486] tunl0: left allmulticast mode [ 641.627679][T24486] gre0: left allmulticast mode [ 641.648773][T24486] 0ªX¹¦Dö»: left allmulticast mode [ 641.696333][T24486] erspan0: left allmulticast mode [ 641.742853][T24486] ip_vti0: left allmulticast mode [ 641.765457][T24486] ip6_vti0: left allmulticast mode [ 641.776367][T24486] sit0: left allmulticast mode [ 641.781904][T24486] ip6tnl0: left allmulticast mode [ 641.792124][T24486] ip6gre0: left allmulticast mode [ 642.115386][T24516] netlink: 'syz.2.5079': attribute type 1 has an invalid length. [ 642.209116][T24516] 8021q: adding VLAN 0 to HW filter on device bond8 [ 642.504891][T24517] bond8: (slave veth7): Enslaving as an active interface with a down link [ 642.566281][T24516] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 642.584580][T24516] bond8: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 642.711818][T24531] xt_hashlimit: invalid interval [ 642.839200][T24541] syzkaller0: entered promiscuous mode [ 642.866892][T24541] syzkaller0: entered allmulticast mode [ 645.952673][T24591] __nla_validate_parse: 5 callbacks suppressed [ 645.952692][T24591] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5096'. [ 646.002285][T24603] netlink: 'syz.4.5099': attribute type 10 has an invalid length. [ 646.023356][T24606] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5100'. [ 646.208793][T24617] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5101'. [ 646.323482][T24622] tipc: Enabling of bearer rejected, failed to enable media [ 646.486662][T24627] ip6erspan1: entered allmulticast mode [ 646.507088][T24633] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5107'. [ 646.532375][T24633] netlink: 'syz.4.5107': attribute type 18 has an invalid length. [ 646.552918][T24633] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5107'. [ 646.566598][T24633] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5107'. [ 646.601112][T24633] netlink: 'syz.4.5107': attribute type 18 has an invalid length. [ 646.619376][T24633] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5107'. [ 647.429360][T24677] syzkaller1: entered promiscuous mode [ 647.441105][T24677] syzkaller1: entered allmulticast mode [ 647.965944][T24715] netlink: 'syz.4.5131': attribute type 27 has an invalid length. [ 647.990750][T24715] netlink: 'syz.4.5131': attribute type 4 has an invalid length. [ 648.014160][T24715] netlink: 144 bytes leftover after parsing attributes in process `syz.4.5131'. [ 648.411123][T24739] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5135'. [ 648.738872][T24752] team0: Device xfrm0 is of different type [ 648.986459][T24762] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5144'. [ 649.068133][T24771] netlink: 'syz.3.5147': attribute type 1 has an invalid length. [ 649.084442][T24771] netlink: 'syz.3.5147': attribute type 2 has an invalid length. [ 649.431871][T24790] netlink: 'syz.4.5152': attribute type 8 has an invalid length. [ 650.284920][T24844] hsr_slave_1 (unregistering): left promiscuous mode [ 650.418924][T24844] Cannot find map_set index 135 as target [ 650.458134][T24853] xfrm0 speed is unknown, defaulting to 1000 [ 650.483760][T24853] lo speed is unknown, defaulting to 1000 [ 650.769222][T24866] 8021q: adding VLAN 0 to HW filter on device bond5 [ 651.162914][T24887] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 651.265341][T24894] netlink: 'syz.3.5179': attribute type 4 has an invalid length. [ 651.410778][T24903] __nla_validate_parse: 4 callbacks suppressed [ 651.410804][T24903] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5182'. [ 651.617649][T24913] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5184'. [ 651.713267][T24924] xt_hashlimit: size too large, truncated to 1048576 [ 652.423681][T24952] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5195'. [ 652.477490][T24956] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5196'. [ 653.753768][T25008] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5207'. [ 653.853871][T25012] netlink: 'syz.1.5206': attribute type 5 has an invalid length. [ 653.887063][T25014] x_tables: duplicate underflow at hook 3 [ 654.014196][T25018] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5211'. [ 654.347190][T25039] netlink: 'syz.2.5216': attribute type 1 has an invalid length. [ 654.433064][T25044] sctp: [Deprecated]: syz.4.5218 (pid 25044) Use of int in max_burst socket option. [ 654.433064][T25044] Use struct sctp_assoc_value instead [ 654.648279][T25059] netlink: 'syz.0.5221': attribute type 13 has an invalid length. [ 654.676267][T25059] netlink: 'syz.0.5221': attribute type 5 has an invalid length. [ 654.751963][T25066] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5226'. [ 654.766486][T25066] netlink: 'syz.4.5226': attribute type 30 has an invalid length. [ 654.817188][T25068] bond0: entered promiscuous mode [ 654.827015][T25069] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5225'. [ 654.841668][T25068] bond_slave_0: entered promiscuous mode [ 654.852875][T25068] bond_slave_1: entered promiscuous mode [ 654.872273][T25068] batadv0: entered promiscuous mode [ 654.880042][T25069] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5225'. [ 654.891797][T25068] debugfs: 'hsr1' already exists in 'hsr' [ 654.899140][T25068] Cannot create hsr debugfs directory [ 654.905001][T25069] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5225'. [ 654.918275][T25068] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 654.928216][T25068] bond0: left promiscuous mode [ 654.936876][T25068] bond_slave_0: left promiscuous mode [ 654.947662][T25068] bond_slave_1: left promiscuous mode [ 654.955312][T25068] batadv0: left promiscuous mode [ 655.006945][T25071] IPv6: sit3: Disabled Multicast RS [ 655.018045][T25071] sit3: entered allmulticast mode [ 655.423349][T25093] netlink: 'syz.1.5234': attribute type 1 has an invalid length. [ 655.604233][T25093] 8021q: adding VLAN 0 to HW filter on device bond12 [ 655.627258][T25097] bond6: (slave veth0_to_bond): Releasing active interface [ 655.694283][T25097] bond12: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 655.713320][T25105] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 655.745481][T25100] macvlan0: entered promiscuous mode [ 655.758838][T25100] macvlan0: entered allmulticast mode [ 655.759960][T25107] x_tables: unsorted entry at hook 1 [ 655.782130][T25100] bond12: entered promiscuous mode [ 655.795332][T25100] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 655.812980][T25100] bond12: (slave macvlan0): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 655.834479][T25100] bond12: left promiscuous mode [ 656.123433][T25123] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 656.432518][T25136] __nla_validate_parse: 5 callbacks suppressed [ 656.432540][T25136] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5249'. [ 656.463034][T25136] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5249'. [ 656.561906][T25144] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5251'. [ 657.066846][T25172] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 657.128103][T25172] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5258'. [ 657.142779][T25172] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5258'. [ 657.153271][T25172] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5258'. [ 657.165660][T25172] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5258'. [ 657.189832][T25172] netlink: 104 bytes leftover after parsing attributes in process `syz.0.5258'. [ 657.423445][T25189] syzkaller0: entered promiscuous mode [ 657.452074][T25189] syzkaller0: entered allmulticast mode [ 657.695662][T25202] netlink: 'syz.0.5268': attribute type 9 has an invalid length. [ 657.785479][T25208] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 658.486000][T25238] netlink: 'syz.4.5277': attribute type 1 has an invalid length. [ 658.502914][T25238] netlink: 224 bytes leftover after parsing attributes in process `syz.4.5277'. [ 658.512523][T25238] NCSI netlink: No device for ifindex 0 [ 658.657182][T25261] 8021q: adding VLAN 0 to HW filter on device bond5 [ 658.742216][T25268] rdma_rxe: rxe_newlink: failed to add geneve0 [ 659.010479][T25283] vlan1: entered allmulticast mode [ 659.018176][T25283] bond0: entered allmulticast mode [ 659.034676][T25283] bond_slave_0: entered allmulticast mode [ 659.063125][T25283] bond_slave_1: entered allmulticast mode [ 659.100762][T25283] bond6: entered allmulticast mode [ 659.202819][T25283] syzkaller0: entered promiscuous mode [ 659.223534][T25283] syzkaller0: entered allmulticast mode [ 659.370876][T25309] syzkaller0: entered promiscuous mode [ 659.389188][T25309] syzkaller0: entered allmulticast mode [ 659.720262][T25332] veth0: entered promiscuous mode [ 659.727564][T25331] veth0: left promiscuous mode [ 659.830759][T25338] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5307'. [ 660.145938][T25349] netlink: 'syz.2.5310': attribute type 1 has an invalid length. [ 660.299514][T25349] 8021q: adding VLAN 0 to HW filter on device bond9 [ 660.585689][T25381] netlink: 'syz.0.5320': attribute type 1 has an invalid length. [ 660.599793][T25381] netlink: 'syz.0.5320': attribute type 1 has an invalid length. [ 660.663504][T25391] netlink: 'syz.0.5322': attribute type 5 has an invalid length. [ 660.684509][T25391] sit0: left promiscuous mode [ 660.689286][T25391] sit0: left allmulticast mode [ 660.702905][T25391] vlan0: left promiscuous mode [ 660.713007][T25391] veth0_vlan: left promiscuous mode [ 660.722528][T25391] bridge1: left promiscuous mode [ 660.727724][T25391] bridge1: left allmulticast mode [ 660.734008][T25391] bridge3: left promiscuous mode [ 660.739099][T25391] bridge3: left allmulticast mode [ 660.745971][T25391] bond0: left promiscuous mode [ 660.750820][T25391] bond0: left allmulticast mode [ 660.757308][T25391] bond3: left promiscuous mode [ 660.763247][T25391] bond3: left allmulticast mode [ 660.768808][T25391] bond4: left promiscuous mode [ 660.806359][T25391] ip6erspan1: left allmulticast mode [ 660.817021][T25393] syzkaller0: entered promiscuous mode [ 660.824135][T25393] syzkaller0: entered allmulticast mode [ 660.876393][ T144] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 660.886598][ T144] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 660.969994][ T144] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 661.001970][ T144] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 661.468106][T25423] __nla_validate_parse: 9 callbacks suppressed [ 661.468126][T25423] netlink: 76 bytes leftover after parsing attributes in process `syz.1.5332'. [ 661.734242][T25437] gre0: entered promiscuous mode [ 661.745873][T25437] gre0: entered allmulticast mode [ 661.772050][T25437] xt_hl: Unknown Hop Limit match mode: 206 [ 662.759847][T25494] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5350'. [ 662.923853][T25494] bond13: option xmit_hash_policy: invalid value (64) [ 662.953954][T25494] bond13 (unregistering): Released all slaves [ 663.015250][T25501] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5350'. [ 663.215051][T25494] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5350'. [ 663.258873][T25519] netlink: 92 bytes leftover after parsing attributes in process `syz.0.5356'. [ 663.789881][T25546] netlink: 'syz.0.5365': attribute type 5 has an invalid length. [ 663.806172][T25546] erspan0: mtu less than device minimum [ 664.087051][T25565] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5370'. [ 664.114141][T25564] Bluetooth: MGMT ver 1.23 [ 664.126844][T25568] netlink: 'syz.4.5371': attribute type 1 has an invalid length. [ 664.137804][T25565] netlink: 'syz.1.5370': attribute type 30 has an invalid length. [ 664.163872][T25565] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5370'. [ 664.173931][T25568] netlink: 'syz.4.5371': attribute type 2 has an invalid length. [ 664.439600][T25586] netlink: 52 bytes leftover after parsing attributes in process `syz.1.5376'. [ 664.449983][T25586] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5376'. [ 664.464514][T17778] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 664.473720][T25586] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5376'. [ 664.484026][T17778] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 664.493611][T17778] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 664.504747][T17778] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 665.728849][T25648] syzkaller0: entered promiscuous mode [ 665.751379][T25648] syzkaller0: entered allmulticast mode [ 665.890111][T25655] netlink: 'syz.3.5391': attribute type 1 has an invalid length. [ 666.028713][T25655] 8021q: adding VLAN 0 to HW filter on device bond7 [ 666.741157][T25687] tipc: Trying to set illegal importance in message [ 666.847041][T25689] __nla_validate_parse: 2 callbacks suppressed [ 666.847062][T25689] netlink: 284 bytes leftover after parsing attributes in process `syz.3.5399'. [ 666.882849][T25689] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5399'. [ 667.068966][T25704] netlink: 388 bytes leftover after parsing attributes in process `syz.0.5402'. [ 667.111808][T25704] netlink: 'syz.0.5402': attribute type 7 has an invalid length. [ 667.138505][T25704] netlink: 'syz.0.5402': attribute type 7 has an invalid length. [ 667.156652][T25704] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5402'. [ 667.428344][T25714] netlink: 56 bytes leftover after parsing attributes in process `syz.4.5408'. [ 667.465454][T25718] netlink: 64 bytes leftover after parsing attributes in process `syz.1.5409'. [ 667.475247][T25718] netlink: 'syz.1.5409': attribute type 11 has an invalid length. [ 667.499755][T25718] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5409'. [ 667.681391][T25734] netlink: 'syz.0.5410': attribute type 4 has an invalid length. [ 668.059868][T25748] xt_hashlimit: size too large, truncated to 1048576 [ 668.100304][T25756] netlink: 'syz.3.5419': attribute type 1 has an invalid length. [ 668.121919][T25756] netlink: 16150 bytes leftover after parsing attributes in process `syz.3.5419'. [ 668.358897][T25766] netlink: 'syz.2.5422': attribute type 1 has an invalid length. [ 668.455411][T25766] bond10: entered promiscuous mode [ 668.461743][T25766] 8021q: adding VLAN 0 to HW filter on device bond10 [ 668.665270][T25765] bond8: option fail_over_mac: invalid value (16) [ 668.684838][T25765] bond8 (unregistering): Released all slaves [ 668.729739][T25748] bridge_slave_0 (unregistering): left allmulticast mode [ 668.741381][T25748] bridge_slave_0 (unregistering): left promiscuous mode [ 668.753885][T25783] xt_CT: You must specify a L4 protocol and not use inversions on it [ 668.783538][T25748] bridge0: port 1(bridge_slave_0) entered disabled state [ 