last executing test programs: 3.797284903s ago: executing program 4 (id=5613): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r1) (async) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0xfe98, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x18, 0x10, 0x44}, @TCA_FQ_FLOW_MAX_RATE={0x2, 0x2}, @TCA_FQ_FLOW_MAX_RATE={0x1400, 0x7, 0x3}]}}]}, 0x48}}, 0x0) 3.657193557s ago: executing program 4 (id=5615): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000200)="cb000000150081054e81f782db44b904021f08010a000000040000a118000200ac141414ffff0d1208000f0100810401880016ea1f0006ea7f400303000803600cfab94dcf5c046181d67f6f94007134cf6ee080005c4ab0f45312b3429fa0e408f456211bef32d4760000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd60100730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee", 0xcb}], 0x1, 0x0, 0x0, 0x7400}, 0x44804) r1 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="fb6bba8839fe8bc048c0cdafd1f8a9918bc4055eaaeb6db4ee9bcb25b1811dbf40b3a7da5a8a64db04ed6dd26eea2e37229c339b1f91201c2796173864", 0x3d}], 0x1}, 0x0) recvmsg(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)=""/60, 0x3c}], 0x1}, 0x40fd) close(r2) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)={0x3c, 0x3e, 0x107, 0x70bd27, 0x0, {0x1, 0x7c}, [@nested={0x4, 0xf9}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0xfffffffffffffe76, 0x6, 0x0, 0x0, @pid}]}, @nested={0x18, 0x2, 0x0, 0x1, [@generic="725eb862cec9a478ce2057c5241935e6782507e2"]}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r1) sendmsg$NL80211_CMD_START_SCHED_SCAN(r1, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x78, r4, 0x100, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x16}}}}, [@NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x9}, @NL80211_ATTR_BSSID={0xa, 0xf5, @from_mac=@device_b}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x2}, @NL80211_ATTR_BSSID={0xa, 0xf5, @random="5970f38b2ee6"}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0xd}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0xffff}, @NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x7}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}]}, 0x78}, 0x1, 0x0, 0x0, 0x8000}, 0x10000041) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_procs(r7, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r8, &(0x7f0000000c40), 0x12) setsockopt$sock_int(r6, 0x1, 0xf, 0x0, 0x5e) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x14, r9, 0x495b866df80b4e6b}, 0x14}, 0x1, 0x0, 0x0, 0x50}, 0x0) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r1, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r9, 0x300, 0x70bd2a, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000040}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)=ANY=[@ANYBLOB="780000008700010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000005000128009000100766c616e00000000400002800600010000000000340003800c000100ff01000000000000070001007f000000000000000c000100ffff0000000000000c000100ff0100000000000008000500", @ANYRES32=0x0, @ANYBLOB], 0x78}}, 0x0) 1.862712252s ago: executing program 0 (id=5649): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x50, 0x10, 0xffffffffffffffff, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x1715, 0x4b7bc}, [@IFLA_IFNAME={0x14}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x50}, 0x1, 0x0, 0x0, 0x24004844}, 0x8000002) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001000)={&(0x7f0000000ec0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@enum={0x1}]}, {0x0, [0x5f, 0x2e, 0xe32b8cec5ab8c040]}}, 0x0, 0x29}, 0x20) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=@newae={0x40, 0x1e, 0x468bbc8229e18b43, 0x0, 0x0, {{}, @in6=@empty}}, 0x40}}, 0x0) 1.639996835s ago: executing program 0 (id=5650): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[], 0x50}}, 0x0) sendmmsg$nfc_llcp(0xffffffffffffffff, &(0x7f0000002b80), 0x0, 0x41) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000480000004800000004000000030000000000000901000000000000000000000300000000030000000100000008000000050000000100001306000000070000000300000003000000080000000000000c01000000005f2e"], 0x0, 0x64, 0x0, 0x1, 0xfffffffa, 0x10000}, 0x28) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000780)='}', 0x1}], 0x1}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b40)=ANY=[@ANYBLOB="e40000000201010800000000000000000a000000d00001800c000280050001000000000014000180080001000000000008000200000000002c00018014000300ff01000000000000000000000000000114000400ff0100000000000000000000000000010c00028005000100000000004700028005000100010000000600064000000000060005"], 0xe4}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000000308010100000000000000000000000006000240000000002c5411"], 0x50}}, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[], 0x5c}, 0x1, 0x0, 0x0, 0x28d0}, 0x24000040) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x208000, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, 0x0, 0x40) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r5, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) r6 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r6, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x4e22, @broadcast}, 0x2, 0x9800}}, 0x2e) socket$pppl2tp(0x18, 0x1, 0x1) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$PPPIOCATTCHAN(r7, 0x40047438, &(0x7f0000000500)=0x2) ioctl$PPPIOCBRIDGECHAN(r7, 0x40047435, &(0x7f0000000200)=0x6) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newlink={0x50, 0x10, 0x4, 0x72bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x715}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x1}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x11, 0x12}}]}}}, @IFLA_LINK={0x8, 0x5, r9}]}, 0x50}, 0x1, 0x0, 0x0, 0x28001}, 0x8000002) 1.639476297s ago: executing program 0 (id=5651): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) r1 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @local}}, &(0x7f00000001c0)=0x1c, 0x0) ioctl$BTRFS_IOC_QUOTA_CTL(r1, 0xc0109428, &(0x7f0000000200)={0x0, 0xff}) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_udp_int(r2, 0x11, 0x1, &(0x7f0000000280)=0x3, 0x4) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r3 = accept4(r0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x27, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x4) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="3000000010000100004000"/20, @ANYRES32=0x0, @ANYBLOB="041004000000000008000400f903000008001b0000000000"], 0x30}, 0x1, 0x0, 0x0, 0x4000011}, 0x44004) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000000314010028bd7000fbdbdf250900020073797a32000000000800410072d525d6d2eaf62ad80900000038786500140033006970365f76746930000000000000000061046e95b4344c88ee572b6ae5cf6c2f9af98c604a27e2dab56e31cb1332ec4c5dc6c8387bca80b29f537b3c0b7162abb5ba2e7aa83d65b6dcef"], 0x38}, 0x1, 0x0, 0x0, 0x8840}, 0xc000) r6 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r6, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000001340)=@getchain={0x24, 0x66, 0xdad9bc5c09a816df, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {0xffff, 0x1}, {0x0, 0x5}, {0x4, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x40000004}, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r3) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e20, @private=0xa010103}]}, &(0x7f0000000380)=0x10) setsockopt(r8, 0x84, 0x7f, &(0x7f0000000140)="010000000980ffff", 0x8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r8, 0x84, 0x66, &(0x7f0000000040)={r9, 0x1}, &(0x7f00000000c0)=0x8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r10], 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.274087991s ago: executing program 3 (id=5660): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x50483}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x9005}, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) close(r3) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r4, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000180)='i', 0x20086}], 0x1}}], 0x1, 0x0) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0x600, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x100, 0x0, 0x0, 0x0, 0x54}, 0x9c) sendmmsg$inet(r0, &(0x7f0000000880)=[{{&(0x7f0000000580)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) 1.165192948s ago: executing program 1 (id=5662): syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x5}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@ipv6_getroute={0x1c, 0x1a, 0x1, 0x0, 0x0, {0xa, 0x20}}, 0x1c}}, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x13c, r1, 0x300, 0x70bd28, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x7}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x6}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x5}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x5}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x4c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x8}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x2008840}, 0x20044804) 1.083372893s ago: executing program 1 (id=5663): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="1cf90103", @ANYRES16=0x0, @ANYBLOB="c89045b2a6c0b186f6eb1f00000008003617"], 0x1c}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8b28, &(0x7f0000000000)={'wlan0\x00'}) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) sendmsg$rds(r3, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000008c0)=[@rdma_args={0x48, 0x114, 0x1, {{0x2}, {0x0}, &(0x7f0000001880)=[{0x0}], 0x1}}], 0x48, 0x24080080}, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r4, 0x84, 0x71, &(0x7f0000000040)={r5, 0xfffffffc}, 0x8) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$nl_route(0x10, 0x3, 0x0) socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0xa8, 0x24, 0x100, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0x5}, {0xffff, 0xffff}, {0xfff2}}, [@TCA_STAB={0x84, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x7, 0x9, 0x5, 0x3, 0x0, 0x202, 0x6, 0x5}}, {0xe, 0x2, [0xb97b, 0x2, 0xfff, 0x4, 0x8]}}, {{0x1c, 0x1, {0x5, 0x8, 0x4, 0x803, 0x1, 0x80, 0x6, 0x8}}, {0x14, 0x2, [0x81, 0x5, 0x6, 0x0, 0x5, 0x5, 0x22b0, 0xda88]}}, {{0x1c, 0x1, {0xc5, 0x81, 0x401, 0x7, 0x2, 0x6, 0x6, 0x2}}, {0x8, 0x2, [0x5, 0x0]}}]}]}, 0xa8}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0xc0b, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @objref={{0xb}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_OBJREF_IMM_TYPE={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_OBJREF_IMM_NAME={0x9, 0x2, 'syz0\x00'}]}}}]}]}], {0x14}}, 0x80}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0x0, 0xd}, {0x6, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_ACK_FILTER={0x8, 0x10, 0x2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r9 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r9, &(0x7f0000000240)="800000800000210ee7decd7a0000", 0xe, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r7, 0x1, 0xdc, 0x6, @broadcast}, 0x14) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) socket$unix(0x1, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x4, 0x2, 0x1, 0x14}], {0x95, 0x0, 0x700}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xc}, 0x90) 1.045433232s ago: executing program 1 (id=5664): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$kcm(0x2, 0x3, 0x84) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010440000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d1030000400000000e0a010200000000000000000a0000000900010073797a31000000000900020073797a310000000014000380100000800c00018006000100d1460000140000001100010000000000000000000100000a"], 0xe4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb0100180000060000001d0c00ff000c00007cae83ff000300000300000000000000000000612e890087f7288f8c107eecab096363e9564ce90913cb95d10372dc26cfcc30c59449a974db9e85f894672b0129f927d97ab34046ace6fd175c7fc604678f1a9d3461fa1aabbaac73d8f230f22d6601d6344cf8963e4d4c2b09ae9e7b95ae473b594909d45dbeeeca1147b5ad2c5c0e4b4c5ffa04c5f11cfdd0b7afc346feb0dd79601c077206d987c17bb4efc39b05e4931c661ec6c1eaf2e3be76d54ff9c4d58dd0e59940ac2363ca8503977eb900"/223], 0x0, 0x2a, 0x0, 0x0, 0x1c16}, 0x28) sendmsg$inet(r1, &(0x7f0000001000)={&(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000000940)=[{&(0x7f0000001040)="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", 0x5c9}, {&(0x7f0000000640)="3001fb90647586f4601659c5ad2644b99bfd65452e947b394c96c29278d097c5f170d77283a744139d2ce2a2f4bb5bb37e7396e7bac14056f25d17145e73bc2461b20ea3fce771f1b32d1585e8a456763cfafcf7189145a6e261af6232014cbf8a0f898bf6d14136874b6a1fd7caf8ec9966b041e7dff102c6e247d1a44f038ae29eb4bc67d6a04e80dfb7715ebafaa20fcbc57ade23cba05da1fbe4bba675b742472eebaabf356adc99866930e146125a272cef5baf5dfad4a28a0120d1b4e671487a7b018d9908183ab2085a781e531f1bed4ac9c245ec19be383047656a7d857d364e6f69ecce", 0xe8}, {&(0x7f0000000240)="79dfe4263f037de282e588f3c773eca5f0c383e7425d1573aa90a44223bfeced3ff85afe9d0c0b3b5a7ed7fcdb96a3934fe7af73ee25d5d36ba42e2a85ff030000000000003e031db435ae156e55eb2b2b2e2300e0706dfc5c4ec73ba929ea00000000000000fb6e58560c62d96a58a13aa944b98c481a82927ec071b272b4592616116116527fd2dbc0dfd58c572f714f6852063afc8358fb33ccb8a90500b32b4e26bea604e534d8983790b5e2a180fed88108b0f5a499d5f80b4e4047d9ecc03d21856a4ec0d0d41496d980ddfa9098d327d9559e82fceb2b1b1ca4b45c9e22b2de", 0xe3}, {&(0x7f0000000380)="c58cf2a0f0f863621a483b19e7ecfce0d34e53fbf2959272146847c314ac0cdfd79dc1815274c3ee57068b3793c243bc98585fab48eb353478689f452328afb023f75f93227bbe5a4aa3fea049ec0862c493e14eb44aacf27f9060bc2c826383c904750402dd05d1e8c3a549a06e280ca4eaf77b4aed57a0c5f6120d25a3d5121895638ec5e2e6", 0x87}, {&(0x7f0000000b00)="15c84609b06c6d85a5ca6f3a9a242f214aee4e7093161b717090c0c852a05393abd8992d91576f57bbd3488e85d8456d6c6c09de5c5228ee18819665861f01a2823a7cfa8e9260a5fe3921638db2dc5156149f864b9e916810f913a944e1c8cd7fccb63f37900c5b287016e512b050ca214125b2217260c9ce3019e88b80985402ff7ca34be17e0dbda4f028cec9973a2b9eed83eee86f35f2c0adf50a04296e99c0f709fb3990aa5d0e74a125971357630b6f3eb4fb4064c42c2b2519a1c77824df6f0653fb116149fcb5c7e46fce32b1de7f511951d4b1ae47781250afdb11680684c1d2854810a90dbe10016823346663fdf1df6200a0dc3cafe8ec225f", 0xff}, {&(0x7f0000000800)="3a0846cacd7448e2015cc9a09c5f5608265e1e0fe02aa9077d7ddd960ba112fe1c64f57cba71e7ad8bbdc06a3299398e39498fc459bc1745e3d21a7ca987a4f4b774fe331d20dab2e846a721ff43b0491dc4cb32e16330e0d7d520f4887da0d6f356f8ef230b9b2374095ca6f14a6d13e03375c7029e28592c419bfb8957ac024ba8dc90ab15427410b870f3035ff95146d6e29f9b56ac096281d2f2b249f20c9fdc3239f838acc6b3433571d3043d", 0xaf}, {&(0x7f0000000500)="8700144add194dc92e62bfdc1de91e98227f67410fae0aa2958eeb11856055f582d7ed3b9ca5bf48d2e97becf8673e1532a8", 0x32}, {&(0x7f00000008c0)="6aa7e221ef79afca996dde651fad6b8fc385c4567b3af29b90b3221f98f93ce7f8d32156d842e64f2dd8e9b969c22d076b5dbfb714449b009ff42ec0e2a2c1785d5129", 0x43}, {&(0x7f0000000080)="06001b8876f7937d46fb96571d590ec64ca7b650940d8849791a5b2e352497bc3716469fd36280fc599b", 0x2a}], 0x9, &(0x7f00000004c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x41}, @loopback}}}], 0x20}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000dc0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000540)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000fbdbdf25270000000e0001006e657464657673696d0000000f0002006e657464657673696d3000001c0053"], 0x50}, 0x1, 0x0, 0x0, 0x24040011}, 0x0) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_RENAME(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000000506010200000000000000000000000058b3e048f4de03c8184c9a29fd2122d3ba79432d7256592e06065be621f63e494aa7b08d5722e22ab6fd5a2a99b8d5b1a3d9db8d354940bf0748106fd7b54dba488131f58f8465f0bc35f18bd61c3585eb14f951f34a275d0247961ae0c8203fa612ff834b3b9cad7b277be8ce320c725d29a5cbdbce"], 0x14}}, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff010}]}, 0x10) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="380000001714"], 0x38}}, 0x0) r8 = socket$alg(0x26, 0x5, 0x0) getsockopt$sock_timeval(r8, 0x1, 0x43, 0x0, &(0x7f0000000100)) sendmsg$DEVLINK_CMD_PORT_SPLIT(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x44, r5, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x2}}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x20004000) 1.010597002s ago: executing program 1 (id=5665): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x2, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="850000009a000000040000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x12, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1}, &(0x7f0000000000), &(0x7f0000000040)=r0}, 0x20) 927.916907ms ago: executing program 1 (id=5666): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0xa, 0x922000000003, 0x11) socket$rxrpc(0x21, 0x2, 0x2) r1 = socket$kcm(0x2b, 0x1, 0x0) socket$inet6(0xa, 0x5, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) sendmsg$inet(r1, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x43}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x2000c08d) shutdown(r0, 0x1) 898.922949ms ago: executing program 0 (id=5667): r0 = socket$inet(0x2, 0xa, 0x806) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe6}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='htcp', 0x4) sendmsg$xdp(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000700)="5c4aa4ab47b503d343970f43a946e8814385cf6f2e2b4ecf5b8ba1baf780a353fce9a16e3c1e13f2b9d92b1a1047ef15631386e84e470df284f04f1a87aff35f611e5435ae05626afd1898320655539038bf833f45104ed1b5548e32280b25fbdef2d36a628ad90d396b9dc6e2b46484e095e44c63bb5037e8d4d37834735740f1b137a6bc3af43d4049fa0678f89c62ea4f15d15dc2f327b494aad4a699b5252af393251b8af551057d7781cf3cedb8d48b03b4b3fc9c36c087e9473fad2a6a5dcbb46f4a98745a2ada37de0f21788827fdfa83eb89b26363f099fdc5bbc3db77eec688", 0xe4}, {&(0x7f0000000400)="70526499b1d26d6ac4d1183268899f769621f3c09609011499c14606b74b815796c0087f9c76ec990f8cc14805810b0c37057f0fe9e3d277f8b7f48dddda1c7a9935575b4648151c81841827228947da62b037afb2fcf52260f3215f14bbfa5f4748", 0x62}, {&(0x7f0000000500)="bb40e6c6095eb4f0ecdbd06913f37d173e36be974ab7b5572ced9475c35d2ab061ef17e194e1580db54db61c597c3ea8e4ec16142631736a8c9051229fb1f844e0701c612a268ebb9694bc593ac8cb2a0f65e705033f3919", 0x58}, {&(0x7f0000000480)="acdc00d9ddc4eb3f6cf656db", 0xc}, {&(0x7f0000000800)="5b5ab6817a28cbf9f38812c5bb530e5fb7a0d05075445dcb1a23624b5f40c7cf690216c4852fe87337a0f01932b6e32d2a22e4750b2d5a329391e8361f226592cf09aec2b1a1a3027db1d542bf927f4630acc90d2e2d930f232181ae23d3f5890339868597d8676a26c7bb75cf5654d637", 0x71}, {&(0x7f0000000880)="bc", 0x1}, {&(0x7f00000008c0)="231fc7460feb371e91c8bef63b017c654d6f02f504daaf5126b7ffe6c76a42a1efdd7262dbb405e4910ebe61883484ea14125adbfe5bc4052dc6760684b3b78e4e6d44fa7eac4b90861db2f44ac78f79d12da06c540bf873fe636d3e66ef7ce06ca94fa457a6fec5510f2f88f9b9ae2def", 0x71}], 0x7, 0x0, 0x0, 0x8000000}, 0x8000) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000002c0008000000000000000000037c0000080001801716c2e98e5573d3b0ef982ace2f95c0f8ec872ab84be46c783f3f0416e50f298275b7edf86967f2b89acb59b9986c59c8d5"], 0x1c}}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000c80)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x3, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xfff1, 0xe}, {0xd, 0x1f}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000001000000000000000000ddff970001001000000095"], &(0x7f0000000000)='GPL\x00', 0x7}, 0x94) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000640)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0xb}, {0x10, 0xa}, {0x0, 0x9}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x10, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x8, 0x8}]}}, @TCA_RATE={0x6, 0x5, {0x1, 0xf8}}]}, 0x48}, 0x1, 0x0, 0x0, 0x400dc}, 0x40000) r7 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r7, 0x0, 0x0) r8 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r8, &(0x7f0000000a40)=ANY=[@ANYBLOB="140000001800eb8976156951b2ba29ef80"], 0xfe33) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$sock_netdev_private(0xffffffffffffffff, 0x89f2, 0x0) poll(&(0x7f0000000140)=[{r9, 0xc2f4}, {r7, 0x1000}, {r7, 0x9226}, {r7}, {0xffffffffffffffff, 0x4}], 0x5, 0x80000041) r10 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r10, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x4}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x3c}, 0x1, 0x0, 0x0, 0x4000851}, 0x24044010) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c19e9ace5ffb2e9fc603dd282100000002ff02000000000000000000000000000104004e200023b0"], 0x0) 751.514288ms ago: executing program 0 (id=5668): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f00000001c0)={'bridge0\x00', &(0x7f0000000200)=@ethtool_regs={0x4, 0x10003, 0xb5, "8f155bdc3a51a5471a056789e7200bd9802f6ff310ea28c5e84244ec022e3def5da82fe98f8fe0a6ef1301e1701b6b749139487ef9f8a0a82d18d4a2ce234b91b2fd6969d1ae0f447013f68ae709e18894471301b7e694d2b4a8d3d105ca3a0156c52076a75871fc0a0e73a7d7fc2ec17aa58c115e73c319254af512bf5d5ee171fc55bc734e5b9a1624dfb2a3058b5bcd17baa39e08eae582409e832534504752ed0028990a705af49fc7aaba95140f5b8cdfcc7d"}}) 683.142525ms ago: executing program 0 (id=5670): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x42, &(0x7f0000000380)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff810000000800450000300000000000019078640101009a1414aa0b0190780009000045180002006500070206000bac14142e0a010100"], 0x0) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r1) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000600)={0x84, r2, 0x100, 0x30bd26, 0x25dfdbfe, {0x4, 0x74, 0x609}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'caif0\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast2}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast1}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @ipv4={'\x00', '\xff\xff', @empty}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'tunl0\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x1}]}, 0x84}, 0x1, 0xffffffff00000003, 0x0, 0x80}, 0x800) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp256-generic\x00'}, 0x58) r4 = accept4$alg(r3, 0x0, 0x0, 0x0) sendmmsg$sock(r4, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000340)="8224aca5f4", 0x5}], 0x1}}], 0x1, 0x0) syz_emit_ethernet(0x12be, &(0x7f0000001300)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "00a8bc", 0x1288, 0x6, 0xff, @local, @local, {[@hopopts={0x3a, 0x201, '\x00', [@generic={0x9, 0x1000, "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"}, @ra={0x5, 0x2, 0xffff}, @enc_lim={0x4, 0x1, 0x5}, @pad1]}, @dstopts={0x3b, 0x13, '\x00', [@hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x34}}, @generic={0xff, 0x82, "ca4874dc6c9a528861ff1a652c11df071e6a450941021d527b7cab3a56603170df93d07dd519007d51e4315399ba689a7589eddcccb691dcc7113ffba8edcb580e1dad36e00618d2282c46e4d296e7199d0ffbd4804261bca6fea16fd529b667767b9f702b77cb1360d2e2e28e148661c8ccd87f2ad99da70640ffd4a8190fa82782"}, @enc_lim={0x4, 0x1, 0xfe}]}, @srh={0x0, 0x14, 0x4, 0xa, 0x4, 0x1c, 0x1, [@loopback, @private2={0xfc, 0x2, '\x00', 0x1}, @rand_addr=' \x01\x00', @mcast1, @local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, @private0, @private2, @ipv4={'\x00', '\xff\xff', @loopback}]}, @fragment={0x11, 0x0, 0x93, 0x0, 0x0, 0x8, 0x68}, @fragment={0x87, 0x0, 0x5, 0x0, 0x0, 0x7, 0x65}, @routing={0x2f, 0xa, 0x0, 0x8, 0x0, [@ipv4={'\x00', '\xff\xff', @private=0xa010101}, @dev={0xfe, 0x80, '\x00', 0x36}, @local, @dev={0xfe, 0x80, '\x00', 0x13}, @mcast1]}, @routing={0x2, 0xc, 0x1, 0xc, 0x0, [@mcast2, @private1, @ipv4={'\x00', '\xff\xff', @multicast2}, @private0, @local, @mcast1]}, @dstopts={0x87, 0x3, '\x00', [@hao={0xc9, 0x10, @private0}, @pad1, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}]}], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0x0, 