last executing test programs: 1m10.957378041s ago: executing program 0 (id=2474): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x10, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000071103500000000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x80) r0 = socket$inet6_sctp(0xa, 0x0, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000080)=@sack_info={0x0, 0xfffffbff, 0xfff}, &(0x7f0000000180)=0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0007000000000000b702000040420f00b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$kcm(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000000)=@ethtool_stats}) 1m10.267606516s ago: executing program 4 (id=2477): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000080)={0x9c, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x7e, 0x33, @auth={{{0x0, 0x0, 0xb, 0x0, 0x0, 0x1, 0x0, 0x1}, {}, @device_a, @device_b, @random="e1309675edfa", {0x9, 0xdd}}, 0x1, 0x1, 0x40, @val={0x10, 0x1, 0x94}, [{0xdd, 0x6, "edc9fe70ce11"}, {0xdd, 0x47, "006dce1a407d676bef07c7228c71340c3f016a67f9150a967fef1e46c6f58692a861a2405de2c959565e53d94bb003e73f1b85a16eaec2658322890da1efc5cc793877ef318d1c"}, {0xdd, 0x6, "5312e79d1594"}]}}]}, 0x9c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) (fail_nth: 9) 1m7.569939671s ago: executing program 2 (id=2479): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x403, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20101, 0x382}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_UDP_ZERO_CSUM6_TX={0x5}]}}}]}, 0x3c}, 0x1, 0xba01}, 0x810) r1 = accept$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f00000000c0)={0x3, &(0x7f0000000080)=[{0x0, 0xa3, 0xfd, 0x1}, {0x7fff, 0xfb, 0xa, 0x5}, {0x0, 0x5, 0x2}]}, 0x10) 1m7.259389414s ago: executing program 4 (id=2480): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) getsockopt$inet_buf(r0, 0x118, 0x3, 0x0, &(0x7f00000003c0)) socket(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r3, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYBLOB="107bf3414a75bd6d7cd0506fb2895ccc0c3e8407a079fbc8c57a357e5566521fa3cbd1f7fa1fd0a7480e8b70452a39b8d3be832be8d357c5ff5c1f9cfed74f7825f43ee383443860468df29995d85801ee03f3a0ef235a773de8c70f7b98d267fdc45b956ca1b4f9a92869b19826feab9a83d10e5a1385683d3fd9a73fc2f33a84f2b7c3d41c899793fad28b69741cf3ddfd93827d254401f7c968024d600239f6e74aeff4926179b6711b3cd1708d9b3c96d6", @ANYBLOB="0200090004b00c00001c00128009000120626f6e64000000000c00028005000d00020000"], 0x3c}, 0x1, 0x0, 0x0, 0x40e95}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYRESOCT=r3, @ANYRES16=r0], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x23, 0x800, 0x0) r6 = socket$inet_sctp(0x2, 0x5, 0x84) r7 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r6, 0x84, 0x79, &(0x7f0000000000)={r8, 0x5, 0x7}, 0x8) socket$igmp6(0xa, 0x3, 0x2) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x0) getsockname$packet(r5, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000100), &(0x7f0000000240)=0x8) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c00000010001fff000000008000000000000000", @ANYRES32=0x0, @ANYBLOB="48150600003f000008000a00", @ANYRES32=r9, @ANYBLOB="140012800b000100627269646765000004000280"], 0x3c}, 0x1, 0x0, 0x0, 0x20004081}, 0x40000) sendmmsg(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x4, 0x20052, 0xffffffffffffffff, 0x0) r10 = accept$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000040)=0x14) recvfrom$packet(r10, &(0x7f0000000080)=""/76, 0x4c, 0x40000002, 0x0, 0x0) r11 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000480)=@newqdisc={0x5c, 0x24, 0xf0b, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0x5, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x2c, 0x2, [@TCA_CODEL_TARGET={0x8}, @TCA_CODEL_INTERVAL={0x8, 0x3, 0x7fffffff}, @TCA_CODEL_INTERVAL={0x8, 0x3, 0x1}, @TCA_CODEL_TARGET={0x8, 0x1, 0x7}, @TCA_CODEL_ECN={0x8}]}}]}, 0x5c}}, 0xc0) ioctl$sock_SIOCGIFCONF(r10, 0x8912, &(0x7f0000000180)=@req={0x28, &(0x7f0000000440)={'bond_slave_0\x00', @ifru_addrs=@phonet={0x23, 0x27, 0xf2, 0x1}}}) 1m7.088115644s ago: executing program 0 (id=2481): socket$netlink(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') bpf$ITER_CREATE(0xb, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001600)={0x0, &(0x7f00000014c0)=""/229, 0x0, 0xe5, 0x0, 0x10}, 0x28) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4048840) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) syz_emit_ethernet(0x0, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(0x3) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r3, &(0x7f0000003340)=[{{&(0x7f00000003c0)={0xa, 0x4e22, 0x7fff, @loopback, 0x5}, 0x1c, &(0x7f0000001b00)=[{&(0x7f0000001a80)='g', 0x1}], 0x1}}, {{&(0x7f0000001bc0)={0xa, 0x4e20, 0x8, @private1={0xfc, 0x1, '\x00', 0x1}, 0x3}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000001c00)="1b", 0x1}], 0x1}}], 0x2, 0x40) sendto$inet6(r3, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) shutdown(r3, 0x1) writev(r2, &(0x7f0000001540)=[{&(0x7f0000000300)='.', 0x1}], 0x1) setsockopt$sock_int(r2, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(0xffffffffffffffff, 0x28, 0x2, 0x0, 0x0) sendmmsg$inet(r1, &(0x7f0000002ac0)=[{{&(0x7f0000000000)={0x2, 0x4e24, @multicast1}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1c000000000000000000000007000000440cf313ac1414aa80000009000000002400000000000000000000000700000044106300000007ff0000000000007fff94040000000000001400000000000000000000000200000004"], 0x60}}], 0x1, 0x50008000) sendmmsg(r1, &(0x7f0000003e80)=[{{0x0, 0x0, &(0x7f00000015c0)=[{0x0}, {0x0}, {&(0x7f00000004c0)="b5807bc0b3c1bb844284179186593e377255c0e23007e3c48a131c0be7aa529dd88393016e6e6ed4bd24099a2520bcbf309b4dbfd52dd8992e6fcec01fe365cf5c6ea471e47c745aad368891c9183771eed5d00586fff9a404dc6713f6452a96a49b0203b1d5cd929fe0ae3f5ee303aa1d8ce9f6df1783b1078c264070a0546bf94ed1e8895b8ea7c409435effa3fccbe4d3d9b4cb706b050a32ba5ec36602904f3eeadbcc4ee02f1536a77c17316ba9c2d9da36e4922064a1a74a2c3ee571017ae4a99f06a3a309800d9df260eb12595438ad7b918aa1cf6580c8afb71129652b9c52bf3ffa1d50f1117ae345cd723b2e5fc59e4c6762fa1ba9287280c780c2d38b80e88d1dc4d6ae4a92449b0040dfde63828a34574f854e286fdbcda037a4247f2a847b28e62b8145a0026d248e46b8e31e3a0591f86d8b8072bfd2ddc11b84e4bf8b2d7ea800d8dd95ca1dbc77992dbf4360d0ae77b6d48eb926bba6fd582eaf281eba4813b5dcb44e53dec381274c7f1233134159109a99822a2dcaa11a36161d0df00333764f29872f5df95ed0c0885f269ddceb78ba58078887f2f548df38d2e4aad1cfc7ed80d7d6a7ca4fdb0daff49415e266da8bef48c14fbe90af0c86eb4ba3c25c99e7544224fd8f46681287583c678d995314f645add8c71575130d110f5933d360942e8f5616056a4444d3112d27497031c2307f35b571bb2474cff7a508ea5ad9456286ea2560a54c4c00dcb8e935ad0e8df288328ea2d22b3e6dbb9b6ce657e17cf7988be3a9f268c10153dda392c07c4e538f4b576b622886e6e82fa3574b3cb86bc5fa1f714455a044cb00969d503d2cfdaace87e8ee2d1aa97ff7228c33b93bec1f3f80f9de6fadef9159259e0d9ec9f9c036fd306159aadf8181a281161734a333a84bea8ad2b684d5f33ac99c61e61eeaa612c3c8ba3e65f943a2123799af42e9d0a1bf64e31eb03d58e4a475d3a45594ce1bd261f4760fb3a569e27405ba392fa6a45268ad3cf67cca63277363250e94b2c552fb3fb6e36fe298f5345d5c58544451d592fa48ecc2dd80c539dd924e8d52bc1996ba822eafdd7b087886676aad9666201b7efd4e05dc38294efc818f8ec4d096612030f5a0e35c8d3e2d1b2be4e81ea0fc2763ebe84d250eb6bc6144a6509d0d0f1e0414c193d7c1e2b28dc937d519c9a690874c853497055166e6e1de46c19f3418e0202c581e5b74ff87bf4146cfc7c7cd909c34b44e711281e1abc7ece0b79d02eed7740d820bca8fe369fb2d5a8b761a3dc81987129aefa298a66306850d060eb6750f0371e2c9753f7be807628a5df67982c5caf219c80b276869a4779e17939347cef8a1f75a5288f3a872929df9ad738943c6e7c3f20f9e3d645c71456d9fc459036dcd979dc38dac3df2ac2322bcc716090dbe846eeeb564e1dc37461e71321ad16cae4f8c275e6a24341c0bf4a46977c2c4c0e2e20476af2bfc55f6cf2804e89aa89e94c23650c3b48c5416ff73a789320770f6e1532361d8bdaf34150f3474fb4280f96e4beaf19abd55075153f11541e9dd48f2a5e30dfeec46d4ee1a607ff28e1ef2df97c96ccc03a667eb8019bcd9168dcb6902f10ff2d0e8a1f3053b4c37a09ba6538e787a37ab96d2205f0442b5189f438819e272b45298bdb4fd0026f8bddf5ed7a70e5ea08277ca62a7538176a6a1c220f673e94a6fef51b8779ff979e75625d204f846a8e99d550ec58325a0f397af96234b4829a6a2f4f7a48cf50ae548feda26b3d2e6af47fb1723239a4d3d366af884e1775350b674de6121c159ab20f51d1d319f35839b9c2a3c227073b5102422317cf33840077d006bb41d1d2ca735e89d3da556cf4ebda40c1e80b3fed011f8e745e57679de5056b656176bcafda4533eab78a52993422e5efcf6517c07bad6009a774357d6ecc1d481a1f3bdf156cf591090a4650c6153eb69655b2ab76dee612758319c9a08881b76b99f36a4ccf9852dd6f81071e5c956f1249a5dae5162b4d31fcad4b8a5f12474c5d68dd982f515e31947ce1c3f4e3c49865a8fc331c4bd89eca46222abe242c77fda940115c1a7b5b52f1937b61e4813d3adc85968a7b4afbf3388a13b58fd9cf73223ff613e798c46758432190e356da67d1d8037a072cd17d86cbd4d0acd99339dbe2000e038ffca7eb6db136a58e3e78b4bc4e90144869a43ac21b330bd83f06915ad6a76aa252465cadd002b73f4f7e404f0994486dba101c715bb5d686521ee80956dd5859483d8229d010c1dcc6025294e6b9309a28c54dd70b1b46178cd6300cb94e1356abfac6063cb902b4c4365b3a0d45a45093b8df95bdc8a57d4040efabf79a33f24dbe485b3997c2fa4a8c1102c861f1ce60694a84487f5fdcbed671b561d9d4ca66edc20db0af8e239b5aeb3d5cc28d923e2068ea30a59aebc3c147981a3c88e2a55ef4bca0d2cfbffa19668606b18b3b7a78618bb2abc5a954b74486eacf71f2ee66bc95bc19b5c40520fd266877a21ec41990e42e6160f5b65635c7b58dfafd06d9950361ff45d4f10d93e8040f654224a3a6e07938b0a515ccee27197edf98a2f83e1023078b3e324e400c4438ec2f34eca08bed5a4b769ffdd2c02cac0f759c25148c22cdf8102b35f25eb8ef1b7fce7d38f967c622edf260b451f6c89c4a9d70fef799beed6d1ec837425eec65d28a300b3de6336444869700ce8887297ea5f0bdcb700e8a8d78702de0cb761e9259b55c3d50a50d3471073beb480c4ca958b2f27ea73e5f2f41d696ed52d1e37c4e9c5b20c9cdf79842d73a00aa526386ac74713f0f6f6c3141766cbe67004efe65bf28a535229a2b59ed73b3459f04589afb7f7fe8480ad7e2fa9239ad061cb3ff8ba236e4ce50f2216dfe9545c9d5e3a3410b64d90226095b6f5278d4015699b74d0bcfc1961bcdd29a5db5442e8ab095264712426dc9fdeff24284b184b9cb9beb7241d5b2d15aa1547e36102bd1b0868d3fd21cc0a125de61c5e64a33d8d0e312e0e96cdfa78b49f718025ccc7f1817b9eaea201d445156b71cf2e21b0105eed8431a2a95872c63a0131df9c99eb828e6eddb409d72b3c2c6d60a62d0e4d39ec27209715694ecac608984ce13cf56cfdbdf3c4e2281c336c3ac22a478a6657e969a0d99ed45ec0581d3503b66389f7704a287d9dc72bbde9e0137464ea2f74f8c1a3ef7a4dcac7231226448aaf29cbcbe0a524cf81ce4b77ae04c15376d74b1e57fc7ef3824c9be54bff41381c07391b19952e672f1fc5d1cab5b57d35c04041c2b3c0a73fde9ca92f77ca55cf3fbe8bbf9ac92815605e749105476cf59f53906a209ce18071ea524792d443387a82248713e5b8b76d67bae8ad6bdc23a95ca17715e337dc6578c14298b644530efba881652d8a2a49888edef2c01c20e93cbce9a5412e0c26a2e44de3671b1b3b3fe1ce87611b5c3b97aa3bc6746d5e8c3a4c962cb359c1402a1a59702b662467108a35ea4d77966b0229ebf4263e9839dd3f8c5470271007423eb1592eb30c333e67d9e23bc775a54a43cc4323c9148c2cf724298bb4e210942df6c99be6fcd58f7fd478a3d8232552ca021edda673d4c4218fb6b074a2c8debe366385861e0b637b45426f64e677690454202d5f6fe1f1fece26320de0b34c3871d45adbb5a0878754b3a9b76a54f6037516e7ce45b69bb01513ecf3cacaff36afc55e38b17f4f0a8769a51c8fffa19376e262360e77733d48f65fcbc8da8447a43c09083b5edd6c58c4a60697711b6de8d0d8ccadef82cb647d7e8f4708732d6a3234a9c82a3ba02d0ecb1ecdea25c60c99fbb2b8d5f9f706ece28f300751de8e9dc8328867f50d4ab7f9bd6b1e274778be1468f433993e98ccb748ef4b0b73aa11c0ee301ab47bee2f56446c2572b40ee07bdfc36a21c2997c8c933a3ce04c74acdfbdb4961a9ad5d83262df1f3d018e9df6aa3435c2b6a06c8e0d27edeb5a624fff1a9bdfd282145398d891d535188160ab0fed76f4cc1b1fe143c2a6cf873958d790e867513c274cc4fa399e9d2d4be539450b2998482b432ef68232780829baa197f811817b563ae26ec11542ae3a7119d40ffd9ea707065d27692ae5ed93b71a7f3d48938cd3775d8fea8dab4efc59ba3fc87b9fa020186be6e5341b4be5b326a70c6c7a42662ea593f0a57c0533b19e2a481bbaa6c1caef4c8fb73d6d59e0dc342d3bf9810aeca49afd97c2398cf97aecdbe5096c232defd522e3e06ae02f026776f0db1ba3c656e29278d9ea666a2ee0d76cd69d20305d636b0f09c09875fb961b024cf04afb97e9", 0xbee}, {&(0x7f00000014c0)}], 0x4}}], 0x1, 0x0) 1m4.087410577s ago: executing program 2 (id=2483): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x3}, 0x90) (async, rerun: 32) r0 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) ioctl(r0, 0x8b1a, &(0x7f0000000040)) (async) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c0000001800010280000000fcdbdf250a148000ff01fd07"], 0x1c}}, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x48, 0x1, 0x4, 0x201, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFULA_CFG_FLAGS={0x6}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x3}, @NFULA_CFG_MODE={0xa, 0x2, {0x7, 0x2}}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x65}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_FLAGS={0x6}]}, 0x48}, 0x1, 0x0, 0x0, 0x44}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), r4) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r4, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000640)={0x34, r5, 0x703, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x34}, 0x1, 0x0, 0x0, 0x26040000}, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r2, 0x0) (async) r6 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) sendmmsg$alg(r1, &(0x7f00000000c0), 0x492492492492627, 0x0) 1m3.687323275s ago: executing program 1 (id=2484): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x7, @loopback, 0x4}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x303}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "ad8efa05fd9614ff"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) writev(r1, &(0x7f00000039c0)=[{&(0x7f0000001140)="8a3deb7cc711", 0x6}], 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0xf3a, 0x0) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000500)={'gre0\x00', &(0x7f0000000400)={'erspan0\x00', 0x0, 0x2500, 0x10, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0xfffffffffffffdba, 0x0, 0xfffd, 0x1, 0x2f, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x3a}}}}}) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x1}, 0x6) write(r0, &(0x7f0000000000)="4c00000011000f14001100020000080002000000200000", 0x17) 1m2.373034449s ago: executing program 3 (id=2485): bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="23000000b200000002000000ffff000005"], 0x48) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="23000000b200000002000000ffff000005"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) (async) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x8}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x4) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@newtfilter={0x48, 0x2c, 0xd27, 0x70bd25, 0xa000, {0x0, 0x0, 0x0, r5, {0xe, 0x7}, {}, {0x4, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_ARP_THA={0xa, 0x41, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x37}}, @TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x806}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x0) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x1, @ANYBLOB="8593000000000000000000ff00000000000000007e8a5f3b5a765ffe1a32da079bc6ccd710470f829a1246e3c91629fec954421918b52726cbb59ba01d743ac7ef7d2039ca803610e0ea4fba4a88110064e41776821ed3b5bc98a67f09cef7a0b0cafc4864a629c3a0ae145ae66f4fad91993e5d7111d78a3d356b6e0084d8237a1959b9d2692d41e80998368e4cacaf292ee576df06e6134b55660a77a59f137b4062a94c57be9dfd34837e02c0f6e19b3f8ff99bbde873eb4ea277ea0de33580", @ANYRES32=r5, @ANYRES32, @ANYBLOB="00000000010000000200"/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r6}, &(0x7f0000000300), &(0x7f0000000340)=r1}, 0x20) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000003c0), 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@bloom_filter={0x1e, 0x7, 0xc47, 0x69, 0x0, 0xffffffffffffffff, 0x89ab, '\x00', r5, r7, 0x3, 0x2, 0x3, 0x3}, 0x50) (async) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@bloom_filter={0x1e, 0x7, 0xc47, 0x69, 0x0, 0xffffffffffffffff, 0x89ab, '\x00', r5, r7, 0x3, 0x2, 0x3, 0x3}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x51}, [@ldst={0x3, 0x0, 0x3}], {0x95, 0x0, 0x9}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x85}, 0x52) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000680)={r0, &(0x7f0000000380), &(0x7f0000000600)=""/72}, 0x20) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r8, 0x40086602, &(0x7f0000000040)=0x20) bind$bt_l2cap(r8, &(0x7f0000000140)={0x1f, 0x1000, @none, 0x3}, 0xe) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (async) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) mmap(&(0x7f0000ff2000/0xd000)=nil, 0xd000, 0x2000004, 0x4001011, r9, 0x34da2000) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0xa, 0x2) (async) r11 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r10, &(0x7f0000000280)={@val={0x0, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0xb, 0x0, 0x0, 0x0, 0x1c, {[@window={0xa, 0x3}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0x4e) (async) write$tun(r10, &(0x7f0000000280)={@val={0x0, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0xb, 0x0, 0x0, 0x0, 0x1c, {[@window={0xa, 0x3}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0x4e) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r9, &(0x7f0000000000)={0x10000010}) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r8, 0x84, 0x73, &(0x7f00000000c0)={0x0, 0x3202, 0x20, 0x6, 0x3}, &(0x7f0000000100)=0x18) (async) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r8, 0x84, 0x73, &(0x7f00000000c0)={0x0, 0x3202, 0x20, 0x6, 0x3}, &(0x7f0000000100)=0x18) 1m0.841732592s ago: executing program 0 (id=2486): socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="fb6bba8839fe8bc048c0cdafd1f8a9918bc4055eaaeb6db4ee9bcb25b1811dbf40b3a7da5a8a64db04ed6dd26eea2e37229c", 0x32}], 0x1, 0x0, 0x0, 0x8000}, 0x0) recvmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000280)=""/48, 0x30}], 0x1}, 0x400060df) r2 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) shutdown(r3, 0x0) (async) recvmsg$unix(r3, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}], 0x20}, 0x0) syz_open_procfs$namespace(r4, 0x0) (async) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000480)={{{@in6=@dev, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private1}, 0x0, @in=@multicast1}}, &(0x7f0000000580)=0xe8) (async) r6 = getgid() setsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000005c0)={r4, r5, r6}, 0xc) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c80)=ANY=[@ANYBLOB="5c000000420001000000000000000000030100000f0000003c00010000112233445566778899aabb86dd2c00001c0000000001110000010101010253aa58fe6cbdf03570080044132403b1fd606412c3258e3a670400028004000380"], 0x5c}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r9, 0x1, 0x3e, &(0x7f0000000280), 0x4) (async) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYRESDEC=r5, @ANYRES8=r7, @ANYRESDEC=r1, @ANYRESOCT=r2], 0xa8}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async) sendmsg$NFT_MSG_GETTABLE(r7, &(0x7f0000000440)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB="30000000010a0101000000000000000000000006080002400000000008000240000000010c0004400000000000000003"], 0x30}, 0x1, 0x0, 0x0, 0x240108d4}, 0x8000) (async) sendmsg$NFT_MSG_GETFLOWTABLE(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="00000000010000000000730830684e8e3b1a9a10fc6d00000000000000"], 0x20}, 0x1, 0x0, 0x0, 0x40004d0}, 0x0) socket$kcm(0x29, 0x5, 0x0) 1m0.787669153s ago: executing program 4 (id=2487): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x3261e) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_mreq(r1, 0x0, 0x24, &(0x7f0000000000)={@dev={0xac, 0x14, 0x14, 0x18}, @remote}, 0x8) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="03000000040000000400000000000001000000939d72d28d19eee74c71ec82fb3e8b3626980c30965e064c528a7c77d6bef1eb2626e4b0a58fc09244becff1e786647a1207fe58890c630cbfc306fc", @ANYRES32, @ANYBLOB="0400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="04000000050000000200"/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x10, &(0x7f0000000180)=@raw=[@call={0x85, 0x0, 0x0, 0xc2}, @map_fd={0x18, 0xa, 0x1, 0x0, r0}, @map_fd={0x18, 0x5, 0x1, 0x0, r2}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7fff}}, @func={0x85, 0x0, 0x1, 0x0, 0x4}, @jmp={0x5, 0x0, 0x2, 0x2, 0x5, 0x30, 0x4}], &(0x7f0000000480)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x4b}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x3261e) (async) socket$inet_sctp(0x2, 0x5, 0x84) (async) setsockopt$inet_mreq(r1, 0x0, 0x24, &(0x7f0000000000)={@dev={0xac, 0x14, 0x14, 0x18}, @remote}, 0x8) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) (async) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="03000000040000000400000000000001000000939d72d28d19eee74c71ec82fb3e8b3626980c30965e064c528a7c77d6bef1eb2626e4b0a58fc09244becff1e786647a1207fe58890c630cbfc306fc", @ANYRES32, @ANYBLOB="0400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="04000000050000000200"/28], 0x50) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x10, &(0x7f0000000180)=@raw=[@call={0x85, 0x0, 0x0, 0xc2}, @map_fd={0x18, 0xa, 0x1, 0x0, r0}, @map_fd={0x18, 0x5, 0x1, 0x0, r2}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7fff}}, @func={0x85, 0x0, 0x1, 0x0, 0x4}, @jmp={0x5, 0x0, 0x2, 0x2, 0x5, 0x30, 0x4}], &(0x7f0000000480)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x4b}, 0x94) (async) 1m0.721875152s ago: executing program 2 (id=2488): r0 = socket(0x1d, 0x2, 0x6) setsockopt$ALG_SET_AEAD_AUTHSIZE(r0, 0x6a, 0x2, 0x20000000, 0x3) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_type(r1, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r2, &(0x7f0000000280), 0x9) r3 = openat$cgroup_procs(r1, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000c40), 0x12) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r5, 0x1, 0x2e, &(0x7f0000000100)=0x6, 0x4) recvfrom(r5, 0x0, 0x0, 0x32, 0x0, 0x0) r6 = openat$cgroup_ro(r4, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r6, &(0x7f0000000200)=0x1, 0x12) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYRESHEX=r0, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES64=r0, @ANYRES64=r0, @ANYBLOB="0000000000000004000000000006000000000000000000000000000053fdf598b93156a5658a822b3713cfcd815eaf22022adb20860a79631462f3618bb4e16a3214e0840ea424fea1e8b7266aae68bb58e6db07003882e94d244aaefb1288bf3d316e69825de478540b1e97abcc899c2aa70eab4369793ed3e09d12e46d819231e4a23f517cc9ad3b4aaf93a3283bdb2cfd04b66a574c5244cbbd0d1fc91b2cbeddb7debc89525a6a218ec6022640bf2522d1c274fb77de41b5c6ba3a8bed06c638e71b5ad9d109184664f15a0fa4b578cf1a7576c3100cba4d79ede46e8e31d1"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002900000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000009800000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r9 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="18000000111401090000000000000000080005"], 0x18}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r8, 0x0, 0xe, 0x0, &(0x7f0000000300)="14fd54ab72df97e6256c00000000", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1m0.276898904s ago: executing program 1 (id=2489): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge0\x00'}) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="280000001d000100000000000000000007000000", @ANYRESDEC=0x0, @ANYBLOB="00d760b9140002c26d158184ab994163", @ANYRES64=r0, @ANYRESDEC=r0], 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x20000090) r3 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f0000000000), 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r5, &(0x7f0000000080)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8) listen(r5, 0x0) ppoll(&(0x7f0000000000)=[{r4}, {r5, 0x1008}], 0x2, 0x0, 0x0, 0x0) sendmsg$kcm(r3, &(0x7f0000000080)={&(0x7f00000004c0)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000040)="1d0502001a0014000600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf800139cb01f5ffac3152534fefd13e240236de0cdc8fbac55e83", 0x3c}, {&(0x7f0000000340)="b54ed3488224b19127188fd3", 0xc}], 0x2}, 0xd890) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x3}, 0x4) r6 = socket(0x840000000002, 0x3, 0xff) sendmsg$inet(r6, &(0x7f0000000900)={&(0x7f00000006c0)={0x2, 0x4e23, @multicast1}, 0x10, &(0x7f00000007c0)=[{&(0x7f0000000600)="9745010000004000012c8cc5ffff", 0x5aa}], 0x1, &(0x7f00000008c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x16}, @rand_addr=0x64010100}}}], 0x20}, 0x400c804) 59.240763217s ago: executing program 1 (id=2490): close(0xffffffffffffffff) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='illinois', 0x8) recvmsg(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000000c0)=""/146, 