last executing test programs: 4.755772405s ago: executing program 1 (id=2034): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xe, &(0x7f0000000a00)=ANY=[@ANYBLOB="18080000d0ff0000000000003e00000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180100002020782500000000002020207b1bf0ff00000000bfa100000000000007010000f8ffffffb702000008000000b50afdff00000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8001}, 0x94) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r0, &(0x7f00000001c0)="c2", 0x1, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003400)=[{{&(0x7f0000000040)={0xa, 0x4e20, 0x8, @private0={0xfc, 0x0, '\x00', 0x1}, 0xff}, 0x1c, &(0x7f0000000400)=[{&(0x7f0000000080)="0f", 0x1}], 0x1}}], 0x1, 0x4000) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0xfffffffe}, 0x14) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000040)={0x0, 0x29, "8e7e108edf15907b4c15ae3fd05354985219b5330480d8fe65fbc082957bef755c89c2b8ec6e566d13"}, &(0x7f0000000080)=0x31) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000140)={r1, 0x64, &(0x7f00000000c0)=[@in6={0xa, 0x4e23, 0x2, @mcast1, 0x55d7}, @in={0x2, 0x4e20, @rand_addr=0x64010101}, @in6={0xa, 0x4e23, 0x2, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x7}, @in6={0xa, 0x4e23, 0x7, @mcast1, 0x4}]}, &(0x7f0000000180)=0x10) 4.60732471s ago: executing program 3 (id=2035): bpf$MAP_CREATE(0x0, &(0x7f0000001880)=@bloom_filter={0x1e, 0x0, 0x8000, 0xffffffff, 0x0, 0x1, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x0, 0x2}, 0x50) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_ID={0x8}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x14}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x81}]}, @NFTA_SET_EXPR={0x14, 0x11, 0x0, 0x1, @last={{0x9}, @val={0x4}}}]}, @NFT_MSG_NEWSETELEM={0x14, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x9c}, 0x1, 0x0, 0x0, 0x4000854}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x6, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000a611004000000000063000eff000000009500000c00000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x2d) 4.486764441s ago: executing program 0 (id=2037): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x6, 0x5) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x2c, r2, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040}, 0x80) (async) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48) (async) r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r5) (async) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x8, 0x1, 0x4, 0x2, 0x40, 0xffffffffffffffff, 0x7fffffff, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4}, 0x50) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000003880)=ANY=[@ANYBLOB="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"/4545], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000a40)={@fallback=r4, r4, 0x2f}, 0x20) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x5, 0x1, 0x4, 0x4, 0x0, 0x1}, 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c3000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000040000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r8, 0x1}, 0xc) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000062010e000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) (async) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000001c0)={@cgroup=r4, r6, 0x36, 0x18, 0x4, @void, @value=r4}, 0x20) (async) socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r9, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000002f80)={0x0, 0x0, 0x0}, 0x4000) r10 = openat$cgroup_type(0xffffffffffffffff, &(0x7f00000000c0), 0x2, 0x0) ioctl$XFS_IOC_FSGEOMETRY_V1(r10, 0x80705864, &(0x7f0000000300)) (async) socket$kcm(0x23, 0x2, 0x0) (async) r11 = socket$packet(0x11, 0x2, 0x300) (async) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000002fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r11, 0x1, 0x32, &(0x7f0000002900)=r12, 0x4) (async) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) recvmsg(r13, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) 4.108925402s ago: executing program 1 (id=2039): r0 = socket(0xa, 0x5, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000200), r0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, 0x0) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x7fff, @empty, 0x19f4d29}], 0x1c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)={0x5c, 0x2, 0x6, 0x101, 0x0, 0x0, {0xa}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0xffffffff}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xe54a}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}]}, 0x5c}}, 0x80) listen(r0, 0x100) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r2, 0x84, 0x6c, &(0x7f00000000c0), &(0x7f0000000040)=0x8) sendmsg$inet_sctp(r0, &(0x7f00000000c0)={&(0x7f0000000080)=@in6={0xa, 0x4e24, 0xf, @local, 0x1}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000300)="b2", 0x1}], 0x1, &(0x7f0000000100)=[@dstaddrv4={0x18, 0x84, 0x7, @loopback}], 0x18}, 0x8050) 4.065958513s ago: executing program 4 (id=2040): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x64, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x84}, @NFTA_SET_DESC={0x20, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x1c, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}]}]}]}, @NFT_MSG_NEWSETELEM={0x44, 0xc, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x10, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xc, 0x1, "e7ffff7f00000000"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xf0}, 0x1, 0x0, 0x2000}, 0x0) 3.779020808s ago: executing program 4 (id=2041): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000100)={0x11, @empty, 0x4e24, 0x2, 'wrr\x00', 0x1, 0x877, 0x40}, 0x2c) socket$nl_route(0x10, 0x3, 0x0) 3.768211838s ago: executing program 1 (id=2042): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0xfffffffffffffecc, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000001000290f000000000004000000000000", @ANYRES32=0x0, @ANYBLOB="02000000000000001c00128009000100626f6e64000000000c00028008001e001e000000"], 0x3c}, 0x1, 0x0, 0x0, 0x24000046}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c010000100001040000000000000000000000000000000000000000000000017f00000100000000000000000000000012341234000000000a00008000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="80000000000000000000000000000001000004d20100000000000000000000000000000000000001ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c001400686d616328736861312900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000"], 0x13c}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_mreqsrc(r2, 0x0, 0x27, &(0x7f0000000100)={@multicast1, @broadcast, @multicast1}, 0xc) setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000c00)=ANY=[@ANYBLOB="020000000000000002004e1fe0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000100000002"], 0x110) setsockopt$inet_group_source_req(r2, 0x0, 0x2b, &(0x7f00000004c0)={0x2, {{0x2, 0x4e25, @multicast2}}, {{0x2, 0x4e21, @multicast2}}}, 0x108) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @private=0xa010102}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000040000000700000006"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007b00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r4}, 0x25) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) r6 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r6, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0xa, 0x4e21, 0xfffffffc, @empty, 0x3ff}, 0x80, 0x0}, 0x97) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000040)) 3.430886321s ago: executing program 4 (id=2043): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01030000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900030073797a31000000000900010073797a300000000080000000060a010400000000000000000100000008000b40000000000900010073797a3000000000580004802c0001800a0001006c696d69740000001c0002800c00024000000000800000010c0001400000000000000008"], 0xf4}}, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @mcast2, 0x2}, 0x1c) listen(r2, 0x0) shutdown(r0, 0x0) 3.226966132s ago: executing program 0 (id=2044): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000040)={'ip6gre0\x00', 0x0, 0x29, 0x7, 0x5, 0x5, 0x2b, @private0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1, 0x700, 0x1000, 0x1}}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@ipv6_newroute={0x54, 0x18, 0x401, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, 0xfe, 0x2, 0x0, 0x1}, [@RTA_OIF={0x8, 0x4, r1}, @RTA_OIF={0x8, 0x4, 0x2}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x8}, @RTA_ENCAP={0x20, 0x16, 0x0, 0x1, @RPL_IPTUNNEL_SRH={0x1c, 0x1, {0x0, 0x18, 0x1, 0x1, 0x0, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01']}}}]}, 0x54}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000008c0)=ANY=[@ANYBLOB="500000001800010400000000000000000a400000fe0200010000000014000500fe80000000000000000000000000000208000400", @ANYRES32=0x2], 0x50}}, 0x0) 3.18662123s ago: executing program 2 (id=2045): bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYRESHEX], 0x50) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r2, 0x8) r3 = accept4(r2, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000000)={0x0, 0x4}, 0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000040)={0x0, 0x8000}, &(0x7f0000000080)=0x8) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="190000000400000004"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r4}, &(0x7f0000000240), &(0x7f0000000340)=r5}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000008c0)={r5, r1, 0x25, 0x2, @val=@tracing={0x0, 0x2e5b}}, 0x20) syz_emit_ethernet(0x3e, &(0x7f0000000340)=ANY=[@ANYBLOB="bbbbbbbbbbbb00000000000086dd6076b2af00082f00fc000000000000000000000000000000ff0200000000000000900900"/62], 0x0) r6 = accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=0x10, 0x800) setsockopt$PNPIPE_ENCAP(r6, 0x113, 0x1, &(0x7f00000000c0), 0x4) r7 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="871ae2160000000000ba7e2325d6f886d5cba754a27d9c00010000000000847dc61c90c291f21d3a31bd2801aac53766ecc1290a5d6d2b59ce699f8dabcee5be18c7e5bd6bc97fe867bf585233635ce56cf35b1a916aa547a85bbf312bff2e9a66a4425b5eaf80a5a97cc90e7f497ed08bb4e2fd3cbf93ed9ad5"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r9 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_SIOCETHTOOL(r9, 0x8946, &(0x7f0000000000)={'bond0\x00', &(0x7f00000000c0)=@ethtool_eee={0x1, 0xfffff019, 0x4, 0xd, 0x5, 0x10001, 0x401, 0x9, [0x9, 0xfffffffd]}}) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r10 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=@newtfilter={0x7c, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0x7}, {}, {0xa, 0x1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4c, 0x2, [@TCA_CGROUP_EMATCHES={0x48, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x4, 0x1, {0x6}}, @TCA_EMATCH_TREE_LIST={0x3c, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x38, 0x1, 0x0, 0x0, {{0xe38, 0x9, 0x4}, [@TCA_EM_IPT_MATCH_DATA={0x4}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0xa}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x2}]}}]}]}]}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x80}, 0x40010) 3.159757958s ago: executing program 1 (id=2046): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x1}) r2 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_ADD_KEY(r4, &(0x7f00000004c0)={&(0x7f0000000180), 0xc, &(0x7f0000000480)={&(0x7f0000000bc0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010226067000fddb000000140030000900f25bda43088097041d9d761063a591d8758d0100000000000000785397afc6d1e2c73b4e08ec5c7ec7b9813bb0706f4abeb1b6c9cafba6764305bd3fb5166800be32f7d94074a9681f405911e58a34a86f414217c38e9d5c04ab26db5a4e7633e71da5685d896435b59441318b2fe6b18b6247c288338bf77f918fd464b94f98e2cc4cb2b0952b040cb99f08ef5b8619e21e5c204b7a0d16226db933938ee4af7bd142bb8580af8c74d04f882b7945214f896b8f51"], 0x28}, 0x1, 0x0, 0x0, 0xc840}, 0x80) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r8, 0x0, r10, 0x0, 0x6, 0x0) close(r9) write(r7, 0x0, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x100000d, 0x6031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x31, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000006000000000000000700000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000700008500000086000000bf0900000000000055090100000000009500000000000000cd0a0100000000002500000001000480180000000200048000000000f4ffffffae90f8ff00000000bf91000000000000b702000003000000850000002a000000b70000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x9, 0xff2, &(0x7f0000001cc0)=""/4082, 0x41100, 0x61, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7fff}, 0x94) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', 0x1}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x88, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xb, 0x7}, {0x5, 0xffff}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x54, 0x2, [@TCA_MATCHALL_ACT={0x50, 0x2, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x8, 0x0, 0x102}, 0x3}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x2400c8d0}, 0x0) write(r1, &(0x7f0000000140)="00008847", 0x4) socket$inet6_udp(0xa, 0x2, 0x0) r11 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r11, 0x29, 0x40, &(0x7f00000005c0)=@mangle={'mangle\x00', 0x2, 0x6, 0x580, 0x0, 0x3e0, 0x3e0, 0x310, 0xf8, 0x4b0, 0x4b0, 0x4b0, 0x4b0, 0x4b0, 0x6, 0x0, {[{{@ipv6={@mcast2, @ipv4={'\x00', '\xff\xff', @remote}, [0x0, 0xff, 0xff000000, 0xff000000], [0x0, 0xffffff00, 0xffffff00, 0xffffffff], 'gretap0\x00', 'batadv_slave_0\x00', {}, {0xff}, 0x0, 0x5, 0x1, 0x18}, 0x0, 0xd0, 0xf8, 0x0, {0x7a00000010000000}, [@inet=@rpfilter={{0x28}, {0x1}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x0, 0xfc, 0x6}}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0xb4}, @initdev={0xfe, 0x88, '\x00', 0xfd, 0x0}, [0xff], [0xffffff00], '\x00', 'bond_slave_0\x00', {}, {0xff}}, 0x0, 0xf0, 0x138, 0x48000000, {}, [@common=@dst={{0x48}, {0xff, 0x4, 0x0, [0x1, 0x7a, 0xfffd, 0x3f4, 0x0, 0x3, 0x5, 0x0, 0x8, 0x30, 0xe5, 0x4, 0x1, 0x6, 0x0, 0x1], 0x6}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, 'ip6gre0\x00', {0x2}}}}, {{@ipv6={@remote, @dev={0xfe, 0x80, '\x00', 0xd}, [0x0, 0xffff00, 0xffffffff], [0xffffff00, 0xffffff00, 0xffffff00, 0xff000000], 'nr0\x00', 'vxcan1\x00', {}, {}, 0x62, 0x5, 0x3, 0x20}, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x3, 0xf}}}, {{@ipv6={@mcast1, @private0, [0xff000000, 0xffffff, 0x0, 0xffffff00], [0xffffff00, 0xffffff00, 0xff, 0xff000000], 'pim6reg1\x00', 'hsr0\x00', {}, {}, 0x84, 0x80, 0x5, 0x61}, 0x0, 0xa8, 0xd0}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5e0) 2.835291855s ago: executing program 4 (id=2047): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[], 0x18}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IPVS_CMD_FLUSH(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000001600)={0xa8, r2, 0x1da7b7b02c8526a0, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x12, 0x8}}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x87}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'fo\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wrr\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x21af}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6e}, @IPVS_CMD_ATTR_SERVICE={0x54, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x10001}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x1, 0x8}}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@dev={0xfe, 0x80, '\x00', 0x39}}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x24008004}, 0x402c880) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000001000010700000000daa000000a0000000c0002006e6c383032313100"], 0x20}}, 0x0) socket$inet(0x2, 0x4, 0x6) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000000f14010828bd7000fddbdf2509004500"], 0x1c}, 0x1, 0x0, 0x0, 0x2000}, 0x800) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x10, &(0x7f0000000000)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {0x7, 0x0, 0xb, 0x6, 0x0, 0x0, 0xffffff1f}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0x2}}, [@alu={0x4, 0x1, 0x2, 0x8, 0x9}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x29, 0x5, 0x0) recvmmsg(r3, &(0x7f0000001b40)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/189, 0xbd}, {&(0x7f00000003c0)=""/152, 0x98}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x3}}], 0x7, 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001580), r3) sendmsg$TIPC_NL_MEDIA_GET(0xffffffffffffffff, &(0x7f0000001800)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000017c0)={&(0x7f00000016c0)={0xec, r7, 0x4, 0x70bd27, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0x48, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x101}]}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x200}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7fff}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x200000}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x10001}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x537436c1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}]}, @TIPC_NLA_NODE={0x7c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x8000}, @TIPC_NLA_NODE_ID={0x63, 0x3, "6b8749c0ff3d9366d290aa088a17315da670e375de1b185fa40982a784d335c340e70aaacc9fb228df77184be6a88a438f45468dc178ad5f17d6651d1f4341a8d79491cc40f779be3aad9dd1ab56e11c1014bff35e18e57f78b09dbc97a2e9"}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x40801}, 0x40000) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000006800)={&(0x7f0000000100)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="15060000f2ff01000000010000003000018014000400ff010000000000000000000000000001060005004e220000060001000a000000080006000100"], 0x44}, 0x5}, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040)}, 0x38) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x1c, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1a, 0x0, 0x0, 0x0, 0x80000002, 0x57, 0x0, 0x0, 0x0, '\x00', 0x0, @tracing=0x1c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000)={0x0, 0x1000, 0x0, 0xde0}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x5, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r9 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r9, 0x0) getsockopt$inet6_mptcp_buf(r9, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000000c0)=0x98) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r3, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x34, r8, 0x4, 0x70bd26, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x5}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xc}]}, 0x34}, 0x1, 0x0, 0x0, 0x2000c0c0}, 0x800) 2.834914525s ago: executing program 0 (id=2048): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 2.714396197s ago: executing program 0 (id=2049): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000840)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000380), 0x12) syz_80211_join_ibss(&(0x7f0000000000)='wlan0\x00', &(0x7f0000000040), 0x6, 0x0) syz_80211_join_ibss(&(0x7f0000000080)='wlan1\x00', &(0x7f00000000c0), 0x6, 0x0) r4 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) r7 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r7, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x11, 0x888e, r5, 0x1, 0x0, 0x6, @random="080211000001"}, 0x14) sendto$packet(r7, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x11, 0x888e, r6, 0x1, 0x0, 0x6, @random="08021100"}, 0x14) sendto$packet(r7, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x11, 0x800, r5, 0x1, 0x0, 0x6, @random="080211000001"}, 0x14) sendto$packet(r7, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x11, 0x800, r6, 0x1, 0x0, 0x6, @random="08021100"}, 0x14) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010000000000000000003a00000008000300", @ANYRES32=r6, @ANYBLOB="04005b0028a313982fb0f0aaf60f474e3efee0bd88061d6f358ca0ec5ac042e80cd8f94c013fbff15beff3477213660337730a43c3912692"], 0x20}}, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, 0x0, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000280)={0xa, 0x0, 0x0, @dev, 0x8}, 0x1c) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000700850000002d"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r9}, 0xc) ioctl$FICLONE(r0, 0x40049409, r9) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f0000004b00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_DELSET={0x20, 0xb, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x48}, 0x1, 0x0, 0x0, 0x40091}, 0x40) 2.574475717s ago: executing program 2 (id=2050): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000006680)={0x0, 0x0, &(0x7f0000006640)={&(0x7f0000000040)={0x44, 0x1, 0x2, 0x101, 0x0, 0x0, {0xa}, [@CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x1ff}, @CTA_EXPECT_FN={0x13, 0xb, 'callforwarding\x00'}, @CTA_EXPECT_HELP_NAME={0x5, 0x6, '\x00'}, @CTA_EXPECT_MASK={0xc, 0x3, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}]}, 0x44}}, 0x0) 2.419627855s ago: executing program 3 (id=2051): r0 = socket(0x1d, 0x2, 0x6) getsockopt$inet_mreqn(r0, 0x6a, 0x4, 0x0, &(0x7f00000000c0)=0xffffffffffffff16) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r0}, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180200dd07000000000000ffff00000085000000410000007300e3ff9f000000952d8570aad04701c9cc45ec4c28a9b69f67c3c1f5ab0792529df829aecda0950ee0dfb84d6dc3cc3d4e7a29e32bac0d3c26efe5f2dab7000042a14341210da0cedcf3fea9ae3b645baebb63226ac6f40e300cdc347ea2b69d8fc37bf338d053cb4f5783ba3731c042f800"/153], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xe, 0x0, &(0x7f0000000380)="8a2a43b2dd6ef043fd80fcca9fa7", 