0x0, 0x0, {[@generic={0x1, 0x11, "87d5c9ed7eed4e6de58079eef72628"}]}}}}}}}}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r1, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="b35ea6df2ff3cc92ebb5c81613f70b8cc2c5ed57ab8ebc0f94a5397f14a57febb3492ca33eddc63e0f307fd870cead05dde97eb005001da6253a015603597dd906075e88174dc287af3fecb6985f4a8580d2503a2e9be25935bd9f0c0322b3ef68c61467ae694656ea14abce050c7953e01a43fc940b0542f59ea4100db8657462a3927288599e4eb446a75560abf5b82e558d0aa059c0e9115f83c5d7bbc11c96d16afb7c3dcbe5c203b8aa8efcd85139f7b85681b6b92de6ac114e0128989837bd3bc9b78dd705a2de43165fbae41ed040bc21389d477b65248f641a0b2f86cfe924dc194189e08c18014bedc504da22dca5", @ANYRES16=r2, @ANYBLOB="000828bd7000fcdbdf2504000000140003000000000000000000000000000000000114000300fe8000000000000000000000000000aa14000200fc0100000000000000000000000000000500010001000000140006006c6f00000000000000000000000000001400060076657468305f766972745f7769666900"], 0x80}}, 0x20000000) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x8, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000001c0)={r9, &(0x7f0000000140), &(0x7f0000000140)=""/6, 0x2}, 0x20) r10 = socket(0x2b, 0x80801, 0x1) setsockopt$inet_opts(r10, 0x0, 0x4, &(0x7f0000000040)="890704", 0x3) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x50}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@gettaction={0x144, 0x32, 0x300, 0x70bd2a, 0x25dfdbfb, {}, [@action_gd=@TCA_ACT_TAB={0x0, 0x1, [{0x0, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0x0, 0x1, 'tunnel_key\x00'}}, {0x0, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0x0, 0x1, 'bpf\x00'}}]}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x800}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x0, 0x1}}, @action_gd=@TCA_ACT_TAB={0x74, 0x1, [{0xc, 0x18, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x400}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0x10, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0x10, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0x10, 0x18, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xe}}, {0xc, 0x18, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}]}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x7}, @action_gd=@TCA_ACT_TAB={0x24, 0x1, [{0x10, 0x11, 0x0, 0x0, @TCA_ACT_KIND={0x1, 0x1, 'vlan\x00'}}, {0x10, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x70}]}, 0x144}, 0x1, 0x0, 0x0, 0x510e21059210b41a}, 0x8800) r11 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r13 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r13, &(0x7f0000004c00)={0x2, 0x4e23, @remote}, 0x10) sendmmsg$inet(r13, &(0x7f0000007e00)=[{{&(0x7f0000005280)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x38}}, 0x10, &(0x7f0000005300)=[{&(0x7f00000052c0)="e7", 0x1}], 0x1}}], 0x1, 0x4040) sendmsg$nl_route_sched(r11, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r12, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) r14 = socket(0x2d, 0x2, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r14, &(0x7f0000000100)={&(0x7f0000000340)={0x2d, 0x0, 0x1f, 0x40000000}, 0xc, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x4004011}, 0x0) 546.351291ms ago: executing program 4 (id=5673): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x80000) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmmsg$unix(r1, &(0x7f0000005980)=[{{0x0, 0x0, &(0x7f0000001280)=[{&(0x7f0000001040)=""/31, 0x1f}], 0x1}}], 0x1, 0x200, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$AUTOFS_IOC_CATATONIC(r2, 0x9362, 0x0) sendmsg$NFT_MSG_GETTABLE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000600)={0x24, 0x1, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_USERDATA={0x4}]}, 0x24}}, 0x800) 540.587436ms ago: executing program 2 (id=5674): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000002440), 0x40, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$FICLONERANGE(r2, 0x4020940d, &(0x7f0000000c40)={{r1}, 0x7ff, 0x8, 0x2}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0x8, &(0x7f0000001f80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0xd}, 0x48) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000cc0)=@o_path={&(0x7f0000000c80)='./file0\x00', 0x0, 0x8, r4}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x2800000002000000, 0xe, 0x55, &(0x7f0000000140)="a06ad876d56a0064d082778c3938", &(0x7f0000000380)=""/85, 0x0, 0x4000000}, 0x28) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000886100000000000000030071120000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) r6 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000380)={0x0, 0x0, 0x0}, &(0x7f00000003c0)=0xc) r11 = syz_open_procfs$namespace(r8, &(0x7f0000001780)='ns/ipc\x00') r12 = getpid() sendmmsg$unix(r7, &(0x7f0000001b00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@cred={{0x1c, 0x1, 0x2, {r8, 0x0, 0xee00}}}], 0x20, 0x4044014}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001bc0)=[@cred={{0x1c, 0x1, 0x2, {r8, 0x0, r10}}}, @cred={{0x1c, 0x1, 0x2, {r12, r9}}}, @rights={{0x18, 0x1, 0x1, [r11, 0xffffffffffffffff]}}], 0x58, 0x800}}], 0x2, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000d80)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000d40)={&(0x7f0000003480)={0x131c, 0x2f, 0x400, 0x70bd27, 0x25dfdbfe, {0x1b}, [@generic="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", @typed={0x8, 0x47, 0x0, 0x0, @uid=r9}, @nested={0xab, 0x1a, 0x0, 0x1, [@generic="3684ee44865f29b4a2ef00e5dd24e76257114e5f68e429ea739bbceb15d49925be1018c7b5fef830e3fa5024af4efc6fb1b4e57a77de1e27af9f6ef4285aea", @typed={0x14, 0x9d, 0x0, 0x0, @ipv6=@private2={0xfc, 0x2, '\x00', 0x1}}, @typed={0xf, 0xf4, 0x0, 0x0, @str='syzkaller0\x00'}, @nested={0x4, 0x98}, @typed={0x3f, 0x71, 0x0, 0x0, @binary="7f4295596b46cc5e667aae7f94a8c90bcd50a684e5c7bbc81d3f01d46298c897358b21c3fc5498e9cf2299a0a3f2efe3376bf949917fd80ccfddbd"}]}, @generic="7a7376aeb8ef08bd85ded07d8ab05614cf44af9bc812fa13c850576d3f6e2237e077df9bd754075b960848789e1fd8bdcb6daf147ddeb9a928b9913c7d36a2b20576c3c71c9fb69c47b180faf43782782a3ccb1471d6073f23744a1eb711cab2b8ec78e5a218", @typed={0x8, 0xa1, 0x0, 0x0, @fd=r5}, @generic="fdeadccf5724e31f8893ce7a2226f348267f5c54d494d33b15ca329173899ee16f1d9c03438d2868bc24c58e1aa264764514ec63d9c2e5383d73f79d6326a0bee8f4ba6bf859f5dd05db018466a945e88febca0ff042e37c3c321b7047773d89343ce4da365ce9eee9bd4f18d87f8882a8470a23e0b8e4a721c5edd4fd87994acc35c3bebc07df30edaaac2bc3b1910b71a900c38e0d9476646f6ccd9b1269acb9b942c531c719f7092711b67d5e4f31fc5dbe93870fbf37fc9985c1ea1c7bbefb1234430eabf2ed3c0748e5817f01f1963a454ffc36b364a2a86ee741e5a625a9f8df3999dc243f5914e61b2e", @generic="f9941488f9f66bc5bc2fff056778d7e7f41fe812b3578c171f19cec8290ec221d3c08220532086ad45822ad1c1ebad2c3610e92d940a19c27f9b2a5c4616789ec74d4184669a9e77c82508ef798d3e21625be9868898d2fefff271f0ce4720f0e39742b6dba90eda587cba20ab1548b4ddb745b5d6dd5189701bc651599c339833af7c46c959635126c522de26c8ed4db7e84302e978546f6822856cb5c224ee5ac8e86849940d26195407b591c567d35a0da13c42d1a3ede1ab3ccb3416c1e84162834e93816e9eddd1e2dad4bc5f2394952656c91231833351326f900cb51c61ee02177b7aa53b7ebce054b55e3de43b7f0d7d8e858919"]}, 0x131c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000800) sendmmsg$inet(r2, &(0x7f0000000bc0)=[{{&(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000000200)="747f059dad0aa8404dd04398bd62fe5633addb82cd67e4bb524fef16da8a1e8af116c330054f0472ac0b18e9d68f119014ff45f8e97f9b04b2a96026c354a751603e9b25ada40be39f8903c8c33a2ba681367328d342ff761a0c605452beb0e12fd35411150d34c6726b9ad3282bc30952b190", 0x73}, {&(0x7f0000000280)="91b63a65a8709d3eff825383f17851da0041e80f3282b7ef52712e6c4afd3f3a4845", 0x22}, {&(0x7f0000002480)="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", 0x1000}, {&(0x7f0000000440)="1b4a75812041ad0c92c0cf9839f710c077a06fd6c5c09d52db3a4894bcd7a71a483d3c3228712f45e061f7c1d7aed15068312879040b6c80da28d04858cd33ef62d1852162d1b35bd15f42642f1fbcbc27f020e6dd9354c7d4cbade7d08bb1cb88c7e6bdeae1ce64e04171ff766947db03f9dbdfdf133cc29744407012a20f3dc3bf2831d8660b90a9b986ae8080e1e9108808e4fbaa49786d71e56de82d94054531e5474f86d663d8fd6c72f9105f9739000000", 0xb4}], 0x4, &(0x7f0000000700)=[@ip_retopts={{0x14, 0x0, 0x7, {[@ra={0x94, 0x4, 0x1}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x80000001}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xc}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x5}}, @ip_retopts={{0xe0, 0x0, 0x7, {[@generic={0x86, 0xb, "843ed9bf79f99123c1"}, @rr={0x7, 0x1f, 0xdf, [@initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @broadcast, @local]}, @timestamp={0x44, 0x20, 0x2d, 0x0, 0x8, [0x6, 0x1, 0xa3a0, 0x4, 0x94, 0x0, 0x7]}, @lsrr={0x83, 0x13, 0xce, [@dev={0xac, 0x14, 0x14, 0x22}, @broadcast, @dev={0xac, 0x14, 0x14, 0x27}, @rand_addr=0x64010100]}, @cipso={0x86, 0x37, 0x2, [{0x1, 0x7, "cdc4d1c49a"}, {0x2, 0xf, "4cab728bde9a847371caee9f04"}, {0x7, 0x9, "1f3554bc3c60b3"}, {0x7, 0x2}, {0x6, 0x10, "02e58d49d04ba16469880edfcc17"}]}, @ssrr={0x89, 0xf, 0x94, [@private=0xa010101, @broadcast, @broadcast]}, @cipso={0x86, 0x2d, 0xffffffffffffffff, [{0x6, 0x6, "199a4182"}, {0x0, 0x6, "53c3cc3e"}, {0x7, 0xb, "7968356d5d0d4d27ea"}, {0x5, 0x10, "215ebdd291a76aff15223f311e54"}]}]}}}], 0x140}}, {{&(0x7f0000000500)={0x2, 0x4e21, @remote}, 0x10, &(0x7f0000000600)=[{&(0x7f0000000840)="c5e2ed662a4993eff9edcfabe89df7863c7b34b23476ea1b24811f6dbb6024d844fa3538f36e001d0b4e31e688363ac4f527e6684809a3a0cc10fb30ec324af21244e7549675ed53e2d4bb77d89a89fe147c217b01be3cd30d7b771a5b6d51b88c0a6918aae34ba02311c9c486a9736c41943470e6ce62b92c4db3afe3dc40a4b95071896571d77f415fa5629983dcf8e624a3170efa7db2d41b1c3ed338baba6dd088cd6d55", 0xa6}, {&(0x7f0000000540)="8233ce695051cc8d274baf3a804a99574d6fdfa5693c187912174346dea16aecd4a101c8c8e2c71ac1630d07e152fd4c5b9c3b3ab02e", 0x36}, {&(0x7f00000005c0)="aa7b47ab4d7dbde4e3b0ffe76e4add884450b58b41b74444332d7c2f4de909dd4828bb611c7b049b8f23bf8825b0e8847228c079", 0x34}], 0x3, &(0x7f0000000900)=[@ip_retopts={{0x80, 0x0, 0x7, {[@end, @rr={0x7, 0x17, 0xc1, [@initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @multicast2, @multicast1, @local]}, @cipso={0x86, 0x1c, 0x3, [{0x7, 0x4, "91b0"}, {0x7, 0xd, "4701e33d5acc57d49e5201"}, {0x2, 0x5, "b4107c"}]}, @timestamp_addr={0x44, 0x3c, 0xbc, 0x1, 0x6, [{@empty, 0x10000}, {@loopback, 0x3ff}, {@broadcast, 0x4}, {@loopback, 0x3}, {@broadcast, 0xe4}, {@multicast1, 0xac}, {@loopback, 0xb}]}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x3}}, @ip_retopts={{0x64, 0x0, 0x7, {[@timestamp={0x44, 0x2c, 0x21, 0x0, 0x3, [0xfffffffd, 0x7, 0x4, 0xff, 0x7, 0xff, 0xffffffff, 0x5, 0x9, 0x4]}, @cipso={0x86, 0x26, 0x3, [{0x7, 0xc, "a81938c418f7eee2266d"}, {0x0, 0x4, "becb"}, {0x5, 0x2}, {0x2, 0xa, "5f67a1f5758a1175"}, {0x6, 0x4, '\f|'}]}]}}}, @ip_retopts={{0xb0, 0x0, 0x7, {[@generic={0x86, 0xf, "9182294cd5fe6e967ac59514da"}, @cipso={0x86, 0x28, 0xffffffffffffffff, [{0x5, 0x11, "6c92d825a500804da3b276739c3607"}, {0x0, 0x11, "c52bc1f6a1688e4ceeb0c32c70963a"}]}, @ssrr={0x89, 0x1b, 0xbc, [@empty, @dev={0xac, 0x14, 0x14, 0x1c}, @multicast1, @broadcast, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @cipso={0x86, 0x4e, 0x0, [{0x6, 0x12, "d1554c4c9412e9e24cad28eefc3c225e"}, {0x2, 0x2}, {0x7, 0x11, "d017c29966c13e3a099b38865061f3"}, {0x7, 0x2}, {0x0, 0x8, "477ae36a4058"}, {0x5, 0x7, "ed7b2906bb"}, {0x1, 0x12, "a3799afd0fba328db667e886acf5e102"}]}]}}}, @ip_retopts={{0x8c, 0x0, 0x7, {[@ra={0x94, 0x4}, @generic={0x82, 0xd, "549960f94b0b095bc8593f"}, @noop, @timestamp_prespec={0x44, 0x14, 0x1a, 0x3, 0x5, [{@multicast2, 0x7}, {@multicast1, 0x2}]}, @lsrr={0x83, 0x1b, 0x2b, [@empty, @broadcast, @empty, @broadcast, @empty, @multicast1]}, @timestamp_prespec={0x44, 0x14, 0xb, 0x3, 0x8, [{@broadcast, 0xfffffffe}, {@multicast2, 0xc}]}, @timestamp_addr={0x44, 0x24, 0xdf, 0x1, 0x2, [{@loopback, 0x2}, {@empty, 0xb}, {@local, 0x3}, {@loopback, 0x2d2a}]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x7fffffff}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xb}}, @ip_retopts={{0x28, 0x0, 0x7, {[@rr={0x7, 0xb, 0x8, [@multicast1, @private=0xa010101]}, @timestamp={0x44, 0xc, 0x93, 0x0, 0x3, [0xe, 0x8]}]}}}, @ip_retopts={{0x10}}], 0x2a8}}], 0x2, 0x800) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001040)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x4}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r13 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r13, &(0x7f0000002400)="800000800000210ee7decd7a0000", 0xe, 0x200000c1, &(0x7f00000001c0)={0x11, 0x88a8, r3, 0x1, 0x3}, 0x14) 535.617678ms ago: executing program 4 (id=5675): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280), 0x17) (async) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280), 0x17) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000d00)={r0}, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x6, &(0x7f0000000640)=@framed={{}, [@map_fd={0x18, 0x0, 0x2, 0x0, r0}, @ldst={0x1, 0x2, 0x3}]}, &(0x7f0000000d40)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000}, 0x90) r1 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) (async) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x12, 0x9, 0x4, 0x12}, 0x48) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000780)={@map=r4, 0x4, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0x1, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8810}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newtfilter={0x58, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xb, 0x4}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x28, 0x2, [@TCA_BASIC_EMATCHES={0x24, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0xceb, 0x7, 0x2}, {{0x0, 0x0, 0x1, 0x1}, {0x0, 0x0, 0x1}}}}]}]}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000000000)={0xffffffffffffffff, 0x4, 0x40, 0x0, @vifc_lcl_addr=@private=0xa010102, @multicast2}, 0x10) 331.162425ms ago: executing program 3 (id=5676): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r1, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @broadcast}], 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r3, &(0x7f0000004480)={&(0x7f0000004380), 0xc, &(0x7f0000004440)={&(0x7f00000043c0)={0x24, 0x1407, 0x1e6a54407809fc47, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_NAME={0x4, 0x2, 'syz2\x00'}]}, 0x24}}, 0x0) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r2) r5 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8932, &(0x7f0000003f80)={'team0\x00', &(0x7f0000003f40)=@ethtool_channels}) recvfrom$l2tp(r5, &(0x7f0000000140)=""/21, 0x15, 0x40010000, &(0x7f0000000180)={0x2, 0x0, @multicast1}, 0x10) sendmsg$netlink(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)=ANY=[@ANYRES64=r4], 0x118}], 0x1, 0x0, 0x0, 0x24008811}, 0x0) 330.680749ms ago: executing program 4 (id=5677): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x25, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18001000"/17], &(0x7f00000000c0)='GPL\x00', 0x4, 0xac, &(0x7f0000000200)=""/4096, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x70) setsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x7f, &(0x7f00000000c0), 0x4) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x4, 0x9, 0x2}}]}}]}, 0x44}}, 0x0) r4 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) socket$pppl2tp(0x18, 0x1, 0x1) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) socket$kcm(0x10, 0x2, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r5}, &(0x7f0000000840), &(0x7f0000000880)=r6}, 0x20) r7 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r6, r8, 0x25, 0x2}, 0x14) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[], 0x0) tee(r0, r4, 0x8000000000000000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000008000000000018000380140003801000018004000300080001"], 0x44}}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f00000002c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB='(bl\x00', @ANYRES16=r10, @ANYBLOB="08002dbd7000ffdbdf250400000014000180080003000200000008000100", @ANYRES32=r3, @ANYRES8=r3], 0x28}, 0x1, 0x0, 0x0, 0x44005}, 0x44) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010007000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000048000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0c00098008000140000000075c0000000e0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xec}}, 0x0) r12 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r12, 0x114, 0x1d, &(0x7f0000000000), 0x4) socket$inet_mptcp(0x2, 0x1, 0x106) 320.752769ms ago: executing program 2 (id=5678): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL80211_CMD_REQ_SET_REG(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x10, r1, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x8840) r2 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) shutdown(r3, 0x2) recvmsg(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000002640)=""/4096, 0x1000}], 0x1}, 0x40000001) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_HT={0x4}]}]}]}, 0x2c}}, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, r1, 0x10, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x7}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40480c0}, 0x880) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_REQ_SET_REG(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x10, r1, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x8840) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) (async) shutdown(r3, 0x2) (async) recvmsg(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000002640)=""/4096, 0x1000}], 0x1}, 0x40000001) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000480)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_HT={0x4}]}]}]}, 0x2c}}, 0x0) (async) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, r1, 0x10, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x7}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40480c0}, 0x880) (async) 306.267611ms ago: executing program 3 (id=5679): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x141}]}, 0x3c}}, 0x0) (async) bind$packet(r0, 0xfffffffffffffffd, 0x0) 207.790101ms ago: executing program 2 (id=5680): r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f90b24fc60", 0x8c0}], 0x1}, 0x0) recvmsg$kcm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001c00)=[{&(0x7f00000003c0)=""/202, 0xca}, {&(0x7f0000001a00)=""/205, 0xcd}, {&(0x7f0000000680)=""/122, 0x7a}, {&(0x7f00000007c0)=""/192, 0xc0}, {&(0x7f0000003cc0)=""/4062, 0xfde}, {&(0x7f0000001b00)=""/210, 0xd2}, {&(0x7f0000001880)=""/131, 0x83}, {&(0x7f0000000200)=""/72, 0x48}, {&(0x7f0000000880)=""/4089, 0xff9}, {&(0x7f00000004c0)=""/235, 0xeb}], 0xa}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 204.72671ms ago: executing program 4 (id=5681): r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000440)={0x0, 0x10, &(0x7f0000000400)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000480)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000200), &(0x7f0000000280)=0x4) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r0, 0x89fb, &(0x7f0000000940)={'sit0\x00', &(0x7f0000000000)={@private2, @empty, 0x10, 0xf}}) 202.445148ms ago: executing program 3 (id=5682): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@volatile={0x0, 0x0, 0x0, 0x9, 0x1000001}]}}, 0x0, 0x26}, 0x20) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x3fb, 0x0, 0x0, {}, [@IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x30cae}]}, 0x28}}, 0x850) 183.506503ms ago: executing program 2 (id=5683): syz_emit_ethernet(0x2e, &(0x7f0000000000)={@multicast, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr, @multicast1}, {0x3200, 0x88be, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f00000001c0), 0x4) recvfrom$inet6(r0, &(0x7f0000000040)=""/135, 0x87, 0x10102, &(0x7f0000000100)={0xa, 0x4e21, 0x7a, @loopback, 0x3}, 0x1c) 158.321224ms ago: executing program 3 (id=5684): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000f80)=@broute={'broute\x00', 0x20, 0x6, 0x90, [0x2000000000, 0x0, 0x40, 0x0, 0x0, 0x1], 0x0, 0x0, &(0x7f0000000180)=ANY=[]}, 0x78) (async) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r0, 0x8983, &(0x7f0000000000)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000980)=@filter={'filter\x00', 0x4, 0x4, 0x340, 0xffffffff, 0x0, 0x0, 0xd0, 0xfeffffff, 0xffffffff, 0x270, 0x270, 0x270, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x5}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x270}}, {{@ipv6={@private0, @loopback, [0xff, 0x0, 0xff000000], [0x0, 0xff, 0xff000000, 0xffffff00], 'team0\x00', 'batadv_slave_0\x00', {0xff}, {}, 0xff, 0xe7, 0x4, 0x44}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x9, 0x8, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'bond0\x00', 0x0}) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05050000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900030073797a32000000000900010073797a3000000000340000001c0a010100000000000000000100000008000940000000000900020073797a323a0000000900010073797a30"], 0xa8}}, 0x0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x1, 0x0, 0x2000001, {0x0, 0x0, 0x0, r3, {0x7}, {0xd, 0xc}, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048054) 90.952358ms ago: executing program 2 (id=5685): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, &(0x7f0000000340)={0x4, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @rand_addr=0x64010102}}}, 0x108) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmsg$alg(r3, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) sendmsg$TIPC_NL_MEDIA_SET(r3, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000003c80)=ANY=[], 0x12f4}}, 0x0) setsockopt(r3, 0x7ff, 0xe, &(0x7f0000000100), 0x0) recvmsg$unix(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000200)=""/19, 0x13}], 0x1}, 0x0) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='batadv_slave_1\x00', 0x10) r4 = socket$inet(0x2, 0x801, 0x0) accept4(r0, &(0x7f0000000240)=@tipc=@name, &(0x7f0000000040)=0x80, 0x0) bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r4, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) shutdown(r4, 0x1) sendto$inet(r0, 0x0, 0x0, 0x200007bd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) 89.580712ms ago: executing program 1 (id=5686): socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000480)={{0x14, 0x10, 0x7c, 0x0, 0x6000, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, "d1"}]}]}]}]}, @NFT_MSG_DELRULE={0x14, 0x8, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x1}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xb8}}, 0x40) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000480)={{0x14, 0x10, 0x7c, 0x0, 0x6000, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, "d1"}]}]}]}]}, @NFT_MSG_DELRULE={0x14, 0x8, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x1}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xb8}}, 0x40) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) setsockopt$inet6_IPV6_PKTINFO(r1, 0x29, 0x32, &(0x7f0000001200)={@mcast1}, 0x14) 61.421437ms ago: executing program 2 (id=5687): r0 = socket$inet_udp(0x2, 0x2, 0x0) (async) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) (async, rerun: 64) socket$inet_smc(0x2b, 0x1, 0x0) (async, rerun: 64) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20"], 0xfc}}, 0x0) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r2) sendmsg$NLBL_MGMT_C_VERSION(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x14, r3, 0x1}, 0x14}}, 0x0) (async) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f00000001c0)={0x80001006}, 0x10) r5 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_j1939(r5, &(0x7f0000000180)={0x1d, r6, 0x0, {0x0, 0x0, 0x1}, 0x2}, 