0x92}, {&(0x7f0000000340)=""/212, 0xd4}, {&(0x7f0000000440)=""/3, 0x3}, {&(0x7f0000000540)=""/231, 0xe7}, {&(0x7f0000000640)=""/83, 0x53}, {&(0x7f00000007c0)=""/244, 0xf4}], 0x7, &(0x7f0000000940)=""/81, 0x51}, 0x40) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000001c0)=0xa3, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000500)=@ipv4_newroute={0x34, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x2}, @RTA_ENCAP={0x10, 0x16, 0x0, 0x1, @LWT_BPF_XMIT={0xc, 0x3, 0x0, 0x1, @LWT_BPF_PROG_FD={0x8}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r2, 0x84, 0x7f, &(0x7f0000000140), 0x0) getsockopt$sock_buf(r2, 0x1, 0x1c, &(0x7f0000000200)=""/230, &(0x7f0000000300)=0xe6) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r0, &(0x7f00000000c0), 0xffffffffffffffef, 0x15, 0x0, 0x0) 59.045804513s ago: executing program 3 (id=2491): r0 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r0, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r1, &(0x7f0000000000)={0x0, 0xf00, &(0x7f0000000040)=[{&(0x7f00000000c0)="5c00000014006b02c84e21100af32c6e0a0675f8d34460400000000000005c1e6182949a36c23d3b48dfd8cdbf9367b498fa51f60a64c9f4d493803792684b71bdd70000b6c0504bb9183132be471b93c91b5d7870743719b4b53cf2", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) unshare(0x20040600) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmmsg$inet(r2, 0x0, 0x0, 0x20000000) socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r3, 0x0, 0x8, &(0x7f00000000c0)="bd", 0x1) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x4004032, 0xffffffffffffffff, 0xb06cb000) r5 = socket$l2tp(0x2, 0x2, 0x73) r6 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'dummy0\x00', 0x0}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000600)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r10, @ANYBLOB="0c00990000000000000000000800a000ea15000008009f0003000000080026000816"], 0x40}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0xd, 0x3}, {0x0, 0x4}, {0x1, 0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x40004) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, &(0x7f0000000200)=0x1, 0x4) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00'}) sendmsg$nl_route(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x4040080}, 0x0) sendto$l2tp(r5, &(0x7f0000001040)="c3", 0x1, 0x4881, &(0x7f0000000200)={0x2, 0x0, @multicast1}, 0x10) getpeername$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e22, @remote}, 0x10) bpf$BPF_PROG_ATTACH(0x9, &(0x7f0000000500)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB='$\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB="e53086f494292405e79c8000733f0d19d6428fc8ba01aace7dced08445fe0ef07ae016285f8344830aa987a662cf6223602ad4a81b2877ec6a25cdc5e54d47de98407ba7b78040f487dd5bead7110fd65f9d77607f8bd1e4883d3e64ff071d", @ANYRES64=0x0], 0x20) 58.953802116s ago: executing program 4 (id=2492): syz_emit_ethernet(0x66, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaa8faaaaaaaaaaaaaa0086dd60ca3614a9303afffe800000000000000000000000000000fe80000000000078e00000000000000000aa896490780000000020010000000000000000000000000000fc010000000000000063824ac48a4070d71c0e983c9c763a00000008009595f429ae081738e03e277ae56e841b51749b715de67410d9b76b4191fbe2d5a012540b075be3b5ce905867d057afde9be8cca64a2d24696fa1dcc7e521cba1b10ba42a169ba08de174ec07714e03b08183ea8dc0f6db28ff32bd82000000000000000000"], 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000780)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000740)={&(0x7f00000007c0)={0x1ac, 0xb, 0x6, 0x301, 0x0, 0x0, {0x3, 0x0, 0x1}, [@IPSET_ATTR_DATA={0x44, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e20}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast1}}, @IPSET_ATTR_ETHER={0xa}, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0xffffffff}, @IPSET_ATTR_IFACE={0x14, 0x17, 'wg1\x00'}]}, @IPSET_ATTR_DATA={0x68, 0x7, 0x0, 0x1, [@IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x1ff}, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x8000}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x7}, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x1}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_COMMENT={0x8, 0x1a, 'wg1\x00'}, @IPSET_ATTR_IFACE={0x14, 0x17, 'ip6gretap0\x00'}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x9}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_ADT={0x8c, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast2}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e23}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAME={0x9, 0x12, 'syz1\x00'}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x5059}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x20}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz1\x00'}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR2={0x5, 0x15, 0x3}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast1}}}]}, @IPSET_ATTR_ADT={0x3c, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e23}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAME={0x9, 0x12, 'syz0\x00'}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x7}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x1ac}, 0x1, 0x0, 0x0, 0x20004091}, 0x8092) (async) r1 = socket(0x10, 0x803, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0x2, 0xa, 0x0) bind$inet(r3, &(0x7f0000000080)={0x10, 0x2}, 0x10) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000040)={r0, 0x6, 0x3, 0xedf9}) r5 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r4) sendmsg$DEVLINK_CMD_RATE_SET(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000280)={0x3c, r5, 0x1, 0x0, 0x0, {0x2d}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x58}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x3c}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)={0x38, r7, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_OURS={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x4}, @ETHTOOL_A_BITSET_BITS={0x4}]}, @ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) (async) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd700000000000ac1e0001000000000000000000000000ac1414aa0000000000000000000000000000399f000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000feffffffff7f40000200000000000008ffffffff00000000010006000000000044000500ac1414bb000000000000000000000000000000003c00000002000000000000000000000000000000000000010600000004"], 0xfc}, 0x1, 0x0, 0x0, 0x4008000}, 0x600c010) (async) r9 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$inet6(r9, &(0x7f0000005a40)={&(0x7f0000005940)={0xa, 0x8, 0x4, @mcast2, 0x3}, 0x1c, 0x0}, 0xc0c0) (async) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r10, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c000200080021"], 0x3c}}, 0x0) 58.914359344s ago: executing program 0 (id=2493): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x3, 0xc, @dev={0xfe, 0x80, '\x00', 0xd}, 0x9}, 0x1c) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000002300)=[{&(0x7f0000000000)=',', 0x1}, {&(0x7f0000000300)="5c63de0da5f7e9b2e8cbb7be405ad730e7a15699e65dbf9d3b54577bba5035e9b61d9ad1bef96398fa412fcf3208e98ee1179ae98a557c5dc8a2df4ed0e3b16c87ec863a2f4e23d5c8d46d6e4ee64ca00f22b44572678783f5ee83fda7b36df0e6ed905f87a29f57d3063fc46508e21a00acb4ee4ec297fcccd9c8a9334acd1c93bd0ad076bb2ace07", 0x89}, {&(0x7f00000004c0)="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", 0x18e}, {&(0x7f0000001300)="80f0863cd9932955a29a0bb362c56abf346d17fa455773be7c9224352b0ce8c2ca6254f8d4a2514018ae9d54dac6832beccd115075442bfd86ada3b0b38c77a42f5196139e34d65bb1d6d56753918ffcb4c34960e26fe0b5b8c7194762fa83825a85ec4388090406aef4bd341292a69b0a8ce9cc82f59eac7f253307f2b7c65c76664716dff5bc9c11bdb5cfd222630ff010a37e2ecea054b7d81754b2e37cb2a9a0c9a92cf9cc4bc0cfa8f5f6dbf5b599f58ac4a9284ee714ff0a361419b337a4cf9a407c848aee9ccb718678060b59", 0xd0}], 0x4, 0x0, 0x0, 0x2c}, 0x44004) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)={0x20, 0x2d, 0x107, 0x0, 0x25dfdbff, {0x9, 0x7c}, [@nested={0x8, 0x1, 0x0, 0x1, [@typed={0x4, 0x6}]}, @nested={0x4, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) 57.929320757s ago: executing program 2 (id=2494): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010100000000000000000300000a4c000000060a000000003b5830d90480006c696d6974000000240002800c00024000000000000000000c00014000000000000000000800054000000000140000001100010000000000000000000a00000a0000000000000000"], 0x74}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet(0xa, 0x801, 0x84) sendto$inet(r1, &(0x7f0000000180)='\"', 0x1, 0x11, &(0x7f00000001c0)={0x2, 0x4e21, @remote}, 0x3c) connect$inet(r1, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x7) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f00000005c0)={0x0, 0xf8, "1c1a9bc7f9db001b614923153e5726601d221968b889b7fa67f12f9dd011125733408cbd66884da7e9ee4c8ae2817fe68fa1fc66fc6c09f906f5815b3a5d984b448ce3797d56011436fe7a55bdede8555604f535d40e496c858f051cfa637abfe9fe71e2d4349d5808620fd4d36fa1b60703a416a1dc9be0cc27e2551084ab0d8493fc6d462eee794175895a3bfd60956ad88d5b9d6a7a5bc3a841ac8f8e289a072b0a161da802ad1e771061f7d10ff6a8524b0e89db3ffc9fa847c40b20b736c8a8c1f3b974f92c8ef442b2c066e25d49ee687e4426d3bfc89ea048033040d0f79a33bbf2784b5e672bee32108a543b66e3d8823c368aa8"}, &(0x7f00000006c0)=0x100) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000700)={r2, @in={{0x2, 0x4e22, @multicast2}}}, &(0x7f00000007c0)=0x84) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f00000000c0)=0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r6) sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="010023010000340200000200000008000100", @ANYRES32=r5, @ANYBLOB="8699388c6b39e6006cca33c2ce8000fbe22f8656440998518fdb67eb5f245e1f75a0e20e944acd7ced08c24a349049cabe2cb851fdb3d00ee4a92db4c4d105dae42aca697f61ad3eb1dc274581f2624f05a04f8754c62980f08aa833bd9d"], 0x1c}}, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) read$nci(r4, &(0x7f0000000200)=""/100, 0x64) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000b40)=@newtaction={0x494, 0x30, 0xffff, 0x0, 0x0, {}, [{0x480, 0x1, [@m_police={0x434, 0x1, 0x0, 0x0, {{0xb}, {0x408, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x2db9, 0x7, 0x2, 0x2, 0x100, 0x8, 0xffff, 0x6, 0x4, 0xfe91, 0x100, 0x8, 0x9, 0x8, 0x5, 0xfffffff9, 0x7fffffff, 0x7, 0x1, 0x80, 0x6, 0xe7, 0x5, 0x9, 0x8, 0xfffffe01, 0xffffffff, 0x6, 0x9, 0x6, 0x7, 0x3, 0xe, 0xffffddbe, 0xffff2b6b, 0x101, 0x2, 0x9, 0x0, 0x5, 0x7, 0x7, 0xd96, 0xbf9, 0x5, 0x3, 0x8, 0x7f, 0x3, 0xfffff001, 0x6, 0x1, 0x6d, 0x1000, 0x0, 0x3, 0x8, 0x1, 0x5, 0x1, 0x3, 0x1e, 0x1, 0x10000, 0xc, 0x200, 0x50f, 0xffff0000, 0x3, 0x8942, 0x7, 0x101, 0x3f, 0x3d, 0x3, 0x1, 0x2, 0x1d9, 0x7, 0x0, 0x5, 0xd, 0xa9, 0x7, 0x8a7, 0x4, 0xee9, 0x1, 0x4, 0x2, 0x9, 0x7, 0x7, 0x2, 0x0, 0x5, 0x1, 0x3, 0xcc, 0x2800000, 0x2, 0x4, 0x0, 0x9, 0x8, 0xed, 0x3ff, 0xd6, 0x4, 0x99fb, 0xc, 0x5ad, 0x7, 0xffffffff, 0x401, 0x2, 0x8, 0x400, 0x1, 0x2, 0x1000, 0xb, 0xffffffff, 0x1, 0x3bf, 0xfffffffc, 0x6, 0x3, 0xfee5, 0x6, 0x4, 0x101, 0x3, 0x7, 0x0, 0x7, 0x96, 0xd64, 0x4, 0x6, 0x0, 0x280, 0x5a84b4e5, 0x6, 0x4, 0x6, 0x5, 0x4, 0x3, 0x6, 0xffffffff, 0xea, 0x1, 0x6cb, 0x10, 0x54a, 0x0, 0x0, 0xd, 0x7f, 0x5, 0x0, 0x1, 0x8ed, 0xce6, 0x0, 0x1, 0x10001, 0x9, 0x2, 0x7271b321, 0x4, 0x0, 0x1b, 0x6, 0x9, 0x40, 0x2, 0x0, 0x47, 0xfffffffe, 0x7, 0x2, 0x0, 0xfff, 0x200, 0x45, 0xfffffff7, 0x3, 0x7, 0x7, 0x7, 0x2, 0x9a7, 0x1, 0x0, 0xbbb3, 0x1000, 0x392, 0x9, 0x1, 0xffff8000, 0x7, 0x5, 0x9, 0x40, 0xfffffffa, 0x60e, 0x8, 0x4f, 0x5, 0x6, 0x3, 0x1, 0x7, 0x9, 0x1, 0x10001, 0x3ff, 0x4, 0xf, 0x9, 0x2c000000, 0xf, 0x2, 0x5, 0x7, 0x3a7a, 0x9, 0x3, 0xfffffca7, 0x0, 0x8, 0x6, 0x3, 0x401, 0x6, 0x3, 0x8, 0x0, 0x1, 0x9, 0x9, 0x6, 0x7fffffff, 0xe, 0x8, 0x2, 0x6, 0x1, 0x6, 0x101, 0x4, 0x7, 0x2, 0x7]}]]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_gact={0x48, 0x2, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x9, 0x2}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x494}}, 0x2000c000) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r0) r8 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000380)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r9, @ANYBLOB="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"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000300000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r10 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r10) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r11 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x50, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r11, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) close(0x3) close(0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) 57.587405782s ago: executing program 1 (id=2495): r0 = socket(0x1e, 0x4, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000a40)={0x30, r2, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x8010}, 0x4004010) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000680)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x3, 0x8000003, 0x1, 0x1, 0x8, 0x3}, [@TCA_NETEM_REORDER={0xc, 0x3, {0x9e, 0x7}}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c000000020301020000000000000000000000100800"], 0x1c}}, 0x0) setsockopt$packet_int(r0, 0x107, 0xa, 0x0, 0x0) 57.307641609s ago: executing program 3 (id=2496): sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007240)=[{{0x0, 0x0, &(0x7f0000001380)=[{&(0x7f00000012c0)="1ce02c7a", 0x4}], 0x1}}], 0x1, 0x1c000) r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg$inet(r0, &(0x7f0000000c40)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x23, 0x0}}], 0x1e1730a30afb6559, 0x8014) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)=ANY=[@ANYBLOB='..']) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) syz_emit_ethernet(0x1e, &(0x7f0000001940)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x27}, @void, {@can={0xc, {{0x0, 0x0, 0x1, 0x1}, 0x7, 0x1, 0x0, 0x0, "5ac0c7d61001e90f"}}}}, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_ADDRFORM(r3, 0x29, 0x1, &(0x7f0000000400), 0x4) unshare(0x2c020400) openat$cgroup_ro(r2, &(0x7f0000000000)='blkio.throttle.io_service_bytes_recursive\x00', 0x0, 0x0) r4 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r4, &(0x7f00000031c0)={&(0x7f00000006c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f0000000540), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="180000"], 0x18}, 0x8080) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup(r5, &(0x7f0000000080)='syz0\x00', 0x1ff) r6 = openat$cgroup(r5, &(0x7f00000002c0)='syz0\x00', 0x200002, 0x0) r7 = openat$cgroup_type(r6, &(0x7f0000000180), 0x2, 0x0) write$cgroup_type(r7, &(0x7f0000000280), 0x9) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) close(0x3) r9 = socket$inet_tcp(0x2, 0x1, 0x6) setsockopt$inet_tcp_buf(r9, 0x6, 0x1f, &(0x7f0000000400)='espintcp', 0x8) sendmsg$NL80211_CMD_DEL_INTERFACE(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x28, 0x0, 0x100, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x2, 0x53}}}}}, 0xfffd}, 0x1, 0x0, 0x0, 0x800}, 0x40) sendmsg$kcm(r4, &(0x7f0000000440)={&(0x7f0000000100)=@l2tp6={0xa, 0x0, 0x0, @remote}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000180)='S\x00', 0x2}], 0x1, 0x0, 0x0, 0x900}, 0x0) 56.285616356s ago: executing program 0 (id=2497): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f00000001c0)=0x2, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000180)=0x100c8d1, 0x4) r5 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) getsockopt$sock_cred(r5, 0x1, 0x4c, 0x0, &(0x7f0000001000)) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000240)=0x4000, 0x4) bind$xdp(r2, &(0x7f0000000100)={0x2c, 0x4, r4}, 0x10) r6 = gettid() r7 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) r8 = socket$pppoe(0x18, 0x1, 0x0) poll(&(0x7f0000000600)=[{r3, 0x5012}, {r3, 0x54}, {r7, 0x100}, {r0, 0xc000}, {r2, 0x4204}, {r8, 0x202}, {r2, 0x8001}], 0x7, 0x6) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f00000004c0)={'gre0\x00', &(0x7f00000003c0)={'gretap0\x00', 0x0, 0x700, 0x8, 0xfffffffb, 0x6, {{0x11, 0x4, 0x2, 0x26, 0x44, 0x66, 0x0, 0x7f, 0x4, 0x0, @multicast2, @private=0xa010101, {[@timestamp_prespec={0x44, 0x24, 0x8, 0x3, 0x7, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x7}, {@broadcast, 0x427e}, {@local, 0x10001}, {@local, 0x6}]}, @lsrr={0x83, 0xb, 0x24, [@rand_addr=0x64010101, @loopback]}, @end]}}}}}) sendmsg$nl_route(r0, &(0x7f00000005c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)=ANY=[@ANYBLOB="500000001200000127bd7000ffdbdf2500000000", @ANYRES32=r4, @ANYBLOB="104204000400040008001300", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r9, @ANYBLOB="14001400000000000000220000000000000000000a000100aaaaaaaaaabb0000"], 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x40000) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r10, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r11 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r11, &(0x7f0000000040)={0xfd, 0x3, 0x0, @loopback}, 0x1c) r12 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r12, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000033c0)=ANY=[@ANYBLOB="44000000100003042bbd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="46040900008200001c00128009000100766c616e000000000c000280060001000300000008000500", @ANYRES32=r13, @ANYBLOB="40ac8ade37e71e9bc4ab36e68261887d0b3b09796aef7288e702c119a7eb7c10f9b1054cbb5f5bf40d8e7ef6ac"], 0x44}, 0x1, 0x0, 0x0, 0x20000600}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) recvmmsg(r1, &(0x7f00000053c0)=[{{&(0x7f0000001d80)=@vsock={0x28, 0x0, 0x0, @my}, 0x80, &(0x7f0000001f80)=[{&(0x7f0000001e00)=""/164, 0xa4}, {&(0x7f0000001ec0)=""/37, 0x25}, {&(0x7f0000001f00)=""/68, 0x44}], 0x3, &(0x7f0000001fc0)=""/205, 0xcd}, 0x9c}, {{&(0x7f00000020c0), 0x80, &(0x7f0000003300)=[{&(0x7f0000002140)=""/196, 0xc4}, {&(0x7f0000002240)=""/150, 0x96}, {&(0x7f0000002300)=""/4096, 0x1000}], 0x3}, 0x8}, {{&(0x7f0000003340)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, 0x80, &(0x7f00000047c0)}, 0xffff0001}, {{&(0x7f0000004840)=@in6={0xa, 0x0, 0x0, @initdev}, 0x80, &(0x7f0000004f00)=[{&(0x7f00000048c0)}, {&(0x7f0000004900)=""/251, 0xfb}, {&(0x7f0000004a00)=""/217, 0xd9}, {&(0x7f0000004b00)=""/247, 0xf7}, {&(0x7f0000004c00)=""/21, 0x15}, {&(0x7f0000004c40)=""/133, 0x85}, {&(0x7f0000004d00)=""/50, 0x32}, {&(0x7f0000004d40)=""/214, 0xd6}, {&(0x7f0000004e40)=""/177, 0xb1}], 0x9, &(0x7f0000004fc0)=""/124, 0x7c}, 0x2}, {{&(0x7f0000005040)=@l2={0x1f, 0x0, @fixed}, 0x80, &(0x7f00000052c0)=[{&(0x7f00000050c0)=""/158, 0x9e}, {&(0x7f0000005180)=""/150, 0x96}, {&(0x7f0000005240)=""/112, 0x70}], 0x3, &(0x7f0000005300)=""/178, 0xb2}, 0x3}], 0x5, 0x0, 0x0) sendmsg$nl_route(r12, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0xffffff1f, 0x70bd26, 0x1, {0x0, 0x0, 0x0, 0x0, 0x8008, 0x4408}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TTL_INHERIT={0x5, 0xc, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x84) 55.13634492s ago: executing program 4 (id=2498): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) (async) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) (async) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) (async) r2 = openat$cgroup_procs(r0, &(0x7f0000000200)='cgroup.threads\x00', 0x2, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x5001}) (async) read(r3, &(0x7f0000000280)=""/70, 0x46) r4 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) (async) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001a00090000000000000000000201"], 0x2c}}, 0x0) ioctl$TUNSETVNETHDRSZ(r3, 0x400454d8, &(0x7f0000000200)=0xc) (async) r5 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000600)={'syzkaller1\x00', 0x41}) (async) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000180)=0x0) write$cgroup_pid(r2, &(0x7f0000000080)=r6, 0x34) r7 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) pread64(r7, &(0x7f0000001840)=""/4096, 0x1000, 0x1) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x44b, 0x70bd28, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x0, 0x12}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MAX_AGE={0x8, 0x3, 0x1b}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x30008095}, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1000000041", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000085000000a000000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 54.144629966s ago: executing program 3 (id=2499): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1c0000000400000008000000000000000100"/48, @ANYRES32=r0, @ANYBLOB="0100000002"], 0x40) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000100)={r1, 0x0, 0x0}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000002c0)={r0, 0x20, &(0x7f0000000240)={&(0x7f0000000000)=""/49, 0x31, 0x0, &(0x7f0000000140)=""/136, 0x88}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000300)=r2, 0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000600)=ANY=[@ANYBLOB="9feb0100180000000000000038000000380000000300000000000000000000030000000003000000020000000200000000000000000000010500000010000000010000000000001101000000000000000061"], 0x0, 0x53}, 0x20) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x3a0ffffffff) 53.661544164s ago: executing program 2 (id=2500): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_PMK(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000380)={0x1c, r1, 0x1, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x24000000}, 0x80) r4 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {0x2, 0xffff}, {0x3, 0xffe0}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x2, 0xb, 0x5}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8805}, 0x10) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000200)={'syztnl0\x00', &(0x7f0000000140)={'erspan0\x00', 0x0, 0x8000, 0x10, 0x7, 0x0, {{0x1e, 0x4, 0x3, 0x6, 0x78, 0x66, 0x0, 0x4, 0x2, 0x0, @rand_addr=0x64010100, @multicast2, {[@ssrr={0x89, 0x23, 0x22, [@private=0xa010101, @private=0xa010102, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @multicast1, @empty, @dev={0xac, 0x14, 0x14, 0xa}]}, @timestamp={0x44, 0xc, 0xbe, 0x0, 0xd, [0xf0a7, 0x500]}, @end, @ssrr={0x89, 0x17, 0x54, [@local, @multicast1, @broadcast, @broadcast, @multicast2]}, @ssrr={0x89, 0xf, 0x68, [@multicast2, @multicast2, @dev={0xac, 0x14, 0x14, 0x41}]}, @rr={0x7, 0xb, 0x75, [@multicast1, @multicast2]}]}}}}}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000240)={@loopback, 0x0}, &(0x7f0000000280)=0x14) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r9 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newtfilter={0x8c, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r8, {0xb, 0xfff3}, {}, {0x7, 0xfff2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x54, 0x2, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x0, 0x8000, 0x20000000, 0x6, 0x77}}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x2}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x24040894}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r11) getsockname$packet(r11, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x40) sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="440000001000010500000000fbdbdf2500000000", @ANYRES32=r12, @ANYBLOB="016000000000000c240012800900010069706970000000001400028008000100", @ANYRES32=r12], 0x44}}, 0x40848c0) sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r12, 0x12e1b, 0x1a001}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}]}}}]}, 0x3c}}, 0xc004) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={0xffffffffffffffff, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000002c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0xa, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xe8, &(0x7f0000000400)=[{}], 0x8, 0x10, &(0x7f0000000440), &(0x7f0000000500), 0x8, 0x87, 0x8, 0x8, &(0x7f0000000540)}}, 0x10) r14 = socket(0x400000000010, 0x3, 0x0) r15 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r14, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, r16, {0x0, 0xfffa}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x47, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x51fc, 0xb, 0x5}}}}]}, 0x40}}, 0x840) r17 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r17, 0x8933, &(0x7f0000000c80)={'ip6gre0\x00', 0x0}) sendmsg$nl_route_sched(r17, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000cc0)=@newqdisc={0x468, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x4000000, {0x0, 