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 2.193744005s ago: executing program 2 (id=2052): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) (async, rerun: 64) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (rerun: 64) openat$cgroup_ro(r0, &(0x7f0000000080)='freezer.parent_freezing\x00', 0x0, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) pipe(&(0x7f0000000300)) socket$inet6_tcp(0xa, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x10) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a28000000000a030000000000000000000a000007080002404100"], 0x11c}}, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) (async) syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) socket$alg(0x26, 0x5, 0x0) (async) r3 = socket$netlink(0x10, 0x3, 0x0) (async) socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) socket(0x1, 0x803, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000640)) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000001400000008000f00fc00000018000180140002006e657464657673696d300000000000000800080000fcffff0800090000000000080011000000000008000e00800000000800", @ANYRES64=r5], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x40054) (async) ioctl$sock_TIOCINQ(r4, 0x541b, &(0x7f0000000600)) (async) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r7, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], 0x0, 0xdb, &(0x7f0000000280)=[{}, {}, {}], 0x18, 0x10, &(0x7f00000002c0), &(0x7f0000000300), 0x8, 0x83, 0x8, 0x8, &(0x7f0000000340)}}, 0x10) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0x7, &(0x7f0000000680)=ANY=[@ANYBLOB="18020000f8ffffff000000000000000018130000", @ANYRES32=r8, @ANYBLOB="0000000000000000183b00000500000000000000000000009500000000000000bf570577cc35c42b051f80f506b72480ee7f7afac3ee3be71b300f543a6b86e51a9d30ff4cfa04b46e5f33922f97856f7098fbbf9fe0c82d797945bf041581087a2c8fcd0c786c2844f4b1284ae3b753a0ffa2eeab855473e2d820aeb56deadf0072b638e2ba490c769143ee1397d1c3a56fdf5265bc554b4c0ea10cbb44a311e241a73e489b81b200380906ff8047863d5aa3ea0ca3843da4f115fb4538b93343eeb39362"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x31, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r9, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r10, 0x0, 0xe, 0x0, &(0x7f0000000040)="f7edad00"/14, 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x8}, 0x50) 1.993582381s ago: executing program 3 (id=2053): r0 = socket(0x15, 0x5, 0x0) getsockopt(r0, 0x200000000114, 0x2711, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000040)=0x2, 0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000680)={0xffffffffffffffff, 0x0, 0x0}, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000006c0)={'vxcan1\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000440)={'ip6tnl0\x00', &(0x7f0000000280)={'syztnl2\x00', 0x0, 0x29, 0x6d, 0x0, 0x3, 0x0, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, @private1, 0x8, 0x8, 0x4, 0x8001}}) 1.723729571s ago: executing program 2 (id=2054): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="007afdd66d26eae6ed041e000000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007808500000010"], &(0x7f0000000000)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r4}, 0xc) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0600000004000000090000000800000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1d, 0xc, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffd}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x6b}}]}, &(0x7f0000000200)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x1000007, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) (async) sendmsg$BATADV_CMD_TP_METER(r3, &(0x7f0000000780)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000740)={&(0x7f0000000640)={0x24, 0x0, 0x2, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x88b}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x20044008}, 0x404c000) r6 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_int(r6, 0x29, 0x19, &(0x7f0000000000)=0x84, 0xfde1) sendto$inet6(r6, 0x0, 0x0, 0x200c8084, &(0x7f0000000080)={0xa, 0x4e28, 0x0, @dev={0xfe, 0x80, '\x00', 0xb}}, 0x1c) connect$inet6(r6, &(0x7f0000000300)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x80000001}, 0x1c) (async) sendto$inet6(r6, &(0x7f0000001cc0)="2501d77b330b7e73d6b1d1b8a473ff7420b4b43ce0861f000000714fa228ee1f5b48", 0xfffffffffffffe57, 0x8000, 0x0, 0x0) (async) recvmmsg(r6, &(0x7f0000003540)=[{{0x0, 0x0, 0x0}, 0x1}, {{&(0x7f0000000540)=@in={0x2, 0x0, @broadcast}, 0x80, &(0x7f0000001ec0)=[{&(0x7f0000000880)=""/85, 0x55}, {&(0x7f0000001dc0)=""/208, 0xd0}], 0x2, &(0x7f0000000a40)=""/74, 0x4a}, 0xff}, {{&(0x7f0000000900)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x80, &(0x7f00000034c0)}, 0x3}], 0x3, 0x40002003, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000600)=ANY=[@ANYBLOB="c3aaa0c19ced096441295989dd5316205000000071101a00"], &(0x7f0000000480)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0xa}, 0x94) (async) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) (async) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000180)=@gcm_128={{0x304}, "a4c51a4d1bc77a24", "245586e7cae61db3a53c3b701d5a3efe", "0a1ad2f4", "63fd2e1ecc22a424"}, 0x28) (async) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f00000004000000040040001200000000000001", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) unshare(0x8040480) (async) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000009c0)={@map, r8, 0x14}, 0x20) (async) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180)={r8, r7, 0x5, 0x0, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x401, 0x0, 0x1, 0xffffffffffffffff}}, 0x40) (async) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)=ANY=[], 0x10) (async) setsockopt$inet6_tcp_TLS_RX(r1, 0x11a, 0x2, &(0x7f0000000200)=@gcm_128={{0x304}, "3b4ab2c1144068b2", "963e11e0be5f9fd4fa47d22055202c7b", "9df00001", "b327c6e40e868fa2"}, 0x28) sendmsg$netlink(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000a00)=ANY=[@ANYBLOB="14030000300001000001000004000000040300800c0001"], 0x314}], 0x1}, 0x800) r9 = openat$nci(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) write$nci(r9, &(0x7f00000007c0)=@NCI_OP_CORE_INIT_RSP={0x0, 0x1, 0x2, 0x1, 0x76, {{0x1, 0xdeb7, 0x6e, "b18a32b74762878cf24ad815697c4a291c16b54078ce1762cbc931ed15557e521783ce7dfbcda1c96d8772c8e4e3505b5752877e78f7647c86def883ae89c01bd1676d5d57517e272064c50b5fd1480c67584d363621504a7f1fa7a7f0d6fc2984cd7a60d86b48cd360b6c9524b6"}, {0x7, 0x1a84, 0x82, 0xff, 0x9, 0x77dc}}}, 0x82) 1.721316302s ago: executing program 4 (id=2055): r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000080)={'geneve1\x00', 0xffff}) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0207e80702"], 0x10}}, 0x40044) r2 = socket$inet6(0xa, 0x3, 0x84) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000280)={{{@in=@multicast1, @in6=@empty, 0x4e25, 0x100, 0x5e23, 0x8, 0x2}, {0x1, 0x0, 0x10000, 0x401, 0x63b40c8e, 0x2000000, 0x1, 0xfffffffffffffffd}, {0x10000000001, 0x800000000006, 0x804, 0x8000000000000000}, 0x1, 0x0, 0x1, 0x0, 0x1, 0x2}, {{@in6=@loopback, 0x0, 0x2b}, 0x2, @in=@local, 0x3504, 0x5, 0x0, 0x0, 0xffffffff, 0x6, 0x6}}, 0xe8) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) socket$pppl2tp(0x18, 0x1, 0x1) (async) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000080)={'geneve1\x00', 0xffff}) (async) socket$key(0xf, 0x3, 0x2) (async) sendmsg$key(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0207e80702"], 0x10}}, 0x40044) (async) socket$inet6(0xa, 0x3, 0x84) (async) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000280)={{{@in=@multicast1, @in6=@empty, 0x4e25, 0x100, 0x5e23, 0x8, 0x2}, {0x1, 0x0, 0x10000, 0x401, 0x63b40c8e, 0x2000000, 0x1, 0xfffffffffffffffd}, {0x10000000001, 0x800000000006, 0x804, 0x8000000000000000}, 0x1, 0x0, 0x1, 0x0, 0x1, 0x2}, {{@in6=@loopback, 0x0, 0x2b}, 0x2, @in=@local, 0x3504, 0x5, 0x0, 0x0, 0xffffffff, 0x6, 0x6}}, 0xe8) (async) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) (async) 1.63511837s ago: executing program 3 (id=2056): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) close(0x3) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0x806000) (async) ioctl$FS_IOC_RESVSP(r2, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x4000, 0x9ffffc}) (async) r3 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r3, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0) (async) r4 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r4, &(0x7f00000002c0)={0x2, 0x4e20, @empty}, 0x10) (async) connect$inet(r4, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) (async, rerun: 32) sendmmsg$inet(r4, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) (async, rerun: 32) setsockopt$inet_buf(r4, 0x0, 0x26, 0x0, 0x8d) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, r1, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x28}, 0x1, 0x0, 0x0, 0x4000850}, 0x4000000) (async) close(0x3) 1.628869226s ago: executing program 0 (id=2057): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r2, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @empty, 0xffff}, 0x1c) openat$tun(0xffffffffffffff9c, 0x0, 0x48241, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r4, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendto$inet6(r4, &(0x7f0000000400)="cd", 0x1, 0x8010, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback, 0xfffffffe}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r4, 0x84, 0x17, &(0x7f0000000440)=ANY=[], 0x9) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r4, 0x84, 0x18, &(0x7f0000000200), 0x8) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c00000002060300000000000000000000000007050001000700000001000080ffffffff000000000c00078008001300000000000500050002000000050004000300000016000300686173683a6e65742c706f72742c6e6574000000"], 0x5c}, 0x1, 0x0, 0x0, 0x4004000}, 0x20004000) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c00000056dc330075bcaab363b42c6bb6d5c4ccd45557c17bf62f211ae360233a24f3ea5944245a212361b8849199c9b6a2fdf0a7c0ca351b193344a46e36e037bc1c6855456543ba4e2940830ccf054bbe9499ab0f4f9fb63839aa0050af", @ANYRES16=r5, @ANYBLOB="010000000000000000003d0000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000800820000000000"], 0x3c}}, 0x0) 1.213094766s ago: executing program 3 (id=2058): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000a00)={0x20, 0x26, 0x301, 0x270bd1d, 0x25dfdbf7, {0x5}, [@nested={0xc, 0x138, 0x0, 0x1, [@nested={0x8, 0xef, 0x0, 0x1, [@nested={0x4, 0x144}]}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x88c4}, 0x44000) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800"/16], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet(0x2, 0x3, 0x9) r4 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r4, &(0x7f0000000040)={0x18, 0x0, {0x4001, @multicast, 'batadv0\x00'}}, 0x1e) sendmmsg(r4, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) ioctl$XFS_IOC_FSGROWFSRT(r4, 0x80047437, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f0000000140)=0x804, 0x4) ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000000)={{0x2, 0x4, @private=0xa010102}, {0x1, @broadcast}, 0x0, {0x2, 0x80fe, @local}, 'veth1_to_bridge\x00'}) r5 = socket$netlink(0x10, 0x3, 0x0) writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000080)="290000001e00190f00003fffffffda060200000000e80001dd0008040d0008000c0000000005000000", 0x29}], 0x1) r6 = gettid() r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x18, 0x3, &(0x7f00000002c0)=@framed, &(0x7f0000000100)='syzkaller\x00'}, 0x94) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="09000000160000000800000040"], 0x50) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0x1c, &(0x7f0000000100)=ANY=[@ANYBLOB="18080000d90c0000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014000000b7060000000000008500000005000000bf0900000000000035090100002000009500000000000000b7020000000000007b9af8ff00000000b50900000ad000007baaf0ff00000000ae8900000000000007080000f8ffffffbf8400000000000007040000f0ffffffc70200000800000018260000", @ANYRES32=r9, @ANYBLOB="0000000000000000b705adcd6fcd63e00800000000000000bf9800000000000056080000020000008500000007040000b7000000000000009500000000000000"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$OBJ_PIN_PROG(0x11, &(0x7f0000000280)=@generic={&(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', r7}, 0x18) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="3c0000001000030425bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0022000018430000140012800900010076657468000000000500000008001300", @ANYRES32=r6], 0x3c}, 0x1, 0x0, 0x0, 0x20000804}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\n'], 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0}, 0x48) 964.515925ms ago: executing program 1 (id=2059): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r0, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0xffbfff1f, 0x1}}, 0x20) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r1, 0x0, 0xd4, &(0x7f0000000040)=0x9, 0x4) 767.373436ms ago: executing program 1 (id=2060): bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYRESHEX], 0x50) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r2, 0x8) r3 = accept4(r2, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000000)={0x0, 0x4}, 0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000040)={0x0, 0x8000}, &(0x7f0000000080)=0x8) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="190000000400000004"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r4}, &(0x7f0000000240), &(0x7f0000000340)=r5}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000008c0)={r5, r1, 0x25, 0x2, @val=@tracing={0x0, 0x2e5b}}, 0x20) syz_emit_ethernet(0x3e, &(0x7f0000000340)=ANY=[@ANYBLOB="bbbbbbbbbbbb00000000000086dd6076b2af00082f00fc000000000000000000000000000000ff0200000000000000900900"/62], 0x0) r6 = accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=0x10, 0x800) setsockopt$PNPIPE_ENCAP(r6, 0x113, 0x1, &(0x7f00000000c0), 0x4) r7 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="871ae2160000000000ba7e2325d6f886d5cba754a27d9c00010000000000847dc61c90c291f21d3a31bd2801aac53766ecc1290a5d6d2b59ce699f8dabcee5be18c7e5bd6bc97fe867bf585233635ce56cf35b1a916aa547a85bbf312bff2e9a66a4425b5eaf80a5a97cc90e7f497ed08bb4e2fd3cbf93ed9ad5"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r9 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_SIOCETHTOOL(r9, 0x8946, &(0x7f0000000000)={'bond0\x00', &(0x7f00000000c0)=@ethtool_eee={0x1, 0xfffff019, 0x4, 0xd, 0x5, 0x10001, 0x401, 0x9, [0x9, 0xfffffffd]}}) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r10 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=@newtfilter={0x7c, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0x7}, {}, {0xa, 0x1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4c, 0x2, [@TCA_CGROUP_EMATCHES={0x48, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x4, 0x1, {0x6}}, @TCA_EMATCH_TREE_LIST={0x3c, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x38, 0x1, 0x0, 0x0, {{0xe38, 0x9, 0x4}, [@TCA_EM_IPT_MATCH_DATA={0x4}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0xa}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x2}]}}]}]}]}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x80}, 0x40010) 591.238241ms ago: executing program 2 (id=2061): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x28, 0x1, 0x4, 0x101, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_MODE={0xa, 0x2, {0x8}}]}, 0x28}, 0x1, 0x0, 0x0, 0x41}, 0x488c4) syz_emit_ethernet(0x36, &(0x7f0000000280)={@local, @random="86082b9809c1", @void, {@ipv6={0x86dd, @generic={0x0, 0x6, '\x00', 0x0, 0x2c, 0x1, @private2, @mcast2}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sk_msg}, 0x48) 514.968682ms ago: executing program 0 (id=2062): socket$inet6_sctp(0xa, 0x801, 0x84) (async) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xc, 0x4, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x34, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000008280)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000100000001000000", @ANYRES32=r2, @ANYRES32=r2, @ANYBLOB="1c00dfff7fed8b6a93545aba4b753cf3ffffff000000006a020700", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x38, 0x8001}}], 0x2, 0x80) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000003c0)={'ip6_vti0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000003c0)={'ip6_vti0\x00', 0x0}) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) (async) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) sendto$packet(r3, &(0x7f00000002c0)="1a040500d3fc03fc01004788031c09", 0x10025, 0x4000004, &(0x7f0000000300)={0x11, 0x0, r4, 0x1, 0x6, 0x6, @remote}, 0x14) accept4(r3, &(0x7f0000000140)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @multicast1}}}}, &(0x7f00000001c0)=0x80, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf810000000000000708"], 0x0, 0x8, 0x0, 0x0, 0x40f00}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb010789005e107538e486dd6317ce22000000fffe80000000000000101000007f0600080000000000000071273fa7b49301641184a9"], 0xfdef) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) r6 = socket$l2tp6(0xa, 0x2, 0x73) connect$l2tp6(r6, &(0x7f0000000180)={0xa, 0x0, 0x80, @mcast2, 0x200003e, 0x7}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) sendmmsg$inet6(r0, &(0x7f0000002d00)=[{{&(0x7f0000001800)={0xa, 0x4e22, 0x1, @private2, 0x10001}, 0x1c, &(0x7f00000010c0)=[{&(0x7f00000011c0)="e6", 0x1}], 0x1}}, {{&(0x7f0000001100)={0xa, 0x4e20, 0x7fff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xfffffff7}, 0x1c, &(0x7f00000019c0)=[{&(0x7f0000001140)="a5", 0x1}], 0x1}}], 0x2, 0x0) shutdown(r0, 0x1) (async) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000006c0)={0x0, @in6={{0xa, 0x4e20, 0x511, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xd9}}, 0x100, 0x9368, 0x7, 0x0, 0xd0, 0x5, 0x5}, &(0x7f00000005c0)=0x9c) 163.634337ms ago: executing program 4 (id=2063): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) ioctl$TUNSETLINK(r1, 0x400454cd, 0x300) (async) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, 0xffffffffffffffff, &(0x7f0000000140)=0x4) 120.967129ms ago: executing program 3 (id=2064): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000007900000000000000000000050000000000be000000000085a1"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1, 0x10, &(0x7f0000000040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xbd}, {{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x84}}, {}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x0, 0x80}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001fc0)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r5 = socket$inet(0x2, 0x804, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000300)={'wlan0\x00', 0x1000}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r4, @ANYBLOB='\b\x00\x00\x00\x00\x00\x00\x00'], 0x24}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000000)={'wlan0\x00', 0x1}) clock_gettime(0x0, &(0x7f00000002c0)) nanosleep(&(0x7f0000000500)={0x77359400}, &(0x7f0000000540)) r6 = socket(0x2, 0x80805, 0x0) r7 = socket$inet(0xa, 0x801, 0x84) connect$inet(r7, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r7, 0x8) r8 = accept4(r7, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r8, 0x84, 0x7b, &(0x7f00000006c0)={0x0, 0x2}, 0x8) close(r8) sendmmsg$inet(r6, &(0x7f0000000480)=[{{&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000200)="b1", 0x1}], 0x1}}, {{&(0x7f0000000080)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000100)="ba8745", 0x3}], 0x1}}], 0x2, 0x24040800) r9 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r9, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r6, 0x84, 0x22, &(0x7f0000000580)={0x2, 0x201, 0xca25, 0x5, r10}, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0) sendmsg$NL80211_CMD_NEW_INTERFACE(r8, &(0x7f0000000440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000400)={&(0x7f00000005c0)={0x68, r11, 0x20, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x400, 0x2b}}}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x5}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'pim6reg\x00'}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'pimreg1\x00'}]}, 0x68}, 0x1, 0x0, 0x0, 0x8004090}, 0x40) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)={0x40, r3, 0x103, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x3, 0x7e}}}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x7fffffff}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x85}, 0x4c040) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r12 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r12, 0x8933, &(0x7f00000003c0)={'wlan0\x00'}) 0s ago: executing program 2 (id=2065): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = accept4$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000100)=0x1c, 0x800) sendmsg$inet6(r1, &(0x7f0000000940)={&(0x7f0000000140)={0xa, 0x4e21, 0x800, @rand_addr=' \x01\x00', 0x6}, 0x1c, &(0x7f0000000800)=[{&(0x7f0000000180)="1ffcb172373ec52fee955873c995cb3839bedc96c515008f355cdebc7f24c36466ea9800e6d9de4bcf00e91afde0cfa7725a1cb0d630f44bca3ea7ca098ae6ccbf2db39710", 0x45}, {&(0x7f0000000400)="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", 0xfa}, {&(0x7f0000000680)="2ce6eec619ddf724dc4f174038b9e2897b9ff6520522eddbce538b637b1dbded2458d4bfe0ec176df987ca26c02497cb28a60f3fec278588c9d56060e73fc32c76f28886fd33701fcac6880a7f105a3dffa94ef4ecfe137e8ef44e2f92a33ed450b46f100cacfb9060cb9ccbe158416cacc2a66ce5ae4c6deb175876b9cecc720036da362ca8", 0x86}, {&(0x7f0000000740)="dcc73e8f71d82927adc2edb9afb8105e6711d54f3c3ea04adb555d2cdcefc8840b29b486e068e0bf76eb4783821195dc95ff20", 