0x18) (async) sendmsg$can_j1939(r5, &(0x7f00000002c0)={&(0x7f00000000c0)={0x1d, 0x0, 0x10015, {0x0, 0x1ee}}, 0x18, &(0x7f00000004c0)={0x0}}, 0x0) write(r1, &(0x7f0000000140)="01d33c80b2f8fb07b841e6e1dbb81a47ec5ec123457f95e6a88f0efdf8eaac63a930ccb8e6aed866f3ca9aa2bda0f05662c7ee8f3222496d59243df630193a69788936b556d5b59f78978dccff3589803f4c5d55c3308cc3bbd0b287f10590a25fa9d03214c5715fe792cac98e1f924d3e", 0x71) (async) sendmsg$kcm(r4, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1c0000004a008102e00f80ecdb4cb9020a", 0x4a}, {&(0x7f0000001700)="0c74c75350f4a590e15c61c7942348092734fe1863473bbce6798a60e9", 0x1d}], 0x2, 0x0, 0x0, 0x10}, 0x0) (async) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r1, 0x84, 0x78, 0x0, 0x0) (async) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x2a, 0x0, 0x190) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000080)={0x2, {{0x2, 0x4e22, @multicast2}}}, 0x88) 0s ago: executing program 3 (id=5688): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)={0x70, r2, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'lblc\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x45}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wrr\x00'}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1e}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x453}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x6}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x800}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x20020cc0}, 0x20000010) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1400000013000100dffffffffffffff607"], 0x14}], 0x1}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=@newlink={0x50, 0x10, 0xf11, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x104}, [@IFLA_LINKINFO={0x1d, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x20, 0x20}}}}}}, @IFLA_MASTER={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendfile(r1, r1, &(0x7f00000001c0)=0x6, 0x6) kernel console output (not intermixed with test programs): 380251][ T5837] Bluetooth: hci0: command 0x041b tx timeout [ 413.833422][T18940] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 413.973942][T18987] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3383'. [ 413.994391][ T151] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 414.014721][ T151] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 414.183748][T18993] netlink: 27 bytes leftover after parsing attributes in process `syz.3.3384'. [ 414.225424][T18992] netlink: 'syz.0.3382': attribute type 1 has an invalid length. [ 414.245010][T18992] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3382'. [ 414.272152][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 414.280462][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 414.345048][T18999] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3384'. [ 414.597597][T19019] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3389'. [ 414.736437][T19028] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3336'. [ 414.873259][T19036] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3394'. [ 414.964370][T19048] netlink: 7064 bytes leftover after parsing attributes in process `syz.2.3396'. [ 414.981035][T19048] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 415.000315][T19038] bridge0: port 2(bridge_slave_1) entered disabled state [ 415.008100][T19038] bridge0: port 1(bridge_slave_0) entered disabled state [ 415.188765][T19038] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 415.207466][T19038] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 415.411180][ T49] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.420361][ T49] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.465610][ T49] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.479314][ T5837] Bluetooth: hci0: command 0x041b tx timeout [ 415.499956][ T49] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.505059][T19073] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3404'. [ 415.508876][ T796] IPVS: starting estimator thread 0... [ 415.565143][T19079] IPVS: sh: FWM 3 0x00000003 - no destination available [ 415.595458][T19081] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3406'. [ 415.620024][T19077] IPVS: using max 32 ests per chain, 76800 per kthread [ 415.635644][T19085] ip6t_srh: unknown srh match flags 5F28 [ 415.649751][T19085] mac80211_hwsim hwsim24 wlan0: Caught tx_queue_len zero misconfig [ 415.711420][T19085] Bluetooth: MGMT ver 1.23 [ 415.946502][T19106] bond1: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 415.958053][T19106] bond1 (unregistering): Released all slaves [ 415.960051][T19102] delete_channel: no stack [ 415.997647][T19102] netlink: 'syz.0.3414': attribute type 15 has an invalid length. [ 416.033574][ T49] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 256 - 0 [ 416.045275][ T49] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 256 - 0 [ 416.080056][ T49] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 256 - 0 [ 416.088718][ T49] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 256 - 0 [ 416.286876][T19136] xt_l2tp: missing protocol rule (udp|l2tpip) [ 416.405786][T19141] netlink: 'syz.1.3428': attribute type 1 has an invalid length. [ 416.817537][T19179] bridge_slave_0: left allmulticast mode [ 416.834436][T19179] bridge_slave_0: left promiscuous mode [ 416.870306][T19179] bridge0: port 1(bridge_slave_0) entered disabled state [ 416.875715][T19184] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 416.894777][T19179] bridge_slave_1: left allmulticast mode [ 416.928252][T19179] bridge_slave_1: left promiscuous mode [ 416.936356][T19179] bridge0: port 2(bridge_slave_1) entered disabled state [ 416.976921][T19193] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 417.012978][T19190] netlink: 'syz.3.3443': attribute type 1 has an invalid length. [ 417.024133][T19179] bond0: (slave bond_slave_0): Releasing backup interface [ 417.034302][T19179] bond0: (slave bond_slave_1): Releasing backup interface [ 417.047178][T19179] team0: Port device team_slave_0 removed [ 417.054825][T19179] team0: Port device team_slave_1 removed [ 417.061663][T19179] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 417.070840][T19179] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 417.078521][T19179] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 417.103094][T19193] bridge0: port 2(bridge_slave_1) entered disabled state [ 417.110497][T19193] bridge0: port 1(bridge_slave_0) entered disabled state [ 417.126429][T19190] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 417.280385][T19207] bridge_slave_0: left allmulticast mode [ 417.294629][T19207] bridge_slave_0: left promiscuous mode [ 417.302643][T19207] bridge0: port 1(bridge_slave_0) entered disabled state [ 417.357190][T19207] bridge_slave_1: left allmulticast mode [ 417.380170][T19207] bridge_slave_1: left promiscuous mode [ 417.385982][T19207] bridge0: port 2(bridge_slave_1) entered disabled state [ 417.427881][T19207] bond0: (slave bond_slave_0): Releasing backup interface [ 417.466561][T19207] bond0: (slave bond_slave_1): Releasing backup interface [ 417.522004][T19207] team0: Port device team_slave_0 removed [ 417.592498][T19207] team0: Port device team_slave_1 removed [ 417.622704][T19207] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 417.667727][T19207] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 417.719518][T19207] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 418.102477][T19248] netlink: 'syz.3.3457': attribute type 9 has an invalid length. [ 418.136964][T19248] syzkaller1: entered promiscuous mode [ 418.159293][T19248] syzkaller1: entered allmulticast mode [ 418.185327][T19248] team0: Port device team_slave_0 removed [ 418.315032][T19257] IPVS: persistence engine module ip_vs_pe_ not found [ 418.378619][T19263] netlink: 'syz.1.3463': attribute type 1 has an invalid length. [ 418.748000][T19289] ip6tnl0: entered promiscuous mode [ 418.758374][T19289] ip6tnl0: entered allmulticast mode [ 419.070296][T19315] openvswitch: netlink: EtherType 53b is less than min 600 [ 419.492424][T19339] netlink: 'syz.1.3487': attribute type 7 has an invalid length. [ 419.500415][T19338] __nla_validate_parse: 19 callbacks suppressed [ 419.500431][T19338] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3486'. [ 419.506219][T19336] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3485'. [ 419.515881][T19339] netlink: 'syz.1.3487': attribute type 7 has an invalid length. [ 419.534854][T19336] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3485'. [ 419.554709][T19336] geneve2: entered promiscuous mode [ 419.561649][T19336] geneve2: entered allmulticast mode [ 419.575974][T19336] xt_hashlimit: size too large, truncated to 1048576 [ 419.625903][T19344] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3485'. [ 419.659560][T19347] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3489'. [ 419.712585][T19349] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 419.719477][T19349] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 419.767675][T19349] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3488'. [ 419.787149][T19353] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 2, id = 0 [ 419.797700][T19352] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 419.963350][T19364] openvswitch: netlink: IPv4 tunnel dst address is zero [ 419.985603][T19365] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3493'. [ 420.005500][T19365] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3493'. [ 420.026040][T19368] netlink: 'syz.3.3496': attribute type 12 has an invalid length. [ 420.057777][T19371] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3497'. [ 420.225865][T19382] syzkaller0: entered promiscuous mode [ 420.238510][T19382] syzkaller0: entered allmulticast mode [ 420.251907][T19382] TC_ACT_REPEAT abuse ? [ 420.355241][T19393] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3505'. [ 420.467770][T19397] bridge0: port 2(bridge_slave_1) entered disabled state [ 420.475430][T19397] bridge0: port 1(bridge_slave_0) entered disabled state [ 420.491668][T19400] IPVS: set_ctl: invalid protocol: 92 224.0.0.1:20001 [ 420.531929][T19402] bridge0: port 2(bridge_slave_1) entered blocking state [ 420.539190][T19402] bridge0: port 2(bridge_slave_1) entered forwarding state [ 420.546729][T19402] bridge0: port 1(bridge_slave_0) entered blocking state [ 420.553926][T19402] bridge0: port 1(bridge_slave_0) entered forwarding state [ 420.592068][T19402] bridge0: port 2(bridge_slave_1) entered disabled state [ 420.599428][T19402] bridge0: port 1(bridge_slave_0) entered disabled state [ 420.826836][T19425] netlink: 'syz.2.3513': attribute type 25 has an invalid length. [ 420.907095][T19437] IPVS: set_ctl: invalid protocol: 43 172.20.20.170:20001 [ 421.096191][T19441] bond1: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 421.108387][T19441] bond1 (unregistering): Released all slaves [ 421.275979][T19459] bridge0: port 3(syz_tun) entered blocking state [ 421.288203][T19459] bridge0: port 3(syz_tun) entered disabled state [ 421.295870][T19459] syz_tun: entered allmulticast mode [ 421.305210][T19459] syz_tun: entered promiscuous mode [ 421.425461][T19470] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 421.464718][T19476] netlink: 'syz.2.3528': attribute type 4 has an invalid length. [ 421.501316][T19477] netlink: 'syz.2.3528': attribute type 4 has an invalid length. [ 421.510776][T19476] netlink: 'syz.2.3528': attribute type 4 has an invalid length. [ 421.803258][T19496] gretap1: entered promiscuous mode [ 421.820431][T19496] gretap1: entered allmulticast mode [ 421.833645][T19494] netlink: 'syz.4.3534': attribute type 12 has an invalid length. [ 422.059557][T19513] syz.2.3541: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 422.075533][T19513] CPU: 0 UID: 0 PID: 19513 Comm: syz.2.3541 Not tainted syzkaller #0 PREEMPT(full) [ 422.075561][T19513] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 422.075573][T19513] Call Trace: [ 422.075581][T19513] [ 422.075589][T19513] dump_stack_lvl+0xe8/0x150 [ 422.075623][T19513] warn_alloc+0x249/0x340 [ 422.075645][T19513] ? stack_trace_save+0xa9/0x100 [ 422.075668][T19513] ? __pfx_warn_alloc+0x10/0x10 [ 422.075695][T19513] ? kasan_save_track+0x4f/0x80 [ 422.075713][T19513] ? kasan_save_track+0x3e/0x80 [ 422.075729][T19513] ? __kasan_kmalloc+0x93/0xb0 [ 422.075747][T19513] ? __kmalloc_cache_noprof+0x31c/0x660 [ 422.075764][T19513] ? xskq_create+0x56/0x170 [ 422.075788][T19513] ? xsk_setsockopt+0x54c/0x990 [ 422.075810][T19513] ? do_sock_setsockopt+0x17c/0x1b0 [ 422.075836][T19513] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 422.075860][T19513] ? do_syscall_64+0x14d/0xf80 [ 422.075909][T19513] __vmalloc_node_range_noprof+0x132/0x1730 [ 422.075961][T19513] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 422.075987][T19513] ? __kasan_kmalloc+0x93/0xb0 [ 422.076013][T19513] vmalloc_user_noprof+0xad/0xe0 [ 422.076033][T19513] ? xskq_create+0xbf/0x170 [ 422.076059][T19513] xskq_create+0xbf/0x170 [ 422.076088][T19513] xsk_init_queue+0x8a/0xe0 [ 422.076121][T19513] xsk_setsockopt+0x54c/0x990 [ 422.076148][T19513] ? __pfx_xsk_setsockopt+0x10/0x10 [ 422.076170][T19513] ? __pfx_aa_sk_perm+0x10/0x10 [ 422.076194][T19513] ? aa_sock_opt_perm+0xff/0x1a0 [ 422.076219][T19513] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 422.076239][T19513] ? __pfx_xsk_setsockopt+0x10/0x10 [ 422.076264][T19513] do_sock_setsockopt+0x17c/0x1b0 [ 422.076301][T19513] __x64_sys_setsockopt+0x13d/0x1b0 [ 422.076333][T19513] do_syscall_64+0x14d/0xf80 [ 422.076361][T19513] ? trace_irq_disable+0x3b/0x150 [ 422.076385][T19513] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 422.076404][T19513] ? clear_bhb_loop+0x40/0x90 [ 422.076423][T19513] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 422.076440][T19513] RIP: 0033:0x7fa47179c629 [ 422.076459][T19513] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 422.076476][T19513] RSP: 002b:00007fa4725ce028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 422.076497][T19513] RAX: ffffffffffffffda RBX: 00007fa471a15fa0 RCX: 00007fa47179c629 [ 422.076511][T19513] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000005 [ 422.076523][T19513] RBP: 00007fa471832b39 R08: 0000000000000004 R09: 0000000000000000 [ 422.076535][T19513] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 422.076547][T19513] R13: 00007fa471a16038 R14: 00007fa471a15fa0 R15: 00007fffe03498b8 [ 422.076578][T19513] [ 422.076934][T19513] Mem-Info: [ 422.203801][T19523] sctp: [Deprecated]: syz.3.3542 (pid 19523) Use of struct sctp_assoc_value in delayed_ack socket option. [ 422.203801][T19523] Use struct sctp_sack_info instead [ 422.236076][T19513] active_anon:6312 inactive_anon:0 isolated_anon:0 [ 422.236076][T19513] active_file:2830 inactive_file:40055 isolated_file:0 [ 422.236076][T19513] unevictable:768 dirty:62 writeback:0 [ 422.236076][T19513] slab_reclaimable:12504 slab_unreclaimable:114577 [ 422.236076][T19513] mapped:29135 shmem:1397 pagetables:1257 [ 422.236076][T19513] sec_pagetables:0 bounce:0 [ 422.236076][T19513] kernel_misc_reclaimable:0 [ 422.236076][T19513] free:1301435 free_pcp:13182 free_cma:0 [ 422.429054][T19513] Node 0 active_anon:28248kB inactive_anon:0kB active_file:11320kB inactive_file:160012kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:119540kB dirty:244kB writeback:0kB shmem:7052kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13684kB pagetables:4888kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 422.469810][T19513] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:140kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 422.530837][T19513] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 422.591792][T19513] lowmem_reserve[]: 0 2493 2493 2493 2493 [ 422.607769][T19513] Node 0 DMA32 free:1244380kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB free_highatomic:0KB active_anon:32148kB inactive_anon:0kB active_file:11320kB inactive_file:160012kB unevictable:1536kB writepending:244kB zspages:0kB present:3129332kB managed:2552852kB mlocked:0kB bounce:0kB free_pcp:45668kB local_pcp:29452kB free_cma:0kB [ 422.663751][T19483] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 422.706182][T19513] lowmem_reserve[]: 0 0 0 0 0 [ 422.720718][T19513] Node 0 Normal free:8kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:884kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:12kB free_cma:0kB [ 422.822093][T19513] lowmem_reserve[]: 0 0 0 0 0 [ 422.859346][T19513] Node 1 Normal free:3945992kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:752kB local_pcp:0kB free_cma:0kB [ 422.920083][T19513] lowmem_reserve[]: 0 0 0 0 0 [ 422.924848][T19513] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 423.010147][T19513] Node 0 DMA32: 5840*4kB (UME) 3811*8kB (UM) 1536*16kB (UM) 214*32kB (UME) 77*64kB (UME) 192*128kB (UME) 130*256kB (UME) 79*512kB (UM) 41*1024kB (UM) 29*2048kB (UME) 232*4096kB (UM) = 1240152kB [ 423.061132][T19513] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 423.075858][T19513] Node 1 Normal: 2*4kB (UM) 2*8kB (UM) 5*16kB (UME) 5*32kB (UME) 2*64kB (ME) 7*128kB (UM) 3*256kB (UM) 3*512kB (UM) 2*1024kB (ME) 2*2048kB (UE) 961*4096kB (M) = 3945992kB [ 423.121536][T19513] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 423.133081][T19513] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 423.144218][T19513] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 423.155692][T19513] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 423.166428][T19513] 47111 total pagecache pages [ 423.171520][T19513] 0 pages in swap cache [ 423.175679][T19513] Free swap = 124996kB [ 423.200260][T19513] Total swap = 124996kB [ 423.204449][T19513] 2097051 pages RAM [ 423.235202][T19513] 0 pages HighMem/MovableOnly [ 423.251897][T19513] 427002 pages reserved [ 423.256103][T19513] 0 pages cma reserved [ 423.332001][T19577] netlink: 'syz.0.3561': attribute type 6 has an invalid length. [ 423.373677][ T49] netdevsim netdevsim0 netdevsim0: set [0, 1] type 1 family 0 port 8472 - 0 [ 423.385697][T19577] netlink: 'syz.0.3561': attribute type 6 has an invalid length. [ 423.399218][ T49] netdevsim netdevsim0 netdevsim1: set [0, 1] type 1 family 0 port 8472 - 0 [ 423.417551][ T49] netdevsim netdevsim0 netdevsim2: set [0, 1] type 1 family 0 port 8472 - 0 [ 423.437465][ T49] netdevsim netdevsim0 netdevsim3: set [0, 1] type 1 family 0 port 8472 - 0 [ 423.589597][T19597] netdevsim netdevsim0: Firmware load for './file0/file0/..' refused, path contains '..' component [ 423.667587][T19602] : entered promiscuous mode [ 423.861213][ T3521] wlan1: Trigger new scan to find an IBSS to join [ 424.074865][T19632] bond2: option lp_interval: invalid value (0) [ 424.081748][T19632] bond2: option lp_interval: allowed values 1 - 2147483647 [ 424.109067][T19632] bond2 (unregistering): Released all slaves [ 424.879529][T19698] validate_nla: 1 callbacks suppressed [ 424.879548][T19698] netlink: 'syz.1.3592': attribute type 1 has an invalid length. [ 425.014316][T19714] __nla_validate_parse: 64 callbacks suppressed [ 425.014336][T19714] netlink: 208240 bytes leftover after parsing attributes in process `syz.3.3595'. [ 425.052139][T19721] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3597'. [ 425.072522][T19717] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3596'. [ 425.231496][T19736] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3602'. [ 425.257752][T19735] IPVS: set_ctl: invalid protocol: 255 0.0.0.0:20002 [ 425.275045][T19736] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3602'. [ 425.402864][T19740] bond1: option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 425.426449][T19740] bond1 (unregistering): Released all slaves [ 425.521213][T19744] bond1: option packets_per_slave: invalid value (18446744073709551615) [ 425.566210][T19744] bond1: option packets_per_slave: allowed values 0 - 65535 [ 425.592451][T19744] bond1 (unregistering): Released all slaves [ 426.558771][T19815] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3618'. [ 426.712823][T19826] tipc: Failed to remove unknown binding: 66,0,0/0:3678400793/3678400795 [ 426.722215][T19826] tipc: Failed to remove unknown binding: 66,0,0/0:3678400793/3678400794 [ 426.732367][T19826] tipc: Failed to remove unknown binding: 66,0,0/0:3678400793/3678400795 [ 426.741508][T19826] tipc: Failed to remove unknown binding: 66,0,0/0:3678400793/3678400794 [ 426.899382][ T2968] wlan1: Trigger new scan to find an IBSS to join [ 429.425029][T19799] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 429.754712][T19858] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3631'. [ 429.774536][T19868] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3634'. [ 429.829454][T19872] syzkaller0: entered promiscuous mode [ 429.835847][T19872] syzkaller0: entered allmulticast mode [ 429.864158][ T49] wlan1: Trigger new scan to find an IBSS to join [ 429.880960][T19874] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 429.974404][T19880] netlink: 88 bytes leftover after parsing attributes in process `syz.1.3639'. [ 430.006904][T19880] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3639'. [ 430.026709][T19881] netlink: 'syz.1.3639': attribute type 1 has an invalid length. [ 430.034556][T19880] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3639'. [ 430.043113][T19886] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 430.045855][T19881] netlink: 'syz.1.3639': attribute type 2 has an invalid length. [ 430.147630][T19895] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3643'. [ 430.156869][T19895] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3643'. [ 430.280584][T19897] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3644'. [ 430.283328][T19898] netlink: 'syz.1.3644': attribute type 4 has an invalid length. [ 430.301016][T19897] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3644'. [ 430.313973][T19897] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3644'. [ 430.324419][T19897] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3644'. [ 430.335195][T19897] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3644'. [ 430.345460][T19897] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3644'. [ 430.355293][T19897] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3644'. [ 430.477234][T19905] block nbd0: not configured, cannot reconfigure [ 430.553646][T19910] sctp: [Deprecated]: syz.0.3649 (pid 19910) Use of int in max_burst socket option. [ 430.553646][T19910] Use struct sctp_assoc_value instead [ 430.793855][ T3521] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 430.870294][T19929] syzkaller1: entered promiscuous mode [ 430.878792][T19929] syzkaller1: entered allmulticast mode [ 430.943995][T19937] bond0: Caught tx_queue_len zero misconfig [ 430.960280][T19935] 9o+4: renamed from lo (while UP) [ 431.478228][T19989] veth0_to_team: entered promiscuous mode [ 431.502760][T19989] veth0_to_team: left promiscuous mode [ 431.731219][T20003] bond1 (unregistering): Released all slaves [ 431.787328][T20008] net_ratelimit: 1 callbacks suppressed [ 431.787350][T20008] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 431.800738][ T5884] IPVS: starting estimator thread 0... [ 431.900356][T20015] IPVS: using max 31 ests per chain, 74400 per kthread [ 431.949828][T20028] openvswitch: netlink: Unexpected mask (mask=4000040, allowed=10048) [ 431.951459][T20022] netlink: 'syz.3.3681': attribute type 7 has an invalid length. [ 432.370506][T20060] netlink: 'syz.3.3692': attribute type 3 has an invalid length. [ 432.625644][T20079] netlink: 