0x0, 0x0, r18, {0x0, 0x1}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x43c, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x6, 0x0, 0xff9a, 0x100, 0x6, 0x1}, {0x7, 0x0, 0xc, 0x0, 0x7ff, 0x8}, 0x5, 0x8, 0x12d8}}, @TCA_TBF_RATE64={0xc, 0x4, 0x68320f62c310815e}, @TCA_TBF_PTAB={0x404, 0x3, [0x80, 0x6, 0x2, 0x7fffffff, 0x41d, 0x4, 0x10000, 0x7ff, 0x101, 0x8, 0x16, 0x7, 0x5, 0x5, 0x4, 0x7, 0x0, 0x2, 0xd7, 0x6, 0x6, 0xfff, 0xf44, 0x401, 0x3, 0x0, 0x5, 0x37, 0x7, 0x9, 0x80000000, 0x9, 0x5939, 0x0, 0x2, 0x9, 0x401, 0x3, 0x2551, 0x0, 0x756, 0x3, 0x0, 0x6, 0x2, 0x14, 0x5, 0xce9, 0x79cd, 0x800, 0x5, 0x2, 0x5, 0x3, 0x7, 0x1, 0xa, 0x10001, 0x9, 0xfffffff8, 0x9, 0x6, 0xa, 0x8, 0x3, 0x1, 0xb, 0x1, 0x82d8, 0x1, 0x3, 0x3, 0x4, 0x10001, 0xfffffff9, 0x4, 0x0, 0x8, 0xf9d, 0x4, 0x800, 0x80000000, 0x80, 0x4, 0x5, 0x1c1, 0x7, 0x7, 0x6, 0x0, 0x8, 0x1ff, 0xb, 0x3, 0x6, 0x1, 0x7, 0x3, 0xffff, 0xfffffff3, 0x10000, 0x3, 0x101, 0x2, 0x215245f2, 0xd8, 0x8, 0xe0000000, 0x4000, 0x5, 0xa, 0x9, 0x10, 0xc, 0x7, 0x0, 0x8000, 0x4, 0x3, 0x8000, 0x10000, 0xd, 0x8, 0xf205, 0xfffffffd, 0x7fffffff, 0x1, 0x45f, 0x6f, 0x6, 0xafc, 0x5, 0x1ff800, 0x1, 0x1e8b, 0x5d9, 0x6, 0xc2, 0x5, 0x7, 0x8, 0x2, 0x3ff, 0x4, 0x5, 0x7ff, 0x27, 0x7fff, 0x3daf, 0x7, 0x9, 0xc, 0x5, 0x5, 0x93, 0xc, 0x2, 0x99, 0x6, 0x6, 0x8, 0x7, 0x8, 0x1, 0x40, 0xfffffffb, 0xa, 0x1, 0x2, 0x9, 0x0, 0x4, 0x3, 0x200, 0xebc1, 0xe, 0x1537, 0x4eaa, 0x4, 0xffffffff, 0x989, 0xaa, 0x1, 0x0, 0x4, 0x4, 0xe, 0x80000001, 0x5, 0x8, 0x7, 0x0, 0x7, 0x4, 0x81, 0x3, 0x603d, 0x0, 0x1, 0x8, 0x4, 0x18f, 0x9, 0x7, 0x200, 0x1, 0x2, 0x5f, 0x3, 0xfffffff8, 0x9, 0x0, 0x10, 0xfffffffa, 0x0, 0x0, 0x8, 0xb, 0xfffffffc, 0x3, 0x6, 0x7ff, 0xa, 0x5, 0x5, 0x2, 0x401, 0xff, 0x8, 0x5, 0x9, 0x5, 0x7fff, 0xe41, 0x7, 0x0, 0x200, 0xfffffe00, 0x8, 0x14000000, 0x5, 0x9, 0x6, 0x800, 0x8, 0x2, 0x7, 0x4, 0x10000, 0x0, 0x4, 0x8001, 0x0, 0x0, 0x80, 0x6]}]}}]}, 0x468}, 0x1, 0x0, 0x0, 0x8800}, 0x20044000) getpeername$packet(0xffffffffffffffff, &(0x7f0000000700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000740)=0x14) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r3, &(0x7f0000000a00)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000009c0)={&(0x7f0000000780)={0x204, 0x0, 0x8, 0x70bd28, 0x25dfdbff, {}, [@HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}]}, @HEADER={0x80, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r18}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r19}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}]}, 0x204}, 0x1, 0x0, 0x0, 0x90}, 0x240088c4) 53.578206018s ago: executing program 1 (id=2501): socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80, 0x0, 0x0, 0x9}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0100000004000000080000000100000000004000db3782", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="010000000300"/28], 0x50) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="00000000020000000021eb000000db67c8e894704560000000000000"], 0x50) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000206a0000190006009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r1, &(0x7f0000000000), &(0x7f00000006c0)=""/73, 0x4}, 0x20) 52.183024363s ago: executing program 0 (id=2502): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000000c0), 0x10) (async) sendto$inet6(r0, &(0x7f0000002440)="e02a7bb6e7da72697b2cdbbcff42a02b0f8bb691348acb814839e600969dac7c83d0fbc38c1ce536bc54c8ba122e63c7063ab3697ca58e7df46bbc9f226a78cef190a9c0ead234c3390534090f2d88089e848a36fc8915a1384b310d762efec262e80ce8bfd87bf5fe99b4903644d928f4aa26da2db620ea28a1baf7e76640d6", 0x80, 0x40000, &(0x7f0000000280)={0x1d, 0x4e20, 0x2f0dc1a4, @dev={0xfe, 0x80, '\x00', 0xc}, 0x6}, 0x1c) (async) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r0}, 0x8) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xc, 0x8031, 0xffffffffffffffff, 0x0) (async) pselect6(0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x700}, &(0x7f0000000240)={0x0, 0x989680}, &(0x7f00000002c0)={&(0x7f0000000280), 0x8}) (async) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (async) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_DEL(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000fedb13000000000000000300d0afaf0cc46b5698aa8713516373797a32000000"], 0x2c}, 0x1, 0x40030000000000, 0x0, 0x800}, 0x80) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000007c0)=@newtaction={0x7c, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x68, 0x1, [@m_tunnel_key={0x64, 0x1, 0x0, 0x0, {{0xf}, {0x34, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0xb, @loopback={0x400000004000000}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x7c}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000800)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3000000070000100000000000000000007000000", @ANYRES32=r6, @ANYBLOB="0c00018008000100000001000c0002"], 0x30}}, 0x40000) (async) sendmsg$can_bcm(r0, &(0x7f0000000380)={&(0x7f0000000040)={0x1d, r6}, 0x10, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0700000087dcb476ff03000000000000", @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0200000001000000040000a00500000084c7bd1fa728a1546ea51508eed4835ddda327822cb3e228e6bca8743c17576c43e6083b4020c6d635b62eb47b5be89fbbb973fbbfac426026dec73957164f4d"], 0x80}, 0x1, 0x0, 0x0, 0x41}, 0x4000) (async) socket$nl_route(0x10, 0x3, 0x0) (async) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r7, 0x107, 0xa, &(0x7f0000000080), 0x4) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) accept4$tipc(0xffffffffffffffff, &(0x7f00000000c0)=@name, 0x0, 0x0) (async) sendmsg$NL80211_CMD_FRAME(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000600)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r10, @ANYBLOB="0c00990000000000000000000800a000ea15000008009f0003000000080026000816"], 0x40}}, 0x0) (async) socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wg0\x00', 0x0}) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) (async) r12 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r12, &(0x7f0000000080)="0422b9dd9210b75f1359c130211f", 0xe, 0x20000090, &(0x7f00000000c0)={0x11, 0x86dd, r11, 0x1, 0x9, 0x6, @multicast}, 0x14) 51.617882074s ago: executing program 3 (id=2503): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r1, 0x29, 0x4, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)={0x14, 0x17, 0xa, 0x401}, 0x14}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000140)={0x9c, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x7e, 0x33, @auth={{{0x0, 0x0, 0xb, 0x0, 0x0, 0x1, 0x0, 0x1}, {}, @device_a, @device_b, @random="fa309675edfa", {0x9, 0xdd}}, 0x1, 0x1, 0x40, @val={0x10, 0x1, 0xbc}, [{0xdd, 0x6, "edc9fe70ce11"}, {0xdd, 0x47, "006dce1a407d676bef07c7228c71340c3f016a67f9150a967fef1e46c6f58692a861a2405de2c959565e53d94bb003e73f1b85a16eaec2658322890da1efc5cc793877ef318d1c"}, {0xdd, 0x6, "5312e79d1594"}]}}]}, 0x9c}}, 0x0) 50.462204614s ago: executing program 1 (id=2504): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x7c, 0x7c, 0x2, [@var, @func_proto={0x0, 0x6, 0x0, 0xd, 0x0, [{}, {}, {}, {}, {}, {}]}, @func, @volatile, @volatile, @volatile={0x0, 0x0, 0x0, 0x9, 0x2}]}}, 0x0, 0x96}, 0x20) (async, rerun: 64) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) (rerun: 64) ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f0000000180)={r0, &(0x7f0000000040)='\x00', 0x400401, &(0x7f0000000080)={@_ha_fsid={[0x8, 0x3]}, {0x7fff, 0x8, 0x3, 0x6}}, 0x0, &(0x7f00000000c0)={@_ha_fsid}, &(0x7f0000000100)=0x1}) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="180000002000000000000000000000009500000000000000"], &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1}, 0x10}, 0x94) 50.258895996s ago: executing program 4 (id=2505): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$netlink(0x10, 0x3, 0xc) pipe(&(0x7f0000000040)) (async) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="90000000000101060000000000000000020000003400018014000180080001000102030408000200050607081c00028005000100060000000600020004d2000006000300001500003400028014000180080001000506070808000200010203041c000280050001000600000006000200001500000600030004d20000080007000000012c0c00058008000100667470"], 0x90}}, 0x0) (async) sendmsg$IPCTNL_MSG_EXP_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000800)=ANY=[@ANYBLOB="c8000000000201060000000000000000020000003400018014000180080001000102030408000200050607081c00028005000100060000000600020004d2000006000300001500003400028014000180080001000506070808000200010203041c00028005000100860000000600020000140000060003009c400000340003801400018008000100ffffffff08000200ffffffff1c000280050001"], 0xc8}}, 0x0) (async) ioctl$sock_ifreq(r0, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x4}) ioctl$sock_netdev_private(r0, 0x89f5, &(0x7f0000000000)) (async) r3 = socket$inet6(0xa, 0x80002, 0x88) setsockopt$inet6_udp_int(r3, 0x11, 0x66, &(0x7f00000002c0), 0x4) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) (async) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="5c00000030000504000000000000000000000000480001804400018009000100676174650000000034000280180002000000000000000000000000000000000000000000100005800c000180080003000100000008000a0007"], 0x5c}}, 0x0) 48.39787987s ago: executing program 3 (id=2506): r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000001c0)={0x0, @empty, @private}, &(0x7f0000000200)=0xc) sendmsg$nl_route(r0, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)=@ipv6_getaddrlabel={0x2c, 0x4a, 0x4, 0x70bd26, 0x25dfdbfc, {0xa, 0x0, 0x78, 0x0, r1, 0x6de8}, [@IFAL_LABEL={0x8, 0x2, 0xb}, @IFAL_LABEL={0x8, 0x2, 0xb}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000841}, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e21, 0x1, @mcast2, 0x4}}, 0x0, 0x0, 0x11, 0x0, "2b20a9a47cddc63b223be606d7fa19f22a369ae751de81ca4d11e10450d766feb63b382d54ba4bb57a219cad5ddfc1e4fe760a1ce2ca64196953e92a07b3937730a33b6deca160d8c2fbff48eb964283"}, 0xd8) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6(0xa, 0x800000000000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb0100180000000000000038000000380000000400000002000000000000110400000000000000000000000000000200000000020000000000000f02000000020000000000000e030000000000000000005f"], 0x0, 0x54}, 0x20) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r4, 0x29, 0x11, &(0x7f0000000000), 0x4) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r5, &(0x7f0000000300)={@void, @void, @eth={@multicast, @multicast, @val={@void, {0x8100, 0x6, 0x0, 0x6}}, {@ipv6={0x86dd, @tipc_packet={0xb, 0x6, "5a1b6c", 0x18, 0x6, 0xff, @mcast2, @private2, {[], @payload_conn={{{0x18, 0x0, 0x1, 0x0, 0x0, 0x6, 0x1, 0x2, 0x7, 0x0, 0x0, 0xf, 0x3, 0x0, 0x3, 0x4, 0x3, 0x4e22, 0x4e21}}}}}}}}}, 0x52) sendmsg$nl_route(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010000304000000000000000000000400", @ANYRES32=0x0, @ANYBLOB="00a3000000005c923d8198c79c2e67fdcf1f6b00001c00128000000c000280050003000b00"/49], 0x3c}, 0x1, 0x0, 0x0, 0x24008000}, 0x800) 46.340383092s ago: executing program 2 (id=2507): r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x62) ioctl$int_in(r0, 0x5421, &(0x7f0000000100)=0x9) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000180)={'vxcan0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x839, 0x709d25, 0x100003, {0x0, 0x0, 0x0, r5, {0x0, 0x3}, {0xfff3, 0x5}, {0xfff2, 0xe}}}, 0x24}}, 0x800) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="780000001000830404000000fedbdf2500007400", @ANYRES32=r7, @ANYBLOB="0008000007500500580012800b0001006272696467650000480002"], 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000700)={&(0x7f0000000540)=@ipv4_delrule={0x64, 0x21, 0x2, 0x70bd2c, 0x25dfdbfd, {0x2, 0x20, 0x0, 0x0, 0x6, 0x0, 0x0, 0x2, 0x10}, [@FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0xffffffffffffffde}, @FRA_DST={0x8, 0x1, @rand_addr=0x64010100}, @FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0xfffffffffffffff9}, @FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0xdaa8}, @FRA_GENERIC_POLICY=@FRA_FWMASK={0x8, 0x10, 0x6}, @FRA_FLOW={0x8, 0xb, 0xffffffff}, @FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0x394f2242}]}, 0x64}, 0x1, 0x0, 0x0, 0x44000}, 0x800) close(r3) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x30, 0x0, 0xb, 0x3, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_COMPAT_NAME={0x9, 0x1, '@-*(\x00'}, @NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x8080) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63f1}, 0x0) connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @dev}, 0x10) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.bfq.group_wait_time\x00', 0x0, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x2, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x39, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180)={r10, 0xffffffffffffffff, 0x39, 0x0, @void}, 0x10) r11 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000300)={'batadv_slave_0\x00', 0x0}) sendmsg$can_raw(r11, &(0x7f0000000240)={&(0x7f0000000100)={0x1d, r12}, 0x10, &(0x7f0000000200)={&(0x7f00000001c0)=@can={{0x4, 0x1, 0x1, 0x1}, 0x0, 0x3, 0x0, 0x0, "e212c8449cc3850d"}, 0x10}, 0x1, 0x0, 0x0, 0x44}, 0x24000000) close(r0) 29.92399211s ago: executing program 32 (id=2502): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000000c0), 0x10) (async) sendto$inet6(r0, &(0x7f0000002440)="e02a7bb6e7da72697b2cdbbcff42a02b0f8bb691348acb814839e600969dac7c83d0fbc38c1ce536bc54c8ba122e63c7063ab3697ca58e7df46bbc9f226a78cef190a9c0ead234c3390534090f2d88089e848a36fc8915a1384b310d762efec262e80ce8bfd87bf5fe99b4903644d928f4aa26da2db620ea28a1baf7e76640d6", 0x80, 0x40000, &(0x7f0000000280)={0x1d, 0x4e20, 0x2f0dc1a4, @dev={0xfe, 0x80, '\x00', 0xc}, 0x6}, 0x1c) (async) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r0}, 0x8) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xc, 0x8031, 0xffffffffffffffff, 0x0) (async) pselect6(0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x700}, &(0x7f0000000240)={0x0, 0x989680}, &(0x7f00000002c0)={&(0x7f0000000280), 0x8}) (async) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (async) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_DEL(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000fedb13000000000000000300d0afaf0cc46b5698aa8713516373797a32000000"], 0x2c}, 0x1, 0x40030000000000, 0x0, 0x800}, 0x80) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000007c0)=@newtaction={0x7c, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x68, 0x1, [@m_tunnel_key={0x64, 0x1, 0x0, 0x0, {{0xf}, {0x34, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0xb, @loopback={0x400000004000000}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x7c}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000800)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3000000070000100000000000000000007000000", @ANYRES32=r6, @ANYBLOB="0c00018008000100000001000c0002"], 0x30}}, 0x40000) (async) sendmsg$can_bcm(r0, &(0x7f0000000380)={&(0x7f0000000040)={0x1d, r6}, 0x10, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0700000087dcb476ff03000000000000", @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0200000001000000040000a00500000084c7bd1fa728a1546ea51508eed4835ddda327822cb3e228e6bca8743c17576c43e6083b4020c6d635b62eb47b5be89fbbb973fbbfac426026dec73957164f4d"], 0x80}, 0x1, 0x0, 0x0, 0x41}, 0x4000) (async) socket$nl_route(0x10, 0x3, 0x0) (async) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r7, 0x107, 0xa, &(0x7f0000000080), 0x4) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) accept4$tipc(0xffffffffffffffff, &(0x7f00000000c0)=@name, 0x0, 0x0) (async) sendmsg$NL80211_CMD_FRAME(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000600)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r10, @ANYBLOB="0c00990000000000000000000800a000ea15000008009f0003000000080026000816"], 0x40}}, 0x0) (async) socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wg0\x00', 0x0}) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) (async) r12 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r12, &(0x7f0000000080)="0422b9dd9210b75f1359c130211f", 0xe, 0x20000090, &(0x7f00000000c0)={0x11, 0x86dd, r11, 0x1, 0x9, 0x6, @multicast}, 0x14) 24.245575767s ago: executing program 33 (id=2504): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x7c, 0x7c, 0x2, [@var, @func_proto={0x0, 0x6, 0x0, 0xd, 0x0, [{}, {}, {}, {}, {}, {}]}, @func, @volatile, @volatile, @volatile={0x0, 0x0, 0x0, 0x9, 0x2}]}}, 0x0, 0x96}, 0x20) (async, rerun: 64) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) (rerun: 64) ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f0000000180)={r0, &(0x7f0000000040)='\x00', 0x400401, &(0x7f0000000080)={@_ha_fsid={[0x8, 0x3]}, {0x7fff, 0x8, 0x3, 0x6}}, 0x0, &(0x7f00000000c0)={@_ha_fsid}, &(0x7f0000000100)=0x1}) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="180000002000000000000000000000009500000000000000"], &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1}, 0x10}, 0x94) 17.386123751s ago: executing program 34 (id=2507): r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x62) ioctl$int_in(r0, 0x5421, &(0x7f0000000100)=0x9) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000180)={'vxcan0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x839, 0x709d25, 0x100003, {0x0, 0x0, 0x0, r5, {0x0, 0x3}, {0xfff3, 0x5}, {0xfff2, 0xe}}}, 0x24}}, 0x800) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="780000001000830404000000fedbdf2500007400", @ANYRES32=r7, @ANYBLOB="0008000007500500580012800b0001006272696467650000480002"], 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000700)={&(0x7f0000000540)=@ipv4_delrule={0x64, 0x21, 0x2, 0x70bd2c, 0x25dfdbfd, {0x2, 0x20, 0x0, 0x0, 0x6, 0x0, 0x0, 0x2, 0x10}, [@FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0xffffffffffffffde}, @FRA_DST={0x8, 0x1, @rand_addr=0x64010100}, @FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0xfffffffffffffff9}, @FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0xdaa8}, @FRA_GENERIC_POLICY=@FRA_FWMASK={0x8, 0x10, 0x6}, @FRA_FLOW={0x8, 0xb, 0xffffffff}, @FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0x394f2242}]}, 0x64}, 0x1, 0x0, 0x0, 0x44000}, 0x800) close(r3) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x30, 0x0, 0xb, 0x3, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_COMPAT_NAME={0x9, 0x1, '@-*(\x00'}, @NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x8080) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63f1}, 0x0) connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @dev}, 0x10) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.bfq.group_wait_time\x00', 0x0, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x2, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x39, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180)={r10, 0xffffffffffffffff, 0x39, 0x0, @void}, 0x10) r11 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000300)={'batadv_slave_0\x00', 0x0}) sendmsg$can_raw(r11, &(0x7f0000000240)={&(0x7f0000000100)={0x1d, r12}, 0x10, &(0x7f0000000200)={&(0x7f00000001c0)=@can={{0x4, 0x1, 0x1, 0x1}, 0x0, 0x3, 0x0, 0x0, "e212c8449cc3850d"}, 0x10}, 0x1, 0x0, 0x0, 0x44}, 0x24000000) close(r0) 9.881958151s ago: executing program 35 (id=2506): r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000001c0)={0x0, @empty, @private}, &(0x7f0000000200)=0xc) sendmsg$nl_route(r0, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)=@ipv6_getaddrlabel={0x2c, 0x4a, 0x4, 0x70bd26, 0x25dfdbfc, {0xa, 0x0, 0x78, 0x0, r1, 0x6de8}, [@IFAL_LABEL={0x8, 0x2, 0xb}, @IFAL_LABEL={0x8, 0x2, 0xb}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000841}, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e21, 0x1, @mcast2, 0x4}}, 0x0, 0x0, 0x11, 0x0, "2b20a9a47cddc63b223be606d7fa19f22a369ae751de81ca4d11e10450d766feb63b382d54ba4bb57a219cad5ddfc1e4fe760a1ce2ca64196953e92a07b3937730a33b6deca160d8c2fbff48eb964283"}, 0xd8) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6(0xa, 0x800000000000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb0100180000000000000038000000380000000400000002000000000000110400000000000000000000000000000200000000020000000000000f02000000020000000000000e030000000000000000005f"], 0x0, 0x54}, 0x20) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r4, 0x29, 0x11, &(0x7f0000000000), 0x4) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r5, &(0x7f0000000300)={@void, @void, @eth={@multicast, @multicast, @val={@void, {0x8100, 0x6, 0x0, 0x6}}, {@ipv6={0x86dd, @tipc_packet={0xb, 0x6, "5a1b6c", 0x18, 0x6, 0xff, @mcast2, @private2, {[], @payload_conn={{{0x18, 0x0, 0x1, 0x0, 0x0, 0x6, 0x1, 0x2, 0x7, 0x0, 0x0, 0xf, 0x3, 0x0, 0x3, 0x4, 0x3, 0x4e22, 0x4e21}}}}}}}}}, 0x52) sendmsg$nl_route(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010000304000000000000000000000400", @ANYRES32=0x0, @ANYBLOB="00a3000000005c923d8198c79c2e67fdcf1f6b00001c00128000000c000280050003000b00"/49], 0x3c}, 0x1, 0x0, 0x0, 0x24008000}, 0x800) 0s ago: executing program 36 (id=2505): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$netlink(0x10, 0x3, 0xc) pipe(&(0x7f0000000040)) (async) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="90000000000101060000000000000000020000003400018014000180080001000102030408000200050607081c00028005000100060000000600020004d2000006000300001500003400028014000180080001000506070808000200010203041c000280050001000600000006000200001500000600030004d20000080007000000012c0c00058008000100667470"], 0x90}}, 0x0) (async) sendmsg$IPCTNL_MSG_EXP_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000800)=ANY=[@ANYBLOB="c8000000000201060000000000000000020000003400018014000180080001000102030408000200050607081c00028005000100060000000600020004d2000006000300001500003400028014000180080001000506070808000200010203041c00028005000100860000000600020000140000060003009c400000340003801400018008000100ffffffff08000200ffffffff1c000280050001"], 0xc8}}, 0x0) (async) ioctl$sock_ifreq(r0, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x4}) ioctl$sock_netdev_private(r0, 0x89f5, &(0x7f0000000000)) (async) r3 = socket$inet6(0xa, 0x80002, 0x88) setsockopt$inet6_udp_int(r3, 0x11, 0x66, &(0x7f00000002c0), 0x4) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) (async) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="5c00000030000504000000000000000000000000480001804400018009000100676174650000000034000280180002000000000000000000000000000000000000000000100005800c000180080003000100000008000a0007"], 0x5c}}, 0x0) kernel console output (not intermixed with test programs): 05692][ T8935] : entered promiscuous mode [ 175.418210][ T8960] netlink: 12 bytes leftover after parsing attributes in process `syz.3.816'. [ 175.463012][ T8962] netlink: 8 bytes leftover after parsing attributes in process `syz.1.817'. [ 176.180321][ T9010] netlink: set zone limit has 4 unknown bytes [ 176.269916][ T9016] ÿÿÿÿÿÿ: renamed from vlan1 (while UP) [ 176.624217][ T9028] netlink: 'syz.3.830': attribute type 1 has an invalid length. [ 176.802213][ T9030] veth5: entered allmulticast mode [ 176.857221][ T9041] __nla_validate_parse: 2 callbacks suppressed [ 176.857244][ T9041] netlink: 104 bytes leftover after parsing attributes in process `syz.2.834'. [ 177.179893][ T9060] netlink: 4 bytes leftover after parsing attributes in process `syz.1.841'. [ 177.197800][ T9060] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 177.225904][ T9060] netlink: 68 bytes leftover after parsing attributes in process `syz.1.841'. [ 177.396509][ T9062] netlink: 48 bytes leftover after parsing attributes in process `syz.0.842'. [ 177.398595][ T9062] x_tables: duplicate underflow at hook 3 [ 177.408514][ T9062] openvswitch: netlink: Message has 1 unknown bytes. [ 177.564219][ T9081] Bluetooth: hci0: invalid length 0, exp 4 for type 32 [ 177.647846][ T9071] netlink: Failed to add helper -22 [ 177.647903][ T9071] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 177.843818][ T9093] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 177.929352][ T9098] netlink: 4 bytes leftover after parsing attributes in process `syz.3.851'. [ 177.930398][ T9098] netlink: 4 bytes leftover after parsing attributes in process `syz.3.851'. [ 178.162932][ T9104] netlink: 'syz.4.852': attribute type 16 has an invalid length. [ 178.162957][ T9104] netlink: 'syz.4.852': attribute type 17 has an invalid length. [ 178.164663][ T9101] netlink: 'syz.4.852': attribute type 16 has an