669.271291][T25802] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5431'. [ 669.301513][T25801] syzkaller0: entered promiscuous mode [ 669.310269][T25801] syzkaller0: entered allmulticast mode [ 669.486675][T25811] netlink: 'syz.0.5435': attribute type 1 has an invalid length. [ 669.497033][T25813] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5434'. [ 669.534827][T25810] netlink: 'syz.0.5435': attribute type 1 has an invalid length. [ 669.676609][T25825] netlink: 'syz.3.5437': attribute type 83 has an invalid length. [ 669.709344][T25810] 8021q: adding VLAN 0 to HW filter on device bond6 [ 669.820585][T25822] bond6: (slave geneve2): making interface the new active one [ 669.870363][T25822] bond6: (slave geneve2): Enslaving as an active interface with an up link [ 669.884317][ T37] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 20006 - 0 [ 669.920124][ T37] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 20006 - 0 [ 669.972394][ T37] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 20006 - 0 [ 669.990790][ T37] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 20006 - 0 [ 670.009139][T25842] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 670.085427][T11286] tipc: Subscription rejected, illegal request [ 670.243195][T25855] syzkaller1: entered promiscuous mode [ 670.256686][T25855] syzkaller1: entered allmulticast mode [ 670.817996][T25884] syzkaller0: entered promiscuous mode [ 670.824392][T25884] syzkaller0: entered allmulticast mode [ 671.106737][T25892] validate_nla: 1 callbacks suppressed [ 671.106759][T25892] netlink: 'syz.0.5460': attribute type 7 has an invalid length. [ 671.613785][T25931] netlink: 'syz.1.5471': attribute type 23 has an invalid length. [ 672.023104][T25942] veth5: entered promiscuous mode [ 672.387383][T25968] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 672.742557][T25994] __nla_validate_parse: 9 callbacks suppressed [ 672.742577][T25994] netlink: 256 bytes leftover after parsing attributes in process `syz.0.5487'. [ 672.996145][T26007] tipc: Started in network mode [ 673.003419][T26007] tipc: Node identity 6e551453149a, cluster identity 4711 [ 673.010799][T26007] tipc: Enabled bearer , priority 0 [ 673.051930][T26007] syzkaller0: entered promiscuous mode [ 673.057743][T26009] openvswitch: netlink: Missing key (keys=40, expected=100) [ 673.076628][T26010] xt_hashlimit: size too large, truncated to 1048576 [ 673.076651][T26007] syzkaller0: entered allmulticast mode [ 673.134743][T26016] netlink: 'syz.0.5495': attribute type 7 has an invalid length. [ 673.162488][T26018] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 673.310329][T26007] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5491'. [ 673.353564][T26027] tipc: Resetting bearer [ 673.386658][T26032] netlink: 'syz.0.5497': attribute type 83 has an invalid length. [ 673.406081][T26004] tipc: Resetting bearer [ 673.501279][T26004] tipc: Disabling bearer [ 673.799544][T26049] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5505'. [ 673.813963][T26052] syzkaller0: entered promiscuous mode [ 673.832493][T26052] syzkaller0: entered allmulticast mode [ 673.856050][T26056] netlink: 'syz.4.5507': attribute type 2 has an invalid length. [ 674.014528][T26060] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5508'. [ 674.202764][T26080] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5513'. [ 674.363295][T26088] netlink: 'syz.0.5514': attribute type 1 has an invalid length. [ 674.470161][T26093] dummy0: left allmulticast mode [ 674.499043][T26093] dummy0: left promiscuous mode [ 674.527896][T26093] bridge0: port 1(dummy0) entered disabled state [ 675.075003][T26132] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5526'. [ 675.139567][T26132] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5526'. [ 675.587996][T26158] team0: Device ipvlan0 is already an upper device of the team interface [ 676.107203][T26195] syzkaller0: entered promiscuous mode [ 676.125271][T26195] syzkaller0: entered allmulticast mode [ 676.325048][T26206] netlink: 44 bytes leftover after parsing attributes in process `syz.1.5546'. [ 676.352699][T26208] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5547'. [ 676.366604][T26208] netlink: 'syz.3.5547': attribute type 7 has an invalid length. [ 676.388105][T26208] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5547'. [ 676.597094][T26222] netlink: 'syz.1.5552': attribute type 21 has an invalid length. [ 676.646068][T26226] netlink: 'syz.1.5552': attribute type 21 has an invalid length. [ 676.646681][T26222] netlink: 'syz.1.5552': attribute type 4 has an invalid length. [ 676.729421][T26222] netlink: 'syz.1.5552': attribute type 5 has an invalid length. [ 676.761458][T26226] netlink: 'syz.1.5552': attribute type 4 has an invalid length. [ 676.797437][T26226] netlink: 'syz.1.5552': attribute type 5 has an invalid length. [ 677.086981][T26251] openvswitch: netlink: Actions may not be safe on all matching packets [ 677.175004][T26254] netlink: 'syz.1.5560': attribute type 2 has an invalid length. [ 677.481551][T26266] syzkaller0: entered promiscuous mode [ 677.535493][T26266] syzkaller0: entered allmulticast mode [ 677.739648][T22441] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 677.761656][T22441] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 677.769451][T26284] x_tables: duplicate underflow at hook 2 [ 677.779734][T22441] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 677.794181][T22441] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 677.802643][T22441] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 677.900373][ T5632] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 677.912300][ T5632] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 677.935778][ T5632] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 677.968359][ T5632] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 677.981991][T26292] __nla_validate_parse: 6 callbacks suppressed [ 677.982011][T26292] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5570'. [ 677.997407][ T5632] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 678.006279][T26292] netlink: 'syz.0.5570': attribute type 1 has an invalid length. [ 678.015624][T26292] netlink: 'syz.0.5570': attribute type 2 has an invalid length. [ 678.273097][T26302] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5572'. [ 678.463482][T26307] gre3: entered promiscuous mode [ 678.468678][T26307] gre3: entered allmulticast mode [ 678.595947][T26315] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5573'. [ 678.627795][T26309] bridge_slave_1: left allmulticast mode [ 678.642194][T26309] bridge_slave_1: left promiscuous mode [ 678.648799][T26309] bridge0: port 2(bridge_slave_1) entered disabled state [ 678.676952][T26309] bond0: (slave bond_slave_0): Releasing backup interface [ 678.715376][T26309] bond0: (slave bond_slave_1): Releasing backup interface [ 678.727291][T26309] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 678.736431][T26309] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 678.749227][T26309] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 678.798567][ T144] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 20006 - 0 [ 678.818567][ T144] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 20006 - 0 [ 678.986173][ T144] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 20006 - 0 [ 679.018795][ T144] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 20006 - 0 [ 679.319310][T26341] netlink: 56 bytes leftover after parsing attributes in process `syz.4.5582'. [ 679.360536][T26346] netlink: 56 bytes leftover after parsing attributes in process `syz.4.5582'. [ 679.389568][T26278] xfrm0 speed is unknown, defaulting to 1000 [ 679.417042][T26345] veth0: entered promiscuous mode [ 679.434592][T26278] lo speed is unknown, defaulting to 1000 [ 679.507670][T26343] veth0: left promiscuous mode [ 679.724457][T26358] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5589'. [ 679.746601][T26354] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5587'. [ 679.803153][T26354] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5587'. [ 679.827089][T26368] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5590'. [ 679.859589][T26368] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5590'. [ 679.908592][T17429] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 679.983523][T26368] geneve3: entered promiscuous mode [ 680.001106][T26368] geneve3: entered allmulticast mode [ 680.016201][ T144] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 256 - 0 [ 680.131207][T22441] Bluetooth: hci0: command tx timeout [ 680.199828][ T144] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 256 - 0 [ 680.269819][ T144] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 256 - 0 [ 680.311333][ T144] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 256 - 0 [ 680.420764][ T144] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 680.530785][T25635] pim6reg: left allmulticast mode [ 680.540505][T25635] pim6reg527: left allmulticast mode [ 680.546492][T25635] pimreg3: left allmulticast mode [ 680.599087][T25635] bond3 (unregistering): (slave ip6gre1): Releasing backup interface [ 680.662388][T25635] erspan0 (unregistering): left promiscuous mode [ 680.703465][T25635] 0ªX¹¦Dö» (unregistering): left promiscuous mode [ 680.859021][T25635] bond1 (unregistering): (slave bridge2): Releasing active interface [ 680.891468][T25635] bond2 (unregistering): (slave bridge3): Releasing backup interface [ 680.911067][T25635] bond5 (unregistering): (slave bridge4): Releasing backup interface [ 680.948174][T25635] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 680.960099][T25635] bond_slave_0: left allmulticast mode [ 680.972806][T25635] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 680.991765][T25635] bond_slave_1: left allmulticast mode [ 681.002890][T25635] bond0 (unregistering): (slave bond6): Releasing backup interface [ 681.021884][T25635] bond6 (unregistering): left allmulticast mode [ 681.028970][T25635] bond0 (unregistering): Released all slaves [ 681.054862][T25635] bond1 (unregistering): Released all slaves [ 681.085300][T25635] bond2 (unregistering): Released all slaves [ 681.118989][T25635] bond3 (unregistering): Released all slaves [ 681.144467][T25635] bond4 (unregistering): Released all slaves [ 681.179978][T25635] bond5 (unregistering): Released all slaves [ 681.207983][T25635] bond6 (unregistering): Released all slaves [ 681.239182][T25635] bond7 (unregistering): Released all slaves [ 681.285614][T25635] bond8 (unregistering): (slave veth7): Releasing active interface [ 681.308162][T25635] bond8 (unregistering): Released all slaves [ 681.340517][T25635] bond9 (unregistering): Released all slaves [ 681.400096][T25635] bond10 (unregistering): Released all slaves [ 681.455707][ T144] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 681.540085][T26392] validate_nla: 4 callbacks suppressed [ 681.540107][T26392] netlink: 'syz.4.5598': attribute type 22 has an invalid length. [ 681.561795][T26392] netlink: 'syz.4.5598': attribute type 22 has an invalid length. [ 681.786761][ T144] netdevsim netdevsim2 eth4: set [1, 0] type 2 family 0 port 6081 - 0 [ 681.806741][T25635] tipc: Left network mode [ 682.040105][T26419] tipc: Invalid UDP bearer configuration [ 682.040162][T26419] tipc: Enabling of bearer rejected, failed to enable media [ 682.075082][T26422] netlink: 'syz.4.5603': attribute type 1 has an invalid length. [ 682.198967][T26422] bond0: mtu less than device minimum [ 682.225809][T22441] Bluetooth: hci0: command tx timeout [ 682.638120][T26440] openvswitch: netlink: Unknown nsh attribute 0 [ 683.248297][ T5287] 8021q: adding VLAN 0 to HW filter on device eth1 [ 683.483695][T26465] bond6 (unregistering): Released all slaves [ 683.565189][T26278] bridge0: port 1(bridge_slave_0) entered blocking state [ 683.582189][T26278] bridge0: port 1(bridge_slave_0) entered disabled state [ 683.612009][T26278] bridge_slave_0: entered allmulticast mode [ 683.645472][T26278] bridge_slave_0: entered promiscuous mode [ 683.683059][T25635] hsr_slave_0: left promiscuous mode [ 683.703316][T25635] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 684.165885][T25635] team0 (unregistering): Port device team_slave_1 removed [ 684.245595][T25635] team0 (unregistering): Port device team_slave_0 removed [ 684.292157][T22441] Bluetooth: hci0: command tx timeout [ 684.660625][T26278] bridge0: port 2(bridge_slave_1) entered blocking state [ 684.673326][T26278] bridge0: port 2(bridge_slave_1) entered disabled state [ 684.690131][T26278] bridge_slave_1: entered allmulticast mode [ 684.725862][T26278] bridge_slave_1: entered promiscuous mode [ 684.853309][T26486] bond8 (unregistering): Released all slaves [ 685.108535][T26278] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 685.161128][T26278] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 685.379029][T26278] team0: Port device team_slave_0 added [ 685.437570][T26278] team0: Port device team_slave_1 added [ 685.498907][T25635] IPVS: stop unused estimator thread 0... [ 685.525576][T26278] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 685.556314][T26278] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 685.613841][T26278] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 685.633630][T26278] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 685.650222][T26507] netlink: 'syz.0.5620': attribute type 3 has an invalid length. [ 685.660604][T26278] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 685.726889][T26278] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 685.782297][T26517] sctp: [Deprecated]: syz.4.5622 (pid 26517) Use of struct sctp_assoc_value in delayed_ack socket option. [ 685.782297][T26517] Use struct sctp_sack_info instead [ 685.955114][T26278] hsr_slave_0: entered promiscuous mode [ 685.967926][T26278] hsr_slave_1: entered promiscuous mode [ 685.998928][T26278] debugfs: 'hsr0' already exists in 'hsr' [ 686.019682][T26278] Cannot create hsr debugfs directory [ 686.289497][T26538] __nla_validate_parse: 10 callbacks suppressed [ 686.289528][T26538] netlink: 576 bytes leftover after parsing attributes in process `syz.3.5627'. [ 686.371678][T22441] Bluetooth: hci0: command tx timeout [ 686.410518][ T5287] 8021q: adding VLAN 0 to HW filter on device eth2 [ 686.494525][T26550] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 686.613205][T26278] netdevsim netdevsim2 eth4 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 686.825769][T26555] x_tables: duplicate entry at hook 2 [ 687.036251][T26278] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 687.125771][T26568] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5635'. [ 