'syz.1.3700': attribute type 1 has an invalid length. [ 432.682120][T20079] bond1: entered promiscuous mode [ 432.687624][T20079] 8021q: adding VLAN 0 to HW filter on device bond1 [ 432.721953][T20079] 8021q: adding VLAN 0 to HW filter on device bond1 [ 432.740336][T20079] bond1: (slave vti0): The slave device specified does not support setting the MAC address [ 432.758379][T20079] bond1: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 432.770908][T20079] bond1: (slave vti0): making interface the new active one [ 432.778227][T20079] vti0: entered promiscuous mode [ 432.788217][T20079] bond1: (slave vti0): Enslaving as an active interface with an up link [ 432.833228][T20098] xt_cgroup: xt_cgroup: no path or classid specified [ 433.058490][T20109] bridge0: port 4(batadv1) entered blocking state [ 433.081241][T20109] bridge0: port 4(batadv1) entered disabled state [ 433.088370][T20109] batadv1: entered allmulticast mode [ 433.096605][T20109] batadv1: entered promiscuous mode [ 433.559295][ T49] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 433.568981][ T49] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 433.934126][T20185] x_tables: duplicate underflow at hook 1 [ 434.140367][T20198] netlink: 'syz.3.3732': attribute type 2 has an invalid length. [ 434.194649][T20200] netlink: Conntrack attr type has unexpected length (type=2, length=0, expected=2) [ 434.232683][T20200] bond2: Unable to set peer notification delay as MII monitoring is disabled [ 434.244428][T20200] bond2 (unregistering): Released all slaves [ 434.327398][T20209] netlink: 'syz.0.3739': attribute type 1 has an invalid length. [ 434.470654][T20222] xt_TCPMSS: Only works on TCP SYN packets [ 434.485941][T20222] xt_ecn: cannot match TCP bits for non-tcp packets [ 434.528806][T20225] syzkaller0: entered promiscuous mode [ 434.534897][T20225] syzkaller0: entered allmulticast mode [ 435.555661][T20263] __nla_validate_parse: 43 callbacks suppressed [ 435.555674][T20263] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3751'. [ 435.571806][T20263] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3751'. [ 437.451164][T20219] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 437.680090][T20288] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3759'. [ 437.963345][T20317] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3767'. [ 437.999919][T20319] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3768'. [ 438.032421][T20323] team0: Device gtp0 is up. Set it down before adding it as a team port [ 438.148581][T20334] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3773'. [ 438.159110][T20331] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3774'. [ 438.189262][T20335] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 438.212681][T20335] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 438.364415][T20352] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3778'. [ 438.371017][T20349] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3779'. [ 438.530369][T20359] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 438.565692][T20362] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3783'. [ 438.997594][T20401] netlink: 'syz.1.3791': attribute type 2 has an invalid length. [ 439.072585][T20407] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 439.233156][T20415] ip6t_REJECT: ECHOREPLY is not supported [ 439.631033][T20456] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 439.638351][T20456] IPv6: NLM_F_CREATE should be set when creating new route [ 439.645641][T20456] IPv6: NLM_F_CREATE should be set when creating new route [ 439.656666][T20456] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 439.668233][T20456] netlink: 'syz.2.3808': attribute type 5 has an invalid length. [ 439.822551][T20465] A link change request failed with some changes committed already. Interface 9o+4 may have been left with an inconsistent configuration, please check. [ 440.026724][ T1297] lec:lec_start_xmit: lec0:No lecd attached [ 440.463835][T20528] openvswitch: netlink: Actions may not be safe on all matching packets [ 440.488831][T20537] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 440.621239][T20541] bond2: option mode: invalid value (133) [ 440.623123][T20550] netlink: 'syz.4.3832': attribute type 1 has an invalid length. [ 440.639936][T20541] bond2 (unregistering): Released all slaves [ 440.647628][T20550] netlink: 'syz.4.3832': attribute type 1 has an invalid length. [ 440.658069][T20550] netlink: 'syz.4.3832': attribute type 1 has an invalid length. [ 440.669081][T20550] netlink: 'syz.4.3832': attribute type 2 has an invalid length. [ 440.707083][T20551] netlink: 'syz.0.3834': attribute type 29 has an invalid length. [ 440.728873][T20550] __nla_validate_parse: 10 callbacks suppressed [ 440.728892][T20550] netlink: 76 bytes leftover after parsing attributes in process `syz.4.3832'. [ 440.749878][T20551] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3834'. [ 440.868196][T20558] 8021q: adding VLAN 0 to HW filter on device bond1 [ 441.074642][T20576] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 441.136563][T20582] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3843'. [ 441.272847][T20595] xt_bpf: check failed: parse error [ 441.320870][T20594] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3844'. [ 441.350342][T20594] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3844'. [ 441.369545][T20594] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3844'. [ 441.415637][T20595] vlan2: entered promiscuous mode [ 441.429560][T20595] bridge0: entered promiscuous mode [ 441.438239][T20595] vlan2: entered allmulticast mode [ 441.449601][T20595] bridge0: entered allmulticast mode [ 441.557875][T20606] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3844'. [ 441.694474][T20610] IPVS: sh: FWM 3 0x00000003 - no destination available [ 441.815564][T20620] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3852'. [ 441.882344][T20627] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR [ 442.072484][T20650] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3859'. [ 442.077989][T20651] netlink: 'syz.2.3860': attribute type 11 has an invalid length. [ 442.226327][T20660] netlink: 'syz.4.3863': attribute type 1 has an invalid length. [ 442.330297][T20673] netlink: 80 bytes leftover after parsing attributes in process `syz.4.3866'. [ 442.345222][T20668] bond2 (unregistering): Released all slaves [ 442.362603][T20675] netlink: 'syz.0.3865': attribute type 1 has an invalid length. [ 442.899890][ T151] wlan1: Trigger new scan to find an IBSS to join [ 443.271892][T20725] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 443.395873][T20733] xt_limit: Overflow, try lower: 271964/0 [ 443.480692][T20735] bond1: option primary_reselect: invalid value (255) [ 443.497376][T20735] bond1 (unregistering): Released all slaves [ 443.506161][T20738] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 443.520403][T20739] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 443.694472][T20746] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 444.003934][T20769] validate_nla: 2 callbacks suppressed [ 444.003954][T20769] netlink: 'syz.0.3898': attribute type 1 has an invalid length. [ 444.062280][T20769] 8021q: adding VLAN 0 to HW filter on device bond2 [ 444.125712][T20775] bond2: (slave veth13): Enslaving as an active interface with a down link [ 444.142434][T20769] bond2: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 444.177554][T20780] netlink: 'syz.4.3901': attribute type 29 has an invalid length. [ 444.208860][T20785] netlink: 'syz.2.3902': attribute type 1 has an invalid length. [ 444.218541][T20785] openvswitch: netlink: Unexpected mask (mask=2020040, allowed=2010048) [ 444.877971][T20826] A link change request failed with some changes committed already. Interface 9o+4 may have been left with an inconsistent configuration, please check. [ 444.971791][T20828] bond3: option xmit_hash_policy: invalid value (64) [ 445.025522][T20828] bond3 (unregistering): Released all slaves [ 445.039182][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 445.047241][ C1] lec:lec_tx_timeout: lec0 [ 445.139792][T20836] xt_ecn: cannot match TCP bits for non-tcp packets [ 445.163924][T20836] bridge0: port 5(gretap0) entered blocking state [ 445.181578][T20836] bridge0: port 5(gretap0) entered disabled state [ 445.192155][T20836] gretap0: entered allmulticast mode [ 445.201104][T20836] gretap0: entered promiscuous mode [ 445.227395][T20839] xt_ecn: cannot match TCP bits for non-tcp packets [ 445.261436][T20840] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 445.277469][T20838] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 445.446998][T20848] bond2: Unable to set down delay as MII monitoring is disabled [ 445.488803][T20848] bond2 (unregistering): Released all slaves [ 445.572742][T20869] SET target dimension over the limit! [ 445.764606][T20879] syzkaller0: entered promiscuous mode [ 445.783562][T20879] syzkaller0: entered allmulticast mode [ 445.823175][T20879] RDS: rds_bind could not find a transport for ::ffff:100.1.1.1, load rds_tcp or rds_rdma? [ 445.859454][T20495] wlan1: Trigger new scan to find an IBSS to join [ 446.645937][T20917] x_tables: unsorted underflow at hook 4 [ 447.073868][T20929] IPVS: set_ctl: invalid protocol: 117 172.20.20.170:20000 [ 448.488164][T20860] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 448.497893][T20885] netlink: 'syz.4.3930': attribute type 1 has an invalid length. [ 448.507382][T20885] __nla_validate_parse: 13 callbacks suppressed [ 448.507397][T20885] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3930'. [ 448.565842][T20939] debugfs: 'Ku crK:̥B| lS-!' already exists in 'ieee80211' [ 448.820936][ T12] wlan1: Trigger new scan to find an IBSS to join [ 448.923566][T20966] smc: net device wlan0 applied user defined pnetid SYZ0 [ 448.967367][T20968] netlink: 'syz.1.3950': attribute type 1 has an invalid length. [ 448.997626][T20968] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3950'. [ 449.018263][T20968] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3950'. [ 449.037908][T20968] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3950'. [ 449.079362][T20975] netlink: 'syz.2.3952': attribute type 11 has an invalid length. [ 449.109691][T20975] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3952'. [ 449.144780][T20978] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 449.379728][T20992] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3959'. [ 449.407702][T20994] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3960'. [ 449.544671][T21008] netlink: 'syz.4.3960': attribute type 30 has an invalid length. [ 449.555758][T20994] 8021q: adding VLAN 0 to HW filter on device bond2 [ 449.621034][T20997] bond3: option all_slaves_active: invalid value (222) [ 449.630911][T20997] bond3 (unregistering): Released all slaves [ 449.731397][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 449.811630][T21014] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3965'. [ 449.820829][T21014] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3965'. [ 449.932193][T21033] openvswitch: netlink: Unexpected mask (mask=4000040, allowed=10048) [ 449.947596][T21037] 8021q: VLANs not supported on wg2 [ 449.995660][T21028] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3970'. [ 450.511711][T21056] batadv1: entered allmulticast mode [ 450.729062][T21068] netlink: 'syz.3.3981': attribute type 1 has an invalid length. [ 450.782121][T21068] 8021q: adding VLAN 0 to HW filter on device bond2 [ 450.857801][T21068] bond2: (slave geneve2): making interface the new active one [ 450.881263][T21068] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 450.901127][T20494] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 450.937274][T20494] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 450.951217][T20494] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 450.962186][T20494] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 450.972493][T21068] syzkaller1: entered promiscuous mode [ 450.987849][T21068] syzkaller1: entered allmulticast mode [ 451.045200][T21094] netlink: 'syz.4.3991': attribute type 2 has an invalid length. [ 451.303927][T21119] xt_recent: Unsupported userspace flags (000000b1) [ 451.646569][T21153] netlink: 'syz.4.4007': attribute type 1 has an invalid length. [ 451.746987][T21153] 8021q: adding VLAN 0 to HW filter on device bond4 [ 451.803869][T21160] bond4: (slave veth3): Enslaving as an active interface with a down link [ 451.821555][T21153] bond4: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 452.055091][T21185] 8021q: adding VLAN 0 to HW filter on device bond0 [ 452.064188][T21185] 8021q: adding VLAN 0 to HW filter on device team0 [ 452.121651][T21185] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 452.310755][T21198] syzkaller1: entered promiscuous mode [ 452.333514][T21198] syzkaller1: entered allmulticast mode [ 452.409332][T21214] lo: MTU too low for tipc bearer [ 452.419997][T21214] tipc: Enabling of bearer rejected, failed to enable media [ 452.730123][T21236] gre0: entered promiscuous mode [ 452.805682][T21245] netlink: 'syz.0.4032': attribute type 4 has an invalid length. [ 452.825457][T21244] netlink: 'syz.3.4035': attribute type 1 has an invalid length. [ 452.840288][T21244] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 452.907647][T21261] netlink: 'syz.2.4039': attribute type 32 has an invalid length. [ 452.967454][T21268] netlink: 'syz.2.4039': attribute type 32 has an invalid length. [ 452.986029][T21266] xt_nfacct: accounting object `\$9ZM#mU|^c\F9YⳈ' does not exist [ 453.003389][ T30] audit: type=1800 audit(1771815020.733:4): pid=21265 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.4041" name=4996AE17DFFC2E43C8174B54B620636894AAACF28FF62616363C70A440AEC4014CAF28C0ADC04308 dev="tmpfs" ino=792 res=0 errno=0 [ 453.646708][T21303] __nla_validate_parse: 14 callbacks suppressed [ 453.646729][T21303] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4051'. [ 453.723075][T21307] netlink: 'syz.3.4051': attribute type 7 has an invalid length. [ 453.738804][T21307] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4051'. [ 454.241898][T21333] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4059'. [ 454.551011][T21344] bridge_slave_0: left allmulticast mode [ 454.566370][T21344] bridge_slave_0: left promiscuous mode [ 454.589213][T21344] bridge0: port 1(bridge_slave_0) entered disabled state [ 454.635465][T21344] bridge_slave_1: left allmulticast mode [ 454.641447][T21344] bridge_slave_1: left promiscuous mode [ 454.648202][T21344] bridge0: port 2(bridge_slave_1) entered disabled state [ 454.698106][T21344] bond0: (slave bond_slave_0): Releasing backup interface [ 454.709424][T21344] bond0: (slave bond_slave_1): Releasing backup interface [ 454.805443][T21344] team0: Port device team_slave_1 removed [ 454.812742][T21344] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 454.837943][T21344] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 454.847729][T21344] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 455.082807][T21364] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4067'. [ 455.358458][T20495] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 455.369857][T20495] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 455.390209][T20495] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 455.406700][T20495] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 455.679080][T21396] netlink: 'syz.4.4077': attribute type 1 has an invalid length. [ 455.752851][T21393] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 455.768247][T21393] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 455.867767][T21396] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 455.958011][T21395] bond4: (slave veth0_to_bond): Releasing active interface [ 456.120659][T21413] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4080'. [ 456.135605][T21414] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4080'. [ 456.615825][T21427] IPv6: NLM_F_CREATE should be specified when creating new route [ 457.038837][T21452] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4091'. [ 457.064079][T21287] Set syz1 is full, maxelem 65536 reached [ 457.232269][T21460] netlink: 'syz.4.4095': attribute type 1 has an invalid length. [ 457.392286][T21472] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 457.477133][T21474] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 457.540888][T21482] vxcan1 speed is unknown, defaulting to 1000 [ 457.926612][T21506] netlink: 'syz.3.4104': attribute type 61 has an invalid length. [ 457.954331][T21513] mac80211_hwsim hwsim32 wlan0: entered promiscuous mode [ 457.962525][T21518] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4107'. [ 457.975013][T21518] netlink: 148 bytes leftover after parsing attributes in process `syz.2.4107'. [ 458.182630][T21529] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 458.488308][T21552] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4116'. [ 458.602728][T21560] netlink: 'syz.0.4118': attribute type 6 has an invalid length. [ 458.623950][T21560] netlink: 'syz.0.4118': attribute type 6 has an invalid length. [ 458.807369][T21572] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 458.866330][T21575] tipc: Started in network mode [ 458.875208][T21575] tipc: Node identity aaaaaaaaaa33, cluster identity 4711 [ 458.894932][T21575] tipc: Enabled bearer , priority 0 [ 459.023732][T21593] __nla_validate_parse: 1 callbacks suppressed [ 459.023748][T21593] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4129'. [ 459.033721][T21595] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4130'. [ 459.159570][T21603] sctp: [Deprecated]: syz.2.4133 (pid 21603) Use of int in max_burst socket option. [ 459.159570][T21603] Use struct sctp_assoc_value instead [ 459.272073][T21612] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 459.651899][ T30] audit: type=1107 audit(1771815027.383:5): pid=21642 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='ɩIY0v›Yh|#2VhS' [ 459.849929][T21658] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4151'. [ 459.862048][T21660] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4151'. [ 459.889677][ T5936] tipc: Node number set to 10070698 [ 459.913730][T21662] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4152'. [ 459.927142][T21662] netlink: 'syz.0.4152': attribute type 8 has an invalid length. [ 459.938672][T21664] --map-set only usable from mangle table [ 460.020597][T21671] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4156'. [ 460.141643][T21683] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4158'. [ 460.145089][T21680] netlink: 84 bytes leftover after parsing attributes in process `syz.4.4155'. [ 460.214535][T21688] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4159'. [ 460.224000][T21688] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4159'. [ 460.235151][T21688] syzkaller0: entered promiscuous mode [ 460.240738][T21688] syzkaller0: entered allmulticast mode [ 460.248717][T21688] 0: reclassify loop, rule prio 0, protocol 800 [ 460.302221][T21688] netlink: 'syz.0.4159': attribute type 18 has an invalid length. [ 460.326295][T21688] netlink: 'syz.0.4159': attribute type 18 has an invalid length. [ 460.569697][T21717] IPVS: set_ctl: invalid protocol: 8 10.1.1.1:20002 [ 460.720344][ T9406] lec:lec_start_xmit: lec0:No lecd attached [ 463.045304][T21675] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 463.055622][T21702] netlink: 'syz.1.4163': attribute type 1 has an invalid length. [ 463.405417][T21751] tipc: Started in network mode [ 463.410938][T21751] tipc: Node identity 4ebb252b47e, cluster identity 4711 [ 463.421846][T21751] tipc: Enabled bearer , priority 0 [ 463.488199][T21751] syzkaller0: entered promiscuous mode [ 463.502443][T21751] syzkaller0: entered allmulticast mode [ 463.505016][T21760] netlink: 'syz.0.4180': attribute type 11 has an invalid length. [ 463.509490][T21751] tipc: Resetting bearer [ 463.517000][T21760] netlink: 'syz.0.4180': attribute type 11 has an invalid length. [ 463.676813][T21745] tipc: Resetting bearer [ 465.190535][T21745] tipc: Disabling bearer [ 465.208673][ T5835] tipc: Node number set to 156968235 [ 465.352959][T21800] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 465.440384][T21804] batadv2: entered allmulticast mode [ 465.524128][T21817] netlink: 'syz.4.4196': attribute type 1 has an invalid length. [ 465.553088][T21817] netlink: 'syz.4.4196': attribute type 3 has an invalid length. [ 465.669288][T21824] veth1_to_bond: entered allmulticast mode [ 465.694028][T21824] veth1_to_bond: left allmulticast mode [ 465.752898][T21832] netlink: 'syz.1.4201': attribute type 1 has an invalid length. [ 465.757150][T21834] __nla_validate_parse: 6 callbacks suppressed [ 465.757167][T21834] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4202'. [ 465.859245][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5140 ms [ 465.867329][ C1] lec:lec_tx_timeout: lec0 [ 465.936107][T21845] blkio.reset_stats is deprecated [ 465.984983][T21845] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4203'. [ 466.173391][T21857] syzkaller0: entered promiscuous mode [ 466.179026][T21857] syzkaller0: entered allmulticast mode [ 466.205740][T21860] netlink: 'syz.1.4207': attribute type 20 has an invalid length. [ 466.220423][T21857] tipc: Enabled bearer , priority 0 [ 466.236124][T21860] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4207'. [ 466.263915][T21856] x_tables: duplicate entry at hook 3 [ 466.269392][T21866] IPv6: sit1: Disabled Multicast RS [ 466.284852][ T151] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 466.299737][ T151] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 466.316456][T21865] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 466.326184][T21865] syzkaller1: linktype set to 823 [ 466.346338][ T151] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 466.355291][ T151] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 466.401403][T21855] tipc: Resetting bearer [ 466.443183][T21855] tipc: Disabling bearer [ 466.445417][T21873] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4211'. [ 466.458479][T21873] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4211'. [ 466.515796][T21881] sctp: [Deprecated]: syz.0.4213 (pid 21881) Use of int in max_burst socket option. [ 466.515796][T21881] Use struct sctp_assoc_value instead [ 466.644618][T21886] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4214'. [ 466.684096][T21884] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4214'. [ 467.011239][T21906] syzkaller0: entered promiscuous mode [ 467.021732][T21906] syzkaller0: entered allmulticast mode [ 467.187154][T21928] netlink: 372 bytes leftover after parsing attributes in process `syz.3.4225'. [ 467.216552][T21928] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4225'. [ 467.238311][T21942] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4228'. [ 467.322571][T21950] netlink: 'syz.2.4230': attribute type 1 has an invalid length. [ 467.463705][T21960] netlink: 'syz.1.4231': attribute type 1 has an invalid length. [ 468.043856][T21960] bond2: entered promiscuous mode [ 468.054816][T21960] 8021q: adding VLAN 0 to HW filter on device bond2 [ 470.392202][T21975] bond2: (slave bridge5): making interface the new active one [ 470.400272][T21975] bridge5: entered promiscuous mode [ 470.406942][T21975] bridge5: left promiscuous mode [ 470.469300][T21998] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 