invalid length. [ 178.164681][ T9101] netlink: 'syz.4.852': attribute type 17 has an invalid length. [ 178.275391][ T9113] netlink: 'syz.1.854': attribute type 1 has an invalid length. [ 178.320316][ T9104] macvlan0: left promiscuous mode [ 178.354333][ T9104] macvtap1: left promiscuous mode [ 178.354523][ T9104] macvtap1: left allmulticast mode [ 178.354538][ T9104] veth1_vlan: left allmulticast mode [ 178.356708][ T9104] 8021q: adding VLAN 0 to HW filter on device bond1 [ 178.359179][ T9104] veth3: left allmulticast mode [ 178.428644][ T9120] netlink: 80 bytes leftover after parsing attributes in process `syz.4.852'. [ 178.460318][ T9104] macsec1: left promiscuous mode [ 178.543590][ T6514] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 178.614715][ T9113] netlink: 'syz.1.854': attribute type 1 has an invalid length. [ 178.661612][ T136] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 178.661676][ T136] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 178.661721][ T136] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 178.866852][ T9131] netlink: 8 bytes leftover after parsing attributes in process `syz.3.856'. [ 178.866889][ T9131] netlink: 48 bytes leftover after parsing attributes in process `syz.3.856'. [ 179.065074][ T9131] geneve4: entered promiscuous mode [ 179.065099][ T9131] geneve4: entered allmulticast mode [ 179.078384][ T9113] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 179.303787][ T9202] netlink: 236 bytes leftover after parsing attributes in process `syz.1.864'. [ 179.439030][ T9206] batadv0: entered promiscuous mode [ 179.439256][ T9206] macsec2: entered promiscuous mode [ 179.440771][ T9206] 8021q: adding VLAN 0 to HW filter on device macsec2 [ 179.462592][ T9206] batadv0: left promiscuous mode [ 179.725630][ T9219] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 180.092071][ T9237] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 180.112094][ T9230] tipc: Started in network mode [ 180.112128][ T9230] tipc: Node identity ac14142f, cluster identity 4711 [ 180.115075][ T9230] tipc: New replicast peer: 127.0.0.1 [ 180.117014][ T9230] tipc: Enabled bearer , priority 10 [ 180.130440][ T9229] tipc: New replicast peer: 2001:0000:0000:0000:0000:0000:0000:0000 [ 180.216760][ T9240] validate_nla: 3 callbacks suppressed [ 180.216785][ T9240] netlink: 'syz.0.878': attribute type 5 has an invalid length. [ 180.216802][ T9240] netlink: 'syz.0.878': attribute type 9 has an invalid length. [ 180.263775][ T9242] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 180.415471][ T9249] netlink: 'syz.2.880': attribute type 3 has an invalid length. [ 180.430713][ T9249] xt_hashlimit: size too large, truncated to 1048576 [ 180.718019][ T9262] ieee802154 phy0 wpan0: encryption failed: -22 [ 181.232694][ T989] tipc: Node number set to 2886997039 [ 181.759997][ T9306] geneve1: mtu less than device minimum [ 182.087675][ T9322] sctp: [Deprecated]: syz.2.900 (pid 9322) Use of struct sctp_assoc_value in delayed_ack socket option. [ 182.087675][ T9322] Use struct sctp_sack_info instead [ 182.167254][ T9327] __nla_validate_parse: 13 callbacks suppressed [ 182.167277][ T9327] netlink: 8 bytes leftover after parsing attributes in process `syz.3.902'. [ 182.218869][ T9328] netlink: 12 bytes leftover after parsing attributes in process `syz.3.902'. [ 182.246449][ T9327] netlink: 24 bytes leftover after parsing attributes in process `syz.3.902'. [ 182.265585][ T9330] netlink: 'syz.1.903': attribute type 11 has an invalid length. [ 182.265608][ T9330] netlink: 'syz.1.903': attribute type 4 has an invalid length. [ 182.265622][ T9330] netlink: 224 bytes leftover after parsing attributes in process `syz.1.903'. [ 182.468568][ T9339] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 182.560425][ T9348] netlink: 12 bytes leftover after parsing attributes in process `syz.1.908'. [ 182.600546][ T9348] tipc: Started in network mode [ 182.600581][ T9348] tipc: Node identity ac1414aa, cluster identity 4711 [ 182.600847][ T9348] tipc: New replicast peer: 172.20.20.187 [ 182.624693][ T9348] tipc: Enabled bearer , priority 10 [ 182.642958][ T9349] xt_TCPMSS: Only works on TCP SYN packets [ 182.699981][ T9351] netlink: 48 bytes leftover after parsing attributes in process `syz.4.910'. [ 182.700220][ T9351] netlink: 48 bytes leftover after parsing attributes in process `syz.4.910'. [ 182.722436][ T9351] netlink: 48 bytes leftover after parsing attributes in process `syz.4.910'. [ 182.722661][ T9351] netlink: 48 bytes leftover after parsing attributes in process `syz.4.910'. [ 182.981980][ T9361] netlink: 32 bytes leftover after parsing attributes in process `syz.4.913'. [ 183.295951][ T9380] netlink: 'syz.4.917': attribute type 11 has an invalid length. [ 183.527049][ T9388] macvlan0: entered promiscuous mode [ 183.664059][ T9405] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 183.825619][ T989] tipc: Node number set to 2886997162 [ 183.892645][ T9146] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 183.892803][ T9146] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 183.892934][ T9146] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 184.119790][ T9420] ip6t_REJECT: ECHOREPLY is not supported [ 184.376797][ T9440] netlink: 'syz.3.931': attribute type 1 has an invalid length. [ 184.482076][ T9442] bridge0: port 2(bridge_slave_1) entered disabled state [ 184.482779][ T9442] bridge0: port 1(bridge_slave_0) entered disabled state [ 184.486720][ T9442] bridge0: entered allmulticast mode [ 184.536690][ T9442] bridge_slave_1: left allmulticast mode [ 184.536745][ T9442] bridge_slave_1: left promiscuous mode [ 184.537258][ T9442] bridge0: port 2(bridge_slave_1) entered disabled state [ 184.649533][ T9442] bridge_slave_0: left allmulticast mode [ 184.649564][ T9442] bridge_slave_0: left promiscuous mode [ 184.653062][ T9442] bridge0: port 1(bridge_slave_0) entered disabled state [ 184.806052][ T9453] netlink: 'syz.4.933': attribute type 21 has an invalid length. [ 184.806080][ T9453] IPv6: NLM_F_CREATE should be specified when creating new route [ 184.806172][ T9453] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 184.806183][ T9453] IPv6: NLM_F_CREATE should be set when creating new route [ 184.806239][ T9453] IPv6: NLM_F_CREATE should be set when creating new route [ 184.806266][ T9453] IPv6: NLM_F_CREATE should be set when creating new route [ 184.814541][ T9453] netlink: 'syz.4.933': attribute type 21 has an invalid length. [ 184.814855][ T9453] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 185.319438][ T9459] wlan0 speed is unknown, defaulting to 1000 [ 185.369928][ T9459] lo speed is unknown, defaulting to 1000 [ 185.597113][ T9495] netlink: 'syz.2.939': attribute type 5 has an invalid length. [ 185.806321][ T9500] netlink: 'syz.4.942': attribute type 39 has an invalid length. [ 186.071517][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 186.236765][ T9518] IPv6: NLM_F_REPLACE set, but no existing node found! [ 187.020225][ T9550] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 187.390376][ T9564] netlink: Failed to add helper -22 [ 187.390434][ T9564] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 187.479772][ T9572] __nla_validate_parse: 78 callbacks suppressed [ 187.479799][ T9572] netlink: 20 bytes leftover after parsing attributes in process `syz.4.963'. [ 187.602910][ T9576] netlink: 4 bytes leftover after parsing attributes in process `syz.3.964'. [ 187.778230][ T9587] netlink: 156 bytes leftover after parsing attributes in process `syz.0.966'. [ 187.898082][ T9587] netlink: 46 bytes leftover after parsing attributes in process `syz.0.966'. [ 187.898109][ T9587] netlink: 46 bytes leftover after parsing attributes in process `syz.0.966'. [ 188.175852][ T9608] netlink: 8 bytes leftover after parsing attributes in process `syz.3.970'. [ 188.242005][ T9611] tipc: MTU too low for tipc bearer [ 188.342918][ T9617] netlink: 12 bytes leftover after parsing attributes in process `syz.2.973'. [ 188.691312][ T9636] netlink: 'syz.3.981': attribute type 12 has an invalid length. [ 188.691337][ T9636] netlink: 'syz.3.981': attribute type 29 has an invalid length. [ 188.691351][ T9636] netlink: 148 bytes leftover after parsing attributes in process `syz.3.981'. [ 188.691370][ T9636] netlink: 59 bytes leftover after parsing attributes in process `syz.3.981'. [ 188.927369][ T9648] netlink: 'syz.1.984': attribute type 11 has an invalid length. [ 189.010369][ T9652] netlink: 'syz.2.982': attribute type 12 has an invalid length. [ 189.010394][ T9652] netlink: 'syz.2.982': attribute type 29 has an invalid length. [ 189.010409][ T9652] netlink: 148 bytes leftover after parsing attributes in process `syz.2.982'. [ 189.039363][ T9652] Bluetooth: hci0: unsupported parameter 5161 [ 189.039389][ T9652] Bluetooth: hci0: unsupported parameter 8192 [ 189.039404][ T9652] Bluetooth: hci0: unsupported parameter 5161 [ 189.039418][ T9652] Bluetooth: hci0: unsupported parameter 8192 [ 194.393348][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 211.843631][ T5614] Bluetooth: hci2: command 0x0406 tx timeout [ 211.843678][ T5614] Bluetooth: hci3: command 0x0406 tx timeout [ 211.859445][ T4931] Bluetooth: hci1: command 0x0406 tx timeout [ 216.791337][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 218.737393][ T9696] __nla_validate_parse: 1 callbacks suppressed [ 218.737419][ T9696] netlink: 20 bytes leftover after parsing attributes in process `syz.0.995'. [ 218.966613][ T9705] netlink: 'syz.3.998': attribute type 10 has an invalid length. [ 218.984249][ T9705] bond0: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 218.985916][ T9705] Bluetooth: hci0: unsupported parameter 5134 [ 218.985939][ T9705] Bluetooth: hci0: unsupported parameter 8192 [ 218.985953][ T9705] Bluetooth: hci0: unsupported parameter 5134 [ 218.986607][ T9705] Bluetooth: hci0: unsupported parameter 8192 [ 219.162467][ T9710] bond3: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-alb(6) [ 219.164374][ T9710] bond3 (unregistering): Released all slaves [ 219.440802][ T9696] infiniband syz2: set active [ 219.440826][ T9696] infiniband syz2: added batadv_slave_1 [ 219.582248][ T9696] smbdirect: ib_dev[syz2]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 219.582290][ T9696] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 219.582337][ T9696] smbdirect: ib_dev[syz2]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 219.663444][ T9696] RDS/IB: syz2: added [ 219.664644][ T9696] smc: adding ib device syz2 with port count 1 [ 219.664810][ T9696] smc: ib device syz2 port 1 has pnetid SYZ2 (user defined) [ 220.103622][ T9737] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1006'. [ 220.186152][ T9742] netlink: 256 bytes leftover after parsing attributes in process `syz.4.1008'. [ 220.234531][ T9743] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1007'. [ 220.289296][ T9737] bond4: entered promiscuous mode [ 220.289718][ T9737] 8021q: adding VLAN 0 to HW filter on device bond4 [ 220.761774][ T9763] netlink: 'syz.3.1013': attribute type 12 has an invalid length. [ 220.831960][ T9765] netlink: 3648 bytes leftover after parsing attributes in process `syz.2.1014'. [ 220.831995][ T9765] netlink: 3648 bytes leftover after parsing attributes in process `syz.2.1014'. [ 220.833882][ T9767] netlink: 'syz.3.1013': attribute type 12 has an invalid length. [ 221.633954][ T9792] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1021'. [ 221.635013][ T9792] veth0_to_bond: entered allmulticast mode [ 221.800430][ T9798] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1023'. [ 221.819713][ T9798] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1023'. [ 221.984628][ T9803] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 222.049868][ T9807] netlink: 'syz.2.1025': attribute type 1 has an invalid length. [ 222.174845][ T9807] bond5: entered promiscuous mode [ 222.179117][ T9807] 8021q: adding VLAN 0 to HW filter on device bond5 [ 222.330289][ T9821] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1028'. [ 222.599944][ T9815] 8021q: adding VLAN 0 to HW filter on device bond5 [ 222.631329][ T9815] bond5: (slave ip6gre2): The slave device specified does not support setting the MAC address [ 222.631358][ T9815] bond5: (slave ip6gre2): Setting fail_over_mac to active for active-backup mode [ 222.709928][ T9815] bond5: (slave ip6gre2): making interface the new active one [ 222.709959][ T9815] ip6gre2: entered promiscuous mode [ 222.773648][ T9815] bond5: (slave ip6gre2): Enslaving as an active interface with an up link [ 223.459323][ T9834] tipc: Enabled bearer , priority 0 [ 223.459775][ T9834] tipc: Enabling of bearer rejected, already enabled [ 223.460253][ T9834] tipc: Enabling of bearer rejected, already enabled [ 223.477432][ T9834] tipc: Enabling of bearer rejected, already enabled [ 223.495848][ T9834] tipc: Enabling of bearer rejected, already enabled [ 223.496330][ T9834] tipc: Enabling of bearer rejected, already enabled [ 223.496819][ T9834] tipc: Enabling of bearer rejected, already enabled [ 223.528899][ T9834] tipc: Enabling of bearer rejected, already enabled [ 223.529381][ T9834] tipc: Enabling of bearer rejected, already enabled [ 223.529844][ T9834] tipc: Enabling of bearer rejected, already enabled [ 223.530288][ T9834] tipc: Enabling of bearer rejected, already enabled [ 223.560787][ T9834] tipc: Enabling of bearer rejected, already enabled [ 223.597908][ T9833] openvswitch: netlink: Unexpected mask (mask=200440, allowed=10048) [ 223.609362][ T9834] tipc: Enabling of bearer rejected, already enabled [ 223.686970][ T9834] tipc: Enabling of bearer rejected, already enabled [ 223.687482][ T9834] tipc: Enabling of bearer rejected, already enabled [ 223.687949][ T9834] tipc: Enabling of bearer rejected, already enabled [ 223.695968][ T9834] tipc: Enabling of bearer rejected, already enabled [ 223.697334][ T9834] tipc: Enabling of bearer rejected, already enabled [ 223.719665][ T9834] tipc: Enabling of bearer rejected, already enabled [ 223.763339][ T9834] tipc: Enabling of bearer rejected, already enabled [ 223.763938][ T9834] tipc: Enabling of bearer rejected, already enabled [ 223.768375][ T9834] tipc: Enabling of bearer rejected, already enabled [ 223.772601][ T9834] tipc: Enabling of bearer rejected, already enabled [ 223.788155][ T9834] tipc: Enabling of bearer rejected, already enabled [ 223.796422][ T9834] tipc: Enabling of bearer rejected, already enabled [ 223.799405][ T9834] tipc: Enabling of bearer rejected, already enabled [ 223.818036][ T9834] tipc: Enabling of bearer rejected, already enabled [ 223.843117][ T9834] tipc: Enabling of bearer rejected, already enabled [ 223.843634][ T9834] tipc: Enabling of bearer rejected, already enabled [ 223.844084][ T9834] tipc: Enabling of bearer rejected, already enabled [ 223.881325][ T9834] tipc: Enabling of bearer rejected, already enabled [ 223.900382][ T9834] tipc: Enabling of bearer rejected, already enabled [ 223.910243][ T9834] tipc: Enabling of bearer rejected, already enabled [ 224.089767][ T9830] tipc: Disabling bearer [ 224.568692][ T9849] bridge0: port 1(bridge_slave_0) entered disabled state [ 224.850272][ T9852] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1037'. [ 224.926591][ T9863] --map-set only usable from mangle table [ 224.926922][ T9863] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1038'. [ 225.556737][ T9869] netlink: 'syz.3.1042': attribute type 3 has an invalid length. [ 225.556764][ T9869] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1042'. [ 226.005669][ T9881] netlink: 'syz.3.1045': attribute type 1 has an invalid length. [ 226.005695][ T9881] netlink: 240 bytes leftover after parsing attributes in process `syz.3.1045'. [ 226.005727][ T9881] netlink: 'syz.3.1045': attribute type 1 has an invalid length. [ 226.347693][ T9887] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1047'. [ 226.867139][ T9918] netlink: 'syz.4.1052': attribute type 1 has an invalid length. [ 227.175481][ T9927] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1056'. [ 227.175985][ T9926] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1056'. [ 227.247163][ T9926] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1056'. [ 227.247189][ T9926] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1056'. [ 227.247207][ T9926] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1056'. [ 227.411685][ T9918] 8021q: adding VLAN 0 to HW filter on device bond2 [ 227.695989][ T9923] bond2: (slave geneve2): making interface the new active one [ 227.766357][ T9923] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 228.127657][ T9944] bond3: Unable to set up delay as MII monitoring is disabled [ 228.157007][ T9944] bond3 (unregistering): Released all slaves [ 228.901740][ T9954] bond3: Unable to set up delay as MII monitoring is disabled [ 228.939737][ T9954] bond3 (unregistering): Released all slaves [ 229.216142][ T9973] ieee802154 phy0 wpan0: encryption failed: -22 [ 229.758154][ T9980] netlink: 'syz.0.1067': attribute type 2 has an invalid length. [ 230.855978][ T9999] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1070'. [ 231.509431][T10015] geneve3: entered promiscuous mode [ 231.509643][T10015] geneve3: entered allmulticast mode [ 231.564594][T10015] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1076'. [ 231.742463][ T9196] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 231.742528][ T9196] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 231.742575][ T9196] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 231.742620][ T9196] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 231.889900][T10017] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1068'. [ 231.889932][T10017] netlink: 43 bytes leftover after parsing attributes in process `syz.2.1068'. [ 231.889952][T10017] netlink: 'syz.2.1068': attribute type 5 has an invalid length. [ 231.889968][T10017] netlink: 43 bytes leftover after parsing attributes in process `syz.2.1068'. [ 232.212234][T10035] geneve1: entered allmulticast mode [ 233.070452][T10050] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1085'. [ 233.770794][T10064] netlink: 260 bytes leftover after parsing attributes in process `syz.3.1090'. [ 234.610093][T10076] netlink: 'syz.4.1093': attribute type 4 has an invalid length. [ 234.610120][T10076] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1093'. [ 234.763313][T10076] .`: renamed from bond0 (while UP) [ 235.105300][T10087] xt_cgroup: path and classid specified [ 236.139312][T10112] geneve0: entered allmulticast mode [ 236.182451][T10114] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1103'. [ 237.800872][T10137] netlink: 'syz.0.1109': attribute type 5 has an invalid length. [ 237.800909][T10137] netlink: 140 bytes leftover after parsing attributes in process `syz.0.1109'. [ 238.086101][T10145] Bluetooth: MGMT ver 1.23 [ 238.843954][T10157] netlink: 92 bytes leftover after parsing attributes in process `syz.2.1114'. [ 239.574182][T10172] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1117'. [ 239.595024][T10172] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1117'. [ 239.642363][T10172] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1117'. [ 239.929726][T10181] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1120'. [ 240.149915][T10188] sctp: [Deprecated]: syz.1.1123 (pid 10188) Use of int in max_burst socket option deprecated. [ 240.149915][T10188] Use struct sctp_assoc_value instead [ 240.222722][T10187] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1124'. [ 240.222762][T10187] netlink: 92 bytes leftover after parsing attributes in process `syz.3.1124'. [ 240.277402][T10184] syzkaller0: entered promiscuous mode [ 240.277429][T10184] syzkaller0: entered allmulticast mode [ 241.015729][ T9148] IPVS: starting estimator thread 0... [ 241.101189][T10205] IPVS: using max 24 ests per chain, 57600 per kthread [ 241.285712][T10207] netlink: 'syz.4.1129': attribute type 4 has an invalid length. [ 241.285739][T10207] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1129'. [ 241.409918][T10213] netlink: 'syz.4.1129': attribute type 4 has an invalid length. [ 241.409944][T10213] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1129'. [ 241.474190][T10211] netlink: 'syz.1.1130': attribute type 1 has an invalid length. [ 241.721057][T10211] 8021q: adding VLAN 0 to HW filter on device bond6 [ 241.815924][T10233] netlink: 'syz.0.1131': attribute type 21 has an invalid length. [ 242.372172][T10247] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1136'. [ 242.437601][T10233] netlink: 'syz.0.1131': attribute type 6 has an invalid length. [ 242.437629][T10233] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1131'. [ 242.994809][T10259] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1140'. [ 243.145568][T10266] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1139'. [ 243.175784][T10261] gre2: entered promiscuous mode [ 244.264338][T10287] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1143'. [ 245.063252][T10289] syzkaller0: entered promiscuous mode [ 245.063456][T10289] syzkaller0: entered allmulticast mode [ 245.087891][T10293] netlink: 'syz.4.1146': attribute type 1 has an invalid length. [ 245.493697][T10328] netlink: 'syz.1.1154': attribute type 62 has an invalid length. [ 250.130235][T10343] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 250.513556][T10354] netlink: 'syz.0.1160': attribute type 10 has an invalid length. [ 250.558702][T10358] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1161'. [ 250.703660][T10358] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1161'. [ 251.614108][T10371] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1164'. [ 251.614204][T10371] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1164'. [ 251.655016][T10371] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1164'. [ 251.655114][T10371] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1164'. [ 251.909807][T10374] syzkaller1: entered promiscuous mode [ 251.909833][T10374] syzkaller1: entered allmulticast mode [ 253.120245][T10405] openvswitch: netlink: Message has 4 unknown bytes. [ 253.723685][T10385] netlink: 'syz.2.1168': attribute type 4 has an invalid length. [ 254.336787][T10440] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1184'. [ 254.409819][T10442] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1183'. [ 254.526627][T10446] netlink: 'syz.0.1185': attribute type 1 has an invalid length. [ 254.851694][T10446] netlink: 'syz.0.1185': attribute type 1 has an invalid length. [ 254.890611][T10456] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1185'. [ 255.041269][T10449] 8021q: adding VLAN 0 to HW filter on device bond4 [ 255.068346][T10449] bond3: (slave bond4): making interface the new active one [ 255.068945][T10449] bond3: (slave bond4): Enslaving as an active interface with an up link [ 255.120181][T10450] bond3: (slave gretap1): Enslaving as a backup interface with an up link [ 255.309347][T10452] 8021q: adding VLAN 0 to HW filter on device bond5 [ 255.327333][T10452] bond3: (slave bond5): Enslaving as a backup interface with an up link [ 255.366841][T10456] 8021q: adding VLAN 0 to HW filter on device bond3 [ 255.797788][T10473] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1188'. [ 255.844844][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.564130][T10488] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 256.569011][T10488] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1193'. [ 256.839234][T10499] SET target dimension over the limit! [ 256.914871][T10500] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1196'. [ 257.251954][T10501] netlink: 'syz.2.1198': attribute type 2 has an invalid length. [ 257.777415][T10527] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1200'. [ 257.977886][T10525] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1203'. [ 257.978140][T10525] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1203'. [ 258.010362][T10525] netlink: 'syz.2.1203': attribute type 21 has an invalid length. [ 258.010390][T10525] IPv6: NLM_F_CREATE should be specified when creating new route [ 258.010487][T10525] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 258.010499][T10525] IPv6: NLM_F_CREATE should