687.589276][T26278] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 687.853111][T26278] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 687.909438][T26597] netlink: 284 bytes leftover after parsing attributes in process `syz.1.5641'. [ 687.924264][T26603] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5643'. [ 687.950264][T26601] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5642'. [ 688.469134][T26628] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5649'. [ 688.516283][T26628] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5649'. [ 688.526489][T26278] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 688.557396][T26278] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 688.631525][T26278] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 688.654741][T26278] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 688.679550][T26278] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 688.735234][T26278] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 688.753669][T26278] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 688.800340][T26278] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 689.188241][T26278] 8021q: adding VLAN 0 to HW filter on device bond0 [ 689.276978][T26278] 8021q: adding VLAN 0 to HW filter on device team0 [ 689.330159][T11286] bridge0: port 1(bridge_slave_0) entered blocking state [ 689.337411][T11286] bridge0: port 1(bridge_slave_0) entered forwarding state [ 689.407473][T11286] bridge0: port 2(bridge_slave_1) entered blocking state [ 689.414734][T11286] bridge0: port 2(bridge_slave_1) entered forwarding state [ 689.750610][T26686] netlink: 'syz.1.5664': attribute type 1 has an invalid length. [ 689.798383][T26686] netlink: 232 bytes leftover after parsing attributes in process `syz.1.5664'. [ 689.837895][T26686] netlink: 'syz.1.5664': attribute type 1 has an invalid length. [ 690.135696][T26700] bond8: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 690.153074][T26700] bond8 (unregistering): Released all slaves [ 690.494943][T26724] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5670'. [ 690.545060][T26724] netlink: 284 bytes leftover after parsing attributes in process `syz.0.5670'. [ 690.968774][T26746] team1: entered promiscuous mode [ 690.983694][T26746] team1: entered allmulticast mode [ 691.043042][T26755] openvswitch: netlink: Message has 8 unknown bytes. [ 691.255335][T26278] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 691.276876][T26763] netlink: 'syz.3.5677': attribute type 1 has an invalid length. [ 691.309696][T26763] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 691.355563][T26763] __nla_validate_parse: 2 callbacks suppressed [ 691.355596][T26763] netlink: 33 bytes leftover after parsing attributes in process `syz.3.5677'. [ 691.423978][T26763] netlink: 140 bytes leftover after parsing attributes in process `syz.3.5677'. [ 691.435795][T26278] veth0_vlan: entered promiscuous mode [ 691.467688][T26763] netlink: 33 bytes leftover after parsing attributes in process `syz.3.5677'. [ 691.486232][T26767] xt_CT: No such helper "snmp_trap" [ 691.529262][T26278] veth1_vlan: entered promiscuous mode [ 691.662530][T26278] veth0_macvtap: entered promiscuous mode [ 691.737684][T26278] veth1_macvtap: entered promiscuous mode [ 691.844644][T26779] bridge0: port 1(vlan2) entered blocking state [ 691.873703][T26779] bridge0: port 1(vlan2) entered disabled state [ 691.893512][T26779] vlan2: entered allmulticast mode [ 691.929890][T26779] bridge_slave_0: entered allmulticast mode [ 691.976690][T26779] vlan2: entered promiscuous mode [ 691.989806][T26779] bridge_slave_0: entered promiscuous mode [ 692.017474][T26793] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5683'. [ 692.035358][T26785] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 692.139090][T26793] netlink: 'syz.3.5683': attribute type 1 has an invalid length. [ 692.152542][T26278] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 692.168964][T26793] netlink: 220 bytes leftover after parsing attributes in process `syz.3.5683'. [ 692.218560][T26278] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 692.450172][ T144] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 692.495270][ T144] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 692.561462][T26811] gre1: entered promiscuous mode [ 692.626026][ T144] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 692.653685][ T144] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 692.967416][T17779] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 692.996949][T17779] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 693.129395][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 693.156007][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 693.288635][T26839] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5692'. [ 693.615827][T26848] 8021q: adding VLAN 0 to HW filter on device bond13 [ 693.698345][T26848] bond13: entered promiscuous mode [ 693.716891][T26848] bond13: entered allmulticast mode [ 693.749038][T26848] bond0: (slave bond13): Enslaving as an active interface with an up link [ 693.956740][T26854] 8021q: adding VLAN 0 to HW filter on device bond14 [ 694.003890][T26854] bond14: entered promiscuous mode [ 694.030647][T26854] bond14: entered allmulticast mode [ 694.054137][T26854] bond0: (slave bond14): Enslaving as an active interface with an up link [ 694.425091][T26880] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5701'. [ 694.457559][T26880] netlink: 'syz.3.5701': attribute type 26 has an invalid length. [ 694.494775][T26880] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5701'. [ 694.521640][T26880] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5701'. [ 694.533989][T26880] netlink: 'syz.3.5701': attribute type 26 has an invalid length. [ 694.574723][T26880] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5701'. [ 694.910422][T26910] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 695.424601][T26936] tipc: Enabled bearer , priority 0 [ 695.447265][T26936] syzkaller0: entered promiscuous mode [ 695.463461][T26936] syzkaller0: entered allmulticast mode [ 695.494429][T26936] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 695.658340][T26936] tipc: Resetting bearer [ 695.677817][T26934] tipc: Resetting bearer [ 695.749274][T26934] tipc: Disabling bearer [ 695.924196][T26956] syzkaller0: entered promiscuous mode [ 695.941106][T26956] syzkaller0: entered allmulticast mode [ 696.096613][ T36] bridge_slave_1: left allmulticast mode [ 696.103411][ T36] bridge_slave_1: left promiscuous mode [ 696.114254][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 696.128833][ T36] bridge_slave_0: left allmulticast mode [ 696.153009][ T36] bridge_slave_0: left promiscuous mode [ 696.166323][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 696.410050][ T36] bond5 (unregistering): (slave ip6gre2): Releasing backup interface [ 696.419012][ T36] ip6gre2 (unregistering): left promiscuous mode [ 696.706943][ T36] bond7 (unregistering): (slave geneve3): Releasing active interface [ 696.876724][T26991] __nla_validate_parse: 5 callbacks suppressed [ 696.876742][T26991] netlink: 288 bytes leftover after parsing attributes in process `syz.0.5730'. [ 696.898294][ T36] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 696.913506][ T36] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 696.937193][ T36] .` (unregistering): (slave team0): Releasing backup interface [ 696.959686][ T36] .` (unregistering): (slave batadv0): Releasing backup interface [ 696.975825][ T36] .` (unregistering): Released all slaves [ 696.993799][ T36] bond1 (unregistering): Released all slaves [ 697.036056][ T36] bond2 (unregistering): Released all slaves [ 697.074244][ T36] bond3 (unregistering): Released all slaves [ 697.139370][ T36] bond4 (unregistering): Released all slaves [ 697.174489][ T36] bond0 (unregistering): Released all slaves [ 697.209604][ T36] bond5 (unregistering): Released all slaves [ 697.250148][T27004] netlink: 14 bytes leftover after parsing attributes in process `syz.1.5734'. [ 697.264589][ T36] bond6 (unregistering): Released all slaves [ 697.288816][ T36] bond7 (unregistering): Released all slaves [ 697.504657][T27008] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5735'. [ 697.529442][ T36] tipc: Left network mode [ 697.908551][T27020] bond15 (unregistering): Released all slaves [ 698.109672][T27029] veth0: entered promiscuous mode [ 698.494145][T27046] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5745'. [ 698.607588][T27034] veth0: left promiscuous mode [ 698.665962][T27050] syzkaller0: entered promiscuous mode [ 698.723551][T27050] syzkaller0: entered allmulticast mode [ 698.743025][T27053] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5746'. [ 698.794882][T27048] netlink: 48 bytes leftover after parsing attributes in process `syz.3.5746'. [ 699.456587][T27091] netlink: 'syz.2.5756': attribute type 4 has an invalid length. [ 699.604236][T27096] netlink: 'syz.2.5756': attribute type 4 has an invalid length. [ 699.818252][ T36] hsr_slave_0: left promiscuous mode [ 699.858595][ T36] hsr_slave_1: left promiscuous mode [ 699.884886][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 699.927258][T27101] netlink: 'syz.0.5761': attribute type 1 has an invalid length. [ 699.943579][T27101] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5761'. [ 700.244504][T27111] netlink: 'syz.3.5765': attribute type 1 has an invalid length. [ 700.258032][T27111] netlink: 'syz.3.5765': attribute type 2 has an invalid length. [ 700.357895][T27114] netlink: 'syz.3.5765': attribute type 1 has an invalid length. [ 700.366244][T27114] netlink: 'syz.3.5765': attribute type 2 has an invalid length. [ 700.638615][ T36] team0 (unregistering): Port device team_slave_1 removed [ 700.944877][T27109] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5764'. [ 701.043555][T25637] smbdirect: ib_dev[syú2] removed [ 701.420877][T27131] xt_socket: unknown flags 0x8 [ 701.604226][T27137] sctp: [Deprecated]: syz.3.5772 (pid 27137) Use of int in max_burst socket option deprecated. [ 701.604226][T27137] Use struct sctp_assoc_value instead [ 701.708967][T27131] syzkaller0: entered promiscuous mode [ 701.739027][T27131] syzkaller0: entered allmulticast mode [ 701.804160][ T36] IPVS: stop unused estimator thread 0... [ 702.062649][T27148] netlink: 52 bytes leftover after parsing attributes in process `syz.4.5775'. [ 702.670873][T27166] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5778'. [ 705.573087][T27150] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 705.847283][T27198] netlink: 'syz.3.5786': attribute type 10 has an invalid length. [ 705.947063][T27198] 8021q: adding VLAN 0 to HW filter on device team0 [ 705.986584][T27198] bond0: (slave team0): Enslaving as an active interface with an up link [ 706.103797][T27208] tipc: MTU too low for tipc bearer [ 706.304701][T27216] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5791'. [ 706.543185][T27229] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5796'. [ 706.559220][T27229] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5796'. [ 706.586230][T27228] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 706.629541][T27235] syzkaller0: entered promiscuous mode [ 706.641978][T27235] syzkaller0: entered allmulticast mode [ 706.690822][T27237] netlink: 240 bytes leftover after parsing attributes in process `syz.1.5797'. [ 707.312934][T27264] bond8: (slave gretap0): Device is not bonding slave [ 707.320109][T27264] bond8: option active_slave: invalid value (gretap0) [ 707.351516][T27264] bond8 (unregistering): Released all slaves [ 707.397408][T27262] netlink: 'syz.1.5807': attribute type 9 has an invalid length. [ 707.610692][T27282] xt_TPROXY: Can be used only with -p tcp or -p udp [ 707.775524][ T5768] IPVS: starting estimator thread 0... [ 707.832102][T27296] netlink: 148 bytes leftover after parsing attributes in process `syz.2.5815'. [ 707.891778][T27298] IPVS: using max 27 ests per chain, 64800 per kthread [ 708.577942][T27328] netlink: 'syz.0.5826': attribute type 4 has an invalid length. [ 708.639346][T27335] bridge_slave_0: default FDB implementation only supports local addresses [ 709.253707][T27373] bond6: option lp_interval: invalid value (0) [ 709.260100][T27373] bond6: option lp_interval: allowed values 1 - 2147483647 [ 709.304304][T27373] bond6 (unregistering): Released all slaves [ 709.353537][T27381] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5840'. [ 709.383053][T27381] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5840'. [ 709.404453][T27376] macvlan2: entered promiscuous mode [ 709.443568][T27376] macvlan2: entered allmulticast mode [ 709.618833][T27391] SET target dimension over the limit! [ 709.827741][T27410] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5850'. [ 709.838721][T27410] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5850'. [ 709.853064][T27410] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5850'. [ 709.883105][T27404] x_tables: unsorted underflow at hook 4 [ 710.003806][T27421] netlink: 48 bytes leftover after parsing attributes in process `syz.3.5853'. [ 710.080154][T27429] netlink: 'syz.2.5854': attribute type 2 has an invalid length. [ 710.903463][T27470] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 710.954587][T27475] netlink: 'syz.4.5868': attribute type 25 has an invalid length. [ 711.079907][T27500] netlink: 72 bytes leftover after parsing attributes in process `syz.0.5870'. [ 711.351813][T27512] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 711.402244][T27512] netlink: 1204 bytes leftover after parsing attributes in process `syz.0.5874'. [ 711.486494][T27517] bridge0: port 1(vlan2) entered blocking state [ 711.522755][T27517] bridge0: port 1(vlan2) entered disabled state [ 711.551963][T27518] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5877'. [ 711.583836][T27517] vlan2: entered allmulticast mode [ 711.612621][T27517] bridge_slave_0: entered allmulticast mode [ 711.703238][T27517] vlan2: entered promiscuous mode [ 711.731669][T27517] bridge_slave_0: entered promiscuous mode [ 711.778463][ T37] vlan0: left allmulticast mode [ 711.796061][ T37] vlan0: left promiscuous mode [ 711.812506][ T37] bridge0: port 4(vlan0) entered disabled state [ 711.823884][T27530] sctp: [Deprecated]: syz.4.5880 (pid 27530) Use of struct sctp_assoc_value in delayed_ack socket option. [ 711.823884][T27530] Use struct sctp_sack_info instead [ 711.855738][ T37] team0: left promiscuous mode [ 711.860614][ T37] team_slave_0: left promiscuous mode [ 711.873262][ T37] team_slave_1: left promiscuous mode [ 711.879135][ T37] bridge0: port 3(team0) entered disabled state [ 711.893327][ T37] bridge0: port 2(bridge_slave_1) entered