470.606421][T22012] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 470.804335][T22015] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 470.817078][T22026] netlink: 'syz.3.4248': attribute type 16 has an invalid length. [ 470.825879][T22026] netlink: 'syz.3.4248': attribute type 17 has an invalid length. [ 470.917266][T22026] 8021q: adding VLAN 0 to HW filter on device bond0 [ 470.957983][T22026] 8021q: adding VLAN 0 to HW filter on device team0 [ 471.055466][T22026] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 471.115826][T22053] IPVS: sh: FWM 3 0x00000003 - no destination available [ 471.124804][T22048] xt_hashlimit: size too large, truncated to 1048576 [ 471.142809][T22046] xt_hashlimit: size too large, truncated to 1048576 [ 471.154895][T22037] netlink: 'syz.1.4251': attribute type 12 has an invalid length. [ 471.177762][T22037] netlink: 'syz.1.4251': attribute type 29 has an invalid length. [ 471.214231][T22037] netlink: 148 bytes leftover after parsing attributes in process `syz.1.4251'. [ 471.230557][T22037] netlink: 'syz.1.4251': attribute type 1 has an invalid length. [ 471.250414][T22037] netlink: 'syz.1.4251': attribute type 2 has an invalid length. [ 471.277491][T22037] netlink: 11 bytes leftover after parsing attributes in process `syz.1.4251'. [ 471.302821][T22063] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4248'. [ 471.315276][T22063] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4248'. [ 471.361764][T22042] syzkaller0: entered promiscuous mode [ 471.369674][T22042] syzkaller0: entered allmulticast mode [ 471.796809][T22100] x_tables: duplicate underflow at hook 2 [ 471.805378][T22097] syzkaller0: entered promiscuous mode [ 471.822246][T22097] syzkaller0: entered allmulticast mode [ 471.927061][T22097] netlink: 96 bytes leftover after parsing attributes in process `syz.4.4265'. [ 472.083290][T22129] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 472.182690][T22136] netlink: 248 bytes leftover after parsing attributes in process `syz.4.4275'. [ 472.263108][T22144] netlink: 256 bytes leftover after parsing attributes in process `syz.1.4277'. [ 472.298007][T22144] netlink: 256 bytes leftover after parsing attributes in process `syz.1.4277'. [ 472.419505][ T5837] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 472.495320][T22162] netlink: 'syz.0.4279': attribute type 33 has an invalid length. [ 472.527889][T22162] bond3: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 472.541806][T22162] bond3 (unregistering): Released all slaves [ 472.580624][T22157] vxcan1 speed is unknown, defaulting to 1000 [ 472.690744][T22174] netlink: 9 bytes leftover after parsing attributes in process `syz.2.4280'. [ 472.934541][T22178] bond3: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 472.952731][T22178] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4283'. [ 472.972286][T22189] team0: Port device ip6gre1 added [ 473.185430][T22203] netlink: 'syz.3.4288': attribute type 1 has an invalid length. [ 473.256608][T22203] 8021q: adding VLAN 0 to HW filter on device bond4 [ 473.378348][T22212] ip6gre2: entered promiscuous mode [ 473.563848][T22223] bond3: option mode: invalid value (133) [ 473.573142][T22223] bond3 (unregistering): Released all slaves [ 473.852599][T22241] tipc: Enabled bearer , priority 0 [ 473.926946][T22241] syzkaller0: entered promiscuous mode [ 473.932763][T22241] syzkaller0: entered allmulticast mode [ 473.942380][T22241] tipc: Resetting bearer [ 473.975913][T22240] tipc: Resetting bearer [ 475.412857][T22240] tipc: Disabling bearer [ 475.527257][T22271] netlink: 'syz.2.4308': attribute type 4 has an invalid length. [ 476.149638][T22325] netlink: 'syz.4.4324': attribute type 39 has an invalid length. [ 476.235509][T22330] __nla_validate_parse: 16 callbacks suppressed [ 476.235528][T22330] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4326'. [ 476.410605][T22344] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 476.561560][T22355] netlink: 'syz.1.4332': attribute type 12 has an invalid length. [ 479.370610][T22338] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 479.546651][T22383] netlink: 'syz.2.4339': attribute type 19 has an invalid length. [ 479.565414][T22383] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4339'. [ 479.612064][T22387] netlink: 'syz.1.4340': attribute type 2 has an invalid length. [ 479.615862][T22383] netlink: 'syz.2.4339': attribute type 19 has an invalid length. [ 479.620220][T22127] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 479.648065][T22387] netlink: 'syz.1.4340': attribute type 2 has an invalid length. [ 479.657350][T22384] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 479.666313][T22127] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 479.676145][T22127] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 479.676230][T22383] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4339'. [ 479.686736][T22127] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 479.883040][T22404] bond5: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 479.905914][T22404] bond5: (slave lo): Enslaving as an active interface with an up link [ 479.933410][T22404] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 480.040832][T22415] netlink: 64 bytes leftover after parsing attributes in process `syz.0.4348'. [ 480.508038][T22411] netlink: 'syz.1.4347': attribute type 1 has an invalid length. [ 480.544791][T22443] syzkaller0: entered promiscuous mode [ 480.550657][T22443] syzkaller0: entered allmulticast mode [ 480.570289][T22411] netlink: 'syz.1.4347': attribute type 1 has an invalid length. [ 480.588383][T22411] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4347'. [ 480.680670][T22450] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4347'. [ 480.845062][T22468] macsec0: entered promiscuous mode [ 480.850628][T22468] macsec0: entered allmulticast mode [ 480.856977][T22468] veth1_macvtap: entered allmulticast mode [ 480.864007][T22468] macsec0: left promiscuous mode [ 480.873466][T22468] macsec0: left allmulticast mode [ 480.883533][T22468] veth1_macvtap: left allmulticast mode [ 480.929455][T22473] macsec0: entered promiscuous mode [ 480.941112][T22473] macsec0: entered allmulticast mode [ 480.965864][T22468] veth1_macvtap: entered allmulticast mode [ 480.990623][T22468] macsec0: left promiscuous mode [ 481.001354][T22468] macsec0: left allmulticast mode [ 481.040097][T22468] veth1_macvtap: left allmulticast mode [ 481.042575][T22479] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4364'. [ 481.084613][T22481] syzkaller0: entered promiscuous mode [ 481.090360][T22481] syzkaller0: entered allmulticast mode [ 481.101952][T22481] TC_ACT_REPEAT abuse ? [ 481.107137][T22481] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4363'. [ 481.457235][T22509] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4368'. [ 481.483044][T22509] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4368'. [ 481.618004][T22509] syz_tun (unregistering): left allmulticast mode [ 481.627696][T22509] syz_tun (unregistering): left promiscuous mode [ 481.637499][T22509] bridge0: port 3(syz_tun) entered disabled state [ 481.718941][T22514] syzkaller0: entered promiscuous mode [ 481.724830][T22514] syzkaller0: entered allmulticast mode [ 481.743426][ T2968] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 481.762624][ T2968] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 481.894296][T22535] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4377'. [ 481.947619][T22530] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4377'. [ 482.261939][T22127] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 482.575750][T22541] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4379'. [ 483.405172][T22527] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 483.621917][T22555] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4382'. [ 483.823022][T22572] netlink: 208 bytes leftover after parsing attributes in process `syz.3.4387'. [ 484.140053][T22601] netlink: 'syz.2.4395': attribute type 1 has an invalid length. [ 484.147833][T22601] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4395'. [ 484.601460][T22604] xt_ecn: cannot match TCP bits for non-tcp packets [ 484.611259][T22634] netlink: 'syz.1.4402': attribute type 1 has an invalid length. [ 484.624436][T22634] netlink: 'syz.1.4402': attribute type 1 has an invalid length. [ 484.667911][T22637] sctp: [Deprecated]: syz.2.4403 (pid 22637) Use of struct sctp_assoc_value in delayed_ack socket option. [ 484.667911][T22637] Use struct sctp_sack_info instead [ 484.711294][T22637] sctp: [Deprecated]: syz.2.4403 (pid 22637) Use of struct sctp_assoc_value in delayed_ack socket option. [ 484.711294][T22637] Use struct sctp_sack_info instead [ 484.736933][T22634] bond3: entered promiscuous mode [ 484.742241][T22634] bond3: entered allmulticast mode [ 484.747808][T22634] 8021q: adding VLAN 0 to HW filter on device bond3 [ 484.768260][T22634] bridge5: entered promiscuous mode [ 484.773762][T22634] bridge5: entered allmulticast mode [ 484.779971][T22634] bond3: (slave bridge5): Enslaving as a backup interface with an up link [ 484.804689][T22634] bridge6: entered promiscuous mode [ 484.810193][T22634] bridge6: entered allmulticast mode [ 484.816307][T22634] bond3: (slave bridge6): Enslaving as a backup interface with a down link [ 484.849286][T22127] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 484.999828][ T12] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 485.133289][T22662] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4408'. [ 485.160064][T22662] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4408'. [ 485.189248][T22662] block nbd0: Unsupported socket: should be TCP or UNIX. [ 501.464140][ T1297] lec:lec_start_xmit: lec0:No lecd attached [ 506.829182][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5360 ms [ 506.837197][ C1] lec:lec_tx_timeout: lec0 [ 513.714633][T22670] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4410'. [ 513.725770][T22670] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4410'. [ 513.752782][T22679] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.4413'. [ 513.762300][T22674] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4411'. [ 513.766871][T22676] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4412'. [ 513.774064][T22677] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.4413'. [ 513.796093][T22674] vlan2: entered allmulticast mode [ 513.829974][T22674] bridge7: entered allmulticast mode [ 513.985047][T22674] bridge7: port 1(veth3) entered blocking state [ 513.991795][T22674] bridge7: port 1(veth3) entered disabled state [ 513.998279][T22674] veth3: entered allmulticast mode [ 514.005677][T22674] veth3: entered promiscuous mode [ 514.028407][T22691] syzkaller0: entered promiscuous mode [ 514.037630][T22691] syzkaller0: entered allmulticast mode [ 514.068231][T22691] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4418'. [ 514.208602][T22699] tipc: Started in network mode [ 514.218471][T22699] tipc: Node identity 9eebc0917395, cluster identity 4711 [ 514.240113][T22699] tipc: Enabled bearer , priority 0 [ 514.266014][T22127] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 514.290601][T22699] syzkaller0: entered promiscuous mode [ 514.296290][T22699] syzkaller0: entered allmulticast mode [ 514.335857][T22713] tipc: Failed to remove unknown binding: 66,0,0/0:361781449/361781450 [ 514.347569][T22708] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4424'. [ 514.362595][T22708] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4424'. [ 514.423858][T22710] tipc: Resetting bearer [ 514.452490][T22698] tipc: Resetting bearer [ 514.490803][T22698] tipc: Disabling bearer [ 514.495319][T22726] netlink: 'syz.3.4429': attribute type 1 has an invalid length. [ 514.538190][T22726] bond5: entered promiscuous mode [ 514.543680][T22726] 8021q: adding VLAN 0 to HW filter on device bond5 [ 514.554727][T22731] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4429'. [ 514.580443][T22724] vlan0: entered allmulticast mode [ 514.591621][T22724] veth0_vlan: entered allmulticast mode [ 514.641181][T22726] bond5: (slave bridge4): making interface the new active one [ 514.651065][T22726] bridge4: entered promiscuous mode [ 514.659074][T22726] bond5: (slave bridge4): Enslaving as an active interface with an up link [ 514.764739][T22750] netlink: 'syz.2.4435': attribute type 9 has an invalid length. [ 515.846150][T22812] netlink: 'syz.3.4455': attribute type 19 has an invalid length. [ 516.972327][T22823] tipc: Enabled bearer , priority 0 [ 516.989958][T22824] syzkaller0: entered promiscuous mode [ 517.006765][T22824] syzkaller0: entered allmulticast mode [ 517.135888][T22838] netlink: 'syz.2.4459': attribute type 21 has an invalid length. [ 517.356575][ T58] bond4 (unregistering): (slave geneve3): Releasing active interface [ 517.371601][ T58] bond2 (unregistering): (slave geneve2): Releasing active interface [ 517.415930][ T58] bond1 (unregistering): (slave bridge2): Releasing backup interface [ 517.424546][ T58] bridge2 (unregistering): left promiscuous mode [ 517.493401][ T58] team0: Port device bridge4 removed [ 517.792875][ T58] bond12 (unregistering): (slave bridge9): Releasing backup interface [ 517.801237][ T58] bridge9 (unregistering): left promiscuous mode [ 517.837906][ T58] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 517.847180][ T58] bond_slave_0: left allmulticast mode [ 517.854821][ T58] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 517.864018][ T58] bond_slave_1: left allmulticast mode [ 517.872369][ T58] bond0 (unregistering): Released all slaves [ 517.882860][ T58] bond1 (unregistering): Released all slaves [ 517.895724][ T58] bond2 (unregistering): Released all slaves [ 517.908457][ T58] bond3 (unregistering): Released all slaves [ 517.922158][ T58] bond4 (unregistering): Released all slaves [ 517.938893][ T58] bond5 (unregistering): Released all slaves [ 517.958566][ T58] bond6 (unregistering): Released all slaves [ 517.972170][ T58] bond7 (unregistering): Released all slaves [ 517.984874][ T58] bond8 (unregistering): left allmulticast mode [ 517.996908][ T58] bond8 (unregistering): left promiscuous mode [ 518.004982][ T58] team0: Port device macvlan4 removed [ 518.014143][ T58] bond8 (unregistering): Released all slaves [ 518.026844][ T58] bond9 (unregistering): Released all slaves [ 518.039830][ T58] bond10 (unregistering): Released all slaves [ 518.052449][ T58] bond11 (unregistering): Released all slaves [ 518.064830][ T58] bond12 (unregistering): Released all slaves [ 518.079468][T22824] tipc: Resetting bearer [ 518.109936][T22824] tipc: Disabling bearer [ 518.131278][T22838] netlink: 'syz.2.4459': attribute type 6 has an invalid length. [ 518.260942][ T58] tipc: Left network mode [ 518.637747][T22885] netlink: 'syz.0.4473': attribute type 3 has an invalid length. [ 518.810756][T22895] __nla_validate_parse: 9 callbacks suppressed [ 518.810773][T22895] netlink: 84 bytes leftover after parsing attributes in process `syz.2.4478'. [ 518.861215][T22895] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4478'. [ 518.990713][T22908] openvswitch: netlink: EtherType 53b is less than min 600 [ 519.108310][T22918] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4478'. [ 519.155040][T22917] bond4: option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 519.188690][T22917] bond4 (unregistering): Released all slaves [ 519.350395][T22929] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4484'. [ 519.458087][T22929] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4484'. [ 519.551497][T22941] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4488'. [ 519.683739][T22947] netlink: 'syz.2.4489': attribute type 4 has an invalid length. [ 519.870815][T22957] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4493'. [ 519.939801][ T58] hsr_slave_0: left promiscuous mode [ 519.951578][ T58] hsr_slave_1: left promiscuous mode [ 519.973596][ T58] veth1_macvtap: left promiscuous mode [ 519.985950][ T58] veth1_vlan: left promiscuous mode [ 520.150036][T22981] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4499'. [ 520.363226][ T58] team0 (unregistering): Port device team_slave_1 removed [ 520.388755][ T58] team0 (unregistering): Port device team_slave_0 removed [ 520.478310][T20488] smc: removing ib device syz2 [ 520.591886][T22973] gre1: entered promiscuous mode [ 520.614197][T22973] gre1: entered allmulticast mode [ 520.966739][T23001] syzkaller1: entered promiscuous mode [ 520.978738][T23001] syzkaller1: entered allmulticast mode [ 521.131110][T23010] netlink: 'syz.2.4503': attribute type 1 has an invalid length. [ 521.213624][T23012] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4504'. [ 521.377145][T23010] 8021q: adding VLAN 0 to HW filter on device bond2 [ 521.494490][T23009] bond2: (slave geneve3): making interface the new active one [ 521.527481][T23009] bond2: (slave geneve3): Enslaving as an active interface with an up link [ 521.738354][T23036] syzkaller0: entered promiscuous mode [ 521.815984][T23049] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4512'. [ 521.825380][T23036] syzkaller0: entered allmulticast mode [ 523.380096][T23046] : renamed from hsr0 [ 523.507568][ T58] IPVS: stop unused estimator thread 0... [ 523.660091][T23068] openvswitch: netlink: Unexpected mask (mask=201040, allowed=10048) [ 523.679520][T23067] openvswitch: netlink: Unexpected mask (mask=201040, allowed=10048) [ 523.828378][T23074] netlink: 'syz.0.4521': attribute type 6 has an invalid length. [ 523.838733][T23074] netlink: 'syz.0.4521': attribute type 6 has an invalid length. [ 523.878031][T23074] bridge3: entered promiscuous mode [ 523.883532][T23074] bridge3: entered allmulticast mode [ 523.891560][T23074] team0: Device bridge3 is of different type [ 523.979050][T23080] bridge5: the hash_elasticity option has been deprecated and is always 16 [ 524.012262][T23055] netlink: 'syz.1.4514': attribute type 16 has an invalid length. [ 524.020610][T23055] netlink: 'syz.1.4514': attribute type 17 has an invalid length. [ 524.067864][T23055] ip6tnl0: left promiscuous mode [ 524.073288][T23055] ip6tnl0: left allmulticast mode [ 524.085203][ T9406] lec:lec_start_xmit: lec0:No lecd attached [ 524.089482][T23055] bridge0: port 2(bridge_slave_1) entered blocking state [ 524.098285][T23055] bridge0: port 2(bridge_slave_1) entered forwarding state [ 524.106021][T23055] bridge0: port 1(bridge_slave_0) entered blocking state [ 524.113149][T23055] bridge0: port 1(bridge_slave_0) entered forwarding state [ 524.132415][T23055] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 524.153193][T23085] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4514'. [ 524.226180][T23097] team_slave_1: Caught tx_queue_len zero misconfig [ 524.357407][T23103] netlink: 'syz.0.4528': attribute type 1 has an invalid length. [ 524.365821][T23103] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4528'. [ 524.417748][T23100] syzkaller0: entered promiscuous mode [ 524.439288][T23100] syzkaller0: entered allmulticast mode [ 524.545171][T23111] netlink: 108 bytes leftover after parsing attributes in process `syz.0.4530'. [ 524.554319][T23111] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4530'. [ 524.563855][T23112] netlink: 108 bytes leftover after parsing attributes in process `syz.0.4530'. [ 524.573281][T23112] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4530'. [ 524.583635][T23111] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4530'. [ 524.635477][T23112] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4530'. [ 524.781392][T23125] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4535'. [ 524.870987][ T30] audit: type=1800 audit(1771815092.603:6): pid=23129 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.4537" name="memory.events" dev="tmpfs" ino=1581 res=0 errno=0 [ 524.919246][ T30] audit: type=1804 audit(1771815092.603:7): pid=23129 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.4537" name="/newroot/308/memory.events" dev="tmpfs" ino=1581 res=1 errno=0 [ 525.135771][T23140] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4539'. [ 525.430976][T23147] macsec1: entered promiscuous mode [ 525.478494][T23151] geneve3: entered promiscuous mode [ 525.484738][T23151] geneve3: entered allmulticast mode [ 525.492283][ T58] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 19999 - 0 [ 525.517300][ T58] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 19999 - 0 [ 525.540557][ T58] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 19999 - 0 [ 525.552246][ T58] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 19999 - 0 [ 525.999402][T23180] ipvlan0: entered promiscuous mode [ 526.004781][T23180] ipvlan0: entered allmulticast mode [ 526.314948][T23205] syzkaller0: entered promiscuous mode [ 526.325376][T23205] syzkaller0: entered allmulticast mode [ 526.595123][T23233] openvswitch: netlink: Unexpected mask (mask=4000040, allowed=10048) [ 527.268402][T23258] netlink: 'syz.4.4573': attribute type 10 has an invalid length. [ 527.344347][T23258] dummy0: entered promiscuous mode [ 527.363634][T23258] bridge0: port 1(dummy0) entered blocking state [ 527.374124][T23258] bridge0: port 1(dummy0) entered disabled state [ 527.380790][T23258] dummy0: entered allmulticast mode [ 527.507329][T23271] netlink: set zone limit has 4 unknown bytes [ 529.859608][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5770 ms [ 529.867839][ C1] lec:lec_tx_timeout: lec0 [ 530.263042][T23259] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 530.459713][T23289] __nla_validate_parse: 68 callbacks suppressed [ 530.459733][T23289] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4580'. [ 530.674301][T23304] smc: net device team0 applied user defined pnetid SYZ2 [ 531.022967][T23339] netlink: 64 bytes leftover after parsing attributes in process `syz.2.4597'. [ 531.056460][T23341] syzkaller1: entered promiscuous mode [ 531.064178][T23341] syzkaller1: entered allmulticast mode [ 531.191700][T23357] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 531.206329][T23357] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 531.345518][T23171] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 19999 - 0 [ 531.355063][T23171] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 19999 - 0 [ 531.365936][T23171] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 19999 - 0 [ 531.375260][T23171] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 19999 - 0 [ 531.515759][T23368] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4605'. [ 531.525931][T23368] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 531.684324][T23381] gre1: entered promiscuous mode [ 531.691202][T23381] gre1: entered allmulticast mode [ 531.745037][T23385] syzkaller1: entered allmulticast mode [ 531.755908][T23385] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4607'. [ 534.114039][T23350] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 534.124941][T23362] netlink: 'syz.2.4602': attribute type 1 has an invalid length. [ 534.140319][T23362] netlink: 96 bytes leftover after parsing attributes in process `syz.2.4602'. [ 534.162050][T23362] netlink: 1 bytes leftover after parsing attributes in process `syz.2.4602'. [ 534.383019][T23410] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4614'. [ 534.402561][T23410] block nbd1: not configured, cannot reconfigure [ 534.449521][T23416] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4617'. [ 534.458564][T23415] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4617'. [ 