be set when creating new route [ 258.010548][T10525] IPv6: NLM_F_CREATE should be set when creating new route [ 258.010576][T10525] IPv6: NLM_F_CREATE should be set when creating new route [ 258.259551][T10525] netlink: 'syz.2.1203': attribute type 21 has an invalid length. [ 258.259641][T10525] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 258.310192][T10525] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1203'. [ 258.310222][T10525] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1203'. [ 258.402209][T10530] bridge0: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 259.157634][T10552] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1209'. [ 259.579738][T10565] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1214'. [ 259.619306][T10556] netlink: 'syz.2.1211': attribute type 5 has an invalid length. [ 259.619332][T10556] netlink: 'syz.2.1211': attribute type 9 has an invalid length. [ 260.668789][T10576] siw: device registration error -23 [ 261.023794][T10584] sctp: [Deprecated]: syz.2.1218 (pid 10584) Use of struct sctp_assoc_value in delayed_ack socket option. [ 261.023794][T10584] Use struct sctp_sack_info instead [ 261.076881][T10576] wlan0 speed is unknown, defaulting to 1000 [ 261.093032][T10576] lo speed is unknown, defaulting to 1000 [ 261.479768][T10599] ip_tables: iptables: counters copy to user failed while replacing table [ 262.083050][T10601] syz_tun: entered allmulticast mode [ 262.609303][T10631] __nla_validate_parse: 4 callbacks suppressed [ 262.609327][T10631] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1227'. [ 263.396242][T10640] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1230'. [ 263.396511][T10639] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1230'. [ 263.673313][T10642] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1231'. [ 264.008299][T10646] x_tables: unsorted underflow at hook 4 [ 264.821995][T10663] xt_hashlimit: size too large, truncated to 1048576 [ 265.183521][T10664] ip_tables: iptables: counters copy to user failed while replacing table [ 266.044560][T10679] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 266.079283][T10679] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1241'. [ 266.404646][T10682] xt_policy: output policy not valid in PREROUTING and INPUT [ 266.531500][T10682] tipc: Failed to remove unknown binding: 66,1,1/0:295594964/295594966 [ 266.531544][T10682] tipc: Failed to remove unknown binding: 66,1,1/0:295594964/295594966 [ 266.647487][T10685] x_tables: duplicate entry at hook 3 [ 267.461761][T10703] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1250'. [ 267.768215][T10698] netlink: 'syz.0.1248': attribute type 1 has an invalid length. [ 267.989448][T10698] 8021q: adding VLAN 0 to HW filter on device bond6 [ 268.406625][T10728] netlink: 'syz.2.1252': attribute type 29 has an invalid length. [ 268.525900][T10729] netlink: 'syz.2.1252': attribute type 29 has an invalid length. [ 268.593372][T10731] ip6t_hbh: Not strict - not implemented [ 269.179732][T10744] netlink: 'syz.4.1257': attribute type 1 has an invalid length. [ 269.356786][T10744] bond0: entered promiscuous mode [ 269.360579][T10744] 8021q: adding VLAN 0 to HW filter on device bond0 [ 269.559665][T10754] 8021q: adding VLAN 0 to HW filter on device bond0 [ 269.560547][T10754] bond0: (slave xfrm1): The slave device specified does not support setting the MAC address [ 269.560570][T10754] bond0: (slave xfrm1): Setting fail_over_mac to active for active-backup mode [ 269.620129][T10754] bond0: (slave xfrm1): making interface the new active one [ 269.620155][T10754] xfrm1: entered promiscuous mode [ 269.682488][T10762] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1260'. [ 269.684912][T10763] netlink: 'syz.0.1261': attribute type 21 has an invalid length. [ 269.761447][T10754] xfrm1: left promiscuous mode [ 269.871855][T10763] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1261'. [ 270.562227][T10767] bond7: option packets_per_slave: invalid value (18446744073709551615) [ 270.562258][T10767] bond7: option packets_per_slave: allowed values 0 - 65535 [ 270.566795][T10767] bond7 (unregistering): Released all slaves [ 270.931403][T10776] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1266'. [ 272.180082][T10809] netlink: 'syz.2.1272': attribute type 1 has an invalid length. [ 272.238591][T10809] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1272'. [ 272.238637][T10809] netlink: 'syz.2.1272': attribute type 10 has an invalid length. [ 272.238659][T10809] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1272'. [ 272.300150][T10809] geneve3: entered promiscuous mode [ 272.300182][T10809] geneve3: entered allmulticast mode [ 272.806998][T10819] netlink: 'syz.4.1274': attribute type 1 has an invalid length. [ 273.135563][T10825] netlink: 'syz.4.1274': attribute type 10 has an invalid length. [ 273.135587][T10825] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1274'. [ 273.592430][T10832] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1277'. [ 273.787865][T10819] 8021q: adding VLAN 0 to HW filter on device bond3 [ 273.973698][T10824] bond3: (slave dummy0): making interface the new active one [ 274.021995][T10824] bond3: (slave dummy0): Enslaving as an active interface with an up link [ 274.049716][T10825] dummy0: entered promiscuous mode [ 274.076269][T10825] bond3: (slave dummy0): Releasing active interface [ 274.219487][T10833] netlink: 'syz.0.1277': attribute type 12 has an invalid length. [ 274.326311][T10844] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1279'. [ 274.806308][T10851] bond7 (unregistering): Released all slaves [ 275.035264][T10863] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 275.595387][T10871] netlink: 'syz.3.1285': attribute type 49 has an invalid length. [ 275.598430][T10870] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1285'. [ 276.725247][T10905] C: entered promiscuous mode [ 276.900404][T10905] tunl0: entered promiscuous mode [ 276.945550][T10905] gre0: entered promiscuous mode [ 277.013146][T10905] gretap0: entered promiscuous mode [ 277.029707][T10905] erspan0: entered promiscuous mode [ 277.078009][T10905] ip_vti0: entered promiscuous mode [ 277.110249][T10905] ip6_vti0: entered promiscuous mode [ 277.121921][T10905] sit0: entered promiscuous mode [ 277.129675][T10905] ip6tnl0: entered promiscuous mode [ 277.150806][T10905] ip6gre0: entered promiscuous mode [ 277.157692][T10927] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1294'. [ 277.157717][T10927] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1294'. [ 277.269262][T10905] syz_tun: entered promiscuous mode [ 277.300335][T10905] ip6gretap0: entered promiscuous mode [ 277.329572][T10905] vcan0: entered promiscuous mode [ 277.344653][T10905] .`: entered promiscuous mode [ 277.344680][T10905] bond_slave_0: entered promiscuous mode [ 277.347147][T10905] bond_slave_1: entered promiscuous mode [ 277.347836][T10905] team0: entered promiscuous mode [ 277.347854][T10905] team_slave_0: entered promiscuous mode [ 277.348698][T10905] team_slave_1: entered promiscuous mode [ 277.409838][T10905] nlmon0: entered promiscuous mode [ 277.424522][T10905] batadv0: entered promiscuous mode [ 277.449458][T10905] veth0: entered promiscuous mode [ 277.474634][T10905] veth1: entered promiscuous mode [ 277.505707][T10905] wg0: entered promiscuous mode [ 277.526881][T10905] wg2: entered promiscuous mode [ 277.540521][T10905] veth0_to_bridge: entered promiscuous mode [ 277.569543][T10905] bridge_slave_0: entered promiscuous mode [ 277.586986][T10905] veth1_to_bridge: entered promiscuous mode [ 277.606910][T10905] bridge_slave_1: entered promiscuous mode [ 277.625887][T10905] veth0_to_bond: entered promiscuous mode [ 277.629099][T10905] veth1_to_bond: entered promiscuous mode [ 277.656288][T10905] veth0_to_team: entered promiscuous mode [ 277.676201][T10905] veth1_to_team: entered promiscuous mode [ 277.699333][T10905] veth0_to_batadv: entered promiscuous mode [ 277.723053][T10905] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 277.723249][T10905] batadv_slave_0: entered promiscuous mode [ 277.749847][T10905] veth1_to_batadv: entered promiscuous mode [ 277.764483][T10905] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 277.764547][T10905] batadv_slave_1: entered promiscuous mode [ 277.789844][T10905] xfrm0: entered promiscuous mode [ 277.801488][T10905] veth0_to_hsr: entered promiscuous mode [ 277.826062][T10905] veth1_to_hsr: entered promiscuous mode [ 277.850095][T10905] hsr0: entered promiscuous mode [ 277.869483][T10905] veth1_virt_wifi: entered promiscuous mode [ 277.893517][T10905] veth0_virt_wifi: entered promiscuous mode [ 277.909958][T10905] virt_wifi0: entered promiscuous mode [ 277.932802][T10905] vlan0: entered promiscuous mode [ 277.936566][T10905] ÿÿÿÿÿÿ: entered promiscuous mode [ 277.940357][T10905] macvlan0: entered promiscuous mode [ 277.978183][T10905] macvlan1: entered promiscuous mode [ 277.997556][T10905] ipvlan0: entered promiscuous mode [ 278.015201][T10905] ipvlan1: entered promiscuous mode [ 278.030312][T10905] geneve0: entered promiscuous mode [ 278.040410][T10905] geneve1: entered promiscuous mode [ 278.098624][T10905] netdevsim netdevsim4 netdevsim1: entered promiscuous mode [ 278.116448][T10905] netdevsim netdevsim4 netdevsim2: entered promiscuous mode [ 278.120300][T10905] netdevsim netdevsim4 netdevsim3: entered promiscuous mode [ 278.146072][T10905] mac80211_hwsim hwsim10 wlan0: entered promiscuous mode [ 278.174113][T10905] mac80211_hwsim hwsim11 ÿ: entered promiscuous mode [ 278.178976][T10905] macvtap1: entered promiscuous mode [ 278.203325][T10905] bond1: entered promiscuous mode [ 278.204531][T10905] veth2: entered promiscuous mode [ 278.206839][T10905] veth3: entered promiscuous mode [ 278.209644][T10905] vxlan0: entered promiscuous mode [ 278.251879][T10905] mac80211_hwsim hwsim15 wlan2: entered promiscuous mode [ 278.253211][T10905] pimreg3: entered promiscuous mode [ 278.254261][T10905] vlan2: entered promiscuous mode [ 278.257555][T10905] syztnl2: entered promiscuous mode [ 278.322602][T10905] ;: entered promiscuous mode [ 278.328059][T10905] gtp0: entered promiscuous mode [ 278.330026][T10905] ip6gre1: entered promiscuous mode [ 278.352935][T10905] macsec1: entered promiscuous mode [ 278.358728][T10905] virt_wifi0.0: entered promiscuous mode [ 278.382105][T10905] veth4: entered promiscuous mode [ 278.389899][T10905] veth5: entered promiscuous mode [ 278.410060][T10905] ipip0: entered promiscuous mode [ 278.421747][T10905] bond2: entered promiscuous mode [ 278.421772][T10905] geneve2: entered promiscuous mode [ 278.453333][T10905] bridge0: entered promiscuous mode [ 278.454012][T10905] bond3: entered promiscuous mode [ 278.531987][ T9167] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 278.532029][ T9167] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.532058][ T9167] netdevsim netdevsim4 netdevsim0: unset [1, 1] type 2 family 0 port 19999 - 0 [ 278.571700][ T9167] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 278.571741][ T9167] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.571771][ T9167] netdevsim netdevsim4 netdevsim3: unset [1, 1] type 2 family 0 port 19999 - 0 [ 278.571897][ T9167] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 278.571937][ T9167] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.571965][ T9167] netdevsim netdevsim4 netdevsim2: unset [1, 1] type 2 family 0 port 19999 - 0 [ 278.572041][ T9167] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 278.572070][ T9167] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.572100][ T9167] netdevsim netdevsim4 netdevsim1: unset [1, 1] type 2 family 0 port 19999 - 0 [ 278.574924][T10926] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1294'. [ 278.590640][T10933] tipc: Enabling of bearer rejected, failed to enable media [ 279.264660][T10943] ieee802154 phy0 wpan0: encryption failed: -22 [ 279.269012][T10944] ieee802154 phy0 wpan0: encryption failed: -22 [ 279.290963][T10943] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1297'. [ 279.314493][T10953] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1296'. [ 280.276927][T10981] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1308'. [ 280.651430][T10992] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1312'. [ 281.431895][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 281.741396][T11011] tipc: Enabling of bearer rejected, failed to enable media [ 282.226703][T11026] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1320'. [ 282.713264][ T31] audit: type=1800 audit(1789653970.629:2): pid=11032 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1322" name=0A dev="tmpfs" ino=1401 res=0 errno=0 [ 283.043681][T11047] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1324'. [ 283.043718][T11047] netlink: 'syz.0.1324': attribute type 10 has an invalid length. [ 283.043735][T11047] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1324'. [ 283.047050][T11047] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1324'. [ 283.047084][T11047] netlink: 'syz.0.1324': attribute type 10 has an invalid length. [ 283.055855][T11047] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1324'. [ 283.079111][T11047] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1324'. [ 283.079151][T11047] netlink: 'syz.0.1324': attribute type 10 has an invalid length. [ 283.079170][T11047] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1324'. [ 283.099596][T11047] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1324'. [ 283.099701][T11047] netlink: 'syz.0.1324': attribute type 10 has an invalid length. [ 283.099748][T11047] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1324'. [ 283.116813][T11047] netlink: 'syz.0.1324': attribute type 10 has an invalid length. [ 283.134159][T11047] netlink: 'syz.0.1324': attribute type 10 has an invalid length. [ 283.179323][T11047] netlink: 'syz.0.1324': attribute type 10 has an invalid length. [ 283.208466][T11047] netlink: 'syz.0.1324': attribute type 10 has an invalid length. [ 283.222230][T11047] netlink: 'syz.0.1324': attribute type 10 has an invalid length. [ 283.223607][T11047] netlink: 'syz.0.1324': attribute type 10 has an invalid length. [ 284.067136][T11070] IPv6: NLM_F_CREATE should be specified when creating new route [ 284.185436][T11076] digital: digital_start_poll: Unknown protocol [ 284.751314][T11084] sctp: [Deprecated]: syz.2.1335 (pid 11084) Use of int in maxseg socket option. [ 284.751314][T11084] Use struct sctp_assoc_value instead [ 284.969690][T11094] C: renamed from lo (while UP) [ 285.014897][T11094] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 285.184356][T11095] batman_adv: batadv0: Adding interface: syzkaller0 [ 285.184385][T11095] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 285.184421][T11095] batman_adv: batadv0: Interface activated: syzkaller0 [ 285.341692][T11093] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 285.605783][T11093] batman_adv: batadv0: Removing interface: syzkaller0 [ 285.793785][T11102] __nla_validate_parse: 127 callbacks suppressed [ 285.793810][T11102] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1341'. [ 285.936152][T11108] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1342'. [ 286.154463][T11108] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1342'. [ 286.510820][T11117] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1344'. [ 287.499552][T11160] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1354'. [ 287.499581][T11160] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 288.039705][T11168] netlink: 108 bytes leftover after parsing attributes in process `syz.3.1357'. [ 288.340709][T11172] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1359'. [ 288.436721][T11183] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1361'. [ 289.448364][T11222] validate_nla: 57 callbacks suppressed [ 289.448387][T11222] netlink: 'syz.1.1371': attribute type 7 has an invalid length. [ 289.448402][T11222] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1371'. [ 289.448437][T11222] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1371'. [ 289.718427][T11228] netlink: 'syz.1.1371': attribute type 7 has an invalid length. [ 289.881193][T11227] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 290.805552][T11252] __nla_validate_parse: 3 callbacks suppressed [ 290.805577][T11252] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1379'. [ 290.966292][T11257] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1381'. [ 292.008317][T11282] netlink: 'syz.4.1386': attribute type 30 has an invalid length. [ 292.360339][T11282] bond4: option arp_missed_max: invalid value (0) [ 292.360366][T11282] bond4: option arp_missed_max: allowed values 1 - 255 [ 292.403285][T11282] bond4 (unregistering): Released all slaves [ 292.775248][T11284] bond4: (slave bond_slave_0): Device is not our slave [ 292.775275][T11284] bond4: option active_slave: invalid value (bond_slave_0) [ 292.830413][ T5630] Bluetooth: hci4: link tx timeout [ 292.830564][ T5630] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 292.882521][T11284] bond4 (unregistering): Released all slaves [ 293.024955][T11288] team0: Device xfrm0 is of different type [ 293.123349][T11291] tipc: Enabled bearer , priority 0 [ 293.249340][T11299] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1390'. [ 293.249627][T11299] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1390'. [ 294.063987][ T772] IPVS: starting estimator thread 0... [ 294.151362][T11325] IPVS: using max 24 ests per chain, 57600 per kthread [ 294.241091][ T5802] tipc: Node number set to 1597636608 [ 294.584471][T11336] bond4 (unregistering): Released all slaves [ 294.622332][T11340] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1399'. [ 294.622357][T11340] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1399'. [ 294.623104][T11343] netlink: 'syz.3.1401': attribute type 28 has an invalid length. [ 294.623124][T11343] netlink: 'syz.3.1401': attribute type 3 has an invalid length. [ 294.623139][T11343] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1401'. [ 294.624412][T11343] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1401'. [ 294.891564][ T5627] Bluetooth: hci4: command 0x0405 tx timeout [ 295.256692][T11350] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1402'. [ 295.911628][T11350] team0: Port device team_slave_0 removed [ 296.005389][T11369] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 296.034767][T11369] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 296.536084][T11388] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1409'. [ 296.536358][T11388] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1409'. [ 296.536515][T11388] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1409'. [ 296.536663][T11388] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1409'. [ 296.589761][T11388] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1409'. [ 296.590295][T11388] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1409'. [ 296.590823][T11388] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1409'. [ 296.593190][T11388] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1409'. [ 296.600020][T11388] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1409'. [ 296.617058][T11388] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1409'. [ 297.323911][T11392] netlink: 'syz.3.1412': attribute type 58 has an invalid length. [ 297.479770][T11396] netlink: zone id is out of range [ 297.479797][T11396] netlink: zone id is out of range [ 297.479850][T11396] netlink: zone id is out of range [ 297.479859][T11396] netlink: zone id is out of range [ 297.479867][T11396] netlink: zone id is out of range [ 297.479876][T11396] netlink: zone id is out of range [ 297.479886][T11396] netlink: zone id is out of range [ 297.479899][T11396] netlink: zone id is out of range [ 297.479908][T11396] netlink: zone id is out of range [ 297.479917][T11396] netlink: zone id is out of range [ 301.382282][T11472] netlink: 'syz.4.1433': attribute type 2 has an invalid length. [ 301.530340][T11472] tun0: tun_chr_ioctl cmd 1074025675 [ 301.530366][T11472] tun0: persist disabled [ 301.602807][T11474] __nla_validate_parse: 28 callbacks suppressed [ 301.602831][T11474] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1433'. [ 301.984527][T11474] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1433'. [ 301.984662][T11474] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1433'. [ 301.985982][T11474] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1433'. [ 301.986108][T11474] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1433'. [ 301.986222][T11474] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1433'. [ 301.986344][T11474] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1433'. [ 301.986457][T11474] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1433'. [ 301.986570][T11474] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1433'. [ 301.986683][T11474] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1433'. [ 302.269665][T11485] SET target dimension over the limit! [ 304.981572][T11547] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 304.997674][T11548] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 305.015213][T11547] net_ratelimit: 533 callbacks suppressed [ 305.015238][T11547] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 305.931600][T11550] syzkaller0: entered promiscuous mode [ 305.931808][T11550] syzkaller0: entered allmulticast mode [ 305.993282][ T5630] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 306.029105][T11571] syzkaller1: entered promiscuous mode [ 306.029132][T11571] syzkaller1: entered allmulticast mode [ 307.126378][T11571] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 307.126424][T11571] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.192001][T11588] __nla_validate_parse: 31 callbacks suppressed [ 307.192026][T11588] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1462'. [ 307.254099][T11584] netlink: Failed to add  helper -22 [ 307.254158][T11584] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 308.237112][T11571] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 308.237155][T11571] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.840067][T11614] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1471'. [ 308.869225][T11571] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 308.869267][T11571] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.314013][T11623] Cannot find del_set index 4 as target [ 309.445610][T11628] netlink: 'syz.3.1473': attribute type 1 has an invalid length. [ 309.830006][T11628] 8021q: adding VLAN 0 to HW filter on device bond3 [ 309.906291][T11636] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 309.963993][T11628] macvtap1: entered allmulticast mode [ 310.553722][ T9193] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 310.553763][ T9193] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.554714][ T6514] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 310.554748][ T6514] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.574393][ T9193] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 310.574432][ T9193] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.792071][ T37] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 310.792117][ T37] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.079353][T11688] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1485'. [ 312.749239][T11700] netlink: 'syz.1.1488': attribute type 1 has an invalid length. [ 312.886675][T11707] netlink: 'syz.1.1488': attribute type 1 has an invalid length. [ 313.245413][T11704] pim6reg: entered allmulticast mode [ 313.394721][T11711] pim6reg: left allmulticast mode [ 314.046899][ T6527] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 314.288912][T11733] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1494'. [ 314.314130][T11719] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 314.395244][T11736] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1496'. [ 314.415421][T11743] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1497'. [ 314.690439][T11728] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 314.757691][T11736] bond7: option