0x33}, {&(0x7f0000000780)="18ab6e1e8e69afc62f599b095f5b0672f0a36b4220821a785a02366cb122a64cedec4fb5dda2e1dcc9cf4e78beff1ecc60bcdb09032653cb4c39a6c85a0aa613653d9688e8a9ddbc271c4e82188aaccc7eae536f617141eca5e1216f14f2abf1204eaa8e8bab78ec82a6068d4a3f12e2d2eeb38d319e9d6b3c315d", 0x7b}], 0x5, &(0x7f0000000880)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0xe}}, @rthdr={{0x38, 0x29, 0x39, {0x84, 0x4, 0x0, 0x5, 0x0, [@empty, @rand_addr=' \x01\x00']}}}, @rthdrdstopts={{0x40, 0x29, 0x37, {0x2f, 0x4, '\x00', [@hao={0xc9, 0x10, @rand_addr=' \x01\x00'}, @hao={0xc9, 0x10, @private1}]}}}], 0x90}, 0x8010) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000580)=ANY=[@ANYBLOB="f8000000160001000000000003000000ff01000000000000000000000000000100004e204000000000000000a02000"/64, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fe8000000000000000000000000000aa0000000033000000ac1414bb000000000000000000000000000000000000000001000000000000000600000000000000000000000000000000000004000000000000000000000000ffffffffffffffff0000000000000000000000000100000002000000000000000000000000000000000000000000000000000000fcffffff0000000000000000000000000a00030002000000000000000500400005000000"], 0xf8}}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x16, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000908500000071000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket(0x1d, 0x2, 0x6) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(r3, 0x6a, 0x4, 0xffffffff, 0x4) r4 = socket$inet_sctp(0x2, 0x5, 0x84) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x10, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}]}, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r5, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) r7 = socket$inet(0x2b, 0x801, 0x0) connect$inet(r7, &(0x7f00000002c0)={0x2, 0x4e24, @local}, 0x64) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r7, 0x6, 0x21, &(0x7f0000000080)="7dcf5c70d0117fc4a60408bd7f34606a", 0x10) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r4, 0x84, 0x10, &(0x7f0000000000)=@sack_info={r6, 0x7, 0x5}, &(0x7f0000000040)=0xc) ioctl$SIOCX25GSUBSCRIP(r3, 0x89e0, &(0x7f0000000980)={'veth1_vlan\x00', 0x287, 0x5}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0xffffffff, 0x8, 0x8, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x64ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) kernel console output (not intermixed with test programs): 634] Bluetooth: hci4: link tx timeout [ 178.997801][ T5634] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 179.032778][ T5634] Bluetooth: hci4: link tx timeout [ 179.032802][ T5634] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 179.059636][ T5634] Bluetooth: hci4: link tx timeout [ 179.059658][ T5634] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 179.059685][ T5634] Bluetooth: hci4: link tx timeout [ 179.059696][ T5634] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 179.059717][ T5634] Bluetooth: hci4: link tx timeout [ 179.059727][ T5634] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 179.113480][ T5634] Bluetooth: hci4: link tx timeout [ 179.113504][ T5634] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 179.113531][ T5634] Bluetooth: hci4: link tx timeout [ 179.113542][ T5634] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 179.113564][ T5634] Bluetooth: hci4: link tx timeout [ 179.113575][ T5634] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 179.113597][ T5634] Bluetooth: hci4: link tx timeout [ 179.113608][ T5634] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 179.113668][ T5634] Bluetooth: hci4: link tx timeout [ 179.113679][ T5634] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 179.113735][ T5634] Bluetooth: hci4: link tx timeout [ 179.113749][ T5634] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 179.113821][ T5634] Bluetooth: hci4: link tx timeout [ 179.113834][ T5634] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 179.113973][ T5634] Bluetooth: hci4: link tx timeout [ 179.113986][ T5634] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 179.119293][ T5634] Bluetooth: hci4: link tx timeout [ 179.119313][ T5634] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 179.135268][ T5634] Bluetooth: hci4: link tx timeout [ 179.135330][ T5634] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 179.167963][ T5634] Bluetooth: hci4: link tx timeout [ 179.168017][ T5634] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 179.190389][ T5634] Bluetooth: hci4: link tx timeout [ 179.190443][ T5634] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 179.208658][ T5634] Bluetooth: hci4: link tx timeout [ 179.214890][ T5634] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 179.217749][ T5634] Bluetooth: hci4: link tx timeout [ 179.217809][ T5634] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 179.233307][ T5634] Bluetooth: hci4: link tx timeout [ 179.233374][ T5634] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 179.233625][ T5634] Bluetooth: hci4: link tx timeout [ 179.233664][ T5634] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 179.233952][ T5634] Bluetooth: hci4: link tx timeout [ 179.233984][ T5634] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 179.240743][ T5634] Bluetooth: hci4: link tx timeout [ 179.240788][ T5634] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 179.363094][ T5634] Bluetooth: hci4: link tx timeout [ 179.363154][ T5634] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 179.363590][ T5634] Bluetooth: hci4: link tx timeout [ 179.363634][ T5634] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 179.363990][ T5634] Bluetooth: hci4: link tx timeout [ 179.364034][ T5634] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 179.364529][ T5634] Bluetooth: hci4: link tx timeout [ 179.364565][ T5634] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 179.369601][ T5634] Bluetooth: hci4: link tx timeout [ 179.369701][ T5634] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 179.423218][ T5634] Bluetooth: hci4: link tx timeout [ 179.423273][ T5634] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 179.455547][ T5634] Bluetooth: hci4: link tx timeout [ 179.455611][ T5634] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 179.497797][ T5634] Bluetooth: hci4: link tx timeout [ 179.497856][ T5634] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 179.498601][ T5634] Bluetooth: hci4: link tx timeout [ 179.498637][ T5634] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 179.521213][ T5634] Bluetooth: hci4: link tx timeout [ 179.521256][ T5634] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 179.521708][ T5634] Bluetooth: hci4: link tx timeout [ 179.521751][ T5634] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 179.522308][ T5634] Bluetooth: hci4: link tx timeout [ 179.522342][ T5634] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 179.522626][ T5634] Bluetooth: hci4: link tx timeout [ 179.522651][ T5634] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 179.524770][ T5634] Bluetooth: hci4: link tx timeout [ 179.524807][ T5634] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 179.528851][ T5634] Bluetooth: hci4: link tx timeout [ 179.528897][ T5634] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 179.553219][ T5634] Bluetooth: hci4: link tx timeout [ 179.553285][ T5634] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 179.587583][ T5634] Bluetooth: hci4: link tx timeout [ 179.587647][ T5634] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 180.761959][ T8486] netlink: 12 bytes leftover after parsing attributes in process `syz.3.512'. [ 180.949434][ T8493] syzkaller0: entered promiscuous mode [ 180.949460][ T8493] syzkaller0: entered allmulticast mode [ 180.966726][ T8493] xt_LOG: prefix is not null-terminated [ 181.000730][ T5634] Bluetooth: hci4: command 0x0405 tx timeout [ 181.295635][ T8501] syzkaller1: entered promiscuous mode [ 181.295661][ T8501] syzkaller1: entered allmulticast mode [ 181.653036][ T8522] sctp: [Deprecated]: syz.0.522 (pid 8522) Use of int in max_burst socket option. [ 181.653036][ T8522] Use struct sctp_assoc_value instead [ 181.781472][ T8525] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.522'. [ 183.774382][ T8488] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 183.996070][ T8539] netlink: 8 bytes leftover after parsing attributes in process `syz.3.524'. [ 183.996094][ T8539] netlink: 4 bytes leftover after parsing attributes in process `syz.3.524'. [ 184.069517][ T8539] netlink: 8 bytes leftover after parsing attributes in process `syz.3.524'. [ 184.069541][ T8539] netlink: 4 bytes leftover after parsing attributes in process `syz.3.524'. [ 184.137950][ T8544] syzkaller0: entered promiscuous mode [ 184.137975][ T8544] syzkaller0: entered allmulticast mode [ 184.161031][ T8544] tipc: Started in network mode [ 184.161065][ T8544] tipc: Node identity 5aa6c852b86f, cluster identity 4711 [ 184.163279][ T8544] tipc: Enabled bearer , priority 0 [ 184.242405][ T8544] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 184.348520][ T8548] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 184.401442][ T8544] tipc: Resetting bearer [ 184.401883][ T8546] syzkaller0: entered promiscuous mode [ 184.401905][ T8546] syzkaller0: entered allmulticast mode [ 184.434654][ T8547] tipc: Enabled bearer , priority 0 [ 184.435822][ T8543] tipc: Resetting bearer [ 184.493072][ T8543] tipc: Disabling bearer [ 184.729381][ T85] nci: nci_rx_work: unknown MT 0x6 [ 184.743287][ T8574] netlink: 176 bytes leftover after parsing attributes in process `syz.4.531'. [ 184.819658][ T8545] tipc: Resetting bearer [ 184.842173][ T8545] tipc: Disabling bearer [ 184.979673][ T8586] netlink: 56 bytes leftover after parsing attributes in process `syz.3.532'. [ 185.175215][ T8600] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.535'. [ 185.176682][ T8600] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.535'. [ 185.442605][ T8607] netlink: 'syz.0.536': attribute type 2 has an invalid length. [ 185.443699][ T8606] netlink: 'syz.0.536': attribute type 2 has an invalid length. [ 185.443714][ T8606] netlink: 8 bytes leftover after parsing attributes in process `syz.0.536'. [ 187.437411][ T8557] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 187.583960][ T8623] netlink: 60 bytes leftover after parsing attributes in process `syz.3.540'. [ 187.583995][ T8623] netlink: 'syz.3.540': attribute type 1 has an invalid length. [ 188.159695][ T8661] IPv6: NLM_F_CREATE should be specified when creating new route [ 188.159804][ T8661] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 188.159816][ T8661] IPv6: NLM_F_CREATE should be set when creating new route [ 188.159879][ T8661] IPv6: NLM_F_CREATE should be set when creating new route [ 188.161791][ T8661] IPv6: NLM_F_CREATE should be set when creating new route [ 188.683658][ T8687] ipip0: entered promiscuous mode [ 188.974090][ T8702] netlink: 'syz.0.555': attribute type 8 has an invalid length. [ 189.938750][ T8736] __nla_validate_parse: 2 callbacks suppressed [ 189.938769][ T8736] netlink: 24 bytes leftover after parsing attributes in process `syz.1.563'. [ 191.670287][ T85] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 191.671401][ T85] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 191.671455][ T85] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 191.671492][ T85] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 191.725428][ T8731] netdevsim0 speed is unknown, defaulting to 1000 [ 191.815137][ T8743] ip_tables: iptables: counters copy to user failed while replacing table [ 192.178368][ T8752] hsr0: mtu greater than device maximum [ 192.178810][ T8750] Bluetooth: hci0: unsupported parameter 5135 [ 192.178833][ T8750] Bluetooth: hci0: unsupported parameter 8192 [ 192.178854][ T8750] Bluetooth: hci0: unsupported parameter 5135 [ 192.178869][ T8750] Bluetooth: hci0: unsupported parameter 8192 [ 192.955109][ T8785] syzkaller0: entered promiscuous mode [ 192.955134][ T8785] syzkaller0: entered allmulticast mode [ 193.169861][ T8781] erspan1: entered promiscuous mode [ 193.256845][ T8793] netlink: 8 bytes leftover after parsing attributes in process `syz.3.576'. [ 193.282956][ T8797] netlink: 88 bytes leftover after parsing attributes in process `syz.1.575'. [ 194.229610][ T8830] smc: net device vlan1 applied user defined pnetid SYZ2 [ 194.333575][ T8833] netlink: 165 bytes leftover after parsing attributes in process `syz.3.584'. [ 194.335744][ T8833] netlink: 24 bytes leftover after parsing attributes in process `syz.3.584'. [ 194.363880][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.363942][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.431540][ T8836] netlink: 20 bytes leftover after parsing attributes in process `syz.4.586'. [ 194.644212][ T8833] netlink: 'syz.3.584': attribute type 3 has an invalid length. [ 194.669186][ T8833] netlink: 28 bytes leftover after parsing attributes in process `syz.3.584'. [ 195.253737][ T8864] syzkaller0: entered promiscuous mode [ 195.253761][ T8864] syzkaller0: entered allmulticast mode [ 195.280303][ T8860] syzkaller0: entered promiscuous mode [ 195.280328][ T8860] syzkaller0: entered allmulticast mode [ 195.836048][ T8878] netlink: 12 bytes leftover after parsing attributes in process `syz.4.592'. [ 195.997430][ T8882] tipc: Enabling of bearer rejected, media not registered [ 196.099144][ T8887] netlink: 'syz.3.595': attribute type 1 has an invalid length. [ 196.099168][ T8887] netlink: 244 bytes leftover after parsing attributes in process `syz.3.595'. [ 196.189144][ T8892] netlink: 8 bytes leftover after parsing attributes in process `syz.4.597'. [ 196.388144][ T8893] netlink: 8 bytes leftover after parsing attributes in process `syz.2.598'. [ 196.783771][ T6742] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 196.783796][ T6742] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 196.829783][ T8916] openvswitch: netlink: Flow actions attr not present in new flow. [ 197.032903][ T8921] netlink: 4 bytes leftover after parsing attributes in process `syz.3.613'. [ 197.032929][ T8921] netlink: 14 bytes leftover after parsing attributes in process `syz.3.613'. [ 197.711418][ T8947] netlink: 4 bytes leftover after parsing attributes in process `syz.3.610'. [ 197.730559][ T8947] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 197.759508][ T8945] netlink: 4 bytes leftover after parsing attributes in process `syz.4.609'. [ 197.759627][ T8945] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 197.798461][ T8945] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 197.872536][ T8951] netlink: 24 bytes leftover after parsing attributes in process `syz.2.611'. [ 198.538000][ T8984] openvswitch: netlink: VXLAN extension 248 out of range max 1 [ 198.538515][ T8987] openvswitch: netlink: VXLAN extension 248 out of range max 1 [ 199.320280][ T5634] Bluetooth: hci4: command 0x0405 tx timeout [ 199.669637][ T9036] netlink: 'syz.4.625': attribute type 1 has an invalid length. [ 199.692106][ T9036] netlink: 8 bytes leftover after parsing attributes in process `syz.4.625'. [ 199.846932][ T9038] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 199.878063][ T9038] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 200.816963][ T9052] bridge: RTM_NEWNEIGH with unconfigured vlan 1 on bridge0 [ 202.051036][ T9134] netlink: 'syz.4.638': attribute type 3 has an invalid length. [ 202.117286][ T9139] lo: entered promiscuous mode [ 202.171916][ T9139] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 202.391633][ T9147] __nla_validate_parse: 4 callbacks suppressed [ 202.391656][ T9147] netlink: 60 bytes leftover after parsing attributes in process `syz.1.641'. [ 202.453942][ T9124] syz.2.636 (9124) used greatest stack depth: 16320 bytes left [ 202.525746][ T9152] xfrm1: entered promiscuous mode [ 202.525772][ T9152] xfrm1: entered allmulticast mode [ 203.043075][ T9178] syz_tun: entered allmulticast mode [ 203.291160][ T9191] ip6t_hbh: too many supported opts specified [ 203.594515][ T9205] openvswitch: netlink: nsh attribute has 5 unknown bytes. [ 203.709444][ T9204] netlink: 36 bytes leftover after parsing attributes in process `syz.2.657'. [ 203.884420][ T9212] netlink: 24 bytes leftover after parsing attributes in process `syz.0.658'. [ 204.036286][ T9223] netlink: 'syz.3.659': attribute type 10 has an invalid length. [ 204.109661][ T9223] team0: Port device dummy0 added [ 204.122225][ T9228] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 204.608889][ T9247] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 205.003400][ T9272] netlink: 12 bytes leftover after parsing attributes in process `syz.0.664'. [ 205.097989][ T9268] netlink: 28 bytes leftover after parsing attributes in process `syz.1.665'. [ 205.182219][ T9272] 8021q: adding VLAN 0 to HW filter on device bond1 [ 205.182981][ T9274] netlink: 12 bytes leftover after parsing attributes in process `syz.2.668'. [ 205.310176][ T9272] tipc: Started in network mode [ 205.310211][ T9272] tipc: Node identity e6c7a23d3668, cluster identity 4711 [ 205.310442][ T9272] tipc: Enabled bearer , priority 0 [ 205.578503][ T9276] tipc: Disabling bearer [ 205.674499][ T9304] nft_compat: unsupported protocol 1 [ 205.833075][ T9302] netlink: 4 bytes leftover after parsing attributes in process `syz.4.671'. [ 206.091898][ T9319] x_tables: duplicate underflow at hook 2 [ 206.506700][ T9337] netlink: 'syz.4.678': attribute type 21 has an invalid length. [ 206.506747][ T9337] netlink: 128 bytes leftover after parsing attributes in process `syz.4.678'. [ 206.506830][ T9337] netlink: 'syz.4.678': attribute type 5 has an invalid length. [ 206.506845][ T9337] netlink: 3 bytes leftover after parsing attributes in process `syz.4.678'. [ 207.206456][ T9355] xt_l2tp: invalid flags combination: 8 [ 207.425494][ T9374] netlink: 12 bytes leftover after parsing attributes in process `syz.2.683'. [ 207.626264][ T9388] netlink: 116 bytes leftover after parsing attributes in process `syz.1.689'. [ 207.626295][ T9388] netlink: 28 bytes leftover after parsing attributes in process `syz.1.689'. [ 207.626342][ T9388] netlink: 8 bytes leftover after parsing attributes in process `syz.1.689'. [ 208.201962][ T7433] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 208.205128][ T9402] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 210.474376][ T9378] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 210.475177][ T9387] netlink: 'syz.0.690': attribute type 4 has an invalid length. [ 210.475199][ T9387] netlink: 224 bytes leftover after parsing attributes in process `syz.0.690'. [ 210.476012][ T9391] netlink: 20 bytes leftover after parsing attributes in process `syz.0.690'. [ 210.813152][ T9424] bond0: (slave bond_slave_1): Releasing backup interface [ 210.846134][ T9426] netlink: 8 bytes leftover after parsing attributes in process `syz.3.695'. [ 210.846170][ T9426] netlink: 'syz.3.695': attribute type 30 has an invalid length. [ 210.846746][ T9424] netlink: 8 bytes leftover after parsing attributes in process `syz.3.695'. [ 210.846772][ T9424] netlink: 'syz.3.695': attribute type 30 has an invalid length. [ 210.916740][ T9426] vxlan2: entered promiscuous mode [ 210.916765][ T9426] vxlan2: entered allmulticast mode [ 211.041934][ T9424] vxlan2: entered promiscuous mode [ 211.041958][ T9424] vxlan2: entered allmulticast mode [ 211.070677][ T9442] netlink: 12 bytes leftover after parsing attributes in process `syz.4.701'. [ 211.070702][ T9442] netlink: 20 bytes leftover after parsing attributes in process `syz.4.701'. [ 211.261563][ T9447] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 211.629822][ T9457] bond5: option arp_interval: invalid value (18446744073709551615) [ 211.629854][ T9457] bond5: option arp_interval: allowed values 0 - 2147483647 [ 211.807673][ T5624] Bluetooth: hci0: command 0x0c13 tx timeout [ 211.807730][ T5624] Bluetooth: hci1: command 0x0406 tx timeout [ 211.807730][ T5621] Bluetooth: hci3: command 0x0406 tx timeout [ 211.807762][ T5624] Bluetooth: hci2: command 0x0406 tx timeout [ 212.011285][ T9457] bond5 (unregistering): Released all slaves [ 212.411494][ T9503] netlink: zone id is out of range [ 212.411512][ T9503] netlink: zone id is out of range [ 212.411521][ T9503] netlink: zone id is out of range [ 212.411530][ T9503] netlink: zone id is out of range [ 212.411538][ T9503] netlink: zone id is out of range [ 212.411546][ T9503] netlink: zone id is out of range [ 212.411554][ T9503] netlink: zone id is out of range [ 212.411562][ T9503] netlink: zone id is out of range [ 212.411570][ T9503] netlink: zone id is out of range [ 212.563383][ T9504] batadv_slave_0: entered allmulticast mode [ 212.628694][ T9502] can: request_module (can-proto-3) failed. [ 212.707637][ T9502] can: request_module (can-proto-3) failed. [ 212.761182][ T9502] can: request_module (can-proto-3) failed. [ 212.893740][ T9502] can: request_module (can-proto-3) failed. [ 212.908006][ T9524] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 213.038607][ T9502] can: request_module (can-proto-3) failed. [ 213.104470][ T9502] can: request_module (can-proto-3) failed. [ 213.196841][ T9502] can: request_module (can-proto-3) failed. [ 213.222591][ T9530] syzkaller0: entered promiscuous mode [ 213.222620][ T9530] syzkaller0: entered allmulticast mode [ 213.255975][ T9502] can: request_module (can-proto-3) failed. [ 213.557474][ T9540] __nla_validate_parse: 2 callbacks suppressed [ 213.557499][ T9540] netlink: 5 bytes leftover after parsing attributes in process `syz.4.717'. [ 213.557515][ T9540] netlink: 5 bytes leftover after parsing attributes in process `syz.4.717'. [ 213.557531][ T9540] netlink: 32 bytes leftover after parsing attributes in process `syz.4.717'. [ 214.394830][ T9561] Bluetooth: hci0: unsupported parameter 5135 [ 214.394856][ T9561] Bluetooth: hci0: unsupported parameter 8192 [ 214.394870][ T9561] Bluetooth: hci0: unsupported parameter 5135 [ 214.394883][ T9561] Bluetooth: hci0: unsupported parameter 8192 [ 216.367602][ T9575] netlink: 59 bytes leftover after parsing attributes in process `syz.0.725'. [ 216.453222][ T9587] net_ratelimit: 8 callbacks suppressed [ 216.453247][ T9587] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 216.453269][ T9587] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 216.456550][ T9587] netlink: 4 bytes leftover after parsing attributes in process `syz.2.728'. [ 216.702976][ T9587] netlink: 4 bytes leftover after parsing attributes in process `syz.2.728'. [ 216.799406][ T9602] netlink: 52 bytes leftover after parsing attributes in process `syz.0.730'. [ 216.799437][ T9602] netlink: 52 bytes leftover after parsing attributes in process `syz.0.730'. [ 216.980132][ T9605] tap0: tun_chr_ioctl cmd 1074025677 [ 216.980262][ T9605] tap0: linktype set to 804 [ 216.982012][ T9607] tap0: tun_chr_ioctl cmd 1074025677 [ 216.982096][ T9607] tap0: linktype set to 804 [ 217.355245][ T9615] sctp: [Deprecated]: syz.2.734 (pid 9615) Use of struct sctp_assoc_value in delayed_ack socket option. [ 217.355245][ T9615] Use struct sctp_sack_info instead [ 217.820224][ T9636] netlink: 'syz.0.738': attribute type 2 has an invalid length. [ 217.929207][ T9640] netlink: 44 bytes leftover after parsing attributes in process `syz.0.738'. [ 217.956553][ T9636] : entered promiscuous mode [ 217.962739][ T9638] hsr0: entered promiscuous mode [ 218.423326][ T9631] hsr0: left promiscuous mode [ 218.497270][ T9651] netlink: 'syz.2.742': attribute type 30 has an invalid length. [ 218.584355][ T9654] netlink: 24 bytes leftover after parsing attributes in process `syz.2.742'. [ 218.627785][ T9651] bond4: option arp_missed_max: invalid value (0) [ 218.627813][ T9651] bond4: option arp_missed_max: allowed values 1 - 255 [ 218.652320][ T9651] bond4 (unregistering): Released all slaves [ 218.988471][ T9673] netlink: 'syz.2.746': attribute type 1 has an invalid length. [ 219.130387][ T9673] 8021q: adding VLAN 0 to HW filter on device bond4 [ 219.336419][ T9673] bond4: (slave geneve3): making interface the new active one [ 219.366601][ T9673] bond4: (slave geneve3): Enslaving as an active interface with an up link [ 219.645808][ T9691] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 219.689488][ T9691] bond4: (slave macvlan2): making interface the new active one [ 219.700915][ T9691] bond4: (slave macvlan2): Enslaving as an active interface with an up link [ 220.185139][ T9729] netlink: 'syz.0.754': attribute type 1 has an invalid length. [ 220.233550][ T9729] 8021q: adding VLAN 0 to HW filter on device bond2 [ 220.343059][ T9729] bond2: (slave veth7): Enslaving as an active interface with a down link [ 220.400362][ T9732] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 220.419665][ T9732] bond2: (slave batadv1): making interface the new active one [ 220.438954][ T9732] batadv1: entered promiscuous mode [ 220.446935][ T9732] bond2: (slave batadv1): Enslaving as an active interface with an up link [ 220.745598][ T9732] bond2 (unregistering): (slave veth7): Releasing active interface [ 220.769297][ T9732] bond2 (unregistering): (slave batadv1): Releasing active interface [ 220.769330][ T9732] batadv1: left promiscuous mode [ 220.826381][ T9732] bond2 (unregistering): Released all slaves [ 221.151368][ T9766] netlink: 'syz.3.759': attribute type 1 has an invalid length. [ 221.151522][ T9767] netlink: 'syz.3.759': attribute type 1 has an invalid length. [ 221.498045][ T9773] 8021q: adding VLAN 0 to HW filter on device bond6 [ 221.514450][ T9773] bond5: (slave bond6): making interface the new active one [ 221.536117][ T9773] bond5: (slave bond6): Enslaving as an active interface with an up link [ 221.675076][ T9799] ip_tables: iptables: counters copy to user failed while replacing table [ 221.698608][ T9767] bond5: (slave gretap2): Enslaving as a backup interface with an up link [ 222.067392][ T9808] netlink: 12 bytes leftover after parsing attributes in process `syz.3.768'. [ 222.105019][ T9815] netlink: 24 bytes leftover after parsing attributes in process `syz.2.769'. [ 222.228615][ T9817] netlink: 76 bytes leftover after parsing attributes in process `syz.0.770'. [ 222.243454][ T9817] xt_NFQUEUE: number of total queues is 0 [ 222.418583][ T9825] netlink: 'syz.3.774': attribute type 1 has an invalid length. [ 222.495271][ T9830] IPVS: set_ctl: invalid protocol: 47 224.0.0.1:20002 [ 222.618653][ T9825] 8021q: adding VLAN 0 to HW filter on device bond7 [ 222.773101][ T9826] bond7: (slave veth5): Enslaving as an active interface with a down link [ 222.970920][ T9850] syzkaller0: entered promiscuous mode [ 222.970946][ T9850] syzkaller0: entered allmulticast mode [ 222.974620][ T9850] 0: reclassify loop, rule prio 0, protocol 700 [ 222.991669][ T9853] syzkaller0: entered promiscuous mode [ 222.991694][ T9853] syzkaller0: entered allmulticast mode [ 223.248786][ T9865] xt_ipcomp: unknown flags 1D [ 223.685095][ T9878] netlink: 48 bytes leftover after parsing attributes in process `syz.1.786'. [ 223.765628][ T9893] netlink: 48 bytes leftover after parsing attributes in process `syz.1.786'. [ 224.008821][ T9875] syzkaller1: entered promiscuous mode [ 224.008846][ T9875] syzkaller1: entered allmulticast mode [ 224.309582][ T9910] batadv0: entered promiscuous mode [ 224.346262][ T9909] batadv0: left promiscuous mode [ 224.536655][ T9925] netlink: 16 bytes leftover after parsing attributes in process `syz.1.793'. [ 225.012000][ T9946] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 225.726769][ T9975] netlink: 4 bytes leftover after parsing attributes in process `syz.3.809'. [ 225.759597][ T9979] netlink: 12 bytes leftover after parsing attributes in process `syz.2.810'. [ 225.927026][ T9979] 8021q: adding VLAN 0 to HW filter on device bond5 [ 226.098066][ T9981] macvtap1: entered allmulticast mode [ 226.167048][ T9983] bond5: (slave sit1): refused to change device type [ 226.652214][T10021] netlink: 'syz.2.820': attribute type 4 has an invalid length. [ 226.652214][T10022] netlink: 'syz.2.820': attribute type 4 has an invalid length. [ 226.696108][T10023] netlink: 'syz.2.820': attribute type 3 has an invalid length. [ 226.777034][T10034] netlink: 8 bytes leftover after parsing attributes in process `syz.1.821'. [ 226.777119][T10034] netlink: 4 bytes leftover after parsing attributes in process `syz.1.821'. [ 226.956442][T10037] netlink: 24 bytes leftover after parsing attributes in process `syz.1.822'. [ 227.834107][T10056] netlink: 'syz.2.826': attribute type 16 has an invalid length. [ 227.834132][T10056] netlink: 'syz.2.826': attribute type 17 has an invalid length. [ 227.898271][T10056] sit0: left promiscuous mode [ 227.962809][T10056] 8021q: adding VLAN 0 to HW filter on device bond0 [ 227.964101][T10056] 8021q: adding VLAN 0 to HW filter on device team0 [ 227.967195][T10056] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 228.037367][T10056] batadv_slave_0: left allmulticast mode [ 228.052740][T10056] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 228.052768][T10056] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 228.057230][T10056] veth1_vlan: left promiscuous mode [ 228.058573][T10056] veth0_vlan: left promiscuous mode [ 228.087909][T10056] veth0_vlan: entered promiscuous mode [ 228.102575][T10056] veth1_vlan: entered promiscuous mode [ 228.116208][T10056] veth1_macvtap: left promiscuous mode [ 228.117655][T10056] veth0_macvtap: left promiscuous mode [ 228.119021][T10056] veth0_macvtap: entered promiscuous mode [ 228.137783][T10056] veth1_macvtap: entered promiscuous mode [ 228.156530][T10056] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 228.158038][T10056] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 228.174418][T10056] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 228.183436][T10056] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 228.204448][T10056] 8021q: adding VLAN 0 to HW filter on device bond1 [ 228.218587][T10056] 8021q: adding VLAN 0 to HW filter on device bond2 [ 228.284221][T10056] bond5: entered allmulticast mode [ 228.284489][T10056] macvtap1: left allmulticast mode [ 228.284503][T10056] bond5: left allmulticast mode [ 228.285078][T10056] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 228.396675][ T9744] ip6_tunnel:  xmit: Local address not yet configured! [ 228.397072][ T9744] ip6_tunnel:  xmit: Local address not yet configured! [ 228.421241][ T5349] ip6_tunnel:  xmit: Local address not yet configured! [ 228.630380][ T7433] ip6_tunnel:  xmit: Local address not yet configured! [ 228.780916][ T7433] ip6_tunnel:  xmit: Local address not yet configured! [ 229.457859][T10006] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 229.848384][T10078] netlink: 20 bytes leftover after parsing attributes in process `syz.3.830'. [ 229.939804][T10088] block nbd0: NBD_DISCONNECT [ 229.948597][T10088] block nbd0: Send disconnect failed -32 [ 229.948623][T10088] block nbd0: Send disconnect failed -32 [ 229.948641][T10088] block nbd0: shutting down sockets [ 230.506197][T10103] syzkaller0: entered promiscuous mode [ 230.506221][T10103] syzkaller0: entered allmulticast mode [ 230.550950][T10103] tipc: Enabled bearer , priority 0 [ 230.585648][T10103] tipc: Resetting bearer [ 230.642892][T10099] tipc: Resetting bearer [ 230.724496][T10099] tipc: Disabling bearer [ 230.779508][T10119] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 230.819330][T10113] : renamed from virt_wifi0 [ 230.859378][T10107] netlink: 14 bytes leftover after parsing attributes in process `syz.3.839'. [ 230.869690][T10116] tipc: Enabling of bearer rejected, failed to enable media [ 230.933934][T10126] netlink: 68 bytes leftover after parsing attributes in process `syz.4.843'. [ 231.014645][T10129] netlink: 8 bytes leftover after parsing attributes in process `syz.4.844'. [ 231.015027][T10129] netlink: 8 bytes leftover after parsing attributes in process `syz.4.844'. [ 231.141748][T10134] netlink: 76 bytes leftover after parsing attributes in process `syz.2.846'. [ 231.393674][T10144] netlink: 566 bytes leftover after parsing attributes in process `syz.3.850'. [ 231.577702][T10148] sctp: [Deprecated]: syz.1.851 (pid 10148) Use of struct sctp_assoc_value in delayed_ack socket option. [ 231.577702][T10148] Use struct sctp_sack_info instead [ 231.579143][T10148] sctp: [Deprecated]: syz.1.851 (pid 10148) Use of struct sctp_assoc_value in delayed_ack socket option. [ 231.579143][T10148] Use struct sctp_sack_info instead [ 231.625368][T10149] ipip0: entered promiscuous mode [ 231.691228][T10154] bridge_slave_1: left allmulticast mode [ 231.691260][T10154] bridge_slave_1: left promiscuous mode [ 231.691508][T10154] bridge0: port 2(bridge_slave_1) entered disabled state [ 231.743857][T10154] bridge_slave_0: left allmulticast mode [ 231.743913][T10154] bridge_slave_0: left promiscuous mode [ 231.744777][T10154] bridge0: port 1(bridge_slave_0) entered disabled state [ 232.280680][ C0] ip6_tunnel:  xmit: Local address not yet configured! [ 232.361584][T10187] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 232.369373][T10189] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 232.409196][T10190] netlink: 8 bytes leftover after parsing attributes in process `syz.3.858'. [ 232.486721][T10192] Bluetooth: MGMT ver 1.23 [ 232.611961][T10200] netlink: 4 bytes leftover after parsing attributes in process `syz.1.859'. [ 232.903259][T10211] bond6: Unable to set up delay as MII monitoring is disabled [ 232.907301][T10211] bond6 (unregistering): Released all slaves [ 233.042648][T10223] netlink: zone id is out of range [ 233.042666][T10223] netlink: zone id is out of range [ 233.042675][T10223] netlink: zone id is out of range [ 233.042684][T10223] netlink: zone id is out of range [ 233.042693][T10223] netlink: zone id is out of range [ 233.042701][T10223] netlink: zone id is out of range [ 233.042712][T10223] netlink: zone id is out of range [ 233.042720][T10223] netlink: zone id is out of range [ 234.551034][T10281] bridge0: entered promiscuous mode [ 234.551061][T10281] bridge0: entered allmulticast mode [ 234.553918][T10281] team0: Port device bridge0 added [ 234.579365][T10281] bridge0: port 1(team0) entered blocking state [ 234.579428][T10281] bridge0: port 1(team0) entered disabled state [ 234.579556][T10281] team0: entered allmulticast mode [ 234.579569][T10281] team_slave_1: entered allmulticast mode [ 234.585786][T10281] dummy0: entered allmulticast mode [ 234.617454][T10281] team0: left allmulticast mode [ 234.617474][T10281] team_slave_1: left allmulticast mode [ 234.617489][T10281] dummy0: left allmulticast mode [ 236.718935][T10251] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 236.829618][T10317] netlink: 36 bytes leftover after parsing attributes in process `syz.2.885'. [ 237.074217][T10322] netlink: 52 bytes leftover after parsing attributes in process `syz.3.887'. [ 237.861541][T10364] netlink: 20 bytes leftover after parsing attributes in process `syz.0.895'. [ 238.024932][T10374] netlink: 4 bytes leftover after parsing attributes in process `syz.3.899'. [ 238.472469][T10392] netlink: 116 bytes leftover after parsing attributes in process `syz.0.900'. [ 239.283262][T10417] netlink: 28 bytes leftover after parsing attributes in process `syz.1.908'. [ 239.292912][T10421] netlink: 8 bytes leftover after parsing attributes in process `syz.2.906'. [ 239.313110][T10414] netlink: 64 bytes leftover after parsing attributes in process `syz.4.907'. [ 239.314024][T10421] netlink: 8 bytes leftover after parsing attributes in process `syz.2.906'. [ 239.348946][T10414] netlink: 132 bytes leftover after parsing attributes in process `syz.4.907'. [ 239.558186][T10432] netlink: 'syz.1.911': attribute type 2 has an invalid length. [ 239.734248][T10439] IPVS: set_ctl: invalid protocol: 59 10.1.1.1:20004 [ 239.755253][T10440] macsec1: entered promiscuous mode [ 239.972050][T10453] netlink: 'syz.0.915': attribute type 1 has an invalid length. [ 240.107223][T10453] bond2: entered promiscuous mode [ 240.107744][T10453] 8021q: adding VLAN 0 to HW filter on device bond2 [ 240.442395][ C0] ip6_tunnel:  xmit: Local address not yet configured! [ 240.673768][T10455] 8021q: adding VLAN 0 to HW filter on device bond2 [ 240.674222][T10455] bond2: (slave gre2): The slave device specified does not support setting the MAC address [ 240.674244][T10455] bond2: (slave gre2): Setting fail_over_mac to active for active-backup mode [ 240.794511][T10455] bond2: (slave gre2): making interface the new active one [ 240.794539][T10455] gre2: entered promiscuous mode [ 240.796382][T10455] bond2: (slave gre2): Enslaving as an active interface with an up link [ 240.889062][T10463] bond2 (unregistering): (slave gre2): Releasing backup interface [ 240.889093][T10463] gre2: left promiscuous mode [ 240.903690][T10463] bond2 (unregistering): Released all slaves [ 240.969072][T10461] syzkaller1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 241.007788][T10481] syzkaller0: entered promiscuous mode [ 241.007815][T10481] syzkaller0: entered allmulticast mode [ 241.975392][T10529] __nla_validate_parse: 4 callbacks suppressed [ 241.975415][T10529] netlink: 12 bytes leftover after parsing attributes in process `syz.1.930'. [ 241.975497][T10529] ip6tnl0: Caught tx_queue_len zero misconfig [ 242.138036][T10532] syzkaller0: entered promiscuous mode [ 242.138062][T10532] syzkaller0: entered allmulticast mode [ 242.196541][T10536] netlink: 16 bytes leftover after parsing attributes in process `syz.0.932'. [ 242.519852][T10547] netlink: 84 bytes leftover after parsing attributes in process `syz.0.935'. [ 242.520160][T10545] ipvlan2: entered allmulticast mode [ 242.520182][T10545] macvlan1: entered allmulticast mode [ 243.185544][T10571] netlink: 4 bytes leftover after parsing attributes in process `syz.1.940'. [ 243.205241][T10571] smc: removing net device vlan1 with user defined pnetid SYZ2 [ 244.313106][T10607] netlink: 8 bytes leftover after parsing attributes in process `syz.4.946'. [ 245.652102][T10554] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 245.826291][T10619] netlink: 8 bytes leftover after parsing attributes in process `syz.2.949'. [ 246.085160][T10630] tipc: Failed to remove unknown binding: 66,0,0/0:3008089342/3008089344 [ 246.085225][T10630] tipc: Failed to remove unknown binding: 66,0,0/0:3008089342/3008089343 [ 246.345802][T10626] netlink: 4 bytes leftover after parsing attributes in process `syz.1.951'. [ 246.595129][T10651] syzkaller0: entered promiscuous mode [ 246.595167][T10651] syzkaller0: entered allmulticast mode [ 246.770806][T10663] netlink: 88 bytes leftover after parsing attributes in process `syz.3.961'. [ 247.058762][T10675] netlink: 20 bytes leftover after parsing attributes in process `syz.2.965'. [ 247.058805][T10675] netlink: 8 bytes leftover after parsing attributes in process `syz.2.965'. [ 247.059156][T10675] 8021q: VLANs not supported on ip_vti0 [ 247.232864][T10684] net_ratelimit: 4 callbacks suppressed [ 247.232909][T10684] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 247.282793][T10684] ovs-s!: entered promiscuous mode [ 247.442070][T10694] netlink: 72 bytes leftover after parsing attributes in process `syz.4.968'. [ 247.511679][T10694] netlink: 'syz.4.968': attribute type 11 has an invalid length. [ 247.536205][T10694] netlink: 16 bytes leftover after parsing attributes in process `syz.4.968'. [ 247.726214][T10711] netlink: 'syz.3.972': attribute type 1 has an invalid length. [ 247.726239][T10711] netlink: 244 bytes leftover after parsing attributes in process `syz.3.972'. [ 247.758740][T10700] netlink: 40 bytes leftover after parsing attributes in process `syz.2.971'. [ 247.758769][T10700] netlink: 40 bytes leftover after parsing attributes in process `syz.2.971'. [ 248.549372][ T5634] Bluetooth: hci0: ACL packet too small [ 249.164715][T10750] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 249.188440][T10749] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 249.229399][T10762] ip6gre2: entered allmulticast mode [ 249.539803][T10780] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 249.559306][T10780] netlink: 12 bytes leftover after parsing attributes in process `syz.1.990'. [ 249.580853][T10780] netlink: 64 bytes leftover after parsing attributes in process `syz.1.990'. [ 249.837094][T10798] netlink: 4 bytes leftover after parsing attributes in process `syz.1.994'. [ 251.034161][T10824] syzkaller0: entered promiscuous mode [ 251.034186][T10824] syzkaller0: entered allmulticast mode [ 251.622109][T10854] pim6reg: entered allmulticast mode [ 252.152050][T10879] __nla_validate_parse: 5 callbacks suppressed [ 252.152072][T10879] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1015'. [ 252.182564][T10879] x_tables: duplicate entry at hook 1 [ 252.514033][T10855] syzkaller0: entered promiscuous mode [ 252.514061][T10855] syzkaller0: entered allmulticast mode [ 252.701284][T10890] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1016'. [ 252.789801][T10898] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1018'. [ 252.969714][T10903] netlink: 'syz.0.1020': attribute type 10 has an invalid length. [ 252.969736][T10903] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1020'. [ 253.013741][ T6743] wlan0: Trigger new scan to find an IBSS to join [ 253.037697][T10905] netlink: 'syz.0.1020': attribute type 10 has an invalid length. [ 253.037722][T10905] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1020'. [ 253.784122][ T6743] tipc: Subscription rejected, illegal request [ 254.178391][T10913] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1021'. [ 254.775703][T10926] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1023'. [ 254.785745][T10926] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1023'. [ 254.861340][T10927] IPVS: set_ctl: invalid protocol: 43 172.20.20.187:20001 [ 255.438378][T10903] wg2: entered promiscuous mode [ 255.438586][T10903] wg2: entered allmulticast mode [ 255.438604][T10903] team0: Device wg2 is of different type [ 255.487955][ T2357] IPVS: starting estimator thread 0... [ 255.516773][T10905] team0: Device wg2 is of different type [ 255.571649][T10935] IPVS: using max 34 ests per chain, 81600 per kthread [ 255.803722][ C0] ip6_tunnel:  xmit: Local address not yet configured! [ 255.805617][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.915828][T10951] veth1_to_hsr: Caught tx_queue_len zero misconfig [ 255.982267][T10954] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1029'. [ 256.023149][T10951] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1027'. [ 256.324705][T10971] netlink: 'syz.2.1033': attribute type 1 has an invalid length. [ 256.805047][T10985] ip6gre1: entered promiscuous mode [ 256.805074][T10985] ip6gre1: entered allmulticast mode [ 256.810480][ T2357] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 256.810723][ T2357] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 256.831486][ T7433] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 256.900231][ T7433] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 256.943054][T10989] Cannot find add_set index 2 as target [ 257.169364][T10997] __nla_validate_parse: 5 callbacks suppressed [ 