534.479059][T23413] netlink: 104 bytes leftover after parsing attributes in process `syz.0.4616'. [ 535.180566][T23477] FAULT_INJECTION: forcing a failure. [ 535.180566][T23477] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 535.237898][T23477] CPU: 0 UID: 0 PID: 23477 Comm: syz.3.4634 Not tainted syzkaller #0 PREEMPT(full) [ 535.237922][T23477] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 535.237931][T23477] Call Trace: [ 535.237936][T23477] [ 535.237943][T23477] dump_stack_lvl+0xe8/0x150 [ 535.237968][T23477] should_fail_ex+0x412/0x560 [ 535.237990][T23477] _copy_from_iter+0x1d3/0x1670 [ 535.238014][T23477] ? rcu_is_watching+0x15/0xb0 [ 535.238042][T23477] ? __pfx__copy_from_iter+0x10/0x10 [ 535.238069][T23477] ? netlink_sendmsg+0x650/0xb40 [ 535.238087][T23477] ? skb_put+0x11b/0x210 [ 535.238108][T23477] netlink_sendmsg+0x6c0/0xb40 [ 535.238143][T23477] ? __pfx_netlink_sendmsg+0x10/0x10 [ 535.238165][T23477] ? aa_sock_msg_perm+0xf1/0x1b0 [ 535.238185][T23477] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 535.238203][T23477] ? __pfx_netlink_sendmsg+0x10/0x10 [ 535.238222][T23477] ____sys_sendmsg+0xa68/0xad0 [ 535.238252][T23477] ? __pfx_____sys_sendmsg+0x10/0x10 [ 535.238282][T23477] ? import_iovec+0x73/0xa0 [ 535.238305][T23477] ___sys_sendmsg+0x2a5/0x360 [ 535.238329][T23477] ? __pfx____sys_sendmsg+0x10/0x10 [ 535.238377][T23477] ? __fget_files+0x2a/0x420 [ 535.238397][T23477] ? __fget_files+0x3a0/0x420 [ 535.238425][T23477] __x64_sys_sendmsg+0x1bd/0x2a0 [ 535.238449][T23477] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 535.238479][T23477] ? __pfx_ksys_write+0x10/0x10 [ 535.238507][T23477] do_syscall_64+0x14d/0xf80 [ 535.238530][T23477] ? trace_irq_disable+0x3b/0x150 [ 535.238551][T23477] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 535.238568][T23477] ? clear_bhb_loop+0x40/0x90 [ 535.238585][T23477] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 535.238601][T23477] RIP: 0033:0x7f81b619c629 [ 535.238618][T23477] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 535.238632][T23477] RSP: 002b:00007f81b707a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 535.238651][T23477] RAX: ffffffffffffffda RBX: 00007f81b6415fa0 RCX: 00007f81b619c629 [ 535.238663][T23477] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 535.238674][T23477] RBP: 00007f81b707a090 R08: 0000000000000000 R09: 0000000000000000 [ 535.238684][T23477] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 535.238694][T23477] R13: 00007f81b6416038 R14: 00007f81b6415fa0 R15: 00007ffcf18d48e8 [ 535.238723][T23477] [ 535.569047][T23481] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 535.640857][T23489] __nla_validate_parse: 5 callbacks suppressed [ 535.640876][T23489] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4636'. [ 535.712840][T23492] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4639'. [ 535.722059][T23493] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4639'. [ 536.017669][T23521] netdevsim netdevsim4 netdevsim0: IPsec offload requires 128 bit authentication [ 536.136727][T23530] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4648'. [ 536.334690][T23542] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4651'. [ 536.427590][T23550] netlink: 'syz.3.4653': attribute type 11 has an invalid length. [ 536.443648][T23550] netlink: 224 bytes leftover after parsing attributes in process `syz.3.4653'. [ 536.630269][T23569] x_tables: ip_tables: owner match: used from hooks PREROUTING, but only valid from OUTPUT/POSTROUTING [ 536.823170][T23576] netlink: 14 bytes leftover after parsing attributes in process `syz.4.4664'. [ 536.836080][T23576] dummy0 (unregistering): left allmulticast mode [ 536.854763][T23576] bridge0: port 1(dummy0) entered disabled state [ 536.890077][T23577] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4663'. [ 537.008255][T23593] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4667'. [ 537.441574][T23619] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4672'. [ 537.766123][T23638] netlink: 'syz.0.4676': attribute type 1 has an invalid length. [ 537.876166][T23644] bond3: (slave vcan0): The slave device specified does not support setting the MAC address [ 537.906374][T23644] bond3: (slave vcan0): Setting fail_over_mac to active for active-backup mode [ 537.941146][T23644] bond3: (slave vcan0): making interface the new active one [ 537.958461][T23644] bond3: (slave vcan0): Enslaving as an active interface with an up link [ 538.401903][T23672] delete_channel: no stack [ 538.714322][T23703] bridge2: entered promiscuous mode [ 538.719868][T23703] bridge2: entered allmulticast mode [ 539.063300][T23712] gtp0: entered promiscuous mode [ 539.068275][T23712] gtp0: entered allmulticast mode [ 539.192664][T23666] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 541.348558][T23667] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 541.360914][T23701] netlink: 'syz.4.4693': attribute type 3 has an invalid length. [ 541.376641][T23701] netlink: 'syz.4.4693': attribute type 1 has an invalid length. [ 541.398305][T23701] __nla_validate_parse: 6 callbacks suppressed [ 541.398322][T23701] netlink: 224 bytes leftover after parsing attributes in process `syz.4.4693'. [ 541.442121][T23716] bond4: Removing last arp target with arp_interval on [ 541.572510][T23728] netlink: 'syz.2.4700': attribute type 1 has an invalid length. [ 541.609315][T23728] netlink: 'syz.2.4700': attribute type 4 has an invalid length. [ 541.625133][T23728] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.4700'. [ 541.757155][T23741] bond4: entered promiscuous mode [ 541.762538][T23741] bond4: entered allmulticast mode [ 541.768189][T23741] 8021q: adding VLAN 0 to HW filter on device bond4 [ 541.844249][T23745] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4707'. [ 541.856157][T23750] gre0: entered allmulticast mode [ 541.983576][T23761] gre0: left promiscuous mode [ 541.993822][T23761] gre0: left allmulticast mode [ 542.008199][T23754] syzkaller1: entered promiscuous mode [ 542.024089][T23754] syzkaller1: entered allmulticast mode [ 542.040128][T23767] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4712'. [ 542.049605][T23767] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4712'. [ 542.052114][T23764] ip6_vti0 speed is unknown, defaulting to 1000 [ 542.108111][T23764] ip6_vti0 speed is unknown, defaulting to 1000 [ 542.116995][T23764] ip6_vti0 speed is unknown, defaulting to 1000 [ 542.220248][T23775] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4715'. [ 542.239595][T23775] chnl_net:caif_netlink_parms(): no params data found [ 542.442438][T23788] netlink: 192 bytes leftover after parsing attributes in process `syz.3.4718'. [ 542.524333][T23795] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4721'. [ 542.573500][T23795] netlink: 92 bytes leftover after parsing attributes in process `syz.1.4721'. [ 542.604987][T23764] infiniband syz2: set down [ 542.610535][ T24] ip6_vti0 speed is unknown, defaulting to 1000 [ 542.616947][T23795] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4721'. [ 542.626246][T23802] syzkaller0: entered promiscuous mode [ 542.626506][T23764] infiniband syz2: added ip6_vti0 [ 542.651441][T23802] syzkaller0: entered allmulticast mode [ 542.690954][T23764] RDS/IB: syz2: added [ 542.695025][T23764] smc: adding ib device syz2 with port count 1 [ 542.731763][T23764] smc: ib device syz2 port 1 has no pnetid [ 542.749571][ T24] ip6_vti0 speed is unknown, defaulting to 1000 [ 542.758384][T23764] ip6_vti0 speed is unknown, defaulting to 1000 [ 543.001037][T23764] ip6_vti0 speed is unknown, defaulting to 1000 [ 543.157561][T23822] tipc: Failed to remove unknown binding: 66,0,0/0:3967401874/3967401876 [ 543.168839][T23822] tipc: Failed to remove unknown binding: 66,0,0/0:3967401874/3967401875 [ 543.177919][T23822] tipc: Failed to remove unknown binding: 66,0,0/0:3967401874/3967401876 [ 543.186749][T23822] tipc: Failed to remove unknown binding: 66,0,0/0:3967401874/3967401875 [ 543.227161][T23764] ip6_vti0 speed is unknown, defaulting to 1000 [ 543.432308][T23764] ip6_vti0 speed is unknown, defaulting to 1000 [ 543.612369][T23764] ip6_vti0 speed is unknown, defaulting to 1000 [ 543.686925][T23838] x_tables: duplicate underflow at hook 1 [ 543.954668][T23764] ip6_vti0 speed is unknown, defaulting to 1000 [ 544.181057][T23864] syzkaller0: entered promiscuous mode [ 544.196873][T23864] syzkaller0: entered allmulticast mode [ 544.251492][T23864] netlink: 'syz.3.4741': attribute type 15 has an invalid length. [ 544.330885][T20491] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 2816 - 0 [ 544.340039][T23864] netlink: 'syz.3.4741': attribute type 15 has an invalid length. [ 544.358774][T20491] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 2816 - 0 [ 544.401741][T20491] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 2816 - 0 [ 544.420705][T20491] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 2816 - 0 [ 544.493795][T23885] netlink: 'syz.2.4747': attribute type 1 has an invalid length. [ 544.571933][T23885] bond3: (slave ip6gretap1): making interface the new active one [ 544.580540][T23885] bond3: (slave ip6gretap1): Enslaving as an active interface with an up link [ 544.601631][T23764] ip6_vti0 speed is unknown, defaulting to 1000 [ 544.624902][T23887] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 544.703637][T23895] netlink: 'syz.3.4750': attribute type 1 has an invalid length. [ 544.814459][T23895] 8021q: adding VLAN 0 to HW filter on device bond7 [ 544.920881][T23904] bond7: (slave veth7): Enslaving as an active interface with a down link [ 544.956035][T23895] bond7: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 545.128566][T23921] sctp: [Deprecated]: syz.1.4761 (pid 23921) Use of struct sctp_assoc_value in delayed_ack socket option. [ 545.128566][T23921] Use struct sctp_sack_info instead [ 545.141297][T23924] netlink: 'syz.4.4759': attribute type 32 has an invalid length. [ 545.178973][T23921] sctp: [Deprecated]: syz.1.4761 (pid 23921) Use of int in maxseg socket option. [ 545.178973][T23921] Use struct sctp_assoc_value instead [ 545.318629][T23936] openvswitch: netlink: Unexpected mask (mask=201040, allowed=10048) [ 545.594026][T23967] team0: Port device ip6gre3 added [ 545.923498][T23990] netlink: 'syz.2.4779': attribute type 4 has an invalid length. [ 545.982280][T23990] syzkaller1: entered promiscuous mode [ 545.988613][T23990] syzkaller1: entered allmulticast mode [ 546.046093][T24008] 8021q: VLANs not supported on ip_vti0 [ 546.264255][T20491] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 546.486055][T24037] __nla_validate_parse: 7 callbacks suppressed [ 546.486073][T24037] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4792'. [ 546.521690][T24042] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4794'. [ 546.540050][T24044] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.4794'. [ 546.714784][T24066] ipvlan0: mtu less than device minimum [ 546.804698][T24072] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4799'. [ 546.830431][T24076] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4800'. [ 547.085623][T24087] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 547.211807][T24096] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4809'. [ 547.338354][T24105] openvswitch: netlink: Tunnel attr 67 out of range max 16 [ 547.548591][T24107] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 547.560796][T24107] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 547.834222][T24138] netlink: 256 bytes leftover after parsing attributes in process `syz.3.4819'. [ 547.857100][T24124] xt_TPROXY: Can be used only with -p tcp or -p udp [ 547.871888][T24124] netlink: 116 bytes leftover after parsing attributes in process `syz.1.4818'. [ 547.994223][T24144] netlink: 'syz.2.4820': attribute type 11 has an invalid length. [ 548.018877][T24148] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4821'. [ 548.161280][T24156] nbd: must specify an index to disconnect [ 549.734548][T24178] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 549.805008][T24179] netlink: 'syz.3.4825': attribute type 11 has an invalid length. [ 549.837305][ T24] IPVS: starting estimator thread 0... [ 549.869295][T24179] netlink: 'syz.3.4825': attribute type 11 has an invalid length. [ 549.892563][T24179] netlink: 224 bytes leftover after parsing attributes in process `syz.3.4825'. [ 549.904996][T24195] ip6_vti0 speed is unknown, defaulting to 1000 [ 549.920154][T24197] IPVS: ip_vs_edit_dest(): server weight less than zero [ 549.949219][T24190] IPVS: using max 31 ests per chain, 74400 per kthread [ 550.051988][T24202] tipc: Enabling of bearer rejected, failed to enable media [ 550.343082][T24219] xt_policy: output policy not valid in PREROUTING and INPUT [ 550.774664][T24234] netlink: 'syz.1.4840': attribute type 4 has an invalid length. [ 551.388680][T24269] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 551.491956][T24283] netlink: 'syz.2.4850': attribute type 1 has an invalid length. [ 551.562677][T24283] 8021q: adding VLAN 0 to HW filter on device bond5 [ 551.652711][T24290] __nla_validate_parse: 4 callbacks suppressed [ 551.652729][T24290] netlink: 52 bytes leftover after parsing attributes in process `syz.0.4851'. [ 551.691979][T24287] 8021q: adding VLAN 0 to HW filter on device bond5 [ 551.700913][T24287] bond5: (slave vxcan3): The slave device specified does not support setting the MAC address [ 551.714581][T24287] bond5: (slave vxcan3): Error -95 calling set_mac_address [ 551.854225][T24283] veth3: entered promiscuous mode [ 551.889588][T24283] bond5: (slave veth3): Enslaving as an active interface with a down link [ 551.915380][T24298] netlink: 'syz.4.4853': attribute type 2 has an invalid length. [ 552.035996][T24308] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4857'. [ 552.234485][T24324] syzkaller0: entered promiscuous mode [ 552.240420][T24324] syzkaller0: entered allmulticast mode [ 553.930424][T24362] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4868'. [ 553.940082][T24360] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4868'. [ 554.075075][T24371] netlink: 'syz.4.4870': attribute type 13 has an invalid length. [ 554.092070][T24371] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4870'. [ 554.121242][T24371] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4870'. [ 554.135694][T24379] netlink: 15 bytes leftover after parsing attributes in process `syz.0.4874'. [ 554.204313][T24381] netlink: 'syz.2.4875': attribute type 4 has an invalid length. [ 554.243932][T24383] netlink: 'syz.3.4876': attribute type 1 has an invalid length. [ 554.292678][T24388] nft_compat: unsupported protocol 0 [ 554.300836][T24383] 8021q: adding VLAN 0 to HW filter on device bond8 [ 554.324319][T24393] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4879'. [ 554.359947][T24391] bond8: (slave veth9): Enslaving as an active interface with a down link [ 554.385489][T24393] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4879'. [ 554.395371][T24383] bond7: (slave veth0_to_bond): Releasing active interface [ 554.413942][T24396] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 554.432900][T24383] bond8: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 554.732473][T24418] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4886'. [ 554.831281][T24425] netlink: 'syz.0.4891': attribute type 1 has an invalid length. [ 555.032738][T24444] syzkaller0: entered allmulticast mode [ 555.203094][T24454] gtp1: entered promiscuous mode [ 555.229403][T24454] gtp1: entered allmulticast mode [ 555.292872][T24463] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 555.446301][T24474] bridge_slave_0: invalid flags given to default FDB implementation [ 555.641414][T24486] syzkaller0: entered promiscuous mode [ 555.647028][T24486] syzkaller0: entered allmulticast mode [ 555.838875][T24502] delete_channel: no stack [ 556.120009][T24530] netlink: 'syz.4.4922': attribute type 10 has an invalid length. [ 556.246325][T24539] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 556.659467][T24571] ip6_vti0 speed is unknown, defaulting to 1000 [ 556.774789][T24584] __nla_validate_parse: 7 callbacks suppressed [ 556.774807][T24584] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4934'. [ 556.813335][T24584] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4934'. [ 557.305992][T24605] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4941'. [ 557.340920][T24605] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4941'. [ 557.506594][T24605] geneve2: entered promiscuous mode [ 557.524438][T24605] geneve2: entered allmulticast mode [ 557.606504][T20495] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 557.659539][T20495] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 557.668290][T20495] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 557.739346][T20495] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 558.209606][T24634] netlink: 64 bytes leftover after parsing attributes in process `syz.1.4946'. [ 558.249272][T24636] netlink: 64 bytes leftover after parsing attributes in process `syz.1.4946'. [ 558.609952][T24658] team0: Device gtp0 is up. Set it down before adding it as a team port [ 558.638339][T24659] netlink: 'syz.0.4953': attribute type 12 has an invalid length. [ 558.654237][T24661] netlink: 108 bytes leftover after parsing attributes in process `syz.1.4954'. [ 558.703836][T24659] bond6: option primary_reselect: invalid value (255) [ 558.725450][T24659] bond6 (unregistering): Released all slaves [ 558.765292][T24670] netdevsim netdevsim1: Direct firmware load for . failed with error -2 [ 558.775184][T24670] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 558.997043][T24683] veth5: entered allmulticast mode [ 559.144857][T24690] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4962'. [ 559.174588][T24702] netlink: 52 bytes leftover after parsing attributes in process `syz.0.4965'. [ 559.250632][T24711] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4969'. [ 559.596820][T24729] wg1: entered promiscuous mode [ 559.602521][T24729] wg1: entered allmulticast mode [ 559.925823][T24743] bond5: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 559.941404][T24743] bond5 (unregistering): Released all slaves [ 560.064321][T24752] netlink: 'syz.0.4982': attribute type 1 has an invalid length. [ 560.090134][T24751] netlink: 'syz.0.4982': attribute type 1 has an invalid length. [ 560.150997][T24757] netlink: 'syz.2.4983': attribute type 2 has an invalid length. [ 560.158840][T24757] netlink: 'syz.2.4983': attribute type 1 has an invalid length. [ 560.196734][T24761] sit0: entered promiscuous mode [ 560.203149][T24761] netlink: 'syz.3.4985': attribute type 1 has an invalid length. [ 560.283743][T24769] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 560.481796][T24787] openvswitch: netlink: Key 2 has unexpected len 8 expected 4 [ 560.528790][ C0] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 16 [ 560.593839][T24798] netlink: 'syz.0.4995': attribute type 3 has an invalid length. [ 560.702161][T24809] sock: sock_set_timeout: `syz.4.5001' (pid 24809) tries to set negative timeout [ 560.807454][T24810] ip6_vti0 speed is unknown, defaulting to 1000 [ 560.872798][T24822] syzkaller0: entered promiscuous mode [ 560.878299][T24822] syzkaller0: entered allmulticast mode [ 561.006790][T24830] geneve5: entered promiscuous mode [ 561.492194][T24861] pimreg: entered allmulticast mode [ 561.615275][T24866] netlink: 'syz.2.5016': attribute type 11 has an invalid length. [ 561.652048][T24866] openvswitch: netlink: Unexpected mask (mask=240040, allowed=10048) [ 561.672274][T24867] ip6_vti0 speed is unknown, defaulting to 1000 [ 561.966052][T24887] __nla_validate_parse: 7 callbacks suppressed [ 561.966069][T24887] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5023'. [ 562.014872][T24890] netlink: 48 bytes leftover after parsing attributes in process `syz.4.5024'. [ 562.325316][T24902] netlink: 'syz.1.5028': attribute type 12 has an invalid length. [ 562.333282][T24902] netlink: 'syz.1.5028': attribute type 29 has an invalid length. [ 562.354845][T24902] netlink: 148 bytes leftover after parsing attributes in process `syz.1.5028'. [ 562.374627][T24902] netlink: 59 bytes leftover after parsing attributes in process `syz.1.5028'. [ 562.528256][T24911] netlink: 'syz.2.5030': attribute type 83 has an invalid length. [ 562.557039][T24915] netlink: 'syz.4.5031': attribute type 3 has an invalid length. [ 562.570359][T24915] IPv6: NLM_F_CREATE should be specified when creating new route [ 562.578984][T24915] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 562.586230][T24915] IPv6: NLM_F_CREATE should be set when creating new route [ 562.835872][T24933] netlink: 156 bytes leftover after parsing attributes in process `syz.0.5035'. [ 562.906918][ T1297] lec:lec_start_xmit: lec0:No lecd attached [ 563.087204][T24953] ip6t_srh: unknown srh invflags 4000 [ 563.097133][T24954] geneve3: entered promiscuous mode [ 563.131295][ T1108] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 48295 - 0 [ 563.145853][T24956] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5039'. [ 563.156036][ T1108] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 48295 - 0 [ 563.176836][ T1108] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 48295 - 0 [ 563.205368][ T1108] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 48295 - 0 [ 563.232533][T24962] IPVS: set_ctl: invalid protocol: 43 224.0.0.1:20004 [ 563.290296][T24965] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5044'. [ 563.555891][T24965] geneve3: entered promiscuous mode [ 563.561315][T24965] geneve3: entered allmulticast mode [ 563.568725][T24979] sch_tbf: peakrate 5 is lower than or equals to rate 16783679728848008387 ! [ 563.625387][T24981] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5048'. [ 563.783197][T24997] syzkaller0: entered promiscuous mode [ 563.788850][T24997] syzkaller0: entered allmulticast mode [ 564.197339][T25011] netlink: 224 bytes leftover after parsing attributes in process `syz.2.5059'. [ 564.238515][T25030] netlink: 104 bytes leftover after parsing attributes in process `syz.1.5064'. [ 564.403829][T25036] bridge7: entered promiscuous mode [ 564.405643][T25041] x_tables: duplicate entry at hook 2 [ 564.412026][T25036] bridge7: entered allmulticast mode [ 564.834030][T25078] delete_channel: no stack [ 565.143275][T25102] bridge0: port 2(bridge_slave_1) entered disabled state [ 565.317355][T25114] macvtap1: entered promiscuous mode [ 565.324824][T25114] vlan0: entered promiscuous mode [ 565.331282][T25114] macvtap1: entered allmulticast mode [ 565.339025][T25114] vlan0: entered allmulticast mode [ 565.346802][T25114] veth0_vlan: entered allmulticast mode [ 565.363399][T25115] syz_tun: entered promiscuous mode [ 565.379435][T25115] macvtap1: entered promiscuous mode [ 565.389042][T25115] syz_tun: left promiscuous mode [ 565.600853][T25139] validate_nla: 7 callbacks suppressed [ 565.600870][T25139] netlink: 'syz.1.5100': attribute type 11 has an invalid length. [ 565.787192][T25154] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 565.912015][T25165] bond6: (slave ip6gretap2): making interface the new active one [ 565.940731][T25165] bond6: (slave ip6gretap2): Enslaving as an active interface with an up link [ 566.056658][T25164] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 566.307100][T25202] syzkaller0: entered promiscuous mode [ 566.312776][T25202] syzkaller0: entered allmulticast