lacp_strict: mode dependency failed, not supported in mode balance-rr(0) [ 314.839534][T11736] bond7 (unregistering): Released all slaves [ 315.681989][T11768] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1505'. [ 316.097103][ T9] wlan0 speed is unknown, defaulting to 1000 [ 316.097147][ T9] syz0: Port: 1 Link DOWN [ 316.507655][ T9] wlan0 speed is unknown, defaulting to 1000 [ 316.507687][ T9] syz0: Port: 1 Link ACTIVE [ 316.722987][T11789] ip_tables: iptables: counters copy to user failed while replacing table [ 317.284998][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.305414][T11798] xt_hashlimit: size too large, truncated to 1048576 [ 318.888105][T11830] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1519'. [ 319.358308][T11854] netlink: 'syz.4.1523': attribute type 1 has an invalid length. [ 319.908749][T11851] syzkaller0: entered promiscuous mode [ 319.908982][T11851] syzkaller0: entered allmulticast mode [ 320.019627][T11854] bond4: entered promiscuous mode [ 320.020163][T11854] 8021q: adding VLAN 0 to HW filter on device bond4 [ 320.846232][T11884] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 321.086891][T11889] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 321.142641][T11889] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 325.249013][T11886] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1528'. [ 325.720416][T11903] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 325.977583][T11910] veth0_to_bond: left promiscuous mode [ 326.975707][T11930] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1537'. [ 326.990824][T11937] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1540'. [ 327.307100][T11946] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 327.327636][T11947] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 327.711661][T11954] wlan0 speed is unknown, defaulting to 1000 [ 327.734825][T11954] lo speed is unknown, defaulting to 1000 [ 328.180024][T11958] bond7: entered promiscuous mode [ 328.181143][T11958] bond7: entered allmulticast mode [ 328.210492][T11958] 8021q: adding VLAN 0 to HW filter on device bond7 [ 328.733659][T11978] netlink: 'syz.1.1550': attribute type 1 has an invalid length. [ 328.925636][T11978] tipc: Enabled bearer , priority 0 [ 329.126484][T11978] syzkaller0: entered promiscuous mode [ 329.131945][T11978] syzkaller0: entered allmulticast mode [ 329.132851][T11978] tipc: Resetting bearer [ 329.220555][T11977] tipc: Resetting bearer [ 329.353597][T11997] netlink: 7 bytes leftover after parsing attributes in process `syz.4.1556'. [ 329.424241][T11996] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1557'. [ 329.650079][T12002] netlink: 'syz.4.1556': attribute type 1 has an invalid length. [ 334.051576][T11977] tipc: Disabling bearer [ 334.155551][T12016] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 334.546677][T12021] netlink: 'syz.1.1561': attribute type 5 has an invalid length. [ 334.809823][T12028] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1562'. [ 334.827122][T12032] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1563'. [ 334.914662][T12034] C: renamed from lo (while UP) [ 335.106191][T12034] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 335.587493][T12040] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1566'. [ 336.511601][T12063] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 337.013222][T12070] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1574'. [ 337.539469][T12086] netlink: 'syz.2.1578': attribute type 1 has an invalid length. [ 337.661650][T12092] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1580'. [ 338.778675][T12121] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1587'. [ 339.425936][T12126] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 339.475275][T12126] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.519485][T12135] netlink: 'syz.3.1590': attribute type 11 has an invalid length. [ 339.861185][T12126] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 339.861232][T12126] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.274193][T12126] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 340.274234][T12126] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.514710][T12126] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 340.514751][T12126] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.590131][T12162] 0: reclassify loop, rule prio 0, protocol 03 [ 341.092848][ T9148] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 341.092892][ T9148] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.221857][ T9151] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 341.221899][ T9151] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.311201][ T9148] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 341.311241][ T9148] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.312766][ T9151] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 341.312800][ T9151] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.906346][T12194] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1605'. [ 341.906374][T12194] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1605'. [ 342.241884][T12198] netlink: 'syz.0.1605': attribute type 178 has an invalid length. [ 342.447786][T12204] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1609'. [ 342.724393][T12207] netlink: 'syz.4.1608': attribute type 30 has an invalid length. [ 343.092459][T12215] netlink: 'syz.0.1612': attribute type 1 has an invalid length. [ 343.391088][T12220] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1613'. [ 343.632431][T12218] bond7: (slave geneve3): making interface the new active one [ 343.659392][T12218] bond7: (slave geneve3): Enslaving as an active interface with an up link [ 343.768718][ T9176] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 343.768786][ T9176] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 343.768826][ T9176] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 344.273145][T12236] netlink: 'syz.2.1616': attribute type 1 has an invalid length. [ 344.503542][T12249] netlink: 'syz.0.1617': attribute type 1 has an invalid length. [ 344.687550][T12247] 8021q: adding VLAN 0 to HW filter on device bond7 [ 344.700226][T12247] bond6: (slave bond7): making interface the new active one [ 344.711588][T12247] bond6: (slave bond7): Enslaving as an active interface with an up link [ 344.712271][T12238] syzkaller1: entered promiscuous mode [ 344.712292][T12238] syzkaller1: entered allmulticast mode [ 344.804541][T12248] bond6: (slave gretap0): Enslaving as a backup interface with an up link [ 344.952292][T12249] bond8: entered promiscuous mode [ 344.955186][T12249] 8021q: adding VLAN 0 to HW filter on device bond8 [ 345.117974][T12257] bond8: (slave bridge1): making interface the new active one [ 345.118006][T12257] bridge1: entered promiscuous mode [ 345.151565][T12257] bond8: (slave bridge1): Enslaving as an active interface with an up link [ 345.579100][T12280] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1626'. [ 345.988103][T12283] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1627'. [ 346.267523][T12288] netlink: 'syz.1.1628': attribute type 21 has an invalid length. [ 346.291391][T12290] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1630'. [ 346.291422][T12290] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1630'. [ 346.564457][T12293] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1628'. [ 346.564489][T12293] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1628'. [ 347.073654][T12309] netlink: 'syz.3.1634': attribute type 1 has an invalid length. [ 347.402935][T12315] netlink: 'syz.0.1635': attribute type 10 has an invalid length. [ 347.402965][T12315] __nla_validate_parse: 1 callbacks suppressed [ 347.402978][T12315] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1635'. [ 348.614603][T12342] netlink: 'syz.4.1646': attribute type 49 has an invalid length. [ 348.733912][T12346] veth1_to_bond: entered allmulticast mode [ 348.817425][T12346] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1645'. [ 348.944935][T12346] veth1_to_bond (unregistering): left allmulticast mode [ 349.003158][T12346] bond0: (slave bond_slave_1): Releasing backup interface [ 349.092670][T12356] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1651'. [ 349.165816][T12348] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1648'. [ 349.370865][T12350] syzkaller1: entered promiscuous mode [ 349.372329][T12350] syzkaller1: entered allmulticast mode [ 350.615223][T12385] netlink: 'syz.0.1655': attribute type 10 has an invalid length. [ 350.615906][T12391] netlink: 'syz.0.1655': attribute type 10 has an invalid length. [ 350.742443][T12385] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 350.772454][T12385] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 350.776548][ T6524] __ib_cache_gid_add: unable to add gid fe80:0000:0000:0000:a8aa:aaff:feaa:aa17 error=-28 [ 350.933099][T12395] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1657'. [ 351.405229][T12410] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1664'. [ 352.139475][T12431] xt_hashlimit: size too large, truncated to 1048576 [ 352.405805][T12450] ip_tables: iptables: counters copy to user failed while replacing table [ 352.590124][T12454] xt_recent: hitcount (4294901760) is larger than allowed maximum (65535) [ 352.945710][T12451] veth0: entered promiscuous mode [ 353.038881][T12449] veth0: left promiscuous mode [ 354.054282][T12479] x_tables: unsorted underflow at hook 1 [ 354.838301][T12501] xt_hashlimit: size too large, truncated to 1048576 [ 354.935137][T12504] netlink: 'syz.0.1681': attribute type 11 has an invalid length. [ 355.096850][T12510] netlink: 'syz.4.1682': attribute type 9 has an invalid length. [ 355.124036][ T9193] __ib_cache_gid_add: unable to add gid fe80:0000:0000:0000:a8aa:aaff:feaa:aa17 error=-28 [ 355.128847][T12507] 8021q: adding VLAN 0 to HW filter on device bond0 [ 355.153003][T12507] 8021q: adding VLAN 0 to HW filter on device team0 [ 355.155349][T12507] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 355.240704][T12507] A link change request failed with some changes committed already. Interface rose0 may have been left with an inconsistent configuration, please check. [ 355.262866][ T10] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 355.301324][T12517] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1682'. [ 355.342764][ T10] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 355.413206][T12521] xt_hashlimit: size too large, truncated to 1048576 [ 355.668030][T12525] pim6reg: entered allmulticast mode [ 355.757284][T12517] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1682'. [ 355.757454][T12517] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1682'. [ 355.757636][T12517] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1682'. [ 355.757783][T12517] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1682'. [ 355.757928][T12517] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1682'. [ 355.758103][T12517] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1682'. [ 355.758258][T12517] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1682'. [ 355.758410][T12517] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1682'. [ 355.865469][T12517] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1682'. [ 356.186142][T12534] xt_esp: unknown flags DD [ 356.245970][ T5763] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 356.248930][T12519] A link change request failed with some changes committed already. Interface rose0 may have been left with an inconsistent configuration, please check. [ 356.696251][T12531] pim6reg: left allmulticast mode [ 356.955741][ T10] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 358.581245][T12572] netlink: 'syz.4.1695': attribute type 1 has an invalid length. [ 358.922503][T12572] bond5: entered promiscuous mode [ 358.929301][T12572] 8021q: adding VLAN 0 to HW filter on device bond5 [ 359.808773][T12623] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 359.808807][T12623] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 359.810370][T12623] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 359.810396][T12623] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 360.422371][T12632] openvswitch: netlink: IP tunnel dst address not specified [ 360.422413][T12632] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 361.652542][T12577] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 362.115664][T12634] __nla_validate_parse: 8 callbacks suppressed [ 362.115797][T12634] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1708'. [ 362.154566][T12634] openvswitch: netlink: Missing key (keys=50, expected=80) [ 363.234576][T12655] bridge0: port 2(bridge_slave_1) entered blocking state [ 363.234763][T12655] bridge0: port 2(bridge_slave_1) entered listening state [ 363.235266][T12655] bridge0: port 1(bridge_slave_0) entered blocking state [ 363.235402][T12655] bridge0: port 1(bridge_slave_0) entered listening state [ 363.684395][T12679] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 364.503030][T12691] netlink: 'syz.0.1722': attribute type 8 has an invalid length. [ 364.549313][T12695] netlink: 'syz.4.1725': attribute type 5 has an invalid length. [ 365.207267][T12714] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1730'. [ 365.227162][T12714] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1730'. [ 365.227201][T12714] openvswitch: netlink: Missing key (keys=c0, expected=40280) [ 366.582570][T12748] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1737'. [ 367.023011][T12756] xt_hashlimit: size too large, truncated to 1048576 [ 367.116929][T12759] xt_hashlimit: size too large, truncated to 1048576 [ 367.303602][T12759] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 367.560704][T12771] netlink: 'syz.4.1742': attribute type 1 has an invalid length. [ 367.694482][T12771] 8021q: adding VLAN 0 to HW filter on device bond6 [ 367.699428][T12774] syz_tun: left promiscuous mode [ 367.752936][T12774] bond6: (slave syz_tun): Enslaving as a backup interface with an up link [ 367.788955][T12780] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode [ 367.788986][T12780] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode [ 368.356418][T12720] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 368.356463][T12720] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 368.456288][T12789] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1745'. [ 368.552349][ T5630] Bluetooth: hci1: command 0x0406 tx timeout [ 368.594986][T12794] sctp: [Deprecated]: syz.1.1744 (pid 12794) Use of struct sctp_assoc_value in delayed_ack socket option. [ 368.594986][T12794] Use struct sctp_sack_info instead [ 368.815428][T12792] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1746'. [ 368.815466][T12792] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1746'. [ 368.938872][T12797] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 369.060199][T12720] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 369.060229][T12720] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 369.260162][T12720] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 369.260192][T12720] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 369.362402][T12720] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 369.362432][T12720] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 369.754630][T12814] IPVS: stopping master sync thread 7754 ... [ 370.050520][T12820] xt_addrtype: ipv6 does not support BROADCAST matching [ 370.162731][T12821] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1753'. [ 370.231713][ T10] wlan0 speed is unknown, defaulting to 1000 [ 370.231763][ T10] syz0: Port: 1 Link DOWN [ 370.296721][T12820] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1752'. [ 370.296750][T12820] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1752'. [ 372.401529][T12874] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 372.410224][T12874] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 372.493613][T12888] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 372.495395][T12887] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1768'. [ 372.566271][T12889] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 40 [ 372.595832][T12895] xt_TCPMSS: Only works on TCP SYN packets [ 372.602118][T12874] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 372.624259][T12874] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 372.628110][T12876] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 372.681159][T12874] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 372.713763][T12874] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 372.758493][T12874] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 372.789935][T12874] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 372.812916][T12874] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 372.816831][T12874] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 372.844828][T12874] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 372.863631][T12874] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 372.889378][T12874] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 372.914036][T12874] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 372.946014][T12874] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 372.997382][T12874] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 373.043710][T12874] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 373.069286][T12874] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 373.108887][T12874] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 373.141671][T12874] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 373.176799][T12874] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 373.214033][T12874] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 373.252475][T12874] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 373.319328][T12874] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 373.374511][T12874] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 373.395711][T12874] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 373.442116][T12874] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 373.471618][T12874] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 373.529081][T12874] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 373.582277][T12874] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 373.697619][T12874] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 373.718330][T12874] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 373.744753][T12874] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 373.917062][T12904] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1770'. [ 374.038792][T12908] netlink: 'syz.4.1771': attribute type 12 has an invalid length. [ 374.243368][T12894] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 374.770350][T12925] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 376.496490][T12970] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1782'. [ 377.479843][T12988] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1787'. [ 377.709331][T12994] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1789'. [ 378.361261][T13007] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1792'. [ 378.497927][T13007] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1792'. [ 378.652121][T13009] netlink: 'syz.0.1792': attribute type 9 has an invalid length. [ 378.652149][T13009] netlink: 'syz.0.1792': attribute type 4 has an invalid length. [ 378.652349][T13009] netlink: 'syz.0.1792': attribute type 9 has an invalid length. [ 378.652365][T13009] netlink: 'syz.0.1792': attribute type 4 has an invalid length. [ 378.652563][T13009] netlink: 'syz.0.1792': attribute type 9 has an invalid length. [ 378.652579][T13009] netlink: 'syz.0.1792': attribute type 4 has an invalid length. [ 378.652763][T13009] netlink: 'syz.0.1792': attribute type 9 has an invalid length. [ 378.652787][T13009] netlink: 'syz.0.1792': attribute type 4 has an invalid length. [ 378.652980][T13009] netlink: 'syz.0.1792': attribute type 9 has an invalid length. [ 378.728535][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 380.030103][T13033] mac80211_hwsim hwsim7 syzkaller0: left promiscuous mode [ 380.030132][T13033] mac80211_hwsim hwsim7 syzkaller0: left allmulticast mode [ 380.784120][T13044] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1799'. [ 381.136868][T13051] validate_nla: 57 callbacks suppressed [ 381.136891][T13051] netlink: 'syz.0.1801': attribute type 1 has an invalid length. [ 381.207373][T13053] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1801'. [ 381.236191][T13051] 8021q: adding VLAN 0 to HW filter on device bond9 [ 381.490191][T13053] bond9: (slave geneve4): making interface the new active one [ 381.516240][T13053] bond9: (slave geneve4): Enslaving as an active interface with an up link [ 381.554906][T13056] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1800'. [ 382.359042][T13066] netlink: 108 bytes leftover after parsing attributes in process `syz.3.1804'. [ 383.155846][T13095] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1810'. [ 383.938785][T13105] bond4: (slave C): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 384.056749][T13105] bond4: (slave C): Enslaving as an active interface with an up link [ 384.060674][T13105] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 384.692921][T13131] ipt_rpfilter: unknown options [ 385.130656][T13147] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1820'. [ 385.142317][T13147] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1820'. [ 385.143267][T13147] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1820'. [ 385.147050][T13147] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1820'. [ 385.150580][T13147] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1820'. [ 386.848897][T13187] __nla_validate_parse: 4 callbacks suppressed [ 386.848923][T13187] netlink: 112 bytes leftover after parsing attributes in process `syz.4.1827'. [ 387.495261][T13202] sctp: [Deprecated]: syz.4.1831 (pid 13202) Use of int in max_burst socket option deprecated. [ 387.495261][T13202] Use struct sctp_assoc_value instead [ 387.895052][T13218] bridge2: entered promiscuous mode [ 387.895238][T13218] bridge2: entered allmulticast mode [ 388.060735][T13218] team0: Port device bridge2 added [ 388.067278][T13223] bridge0: port 1(team0) entered blocking state [ 388.067497][T13223] bridge0: port 1(team0) entered disabled state [ 388.067693][T13223] team0: entered allmulticast mode [ 388.067710][T13223] team_slave_0: entered allmulticast mode [ 388.067731][T13223] team_slave_1: entered allmulticast mode [ 388.133028][T13223] team0: left allmulticast mode [ 388.133056][T13223] team_slave_0: left allmulticast mode [ 388.133078][T13223] team_slave_1: left allmulticast mode [ 388.288651][T13234] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1835'. [ 388.329727][T13230] pim6reg: entered allmulticast mode [ 388.590259][T13238] xt_ecn: cannot match TCP bits for non-tcp packets [ 388.619465][T13239] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1839'. [ 389.727532][T13263] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1844'. [ 390.770323][T13282] netlink: 'syz.3.1849': attribute type 2 has an invalid length. [ 390.803464][T13282] netlink: 'syz.3.1849': attribute type 2 has an invalid length. [ 390.803492][T13282] netlink: 1347 bytes leftover after parsing attributes in process `syz.3.1849'. [ 391.201867][T13287] gre1: entered promiscuous mode [ 391.945499][T13265] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 391.945545][T13265] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.945578][T13265] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 392.375665][T13303] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 393.008798][T13265] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 393.008844][T13265] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 393.008876][T13265] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 393.433422][ C0] bridge0: port 1(bridge_slave_0) entered learning state [ 393.434105][ C0] bridge0: port 2(bridge_slave_1) entered learning state [ 