disabled state [ 711.913877][ T37] bridge_slave_0: left allmulticast mode [ 711.920635][ T37] bridge_slave_0: left promiscuous mode [ 711.932213][ T37] bridge0: port 1(bridge_slave_0) entered disabled state [ 711.956592][ T37] erspan0: left allmulticast mode [ 711.963796][ T37] bridge1: port 1(erspan0) entered disabled state [ 712.143467][ T1175] smbdirect: ib_dev[syz2] removed [ 712.221364][ T37] batman_adv: batadv0: Removing interface: gretap1 [ 712.348292][ T37] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 712.376470][ T37] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 712.386108][ T37] bond0 (unregistering): Released all slaves [ 712.398159][ T37] bond1 (unregistering): Released all slaves [ 712.415062][ T37] bond2 (unregistering): Released all slaves [ 712.432735][ T37] bond3 (unregistering): Released all slaves [ 712.449378][ T37] bond4 (unregistering): Released all slaves [ 712.470170][ T37] bond5 (unregistering): Released all slaves [ 712.489457][ T37] bond6 (unregistering): Released all slaves [ 712.512028][ T37] bond7 (unregistering): Released all slaves [ 712.564124][ T37] bond8 (unregistering): (slave veth0_to_bond): Releasing active interface [ 712.574126][ T37] bond8 (unregistering): Released all slaves [ 712.590741][ T37] bond9 (unregistering): Released all slaves [ 712.945078][T27540] __nla_validate_parse: 1 callbacks suppressed [ 712.945100][T27540] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5883'. [ 713.050445][T27542] openvswitch: netlink: Message has 4 unknown bytes. [ 713.084357][T27542] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 713.167868][ T37] tipc: Left network mode [ 713.187918][T27543] vcan1: entered promiscuous mode [ 713.197816][T27543] vcan1: entered allmulticast mode [ 713.741427][T27567] xt_hashlimit: size too large, truncated to 1048576 [ 713.821969][T27572] netlink: 'syz.2.5895': attribute type 1 has an invalid length. [ 713.845079][T27580] vlan2 (unregistering): left allmulticast mode [ 713.862328][T27580] bridge_slave_0 (unregistering): left allmulticast mode [ 713.871906][T27580] vlan2 (unregistering): left promiscuous mode [ 713.878219][T27580] bridge_slave_0 (unregistering): left promiscuous mode [ 713.900525][T27580] bridge0: port 1(vlan2) entered disabled state [ 714.107252][T27572] 8021q: adding VLAN 0 to HW filter on device bond1 [ 714.137331][T27589] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5896'. [ 714.164414][T27589] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 714.467442][T27597] openvswitch: netlink: IP tunnel dst address not specified [ 714.705930][T27608] netlink: 'syz.0.5902': attribute type 1 has an invalid length. [ 714.732844][T27608] netlink: 228 bytes leftover after parsing attributes in process `syz.0.5902'. [ 714.865537][T27615] x_tables: duplicate underflow at hook 1 [ 714.887680][T27615] netlink: 'syz.3.5904': attribute type 10 has an invalid length. [ 714.948345][ T37] hsr_slave_0: left promiscuous mode [ 714.963037][ T37] hsr_slave_1: left promiscuous mode [ 714.980181][ T37] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 715.594219][T27641] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5908'. [ 715.607227][T27641] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5908'. [ 715.614175][ T37] team_slave_1 (unregistering): left allmulticast mode [ 715.630080][T27641] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5908'. [ 715.650706][ T37] team0 (unregistering): Port device team_slave_1 removed [ 715.665051][T27641] netlink: 80 bytes leftover after parsing attributes in process `syz.1.5908'. [ 715.726061][ T37] team_slave_0 (unregistering): left allmulticast mode [ 715.749077][ T37] team0 (unregistering): Port device team_slave_0 removed [ 716.003695][T27615] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 716.011844][T27615] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 716.057110][T27634] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 716.075340][T27635] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 716.240063][T27650] netdevsim netdevsim0 netdevsim2: IPsec offload requires 128 bit authentication [ 716.605026][T27668] syzkaller0: entered promiscuous mode [ 716.641138][T27668] syzkaller0: entered allmulticast mode [ 716.706600][T27668] tipc: Enabling of bearer rejected, failed to enable media [ 717.080871][ T37] IPVS: stop unused estimator thread 0... [ 717.138495][T27693] netlink: 'syz.0.5920': attribute type 1 has an invalid length. [ 717.199219][T27693] netlink: 756 bytes leftover after parsing attributes in process `syz.0.5920'. [ 717.709845][T27716] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5924'. [ 717.826218][T27721] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5925'. [ 718.042593][T27728] netlink: 'syz.3.5927': attribute type 10 has an invalid length. [ 718.071021][T27728] __nla_validate_parse: 1 callbacks suppressed [ 718.071040][T27728] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5927'. [ 718.147572][T27728] team0: Port device geneve1 added [ 718.203189][T27740] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 718.234046][T27740] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5928'. [ 718.680606][T27763] xt_hashlimit: overflow, try lower: 3/0 [ 718.701741][T27763] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5934'. [ 718.739812][T27765] syzkaller0: entered promiscuous mode [ 718.759918][T27765] syzkaller0: entered allmulticast mode [ 719.065073][T27772] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 719.812682][T27813] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5947'. [ 719.859047][T27811] bridge6: entered promiscuous mode [ 719.887417][T27811] bridge6: entered allmulticast mode [ 719.892989][T27815] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5946'. [ 719.908277][T27816] block nbd0: Unsupported socket: should be TCP or UNIX. [ 719.975358][T27824] netlink: 64 bytes leftover after parsing attributes in process `syz.0.5950'. [ 720.064644][T27824] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 720.123155][T27827] netlink: 766 bytes leftover after parsing attributes in process `syz.0.5950'. [ 720.901370][T27859] batadv_slave_0: entered promiscuous mode [ 720.955963][T27866] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5961'. [ 720.994912][T27863] bond15 (unregistering): Released all slaves [ 721.219885][T27858] batadv_slave_0: left promiscuous mode [ 721.498400][T27866] syzkaller0: entered promiscuous mode [ 721.520233][T27866] syzkaller0: entered allmulticast mode [ 721.597757][ T5632] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 721.622631][ T5632] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 721.633519][ T5632] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 721.644106][ T5632] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 721.653771][ T5632] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 723.736056][T22441] Bluetooth: hci5: command tx timeout [ 724.512558][T16875] syz_tun (unregistering): left allmulticast mode [ 724.597921][T27918] lo: entered promiscuous mode [ 724.624269][T27918] tunl0: entered promiscuous mode [ 724.657478][T27918] gre0: entered promiscuous mode [ 724.674802][T27918] gretap0: entered promiscuous mode [ 724.695089][T27923] netlink: 'syz.4.5970': attribute type 83 has an invalid length. [ 724.707093][T27923] netlink: 180 bytes leftover after parsing attributes in process `syz.4.5970'. [ 724.746976][T27918] erspan0: entered promiscuous mode [ 724.766494][T27918] ip_vti0: entered promiscuous mode [ 724.937470][T27480] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 724.978895][T27937] xt_recent: hitcount (4294901760) is larger than allowed maximum (65535) [ 725.264409][T27485] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 725.298340][T27485] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 725.398120][T27480] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 725.487827][T27957] netdevsim netdevsim2: Firmware load for '..' refused, path contains '..' component [ 725.667908][T27480] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 725.811856][T22441] Bluetooth: hci5: command tx timeout [ 725.872230][T27480] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 726.234622][ T1175] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 726.402541][T27995] netlink: 'syz.3.5985': attribute type 1 has an invalid length. [ 726.453270][ T37] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 726.524043][T27485] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 726.675476][T27995] bond8: entered promiscuous mode [ 726.682265][T27995] 8021q: adding VLAN 0 to HW filter on device bond8 [ 726.728036][T28007] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 726.739395][T28007] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 726.795681][ T37] netdevsim netdevsim0 eth4: set [1, 0] type 2 family 0 port 6081 - 0 [ 726.949861][T28017] netlink: 9 bytes leftover after parsing attributes in process `syz.2.5989'. [ 727.131544][T28013] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5990'. [ 727.157597][T28013] openvswitch: netlink: EtherType 0 is less than min 600 [ 727.214789][T28013] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5990'. [ 727.232239][T27480] vlan2: left allmulticast mode [ 727.239025][T27480] bridge_slave_0: left allmulticast mode [ 727.255765][T27480] vlan2: left promiscuous mode [ 727.271635][T27480] bridge_slave_0: left promiscuous mode [ 727.279371][T27480] bridge0: port 1(vlan2) entered disabled state [ 727.291316][T28025] netlink: 'syz.3.5991': attribute type 10 has an invalid length. [ 727.313380][T27480] dvmrp8: left allmulticast mode [ 727.343863][T28026] netlink: 'syz.3.5991': attribute type 10 has an invalid length. [ 727.555984][T27480] tipc: Disabling bearer [ 727.624550][T28036] netlink: 76 bytes leftover after parsing attributes in process `syz.4.5993'. [ 727.770680][T27480] bond6 (unregistering): (slave geneve2): Releasing active interface [ 727.892551][T22441] Bluetooth: hci5: command tx timeout [ 728.017663][T27480] .` (unregistering): Released all slaves [ 728.040155][T27480] bond1 (unregistering): Released all slaves [ 728.087477][T27480] bond2 (unregistering): Released all slaves [ 728.163407][T27480] bond0 (unregistering): Released all slaves [ 728.188405][T27480] bond3 (unregistering): Released all slaves [ 728.197610][T28050] netlink: 'syz.4.5996': attribute type 4 has an invalid length. [ 728.208207][T28050] netlink: 'syz.4.5996': attribute type 4 has an invalid length. [ 728.227718][T28050] netlink: 'syz.4.5996': attribute type 4 has an invalid length. [ 728.229058][T27480] bond4 (unregistering): Released all slaves [ 728.259685][T27480] bond5 (unregistering): Released all slaves [ 728.287374][T27480] bond6 (unregistering): Released all slaves [ 728.314439][T27480] bond7 (unregistering): Released all slaves [ 728.371562][T28017] 0·: renamed from hsr0 (while UP) [ 728.419625][T28017] 0·: entered allmulticast mode [ 728.432027][T28017] hsr_slave_0: entered allmulticast mode [ 728.460224][T28017] hsr_slave_1: entered allmulticast mode [ 728.492684][T28017] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 728.558758][T28026] team0: Port device dummy0 removed [ 728.644992][T27480] : left promiscuous mode [ 728.904946][ T5287] 8021q: adding VLAN 0 to HW filter on device eth1 [ 729.026303][T28072] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5999'. [ 729.044750][T27480] tipc: Left network mode [ 729.525859][T27893] bridge0: port 1(bridge_slave_0) entered blocking state [ 729.582550][T27893] bridge0: port 1(bridge_slave_0) entered disabled state [ 729.597103][T28101] openvswitch: netlink: IP tunnel dst address not specified [ 729.614856][T27893] bridge_slave_0: entered allmulticast mode [ 729.636068][T27893] bridge_slave_0: entered promiscuous mode [ 729.657504][T28097] tipc: Enabled bearer , priority 0 [ 729.671611][T28099] netlink: 'syz.2.6003': attribute type 12 has an invalid length. [ 729.683324][T28099] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6003'. [ 729.787782][T28112] sctp: [Deprecated]: syz.3.6006 (pid 28112) Use of int in maxseg socket option. [ 729.787782][T28112] Use struct sctp_assoc_value instead [ 729.804145][T28112] netlink: 'syz.3.6006': attribute type 20 has an invalid length. [ 729.816632][T28112] IPv6: NLM_F_CREATE should be specified when creating new route [ 729.890752][T28089] syzkaller0: entered promiscuous mode [ 729.905840][T28089] syzkaller0: entered allmulticast mode [ 729.932371][T28103] netlink: 'syz.2.6003': attribute type 12 has an invalid length. [ 729.959491][T28103] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6003'. [ 729.972053][T22441] Bluetooth: hci5: command tx timeout [ 730.026603][T28095] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 730.094463][T27893] bridge0: port 2(bridge_slave_1) entered blocking state [ 730.105932][T27893] bridge0: port 2(bridge_slave_1) entered disabled state [ 730.115393][T27893] bridge_slave_1: entered allmulticast mode [ 730.127032][T27893] bridge_slave_1: entered promiscuous mode [ 730.177729][T28086] tipc: Resetting bearer [ 730.199892][T28129] netlink: 'syz.2.6009': attribute type 7 has an invalid length. [ 730.266982][T28124] netlink: 52 bytes leftover after parsing attributes in process `syz.1.6007'. [ 730.277477][T28086] tipc: Disabling bearer [ 730.433932][T27893] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 730.468986][T27893] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 730.542602][ T5287] 8021q: adding VLAN 0 to HW filter on device eth2 [ 730.595500][T28139] netlink: 'syz.2.6012': attribute type 1 has an invalid length. [ 730.638088][T28139] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 730.694522][T28135] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6010'. [ 730.784909][T28134] syzkaller0: entered promiscuous mode [ 730.790582][T28134] syzkaller0: entered allmulticast mode [ 730.812604][T27893] team0: Port device team_slave_0 added [ 730.920397][T28155] netlink: 'syz.1.6016': attribute type 2 has an invalid length. [ 733.244473][T27893] team0: Port device team_slave_1 added [ 733.379102][T28165] netlink: 27 bytes leftover after parsing attributes in process `syz.2.6019'. [ 733.482869][T27480] hsr_slave_0: left promiscuous mode [ 733.504336][T27480] hsr_slave_1: left promiscuous mode [ 733.623285][T28175] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6022'. [ 734.247748][T28206] x_tables: duplicate underflow at hook 2 [ 734.479516][T27484] smbdirect: ib_dev[syz1] removed [ 734.570289][T27893] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 734.584355][T27893] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 734.617947][T27893] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 