mode [ 566.335613][T25206] veth0: entered promiscuous mode [ 566.427300][T25203] syzkaller0: entered promiscuous mode [ 566.433375][T25203] syzkaller0: entered allmulticast mode [ 566.517754][T25205] veth0: left promiscuous mode [ 567.929384][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 567.937400][ C1] lec:lec_tx_timeout: lec0 [ 588.396264][ T9406] lec:lec_start_xmit: lec0:No lecd attached [ 593.859186][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5460 ms [ 593.867210][ C1] lec:lec_tx_timeout: lec0 [ 596.491669][T25232] sctp: [Deprecated]: syz.3.5130 (pid 25232) Use of int in max_burst socket option. [ 596.491669][T25232] Use struct sctp_assoc_value instead [ 596.544103][T25241] __nla_validate_parse: 11 callbacks suppressed [ 596.544121][T25241] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5129'. [ 596.595625][T25241] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5129'. [ 596.621539][T25241] netlink: 'syz.2.5129': attribute type 1 has an invalid length. [ 596.650352][T25241] netlink: 'syz.2.5129': attribute type 4 has an invalid length. [ 596.658472][T25241] netlink: 9491 bytes leftover after parsing attributes in process `syz.2.5129'. [ 596.866204][T25262] netlink: 'syz.0.5139': attribute type 1 has an invalid length. [ 596.885845][T25255] ip6_vti0 speed is unknown, defaulting to 1000 [ 597.024493][T25270] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5140'. [ 597.133470][T25274] netlink: 52 bytes leftover after parsing attributes in process `syz.1.5140'. [ 597.177389][T25280] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 597.204535][T25279] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 597.362192][T25289] netlink: 104 bytes leftover after parsing attributes in process `syz.3.5147'. [ 597.600696][T25303] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5153'. [ 597.700697][T25310] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5152'. [ 597.862064][T25321] netlink: 72 bytes leftover after parsing attributes in process `syz.0.5160'. [ 598.284288][T25354] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5166'. [ 598.566474][T25369] xt_hashlimit: size too large, truncated to 1048576 [ 598.765438][T25389] netlink: 'syz.2.5178': attribute type 12 has an invalid length. [ 598.811879][T25389] netlink: 'syz.2.5178': attribute type 29 has an invalid length. [ 599.023253][T25409] netlink: 'syz.2.5180': attribute type 29 has an invalid length. [ 599.244309][T25420] netlink: 'syz.1.5183': attribute type 1 has an invalid length. [ 599.303958][T25422] openvswitch: netlink: Flow actions attr not present in new flow. [ 599.414726][T25431] netlink: 'syz.2.5187': attribute type 9 has an invalid length. [ 599.422756][T25431] netlink: 'syz.2.5187': attribute type 11 has an invalid length. [ 599.433814][T25431] netlink: 'syz.2.5187': attribute type 12 has an invalid length. [ 599.546813][T25436] 8021q: adding VLAN 0 to HW filter on device bond7 [ 599.585891][T25443] bond7: (slave veth15): Enslaving as an active interface with a down link [ 599.610719][T25436] bond2: (slave veth0_to_bond): Releasing active interface [ 599.625012][T25436] bond7: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 599.635688][T25445] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 599.646445][T25445] bridge0: entered allmulticast mode [ 599.675300][T25436] bond7: (slave veth17): Enslaving as an active interface with a down link [ 600.363119][T25477] IPVS: set_ctl: invalid protocol: 117 172.20.20.170:20000 [ 600.938516][T25516] syzkaller0: entered promiscuous mode [ 600.944291][T25516] syzkaller0: entered allmulticast mode [ 600.953759][T25516] 0: reclassify loop, rule prio 0, protocol 800 [ 601.015199][T25522] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 601.035389][T25524] IPv6: sit1: Disabled Multicast RS [ 601.042170][T25524] sit1: entered allmulticast mode [ 601.331007][T25542] bond6: (slave bond_slave_1): Device is not bonding slave [ 601.340612][T25542] bond6: option active_slave: invalid value (bond_slave_1) [ 601.361134][T25542] bond6 (unregistering): Released all slaves [ 601.387975][T25545] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 601.722868][T25568] __nla_validate_parse: 25 callbacks suppressed [ 601.722888][T25568] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5231'. [ 601.779600][T25569] siw: device registration error -23 [ 601.844403][T25573] netlink: 96 bytes leftover after parsing attributes in process `syz.4.5233'. [ 601.859008][T25573] 8021q: VLANs not supported on gre0 [ 601.888571][T25577] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 601.898749][T25578] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 601.908223][T25577] validate_nla: 5 callbacks suppressed [ 601.908237][T25577] netlink: 'syz.0.5234': attribute type 2 has an invalid length. [ 601.926502][T25577] netlink: 'syz.0.5234': attribute type 8 has an invalid length. [ 601.955542][T25577] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5234'. [ 602.065471][T25592] netlink: 'syz.0.5241': attribute type 2 has an invalid length. [ 602.083301][T25592] netlink: 'syz.0.5241': attribute type 2 has an invalid length. [ 602.092298][T25588] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5238'. [ 602.216272][T25605] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5242'. [ 602.275149][T25607] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5244'. [ 602.374470][T25614] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 602.564417][T25635] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5253'. [ 602.576743][T25635] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5253'. [ 602.656302][T25642] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5255'. [ 602.993198][T25661] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5261'. [ 603.181563][T25681] syzkaller0: entered promiscuous mode [ 603.197373][T25681] syzkaller0: entered allmulticast mode [ 603.296772][T25687] tipc: Enabled bearer , priority 0 [ 603.351598][T25687] syzkaller0: entered promiscuous mode [ 603.357115][T25687] syzkaller0: entered allmulticast mode [ 603.364309][T25687] tipc: Resetting bearer [ 603.379768][T25686] tipc: Resetting bearer [ 605.040471][T25686] tipc: Disabling bearer [ 605.231856][T25741] netlink: 'syz.3.5279': attribute type 1 has an invalid length. [ 605.322593][T25741] 8021q: adding VLAN 0 to HW filter on device bond10 [ 605.331807][T25752] bond10: up delay (35976) is not a multiple of miimon (100), value rounded to 35900 ms [ 605.446018][T25752] bond10: (slave ip6gretap2): Enslaving as an active interface with an up link [ 605.497899][T25769] xt_SECMARK: invalid mode: 9 [ 605.539583][T20491] bond10: (slave ip6gretap2): failed to get link speed/duplex [ 605.659408][ T1146] bond10: (slave ip6gretap2): link status up, enabling it in 0 ms [ 605.673173][ T1146] bond10: (slave ip6gretap2): failed to get link speed/duplex [ 605.809232][T20491] bond10: (slave ip6gretap2): link status up, enabling it in 0 ms [ 605.826264][T20491] bond10: (slave ip6gretap2): failed to get link speed/duplex [ 605.854868][T25791] netlink: 'syz.3.5296': attribute type 61 has an invalid length. [ 605.941498][ T1146] bond10: (slave ip6gretap2): link status up, enabling it in 0 ms [ 605.962183][ T1146] bond10: (slave ip6gretap2): failed to get link speed/duplex [ 605.973203][T25793] ip6_vti0 speed is unknown, defaulting to 1000 [ 606.089469][T20490] bond10: (slave ip6gretap2): link status up, enabling it in 0 ms [ 606.097537][T20490] bond10: (slave ip6gretap2): failed to get link speed/duplex [ 606.267416][T25812] team_slave_1: Caught tx_queue_len zero misconfig [ 606.803391][T25847] __nla_validate_parse: 10 callbacks suppressed [ 606.803413][T25847] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5309'. [ 606.834451][T25847] netlink: 'syz.3.5309': attribute type 8 has an invalid length. [ 606.914514][T25848] tipc: Enabled bearer , priority 0 [ 607.074423][T25852] tipc: Disabling bearer [ 607.332851][T25874] netlink: 'syz.4.5316': attribute type 2 has an invalid length. [ 607.348416][T25874] 9: entered promiscuous mode [ 607.389249][T20490] net_ratelimit: 34 callbacks suppressed [ 607.389270][T20490] bond10: (slave ip6gretap2): link status up, enabling it in 0 ms [ 607.439574][T20490] bond10: (slave ip6gretap2): link status up, enabling it in 0 ms [ 607.457448][T20490] bond10: (slave ip6gretap2): failed to get link speed/duplex [ 607.504149][T25892] syzkaller0: entered promiscuous mode [ 607.513509][T25892] syzkaller0: entered allmulticast mode [ 607.553655][T25892] netlink: 64 bytes leftover after parsing attributes in process `syz.4.5322'. [ 607.570065][ T1146] bond10: (slave ip6gretap2): link status up, enabling it in 0 ms [ 607.588417][ T1146] bond10: (slave ip6gretap2): failed to get link speed/duplex [ 607.655131][T25910] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5327'. [ 607.699978][T20490] bond10: (slave ip6gretap2): link status up, enabling it in 0 ms [ 607.708083][T20490] bond10: (slave ip6gretap2): failed to get link speed/duplex [ 607.775716][T25914] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5328'. [ 607.798447][T25914] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5328'. [ 607.819283][ T1146] bond10: (slave ip6gretap2): link status up, enabling it in 0 ms [ 607.826275][T25927] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5332'. [ 607.837922][ T1146] bond10: (slave ip6gretap2): failed to get link speed/duplex [ 607.837970][T25929] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5332'. [ 607.915711][T25931] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5333'. [ 607.930498][T25931] hsr_slave_1: left promiscuous mode [ 607.971055][T20490] bond10: (slave ip6gretap2): link status up, enabling it in 0 ms [ 608.066397][T25946] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 608.081172][T25946] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 608.171071][T25950] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.5339'. [ 608.409233][T25959] can: request_module (can-proto-3) failed. [ 608.729267][T25988] netlink: 'syz.3.5349': attribute type 21 has an invalid length. [ 608.739589][T25989] netlink: 'syz.3.5349': attribute type 21 has an invalid length. [ 608.756504][T25988] netlink: 128 bytes leftover after parsing attributes in process `syz.3.5349'. [ 608.836386][T25993] netlink: 'syz.2.5351': attribute type 1 has an invalid length. [ 608.859922][T25993] netlink: 'syz.2.5351': attribute type 1 has an invalid length. [ 608.947128][T25999] netlink: 'syz.2.5354': attribute type 83 has an invalid length. [ 609.145530][T26012] netlink: 'syz.4.5358': attribute type 2 has an invalid length. [ 609.199740][T26017] ip6tnl0: Caught tx_queue_len zero misconfig [ 609.468914][T26046] sch_tbf: peakrate 7 is lower than or equals to rate 2147483647 ! [ 609.474062][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805ae3b800: rx timeout, send abort [ 609.656130][T26059] dvmrp0: entered allmulticast mode [ 609.718747][T20491] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 609.728003][T20491] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 609.744893][T20491] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 609.764223][T20491] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 609.948022][T26080] IPVS: set_ctl: invalid protocol: 20 224.0.0.2:20001 [ 609.985158][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805ae3b800: abort rx timeout. Force session deactivation [ 610.083921][T26085] smc: ib device syz2 ibport 2 applied user defined pnetid SYZ1 [ 610.830853][T26106] bond6: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5) [ 610.850699][T26106] bond6 (unregistering): Released all slaves [ 610.873047][T26113] netlink: 'syz.2.5388': attribute type 26 has an invalid length. [ 611.111103][T26134] netlink: 'syz.3.5397': attribute type 10 has an invalid length. [ 611.132480][T26133] !: renamed from dummy0 (while UP) [ 611.427542][T26158] syzkaller0: entered promiscuous mode [ 611.441621][T26158] syzkaller0: entered allmulticast mode [ 611.548312][T26170] block nbd4: not configured, cannot reconfigure [ 611.575087][T26170] netlink: 'syz.4.5406': attribute type 1 has an invalid length. [ 612.104772][T26209] __nla_validate_parse: 30 callbacks suppressed [ 612.104790][T26209] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5415'. [ 612.265536][T26217] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5417'. [ 612.409220][T23171] net_ratelimit: 93 callbacks suppressed [ 612.409240][T23171] bond10: (slave ip6gretap2): link status up, enabling it in 0 ms [ 612.440182][T23171] bond10: (slave ip6gretap2): link status up, enabling it in 0 ms [ 612.459542][T23171] bond10: (slave ip6gretap2): link status up, enabling it in 0 ms [ 612.479313][T23171] bond10: (slave ip6gretap2): link status up, enabling it in 0 ms [ 612.512521][T23171] bond10: (slave ip6gretap2): link status up, enabling it in 0 ms [ 612.544623][T23170] bond10: (slave ip6gretap2): link status up, enabling it in 0 ms [ 612.649674][T23171] bond10: (slave ip6gretap2): link status up, enabling it in 0 ms [ 612.673110][T20490] bond10: (slave ip6gretap2): link status up, enabling it in 0 ms [ 612.699162][T23170] bond10: (slave ip6gretap2): link status up, enabling it in 0 ms [ 612.707267][T23170] bond10: (slave ip6gretap2): failed to get link speed/duplex [ 612.858346][T26228] tipc: Enabling of bearer rejected, failed to enable media [ 613.090190][T26232] validate_nla: 3 callbacks suppressed [ 613.090209][T26232] netlink: 'syz.4.5422': attribute type 1 has an invalid length. [ 613.150803][T26255] : renamed from macvtap0 [ 613.171581][T26242] bond6: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 613.246833][T26242] bond6: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 613.275862][T26269] netlink: 48 bytes leftover after parsing attributes in process `syz.3.5430'. [ 613.305757][T26242] bond6: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 613.582641][T26287] netlink: 1196 bytes leftover after parsing attributes in process `syz.2.5432'. [ 613.732036][T26310] netlink: 'syz.2.5432': attribute type 3 has an invalid length. [ 613.745507][T26310] netlink: 766 bytes leftover after parsing attributes in process `syz.2.5432'. [ 614.002339][T26324] netlink: 68 bytes leftover after parsing attributes in process `syz.3.5442'. [ 614.224822][T26343] netlink: 'syz.1.5447': attribute type 1 has an invalid length. [ 614.264117][T26343] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5447'. [ 614.266091][T26348] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5448'. [ 614.286478][T26349] bond5: option mode: unable to set because the bond device has slaves [ 614.301296][T26343] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5447'. [ 614.302325][T26348] tipc: New replicast peer: 255.255.255.255 [ 614.319539][T26348] tipc: Enabled bearer , priority 10 [ 614.327485][T26349] netlink: 'syz.4.5449': attribute type 1 has an invalid length. [ 614.337228][T26351] s5: renamed from vlan1 [ 614.664056][T26375] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5457'. [ 614.702958][T26375] bond7: Unable to set up delay as MII monitoring is disabled [ 614.714330][T26375] bond7 (unregistering): Released all slaves [ 614.753748][T26382] xt_TPROXY: Can be used only with -p tcp or -p udp [ 614.977868][T26359] lec:lec_atm_close: lec0: Shut down! [ 615.538265][T26446] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 615.899738][T26479] bond0: Caught tx_queue_len zero misconfig [ 615.953329][T26485] veth0: entered promiscuous mode [ 615.959134][T26485] veth0: left promiscuous mode [ 616.115260][T26495] ip6gre0: Caught tx_queue_len zero misconfig [ 616.370528][T26508] macsec0: entered promiscuous mode [ 616.376824][T26508] macsec0: entered allmulticast mode [ 616.391873][T26508] veth1_macvtap: entered allmulticast mode [ 616.398092][T26508] macsec0: left promiscuous mode [ 616.403826][T26508] macsec0: left allmulticast mode [ 616.409258][T26508] veth1_macvtap: left allmulticast mode [ 616.765480][T26545] netlink: 'syz.0.5505': attribute type 9 has an invalid length. [ 617.356410][T26594] __nla_validate_parse: 4 callbacks suppressed [ 617.356431][T26594] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5517'. [ 617.463241][T26603] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5517'. [ 617.473892][T26602] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5519'. [ 617.499876][T23170] net_ratelimit: 111 callbacks suppressed [ 617.499895][T23170] bond10: (slave ip6gretap2): link status up, enabling it in 0 ms [ 617.516116][T26606] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5517'. [ 617.526759][T23170] bond10: (slave ip6gretap2): failed to get link speed/duplex [ 617.630196][T26617] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 617.649497][T23170] bond10: (slave ip6gretap2): link status up, enabling it in 0 ms [ 617.660583][T26617] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 617.669237][T23170] bond10: (slave ip6gretap2): link status up, enabling it in 0 ms [ 617.690616][T26617] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 617.700475][T23170] bond10: (slave ip6gretap2): link status up, enabling it in 0 ms [ 617.708322][T23170] bond10: (slave ip6gretap2): failed to get link speed/duplex [ 617.717608][T26616] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5523'. [ 617.788799][T26628] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5524'. [ 617.829643][T20491] bond10: (slave ip6gretap2): link status up, enabling it in 0 ms [ 617.851664][T20491] bond10: (slave ip6gretap2): failed to get link speed/duplex [ 617.979275][T23171] bond10: (slave ip6gretap2): link status up, enabling it in 0 ms [ 617.997501][T23171] bond10: (slave ip6gretap2): failed to get link speed/duplex [ 618.043636][T26646] netlink: 48 bytes leftover after parsing attributes in process `syz.3.5527'. [ 618.052954][T26647] netlink: 48 bytes leftover after parsing attributes in process `syz.3.5527'. [ 618.343032][T26662] netlink: 224 bytes leftover after parsing attributes in process `syz.1.5530'. [ 618.369512][T26662] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5530'. [ 618.411064][T26670] netlink: 'syz.4.5532': attribute type 1 has an invalid length. [ 618.455488][T26615] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 618.477268][T26615] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 618.487034][T26615] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 618.899717][T26684] xt_l2tp: v2 doesn't support IP mode [ 618.938377][T26712] unsupported nla_type 33542 [ 619.715072][T26739] bond3: (slave vcan0): Releasing backup interface [ 619.723625][T26739] bond3: Destroying bond [ 619.734536][T26739] bond3 (unregistering): Released all slaves [ 619.887214][T26748] tipc: Enabled bearer , priority 2 [ 619.924945][T26752] tipc: Enabling of bearer rejected, failed to enable media [ 619.979388][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 619.980852][T26760] syzkaller1: entered promiscuous mode [ 619.987477][ C1] lec:lec_tx_timeout: lec0 [ 619.994044][T26760] syzkaller1: entered allmulticast mode [ 620.020062][T26760] xt_bpf: check failed: parse error [ 620.211551][T26776] netlink: 'syz.2.5563': attribute type 11 has an invalid length. [ 620.239147][T26776] netlink: 'syz.2.5563': attribute type 11 has an invalid length. [ 620.334569][T26774] netlink: 'syz.4.5565': attribute type 33 has an invalid length. [ 620.521146][T26799] netlink: 'syz.2.5571': attribute type 1 has an invalid length. [ 621.188878][T26848] netlink: 'syz.3.5582': attribute type 11 has an invalid length. [ 621.585909][T26872] netlink: 'syz.4.5589': attribute type 1 has an invalid length. [ 621.594321][T26872] netlink: 'syz.4.5589': attribute type 10 has an invalid length. [ 621.602967][T26872] bridge0: port 1(team0) entered blocking state [ 621.609935][T26872] bridge0: port 1(team0) entered disabled state [ 621.616447][T26872] team0: entered allmulticast mode [ 621.624985][T26872] team0: entered promiscuous mode [ 621.631080][T26874] veth0: Caught tx_queue_len zero misconfig [ 622.393086][T26927] __nla_validate_parse: 11 callbacks suppressed [ 622.393105][T26927] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5606'. [ 622.487417][T26936] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5609'. [ 622.570100][T20490] net_ratelimit: 75 callbacks suppressed [ 622.570120][T20490] bond10: (slave ip6gretap2): link status up, enabling it in 0 ms [ 622.612883][T26935] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5606'. [ 622.615058][T26927] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5606'. [ 622.623951][ T1108] bond10: (slave ip6gretap2): link status up, enabling it in 0 ms [ 622.637829][T26927] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5606'. [ 622.649529][T23171] bond3: (slave bridge5): link status up again after 0 ms [ 622.650507][T26935] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5606'. [ 622.662119][T26943] syzkaller0: entered promiscuous mode [ 622.672240][T26943] syzkaller0: entered allmulticast mode [ 622.692492][T23171] bond10: (slave ip6gretap2): link status up, enabling it in 0 ms [ 622.700669][T20491] bond3: (slave bridge5): link status up again after 0 ms [ 622.719864][T23171] bond3: (slave bridge5): link status up again after 0 ms [ 622.729383][T23171] bond10: (slave ip6gretap2): link status up, enabling it in 0 ms [ 622.741856][T23171] bond3: (slave bridge5): link status up again after 0 ms [ 622.749153][T23170] bond10: (slave ip6gretap2): link status up, enabling it in 0 ms [ 622.769264][T20491] bond10: (slave ip6gretap2): link status up, enabling it in 0 ms [ 622.851023][T26935] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5606'. [ 622.864733][T26954] bond3: peer notification delay (1164) is not a multiple of miimon (100), value rounded to 1100 ms [ 622.876486][T26935] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5606'. [ 622.882949][T26954] bond3: entered promiscuous mode [ 622.898961][T26956] netlink: 'syz.0.5614': attribute type 83 has an invalid length. [ 622.901063][T26958] netlink: 'syz.0.5614': attribute type 83 has an invalid length. [ 622.913644][T26959] netlink: 'syz.4.5615': attribute type 2 has an invalid length. [ 622.914986][T26954] bond3: entered allmulticast mode [ 622.928447][T26954] 8021q: adding VLAN 0 to HW filter on device bond3 [ 622.936149][T26959] netlink: 119 bytes leftover after parsing attributes in process `syz.4.5615'. [ 622.958620][T26959] netlink: 'syz.4.5615': attribute type 2 has an invalid length. [ 622.987189][T26959] v: entered promiscuous mode [ 623.198656][T26967] netlink: 256 bytes leftover after parsing attributes in process `syz.3.5619'. [ 623.533708][T26995] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 623.662241][T26995] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 623.771136][T26995] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 623.865669][T26995] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 624.032255][T20490] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 2816 - 0 [ 624.044290][T27026] netlink: 'syz.1.5635': attribute type 1 has an invalid length. [ 624.064059][T27026] netlink: 'syz.1.5635': attribute type 2 has an invalid length. [ 624.082792][T20490] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 2816 - 0 [ 624.110800][T27026] netlink: 'syz.1.5635': attribute type 1 has an invalid length. [ 624.118731][T20490] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 2816 - 0 [ 624.162617][ T1108] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 2816 - 0 [ 624.186883][T27028] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 624.346548][ T1297] lec:lec_start_xmit: lec0:No lecd attached [ 624.356613][T27048] netlink: 'syz.3.5640': attribute type 1 has an invalid length. [ 624.360290][T27049] syzkaller0: entered promiscuous mode [ 624.371318][T27049] syzkaller0: entered allmulticast mode [ 624.401856][T27048] bond11: entered promiscuous mode [ 624.407498][T27048] 8021q: adding VLAN 0 to HW filter on device bond11 [ 624.432217][T27053] bond11: (slave bridge8): making interface the new active one [ 624.445633][T27053] bridge8: entered promiscuous mode [ 624.455065][T27053] bridge8: left promiscuous mode [ 624.712649][T27072] netlink: 'syz.0.5650': attribute type 6 has an invalid length. [ 624.720921][T27072] netlink: 'syz.0.5650': attribute type 5 has an invalid length. [ 624.741001][T27068] IPv6: NLM_F_REPLACE set, but no existing node found! [ 624.830835][T27078] xt_hashlimit: size too large, truncated to 1048576 [ 625.170432][T27092] team0: Mode changed to "broadcast" [ 625.901690][T27138] netlink: 'syz.2.5672': attribute type 30 has an invalid length. [ 626.045989][T27146] syzkaller0: entered promiscuous mode [ 626.055979][T27146] syzkaller0: entered allmulticast mode [ 626.398517][T27175] ip6t_REJECT: ECHOREPLY is not supported [ 626.420515][T27176] bond0 (unregistering): Released all slaves [ 626.520136][ C0] [ 626.522500][ C0] ================================ [ 626.527597][ C0] WARNING: inconsistent lock state [ 626.532785][ C0] syzkaller #0 Not tainted [ 626.537181][ C0] -------------------------------- [ 626.542267][ C0] inconsistent {SOFTIRQ-ON-W} -> {IN-SOFTIRQ-W} usage. [ 626.549091][ C0] kworker/u8:8/1146 [HC0[0]:SC1[3]:HE1:SE0] takes: [ 626.555574][ C0] ffff88806d073760 (k-sk_lock-AF_INET6){+.?.