257.169390][T10997] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1040'. [ 257.236809][T11003] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1040'. [ 257.293840][T11002] openvswitch: netlink: Message has 8 unknown bytes. [ 257.293906][T11002] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 257.391755][T11006] IPVS: set_ctl: invalid protocol: 43 172.20.20.187:20001 [ 257.640249][ T7433] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 257.959029][T11008] veth0_to_bridge: Caught tx_queue_len zero misconfig [ 257.961506][ T2357] wlan0: Trigger new scan to find an IBSS to join [ 257.996984][T11012] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1043'. [ 258.072062][T11012] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1043'. [ 258.130104][T11014] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1044'. [ 258.229065][T11021] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1046'. [ 258.688778][T11045] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 258.883505][ T2357] wlan0: Creating new IBSS network, BSSID 76:7d:51:2a:47:76 [ 258.936685][T11053] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1056'. [ 259.164224][T11064] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1058'. [ 259.195738][T11062] bond8 (unregistering): Released all slaves [ 259.216787][T11064] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1058'. [ 259.234270][T11064] IPVS: set_ctl: invalid protocol: 43 172.20.20.187:20001 [ 259.434691][T11071] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1059'. [ 259.698550][T11076] syzkaller1: entered promiscuous mode [ 259.698576][T11076] syzkaller1: entered allmulticast mode [ 260.134712][T11104] batman_adv: batadv0: Adding interface: vlan2 [ 260.134735][T11104] batman_adv: batadv0: The MTU of interface vlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 260.134764][T11104] batman_adv: batadv0: Not using interface vlan2 (retrying later): interface not active [ 260.479705][T11123] hsr0: entered allmulticast mode [ 260.479728][T11123] hsr_slave_0: entered allmulticast mode [ 260.479747][T11123] hsr_slave_1: entered allmulticast mode [ 261.000214][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 262.939064][T11122] hsr_slave_0: left promiscuous mode [ 262.957660][T11122] hsr_slave_1: left promiscuous mode [ 263.121715][T11125] lo: Caught tx_queue_len zero misconfig [ 263.432463][T11144] __nla_validate_parse: 5 callbacks suppressed [ 263.432488][T11144] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1075'. [ 264.378182][T11164] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1082'. [ 264.782927][T11182] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1086'. [ 264.782964][T11182] bond0: option arp_interval: invalid value (18446744073675997440) [ 264.782986][T11182] bond0: option arp_interval: allowed values 0 - 2147483647 [ 265.099046][T11179] IPVS: Scheduler module ip_vs_sip not found [ 266.115801][T11219] tipc: Enabled bearer , priority 0 [ 266.409458][T11219] syzkaller0: entered promiscuous mode [ 266.409486][T11219] syzkaller0: entered allmulticast mode [ 266.411701][T11219] tipc: Resetting bearer [ 266.482669][T11215] tipc: Resetting bearer [ 266.540095][T11234] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1098'. [ 266.540124][T11234] netlink: 43 bytes leftover after parsing attributes in process `syz.4.1098'. [ 266.540140][T11234] netlink: 'syz.4.1098': attribute type 5 has an invalid length. [ 266.540153][T11234] netlink: 43 bytes leftover after parsing attributes in process `syz.4.1098'. [ 266.540404][T11234] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1098'. [ 266.540436][T11234] netlink: 43 bytes leftover after parsing attributes in process `syz.4.1098'. [ 266.540450][T11234] netlink: 'syz.4.1098': attribute type 5 has an invalid length. [ 266.540463][T11234] netlink: 43 bytes leftover after parsing attributes in process `syz.4.1098'. [ 266.540678][T11234] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1098'. [ 266.540697][T11234] netlink: 'syz.4.1098': attribute type 5 has an invalid length. [ 266.540900][T11234] netlink: 'syz.4.1098': attribute type 5 has an invalid length. [ 266.541109][T11234] netlink: 'syz.4.1098': attribute type 5 has an invalid length. [ 266.541327][T11234] netlink: 'syz.4.1098': attribute type 5 has an invalid length. [ 266.545762][T11234] netlink: 'syz.4.1098': attribute type 5 has an invalid length. [ 266.546005][T11234] netlink: 'syz.4.1098': attribute type 5 has an invalid length. [ 266.546223][T11234] netlink: 'syz.4.1098': attribute type 5 has an invalid length. [ 266.546408][T11234] netlink: 'syz.4.1098': attribute type 5 has an invalid length. [ 266.724551][T11235] openvswitch: netlink: IPv4 tunnel dst address is zero [ 266.724598][T11235] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 266.725030][T11235] openvswitch: netlink: IPv4 tunnel dst address is zero [ 266.725056][T11235] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 266.725456][T11235] openvswitch: netlink: IPv4 tunnel dst address is zero [ 266.725483][T11235] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 266.756168][T11235] openvswitch: netlink: IPv4 tunnel dst address is zero [ 266.756261][T11235] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 267.574059][T11262] IPVS: Scheduler module ip_vs_sip not found [ 269.457720][T11215] tipc: Disabling bearer [ 269.469472][T11245] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 269.480915][ T5806] tipc: Node number set to 3501171261 [ 269.880126][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 270.001171][T11286] Bluetooth: hci0: unsupported parameter 5135 [ 270.001215][T11286] Bluetooth: hci0: unsupported parameter 8192 [ 270.009082][T11286] Bluetooth: hci0: unsupported parameter 5135 [ 270.009104][T11286] Bluetooth: hci0: unsupported parameter 8192 [ 270.104457][T11291] __nla_validate_parse: 86 callbacks suppressed [ 270.104482][T11291] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1106'. [ 270.154731][T11291] bridge2: the hash_elasticity option has been deprecated and is always 16 [ 270.154759][T11291] bridge2: entered allmulticast mode [ 271.105720][T11320] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1114'. [ 271.464562][T11335] IPVS: Scheduler module ip_vs_sip not found [ 271.646449][T11341] validate_nla: 11 callbacks suppressed [ 271.646472][T11341] netlink: 'syz.2.1117': attribute type 15 has an invalid length. [ 272.148688][T11360] netlink: 'syz.4.1123': attribute type 1 has an invalid length. [ 272.148730][T11360] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 272.247245][T11364] Bluetooth: hci0: unsupported parameter 5135 [ 272.247271][T11364] Bluetooth: hci0: unsupported parameter 8192 [ 272.247284][T11364] Bluetooth: hci0: unsupported parameter 5135 [ 272.247298][T11364] Bluetooth: hci0: unsupported parameter 8192 [ 272.416686][T11366] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1124'. [ 272.584400][T11368] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1124'. [ 272.588237][T11370] netlink: 100 bytes leftover after parsing attributes in process `syz.2.1125'. [ 272.785093][T11370] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1125'. [ 273.109400][T11375] 8021q: adding VLAN 0 to HW filter on device bond6 [ 273.118142][ T10] ip6_tunnel:  xmit: Local address not yet configured! [ 273.402458][ T7433] ip6_tunnel:  xmit: Local address not yet configured! [ 274.541063][T11419] netlink: 'syz.4.1135': attribute type 2 has an invalid length. [ 274.541109][T11419] netlink: 228 bytes leftover after parsing attributes in process `syz.4.1135'. [ 274.720765][T11427] syzkaller0: entered promiscuous mode [ 274.720791][T11427] syzkaller0: entered allmulticast mode [ 274.729700][T11427] tipc: Started in network mode [ 274.729735][T11427] tipc: Node identity feed03ac9e86, cluster identity 4711 [ 274.763583][T11427] tipc: Enabled bearer , priority 0 [ 274.841662][T11427] tipc: Resetting bearer [ 274.859515][T11424] tipc: Resetting bearer [ 274.902609][T11424] tipc: Disabling bearer [ 274.923699][T11434] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1139'. [ 275.045128][T11439] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1139'. [ 275.045405][T11440] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1139'. [ 275.550048][T11463] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1147'. [ 276.338957][T11495] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1152'. [ 276.574312][T11500] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1155'. [ 277.173200][T11513] netlink: 'syz.3.1160': attribute type 4 has an invalid length. [ 277.173226][T11513] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1160'. [ 277.216881][T11516] 8021q: adding VLAN 0 to HW filter on device bond8 [ 277.383830][T11513] .`: renamed from bond0 (while UP) [ 277.803588][T11539] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1165'. [ 277.803635][T11539] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1165'. [ 278.093925][T11545] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 278.301062][T11550] syzkaller0: entered promiscuous mode [ 278.301086][T11550] syzkaller0: entered allmulticast mode [ 278.585627][T11564] syzkaller0: entered promiscuous mode [ 278.585652][T11564] syzkaller0: entered allmulticast mode [ 278.724957][T11567] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1172'. [ 278.742554][T11567] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1172'. [ 278.742583][T11567] openvswitch: netlink: Flow key attr not present in new flow. [ 279.572805][T11600] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1180'. [ 280.201135][T11621] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 280.337295][T11590] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 280.582659][T11639] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1187'. [ 280.823761][T11648] netlink: 'syz.0.1189': attribute type 1 has an invalid length. [ 280.831748][T11644] syzkaller0: entered promiscuous mode [ 280.831772][T11644] syzkaller0: entered allmulticast mode [ 281.103211][T11655] syzkaller0: entered promiscuous mode [ 281.103238][T11655] syzkaller0: entered allmulticast mode [ 281.116605][T11660] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1191'. [ 281.117481][T11660] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1191'. [ 281.156831][T11660] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1191'. [ 281.463041][T11678] netlink: 'syz.1.1195': attribute type 1 has an invalid length. [ 281.463060][T11678] netlink: 'syz.1.1195': attribute type 4 has an invalid length. [ 281.463070][T11678] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.1195'. [ 281.463520][T11678] netlink: 'syz.1.1195': attribute type 1 has an invalid length. [ 281.463533][T11678] netlink: 'syz.1.1195': attribute type 4 has an invalid length. [ 281.463542][T11678] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.1195'. [ 281.578080][T11680] bond0: Device is already in use. [ 281.585245][T11680] bond0: Device is already in use. [ 281.800241][T11690] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1206'. [ 281.830930][T11692] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1198'. [ 281.953596][T11700] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1199'. [ 281.953650][T11700] bond0: ARP target 0.0.0.2 is already present [ 281.953671][T11700] bond0: option arp_ip_target: invalid value (33554432) [ 282.795826][T11739] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1208'. [ 283.095962][T11712] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 283.477086][T11755] bond3 (unregistering): Released all slaves [ 283.904191][T11780] syzkaller0: entered promiscuous mode [ 283.904228][T11780] syzkaller0: entered allmulticast mode [ 285.671082][T11843] netlink: 'syz.3.1226': attribute type 11 has an invalid length. [ 285.897962][ C0] ip6_tunnel:  xmit: Local address not yet configured! [ 287.656440][T11854] tc_dump_action: action bad kind [ 287.673488][T11849] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 287.800465][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 288.855482][T11899] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 288.921360][ T6179] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 289.179689][T11908] __nla_validate_parse: 5 callbacks suppressed [ 289.179712][T11908] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1239'. [ 289.344890][T11910] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1240'. [ 289.379674][T11910] bridge0: port 3(team0) entered disabled state [ 289.385976][T11910] bridge0: port 2(bridge_slave_1) entered disabled state [ 289.387562][T11910] bridge0: port 1(bridge_slave_0) entered disabled state [ 289.469162][T11910] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 289.497847][T11910] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 290.127888][T11939] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1248'. [ 290.176961][T11939] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1248'. [ 292.875958][T11958] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 292.876006][T11958] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 292.876028][T11958] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 293.093300][T11969] netlink: 'syz.1.1252': attribute type 3 has an invalid length. [ 293.096703][T11969] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1252'. [ 293.568996][T11979] bond3: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 293.652233][T11979] bond3 (unregistering): Released all slaves [ 293.734722][T11987] bridge0: left promiscuous mode [ 293.734750][T11987] bridge0: left allmulticast mode [ 293.742924][T11999] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1259'. [ 293.785408][T11977] team0: Port device bridge0 removed [ 293.806860][T11999] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 294.059050][T12008] tc_dump_action: action bad kind [ 294.079007][T12011] netlink: Unknown conntrack attr (0) [ 294.855048][T12051] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1269'. [ 295.584217][T12080] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1278'. [ 295.715205][T12089] netlink: 964 bytes leftover after parsing attributes in process `syz.0.1281'. [ 295.715235][T12089] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 295.916837][T12094] xt_ipcomp: unknown flags 1D [ 296.165839][T12105] netlink: 'syz.1.1286': attribute type 1 has an invalid length. [ 296.287488][T12113] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1288'. [ 296.386615][T12105] 8021q: adding VLAN 0 to HW filter on device bond5 [ 296.622261][T12109] bond5: (slave veth7): Enslaving as an active interface with a down link [ 296.686896][T12132] netlink: 'syz.3.1292': attribute type 3 has an invalid length. [ 296.705083][T12111] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 296.727762][T12111] bond5: (slave batadv0): making interface the new active one [ 296.748131][T12111] batadv0: entered promiscuous mode [ 296.748702][T12111] bond5: (slave batadv0): Enslaving as an active interface with an up link [ 296.865752][T12133] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1293'. [ 296.874169][T12105] bond5 (unregistering): (slave veth7): Releasing active interface [ 296.944156][T12105] bond5 (unregistering): (slave batadv0): Releasing active interface [ 296.944190][T12105] batadv0: left promiscuous mode [ 296.987484][T12105] bond5 (unregistering): Released all slaves [ 297.167382][T12136] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 297.602501][T12161] xfrm1: entered allmulticast mode [ 297.622300][T12161] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1296'. [ 297.654612][T12163] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1298'. [ 297.838009][T12168] tc_dump_action: action bad kind [ 297.888695][T12165] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 298.212991][T12179] netlink: 'syz.0.1304': attribute type 12 has an invalid length. [ 298.630283][T12198] netlink: 'syz.3.1307': attribute type 1 has an invalid length. [ 298.698423][T12198] 8021q: adding VLAN 0 to HW filter on device bond0 [ 298.918604][T12201] bond0: (slave veth9): Enslaving as an active interface with a down link [ 299.005723][T12198] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 299.033911][T12198] bond0: (slave batadv1): making interface the new active one [ 299.067346][T12198] batadv1: entered promiscuous mode [ 299.067951][T12198] bond0: (slave batadv1): Enslaving as an active interface with an up link [ 299.248721][T12201] bond0 (unregistering): (slave veth9): Releasing active interface [ 299.318205][T12201] bond0 (unregistering): (slave batadv1): Releasing active interface [ 299.318241][T12201] batadv1: left promiscuous mode [ 299.364220][T12201] bond0 (unregistering): Released all slaves [ 299.555383][T12211] veth1_macvtap: left promiscuous mode [ 299.782293][T12182] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 299.983209][T12230] bond3: entered promiscuous mode [ 299.983769][T12230] 8021q: adding VLAN 0 to HW filter on device bond3 [ 300.296886][T12239] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1316'. [ 300.296918][T12239] block nbd0: Unsupported socket: should be TCP or UNIX. [ 301.040537][T12276] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1323'. [ 301.179432][T12283] netlink: 108 bytes leftover after parsing attributes in process `syz.4.1325'. [ 301.192706][T12272] netlink: 'syz.3.1324': attribute type 1 has an invalid length. [ 301.294699][T12285] xt_TCPMSS: Only works on TCP SYN packets [ 301.314054][T12286] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1324'. [ 301.339572][T12272] bond0 (unregistering): Released all slaves [ 301.544805][T12290] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1326'. [ 301.597011][ T5278] veth1_macvtap: entered promiscuous mode [ 301.769755][T12298] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1328'. [ 302.114600][T12320] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1331'. [ 302.253924][T12331] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1331'. [ 304.899785][T12331] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 305.047022][T12378] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1333'. [ 305.457140][T12396] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1335'. [ 305.457192][T12396] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1335'. [ 305.571931][T12399] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1339'. [ 305.571961][T12399] netlink: 'syz.1.1339': attribute type 6 has an invalid length. [ 305.572144][T12400] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1339'. [ 305.572163][T12400] netlink: 'syz.1.1339': attribute type 6 has an invalid length. [ 308.086904][T12406] ip_tables: iptables: counters copy to user failed while replacing table [ 308.121627][T12406] ip_tables: iptables: counters copy to user failed while replacing table [ 308.199224][T12410] dummy0: entered promiscuous mode [ 308.225484][T12410] dummy0: left promiscuous mode [ 308.642063][T12435] netlink: 'syz.3.1347': attribute type 11 has an invalid length. [ 308.692549][T12442] netlink: 'syz.1.1348': attribute type 2 has an invalid length. [ 308.768702][T12443] batman_adv: batadv0: Adding interface: syzkaller0 [ 308.768723][T12443] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 308.810669][T12443] batman_adv: batadv0: Interface activated: syzkaller0 [ 308.885709][T12440] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 308.966741][T12440] batman_adv: batadv0: Removing interface: syzkaller0 [ 309.231875][ T7433] ip6_tunnel:  xmit: Local address not yet configured! [ 309.700734][T12473] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1356'. [ 309.708248][T12473] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1356'. [ 309.776282][T12477] netlink: 'syz.0.1358': attribute type 34 has an invalid length. [ 309.776303][T12477] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1358'. [ 310.004696][T12482] netlink: 'syz.4.1359': attribute type 3 has an invalid length. [ 310.004720][T12482] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1359'. [ 310.041912][ T5806] ip6_tunnel:  xmit: Local address not yet configured! [ 310.478449][T12511] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1365'. [ 310.478475][T12511] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1365'. [ 310.529781][T12504] ip6tnl3: entered allmulticast mode [ 310.537643][ T6187] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 310.537933][ T6187] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 310.560264][ T7426] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 310.973504][ T7426] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 311.564027][ T30] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 311.684438][T12560] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1373'. [ 312.475797][T12571] netlink: 292 bytes leftover after parsing attributes in process `syz.4.1376'. [ 312.475828][T12571] netlink: 292 bytes leftover after parsing attributes in process `syz.4.1376'. [ 313.041700][ T5636] udevd[5636]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 313.109024][T12602] batman_adv: batadv0: Adding interface: syzkaller0 [ 313.109050][T12602] batman_adv: batadv0: Interface activated: syzkaller0 [ 313.638653][T12621] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1386'. [ 313.816340][T12621] bond4: option lacp_active: invalid value (5) [ 313.838285][T12621] bond4 (unregistering): Released all slaves [ 314.011506][T12628] dummy0: entered promiscuous mode [ 314.062261][T12628] dummy0: left promiscuous mode [ 