734.638294][T27893] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 734.646128][T27893] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 734.673185][T27893] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 734.732997][T28186] bridge5: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 734.769392][T28198] syzkaller0: entered promiscuous mode [ 734.779287][T28198] syzkaller0: entered allmulticast mode [ 734.813527][T28213] netlink: 44 bytes leftover after parsing attributes in process `syz.2.6027'. [ 734.867961][ T5287] 8021q: adding VLAN 0 to HW filter on device eth3 [ 734.877572][T28216] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6028'. [ 735.088437][T27893] hsr_slave_0: entered promiscuous mode [ 735.107652][T27893] hsr_slave_1: entered promiscuous mode [ 735.450017][T27480] IPVS: stop unused estimator thread 0... [ 735.506497][T28234] tipc: Enabled bearer , priority 0 [ 735.593011][T28234] syzkaller0: MTU too low for tipc bearer [ 735.598817][T28234] tipc: Disabling bearer [ 735.899259][T28256] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6040'. [ 735.961507][T28256] syzkaller1: entered promiscuous mode [ 735.974923][T28256] syzkaller1: entered allmulticast mode [ 735.996578][T28261] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6042'. [ 736.009517][T28256] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6040'. [ 736.027177][T28261] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6042'. [ 736.037701][T28261] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6042'. [ 736.109080][T28267] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6043'. [ 736.234174][T27893] netdevsim netdevsim0 eth4 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 736.688643][T27893] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 736.780072][T28294] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6047'. [ 736.798643][T28294] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6047'. [ 737.008665][T28309] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6050'. [ 737.084517][T27893] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 737.223058][T28323] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6053'. [ 737.368148][T27893] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 737.590089][T28332] 8021q: adding VLAN 0 to HW filter on device bond2 [ 737.949809][T28350] tipc: Enabled bearer , priority 0 [ 737.961325][T28352] openvswitch: netlink: IP tunnel dst address not specified [ 737.970510][T28346] xt_hashlimit: invalid interval [ 738.010525][T28345] tipc: Disabling bearer [ 738.503870][T27893] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 738.544638][T27893] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 738.566744][T27893] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 738.618453][T27893] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 738.649824][T27893] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 738.678248][T27893] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 738.703633][T28374] bridge_slave_1: default FDB implementation only supports local addresses [ 738.739697][T27893] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 738.819811][T27893] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 738.945387][T28389] macvlan2: entered promiscuous mode [ 738.956675][T28389] macvlan2: entered allmulticast mode [ 739.330427][T27893] 8021q: adding VLAN 0 to HW filter on device bond0 [ 739.438918][T27893] 8021q: adding VLAN 0 to HW filter on device team0 [ 739.498423][ T1175] bridge0: port 1(bridge_slave_0) entered blocking state [ 739.506194][ T1175] bridge0: port 1(bridge_slave_0) entered forwarding state [ 739.573679][ T1175] bridge0: port 2(bridge_slave_1) entered blocking state [ 739.581689][ T1175] bridge0: port 2(bridge_slave_1) entered forwarding state [ 739.663352][T28419] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 739.725031][T28421] tipc: Failed to remove unknown binding: 66,0,0/2886997039:4223693240/4223693241 [ 739.767697][T28419] hsr_slave_0: left promiscuous mode [ 739.789798][T28421] tipc: Failed to remove unknown binding: 66,0,0/2886997039:4223693240/4223693241 [ 740.446516][T28449] syzkaller0: entered promiscuous mode [ 740.494097][T28449] syzkaller0: entered allmulticast mode [ 741.929143][T28527] __nla_validate_parse: 12 callbacks suppressed [ 741.929165][T28527] netlink: 96 bytes leftover after parsing attributes in process `syz.3.6094'. [ 745.401822][T28527] vlan4: entered allmulticast mode [ 745.411491][T28527] gretap0: entered allmulticast mode [ 745.624225][T28558] netlink: 144 bytes leftover after parsing attributes in process `syz.4.6095'. [ 745.716120][T28560] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6098'. [ 745.755175][T28560] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6098'. [ 745.876972][T27893] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 746.028137][T28579] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6101'. [ 746.152781][T27893] veth0_vlan: entered promiscuous mode [ 746.247892][T27893] veth1_vlan: entered promiscuous mode [ 746.362682][T27893] veth0_macvtap: entered promiscuous mode [ 746.445754][T28591] bond0: entered allmulticast mode [ 746.481415][T28591] bond_slave_0: entered allmulticast mode [ 746.488907][T28598] xt_TPROXY: Can be used only with -p tcp or -p udp [ 746.494863][T28591] bond_slave_1: entered allmulticast mode [ 746.543981][T28591] team0: entered allmulticast mode [ 746.601326][T28591] team_slave_0: entered allmulticast mode [ 746.609511][T28591] team_slave_1: entered allmulticast mode [ 746.622004][T28591] geneve1: entered allmulticast mode [ 746.661223][T27893] veth1_macvtap: entered promiscuous mode [ 746.850267][T27893] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 747.009160][T28620] netlink: 'syz.1.6112': attribute type 15 has an invalid length. [ 747.035075][T28604] syzkaller0: entered promiscuous mode [ 747.041214][T28604] syzkaller0: entered allmulticast mode [ 751.050330][T27893] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 751.178817][ T37] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 751.267468][ T37] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 751.318108][ T37] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 751.368869][ T37] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 751.810592][T28655] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6122'. [ 751.853962][T17779] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 751.893653][T17779] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 751.990811][T28669] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6126'. [ 752.012268][T27480] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 752.015051][T28669] netlink: 13 bytes leftover after parsing attributes in process `syz.4.6126'. [ 752.050655][T28665] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6124'. [ 752.056013][T27480] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 752.115469][T28665] nbd: socks must be embedded in a SOCK_ITEM attr [ 752.147432][T28669] veth11: entered promiscuous mode [ 752.525461][T28689] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6129'. [ 752.824426][T28710] netlink: 56 bytes leftover after parsing attributes in process `syz.0.6137'. [ 753.117030][T28715] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6138'. [ 753.247460][ T5632] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 753.271226][ T5632] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 753.284876][ T5632] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 753.326945][ T5632] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 753.344619][ T5632] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 753.525948][T28719] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 753.562255][T28730] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_tx_wq": -EINTR [ 753.825790][T28739] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6142'. [ 753.905093][T28744] netlink: 'syz.0.6144': attribute type 2 has an invalid length. [ 753.915746][T28746] netlink: 64 bytes leftover after parsing attributes in process `syz.4.6143'. [ 753.975487][T28749] netlink: 'syz.2.6145': attribute type 11 has an invalid length. [ 753.983600][T28748] netlink: 'syz.3.6142': attribute type 61 has an invalid length. [ 753.995485][T28749] netlink: 224 bytes leftover after parsing attributes in process `syz.2.6145'. [ 754.416869][T28753] syzkaller1: entered promiscuous mode [ 754.430449][T28753] syzkaller1: entered allmulticast mode [ 755.421222][ T5632] Bluetooth: hci3: command tx timeout [ 757.509314][ T5632] Bluetooth: hci3: command tx timeout [ 758.434622][T28773] netlink: 'syz.0.6149': attribute type 2 has an invalid length. [ 758.609594][T28787] x_tables: duplicate underflow at hook 3 [ 758.681227][T28788] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 759.571110][ T5632] Bluetooth: hci3: command tx timeout [ 759.829058][T28843] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6171'. [ 759.989916][T28716] bridge0: port 1(bridge_slave_0) entered blocking state [ 759.997484][T28716] bridge0: port 1(bridge_slave_0) entered disabled state [ 760.006714][T28716] bridge_slave_0: entered allmulticast mode [ 760.015183][T28716] bridge_slave_0: entered promiscuous mode [ 760.064002][T28716] bridge0: port 2(bridge_slave_1) entered blocking state [ 760.092698][T28716] bridge0: port 2(bridge_slave_1) entered disabled state [ 760.112175][T28716] bridge_slave_1: entered allmulticast mode [ 760.126037][T28716] bridge_slave_1: entered promiscuous mode [ 760.263764][T28716] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 760.305298][T28853] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6172'. [ 760.344698][T28851] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6172'. [ 760.366977][T28716] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 760.383140][T28851] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6172'. [ 760.410069][T28854] syzkaller0: entered promiscuous mode [ 760.416411][T28854] syzkaller0: entered allmulticast mode [ 760.444524][T28851] bond1: option lacp_strict: mode dependency failed, not supported in mode balance-rr(0) [ 760.457042][T28851] bond1 (unregistering): Released all slaves [ 760.610452][T28867] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 760.631797][T28867] syzkaller1: Refused to change device type [ 760.659012][T28716] team0: Port device team_slave_0 added [ 760.665810][T28871] sctp: [Deprecated]: syz.0.6178 (pid 28871) Use of int in max_burst socket option. [ 760.665810][T28871] Use struct sctp_assoc_value instead [ 760.707768][T28716] team0: Port device team_slave_1 added [ 760.779427][T28874] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6177'. [ 760.815327][T28874] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6177'. [ 760.880064][T28875] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6179'. [ 760.924985][T28878] netlink: zone id is out of range [ 760.935851][T28878] netlink: del zone limit has 4 unknown bytes [ 760.948265][T28716] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 760.956762][T28716] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 760.959738][T28878] netlink: zone id is out of range [ 760.991984][T28884] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6181'. [ 761.001718][T28716] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 761.019374][T28878] netlink: del zone limit has 4 unknown bytes [ 761.059813][T28716] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 761.081321][T28716] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 761.153020][T28716] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 761.167520][T28887] netlink: 'syz.4.6182': attribute type 1 has an invalid length. [ 761.262223][T28887] 8021q: adding VLAN 0 to HW filter on device bond6 [ 761.315478][T28893] syz_tun: refused to change device tx_queue_len [ 761.344623][T28716] hsr_slave_0: entered promiscuous mode [ 761.359561][T28716] hsr_slave_1: entered promiscuous mode [ 761.378641][T28716] debugfs: 'hsr0' already exists in 'hsr' [ 761.390959][T28716] Cannot create hsr debugfs directory [ 761.567732][T28904] veth1_to_team: mtu less than device minimum [ 761.651000][ T5632] Bluetooth: hci3: command tx timeout [ 762.105488][T28931] ipip0: entered allmulticast mode [ 762.228452][T28716] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 762.252821][T28943] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6195'. [ 762.265441][T28943] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6195'. [ 762.281096][T28943] netlink: 'syz.2.6195': attribute type 12 has an invalid length. [ 762.313564][T28943] netlink: 'syz.2.6195': attribute type 11 has an invalid length. [ 762.385807][T28946] netlink: 'syz.4.6198': attribute type 4 has an invalid length. [ 762.387539][T28945] netlink: 'syz.4.6198': attribute type 4 has an invalid length. [ 762.405028][T28946] netlink: 'syz.4.6198': attribute type 4 has an invalid length. [ 762.413274][T28946] netlink: 'syz.4.6198': attribute type 4 has an invalid length. [ 762.570642][T28716] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 762.731830][T28954] netlink: 'syz.3.6200': attribute type 10 has an invalid length. [ 762.765307][ T5632] block nbd3: Receive control failed (result -107) [ 762.783409][T28954] openvswitch: netlink: Flow key attr not present in new flow. [ 762.840534][T28962] netlink: 'syz.4.6203': attribute type 1 has an invalid length. [ 762.862558][T28716] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 763.080054][T28716] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 763.304055][ T8657] IPVS: starting estimator thread 0... [ 763.411629][T28980] IPVS: using max 27 ests per chain, 64800 per kthread [ 763.657878][T28716] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 763.684388][T28716] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 763.702276][T28716] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 763.735337][T28716] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 763.767277][T28990] gretap0 speed is unknown, defaulting to 1000 [ 763.784021][T28716] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 763.810850][T28716] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 763.832056][T28716] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 763.858774][T28716] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 763.948493][T28990] gretap0 speed is unknown, defaulting to 1000 [ 763.961700][T28999] veth0_to_bridge: entered promiscuous mode [ 763.979409][T28999] veth0_to_bridge: left promiscuous mode [ 764.003401][T28990] gretap0 speed is unknown, defaulting to 1000 [ 764.183792][T28716] 8021q: adding VLAN 0 to HW filter on device bond0 [ 764.244046][T28716] 