393.820040][T13265] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 393.820085][T13265] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 393.820118][T13265] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 393.908204][T13322] ieee802154 phy0 wpan0: encryption failed: -22 [ 393.909069][T13322] openvswitch: netlink: IPv6 tunnel dst address is zero [ 395.402896][T13361] netlink: 'syz.1.1860': attribute type 58 has an invalid length. [ 395.402926][T13361] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1860'. [ 396.181506][T13367] openvswitch: netlink: Message has 8 unknown bytes. [ 396.302904][ T37] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 396.302947][ T37] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 396.302978][ T37] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 396.303035][ T37] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 396.303064][ T37] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 396.303093][ T37] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 396.304982][T13370] openvswitch: netlink: Message has 8 unknown bytes. [ 396.478825][ T37] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 396.478874][ T37] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 396.478903][ T37] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 396.695504][ T37] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 396.695547][ T37] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 396.695577][ T37] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 397.019219][T13381] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1866'. [ 397.959839][T13407] xt_hashlimit: size too large, truncated to 1048576 [ 397.989935][T13406] xt_socket: unknown flags 0x8 [ 398.052599][T13409] xt_hashlimit: size too large, truncated to 1048576 [ 398.203628][T13414] netlink: 'syz.0.1872': attribute type 12 has an invalid length. [ 400.096751][T13455] netlink: 'syz.3.1884': attribute type 1 has an invalid length. [ 400.159441][T13455] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1884'. [ 400.202870][T13455] netlink: Conntrack attr has 1 unknown bytes [ 400.202909][T13455] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 400.745104][T13464] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1888'. [ 400.765903][T13465] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1888'. [ 401.006086][T13471] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1890'. [ 401.006124][T13471] block nbd1: Unsupported socket: should be TCP or UNIX. [ 401.204038][T13470] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1889'. [ 401.466919][T13475] netlink: 9 bytes leftover after parsing attributes in process `syz.0.1891'. [ 401.536599][T13475] gretap0: entered promiscuous mode [ 401.633134][T13483] bond0: invalid NS target :: specified for addition [ 401.633169][T13483] bond0: option ns_ip6_target: invalid value (18446744073709551615) [ 401.892578][T13488] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1896'. [ 402.250046][T13500] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1899'. [ 402.250074][T13500] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1899'. [ 402.420606][T13505] netlink: 666 bytes leftover after parsing attributes in process `syz.3.1902'. [ 402.823020][T13510] netlink: 'syz.0.1903': attribute type 1 has an invalid length. [ 404.311103][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 404.828875][T13516] workqueue: Failed to create a rescuer kthread for wq "bond11": -EINTR [ 408.274927][T13554] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1910'. [ 408.392811][T13553] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1909'. [ 408.606803][T13557] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1908'. [ 410.214819][T13563] netlink: 'syz.0.1912': attribute type 12 has an invalid length. [ 411.141007][T13563] bond11: option primary_reselect: invalid value (255) [ 411.420285][T13563] bond11 (unregistering): Released all slaves [ 414.825506][T13589] netlink: 'syz.3.1917': attribute type 1 has an invalid length. [ 415.333715][T13598] netlink: 112 bytes leftover after parsing attributes in process `syz.0.1919'. [ 416.159407][T13603] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 416.499807][T13603] xt_hashlimit: size too large, truncated to 1048576 [ 419.556435][T13613] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 419.556923][T13613] gretap2: entered promiscuous mode [ 419.556963][T13613] gretap2: entered allmulticast mode [ 422.956734][T13642] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1930'. [ 422.988323][T13641] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1931'. [ 423.226588][T13642] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1930'. [ 423.352779][T13642] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1930'. [ 423.426548][T13642] SET target dimension over the limit! [ 423.477635][T13641] bond7 (unregistering): Released all slaves [ 423.511221][ C0] bridge0: port 2(bridge_slave_1) entered forwarding state [ 423.511281][ C0] bridge0: topology change detected, propagating [ 423.512076][ C0] bridge0: port 1(bridge_slave_0) entered forwarding state [ 423.512170][ C0] bridge0: topology change detected, propagating [ 426.587055][T13661] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1934'. [ 427.063153][T13669] Bluetooth: MGMT ver 1.23 [ 427.089114][T13669] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1936'. [ 429.620444][T13689] sit0: entered promiscuous mode [ 429.934671][T13689] netlink: 'syz.2.1940': attribute type 1 has an invalid length. [ 429.934733][T13689] netlink: 1 bytes leftover after parsing attributes in process `syz.2.1940'. [ 430.193020][T13689] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 433.174401][T13703] bond8: option resend_igmp: invalid value (32767) [ 433.174470][T13703] bond8: option resend_igmp: allowed values 0 - 255 [ 433.382884][T13703] bond8 (unregistering): Released all slaves [ 433.867696][T13731] netlink: 'syz.1.1948': attribute type 10 has an invalid length. [ 437.003002][T13739] bond6: entered promiscuous mode [ 437.158714][T13754] netlink: 232 bytes leftover after parsing attributes in process `syz.1.1953'. [ 437.515896][T13753] netlink: 220 bytes leftover after parsing attributes in process `syz.4.1952'. [ 437.515966][T13753] tc_dump_action: action bad kind [ 439.147863][T13762] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1956'. [ 439.188008][T13767] netlink: 'syz.4.1958': attribute type 2 has an invalid length. [ 439.549085][T13771] openvswitch: netlink: Missing key (keys=40, expected=100) [ 440.165402][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 442.041662][T13780] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1961'. [ 443.878837][ T5743] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 444.019035][T13801] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1966'. [ 444.019070][T13801] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1966'. [ 444.403046][ T5743] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 446.293041][T13819] sctp: [Deprecated]: syz.0.1969 (pid 13819) Use of int in max_burst socket option deprecated. [ 446.293041][T13819] Use struct sctp_assoc_value instead [ 447.591781][T13823] netlink: 144 bytes leftover after parsing attributes in process `syz.4.1970'. [ 449.027681][T13846] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1970'. [ 451.356018][T13859] bond0: (slave ip6gre0): Error: Device can not be enslaved while up [ 451.937689][T13868] bond0: (slave ip6gre0): Error: Device can not be enslaved while up [ 461.449747][T13916] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1986'. [ 461.449886][T13916] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1986'. [ 461.865948][T13925] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1986'. [ 464.304902][T13934] bridge1: entered promiscuous mode [ 464.304972][T13934] bridge1: entered allmulticast mode [ 464.534976][T13938] netlink: 'syz.0.1993': attribute type 1 has an invalid length. [ 464.782485][T13941] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1993'. [ 465.977271][T13938] 8021q: adding VLAN 0 to HW filter on device bond11 [ 468.078065][T13963] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1996'. [ 468.183447][T13946] bond11: (slave bridge3): making interface the new active one [ 468.306399][T13946] bond11: (slave bridge3): Enslaving as an active interface with an up link [ 468.546429][T13966] netlink: 244 bytes leftover after parsing attributes in process `syz.4.1997'. [ 470.413439][T13969] netlink: 'syz.2.1998': attribute type 20 has an invalid length. [ 470.413470][T13969] IPv6: NLM_F_CREATE should be specified when creating new route [ 471.034637][T13977] xt_hashlimit: size too large, truncated to 1048576 [ 476.772225][T14013] syzkaller0: entered promiscuous mode [ 476.772290][T14013] syzkaller0: entered allmulticast mode [ 484.398817][T14062] syzkaller1: entered allmulticast mode [ 485.540289][T14076] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2020'. [ 487.047540][T14090] team0: entered promiscuous mode [ 487.047602][T14090] team_slave_0: entered promiscuous mode [ 487.048194][T14090] team_slave_1: entered promiscuous mode [ 487.385380][T14090] netlink: 80 bytes leftover after parsing attributes in process `syz.2.2022'. [ 488.722946][T14105] netlink: 'syz.4.2026': attribute type 7 has an invalid length. [ 488.817560][T14105] netlink: 'syz.4.2026': attribute type 7 has an invalid length. [ 488.835626][ T9148] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 488.852152][ T9148] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 488.853174][ T6526] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 488.853405][ T6526] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 488.938692][T14105] x_tables: duplicate underflow at hook 2 [ 490.692363][T14109] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2028'. [ 494.470497][T14138] sctp: [Deprecated]: syz.0.2036 (pid 14138) Use of struct sctp_assoc_value in delayed_ack socket option. [ 494.470497][T14138] Use struct sctp_sack_info instead [ 495.993890][T14152] netlink: 27 bytes leftover after parsing attributes in process `syz.4.2039'. [ 497.374323][T14159] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2042'. [ 497.522725][T14159] tc_dump_action: action bad kind [ 499.511862][T14174] syzkaller0: entered promiscuous mode [ 499.512077][T14174] syzkaller0: entered allmulticast mode [ 501.107831][T14187] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2048'. [ 501.598168][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 504.779001][T14218] netlink: 'syz.0.2059': attribute type 1 has an invalid length. [ 504.779062][T14218] netlink: 232 bytes leftover after parsing attributes in process `syz.0.2059'. [ 504.779121][T14218] netlink: 'syz.0.2059': attribute type 1 has an invalid length. [ 504.912851][T14223] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 505.027487][T14221] gtp0: entered promiscuous mode [ 505.038688][T14221] gtp0: entered allmulticast mode [ 505.088988][T14225] netlink: 'syz.0.2059': attribute type 17 has an invalid length. [ 505.089055][T14225] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2059'. [ 505.089126][T14225] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2059'. [ 505.092042][T14226] netlink: 59 bytes leftover after parsing attributes in process `syz.4.2060'. [ 510.068530][T14264] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2067'. [ 510.203907][T14264] bridge0: port 2(bridge_slave_1) entered disabled state [ 511.223645][T14273] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2069'. [ 511.340498][T14272] netlink: NAT flags may be given only when NAT range (SRC or DST) is also specified. [ 511.340597][T14272] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 513.184860][T14293] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 513.283887][T14294] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 517.652358][T14323] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2083'. [ 519.100423][T14328] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2085'. [ 519.225921][T14328] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2085'. [ 522.380456][T14351] netlink: 'syz.2.2090': attribute type 2 has an invalid length. [ 522.850301][T14359] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 522.945954][T14364] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2093'. [ 522.946024][T14364] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2093'. [ 529.993265][T14417] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2105'. [ 531.770620][T14429] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2107'. [ 531.902802][T14430] openvswitch: netlink: Encap mask attribute is set for non-VLAN frame. [ 532.848875][T14431] bond8: option min_links: invalid value (18446744073709551614) [ 532.848942][T14431] bond8: option min_links: allowed values 0 - 2147483647 [ 533.001750][T14431] bond8 (unregistering): Released all slaves [ 536.584745][T14460] v: renamed from veth0_vlan [ 539.356766][T14476] erspan0: entered promiscuous mode [ 542.755266][T14504] nftables ruleset with unbound set [ 544.292822][T14511] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 544.292919][T14511] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 544.292985][T14511] netdevsim netdevsim0 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 544.955839][T14511] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 544.955937][T14511] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 545.005094][T14511] netdevsim netdevsim0 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 545.469456][T14516] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2130'. [ 546.033115][T14511] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 546.033156][T14511] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 546.033186][T14511] netdevsim netdevsim0 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 546.276332][T14531] netlink: 'syz.4.2133': attribute type 1 has an invalid length. [ 546.345248][T14533] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2133'. [ 547.727399][T14531] bond7: entered promiscuous mode [ 547.734548][T14531] 8021q: adding VLAN 0 to HW filter on device bond7 [ 547.752715][T14533] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 548.048086][T14545] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2134'. [ 548.244628][T14511] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 548.244706][T14511] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 548.244767][T14511] netdevsim netdevsim0 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 550.154708][ T9191] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 550.154796][ T9191] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 550.154868][ T9191] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 550.432127][ T6524] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 550.432194][ T6524] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 550.432257][ T6524] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 550.517292][ T6524] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 550.517359][ T6524] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 550.517425][ T6524] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 550.911241][ T1333] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 550.911309][ T1333] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 550.911366][ T1333] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 556.189214][T14595] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2147'. [ 556.629268][T14585] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 556.645718][ T5276] v: left promiscuous mode [ 557.304664][T13355] v: entered promiscuous mode [ 559.323408][T14616] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 559.587851][T14620] netlink: 'syz.3.2154': attribute type 1 has an invalid length. [ 561.057927][T14629] syzkaller0: entered promiscuous mode [ 561.057994][T14629] syzkaller0: entered allmulticast mode [ 569.584581][T14698] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2171'. [ 570.449714][T14696] tipc: New replicast peer: 172.20.20.187 [ 570.488026][T14696] tipc: Enabled bearer , priority 10 [ 573.997543][T14721] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 573.997582][T14721] IPv6: NLM_F_CREATE should be set when creating new route [ 574.929331][T14731] ip_tables: iptables: counters copy to user failed while replacing table [ 575.920691][T14734] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2178'. [ 576.285379][T14734] rdma_rxe: rxe_newlink: failed to add wg1 [ 580.156645][T14756] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2184'. [ 583.282900][T14782] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2190'. [ 587.376071][T14807] xt_hashlimit: size too large, truncated to 1048576 [ 587.908968][T14815] C: renamed from lo [ 588.217790][T14815] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 589.866221][T14818] netlink: 716 bytes leftover after parsing attributes in process `syz.1.2197'. [ 591.721541][T14831] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2199'. [ 592.757040][T14837] Bluetooth: hci0: unsupported parameter 5135 [ 592.757109][T14837] Bluetooth: hci0: unsupported parameter 8192 [ 592.757168][T14837] Bluetooth: hci0: unsupported parameter 5135 [ 592.757207][T14837] Bluetooth: hci0: unsupported parameter 8192 [ 594.087764][T14850] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2206'. [ 595.172642][T14858] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2205'. [ 596.506961][T14880] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2214'. [ 596.536293][T14881] netlink: 136 bytes leftover after parsing attributes in process `syz.1.2214'. [ 596.538544][T14876] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2211'. [ 596.567202][T14880] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2214'. [ 596.568386][T14880] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2214'. [ 596.569570][T14880] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2214'. [ 596.570749][T14880] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2214'. [ 596.618656][T14880] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2214'. [ 596.619778][T14880] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2214'. [ 597.646831][T14888] netlink: 'syz.4.2215': attribute type 33 has an invalid length. [ 599.744463][T14895] 0ªX¹¦Dö»: entered promiscuous mode [ 599.974182][T14895] 0ªX¹¦Dö»: left promiscuous mode [ 603.557370][T14932] x_tables: duplicate underflow at hook 1 [ 605.086467][T14928] kthread_run failed with err -4 [ 608.569552][T14957] syzkaller1: entered promiscuous mode [ 608.569616][T14957] syzkaller1: entered allmulticast mode [ 608.895964][T14971] x_tables: duplicate underflow at hook 2 [ 611.308354][T14979] __nla_validate_parse: 59 callbacks suppressed [ 611.308411][T14979] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2232'. [ 617.238812][T15012] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2240'. [ 617.568071][T15007] bond0: entered promiscuous mode [ 617.568100][T15007] bond_slave_0: entered promiscuous mode [ 617.750503][T15007] bond_slave_1: entered promiscuous mode [ 617.751255][T15007] batadv0: entered promiscuous mode [ 618.019336][T15007] bond0: left promiscuous mode [ 618.019378][T15007] bond_slave_0: left promiscuous mode [ 618.020360][T15007] bond_slave_1: left promiscuous mode [ 618.174625][T15007] batadv0: left promiscuous mode [ 623.047065][T15059] sctp: [Deprecated]: syz.4.2248 (pid 15059) Use of int in maxseg socket option. [ 623.047065][T15059] Use struct sctp_assoc_value instead [ 625.166903][ T5630] block nbd1: Receive control failed (result -32) [ 625.184571][ T5630] block nbd1: Receive control failed (result -32) [ 628.655069][T15090] Bluetooth: hci0: invalid length 0, exp 4 for type 32 [ 629.669139][T15094] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2257'. [ 629.794715][T15103] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 629.962188][T15100] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2258'. [ 629.962317][T15100] netlink: 'syz.0.2258': attribute type 6 has an invalid length. [ 629.962353][T15100] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2258'. [ 629.974058][T15100] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2258'. [ 629.974151][T15100] netlink: 'syz.0.2258': attribute type 6 has an invalid length. [ 629.974187][T15100] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2258'. [ 630.215426][T15094] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2257'. [ 631.200560][T15110] netlink: 'syz.1.2264': attribute type 1 has an invalid length. [ 631.200587][T15110] netlink: 'syz.1.2264': attribute type 2 has an invalid length. [ 631.200601][T15110] netlink: 'syz.1.2264': attribute type 3 has an invalid length. [ 631.200615][T15110] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2264'. [ 631.213468][T15110] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2264'. [ 631.289506][T15110] netlink: 'syz.1.2264': attribute type 1 has an invalid length. [ 631.289564][T15110] netlink: 'syz.1.2264': attribute type 2 has an invalid length. [ 631.289597][T15110] netlink: 'syz.1.2264': attribute type 3 has an invalid length. [ 631.289629][T15110] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2264'. [ 632.706334][T15129] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2267'. [ 635.149466][T15139] netlink: 'syz.0.2270': attribute type 1 has an invalid length. [ 636.934286][T15139] 8021q: adding VLAN 0 to HW filter on device bond12 [ 637.483782][T15138] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 637.979719][T15164] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2274'. [ 640.305596][T15174] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2276'. [ 640.997848][T15176] tipc: Can't bind to reserved service type 2 [ 643.291741][T15179] A link change request failed with some changes committed already. Interface ÿÿÿÿÿÿ may have been left with an inconsistent configuration, please check. [ 643.511675][T15194] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2281'. [ 643.556502][T15194] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2281'. [ 643.726117][ T1333] bridge0: port 2(bridge_slave_1) entered blocking state [ 643.726372][ T1333] bridge0: port 2(bridge_slave_1) entered listening state [ 644.951022][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 645.758642][T15207] veth1_to_bond: entered allmulticast mode [ 646.040628][T15207] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2284'. [ 646.600577][T15224] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 647.700171][T15207] .