314.342380][T12647] ip_tables: iptables: counters copy to user failed while replacing table [ 314.440204][ C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 314.552455][T12660] batman_adv: batadv0: Adding interface: veth0 [ 314.552473][T12660] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 314.552506][T12660] batman_adv: batadv0: Interface activated: veth0 [ 314.625230][T12660] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 314.625258][T12660] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 314.652397][T12660] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 314.652421][T12660] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 314.670173][T12660] batman_adv: batadv0: Interface deactivated: veth0 [ 314.670230][T12660] batman_adv: batadv0: Removing interface: veth0 [ 314.681388][T12651] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1393'. [ 314.759731][T12651] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1393'. [ 314.774496][T12651] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1393'. [ 314.774781][T12651] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1393'. [ 316.229195][T12734] sctp: [Deprecated]: syz.3.1409 (pid 12734) Use of int in max_burst socket option deprecated. [ 316.229195][T12734] Use struct sctp_assoc_value instead [ 316.294305][T12733] tipc: Enabled bearer , priority 20 [ 316.656338][T12739] __nla_validate_parse: 62 callbacks suppressed [ 316.656361][T12739] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1411'. [ 316.656377][T12739] The dccp option matching is deprecated and scheduled to be removed in 2027. [ 316.656377][T12739] Please contact the netfilter-devel mailing list or update your nftables rules. [ 316.868230][T12759] Bluetooth: ISO socket layer initialized [ 317.242123][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.400483][ T7426] tipc: Node number set to 2281277330 [ 317.725780][T12783] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 317.785647][T12783] x_tables: duplicate underflow at hook 1 [ 318.028543][T12794] netdevsim0 speed is unknown, defaulting to 1000 [ 318.121120][T12799] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1420'. [ 318.400860][T12807] netlink: 3952 bytes leftover after parsing attributes in process `syz.0.1422'. [ 318.509133][T12808] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1422'. [ 318.669394][T12807] batman_adv: batadv0: Removing interface: vlan2 [ 318.834542][T12826] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1427'. [ 318.944170][T12832] netlink: 'syz.2.1427': attribute type 10 has an invalid length. [ 318.944196][T12832] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1427'. [ 318.947464][T12830] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1426'. [ 318.947606][T12830] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1426'. [ 319.322077][T12842] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1430'. [ 319.322109][T12842] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1430'. [ 319.334562][T12843] TCP: tcp_parse_options: Illegal window scaling value 81 > 14 received [ 319.746865][T12863] netlink: 'syz.3.1432': attribute type 1 has an invalid length. [ 319.845891][ T6739] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 320.096828][T12877] netlink: 'syz.3.1435': attribute type 1 has an invalid length. [ 320.187958][T12873] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 321.245086][T12871] kthread_run failed with err -4 [ 321.447198][T12919] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 321.447239][T12919] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 321.579312][T12919] can: request_module (can-proto-3) failed. [ 321.588082][T12921] smbdirect: ib_dev[syz2] removed [ 321.853969][T12942] __nla_validate_parse: 7 callbacks suppressed [ 321.853991][T12942] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1448'. [ 322.361123][ C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 322.535346][T12967] dummy0: entered allmulticast mode [ 322.535620][T12967] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 322.730972][T12971] ip6gre1: entered promiscuous mode [ 322.730999][T12971] ip6gre1: entered allmulticast mode [ 322.899617][T12973] smbdirect: ib_dev[s`z1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 322.899663][T12973] smbdirect: ib_dev[s`z1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 322.899707][T12973] smbdirect: ib_dev[s`z1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 323.000910][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 323.045149][T12973] infiniband s`z1: RDMA CMA: cma_listen_on_dev, error -98 [ 323.603784][T13002] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1463'. [ 324.053327][T13002] virtio_blk virtio4: 1/0/0 default/read/poll queues [ 324.075947][T13002] virtio_blk virtio4: [vda] 262144 512-byte logical blocks (134 MB/128 MiB) [ 324.562808][T13038] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1470'. [ 324.651973][T13043] netlink: 'syz.0.1471': attribute type 1 has an invalid length. [ 325.173535][T13053] siw: device registration error -23 [ 325.270514][T13070] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1476'. [ 325.647108][T13078] netlink: 'syz.0.1477': attribute type 10 has an invalid length. [ 325.701602][T13078] team0 (unregistering): left allmulticast mode [ 325.701626][T13078] team_slave_0: left allmulticast mode [ 325.701644][T13078] team_slave_1: left allmulticast mode [ 325.701684][T13078] team0 (unregistering): left promiscuous mode [ 325.701698][T13078] team_slave_0: left promiscuous mode [ 325.701960][T13078] team_slave_1: left promiscuous mode [ 325.702159][T13078] bridge1: left promiscuous mode [ 325.702476][T13078] bridge0: port 3(team0) entered disabled state [ 325.883343][T13085] netlink: 'syz.2.1479': attribute type 1 has an invalid length. [ 325.883512][T13085] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1479'. [ 326.435787][T13078] team0 (unregistering): Port device team_slave_0 removed [ 326.475968][T13078] team0 (unregistering): Port device team_slave_1 removed [ 326.516450][T13113] xt_LOG: prefix is not null-terminated [ 326.533003][T13078] team0 (unregistering): Port device bridge1 removed [ 327.018415][T13135] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1488'. [ 327.064900][T13135] ip6tnl4: entered allmulticast mode [ 327.096653][T13139] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1490'. [ 327.405775][T13154] ip6gre1: entered allmulticast mode [ 327.658057][T13162] netlink: 'syz.4.1494': attribute type 1 has an invalid length. [ 327.658078][T13162] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1494'. [ 328.008034][T13175] tc_dump_action: action bad kind [ 328.049520][T13180] netlink: 'syz.2.1496': attribute type 8 has an invalid length. [ 328.049545][T13180] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1496'. [ 328.092255][T13179] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 328.092996][T13179] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 328.095667][T13179] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 329.006000][T13097] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 329.699618][ T6730] IPVS: starting estimator thread 0... [ 329.711238][T13247] ip_tables: iptables: counters copy to user failed while replacing table [ 329.712267][T13247] IPVS: sed: FWM 3 0x00000003 - no destination available [ 329.712425][T13247] IPVS: sed: FWM 3 0x00000003 - no destination available [ 329.712623][ C1] IPVS: sed: FWM 3 0x00000003 - no destination available [ 329.712891][ C1] IPVS: sed: FWM 3 0x00000003 - no destination available [ 329.790112][T13249] IPVS: using max 26 ests per chain, 62400 per kthread [ 329.857611][T13257] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1511'. [ 330.329268][T13282] ip_tables: iptables: counters copy to user failed while replacing table [ 331.128613][T13315] netlink: 'syz.2.1522': attribute type 3 has an invalid length. [ 331.520658][T13329] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1526'. [ 331.527474][T13329] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1526'. [ 331.527730][T13329] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1526'. [ 331.527981][T13329] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1526'. [ 331.528264][T13329] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1526'. [ 332.083226][T13360] __nla_validate_parse: 30 callbacks suppressed [ 332.083250][T13360] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1530'. [ 332.215411][T13369] netlink: 'syz.4.1535': attribute type 39 has an invalid length. [ 332.302084][T13376] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1536'. [ 332.302120][T13376] netlink: 'syz.3.1536': attribute type 30 has an invalid length. [ 332.302775][T13377] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1536'. [ 332.302803][T13377] netlink: 'syz.3.1536': attribute type 30 has an invalid length. [ 332.345871][T13376] vxlan2: entered promiscuous mode [ 332.345896][T13376] vxlan2: entered allmulticast mode [ 332.363464][T13379] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1536'. [ 332.363501][T13379] netlink: 'syz.3.1536': attribute type 30 has an invalid length. [ 332.396911][T13377] vxlan2: entered promiscuous mode [ 332.396936][T13377] vxlan2: entered allmulticast mode [ 332.576932][T13379] vxlan2: entered promiscuous mode [ 332.576960][T13379] vxlan2: entered allmulticast mode [ 333.557334][T13412] nftables ruleset with unbound chain [ 333.838281][T13426] netlink: 'syz.1.1552': attribute type 322 has an invalid length. [ 334.120735][T13441] xt_hashlimit: size too large, truncated to 1048576 [ 334.174496][T13447] xt_hashlimit: size too large, truncated to 1048576 [ 334.631749][T13455] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1557'. [ 334.631781][T13455] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1557'. [ 334.631810][T13455] netlink: 'syz.2.1557': attribute type 18 has an invalid length. [ 334.746757][ T9746] netdevsim netdevsim2 netdevsim0: set [0, 1] type 1 family 0 port 4352 - 0 [ 334.756373][ T12] netdevsim netdevsim2 netdevsim1: set [0, 1] type 1 family 0 port 4352 - 0 [ 334.756421][ T12] netdevsim netdevsim2 netdevsim2: set [0, 1] type 1 family 0 port 4352 - 0 [ 334.756455][ T12] netdevsim netdevsim2 netdevsim3: set [0, 1] type 1 family 0 port 4352 - 0 [ 335.375213][T13488] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1562'. [ 335.379141][T13467] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1564'. [ 335.778628][T13507] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1569'. [ 335.902564][T13507] 0: reclassify loop, rule prio 0, protocol 03 [ 335.975796][T13513] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1571'. [ 336.841747][T13534] geneve1: entered promiscuous mode [ 336.848708][T13560] netlink: 'syz.0.1580': attribute type 12 has an invalid length. [ 336.848734][T13560] netlink: 'syz.0.1580': attribute type 29 has an invalid length. [ 337.080658][ C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 337.219307][T13574] netlink: 'syz.4.1583': attribute type 1 has an invalid length. [ 337.300639][T13574] 8021q: adding VLAN 0 to HW filter on device bond4 [ 337.323417][T13578] netlink: 'syz.4.1583': attribute type 10 has an invalid length. [ 337.323444][T13578] __nla_validate_parse: 8 callbacks suppressed [ 337.323457][T13578] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1583'. [ 337.506255][T13579] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 337.506276][T13579] IPv6: NLM_F_CREATE should be set when creating new route [ 337.506323][T13579] IPv6: NLM_F_CREATE should be set when creating new route [ 337.548422][T13575] bond4: (slave veth7): Enslaving as an active interface with a down link [ 337.548644][T13578] dummy0: entered promiscuous mode [ 337.619791][T13588] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 337.673748][T13587] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 337.976413][T13606] netlink: 92 bytes leftover after parsing attributes in process `syz.3.1589'. [ 338.239120][T13614] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1591'. [ 338.529048][T13625] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1592'. [ 339.139003][T13641] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1596'. [ 339.247650][T13647] netlink: 'syz.4.1599': attribute type 362 has an invalid length. [ 339.317372][T13648] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1599'. [ 339.704595][T13679] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1605'. [ 339.704633][T13679] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1605'. [ 340.024018][T13695] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1606'. [ 340.035480][T13695] dummy0: left allmulticast mode [ 340.036209][T13695] veth0_to_bond: left allmulticast mode [ 340.504937][T13695] netdevsim netdevsim1 netdevsim0: left allmulticast mode [ 340.621097][T13695] ipip0: left promiscuous mode [ 340.679116][T13695] ipvlan2: left allmulticast mode [ 340.679144][T13695] macvlan1: left allmulticast mode [ 340.698420][T13695] ip6gre2: left allmulticast mode [ 340.720863][T13695] bridge2: left allmulticast mode [ 340.765484][T13695] xfrm1: left allmulticast mode [ 341.266443][T13711] erspan0: entered promiscuous mode [ 341.276239][T13711] gre0: entered promiscuous mode [ 341.276265][T13711] gre0: entered allmulticast mode [ 341.356973][T13715] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1612'. [ 341.424715][T13719] netlink: 'syz.3.1610': attribute type 1 has an invalid length. [ 341.522624][T13719] 8021q: adding VLAN 0 to HW filter on device bond0 [ 341.722988][T13719] bond0: (slave geneve2): making interface the new active one [ 341.764055][T13719] bond0: (slave geneve2): Enslaving as an active interface with an up link [ 341.765048][T13721] netlink: 'syz.3.1610': attribute type 11 has an invalid length. [ 341.938546][T13742] veth0_to_bridge: entered promiscuous mode [ 341.938932][T13742] macvtap1: entered allmulticast mode [ 341.938951][T13742] veth0_to_bridge: entered allmulticast mode [ 341.981475][T13742] veth0_to_bridge: left allmulticast mode [ 341.981508][T13742] veth0_to_bridge: left promiscuous mode [ 342.510742][T13767] __nla_validate_parse: 1 callbacks suppressed [ 342.510764][T13767] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1621'. [ 342.758423][T13738] netlink: 'syz.0.1618': attribute type 29 has an invalid length. [ 343.206580][T13770] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1622'. [ 343.307339][T13772] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1623'. [ 343.539244][T13781] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1626'. [ 343.539499][T13781] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1626'. [ 343.567847][T13781] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1626'. [ 343.568212][T13781] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1626'. [ 343.568433][T13781] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1626'. [ 343.568655][T13781] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1626'. [ 343.568910][T13781] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1626'. [ 344.064321][T13801] syzkaller0: entered promiscuous mode [ 344.064346][T13801] syzkaller0: entered allmulticast mode [ 344.415465][T13808] netlink: Unknown conntrack attr (0) [ 344.415506][T13808] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 344.762977][T13823] nbd: must specify a size in bytes for the device [ 344.796966][T13826] netlink: 'syz.0.1638': attribute type 1 has an invalid length. [ 344.796996][T13826] netlink: 'syz.0.1638': attribute type 1 has an invalid length. [ 344.797012][T13826] netlink: 'syz.0.1638': attribute type 2 has an invalid length. [ 345.110114][T13835] netlink: 'syz.4.1640': attribute type 2 has an invalid length. [ 345.118027][T13835] netlink: 'syz.4.1640': attribute type 2 has an invalid length. [ 345.162075][T13840] netlink: 'syz.4.1640': attribute type 2 has an invalid length. [ 345.209722][T13828] netlink: 'syz.0.1639': attribute type 30 has an invalid length. [ 345.374965][T13839] macsec2: entered promiscuous mode [ 345.535277][T13856] nbd: must specify at least one socket [ 345.704361][T13847] macvtap1: entered allmulticast mode [ 345.704386][T13847] dummy0: entered allmulticast mode [ 345.706064][T13847] dummy0: entered promiscuous mode [ 345.755598][T13847] dummy0: left allmulticast mode [ 345.880308][T13854] macvtap1: entered allmulticast mode [ 345.880335][T13854] dummy0: entered allmulticast mode [ 345.889069][T13854] dummy0: left allmulticast mode [ 345.983454][ T30] dummy0: left promiscuous mode [ 346.078847][T13877] netlink: 'syz.2.1645': attribute type 1 has an invalid length. [ 346.678386][T13898] bond6: ARP target 9.0.0.0 is already present [ 346.678413][T13898] bond6: option arp_ip_target: invalid value (9) [ 346.702114][T13898] bond6 (unregistering): Released all slaves [ 346.917377][T13907] netlink: 'syz.3.1652': attribute type 1 has an invalid length. [ 347.111549][T13907] bond9: entered promiscuous mode [ 347.115953][T13907] 8021q: adding VLAN 0 to HW filter on device bond9 [ 347.124020][T13911] geneve1: entered promiscuous mode [ 347.163814][T13923] ip_tables: iptables: counters copy to user failed while replacing table [ 347.502014][T13935] xt_nfacct: accounting object `' does not exist [ 347.654647][T13935] digital: digital_start_poll: Unknown protocol [ 347.736570][T13954] __nla_validate_parse: 14 callbacks suppressed [ 347.736613][T13954] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1663'. [ 347.806352][T13954] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1663'. [ 347.946805][T13954] netlink: 144 bytes leftover after parsing attributes in process `syz.3.1663'. [ 348.265483][T13964] mac80211_hwsim hwsim5 wlan0: entered allmulticast mode [ 348.607796][T13987] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 348.608608][T13987] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 349.085464][T14004] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1673'. [ 349.155394][T14003] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1675'. [ 349.167744][T14003] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1675'. [ 349.167925][T14003] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1675'. [ 349.419771][T14000] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1674'. [ 349.561695][T14015] netlink: 'syz.2.1676': attribute type 21 has an invalid length. [ 349.619230][T14015] 0: reclassify loop, rule prio 0, protocol 03 [ 349.706609][T14019] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 349.752481][T14019] netlink: 260 bytes leftover after parsing attributes in process `syz.4.1679'. [ 349.958095][T14022] netlink: 260 bytes leftover after parsing attributes in process `syz.4.1679'. [ 350.289164][T14035] netlink: 'syz.3.1680': attribute type 1 has an invalid length. [ 350.331979][T14035] 8021q: adding VLAN 0 to HW filter on device bond10 [ 350.772231][ T9751] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 350.992346][T14055] netlink: 'syz.0.1686': attribute type 1 has an invalid length. [ 352.009546][T14082] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 352.009576][T14082] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 352.032755][T14082] batman_adv: batadv0: Interface deactivated: ip6gretap1 [ 352.032783][T14082] batman_adv: batadv0: Removing interface: ip6gretap1 [ 352.035566][T14082] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 352.035592][T14082] batman_adv: batadv0: Removing interface: syzkaller0 [ 352.254623][T14099] pim6reg: entered allmulticast mode [ 352.272396][T14095] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 352.292530][T14095] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 352.712430][T14122] netlink: 'syz.2.1697': attribute type 10 has an invalid length. [ 352.735811][T14122] 8021q: adding VLAN 0 to HW filter on device bond0 [ 352.750452][T14122] team0: Device bond0 is of different type [ 353.082031][ C0] ip6_tunnel:  xmit: Local address not yet configured! [ 353.151685][T14140] x_tables: duplicate underflow at hook 1 [ 353.407920][T14150] __nla_validate_parse: 11 callbacks suppressed [ 353.407944][T14150] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1702'. [ 354.202772][ T5634] Bluetooth: hci3: command 0x0406 tx timeout [ 354.262432][T14191] xt_NFQUEUE: number of queues (62232) out of range (got 67565) [ 354.534887][T14179] bond0: Caught tx_queue_len zero misconfig [ 354.663019][T14190] bridge0: port 2(bridge_slave_1) entered blocking state [ 354.663158][T14190] bridge0: port 2(bridge_slave_1) entered forwarding state [ 354.663747][T14190] bridge0: port 1(bridge_slave_0) entered blocking state [ 354.663902][T14190] bridge0: port 1(bridge_slave_0) entered forwarding state [ 354.808416][T14190] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 354.850438][T14190] 8021q: adding VLAN 0 to HW filter on device bond2 [ 354.918347][T14190] 8021q: adding VLAN 0 to HW filter on device bond3 [ 354.933121][T14190] 8021q: adding VLAN 0 to HW filter on device bond4 [ 355.036061][T14190] 8021q: adding VLAN 0 to HW filter on device bond5 [ 355.047449][T14194] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1711'. [ 355.047476][T14194] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1711'. [ 355.094265][T14205] syz.1.1714 (14205) used obsolete PPPIOCDETACH ioctl [ 355.401230][T14218] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1715'. [ 355.536249][T14226] syzkaller0: entered promiscuous mode [ 355.536274][T14226] syzkaller0: entered allmulticast mode [ 355.731967][T14238] netlink: 5 bytes leftover after parsing