8021q: adding VLAN 0 to HW filter on device team0 [ 764.263279][T27485] bridge0: port 1(bridge_slave_0) entered blocking state [ 764.270598][T27485] bridge0: port 1(bridge_slave_0) entered forwarding state [ 764.312141][T27486] bridge0: port 2(bridge_slave_1) entered blocking state [ 764.319424][T27486] bridge0: port 2(bridge_slave_1) entered forwarding state [ 764.550161][ T5809] gretap0 speed is unknown, defaulting to 1000 [ 764.562663][T28990] infiniband syz1: set active [ 764.572848][T28990] infiniband syz1: added gretap0 [ 764.608847][T28990] smbdirect: ib_dev[syz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 764.630695][T28990] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 764.648833][T28990] smbdirect: ib_dev[syz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 764.716119][T28990] RDS/IB: syz1: added [ 764.722981][T28990] smc: adding ib device syz1 with port count 1 [ 764.729866][T28990] smc: ib device syz1 port 1 has no pnetid [ 764.744379][ T5809] gretap0 speed is unknown, defaulting to 1000 [ 764.762501][T28990] gretap0 speed is unknown, defaulting to 1000 [ 765.093706][T29032] syz_tun: left allmulticast mode [ 765.372261][T29043] bond1: entered promiscuous mode [ 765.377661][T29043] bond1: entered allmulticast mode [ 765.384989][T29043] 8021q: adding VLAN 0 to HW filter on device bond1 [ 765.669754][T28716] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 765.713773][T28990] gretap0 speed is unknown, defaulting to 1000 [ 765.760647][T29062] __nla_validate_parse: 5 callbacks suppressed [ 765.760668][T29062] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6226'. [ 765.934097][T29066] bond7: option arp_all_targets: invalid value (248) [ 765.958573][T29066] bond7 (unregistering): Released all slaves [ 766.101311][T28716] veth0_vlan: entered promiscuous mode [ 766.148467][T28716] veth1_vlan: entered promiscuous mode [ 766.259721][T28716] veth0_macvtap: entered promiscuous mode [ 766.283691][T28716] veth1_macvtap: entered promiscuous mode [ 766.322206][T28990] gretap0 speed is unknown, defaulting to 1000 [ 766.340103][T28716] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 766.379308][T28716] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 766.422899][T17779] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 766.434531][T17779] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 766.448299][T17779] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 766.462298][T17779] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 766.741461][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 766.751511][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 766.846275][T27485] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 766.873133][T27485] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 767.004126][T29091] netlink: 'syz.2.6236': attribute type 15 has an invalid length. [ 767.113963][T28990] gretap0 speed is unknown, defaulting to 1000 [ 767.294783][T29104] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6239'. [ 767.305716][T29103] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6239'. [ 767.337063][T29106] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 767.414952][T29109] macvtap1: entered promiscuous mode [ 767.421390][T29109] macvtap1: entered allmulticast mode [ 767.427136][T29109] veth1_vlan: entered allmulticast mode [ 767.503091][T29109] macvtap2: entered promiscuous mode [ 767.513083][T29109] macvtap2: entered allmulticast mode [ 767.570774][T28990] gretap0 speed is unknown, defaulting to 1000 [ 767.798125][T29111] lo: left promiscuous mode [ 767.803876][T29111] tunl0: left promiscuous mode [ 767.809102][T29111] gre0: left promiscuous mode [ 767.817065][T29111] gretap0: left promiscuous mode [ 767.823054][T29111] erspan0: left promiscuous mode [ 767.829540][T29111] ip_vti0: left promiscuous mode [ 767.884214][T29111] bridge0: port 2(bridge_slave_1) entered disabled state [ 767.891884][T29111] bridge0: port 1(bridge_slave_0) entered disabled state [ 767.963604][T29111] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 767.985402][T28990] gretap0 speed is unknown, defaulting to 1000 [ 768.269862][T28990] gretap0 speed is unknown, defaulting to 1000 [ 768.586169][T29126] h: entered promiscuous mode [ 769.937449][T29086] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 770.204710][T29139] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6247'. [ 770.237134][T29139] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6247'. [ 770.315446][T29144] tc_dump_action: action bad kind [ 770.433676][T29158] sch_tbf: peakrate 8 is lower than or equals to rate 7508080445633888606 ! [ 770.542963][T29167] netlink: 'syz.3.6252': attribute type 4 has an invalid length. [ 770.566910][T29169] netlink: 'syz.3.6252': attribute type 4 has an invalid length. [ 770.753970][T29176] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6254'. [ 770.867657][T29181] xt_hashlimit: size too large, truncated to 1048576 [ 770.953091][T29187] x_tables: duplicate underflow at hook 2 [ 770.968514][T29186] bridge0: port 1(bridge_slave_0) entered disabled state [ 771.068898][T29186] bridge_slave_0 (unregistering): left allmulticast mode [ 771.105875][T29186] bridge_slave_0 (unregistering): left promiscuous mode [ 771.128177][T29186] bridge0: port 1(bridge_slave_0) entered disabled state [ 771.273409][T29194] vlan5: entered promiscuous mode [ 771.288207][T29194] bridge0: entered promiscuous mode [ 771.540597][T29211] netlink: 'syz.3.6265': attribute type 3 has an invalid length. [ 771.731829][T29217] netlink: 'syz.1.6267': attribute type 21 has an invalid length. [ 771.762971][T29217] netlink: 156 bytes leftover after parsing attributes in process `syz.1.6267'. [ 771.999956][T29217] bond1: Unable to set down delay as MII monitoring is disabled [ 772.057817][T29217] bond1 (unregistering): Released all slaves [ 772.177457][T29234] netlink: 'syz.0.6270': attribute type 39 has an invalid length. [ 772.257183][T22441] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 772.275366][T22441] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 772.286562][T22441] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 772.300702][T22441] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 772.308921][T22441] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 772.437811][T29232] 8021q: adding VLAN 0 to HW filter on device bond2 [ 772.456248][T29242] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6273'. [ 772.758164][T29252] netlink: 84 bytes leftover after parsing attributes in process `syz.3.6275'. [ 772.886765][T29256] netlink: 100 bytes leftover after parsing attributes in process `syz.2.6276'. [ 772.979930][T29245] syzkaller0: entered promiscuous mode [ 772.988608][T29245] syzkaller0: entered allmulticast mode [ 773.106449][T29266] IPVS: set_ctl: invalid protocol: 115 100.1.1.0:20004 [ 773.177577][T29257] syzkaller0: left promiscuous mode [ 773.188654][T29257] syzkaller0: left allmulticast mode [ 773.547815][T29287] sctp: [Deprecated]: syz.0.6281 (pid 29287) Use of struct sctp_assoc_value in delayed_ack socket option. [ 773.547815][T29287] Use struct sctp_sack_info instead [ 773.756088][T29233] gretap0 speed is unknown, defaulting to 1000 [ 774.287200][T29323] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 774.371091][T22441] Bluetooth: hci1: command tx timeout [ 774.840352][T29364] lo speed is unknown, defaulting to 1000 [ 774.866229][T29364] lo speed is unknown, defaulting to 1000 [ 774.883485][T29354] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6297'. [ 774.955794][T29364] lo speed is unknown, defaulting to 1000 [ 774.990030][T29364] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 775.051205][T29364] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 775.120683][T29364] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 775.154211][T29364] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 775.229948][T29364] lo speed is unknown, defaulting to 1000 [ 775.246173][T29364] lo speed is unknown, defaulting to 1000 [ 775.263776][T29364] lo speed is unknown, defaulting to 1000 [ 775.282203][T29383] xt_time: unknown flags 0xf4 [ 775.288998][T29364] lo speed is unknown, defaulting to 1000 [ 775.297300][T29364] lo speed is unknown, defaulting to 1000 [ 775.312877][T29364] lo speed is unknown, defaulting to 1000 [ 775.357336][T29364] lo speed is unknown, defaulting to 1000 [ 775.366032][T29364] lo speed is unknown, defaulting to 1000 [ 775.901813][T29392] syzkaller1: entered promiscuous mode [ 775.907711][T29392] syzkaller1: entered allmulticast mode [ 775.947037][T29233] bridge0: port 1(bridge_slave_0) entered blocking state [ 775.980045][T29233] bridge0: port 1(bridge_slave_0) entered disabled state [ 776.024506][T29233] bridge_slave_0: entered allmulticast mode [ 776.065260][T29233] bridge_slave_0: entered promiscuous mode [ 776.106635][T29233] bridge0: port 2(bridge_slave_1) entered blocking state [ 776.114054][T29233] bridge0: port 2(bridge_slave_1) entered disabled state [ 776.122976][T29233] bridge_slave_1: entered allmulticast mode [ 776.131872][T29233] bridge_slave_1: entered promiscuous mode [ 776.179598][T29420] netlink: 'syz.3.6313': attribute type 2 has an invalid length. [ 776.189969][T29420] netlink: 244 bytes leftover after parsing attributes in process `syz.3.6313'. [ 776.327993][T29418] syzkaller0: entered promiscuous mode [ 776.333969][T29418] syzkaller0: entered allmulticast mode [ 776.410028][T29233] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 776.442780][T29233] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 776.453465][T22441] Bluetooth: hci1: command tx timeout [ 776.497643][T29420] tipc: Enabled bearer , priority 0 [ 776.573294][T29427] syzkaller0: entered promiscuous mode [ 776.578943][T29427] syzkaller0: entered allmulticast mode [ 776.586741][T29440] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6316'. [ 776.597068][T29427] tipc: Resetting bearer [ 778.530939][T22441] Bluetooth: hci1: command tx timeout [ 780.046995][T29419] tipc: Resetting bearer [ 780.368153][T29452] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6319'. [ 780.487893][T29454] Bluetooth: MGMT ver 1.23 [ 780.616876][T22441] Bluetooth: hci1: command tx timeout [ 783.794986][T29419] tipc: Disabling bearer [ 783.806285][ T5809] tipc: Node number set to 2060391507 [ 783.814839][T29233] team0: Port device team_slave_0 added [ 783.849196][T29233] team0: Port device team_slave_1 added [ 783.955975][T29233] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 783.981806][T29233] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 784.030759][T29233] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 784.069620][T29233] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 784.087592][T29233] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 784.127695][T29464] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6323'. [ 784.159339][T29233] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 784.274431][T29474] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6326'. [ 784.360618][T29233] hsr_slave_0: entered promiscuous mode [ 784.385243][T29233] hsr_slave_1: entered promiscuous mode [ 784.404020][T29233] debugfs: 'hsr0' already exists in 'hsr' [ 784.441103][T29233] Cannot create hsr debugfs directory [ 784.600727][T29486] veth3: entered allmulticast mode [ 784.723007][T29497] tipc: Enabling of bearer rejected, failed to enable media [ 785.410470][T29524] syzkaller0: entered promiscuous mode [ 785.447144][T29524] syzkaller0: entered allmulticast mode [ 786.165033][T29556] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6348'. [ 786.596768][T29569] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6353'. [ 786.703619][T29576] netlink: 'syz.0.6356': attribute type 2 has an invalid length. [ 786.755442][T29233] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 786.782992][T29233] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 786.791995][T29233] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 786.818193][T29233] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 786.859783][T29233] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 786.903690][T29233] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 786.924649][T29233] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 786.967545][T29233] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 787.334814][T29233] 8021q: adding VLAN 0 to HW filter on device bond0 [ 787.361978][T29604] netlink: 'syz.3.6364': attribute type 4 has an invalid length. [ 787.375971][T29605] netlink: 'syz.3.6364': attribute type 4 has an invalid length. [ 787.409366][T29233] 8021q: adding VLAN 0 to HW filter on device team0 [ 787.425366][T27485] bridge0: port 1(bridge_slave_0) entered blocking state [ 787.434539][T27485] bridge0: port 1(bridge_slave_0) entered forwarding state [ 787.468388][T27485] bridge0: port 2(bridge_slave_1) entered blocking state [ 787.475954][T27485] bridge0: port 2(bridge_slave_1) entered forwarding state [ 787.723562][T29611] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6365'. [ 787.773422][T29615] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6366'. [ 787.789897][T29616] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6365'. [ 788.293416][T29636] netlink: 'syz.1.6369': attribute type 1 has an invalid length. [ 788.549628][T29650] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6372'. [ 788.574356][T29650] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6372'. [ 788.588209][T29233] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 788.612386][T29650] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6372'. [ 788.796888][T29661] netlink: 'syz.0.6374': attribute type 1 has an invalid length. [ 788.930529][T29661] 8021q: adding VLAN 0 to HW filter on device bond3 [ 789.030558][T29667] bond3: (slave geneve2): making interface the new active one [ 789.045223][T29667] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 789.231577][T29680] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6380'. [ 789.468401][T29233] veth0_vlan: entered promiscuous mode [ 789.534875][T29233] veth1_vlan: entered promiscuous mode [ 789.668724][T29233] veth0_macvtap: entered promiscuous mode [ 789.698063][T29233] veth1_macvtap: entered promiscuous mode [ 789.729878][T29233] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 789.774649][T29233] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 789.816527][T29694] syzkaller0: entered promiscuous mode [ 789.831368][T29694] syzkaller0: entered allmulticast mode [ 789.874143][T27482] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 790.328777][T27482] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 790.338392][T27482] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 