`: (slave bond_slave_1): Releasing backup interface [ 648.068102][T15211] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 650.516376][T15243] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2288'. [ 651.823238][T15259] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2291'. [ 653.654958][T15270] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2292'. [ 657.859171][T15291] netlink: 'syz.3.2299': attribute type 2 has an invalid length. [ 658.344494][T15291] : entered promiscuous mode [ 659.550064][T15301] netlink: 'syz.1.2302': attribute type 11 has an invalid length. [ 659.550132][T15301] netlink: 'syz.1.2302': attribute type 4 has an invalid length. [ 659.550195][T15301] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2302'. [ 664.300162][T15324] bridge0: port 1(bridge_slave_0) entered disabled state [ 666.314369][T15347] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 666.363781][T15346] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2316'. [ 666.400255][T15348] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 666.626887][T15346] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2316'. [ 667.595593][T15352] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 667.595684][T15352] gretap2: entered promiscuous mode [ 667.595900][T15352] gretap2: entered allmulticast mode [ 667.697536][T15359] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2319'. [ 673.754537][ C0] bridge0: port 2(bridge_slave_1) entered learning state [ 675.496897][T15401] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 675.497018][T15401] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 675.497088][T15401] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 675.561312][T15406] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2327'. [ 677.246563][T15406] hsr_slave_1 (unregistering): left promiscuous mode [ 680.032712][T15428] netlink: 27 bytes leftover after parsing attributes in process `syz.3.2332'. [ 680.109170][T15430] netlink: 'syz.4.2333': attribute type 15 has an invalid length. [ 680.109229][T15430] netlink: 'syz.4.2333': attribute type 7 has an invalid length. [ 680.983828][T15432] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2333'. [ 682.878929][T15430] bond8 (unregistering): Released all slaves [ 686.058742][T15467] netlink: 1 bytes leftover after parsing attributes in process `syz.0.2338'. [ 686.105649][T15467] netlink: 'syz.0.2338': attribute type 1 has an invalid length. [ 686.105675][T15467] netlink: 15190 bytes leftover after parsing attributes in process `syz.0.2338'. [ 692.410572][T15510] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2349'. [ 693.237002][T15515] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2352'. [ 693.336129][T15519] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 693.880586][T15522] netlink: 420 bytes leftover after parsing attributes in process `syz.3.2354'. [ 695.243947][T15533] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 695.323007][T15534] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 700.261892][T15560] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2366'. [ 702.048887][T15573] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2372'. [ 702.117825][T15576] netlink: 92 bytes leftover after parsing attributes in process `syz.1.2370'. [ 702.792609][T15580] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2373'. [ 703.319011][T15578] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2371'. [ 703.467617][T15578] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2371'. [ 703.831117][ C0] bridge0: port 2(bridge_slave_1) entered forwarding state [ 703.831178][ C0] bridge0: topology change detected, propagating [ 707.705040][T15607] gre4: entered promiscuous mode [ 708.754641][T15617] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2379'. [ 708.877928][T15616] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2380'. [ 710.833932][T15629] netlink: 'syz.0.2381': attribute type 3 has an invalid length. [ 713.335603][T15643] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2386'. [ 713.356428][T15645] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2386'. [ 713.377059][T15650] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2388'. [ 713.377121][T15650] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2388'. [ 713.815663][T15655] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2390'. [ 714.148949][ T37] __ib_cache_gid_add: unable to add gid fe80:0000:0000:0000:a8aa:aaff:feaa:aa17 error=-28 [ 714.149526][ T37] __ib_cache_gid_add: unable to add gid fe80:0000:0000:0000:a8aa:aaff:feaa:aa17 error=-28 [ 714.194835][T15650] 8021q: adding VLAN 0 to HW filter on device bond0 [ 714.259345][ T136] __ib_cache_gid_add: unable to add gid fe80:0000:0000:0000:a8aa:aaff:feaa:aa17 error=-28 [ 714.274231][T15650] bond14: (slave bond0): making interface the new active one [ 714.307008][ T772] __ib_cache_gid_add: unable to add gid fe80:0000:0000:0000:a8aa:aaff:feaa:aa17 error=-28 [ 714.373016][T15650] bond14: (slave bond0): Enslaving as an active interface with an up link [ 714.602550][T15655] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 715.634180][T15671] ip6t_rpfilter: unknown options [ 715.849379][T15673] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2393'. [ 717.096897][T15678] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2394'. [ 719.397440][T15691] ip_tables: iptables: counters copy to user failed while replacing table [ 721.091036][T15709] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2401'. [ 721.247737][T15709] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2401'. [ 725.237914][T15734] netlink: 164 bytes leftover after parsing attributes in process `syz.3.2408'. [ 725.408452][T15742] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2406'. [ 725.536447][T15744] SET target dimension over the limit! [ 725.787091][T15744] SET target dimension over the limit! [ 728.234679][T15755] team0: Device C is loopback device. Loopback devices can't be added as a team port [ 728.234743][T15755] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 728.569340][T15758] netlink: 'syz.3.2412': attribute type 2 has an invalid length. [ 728.644781][T15761] gretap0: left promiscuous mode [ 729.191465][T15770] netlink: 'syz.0.2415': attribute type 10 has an invalid length. [ 729.775615][T15770] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 731.163573][T15783] netlink: 'syz.2.2416': attribute type 1 has an invalid length. [ 732.346594][T15790] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2418'. [ 732.780557][T15793] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2418'. [ 733.072696][T15788] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 735.434641][T15815] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 737.819611][T15829] netlink: 'syz.2.2427': attribute type 1 has an invalid length. [ 741.046692][T15855] bond8: invalid ARP target 0.0.0.0 specified for addition [ 741.046759][T15855] bond8: option arp_ip_target: invalid value (0) [ 741.234655][T15855] bond8 (unregistering): Released all slaves [ 747.439951][T15898] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2447'. [ 749.476164][T15910] bond3: option mode: unable to set because the bond device has slaves [ 749.481087][T15914] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2451'. [ 749.505511][T15910] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2450'. [ 749.910471][T15920] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 750.242394][T15910] bridge0: port 3(dummy0) entered disabled state [ 750.243702][T15910] bridge0: port 2(bridge_slave_1) entered disabled state [ 750.404076][T15920] xt_hashlimit: size too large, truncated to 1048576 [ 752.785397][T15944] netlink: 'syz.0.2457': attribute type 1 has an invalid length. [ 752.790607][T15947] netlink: 'syz.0.2457': attribute type 1 has an invalid length. [ 752.831709][T15914] can: request_module (can-proto-0) failed. [ 752.873415][T15948] x_tables: duplicate underflow at hook 1 [ 753.957677][T15944] 8021q: adding VLAN 0 to HW filter on device bond15 [ 758.040458][T15981] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2465'. [ 758.040526][T15981] bridge: RTM_NEWNEIGH with invalid ether address [ 758.281512][T15981] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2465'. [ 758.719199][T15989] netlink: 'syz.3.2466': attribute type 1 has an invalid length. [ 760.781799][T15992] bond16: option packets_per_slave: invalid value (18446744073709551615) [ 760.781831][T15992] bond16: option packets_per_slave: allowed values 0 - 65535 [ 761.018473][T15992] bond16 (unregistering): Released all slaves [ 761.254540][T16008] sctp: [Deprecated]: syz.3.2472 (pid 16008) Use of int in max_burst socket option. [ 761.254540][T16008] Use struct sctp_assoc_value instead [ 761.762954][T16018] x_tables: duplicate underflow at hook 3 [ 761.808433][T16015] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2473'. [ 765.899847][T16035] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 766.304507][T16037] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2476'. [ 766.607124][T16037] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2476'. [ 768.767988][T16046] netlink: 'syz.4.2480': attribute type 1 has an invalid length. [ 768.820451][T16047] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2480'. [ 769.226315][T16055] netlink: 'syz.3.2482': attribute type 11 has an invalid length. [ 771.165092][T16057] bridge5: entered promiscuous mode [ 771.872997][T16063] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 771.873036][T16063] IPv6: NLM_F_CREATE should be set when creating new route [ 771.873169][T16063] IPv6: NLM_F_CREATE should be set when creating new route [ 771.873235][T16063] IPv6: NLM_F_CREATE should be set when creating new route [ 774.614251][T16085] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2489'. [ 774.870315][T16090] netlink: 'syz.1.2490': attribute type 3 has an invalid length. [ 776.516243][T16097] netlink: 'syz.4.2492': attribute type 33 has an invalid length. [ 777.649264][T16097] bond9: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 777.742323][T16097] bond9 (unregistering): Released all slaves [ 778.139470][T16112] netlink: 'syz.2.2494': attribute type 12 has an invalid length. [ 778.139499][T16112] netlink: 'syz.2.2494': attribute type 29 has an invalid length. [ 778.139516][T16112] netlink: 148 bytes leftover after parsing attributes in process `syz.2.2494'. [ 778.695601][T16120] netlink: 'syz.0.2497': attribute type 1 has an invalid length. [ 783.178045][T16136] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2500'. [ 783.348441][T16142] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2500'. [ 783.568032][T16142] sch_tbf: peakrate 8 is lower than or equals to rate 7508080445633888606 ! [ 785.638307][T16168] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2505'. [ 785.638409][T16168] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2505'. [ 790.378891][ C0] sched: DL replenish lagged too much [ 846.473092][ T5630] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 846.566911][T16189] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 846.568982][T16189] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 846.612367][T16189] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 847.572770][T16189] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 847.704713][T16189] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 848.025962][ T5627] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 848.417380][ T5627] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 848.446902][ T5627] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 848.580648][ T5627] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 848.647589][ T5627] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 849.840865][T16189] Bluetooth: hci5: command tx timeout [ 851.180852][T16189] Bluetooth: hci6: command tx timeout [ 851.910890][T16189] Bluetooth: hci5: command tx timeout [ 853.320746][T16189] Bluetooth: hci6: command tx timeout [ 853.997275][T16189] Bluetooth: hci5: command tx timeout [ 854.506736][ T5627] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 855.802535][ T5627] Bluetooth: hci6: command tx timeout [ 855.924351][ T5630] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 856.031482][ T5630] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 856.140767][ T5630] Bluetooth: hci5: command tx timeout [ 856.750969][ T5630] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 857.162255][ T5630] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 857.831761][T16189] Bluetooth: hci6: command tx timeout [ 862.190874][T16189] Bluetooth: hci7: command tx timeout [ 864.247040][T16189] Bluetooth: hci7: command tx timeout [ 865.713838][ T5630] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 866.282455][ T5630] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 866.312827][ T5630] Bluetooth: hci7: command tx timeout [ 866.319812][ T5630] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 867.740860][T16205] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 867.741733][T16205] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 867.787389][ T5627] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 867.856277][T16189] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 868.461953][ T5627] Bluetooth: hci7: command tx timeout [ 869.602183][ T5627] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 869.640969][T16189] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 869.759357][T16189] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 871.921096][T16205] Bluetooth: hci8: command tx timeout [ 873.772391][T16205] Bluetooth: hci9: command tx timeout [ 873.995752][T16205] Bluetooth: hci8: command tx timeout [ 875.831237][T16205] Bluetooth: hci9: command tx timeout [ 876.073400][T16205] Bluetooth: hci8: command tx timeout [ 877.911631][T16205] Bluetooth: hci9: command tx timeout [ 878.193325][T16205] Bluetooth: hci8: command tx timeout [ 880.014003][T16205] Bluetooth: hci9: command tx timeout [ 911.801458][T16208] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 914.014013][T16208] Bluetooth: hci0: command 0x1003 tx timeout [ 914.030013][T16205] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 914.328024][T16205] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 914.736705][T16205] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 915.291443][T16205] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 915.293620][T16205] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 915.295075][T16205] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 920.236899][T16208] Bluetooth: hci0: command tx timeout [ 922.620713][T16208] Bluetooth: hci0: command tx timeout [ 924.730775][T16208] Bluetooth: hci0: command tx timeout [ 926.791051][T16208] Bluetooth: hci0: command tx timeout [ 928.562087][T16205] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 928.835044][T16205] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 928.952468][T16205] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 928.956831][T16205] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 929.151187][T16205] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 929.231602][T16205] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 929.352704][T16205] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 929.468588][T16205] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 929.746457][ T5621] syz_tun (unregistering): left allmulticast mode [ 930.059160][T16208] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 930.180986][T16208] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 932.430940][T16208] Bluetooth: hci1: command tx timeout [ 932.754470][ T5621] bond6: (slave syz_tun): Removing an active aggregator [ 932.871773][T16208] Bluetooth: hci2: command tx timeout [ 932.880240][ T9178] bond6: Warning: Found an uninitialized port [ 933.740944][ T6514] bond6: Warning: Found an uninitialized port [ 934.490736][T16208] Bluetooth: hci1: command tx timeout [ 934.725997][ T5621] bond6: (slave syz_tun): Releasing backup interface [ 935.111535][T16208] Bluetooth: hci2: command tx timeout [ 936.621622][ T5630] Bluetooth: hci1: command tx timeout [ 936.958570][T16205] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 937.382791][T16205] Bluetooth: hci2: command tx timeout [ 937.808893][T16189] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 938.641610][T16189] Bluetooth: hci1: command tx timeout [ 938.790321][T16189] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 938.815124][T16189] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 938.945408][T16189] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 938.954681][T16189] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 938.956999][T16189] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 938.959727][T16189] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 939.610719][T16189] Bluetooth: hci2: command tx timeout [ 941.230809][T16189] Bluetooth: hci4: command 0x1005 tx timeout [ 941.268269][ T5630] Bluetooth: hci4: Opcode 0x1005 failed: -110 [ 941.830860][ T5630] Bluetooth: hci3: command tx timeout [ 942.316880][ T5630] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 942.932294][ T5630] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 943.048139][ T5630] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 943.262020][ T5630] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 943.263465][ T5630] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 943.940751][T16189] Bluetooth: hci3: command tx timeout [ 946.020682][T16189] Bluetooth: hci3: command tx timeout [ 948.100719][T16189] Bluetooth: hci3: command tx timeout [ 951.972226][ T5630] Bluetooth: hci4: command tx timeout [ 954.000723][ T5630] Bluetooth: hci4: command tx timeout [ 956.110740][ T5630] Bluetooth: hci4: command tx timeout [ 958.170314][ T5630] Bluetooth: hci4: command tx timeout [ 972.630777][ C1] ------------[ cut here ]------------ [ 972.630796][ C1] workqueue: cannot queue hci_conn_timeout on wq hci6 [ 972.630957][ C1] WARNING: kernel/workqueue.c:2353 at __queue_work+0xd83/0x10d0, CPU#1: kworker/u8:9/6514 [ 972.653263][ C1] Modules linked in: [ 972.657266][ C1] CPU: 1 UID: 0 PID: 6514 Comm: kworker/u8:9 Not tainted syzkaller #0 PREEMPT(full) [ 972.666852][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 972.676962][ C1] Workqueue: krds_cp_wq#5/3 rds_connect_worker [ 972.683283][ C1] RIP: 0010:__queue_work+0xd9f/0x10d0 [ 972.688734][ C1] Code: 49 81 c7 70 01 00 00 4c 8d 35 2d ce ee 0e 48 89 f8 48 c1 e8 03 80 3c 18 00 74 05 e8 6b 8f a9 00 49 8b 75 18 4c 89 f7 4c 89 fa <67> 48 0f b9 3a 4c 89 e8 48 c1 e8 03 80 3c 18 00 74 08 4c 89 ef e8 [ 972.708399][ C1] RSP: 0018:ffffc90000a18c00 EFLAGS: 00010046 [ 972.714541][ C1] RAX: 1ffff110054f794d RBX: dffffc0000000000 RCX: ffff888055dd9f40 [ 972.722560][ C1] RDX: ffff888054e23970 RSI: ffffffff8ad7cbc0 RDI: ffffffff907d0970 [ 972.730600][ C1] RBP: 0000000000010000 R08: 0000000000000100 R09: 1ffffffff20f468f [ 972.738797][ C1] R10: dffffc0000000000 R11: ffffffff818e4260 R12: 0000000000000008 [ 972.746817][ C1] R13: ffff88802a7bca50 R14: ffffffff907d0970 R15: ffff888054e23970 [ 972.754881][ C1] FS: 0000000000000000(0000) GS:ffff888124dd1000(0000) knlGS:0000000000000000 [ 972.763881][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 972.770678][ C1] CR2: 00007f66ec787010 CR3: 000000000eb48000 CR4: 00000000003526f0 [ 972.778701][ C1] Call Trace: [ 972.782033][ C1] [ 972.784927][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 972.790450][ C1] call_timer_fn+0x18d/0x5f0 [ 972.795110][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 972.800971][ C1] ? call_timer_fn+0xd5/0x5f0 [ 972.805699][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 972.810864][ C1] ? do_raw_spin_unlock+0xf5/0x200 [ 972.816007][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 972.821858][ C1] __run_timer_base+0x67e/0x8b0 [ 972.826783][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 972.832210][ C1] ? try_to_wake_up+0x8c5/0x14d0 [ 972.837194][ C1] run_timer_softirq+0xb7/0x170 [ 972.842092][ C1] handle_softirqs+0x226/0x860 [ 972.846891][ C1] ? do_softirq+0x77/0xd0 [ 972.851266][ C1] ? __inet6_bind+0x301/0xf30 [ 972.856110][ C1] do_softirq+0x77/0xd0 [ 972.860357][ C1] [ 972.863318][ C1] [ 972.866312][ C1] __local_bh_enable_ip+0x100/0x140 [ 972.871566][ C1] __inet6_bind+0x301/0xf30 [ 972.876116][ C1] kernel_bind+0x13e/0x1c0 [ 972.880704][ C1] ? __pfx_kernel_bind+0x10/0x10 [ 972.885718][ C1] ? rds_tcp_conn_path_connect+0x336/0x920 [ 972.891675][ C1] rds_tcp_conn_path_connect+0x53b/0x920 [ 972.897403][ C1] ? __pfx_rds_tcp_conn_path_connect+0x10/0x10 [ 972.903623][ C1] ? lock_acquire+0x115/0x350 [ 972.908524][ C1] rds_connect_worker+0x1d8/0x290 [ 972.913582][ C1] ? process_scheduled_works+0x97a/0x1630 [ 972.919651][ C1] process_scheduled_works+0xc3d/0x1630 [ 972.925313][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 972.931399][ C1] ? assign_work+0x3cf/0x5d0 [ 972.936142][ C1] worker_thread+0xa47/0xfb0 [ 972.940848][ C1] kthread+0x38b/0x480 [ 972.944972][ C1] ? __pfx_worker_thread+0x10/0x10 [ 972.950138][ C1] ? __pfx_kthread+0x10/0x10 [ 972.954772][ C1] ret_from_fork+0x514/0xb70 [ 972.959459][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 972.964641][ C1] ? __switch_to+0xc89/0x1420 [ 972.969400][ C1] ? __pfx_kthread+0x10/0x10 [ 972.974047][ C1] ret_from_fork_asm+0x1a/0x30 [ 972.978924][ C1] [ 972.981991][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 972.989318][ C1] CPU: 1 UID: 0 PID: 6514 Comm: kworker/u8:9 Not tainted syzkaller #0 PREEMPT(full) [ 972.998892][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 973.008975][ C1] Workqueue: krds_cp_wq#5/3 rds_connect_worker [ 973.015175][ C1] Call Trace: [ 973.018483][ C1] [ 973.021344][ C1] vpanic+0x56d/0xa60 [ 973.025398][ C1] ? __pfx__printk+0x10/0x10 [ 973.030123][ C1] ? __pfx_vpanic+0x10/0x10 [ 973.034667][ C1] ? is_bpf_text_address+0x292/0x2b0 [ 973.040027][ C1] ? is_bpf_text_address+0x26/0x2b0 [ 973.045281][ C1] panic+0xc5/0xd0 [ 973.049064][ C1] ? __pfx_panic+0x10/0x10 [ 973.053544][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 973.058622][ C1] __warn+0x315/0x4c0 [ 973.062819][ C1] ? __queue_work+0xd83/0x10d0 [ 973.067629][ C1] ? __queue_work+0xd83/0x10d0 [ 973.072710][ C1] __report_bug+0x276/0x570 [ 973.077454][ C1] ? __queue_work+0xd83/0x10d0 [ 973.082251][ C1] ? __pfx___report_bug+0x10/0x10 [ 973.087301][ C1] ? __pfx_hci_conn_timeout+0x10/0x10 [ 973.092721][ C1] ? look_up_lock_class+0x57/0x110 [ 973.097953][ C1] ? register_lock_class+0x31/0x2e0 [ 973.103188][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 973.108268][ C1] report_bug_entry+0x19b/0x290 [ 973.113169][ C1] ? __queue_work+0xd9f/0x10d0 [ 973.117979][ C1] ? __queue_work+0xda4/0x10d0 [ 973.122786][ C1] handle_bug+0xce/0x200 [ 973.127124][ C1] exc_invalid_op+0x1a/0x50 [ 973.131670][ C1] asm_exc_invalid_op+0x1a/0x20 [ 973.136571][ C1] RIP: 0010:__queue_work+0xd9f/0x10d0 [ 973.142072][ C1] Code: 49 81 c7 70 01 00 00 4c 8d 35 2d ce ee 0e 48 89 f8 48 c1 e8 03 80 3c 18 00 74 05 e8 6b 8f a9 00 49 8b 75 18 4c 89 f7 4c 89 fa <67> 48 0f b9 3a 4c 89 e8 48 c1 e8 03 80 3c 18 00 74 08 4c 89 ef e8 [ 973.161724][ C1] RSP: 0018:ffffc90000a18c00 EFLAGS: 00010046 [ 973.168098][ C1] RAX: 1ffff110054f794d RBX: dffffc0000000000 RCX: ffff888055dd9f40 [ 973.176106][ C1] RDX: ffff888054e23970 RSI: ffffffff8ad7cbc0 RDI: ffffffff907d0970 [ 973.184110][ C1] RBP: 0000000000010000 R08: 0000000000000100 R09: 1ffffffff20f468f [ 973.192185][ C1] R10: dffffc0000000000 R11: ffffffff818e4260 R12: 0000000000000008 [ 973.200186][ C1] R13: ffff88802a7bca50 R14: ffffffff907d0970 R15: ffff888054e23970 [ 973.208204][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 973.214138][ C1] ? __pfx_hci_conn_timeout+0x10/0x10 [ 973.219565][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 973.224980][ C1] call_timer_fn+0x18d/0x5f0 [ 973.229712][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 973.235563][ C1] ? call_timer_fn+0xd5/0x5f0 [ 973.240276][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 973.245620][ C1] ? do_raw_spin_unlock+0xf5/0x200 [ 973.250925][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 973.256843][ C1] __run_timer_base+0x67e/0x8b0 [ 973.262215][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 973.267706][ C1] ? try_to_wake_up+0x8c5/0x14d0 [ 973.272714][ C1] run_timer_softirq+0xb7/0x170 [ 973.277656][ C1] handle_softirqs+0x226/0x860 [ 973.282491][ C1] ? do_softirq+0x77/0xd0 [ 973.286913][ C1] ? __inet6_bind+0x301/0xf30 [ 973.291659][ C1] do_softirq+0x77/0xd0 [ 973.295875][ C1] [ 973.298829][ C1] [ 973.301797][ C1] __local_bh_enable_ip+0x100/0x140 [ 973.307059][ C1] __inet6_bind+0x301/0xf30 [ 973.311646][ C1] kernel_bind+0x13e/0x1c0 [ 973.316148][ C1] ? __pfx_kernel_bind+0x10/0x10 [ 973.321155][ C1] ? rds_tcp_conn_path_connect+0x336/0x920 [ 973.327207][ C1] rds_tcp_conn_path_connect+0x53b/0x920 [ 973.333011][ C1] ? __pfx_rds_tcp_conn_path_connect+0x10/0x10 [ 973.339226][ C1] ? lock_acquire+0x115/0x350 [ 973.343961][ C1] rds_connect_worker+0x1d8/0x290 [ 973.349133][ C1] ? process_scheduled_works+0x97a/0x1630 [ 973.354905][ C1] process_scheduled_works+0xc3d/0x1630 [ 973.361060][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 973.367114][ C1] ? assign_work+0x3cf/0x5d0 [ 973.371879][ C1] worker_thread+0xa47/0xfb0 [ 973.376566][ C1] kthread+0x38b/0x480 [ 973.380795][ C1] ? __pfx_worker_thread+0x10/0x10 [ 973.385980][ C1] ? __pfx_kthread+0x10/0x10 [ 973.390616][ C1] ret_from_fork+0x514/0xb70 [ 973.395338][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 973.400491][ C1] ? __switch_to+0xc89/0x1420 [ 973.405220][ C1] ? __pfx_kthread+0x10/0x10 [ 973.409860][ C1] ret_from_fork_asm+0x1a/0x30 [ 973.414689][ C1] [ 973.418600][ C1] Kernel Offset: disabled [ 973.422982][ C1] Rebooting in 86400 seconds..