attributes in process `syz.4.1722'. [ 355.845794][T14245] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1722'. [ 355.875010][ T31] audit: type=1804 audit(1790691955.442:3): pid=14244 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.1719" name="/newroot/332/cgroup.controllers" dev="tmpfs" ino=1718 res=1 errno=0 [ 355.878716][ T31] audit: type=1800 audit(1790691955.442:4): pid=14244 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1719" name="cgroup.controllers" dev="tmpfs" ino=1718 res=0 errno=0 [ 355.997401][T14247] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1722'. [ 356.122466][T14249] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1722'. [ 356.216646][T14239] netlink: 'syz.1.1721': attribute type 3 has an invalid length. [ 356.217332][T14239] netlink: 'syz.1.1721': attribute type 3 has an invalid length. [ 356.592238][T14257] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1724'. [ 356.772734][T14268] netlink: 'syz.2.1727': attribute type 1 has an invalid length. [ 356.797223][T14269] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 356.947678][T14276] openvswitch: netlink: Missing key (keys=c0, expected=480) [ 357.508175][T14264] wg2 speed is unknown, defaulting to 1000 [ 357.542426][T14264] wg2 speed is unknown, defaulting to 1000 [ 357.572661][T14264] wg2 speed is unknown, defaulting to 1000 [ 357.669351][T14283] netlink: 'syz.1.1729': attribute type 1 has an invalid length. [ 357.719238][T14283] bond6: entered promiscuous mode [ 357.728065][T14283] 8021q: adding VLAN 0 to HW filter on device bond6 [ 358.335446][ T30] wg2 speed is unknown, defaulting to 1000 [ 358.346354][T14264] infiniband syz1: set active [ 358.346377][T14264] infiniband syz1: added wg2 [ 358.388738][T14305] netlink: 'syz.4.1733': attribute type 62 has an invalid length. [ 358.388766][T14305] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1733'. [ 358.459634][T14314] netlink: 5 bytes leftover after parsing attributes in process `syz.3.1736'. [ 358.486980][T14314] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1736'. [ 358.506947][T14314] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1736'. [ 358.533654][T14314] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1736'. [ 358.534966][T14264] smbdirect: ib_dev[syz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 358.535008][T14264] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 358.535054][T14264] smbdirect: ib_dev[syz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 358.764760][T14264] RDS/IB: syz1: added [ 358.771030][T14264] smc: adding ib device syz1 with port count 1 [ 358.771741][T14264] smc: ib device syz1 port 1 has no pnetid [ 358.776378][ T10] wg2 speed is unknown, defaulting to 1000 [ 358.799282][T14320] vxcan1: entered promiscuous mode [ 358.799307][T14320] vxcan1: entered allmulticast mode [ 358.829237][T14264] wg2 speed is unknown, defaulting to 1000 [ 359.150577][T14329] netlink: NAT flags may be given only when NAT range (SRC or DST) is also specified. [ 359.150615][T14329] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 359.957165][T14361] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1748'. [ 359.969003][T14264] wg2 speed is unknown, defaulting to 1000 [ 360.303125][T14367] syzkaller1: entered promiscuous mode [ 360.303153][T14367] syzkaller1: entered allmulticast mode [ 360.621589][T14388] netlink: 'syz.2.1754': attribute type 10 has an invalid length. [ 360.649285][T14394] netlink: NAT flags may be given only when NAT range (SRC or DST) is also specified. [ 360.649326][T14394] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 360.670674][T14388] team0 (unregistering): Port device wg1 removed [ 360.854042][ T31] audit: type=1804 audit(1790691960.422:5): pid=14400 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.1756" name="/newroot/339/cgroup.controllers" dev="tmpfs" ino=1757 res=1 errno=0 [ 360.858333][ T31] audit: type=1800 audit(1790691960.422:6): pid=14400 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1756" name="cgroup.controllers" dev="tmpfs" ino=1757 res=0 errno=0 [ 361.092811][T14264] wg2 speed is unknown, defaulting to 1000 [ 361.460249][T14264] wg2 speed is unknown, defaulting to 1000 [ 361.557538][T14407] netlink: 'syz.3.1758': attribute type 3 has an invalid length. [ 361.557760][T14407] netlink: 'syz.3.1758': attribute type 3 has an invalid length. [ 361.758503][T14412] syzkaller0: left promiscuous mode [ 361.758527][T14412] syzkaller0: left allmulticast mode [ 361.989283][T14264] wg2 speed is unknown, defaulting to 1000 [ 362.657439][T14422] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1762'. [ 362.657492][T14422] netlink: 312 bytes leftover after parsing attributes in process `syz.0.1762'. [ 362.657512][T14422] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1762'. [ 362.791802][T14428] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 363.266619][T14375] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 363.509034][T14459] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1767'. [ 363.509084][T14459] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1767'. [ 363.554910][T14461] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1768'. [ 363.554938][T14461] nbd: must specify at least one socket [ 363.763395][T14471] siw: device registration error -23 [ 363.915191][T14480] IPVS: set_ctl: invalid protocol: 60 10.1.1.1:20003 [ 364.496614][T14498] bridge0: port 2(bridge_slave_1) entered disabled state [ 364.496884][T14498] bridge0: port 1(bridge_slave_0) entered disabled state [ 364.549264][T14509] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1778'. [ 364.860595][T14510] sch_tbf: burst 0 is lower than device veth9 mtu (1514) ! [ 364.880257][ T6177] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 4352 - 0 [ 364.880297][ T6177] netdevsim netdevsim4 netdevsim0: unset [0, 1] type 1 family 0 port 8472 - 0 [ 364.880325][ T6177] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.880552][ T6177] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 4352 - 0 [ 364.880582][ T6177] netdevsim netdevsim4 netdevsim1: unset [0, 1] type 1 family 0 port 8472 - 0 [ 364.880610][ T6177] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.880645][ T6177] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 4352 - 0 [ 364.880669][ T6177] netdevsim netdevsim4 netdevsim2: unset [0, 1] type 1 family 0 port 8472 - 0 [ 364.880695][ T6177] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.880728][ T6177] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 4352 - 0 [ 364.880754][ T6177] netdevsim netdevsim4 netdevsim3: unset [0, 1] type 1 family 0 port 8472 - 0 [ 364.880779][ T6177] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.036843][T14523] netlink: 27 bytes leftover after parsing attributes in process `syz.4.1781'. [ 365.167961][T14528] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1782'. [ 366.977065][T14483] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 367.336790][T14574] netlink: 220 bytes leftover after parsing attributes in process `syz.1.1787'. [ 367.370942][T14572] syzkaller0: entered promiscuous mode [ 367.370967][T14572] syzkaller0: entered allmulticast mode [ 367.394620][T14577] netlink: 'syz.3.1788': attribute type 11 has an invalid length. [ 367.442511][T14579] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1789'. [ 367.503933][T14583] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1789'. [ 367.537496][T14577] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1788'. [ 367.595514][T14580] 8021q: adding VLAN 0 to HW filter on device .` [ 367.844498][T14580] 8021q: adding VLAN 0 to HW filter on device bond2 [ 367.871317][T14580] 8021q: adding VLAN 0 to HW filter on device bond5 [ 367.912137][T14580] A link change request failed with some changes committed already. Interface veth1_to_bod may have been left with an inconsistent configuration, please check. [ 368.176429][ T6177] bond7: (slave veth5): link status definitely up, 10000 Mbps full duplex [ 368.194336][ T6177] bond7: (slave veth5): making interface the new active one [ 368.251760][ T6177] bond7: active interface up! [ 368.419448][T14596] macsec1: entered promiscuous mode [ 368.496395][ T6733] bond5: (slave bond6): link status definitely down, disabling slave [ 368.497251][ T6733] bond5: (slave gretap2): making interface the new active one [ 368.702037][T14594] tipc: Enabled bearer , priority 0 [ 370.921131][T14604] syzkaller0: entered promiscuous mode [ 370.921160][T14604] syzkaller0: entered allmulticast mode [ 370.947439][T14593] tipc: Resetting bearer [ 370.990059][T14593] tipc: Disabling bearer [ 371.070354][ T6736] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 371.070403][ T6736] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 371.131090][ T6736] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 371.131131][ T6736] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 371.131264][ T6736] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 371.131293][ T6736] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 371.131329][ T6736] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 371.131357][ T6736] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 371.372794][T14667] __nla_validate_parse: 1 callbacks suppressed [ 371.372846][T14667] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1803'. [ 371.373702][T14667] netlink: 'syz.1.1803': attribute type 4 has an invalid length. [ 371.379617][T14667] netlink: 'syz.1.1803': attribute type 4 has an invalid length. [ 371.426674][T14667] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1803'. [ 371.441379][T14667] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1803'. [ 371.493387][T14671] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1805'. [ 371.653726][T14671] batadv0: entered promiscuous mode [ 371.654050][T14671] macvtap1: entered promiscuous mode [ 371.654383][T14671] macvtap1: entered allmulticast mode [ 371.654409][T14671] batadv0: entered allmulticast mode [ 371.656336][T14671] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 371.851946][T14685] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1807'. [ 371.985915][T14690] netlink: 'syz.4.1809': attribute type 1 has an invalid length. [ 371.985941][T14690] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1809'. [ 372.159547][T14700] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1812'. [ 372.235322][T14702] syzkaller1: entered promiscuous mode [ 372.235357][T14702] syzkaller1: entered allmulticast mode [ 372.478395][T14706] syzkaller0: entered promiscuous mode [ 372.478423][T14706] syzkaller0: entered allmulticast mode [ 372.521769][T14706] tipc: Enabled bearer , priority 0 [ 372.571520][T14705] tipc: Resetting bearer [ 372.702333][T14705] tipc: Disabling bearer [ 372.748059][T14714] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1817'. [ 372.962590][T14712] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 373.112210][T14722] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1819'. [ 373.112236][T14722] netlink: 356 bytes leftover after parsing attributes in process `syz.1.1819'. [ 373.438537][T14739] bridge0: port 1(bridge_slave_0) entered blocking state [ 373.438664][T14739] bridge0: port 1(bridge_slave_0) entered disabled state [ 373.438844][T14739] bridge_slave_0: entered allmulticast mode [ 373.471428][T14739] bridge_slave_0: entered promiscuous mode [ 373.755180][T14752] netlink: 'syz.2.1828': attribute type 10 has an invalid length. [ 373.812675][T14752] netlink: 'syz.2.1828': attribute type 10 has an invalid length. [ 373.839508][T14752] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 373.855045][T14752] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 373.963449][T14757] mac80211_hwsim hwsim2 syzkaller1: entered promiscuous mode [ 373.963516][T14757] mac80211_hwsim hwsim2 syzkaller1: entered allmulticast mode [ 374.816898][T14754] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 375.487549][T14813] Cannot find map_set index 4 as target [ 376.050963][T14826] IPv6: NLM_F_CREATE should be specified when creating new route [ 376.214443][T14830] netdevsim netdevsim4: Firmware load for '..' refused, path contains '..' component [ 376.504192][T14848] 8021q: adding VLAN 0 to HW filter on device macvlan1 [ 376.526249][T14848] bond2: (slave macvlan1): making interface the new active one [ 376.533732][T14848] bond2: (slave macvlan1): Enslaving as an active interface with an up link [ 376.575884][T14850] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 376.658532][T14853] batman_adv: batadv0: Adding interface: macvtap1 [ 376.658553][T14853] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 376.658581][T14853] batman_adv: batadv0: Not using interface macvtap1 (retrying later): interface not active [ 376.823246][T14853] batman_adv: batadv0: Removing interface: macvtap1 [ 376.915691][T14857] __nla_validate_parse: 12 callbacks suppressed [ 376.915717][T14857] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1856'. [ 376.916309][T14857] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1856'. [ 376.919506][T14865] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1857'. [ 377.046798][T14865] netlink: 'syz.4.1857': attribute type 10 has an invalid length. [ 377.248527][T14869] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 377.891450][T14876] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1861'. [ 378.103640][T14905] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1863'. [ 378.180257][T14905] netlink: 'syz.3.1863': attribute type 1 has an invalid length. [ 378.516574][T14916] ip6erspan1: entered allmulticast mode [ 378.606227][T14921] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1867'. [ 378.664808][T14921] ip_tables: iptables: counters copy to user failed while replacing table [ 378.692428][T14921] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1867'. [ 378.759648][T14929] netlink: 'syz.0.1869': attribute type 1 has an invalid length. [ 378.843742][T14929] bond6: entered promiscuous mode [ 378.844302][T14929] 8021q: adding VLAN 0 to HW filter on device bond6 [ 378.873496][T14930] ipvlan2: entered allmulticast mode [ 378.873519][T14930] bond6: entered allmulticast mode [ 378.929430][T14936] netlink: 'syz.1.1870': attribute type 4 has an invalid length. [ 378.929454][T14936] netlink: 'syz.1.1870': attribute type 3 has an invalid length. [ 379.088442][T14945] dummy0: entered allmulticast mode [ 379.180628][T14949] lo: entered allmulticast mode [ 379.290439][T14954] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1874'. [ 379.941469][T14943] lo: left allmulticast mode [ 379.994055][T14974] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1878'. [ 379.997620][T14974] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1878'. [ 382.153915][T14943] dummy0: left allmulticast mode [ 382.190313][T14977] mac80211_hwsim hwsim2 syzkaller1: left promiscuous mode [ 382.190361][T14977] mac80211_hwsim hwsim2 syzkaller1: left allmulticast mode [ 382.400769][T14992] netlink: 1404 bytes leftover after parsing attributes in process `syz.1.1881'. [ 382.530507][T14996] netlink: 'syz.2.1883': attribute type 2 has an invalid length. [ 382.566890][T14996] sysfs: cannot create duplicate filename '/class/ieee80211/.P'G!DES' [ 382.566937][T14996] CPU: 0 UID: 0 PID: 14996 Comm: syz.2.1883 Not tainted syzkaller #0 PREEMPT(full) [ 382.566964][T14996] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 382.566988][T14996] Call Trace: [ 382.567077][T14996] [ 382.567148][T14996] dump_stack_lvl+0xe8/0x150 [ 382.567304][T14996] sysfs_warn_dup+0x8e/0xa0 [ 382.567378][T14996] sysfs_do_create_link_sd+0xc0/0x110 [ 382.567420][T14996] device_add_class_symlinks+0x1cf/0x240 [ 382.567518][T14996] device_add+0x467/0xb80 [ 382.567548][T14996] wiphy_register+0x1fc8/0x2ff0 [ 382.567696][T14996] ? __pfx_wiphy_register+0x10/0x10 [ 382.567754][T14996] ? __pfx_netdev_run_todo+0x10/0x10 [ 382.567875][T14996] ? minstrel_ht_alloc+0x6e0/0x7e0 [ 382.567963][T14996] ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0 [ 382.568027][T14996] ieee80211_register_hw+0x3d7c/0x4b40 [ 382.568124][T14996] ? ieee80211_register_hw+0x1a31/0x4b40 [ 382.568187][T14996] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 382.568223][T14996] ? __asan_memset+0x22/0x50 [ 382.568268][T14996] ? __hrtimer_setup+0x1b7/0x260 [ 382.568322][T14996] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 382.568444][T14996] mac80211_hwsim_new_radio+0x3264/0x5720 [ 382.568512][T14996] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 382.568541][T14996] ? kstrndup+0xbd/0x160 [ 382.568582][T14996] ? kstrndup+0xbd/0x160 [ 382.568610][T14996] hwsim_new_radio_nl+0xd8b/0xf90 [ 382.568659][T14996] genl_family_rcv_msg_doit+0x233/0x340 [ 382.568755][T14996] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 382.568805][T14996] ? bpf_lsm_capable+0x9/0x20 [ 382.568837][T14996] ? security_capable+0x7e/0x2c0 [ 382.568934][T14996] genl_rcv_msg+0x614/0x7a0 [ 382.568974][T14996] ? __pfx_genl_rcv_msg+0x10/0x10 [ 382.569005][T14996] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 382.569052][T14996] netlink_rcv_skb+0x226/0x4a0 [ 382.569090][T14996] ? __pfx_genl_rcv_msg+0x10/0x10 [ 382.569123][T14996] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 382.569168][T14996] ? down_read+0x2be/0x330 [ 382.569283][T14996] genl_rcv+0x28/0x40 [ 382.569311][T14996] netlink_unicast+0x7bd/0x940 [ 382.569391][T14996] netlink_sendmsg+0x813/0xb40 [ 382.569427][T14996] ? __pfx_netlink_sendmsg+0x10/0x10 [ 382.569463][T14996] ? apparmor_socket_sendmsg+0x98/0x360 [ 382.569519][T14996] ? __pfx_netlink_sendmsg+0x10/0x10 [ 382.569542][T14996] sock_sendmsg_nosec+0x13a/0x180 [ 382.569598][T14996] ____sys_sendmsg+0x54e/0x850 [ 382.569662][T14996] ? __pfx_____sys_sendmsg+0x10/0x10 [ 382.569705][T14996] ? import_iovec+0x73/0xa0 [ 382.569782][T14996] ___sys_sendmsg+0x2a5/0x360 [ 382.569816][T14996] ? __lock_acquire+0x747/0x2de0 [ 382.569867][T14996] ? __pfx____sys_sendmsg+0x10/0x10 [ 382.569906][T14996] ? futex_wait+0x2a2/0x390 [ 382.569976][T14996] ? __fget_files+0x2a/0x420 [ 382.570025][T14996] ? __fget_files+0x3a2/0x420 [ 382.570069][T14996] __x64_sys_sendmsg+0x1b1/0x290 [ 382.570105][T14996] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 382.570166][T14996] do_syscall_64+0x166/0x520 [ 382.570301][T14996] ? trace_irq_disable+0x3b/0x140 [ 382.570331][T14996] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 382.570374][T14996] ? clear_bhb_loop+0x70/0xc0 [ 382.570398][T14996] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 382.570417][T14996] RIP: 0033:0x7f0dc819e159 [ 382.570469][T14996] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 382.570486][T14996] RSP: 002b:00007f0dc9085028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 382.570535][T14996] RAX: ffffffffffffffda RBX: 00007f0dc8425fa0 RCX: 00007f0dc819e159 [ 382.570549][T14996] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000007 [ 382.570561][T14996] RBP: 00007f0dc823506b R08: 0000000000000000 R09: 0000000000000000 [ 382.570573][T14996] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 382.570583][T14996] R13: 00007f0dc8426038 R14: 00007f0dc8425fa0 R15: 00007fff0b0fe878 [ 382.570614][T14996] [ 382.676382][T15001] netlink: 'syz.0.1885': attribute type 15 has an invalid length. [ 382.676452][T15001] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1885'. [ 383.044065][T15008] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 383.098074][ T6733] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 383.098099][ T6733] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 383.474170][T15025] bond7: Removing last ns target with arp_interval on [ 383.771649][T15047] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1894'. [ 384.032969][T15055] tipc: Enabled bearer , priority 2 [ 384.463857][T15080] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1900'. [ 384.827939][T15091] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1901'. [ 385.335095][ T9] tipc: Node number set to 2789913054 [ 385.560585][ T5634] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 385.976733][T15128] bond6: Removing last ns target with arp_interval on [ 386.212578][T15132] ipvlan2: entered promiscuous mode [ 386.296067][T15132] team0: Device ipvlan2 failed to register rx_handler [ 386.343319][T15149] Bluetooth: MGMT ver 1.23 [ 386.627516][T15157] netlink: NAT attribute has 8 unknown bytes [ 386.627571][T15157] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 386.628014][T15157] netlink: NAT attribute has 8 unknown bytes [ 386.628044][T15157] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 386.628461][T15157] netlink: NAT attribute has 8 unknown bytes [ 386.628492][T15157] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 386.628917][T15157] netlink: NAT attribute has 8 unknown bytes [ 386.641864][T15157] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 386.643198][T15157] netlink: NAT attribute has 8 unknown bytes [ 386.643281][T15157] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 387.394751][T15185] team0: Port device dummy0 removed [ 387.395320][T15185] bridge_slave_0: left allmulticast mode [ 387.395345][T15185] bridge_slave_0: left promiscuous mode [ 387.395582][T15185] bridge0: port 1(bridge_slave_0) entered disabled state [ 387.442981][T15185] .