790.362936][T27482] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 790.786206][T27495] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 790.827545][T27495] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 790.963634][ T1175] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 790.995633][ T1175] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 790.997610][T29739] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6398'. [ 791.385483][T29757] __nla_validate_parse: 1 callbacks suppressed [ 791.385507][T29757] netlink: 256 bytes leftover after parsing attributes in process `syz.4.6266'. [ 791.431956][T29762] netlink: 'syz.1.6404': attribute type 1 has an invalid length. [ 791.718447][T29772] xt_cgroup: invalid path, errno=-2 [ 791.791334][T29762] 8021q: adding VLAN 0 to HW filter on device bond1 [ 791.815445][T29762] netlink: 'syz.1.6404': attribute type 1 has an invalid length. [ 791.841565][ T5632] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 791.852740][T29764] bond1: (slave geneve2): making interface the new active one [ 791.866779][ T5632] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 791.877102][ T5632] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 791.897137][ T5632] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 791.909408][T29764] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 791.918698][ T5632] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 791.986758][T27480] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 791.987222][T29762] netlink: 'syz.1.6404': attribute type 1 has an invalid length. [ 792.018704][T29780] vlan2: entered allmulticast mode [ 792.097205][T29780] bond0: entered allmulticast mode [ 792.134212][T29780] bond_slave_0: entered allmulticast mode [ 792.157933][T29780] bond_slave_1: entered allmulticast mode [ 792.187136][T27479] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 792.215882][T29762] netlink: 'syz.1.6404': attribute type 1 has an invalid length. [ 792.234683][T27479] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 792.263274][T27479] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 792.394850][T29791] netlink: 'syz.4.6411': attribute type 1 has an invalid length. [ 792.502944][T29791] netlink: 'syz.4.6411': attribute type 1 has an invalid length. [ 792.581608][T29797] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6412'. [ 792.923121][T29815] netlink: 'syz.1.6416': attribute type 2 has an invalid length. [ 793.128986][T29823] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6417'. [ 793.267900][T29829] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6420'. [ 793.359126][T29777] gretap0 speed is unknown, defaulting to 1000 [ 793.407299][T29833] netlink: 'syz.4.6422': attribute type 3 has an invalid length. [ 793.737839][T29852] syzkaller0: entered promiscuous mode [ 793.753904][T29852] syzkaller0: entered allmulticast mode [ 793.799715][T29852] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6428'. [ 793.974319][T22441] Bluetooth: hci2: command tx timeout [ 794.014859][T29864] netlink: 'syz.0.6433': attribute type 19 has an invalid length. [ 794.048010][T29777] lo speed is unknown, defaulting to 1000 [ 794.058959][T29863] netlink: 'syz.2.6432': attribute type 13 has an invalid length. [ 794.256128][T29868] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6435'. [ 794.399390][T29881] nbd: couldn't find device at index 2 [ 794.965682][T29777] bridge0: port 1(bridge_slave_0) entered blocking state [ 794.974423][T29777] bridge0: port 1(bridge_slave_0) entered disabled state [ 794.982301][T29777] bridge_slave_0: entered allmulticast mode [ 794.991836][T29777] bridge_slave_0: entered promiscuous mode [ 795.001395][T29777] bridge0: port 2(bridge_slave_1) entered blocking state [ 795.010358][T29777] bridge0: port 2(bridge_slave_1) entered disabled state [ 795.024184][T29777] bridge_slave_1: entered allmulticast mode [ 795.032934][T29777] bridge_slave_1: entered promiscuous mode [ 795.041307][T29910] netlink: 666 bytes leftover after parsing attributes in process `syz.2.6445'. [ 795.075113][T29911] netlink: 666 bytes leftover after parsing attributes in process `syz.2.6445'. [ 795.134167][T29777] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 795.212383][T29777] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 795.304590][T29918] netlink: 'syz.0.6448': attribute type 3 has an invalid length. [ 795.370136][T29925] xt_TPROXY: Can be used only with -p tcp or -p udp [ 795.392726][T29777] team0: Port device team_slave_0 added [ 795.414666][T29777] team0: Port device team_slave_1 added [ 795.509601][T29931] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6452'. [ 795.530170][T29935] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6453'. [ 795.596923][T29777] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 795.631029][T29777] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 795.696241][T29940] sctp: [Deprecated]: syz.0.6455 (pid 29940) Use of struct sctp_assoc_value in delayed_ack socket option. [ 795.696241][T29940] Use struct sctp_sack_info instead [ 795.703763][T29777] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 795.727653][T29777] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 795.734810][T29777] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 795.761251][T29777] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 795.942586][T29777] hsr_slave_0: entered promiscuous mode [ 795.972138][T29777] hsr_slave_1: entered promiscuous mode [ 795.995165][T29777] debugfs: 'hsr0' already exists in 'hsr' [ 796.017223][T29777] Cannot create hsr debugfs directory [ 796.052417][T22441] Bluetooth: hci2: command tx timeout [ 796.084433][T29954] ip6t_srh: unknown srh invflags 4000 [ 796.573644][T29777] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 796.602891][T29777] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 796.620732][T29976] netdevsim netdevsim2: Direct firmware load for  failed with error -2 [ 796.630141][T29976] netdevsim netdevsim2: Falling back to sysfs fallback for:  [ 796.694376][T29970] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 796.758077][T29978] pimreg3: entered allmulticast mode [ 796.787702][T29777] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 796.841174][T29777] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 796.912842][T29977] netdevsim netdevsim2: Direct firmware load for  failed with error -2 [ 796.930453][T29977] netdevsim netdevsim2: Falling back to sysfs fallback for:  [ 797.036548][T29777] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 797.073767][T29777] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 797.093488][T29992] __nla_validate_parse: 1 callbacks suppressed [ 797.093510][T29992] netlink: 6212 bytes leftover after parsing attributes in process `syz.2.6469'. [ 797.170165][T29992] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6469'. [ 797.194981][T29992] netlink: 48 bytes leftover after parsing attributes in process `syz.2.6469'. [ 797.220249][T29995] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6470'. [ 797.235635][T29777] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 797.257873][T29777] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 797.367452][T30006] netlink: 44 bytes leftover after parsing attributes in process `syz.0.6470'. [ 797.486171][T30001] bond4: (slave bridge2): Enslaving as an active interface with an up link [ 797.956911][T30026] netlink: 196 bytes leftover after parsing attributes in process `syz.2.6480'. [ 797.980614][T30026] netlink: 196 bytes leftover after parsing attributes in process `syz.2.6480'. [ 797.999211][T30026] netlink: 19 bytes leftover after parsing attributes in process `syz.2.6480'. [ 798.132161][T22441] Bluetooth: hci2: command tx timeout [ 798.169069][T29777] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 798.217199][T29777] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 798.236477][T29777] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 798.262359][T29777] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 798.282898][T30034] netdevsim netdevsim4 netdevsim2: IPsec offload requires 128 bit authentication [ 798.293223][T29777] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 798.331659][T29777] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 798.344235][T30034] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6483'. [ 798.365379][T29777] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 798.392520][T29777] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 798.635411][T29777] 8021q: adding VLAN 0 to HW filter on device bond0 [ 798.703580][T30052] netlink: 60 bytes leftover after parsing attributes in process `syz.4.6486'. [ 798.717274][T29777] 8021q: adding VLAN 0 to HW filter on device team0 [ 798.818229][T30056] bond1: left promiscuous mode [ 798.848888][T30056] 8021q: adding VLAN 0 to HW filter on device bond4 [ 798.866099][ T24] lo speed is unknown, defaulting to 1000 [ 798.889209][ T24] syz2: Port: 1 Link ACTIVE [ 798.933304][T27480] bridge0: port 1(bridge_slave_0) entered blocking state [ 798.940547][T27480] bridge0: port 1(bridge_slave_0) entered forwarding state [ 798.979886][T27495] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 798.989516][T27495] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 799.109906][T27480] bridge0: port 2(bridge_slave_1) entered blocking state [ 799.117435][T27480] bridge0: port 2(bridge_slave_1) entered forwarding state [ 799.175544][T27495] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 799.208650][T27495] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 799.564867][T30092] batman_adv: batadv0: Adding interface: wlan0 [ 799.595694][T30092] batman_adv: batadv0: The MTU of interface wlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 799.630221][T30092] batman_adv: batadv0: Interface activated: wlan0 [ 799.774120][T30104] netlink: 'syz.2.6498': attribute type 1 has an invalid length. [ 799.782300][T30091] netlink: 'syz.0.6496': attribute type 2 has an invalid length. [ 800.214054][T22441] Bluetooth: hci2: command tx timeout [ 800.886416][T29777] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 801.006567][T30155] bridge3: entered promiscuous mode [ 801.032621][T30155] bridge3: entered allmulticast mode [ 801.085098][T30155] team0: Port device bridge3 added [ 801.127728][T30160] bridge0: port 1(team0) entered blocking state [ 801.145246][T30160] bridge0: port 1(team0) entered disabled state [ 801.156854][T30160] team0: entered allmulticast mode [ 801.164135][T30160] team_slave_0: entered allmulticast mode [ 801.170082][T30160] team_slave_1: entered allmulticast mode [ 801.188739][T30163] netlink: 'syz.1.6511': attribute type 1 has an invalid length. [ 801.189072][T30160] team0: entered promiscuous mode [ 801.202196][T30163] netlink: 'syz.1.6511': attribute type 11 has an invalid length. [ 801.212659][T30160] team_slave_0: entered promiscuous mode [ 801.229418][T30160] team_slave_1: entered promiscuous mode [ 801.247462][T30160] bridge0: port 1(team0) entered blocking state [ 801.254354][T30160] bridge0: port 1(team0) entered forwarding state [ 801.332297][T30147] netlink: 'syz.4.6506': attribute type 2 has an invalid length. [ 801.385224][T30171] syzkaller0: entered promiscuous mode [ 801.399360][T30171] syzkaller0: entered allmulticast mode [ 801.436950][T30172] tipc: MTU too low for tipc bearer [ 801.603446][T29777] veth0_vlan: entered promiscuous mode [ 801.674052][T29777] veth1_vlan: entered promiscuous mode [ 801.887689][T29777] veth0_macvtap: entered promiscuous mode [ 801.899428][T29777] veth1_macvtap: entered promiscuous mode [ 801.970167][T29777] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 802.020450][T29777] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 802.085697][T27485] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 802.154842][T30203] __nla_validate_parse: 6 callbacks suppressed [ 802.154970][T30203] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6521'. [ 802.177627][T27485] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 802.188766][T27485] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 802.219797][T27485] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 802.249547][T30203] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6521'. [ 802.529014][T30214] veth1_to_bond: entered allmulticast mode [ 802.539949][T30214] veth1_to_bond: left allmulticast mode [ 802.610099][T30225] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 802.894770][T30236] gretap0 speed is unknown, defaulting to 1000 [ 803.285734][T30236] lo speed is unknown, defaulting to 1000 [ 803.927684][T30240] Bluetooth: MGMT ver 1.23 [ 803.933580][T30240] xt_ecn: cannot match TCP bits for non-tcp packets [ 805.245474][T30206] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 805.369206][T27482] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 805.391360][T27482] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 805.541525][T27483] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 805.561466][T27483] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 815.891370][T22441] Bluetooth: hci0: command 0x0406 tx timeout [ 858.457573][T30255] veth0: entered promiscuous mode [ 858.468773][T30255] veth0: left promiscuous mode [ 858.487089][T30264] netlink: 'syz.4.6534': attribute type 3 has an invalid length. [ 858.558226][T30270] vlan0: entered promiscuous mode [ 858.620373][T30277] netlink: 'syz.0.6536': attribute type 8 has an invalid length. [ 858.628458][T30277] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6536'. [ 858.729286][T30277] bridge0: port 1(team0) entered disabled state [ 858.736187][T30277] bridge0: port 2(bridge_slave_1) entered disabled state [ 858.797045][T30283] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6536'. [ 859.119945][T30293] SET target dimension over the limit! [ 859.457901][T30312] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6543'. [ 859.479581][T30312] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6543'. [ 859.540361][T27479] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 859.563691][T30317] netlink: 52 bytes leftover after parsing attributes in process `syz.4.6549'. [ 859.568594][T27479] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 859.690440][T30318] bond0: entered promiscuous mode [ 859.699024][T30323] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6550'. [ 859.712943][T30318] bond_slave_0: entered promiscuous mode [ 859.752703][T30318] bond_slave_1: entered promiscuous mode [ 859.779307][T30317] bridge0: port 2(bridge_slave_1) entered disabled state [ 859.786994][T30317] bridge0: port 1(bridge_slave_0) entered disabled state [ 859.829883][T27479] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 