`: (slave bond_slave_0): Releasing backup interface [ 387.468622][T15185] team0: Port device team_slave_1 removed [ 387.492995][T15187] netlink: 'syz.1.1921': attribute type 1 has an invalid length. [ 387.493022][T15187] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1921'. [ 387.555534][T15185] team0: Mode changed to "loadbalance" [ 387.670124][T15200] IPVS: length: 213 != 24 [ 387.947300][T15213] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1923'. [ 387.959293][T15213] netlink: 'syz.2.1923': attribute type 5 has an invalid length. [ 387.978724][T15211] smc: removing ib device syz1 [ 388.282845][T15211] smbdirect: ib_dev[syz1] removed [ 388.503641][T15231] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1926'. [ 388.598734][T15231] netlink: 'syz.0.1926': attribute type 4 has an invalid length. [ 388.598761][T15231] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1926'. [ 388.619026][T15236] netlink: 'syz.4.1930': attribute type 5 has an invalid length. [ 389.073981][T15244] xt_hashlimit: size too large, truncated to 1048576 [ 389.074246][T15244] xt_hashlimit: max too large, truncated to 1048576 [ 390.338768][T15266] netlink: 'syz.3.1937': attribute type 1 has an invalid length. [ 390.406437][T15269] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1936'. [ 390.637907][T15265] syzkaller1: entered promiscuous mode [ 390.637936][T15265] syzkaller1: entered allmulticast mode [ 391.133499][T15271] bond13: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 391.182969][T15271] bond13 (unregistering): Released all slaves [ 391.747287][T15277] bond12: (slave bridge6): making interface the new active one [ 391.747911][T15277] bond12: (slave bridge6): Enslaving as an active interface with an up link [ 391.916478][T15282] syzkaller0: entered promiscuous mode [ 391.916508][T15282] syzkaller0: entered allmulticast mode [ 392.256205][T15287] net_ratelimit: 3 callbacks suppressed [ 392.256317][T15287] ip_tables: iptables: counters copy to user failed while replacing table [ 392.578158][T15285] xt_CT: No such helper "syz1" [ 392.623839][T15297] xt_hashlimit: size too large, truncated to 1048576 [ 392.776909][T15301] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1943'. [ 392.884630][T15305] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1943'. [ 392.884657][T15305] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1943'. [ 393.169763][T15305] veth11: entered allmulticast mode [ 393.197353][T15305] bond13: (slave veth11): Enslaving as an active interface with an up link [ 393.221903][T15302] syzkaller1: entered promiscuous mode [ 393.221932][T15302] syzkaller1: entered allmulticast mode [ 393.560639][T15314] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 393.719766][T15322] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 393.753133][T15329] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1947'. [ 393.962940][T15328] netlink: 'syz.3.1947': attribute type 1 has an invalid length. [ 393.962967][T15328] netlink: 200 bytes leftover after parsing attributes in process `syz.3.1947'. [ 394.083153][T15330] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1947'. [ 394.088374][T15331] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1947'. [ 394.099079][T15330] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1947'. [ 394.937678][T15350] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1953'. [ 395.811418][T15338] RDS: rds_bind could not find a transport for 2001::2, load rds_tcp or rds_rdma? [ 396.164293][T15369] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1958'. [ 396.466839][T15376] netlink: NAT attribute type 5 has unexpected length (0 != 2) [ 396.466881][T15376] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 396.485648][T15377] netlink: 'syz.4.1959': attribute type 39 has an invalid length. [ 397.916823][T15411] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1969'. [ 397.919719][T15405] bridge_slave_0: left allmulticast mode [ 397.919747][T15405] bridge_slave_0: left promiscuous mode [ 397.920650][T15405] bridge0: port 1(bridge_slave_0) entered disabled state [ 397.992455][T15405] bridge_slave_1: left allmulticast mode [ 397.992483][T15405] bridge_slave_1: left promiscuous mode [ 397.992727][T15405] bridge0: port 2(bridge_slave_1) entered disabled state [ 398.092383][T15405] bond0: (slave bond_slave_0): Releasing backup interface [ 398.152978][T15405] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 398.153008][T15405] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 398.299035][T15405] batman_adv: batadv0: Interface deactivated: gretap1 [ 398.299064][T15405] batman_adv: batadv0: Removing interface: gretap1 [ 398.495321][T15422] netlink: 'syz.1.1969': attribute type 1 has an invalid length. [ 398.495349][T15422] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1969'. [ 398.495366][T15422] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1969'. [ 398.868530][T15432] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1972'. [ 399.339739][T15448] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 399.366617][T15448] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 399.379291][T15449] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1979'. [ 399.551939][T15450] tc_dump_action: action bad kind [ 399.723611][T15467] x_tables: duplicate underflow at hook 1 [ 400.373071][T15486] ip6gretap2: entered allmulticast mode [ 400.449758][T15495] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1986'. [ 400.781629][T15504] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 401.446845][T15521] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1993'. [ 401.556723][ T31] audit: type=1107 audit(1790692001.122:7): pid=15520 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='f 7' [ 401.991044][T15529] macsec2: entered allmulticast mode [ 401.991204][T15529] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 401.995570][T15529] 8021q: adding VLAN 0 to HW filter on device macsec2 [ 402.104072][ T7420] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 402.305635][T15536] netlink: 'syz.4.1997': attribute type 16 has an invalid length. [ 402.305661][T15536] netlink: 'syz.4.1997': attribute type 17 has an invalid length. [ 402.382601][T15536] 8021q: adding VLAN 0 to HW filter on device bond0 [ 402.408351][T15536] dummy0: left promiscuous mode [ 402.488643][T15538] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1997'. [ 402.589215][T15536] bond_slave_0: entered promiscuous mode [ 402.605889][T15536] bond_slave_1: entered promiscuous mode [ 402.721470][T15536] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 402.798728][T15536] veth0_macvtap: left promiscuous mode [ 402.818611][T15536] veth0_macvtap: entered promiscuous mode [ 402.959710][T15536] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 402.968625][T15536] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 402.979202][T15536] netdevsim netdevsim4 netdevsim1: entered promiscuous mode [ 402.981615][T15536] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 402.998700][T15536] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 403.165884][T15536] bridge2: left promiscuous mode [ 403.178126][T15536] ip6gretap1: left allmulticast mode [ 403.208842][T15536] erspan1: left promiscuous mode [ 403.225395][T15536] ipip0: left promiscuous mode [ 403.245349][T15536] 8021q: adding VLAN 0 to HW filter on device bond1 [ 403.264035][T15536] syzkaller0: left promiscuous mode [ 403.264060][T15536] syzkaller0: left allmulticast mode [ 403.294376][T15536] 8021q: adding VLAN 0 to HW filter on device bond2 [ 403.319450][T15536] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 403.376452][T15536] bond3: left promiscuous mode [ 403.376827][T15536] 8021q: adding VLAN 0 to HW filter on device bond3 [ 403.426498][T15536] ip6tnl3: left allmulticast mode [ 403.465662][T15536] ip6gre1: left promiscuous mode [ 403.479757][T15536] ip6gre1: left allmulticast mode [ 403.497896][T15536] ip6tnl4: left allmulticast mode [ 403.522005][T15536] 8021q: adding VLAN 0 to HW filter on device bond4 [ 403.555001][T15536] 8021q: adding VLAN 0 to HW filter on device bond5 [ 403.584341][T15536] 8021q: adding VLAN 0 to HW filter on device bond6 [ 403.620524][ T6180] bridge0: port 1(bridge_slave_0) entered blocking state [ 403.620644][ T6180] bridge0: port 1(bridge_slave_0) entered listening state [ 403.657560][ T6180] bridge0: port 2(bridge_slave_1) entered blocking state [ 403.657669][ T6180] bridge0: port 2(bridge_slave_1) entered listening state [ 403.767285][T15553] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2000'. [ 403.853847][ T9751] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 403.854086][ T9751] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 403.868397][ T9751] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 403.893270][ T9751] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 403.893905][ T9751] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 4352 - 0 [ 403.893938][ T9751] netdevsim netdevsim4 netdevsim2: set [0, 1] type 1 family 0 port 8472 - 0 [ 403.893965][ T9751] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.915902][T14654] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 403.948190][T14654] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 404.001743][T14654] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 404.063722][ T9751] bond4: (slave veth7): link status definitely up, 10000 Mbps full duplex [ 404.064064][ T9751] bond4: (slave veth7): making interface the new active one [ 404.174656][ T9751] bond4: active interface up! [ 404.195859][T14655] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 404.198931][ T6736] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 404.199172][ T6736] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 404.342095][ T6730] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 4352 - 0 [ 404.342135][ T6730] netdevsim netdevsim4 netdevsim3: set [0, 1] type 1 family 0 port 8472 - 0 [ 404.342163][ T6730] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 404.472655][ T9751] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 4352 - 0 [ 404.472696][ T9751] netdevsim netdevsim4 netdevsim0: set [0, 1] type 1 family 0 port 8472 - 0 [ 404.472724][ T9751] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 404.480611][ T6730] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 4352 - 0 [ 404.480698][ T6730] netdevsim netdevsim4 netdevsim1: set [0, 1] type 1 family 0 port 8472 - 0 [ 404.480771][ T6730] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 404.739978][T15590] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 404.771104][T15589] netlink: 'syz.4.2007': attribute type 10 has an invalid length. [ 405.040069][ T29] rcu_tasks_wait_gp: rcu_tasks grace period number 29 (since boot) is 1029 jiffies old. [ 405.734143][T15608] tipc: Enabled bearer , priority 0 [ 405.739150][T15608] syzkaller0: entered promiscuous mode [ 405.739175][T15608] syzkaller0: entered allmulticast mode [ 406.056098][T15608] tipc: Resetting bearer [ 406.261029][T15607] tipc: Resetting bearer [ 406.380591][T15607] tipc: Disabling bearer [ 406.943249][T15610] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2010'. [ 407.309465][T15651] netlink: 'syz.0.2017': attribute type 4 has an invalid length. [ 407.309493][T15651] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2017'. [ 407.465829][T15653] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2020'. [ 407.912040][T15665] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2023'. [ 408.765301][T15695] vlan0: entered promiscuous mode [ 408.910983][T15697] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2031'. [ 409.108518][T15703] netlink: 'syz.0.2032': attribute type 30 has an invalid length. [ 410.098219][T15739] netlink: 'syz.1.2042': attribute type 30 has an invalid length. [ 410.788512][T15758] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2044'. [ 411.480899][ T206] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 411.480922][ T206] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 412.272324][T15799] geneve1: mtu greater than device maximum [ 412.342243][T15809] geneve1: mtu greater than device maximum [ 412.348909][T15762] SET target dimension over the limit! [ 412.387700][T15811] netlink: 'syz.2.2054': attribute type 1 has an invalid length. [ 412.387726][T15811] netlink: 756 bytes leftover after parsing attributes in process `syz.2.2054'. [ 412.486437][T15805] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2057'. [ 412.836208][T15826] netlink: 'syz.3.2058': attribute type 8 has an invalid length. [ 412.966690][T15822] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2058'. [ 413.343413][T15822] veth13: entered allmulticast mode [ 413.718689][T15855] sctp: [Deprecated]: syz.4.2063 (pid 15855) Use of int in maxseg socket option. [ 413.718689][T15855] Use struct sctp_assoc_value instead [ 414.252811][ C0] ================================================================== [ 414.252918][ C0] BUG: KASAN: double-free in rcu_free_sheaf+0x31/0x200 [ 414.252989][ C0] Free of addr ffff88807d063b00 by task kworker/0:15/14654 [ 414.253007][ C0] [ 414.253050][ C0] CPU: 0 UID: 0 PID: 14654 Comm: kworker/0:15 Not tainted syzkaller #0 PREEMPT(full) [ 414.253086][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 414.253102][ C0] Workqueue: events_power_efficient neigh_periodic_work [ 414.253192][ C0] Call Trace: [ 414.253202][ C0] [ 414.253212][ C0] dump_stack_lvl+0xe8/0x150 [ 414.253249][ C0] print_address_description+0x55/0x1e0 [ 414.253295][ C0] print_report+0x58/0x70 [ 414.253324][ C0] ? rcu_free_sheaf+0x31/0x200 [ 414.253347][ C0] kasan_report_invalid_free+0xea/0x110 [ 414.253380][ C0] ? rcu_free_sheaf+0x31/0x200 [ 414.253407][ C0] ? rcu_free_sheaf+0x31/0x200 [ 414.253431][ C0] __kasan_slab_pre_free+0x104/0x120 [ 414.253460][ C0] __rcu_free_sheaf_prepare+0x10a/0x2a0 [ 414.253494][ C0] ? rcu_core+0x8a8/0x1260 [ 414.253554][ C0] rcu_free_sheaf+0x31/0x200 [ 414.253580][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 414.253610][ C0] ? __pfx_rcu_free_sheaf+0x10/0x10 [ 414.253633][ C0] ? rcu_core+0x8a8/0x1260 [ 414.253658][ C0] rcu_core+0x926/0x1260 [ 414.253694][ C0] ? __pfx_rcu_core+0x10/0x10 [ 414.253720][ C0] ? net_tx_action+0x5bb/0xc30 [ 414.253758][ C0] handle_softirqs+0x226/0x860 [ 414.253816][ C0] ? do_softirq+0x77/0xd0 [ 414.253849][ C0] ? process_scheduled_works+0x97a/0x1630 [ 414.253888][ C0] ? process_scheduled_works+0xc3d/0x1630 [ 414.253919][ C0] do_softirq+0x77/0xd0 [ 414.253950][ C0] [ 414.253958][ C0] [ 414.253967][ C0] __local_bh_enable_ip+0x100/0x140 [ 414.253999][ C0] process_scheduled_works+0xc3d/0x1630 [ 414.254050][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 414.254086][ C0] ? assign_work+0x3cf/0x5d0 [ 414.254121][ C0] worker_thread+0xa47/0xfb0 [ 414.254162][ C0] ? __kthread_parkme+0x71/0x1f0 [ 414.254204][ C0] kthread+0x38b/0x480 [ 414.254228][ C0] ? __pfx_worker_thread+0x10/0x10 [ 414.254267][ C0] ? __pfx_kthread+0x10/0x10 [ 414.254291][ C0] ret_from_fork+0x514/0xb70 [ 414.254329][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 414.254352][ C0] ? __switch_to+0xc89/0x1420 [ 414.254397][ C0] ? __pfx_kthread+0x10/0x10 [ 414.254420][ C0] ret_from_fork_asm+0x1a/0x30 [ 414.254468][ C0] [ 414.254477][ C0] [ 414.254483][ C0] Allocated by task 6743: [ 414.254528][ C0] kasan_save_track+0x3e/0x80 [ 414.254553][ C0] __kasan_kmalloc+0x93/0xb0 [ 414.254577][ C0] __kmalloc_cache_noprof+0x321/0x600 [ 414.254598][ C0] hwsim_update_pib+0x7e/0x400 [ 414.254657][ C0] hwsim_set_promiscuous_mode+0x196/0x2e0 [ 414.254688][ C0] drv_set_promiscuous_mode+0x159/0x2e0 [ 414.254772][ C0] drv_start+0x4ea/0x1010 [ 414.254795][ C0] mac802154_scan_worker+0x8e6/0xe60 [ 414.254821][ C0] process_scheduled_works+0xc3d/0x1630 [ 414.254851][ C0] worker_thread+0xa47/0xfb0 [ 414.254880][ C0] kthread+0x38b/0x480 [ 414.254899][ C0] ret_from_fork+0x514/0xb70 [ 414.254917][ C0] ret_from_fork_asm+0x1a/0x30 [ 414.254951][ C0] [ 414.254956][ C0] Freed by task 15859: [ 414.254968][ C0] kasan_save_track+0x3e/0x80 [ 414.254989][ C0] kasan_save_free_info+0x40/0x50 [ 414.255022][ C0] __kasan_slab_free+0x5c/0x80 [ 414.255046][ C0] __rcu_free_sheaf_prepare+0x12d/0x2a0 [ 414.255074][ C0] rcu_free_sheaf+0x31/0x200 [ 414.255093][ C0] rcu_core+0x926/0x1260 [ 414.255115][ C0] handle_softirqs+0x226/0x860 [ 414.255142][ C0] __irq_exit_rcu+0xcb/0x220 [ 414.255170][ C0] irq_exit_rcu+0x9/0x30 [ 414.255195][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 414.255225][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 414.255249][ C0] [ 414.255255][ C0] The buggy address belongs to the object at ffff88807d063b00 [ 414.255255][ C0] which belongs to the cache kmalloc-64 of size 64 [ 414.255345][ C0] The buggy address is located 0 bytes inside of [ 414.255345][ C0] 64-byte region [ffff88807d063b00, ffff88807d063b40) [ 414.255393][ C0] [ 414.255399][ C0] The buggy address belongs to the physical page: [ 414.255420][ C0] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7d063 [ 414.255443][ C0] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 414.255471][ C0] page_type: f5(slab) [ 414.255493][ C0] raw: 00fff00000000000 ffff88801b0418c0 dead000000000100 dead000000000122 [ 414.255514][ C0] raw: 0000000000000000 0000000000200020 00000000f5000000 0000000000000000 [ 414.255528][ C0] page dumped because: kasan: bad access detected [ 414.255544][ C0] page_owner tracks the page as allocated [ 414.255554][ C0] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd2c40(GFP_NOFS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5264, tgid 5264 (S35iptables), ts 54494648611 [ 414.255592][ C0] post_alloc_hook+0x1f9/0x250 [ 414.255626][ C0] get_page_from_freelist+0x2209/0x2280 [ 414.255651][ C0] __alloc_frozen_pages_noprof+0x217/0x5a0 [ 414.255675][ C0] allocate_slab+0x7d/0x620 [ 414.255703][ C0] refill_objects+0x2d5/0x350 [ 414.255732][ C0] __pcs_replace_empty_main+0x2c8/0x6c0 [ 414.255760][ C0] __kmalloc_noprof+0x47b/0x720 [ 414.255780][ C0] tomoyo_supervisor+0xc53/0x1560 [ 414.255842][ C0] tomoyo_path_permission+0x262/0x3b0 [ 414.255890][ C0] tomoyo_path_perm+0x3f3/0x560 [ 414.255913][ C0] security_inode_getattr+0x12b/0x310 [ 414.255947][ C0] __x64_sys_newfstat+0x133/0x270 [ 414.255983][ C0] do_syscall_64+0x166/0x520 [ 414.256013][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 414.256035][ C0] page last free pid 0 tgid 0 ts 54152181602 stack trace: [ 414.256052][ C0] __free_frozen_pages+0xc93/0xd90 [ 414.256086][ C0] tlb_remove_table_rcu+0x85/0x100 [ 414.256115][ C0] rcu_core+0x926/0x1260 [ 414.256136][ C0] handle_softirqs+0x226/0x860 [ 414.256165][ C0] __irq_exit_rcu+0xcb/0x220 [ 414.256193][ C0] irq_exit_rcu+0x9/0x30 [ 414.256220][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 414.256248][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 414.256280][ C0] [ 414.256286][ C0] Memory state around the buggy address: [ 414.256329][ C0] ffff88807d063a00: 00 00 00 00 00 00 00 03 fc fc fc fc fc fc fc fc [ 414.256346][ C0] ffff88807d063a80: 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc [ 414.256363][ C0] >ffff88807d063b00: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 414.256375][ C0] ^ [ 414.256387][ C0] ffff88807d063b80: 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc [ 414.256403][ C0] ffff88807d063c00: 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc [ 414.256416][ C0] ================================================================== [ 414.256462][ C0] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 414.922689][ C0] CPU: 0 UID: 0 PID: 14654 Comm: kworker/0:15 Not tainted syzkaller #0 PREEMPT(full) [ 414.932269][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 414.942365][ C0] Workqueue: events_power_efficient neigh_periodic_work [ 414.949351][ C0] Call Trace: [ 414.952671][ C0] [ 414.955567][ C0] vpanic+0x56d/0xa60 [ 414.959587][ C0] ? rcu_is_watching+0x16/0xb0 [ 414.964466][ C0] ? __pfx_vpanic+0x10/0x10 [ 414.969006][ C0] panic+0xc5/0xd0 [ 414.972758][ C0] ? __pfx_panic+0x10/0x10 [ 414.977223][ C0] check_panic_on_warn+0x89/0xb0 [ 414.982216][ C0] end_report+0x73/0x170 [ 414.986497][ C0] ? rcu_free_sheaf+0x31/0x200 [ 414.991294][ C0] kasan_report_invalid_free+0xfa/0x110 [ 414.996895][ C0] ? rcu_free_sheaf+0x31/0x200 [ 415.001705][ C0] ? rcu_free_sheaf+0x31/0x200 [ 415.006493][ C0] __kasan_slab_pre_free+0x104/0x120 [ 415.011816][ C0] __rcu_free_sheaf_prepare+0x10a/0x2a0 [ 415.017408][ C0] ? rcu_core+0x8a8/0x1260 [ 415.021879][ C0] rcu_free_sheaf+0x31/0x200 [ 415.026508][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 415.032346][ C0] ? __pfx_rcu_free_sheaf+0x10/0x10 [ 415.037578][ C0] ? rcu_core+0x8a8/0x1260 [ 415.042057][ C0] rcu_core+0x926/0x1260 [ 415.046353][ C0] ? __pfx_rcu_core+0x10/0x10 [ 415.051058][ C0] ? net_tx_action+0x5bb/0xc30 [ 415.055867][ C0] handle_softirqs+0x226/0x860 [ 415.060678][ C0] ? do_softirq+0x77/0xd0 [ 415.065054][ C0] ? process_scheduled_works+0x97a/0x1630 [ 415.070829][ C0] ? process_scheduled_works+0xc3d/0x1630 [ 415.076587][ C0] do_softirq+0x77/0xd0 [ 415.080782][ C0] [ 415.083772][ C0] [ 415.086730][ C0] __local_bh_enable_ip+0x100/0x140 [ 415.091967][ C0] process_scheduled_works+0xc3d/0x1630 [ 415.097560][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 415.103600][ C0] ? assign_work+0x3cf/0x5d0 [ 415.108250][ C0] worker_thread+0xa47/0xfb0 [ 415.112880][ C0] ? __kthread_parkme+0x71/0x1f0 [ 415.117877][ C0] kthread+0x38b/0x480 [ 415.121973][ C0] ? __pfx_worker_thread+0x10/0x10 [ 415.127117][ C0] ? __pfx_kthread+0x10/0x10 [ 415.131731][ C0] ret_from_fork+0x514/0xb70 [ 415.136349][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 415.141500][ C0] ? __switch_to+0xc89/0x1420 [ 415.146207][ C0] ? __pfx_kthread+0x10/0x10 [ 415.150825][ C0] ret_from_fork_asm+0x1a/0x30 [ 415.155641][ C0] [ 415.159280][ C0] Kernel Offset: disabled [ 415.163635][ C0] Rebooting in 86400 seconds..