859.855145][T27479] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 859.995506][T30336] bridge_slave_0: left allmulticast mode [ 860.019572][T30336] bridge_slave_0: left promiscuous mode [ 860.037768][T30336] bridge0: port 1(bridge_slave_0) entered disabled state [ 860.083806][T30336] bridge_slave_1: left allmulticast mode [ 860.091761][T30336] bridge_slave_1: left promiscuous mode [ 860.097919][T30336] bridge0: port 2(bridge_slave_1) entered disabled state [ 860.143438][T30336] bond0: (slave bond_slave_0): Releasing backup interface [ 860.183339][T30336] bond0: (slave bond_slave_1): Releasing backup interface [ 860.200641][T30345] netlink: 112 bytes leftover after parsing attributes in process `syz.3.6555'. [ 860.216018][T30345] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6555'. [ 860.230738][T30345] openvswitch: netlink: Missing key (keys=40, expected=80) [ 860.252092][T30336] team0: Port device team_slave_0 removed [ 860.293699][T30336] team0: Port device team_slave_1 removed [ 860.306243][T30336] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 860.317491][T30336] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 860.332498][T30336] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 860.357742][T30336] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 860.386455][T30336] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 860.416050][T30342] ÿÿÿÿÿÿ: renamed from virt_wifi0 [ 860.592437][T30357] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 861.145919][T30386] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 861.159647][T30390] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6570'. [ 861.378449][T30400] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6573'. [ 861.646768][T27482] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 862.046860][T22441] block nbd4: Receive control failed (result -107) [ 862.071425][T30407] nbd4: detected capacity change from 0 to 63 [ 862.111134][ T5632] block nbd4: Receive control failed (result -104) [ 862.123285][ T1596] block nbd4: Dead connection, failed to find a fallback [ 862.134936][ T1596] block nbd4: shutting down sockets [ 862.148710][ T1596] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 862.161357][ T1596] Buffer I/O error on dev nbd4, logical block 1, async page read [ 862.169969][ T1596] I/O error, dev nbd4, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 862.183268][ T1596] Buffer I/O error on dev nbd4, logical block 2, async page read [ 862.191995][ T1596] I/O error, dev nbd4, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 862.201404][ T1596] Buffer I/O error on dev nbd4, logical block 3, async page read [ 862.255885][T30430] syzkaller1: entered promiscuous mode [ 862.261651][T30430] syzkaller1: entered allmulticast mode [ 862.716636][T30452] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 862.849961][T30460] netlink: 'syz.1.6591': attribute type 3 has an invalid length. [ 862.888319][T30460] netlink: 'syz.1.6591': attribute type 3 has an invalid length. [ 863.085283][T27482] [ 863.087658][T27482] ====================================================== [ 863.094792][T27482] WARNING: possible circular locking dependency detected [ 863.102223][T27482] syzkaller #0 Not tainted [ 863.106773][T27482] ------------------------------------------------------ [ 863.113819][T27482] kworker/u8:22/27482 is trying to acquire lock: [ 863.120354][T27482] ffffffff8ea84680 (fs_reclaim){+.+.}-{0:0}, at: kmem_cache_alloc_node_noprof+0x6a/0x610 [ 863.130367][T27482] [ 863.130367][T27482] but task is already holding lock: [ 863.138227][T27482] ffff888029f90fe0 (k-sk_lock-AF_INET6){+.+.}-{0:0}, at: inet_stream_connect+0x51/0xa0 [ 863.147973][T27482] [ 863.147973][T27482] which lock already depends on the new lock. [ 863.147973][T27482] [ 863.158594][T27482] [ 863.158594][T27482] the existing dependency chain (in reverse order) is: [ 863.167985][T27482] [ 863.167985][T27482] -> #7 (k-sk_lock-AF_INET6){+.+.}-{0:0}: [ 863.176001][T27482] lock_sock_nested+0x41/0x100 [ 863.181323][T27482] mptcp_listen+0x21d/0x600 [ 863.186372][T27482] __x64_sys_listen+0x1c7/0x240 [ 863.191809][T27482] do_syscall_64+0x174/0x580 [ 863.196951][T27482] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 863.203480][T27482] [ 863.203480][T27482] -> #6 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 863.211256][T27482] lock_sock_nested+0x41/0x100 [ 863.216574][T27482] inet_shutdown+0x6a/0x390 [ 863.221635][T27482] nbd_mark_nsock_dead+0x2cb/0x550 [ 863.227298][T27482] recv_work+0x1cee/0x1e10 [ 863.232276][T27482] process_scheduled_works+0xa8e/0x14e0 [ 863.238506][T27482] worker_thread+0xa47/0xfb0 [ 863.243648][T27482] kthread+0x388/0x470 [ 863.248321][T27482] ret_from_fork+0x514/0xb70 [ 863.253677][T27482] ret_from_fork_asm+0x1a/0x30 [ 863.258992][T27482] [ 863.258992][T27482] -> #5 (&nsock->tx_lock){+.+.}-{4:4}: [ 863.266673][T27482] __mutex_lock+0x19d/0x1550 [ 863.271805][T27482] nbd_queue_rq+0x373/0x1150 [ 863.276936][T27482] blk_mq_dispatch_rq_list+0x499/0x1990 [ 863.283123][T27482] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 863.290129][T27482] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 863.296684][T27482] blk_mq_run_work_fn+0x16c/0x300 [ 863.302602][T27482] process_scheduled_works+0xa8e/0x14e0 [ 863.309410][T27482] worker_thread+0xa47/0xfb0 [ 863.314938][T27482] kthread+0x388/0x470 [ 863.319728][T27482] ret_from_fork+0x514/0xb70 [ 863.324871][T27482] ret_from_fork_asm+0x1a/0x30 [ 863.330293][T27482] [ 863.330293][T27482] -> #4 (&cmd->lock){+.+.}-{4:4}: [ 863.337786][T27482] __mutex_lock+0x19d/0x1550 [ 863.342921][T27482] nbd_queue_rq+0xc1/0x1150 [ 863.348000][T27482] blk_mq_dispatch_rq_list+0x499/0x1990 [ 863.354183][T27482] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 863.361055][T27482] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 863.367573][T27482] blk_mq_run_work_fn+0x16c/0x300 [ 863.373147][T27482] process_scheduled_works+0xa8e/0x14e0 [ 863.379259][T27482] worker_thread+0xa47/0xfb0 [ 863.384405][T27482] kthread+0x388/0x470 [ 863.389014][T27482] ret_from_fork+0x514/0xb70 [ 863.394144][T27482] ret_from_fork_asm+0x1a/0x30 [ 863.399451][T27482] [ 863.399451][T27482] -> #3 (set->srcu){.+.+}-{0:0}: [ 863.406599][T27482] __synchronize_srcu+0xc9/0x2f0 [ 863.412160][T27482] elevator_switch+0x1e8/0x7b0 [ 863.417545][T27482] elevator_change+0x2fa/0x480 [ 863.422860][T27482] elevator_set_default+0x375/0x440 [ 863.428695][T27482] blk_register_queue+0x3f3/0x4e0 [ 863.434313][T27482] __add_disk+0x6cb/0xe30 [ 863.439210][T27482] add_disk_fwnode+0xfb/0x4b0 [ 863.444529][T27482] nbd_dev_add+0x733/0xb60 [ 863.450211][T27482] nbd_init+0x15f/0x1e0 [ 863.454924][T27482] do_one_initcall+0x250/0x870 [ 863.460239][T27482] do_initcall_level+0x10a/0x1a0 [ 863.465723][T27482] do_initcalls+0x59/0xa0 [ 863.470696][T27482] kernel_init_freeable+0x29d/0x3e0 [ 863.476439][T27482] kernel_init+0x1d/0x1d0 [ 863.481308][T27482] ret_from_fork+0x514/0xb70 [ 863.486613][T27482] ret_from_fork_asm+0x1a/0x30 [ 863.492011][T27482] [ 863.492011][T27482] -> #2 (&q->elevator_lock){+.+.}-{4:4}: [ 863.501856][T27482] __mutex_lock+0x19d/0x1550 [ 863.507721][T27482] elevator_change+0x1af/0x480 [ 863.513241][T27482] elevator_set_none+0xb5/0x140 [ 863.518662][T27482] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 863.525047][T27482] nbd_start_device+0x189/0xb30 [ 863.530442][T27482] nbd_genl_connect+0x1597/0x1c10 [ 863.536012][T27482] genl_family_rcv_msg_doit+0x233/0x340 [ 863.542227][T27482] genl_rcv_msg+0x614/0x7a0 [ 863.547278][T27482] netlink_rcv_skb+0x226/0x4a0 [ 863.552668][T27482] genl_rcv+0x28/0x40 [ 863.557298][T27482] netlink_unicast+0x7bb/0x940 [ 863.562597][T27482] netlink_sendmsg+0x813/0xb40 [ 863.567911][T27482] sock_sendmsg_nosec+0x13a/0x180 [ 863.573485][T27482] ____sys_sendmsg+0x54e/0x850 [ 863.578788][T27482] ___sys_sendmsg+0x2a5/0x360 [ 863.584006][T27482] __x64_sys_sendmsg+0x1b1/0x290 [ 863.589515][T27482] do_syscall_64+0x174/0x580 [ 863.594648][T27482] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 863.602075][T27482] [ 863.602075][T27482] -> #1 (&q->q_usage_counter(io)#53){++++}-{0:0}: [ 863.611341][T27482] blk_alloc_queue+0x544/0x690 [ 863.616679][T27482] __blk_mq_alloc_disk+0x194/0x390 [ 863.622340][T27482] nbd_dev_add+0x494/0xb60 [ 863.627394][T27482] nbd_init+0x15f/0x1e0 [ 863.632094][T27482] do_one_initcall+0x250/0x870 [ 863.637579][T27482] do_initcall_level+0x10a/0x1a0 [ 863.643104][T27482] do_initcalls+0x59/0xa0 [ 863.648066][T27482] kernel_init_freeable+0x29d/0x3e0 [ 863.653815][T27482] kernel_init+0x1d/0x1d0 [ 863.658686][T27482] ret_from_fork+0x514/0xb70 [ 863.663815][T27482] ret_from_fork_asm+0x1a/0x30 [ 863.669213][T27482] [ 863.669213][T27482] -> #0 (fs_reclaim){+.+.}-{0:0}: [ 863.676451][T27482] __lock_acquire+0x1520/0x2cf0 [ 863.681842][T27482] lock_acquire+0x106/0x350 [ 863.686969][T27482] fs_reclaim_acquire+0x71/0x100 [ 863.692525][T27482] kmem_cache_alloc_node_noprof+0x6a/0x610 [ 863.698973][T27482] __alloc_skb+0x1d7/0x7a0 [ 863.704022][T27482] tcp_stream_alloc_skb+0x3f/0x580 [ 863.709676][T27482] tcp_connect+0x1582/0x53e0 [ 863.714823][T27482] tcp_v6_connect+0x14ed/0x1cf0 [ 863.720245][T27482] __inet_stream_connect+0x258/0xe00 [ 863.726258][T27482] inet_stream_connect+0x66/0xa0 [ 863.731754][T27482] kernel_connect+0x141/0x1c0 [ 863.737020][T27482] rds_tcp_conn_path_connect+0x6e9/0x920 [ 863.743204][T27482] rds_connect_worker+0x1d8/0x290 [ 863.748772][T27482] process_scheduled_works+0xa8e/0x14e0 [ 863.754867][T27482] worker_thread+0xa47/0xfb0 [ 863.760044][T27482] kthread+0x388/0x470 [ 863.764652][T27482] ret_from_fork+0x514/0xb70 [ 863.769785][T27482] ret_from_fork_asm+0x1a/0x30 [ 863.775096][T27482] [ 863.775096][T27482] other info that might help us debug this: [ 863.775096][T27482] [ 863.785336][T27482] Chain exists of: [ 863.785336][T27482] fs_reclaim --> sk_lock-AF_INET6 --> k-sk_lock-AF_INET6 [ 863.785336][T27482] [ 863.798460][T27482] Possible unsafe locking scenario: [ 863.798460][T27482] [ 863.805941][T27482] CPU0 CPU1 [ 863.811328][T27482] ---- ---- [ 863.816712][T27482] lock(k-sk_lock-AF_INET6); [ 863.822116][T27482] lock(sk_lock-AF_INET6); [ 863.829271][T27482] lock(k-sk_lock-AF_INET6); [ 863.836501][T27482] lock(fs_reclaim); [ 863.840621][T27482] [ 863.840621][T27482] *** DEADLOCK *** [ 863.840621][T27482] [ 863.848785][T27482] 4 locks held by kworker/u8:22/27482: [ 863.854272][T27482] #0: ffff888050ec8940 ((wq_completion)krds_cp_wq#17/0){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 863.866163][T27482] #1: ffffc900032e7c40 ((work_completion)(&(&cp->cp_conn_w)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 863.879015][T27482] #2: ffff888050997080 (&tc->t_conn_path_lock){+.+.}-{4:4}, at: rds_tcp_conn_path_connect+0x1cc/0x920 [ 863.890282][T27482] #3: ffff888029f90fe0 (k-sk_lock-AF_INET6){+.+.}-{0:0}, at: inet_stream_connect+0x51/0xa0 [ 863.900431][T27482] [ 863.900431][T27482] stack backtrace: [ 863.906565][T27482] CPU: 0 UID: 0 PID: 27482 Comm: kworker/u8:22 Not tainted syzkaller #0 PREEMPT(full) [ 863.906591][T27482] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 863.906605][T27482] Workqueue: krds_cp_wq#17/0 rds_connect_worker [ 863.906631][T27482] Call Trace: [ 863.906641][T27482] [ 863.906651][T27482] dump_stack_lvl+0xe8/0x150 [ 863.906680][T27482] print_circular_bug+0x2e1/0x300 [ 863.906706][T27482] check_noncircular+0x12e/0x150 [ 863.906732][T27482] __lock_acquire+0x1520/0x2cf0 [ 863.906750][T27482] ? rcu_is_watching+0x15/0xb0 [ 863.906773][T27482] ? __lock_acquire+0x683/0x2cf0 [ 863.906797][T27482] ? kmem_cache_alloc_node_noprof+0x6a/0x610 [ 863.906823][T27482] lock_acquire+0x106/0x350 [ 863.906839][T27482] ? kmem_cache_alloc_node_noprof+0x6a/0x610 [ 863.906869][T27482] ? ip6_dst_check+0xe2/0x7e0 [ 863.906893][T27482] fs_reclaim_acquire+0x71/0x100 [ 863.906909][T27482] ? kmem_cache_alloc_node_noprof+0x6a/0x610 [ 863.906934][T27482] kmem_cache_alloc_node_noprof+0x6a/0x610 [ 863.906963][T27482] ? ip6_default_advmss+0x80/0x3b0 [ 863.906980][T27482] ? __alloc_skb+0x1d7/0x7a0 [ 863.906995][T27482] ? __alloc_skb+0x1d7/0x7a0 [ 863.907013][T27482] __alloc_skb+0x1d7/0x7a0 [ 863.907031][T27482] tcp_stream_alloc_skb+0x3f/0x580 [ 863.907050][T27482] ? __asan_memset+0x22/0x50 [ 863.907162][T27482] tcp_connect+0x1582/0x53e0 [ 863.907198][T27482] ? ktime_get_with_offset+0x93/0x2d0 [ 863.907311][T27482] ? __pfx_tcp_connect+0x10/0x10 [ 863.907337][T27482] ? seqcount_lockdep_reader_access+0xa9/0x100 [ 863.907387][T27482] ? lockdep_hardirqs_on+0x7a/0x110 [ 863.907413][T27482] ? ktime_get_with_offset+0x93/0x2d0 [ 863.907429][T27482] ? seqcount_lockdep_reader_access+0xea/0x100 [ 863.907468][T27482] ? __asan_memset+0x22/0x50 [ 863.907494][T27482] ? __pfx_tcp_fastopen_defer_connect+0x10/0x10 [ 863.907521][T27482] ? inet6_hash_connect+0xeb/0x170 [ 863.907542][T27482] tcp_v6_connect+0x14ed/0x1cf0 [ 863.907559][T27482] ? inet_csk_bind_conflict+0x60/0xa40 [ 863.907591][T27482] ? __pfx_tcp_v6_connect+0x10/0x10 [ 863.907609][T27482] ? inet_csk_get_port+0x11bc/0x1740 [ 863.907635][T27482] ? __local_bh_enable_ip+0xd0/0x130 [ 863.907700][T27482] ? __bfs+0x153/0x290 [ 863.907717][T27482] ? __bfs+0x153/0x290 [ 863.907736][T27482] __inet_stream_connect+0x258/0xe00 [ 863.907766][T27482] ? do_raw_spin_lock+0x12b/0x2f0 [ 863.907790][T27482] ? lock_sock_nested+0x6a/0x100 [ 863.907814][T27482] ? __pfx___inet_stream_connect+0x10/0x10 [ 863.907843][T27482] ? inet_stream_connect+0x51/0xa0 [ 863.907870][T27482] ? __local_bh_enable_ip+0xd0/0x130 [ 863.907898][T27482] inet_stream_connect+0x66/0xa0 [ 863.907925][T27482] kernel_connect+0x141/0x1c0 [ 863.907949][T27482] ? __pfx_kernel_connect+0x10/0x10 [ 863.907979][T27482] ? __local_bh_enable_ip+0xd0/0x130 [ 863.908006][T27482] rds_tcp_conn_path_connect+0x6e9/0x920 [ 863.908036][T27482] ? __pfx_rds_tcp_conn_path_connect+0x10/0x10 [ 863.908061][T27482] ? process_scheduled_works+0xa20/0x14e0 [ 863.908087][T27482] ? process_scheduled_works+0xa20/0x14e0 [ 863.908116][T27482] rds_connect_worker+0x1d8/0x290 [ 863.908133][T27482] ? process_scheduled_works+0xa20/0x14e0 [ 863.908157][T27482] process_scheduled_works+0xa8e/0x14e0 [ 863.908195][T27482] ? __pfx_process_scheduled_works+0x10/0x10 [ 863.908223][T27482] ? assign_work+0x3cf/0x5d0 [ 863.908249][T27482] worker_thread+0xa47/0xfb0 [ 863.908287][T27482] kthread+0x388/0x470 [ 863.908306][T27482] ? __pfx_worker_thread+0x10/0x10 [ 863.908330][T27482] ? __pfx_kthread+0x10/0x10 [ 863.908349][T27482] ret_from_fork+0x514/0xb70 [ 863.908370][T27482] ? __pfx_ret_from_fork+0x10/0x10 [ 863.908389][T27482] ? __switch_to+0xc89/0x1420 [ 863.908474][T27482] ? __pfx_kthread+0x10/0x10 [ 863.908493][T27482] ret_from_fork_asm+0x1a/0x30 [ 863.908522][T27482]