}-{0:0}, at: inet6_getname+0x15d/0x650 [ 626.564884][ C0] {SOFTIRQ-ON-W} state was registered at: [ 626.570605][ C0] lock_acquire+0xf0/0x2e0 [ 626.575111][ C0] lock_sock_nested+0x48/0x100 [ 626.579958][ C0] tcp_sock_set_nodelay+0x2a/0x180 [ 626.585142][ C0] rds_tcp_listen_init+0x168/0x410 [ 626.590327][ C0] rds_tcp_init_net+0x154/0x380 [ 626.595249][ C0] ops_init+0x35c/0x5c0 [ 626.599486][ C0] register_pernet_operations+0x343/0x830 [ 626.605280][ C0] register_pernet_device+0x2a/0x80 [ 626.610548][ C0] rds_tcp_init+0xcf/0x170 [ 626.615037][ C0] do_one_initcall+0x250/0x8d0 [ 626.619886][ C0] do_initcall_level+0x104/0x190 [ 626.624919][ C0] do_initcalls+0x59/0xa0 [ 626.629335][ C0] kernel_init_freeable+0x2a6/0x3e0 [ 626.634609][ C0] kernel_init+0x1d/0x1d0 [ 626.639020][ C0] ret_from_fork+0x51e/0xb90 [ 626.643689][ C0] ret_from_fork_asm+0x1a/0x30 [ 626.648529][ C0] irq event stamp: 2327704 [ 626.653093][ C0] hardirqs last enabled at (2327704): [] _raw_spin_unlock_irqrestore+0x30/0x80 [ 626.663671][ C0] hardirqs last disabled at (2327703): [] _raw_spin_lock_irqsave+0x1a/0x60 [ 626.673816][ C0] softirqs last enabled at (2327658): [] __dev_queue_xmit+0x274/0x38a0 [ 626.683700][ C0] softirqs last disabled at (2327659): [] do_softirq+0x76/0xd0 [ 626.692803][ C0] [ 626.692803][ C0] other info that might help us debug this: [ 626.700841][ C0] Possible unsafe locking scenario: [ 626.700841][ C0] [ 626.708267][ C0] CPU0 [ 626.711525][ C0] ---- [ 626.714784][ C0] lock(k-sk_lock-AF_INET6); [ 626.719446][ C0] [ 626.722882][ C0] lock(k-sk_lock-AF_INET6); [ 626.727718][ C0] [ 626.727718][ C0] *** DEADLOCK *** [ 626.727718][ C0] [ 626.735840][ C0] 12 locks held by kworker/u8:8/1146: [ 626.741188][ C0] #0: ffff88806aa63948 ((wq_completion)krds_cp_wq#17/0){+.+.}-{0:0}, at: process_scheduled_works+0x9ea/0x1830 [ 626.752922][ C0] #1: ffffc90004b5fc40 ((work_completion)(&(&cp->cp_send_w)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa25/0x1830 [ 626.765697][ C0] #2: ffff888084d08260 (k-sk_lock-AF_INET6){+.?.}-{0:0}, at: tcp_sock_set_cork+0x2c/0x2e0 [ 626.775693][ C0] #3: ffffffff8e7602e0 (rcu_read_lock){....}-{1:3}, at: inet6_csk_xmit+0x110/0x6c0 [ 626.785090][ C0] #4: ffffffff8e7602e0 (rcu_read_lock){....}-{1:3}, at: ip6_xmit+0x283/0x1980 [ 626.794038][ C0] #5: ffffffff8e7602e0 (rcu_read_lock){....}-{1:3}, at: ip6_output+0x126/0x550 [ 626.803070][ C0] #6: ffffffff8e7602e0 (rcu_read_lock){....}-{1:3}, at: process_backlog+0x3eb/0x1950 [ 626.812629][ C0] #7: ffffffff8e7602e0 (rcu_read_lock){....}-{1:3}, at: netif_receive_skb+0x102/0xc50 [ 626.822268][ C0] #8: ffffffff8e7602e0 (rcu_read_lock){....}-{1:3}, at: NF_HOOK+0x9e/0x3c0 [ 626.830956][ C0] #9: ffffffff8e7602e0 (rcu_read_lock){....}-{1:3}, at: ip6_input+0x23/0x270 [ 626.839825][ C0] #10: ffff88806d0736e0 (k-slock-AF_INET6/1){+.-.}-{3:3}, at: tcp_v6_rcv+0x2577/0x2f60 [ 626.849560][ C0] #11: ffff88806d073908 (k-clock-AF_INET6){++.-}-{3:3}, at: rds_tcp_data_ready+0x113/0x9a0 [ 626.859634][ C0] [ 626.859634][ C0] stack backtrace: [ 626.865505][ C0] CPU: 0 UID: 0 PID: 1146 Comm: kworker/u8:8 Not tainted syzkaller #0 PREEMPT(full) [ 626.865521][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 626.865531][ C0] Workqueue: krds_cp_wq#17/0 rds_send_worker [ 626.865552][ C0] Call Trace: [ 626.865560][ C0] [ 626.865567][ C0] dump_stack_lvl+0xe8/0x150 [ 626.865587][ C0] print_usage_bug+0x28b/0x2e0 [ 626.865607][ C0] mark_lock_irq+0x410/0x420 [ 626.865628][ C0] mark_lock+0x115/0x190 [ 626.865647][ C0] __lock_acquire+0x689/0x2cf0 [ 626.865665][ C0] ? __bfs+0x153/0x290 [ 626.865681][ C0] ? __pfx_hlock_conflict+0x10/0x10 [ 626.865701][ C0] ? __pfx___pv_queued_spin_lock_slowpath+0x10/0x10 [ 626.865724][ C0] ? check_path+0x21/0x40 [ 626.865742][ C0] ? check_noncircular+0xda/0x150 [ 626.865762][ C0] ? __bfs+0x153/0x290 [ 626.865778][ C0] ? __pfx_usage_match+0x10/0x10 [ 626.865798][ C0] lock_acquire+0xf0/0x2e0 [ 626.865814][ C0] ? inet6_getname+0x15d/0x650 [ 626.865830][ C0] lock_sock_nested+0x48/0x100 [ 626.865845][ C0] ? inet6_getname+0x15d/0x650 [ 626.865859][ C0] inet6_getname+0x15d/0x650 [ 626.865872][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 626.865888][ C0] rds_tcp_conn_slots_available+0x288/0x470 [ 626.865904][ C0] ? __pfx_rds_tcp_conn_slots_available+0x10/0x10 [ 626.865924][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 626.865942][ C0] ? __pfx_rds_tcp_conn_slots_available+0x10/0x10 [ 626.865958][ C0] rds_recv_hs_exthdrs+0x60f/0x7c0 [ 626.865974][ C0] ? NF_HOOK+0x336/0x3c0 [ 626.866009][ C0] ? ip6_input+0x16a/0x270 [ 626.866028][ C0] ? ip_sabotage_in+0x1e1/0x270 [ 626.866043][ C0] ? rds_recv_hs_exthdrs+0xd1/0x7c0 [ 626.866059][ C0] ? __napi_poll+0xae/0x340 [ 626.866074][ C0] ? net_rx_action+0x627/0xf70 [ 626.866090][ C0] ? __pfx_rds_recv_hs_exthdrs+0x10/0x10 [ 626.866106][ C0] ? __dev_queue_xmit+0x1e6c/0x38a0 [ 626.866126][ C0] ? ip6_xmit+0x1149/0x1980 [ 626.866142][ C0] ? __tcp_transmit_skb+0x249b/0x43e0 [ 626.866161][ C0] ? __tcp_push_pending_frames+0x97/0x380 [ 626.866178][ C0] ? tcp_sock_set_cork+0x186/0x2e0 [ 626.866191][ C0] ? rds_send_xmit+0x207e/0x28d0 [ 626.866207][ C0] ? process_scheduled_works+0xb02/0x1830 [ 626.866225][ C0] ? worker_thread+0xa50/0xfc0 [ 626.866241][ C0] ? kthread+0x388/0x470 [ 626.866253][ C0] ? ret_from_fork+0x51e/0xb90 [ 626.866271][ C0] rds_recv_incoming+0x9f6/0x12d0 [ 626.866290][ C0] ? __pfx_rds_recv_incoming+0x10/0x10 [ 626.866307][ C0] ? skb_copy_bits+0x7e5/0x8f0 [ 626.866327][ C0] rds_tcp_data_recv+0x7f1/0xa40 [ 626.866344][ C0] ? xfrm_policy_lookup_bytype+0x143/0x17e0 [ 626.866363][ C0] __tcp_read_sock+0x196/0x970 [ 626.866378][ C0] ? __pfx_rds_tcp_data_recv+0x10/0x10 [ 626.866394][ C0] rds_tcp_data_ready+0x369/0x9a0 [ 626.866409][ C0] ? __pfx_sock_def_readable+0x10/0x10 [ 626.866423][ C0] ? __pfx_rds_tcp_data_ready+0x10/0x10 [ 626.866442][ C0] tcp_data_queue+0x1e2e/0x5e50 [ 626.866469][ C0] ? tcp_urg+0x106/0x410 [ 626.866488][ C0] ? __pfx_tcp_data_queue+0x10/0x10 [ 626.866508][ C0] ? __pfx_tcp_urg+0x10/0x10 [ 626.866527][ C0] ? ktime_get+0x45/0x200 [ 626.866538][ C0] ? seqcount_lockdep_reader_access+0xe0/0x100 [ 626.866552][ C0] ? tcp_ecn_received_counters+0x2b7/0x7f0 [ 626.866574][ C0] tcp_rcv_established+0xf45/0x2740 [ 626.866599][ C0] ? __pfx_tcp_rcv_established+0x10/0x10 [ 626.866619][ C0] ? ip6_dst_check+0xe2/0x7e0 [ 626.866635][ C0] ? ip6_dst_check+0x5e3/0x7e0 [ 626.866650][ C0] ? __pfx_ip6_dst_check+0x10/0x10 [ 626.866666][ C0] tcp_v6_do_rcv+0x8eb/0x1ba0 [ 626.866686][ C0] tcp_v6_rcv+0x2653/0x2f60 [ 626.866709][ C0] ? __pfx_tcp_v6_rcv+0x10/0x10 [ 626.866721][ C0] ? nf_nat_ipv6_fn+0xf3/0x2f0 [ 626.866737][ C0] ? __pfx_nf_nat_ipv6_fn+0x10/0x10 [ 626.866750][ C0] ? raw6_local_deliver+0x116/0x950 [ 626.866772][ C0] ? __pfx_tcp_v6_rcv+0x10/0x10 [ 626.866784][ C0] ip6_protocol_deliver_rcu+0xa73/0x1600 [ 626.866813][ C0] ip6_input_finish+0x191/0x370 [ 626.866834][ C0] NF_HOOK+0x336/0x3c0 [ 626.866853][ C0] ? ip6_dst_check+0xe2/0x7e0 [ 626.866868][ C0] ? __pfx_ip6_input_finish+0x10/0x10 [ 626.866888][ C0] ? NF_HOOK+0x9e/0x3c0 [ 626.866906][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 626.866926][ C0] ? __pfx_ip6_input_finish+0x10/0x10 [ 626.866950][ C0] ip6_input+0x16a/0x270 [ 626.866969][ C0] ? ip6_input+0x23/0x270 [ 626.866993][ C0] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 626.867012][ C0] ip_sabotage_in+0x1e1/0x270 [ 626.867026][ C0] ? __pfx_ip_sabotage_in+0x10/0x10 [ 626.867041][ C0] nf_hook_slow+0xc5/0x220 [ 626.867060][ C0] NF_HOOK+0x21f/0x3c0 [ 626.867078][ C0] ? skb_orphan+0xaf/0xd0 [ 626.867098][ C0] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 626.867117][ C0] ? NF_HOOK+0x9e/0x3c0 [ 626.867135][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 626.867155][ C0] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 626.867176][ C0] ? netif_receive_skb+0x102/0xc50 [ 626.867190][ C0] netif_receive_skb+0x278/0xc50 [ 626.867206][ C0] ? __pfx_netif_receive_skb+0x10/0x10 [ 626.867222][ C0] ? br_netif_receive_skb+0x126/0x190 [ 626.867239][ C0] NF_HOOK+0xa4/0x3a0 [ 626.867253][ C0] ? __pfx_br_netif_receive_skb+0x10/0x10 [ 626.867269][ C0] ? NF_HOOK+0xfa/0x3a0 [ 626.867282][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 626.867297][ C0] ? __pfx_br_netif_receive_skb+0x10/0x10 [ 626.867315][ C0] ? br_pass_frame_up+0x275/0x420 [ 626.867331][ C0] br_handle_frame_finish+0x14b2/0x1b40 [ 626.867346][ C0] ? __local_bh_enable_ip+0xd0/0x130 [ 626.867367][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 626.867386][ C0] ? ip6t_do_table+0x113/0x1560 [ 626.867404][ C0] ? __pfx_ip6t_do_table+0x10/0x10 [ 626.867421][ C0] ? nf_hook_slow+0x176/0x220 [ 626.867438][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 626.867454][ C0] br_nf_hook_thresh+0x3dd/0x4c0 [ 626.867470][ C0] ? __pfx_br_nf_hook_thresh+0x10/0x10 [ 626.867485][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 626.867499][ C0] ? nf_nat_ipv6_in+0x203/0x2c0 [ 626.867516][ C0] br_nf_pre_routing_finish_ipv6+0xa3a/0xd70 [ 626.867533][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 626.867551][ C0] br_nf_pre_routing_ipv6+0x374/0x6f0 [ 626.867567][ C0] ? br_nf_pre_routing_ipv6+0x421/0x6f0 [ 626.867583][ C0] ? __pfx_br_nf_pre_routing_ipv6+0x10/0x10 [ 626.867599][ C0] ? __pfx_br_nf_pre_routing_finish_ipv6+0x10/0x10 [ 626.867616][ C0] ? br_nf_pre_routing+0x720/0x1470 [ 626.867632][ C0] ? __pfx_br_nf_pre_routing+0x10/0x10 [ 626.867645][ C0] br_handle_frame+0x1277/0x1510 [ 626.867664][ C0] ? __pfx_br_handle_frame+0x10/0x10 [ 626.867680][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 626.867698][ C0] ? __pfx_br_handle_frame+0x10/0x10 [ 626.867712][ C0] __netif_receive_skb_core+0x98f/0x31a0 [ 626.867729][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 626.867750][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 626.867768][ C0] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 626.867789][ C0] ? lock_acquire+0xf0/0x2e0 [ 626.867807][ C0] ? process_backlog+0x3eb/0x1950 [ 626.867823][ C0] ? process_backlog+0x3eb/0x1950 [ 626.867839][ C0] ? process_backlog+0x3eb/0x1950 [ 626.867855][ C0] process_backlog+0x76d/0x1950 [ 626.867877][ C0] __napi_poll+0xae/0x340 [ 626.867891][ C0] ? skb_defer_free_flush+0x233/0x260 [ 626.867907][ C0] net_rx_action+0x627/0xf70 [ 626.867923][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 626.867945][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 626.867964][ C0] ? __pfx_sched_clock_cpu+0x10/0x10 [ 626.867992][ C0] handle_softirqs+0x22a/0x870 [ 626.868011][ C0] ? do_softirq+0x76/0xd0 [ 626.868029][ C0] ? __dev_queue_xmit+0x274/0x38a0 [ 626.868049][ C0] do_softirq+0x76/0xd0 [ 626.868066][ C0] [ 626.868070][ C0] [ 626.868076][ C0] __local_bh_enable_ip+0xf8/0x130 [ 626.868093][ C0] ? __dev_queue_xmit+0x274/0x38a0 [ 626.868114][ C0] __dev_queue_xmit+0x1e6c/0x38a0 [ 626.868140][ C0] ? __dev_queue_xmit+0x274/0x38a0 [ 626.868165][ C0] ? __pfx___dev_queue_xmit+0x10/0x10 [ 626.868187][ C0] ? neigh_resolve_output+0x438/0x750 [ 626.868204][ C0] ? eth_header+0x11b/0x200 [ 626.868223][ C0] ? __asan_memcpy+0x40/0x70 [ 626.868252][ C0] ? ip6_output+0x126/0x550 [ 626.868269][ C0] ip6_output+0x340/0x550 [ 626.868287][ C0] ip6_xmit+0x1149/0x1980 [ 626.868308][ C0] ? ip6_xmit+0x283/0x1980 [ 626.868325][ C0] ? __pfx_ip6_xmit+0x10/0x10 [ 626.868346][ C0] ? __pfx_ip6_dst_check+0x10/0x10 [ 626.868364][ C0] inet6_csk_xmit+0x3bd/0x6c0 [ 626.868377][ C0] ? inet6_csk_xmit+0x110/0x6c0 [ 626.868391][ C0] ? __pfx_inet6_csk_xmit+0x10/0x10 [ 626.868403][ C0] __tcp_transmit_skb+0x249b/0x43e0 [ 626.868431][ C0] ? __pfx___tcp_transmit_skb+0x10/0x10 [ 626.868454][ C0] ? tcp_small_queue_check+0x1c1/0x3b0 [ 626.868474][ C0] tcp_write_xmit+0x16e8/0x6980 [ 626.868506][ C0] __tcp_push_pending_frames+0x97/0x380 [ 626.868526][ C0] tcp_sock_set_cork+0x186/0x2e0 [ 626.868540][ C0] ? __pfx_rds_tcp_xmit_path_complete+0x10/0x10 [ 626.868557][ C0] rds_send_xmit+0x207e/0x28d0 [ 626.868586][ C0] ? __pfx_rds_send_xmit+0x10/0x10 [ 626.868607][ C0] rds_send_worker+0x7d/0x2e0 [ 626.868625][ C0] ? process_scheduled_works+0xa25/0x1830 [ 626.868643][ C0] process_scheduled_works+0xb02/0x1830 [ 626.868670][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 626.868690][ C0] ? assign_work+0x3d5/0x5e0 [ 626.868709][ C0] worker_thread+0xa50/0xfc0 [ 626.868737][ C0] kthread+0x388/0x470 [ 626.868750][ C0] ? __pfx_worker_thread+0x10/0x10 [ 626.868767][ C0] ? __pfx_kthread+0x10/0x10 [ 626.868780][ C0] ret_from_fork+0x51e/0xb90 [ 626.868799][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 626.868816][ C0] ? __switch_to+0xc7d/0x1450 [ 626.868833][ C0] ? __pfx_kthread+0x10/0x10 [ 626.868845][ C0] ret_from_fork_asm+0x1a/0x30 [ 626.868872][ C0] [ 627.814579][ C0] BUG: sleeping function called from invalid context at net/core/sock.c:3782 [ 627.823361][ C0] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 1146, name: kworker/u8:8 [ 627.832599][ C0] preempt_count: 303, expected: 0 [ 627.837629][ C0] RCU nest depth: 7, expected: 0 [ 627.844006][ C0] INFO: lockdep is turned off. [ 627.848861][ C0] Preemption disabled at: [ 627.848881][ C0] [] __dev_queue_xmit+0x281/0x38a0 [ 627.859931][ C0] CPU: 0 UID: 0 PID: 1146 Comm: kworker/u8:8 Not tainted syzkaller #0 PREEMPT(full) [ 627.859951][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 627.859961][ C0] Workqueue: krds_cp_wq#17/0 rds_send_worker [ 627.859990][ C0] Call Trace: [ 627.859998][ C0] [ 627.860005][ C0] dump_stack_lvl+0xe8/0x150 [ 627.860026][ C0] __might_resched+0x378/0x4d0 [ 627.860046][ C0] ? __dev_queue_xmit+0x281/0x38a0 [ 627.860068][ C0] lock_sock_nested+0x5d/0x100 [ 627.860085][ C0] inet6_getname+0x15d/0x650 [ 627.860099][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 627.860115][ C0] rds_tcp_conn_slots_available+0x288/0x470 [ 627.860132][ C0] ? __pfx_rds_tcp_conn_slots_available+0x10/0x10 [ 627.860152][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 627.860172][ C0] ? __pfx_rds_tcp_conn_slots_available+0x10/0x10 [ 627.860187][ C0] rds_recv_hs_exthdrs+0x60f/0x7c0 [ 627.860204][ C0] ? NF_HOOK+0x336/0x3c0 [ 627.860222][ C0] ? ip6_input+0x16a/0x270 [ 627.860241][ C0] ? ip_sabotage_in+0x1e1/0x270 [ 627.860256][ C0] ? rds_recv_hs_exthdrs+0xd1/0x7c0 [ 627.860272][ C0] ? __napi_poll+0xae/0x340 [ 627.860287][ C0] ? net_rx_action+0x627/0xf70 [ 627.860303][ C0] ? __pfx_rds_recv_hs_exthdrs+0x10/0x10 [ 627.860319][ C0] ? __dev_queue_xmit+0x1e6c/0x38a0 [ 627.860339][ C0] ? ip6_xmit+0x1149/0x1980 [ 627.860355][ C0] ? __tcp_transmit_skb+0x249b/0x43e0 [ 627.860374][ C0] ? __tcp_push_pending_frames+0x97/0x380 [ 627.860392][ C0] ? tcp_sock_set_cork+0x186/0x2e0 [ 627.860405][ C0] ? rds_send_xmit+0x207e/0x28d0 [ 627.860421][ C0] ? process_scheduled_works+0xb02/0x1830 [ 627.860438][ C0] ? worker_thread+0xa50/0xfc0 [ 627.860455][ C0] ? kthread+0x388/0x470 [ 627.860467][ C0] ? ret_from_fork+0x51e/0xb90 [ 627.860485][ C0] rds_recv_incoming+0x9f6/0x12d0 [ 627.860504][ C0] ? __pfx_rds_recv_incoming+0x10/0x10 [ 627.860521][ C0] ? skb_copy_bits+0x7e5/0x8f0 [ 627.860542][ C0] rds_tcp_data_recv+0x7f1/0xa40 [ 627.860566][ C0] ? xfrm_policy_lookup_bytype+0x143/0x17e0 [ 627.860586][ C0] __tcp_read_sock+0x196/0x970 [ 627.860601][ C0] ? __pfx_rds_tcp_data_recv+0x10/0x10 [ 627.860617][ C0] rds_tcp_data_ready+0x369/0x9a0 [ 627.860632][ C0] ? __pfx_sock_def_readable+0x10/0x10 [ 627.860647][ C0] ? __pfx_rds_tcp_data_ready+0x10/0x10 [ 627.860666][ C0] tcp_data_queue+0x1e2e/0x5e50 [ 627.860698][ C0] ? tcp_urg+0x106/0x410 [ 627.860716][ C0] ? __pfx_tcp_data_queue+0x10/0x10 [ 627.860736][ C0] ? __pfx_tcp_urg+0x10/0x10 [ 627.860755][ C0] ? ktime_get+0x45/0x200 [ 627.860767][ C0] ? seqcount_lockdep_reader_access+0xe0/0x100 [ 627.860781][ C0] ? tcp_ecn_received_counters+0x2b7/0x7f0 [ 627.860803][ C0] tcp_rcv_established+0xf45/0x2740 [ 627.860828][ C0] ? __pfx_tcp_rcv_established+0x10/0x10 [ 627.860848][ C0] ? ip6_dst_check+0xe2/0x7e0 [ 627.860864][ C0] ? ip6_dst_check+0x5e3/0x7e0 [ 627.860885][ C0] ? __pfx_ip6_dst_check+0x10/0x10 [ 627.860901][ C0] tcp_v6_do_rcv+0x8eb/0x1ba0 [ 627.860918][ C0] tcp_v6_rcv+0x2653/0x2f60 [ 627.860941][ C0] ? __pfx_tcp_v6_rcv+0x10/0x10 [ 627.860953][ C0] ? nf_nat_ipv6_fn+0xf3/0x2f0 [ 627.860969][ C0] ? __pfx_nf_nat_ipv6_fn+0x10/0x10 [ 627.860982][ C0] ? raw6_local_deliver+0x116/0x950 [ 627.861004][ C0] ? __pfx_tcp_v6_rcv+0x10/0x10 [ 627.861016][ C0] ip6_protocol_deliver_rcu+0xa73/0x1600 [ 627.861045][ C0] ip6_input_finish+0x191/0x370 [ 627.861067][ C0] NF_HOOK+0x336/0x3c0 [ 627.861086][ C0] ? ip6_dst_check+0xe2/0x7e0 [ 627.861101][ C0] ? __pfx_ip6_input_finish+0x10/0x10 [ 627.861121][ C0] ? NF_HOOK+0x9e/0x3c0 [ 627.861139][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 627.861158][ C0] ? __pfx_ip6_input_finish+0x10/0x10 [ 627.861182][ C0] ip6_input+0x16a/0x270 [ 627.861201][ C0] ? ip6_input+0x23/0x270 [ 627.861221][ C0] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 627.861239][ C0] ip_sabotage_in+0x1e1/0x270 [ 627.861254][ C0] ? __pfx_ip_sabotage_in+0x10/0x10 [ 627.861268][ C0] nf_hook_slow+0xc5/0x220 [ 627.861288][ C0] NF_HOOK+0x21f/0x3c0 [ 627.861306][ C0] ? skb_orphan+0xaf/0xd0 [ 627.861326][ C0] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 627.861345][ C0] ? NF_HOOK+0x9e/0x3c0 [ 627.861363][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 627.861383][ C0] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 627.861403][ C0] ? netif_receive_skb+0x102/0xc50 [ 627.861418][ C0] netif_receive_skb+0x278/0xc50 [ 627.861434][ C0] ? __pfx_netif_receive_skb+0x10/0x10 [ 627.861449][ C0] ? br_netif_receive_skb+0x126/0x190 [ 627.861466][ C0] NF_HOOK+0xa4/0x3a0 [ 627.861495][ C0] ? __pfx_br_netif_receive_skb+0x10/0x10 [ 627.861510][ C0] ? NF_HOOK+0xfa/0x3a0 [ 627.861524][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 627.861539][ C0] ? __pfx_br_netif_receive_skb+0x10/0x10 [ 627.861556][ C0] ? br_pass_frame_up+0x275/0x420 [ 627.861577][ C0] br_handle_frame_finish+0x14b2/0x1b40 [ 627.861598][ C0] ? __local_bh_enable_ip+0xd0/0x130 [ 627.861619][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 627.861719][ C0] ? ip6t_do_table+0x113/0x1560 [ 627.861742][ C0] ? __pfx_ip6t_do_table+0x10/0x10 [ 627.861760][ C0] ? nf_hook_slow+0x176/0x220 [ 627.861778][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 627.861794][ C0] br_nf_hook_thresh+0x3dd/0x4c0 [ 627.861812][ C0] ? __pfx_br_nf_hook_thresh+0x10/0x10 [ 627.861827][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 627.861842][ C0] ? nf_nat_ipv6_in+0x203/0x2c0 [ 627.861860][ C0] br_nf_pre_routing_finish_ipv6+0xa3a/0xd70 [ 627.861877][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 627.861895][ C0] br_nf_pre_routing_ipv6+0x374/0x6f0 [ 627.862007][ C0] ? br_nf_pre_routing_ipv6+0x421/0x6f0 [ 627.862025][ C0] ? __pfx_br_nf_pre_routing_ipv6+0x10/0x10 [ 627.862042][ C0] ? __pfx_br_nf_pre_routing_finish_ipv6+0x10/0x10 [ 627.862059][ C0] ? br_nf_pre_routing+0x720/0x1470 [ 627.862076][ C0] ? __pfx_br_nf_pre_routing+0x10/0x10 [ 627.862090][ C0] br_handle_frame+0x1277/0x1510 [ 627.862108][ C0] ? __pfx_br_handle_frame+0x10/0x10 [ 627.862124][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 627.862142][ C0] ? __pfx_br_handle_frame+0x10/0x10 [ 627.862156][ C0] __netif_receive_skb_core+0x98f/0x31a0 [ 627.862175][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 627.862196][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 627.862214][ C0] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 627.862235][ C0] ? lock_acquire+0xf0/0x2e0 [ 627.862253][ C0] ? process_backlog+0x3eb/0x1950 [ 627.862269][ C0] ? process_backlog+0x3eb/0x1950 [ 627.862286][ C0] ? process_backlog+0x3eb/0x1950 [ 627.862301][ C0] process_backlog+0x76d/0x1950 [ 627.862324][ C0] __napi_poll+0xae/0x340 [ 627.862338][ C0] ? skb_defer_free_flush+0x233/0x260 [ 627.862355][ C0] net_rx_action+0x627/0xf70 [ 627.862371][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 627.862398][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 627.862417][ C0] ? __pfx_sched_clock_cpu+0x10/0x10 [ 627.862441][ C0] handle_softirqs+0x22a/0x870 [ 627.862461][ C0] ? do_softirq+0x76/0xd0 [ 627.862479][ C0] ? __dev_queue_xmit+0x274/0x38a0 [ 627.862500][ C0] do_softirq+0x76/0xd0 [ 627.862518][ C0] [ 627.862522][ C0] [ 627.862527][ C0] __local_bh_enable_ip+0xf8/0x130 [ 627.862544][ C0] ? __dev_queue_xmit+0x274/0x38a0 [ 627.862564][ C0] __dev_queue_xmit+0x1e6c/0x38a0 [ 627.862589][ C0] ? __dev_queue_xmit+0x274/0x38a0 [ 627.862614][ C0] ? __pfx___dev_queue_xmit+0x10/0x10 [ 627.862638][ C0] ? neigh_resolve_output+0x438/0x750 [ 627.862655][ C0] ? eth_header+0x11b/0x200 [ 627.862674][ C0] ? __asan_memcpy+0x40/0x70 [ 627.862701][ C0] ? ip6_output+0x126/0x550 [ 627.862718][ C0] ip6_output+0x340/0x550 [ 627.862736][ C0] ip6_xmit+0x1149/0x1980 [ 627.862755][ C0] ? ip6_xmit+0x283/0x1980 [ 627.862772][ C0] ? __pfx_ip6_xmit+0x10/0x10 [ 627.862796][ C0] ? __pfx_ip6_dst_check+0x10/0x10 [ 627.862814][ C0] inet6_csk_xmit+0x3bd/0x6c0 [ 627.862828][ C0] ? inet6_csk_xmit+0x110/0x6c0 [ 627.862840][ C0] ? __pfx_inet6_csk_xmit+0x10/0x10 [ 627.862857][ C0] __tcp_transmit_skb+0x249b/0x43e0 [ 627.862884][ C0] ? __pfx___tcp_transmit_skb+0x10/0x10 [ 627.862907][ C0] ? tcp_small_queue_check+0x1c1/0x3b0 [ 627.862926][ C0] tcp_write_xmit+0x16e8/0x6980 [ 627.862957][ C0] __tcp_push_pending_frames+0x97/0x380 [ 627.862976][ C0] tcp_sock_set_cork+0x186/0x2e0 [ 627.862990][ C0] ? __pfx_rds_tcp_xmit_path_complete+0x10/0x10 [ 627.863007][ C0] rds_send_xmit+0x207e/0x28d0 [ 627.863036][ C0] ? __pfx_rds_send_xmit+0x10/0x10 [ 627.863056][ C0] rds_send_worker+0x7d/0x2e0 [ 627.863074][ C0] ? process_scheduled_works+0xa25/0x1830 [ 627.863092][ C0] process_scheduled_works+0xb02/0x1830 [ 627.863118][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 627.863137][ C0] ? assign_work+0x3d5/0x5e0 [ 627.863155][ C0] worker_thread+0xa50/0xfc0 [ 627.863181][ C0] kthread+0x388/0x470 [ 627.863195][ C0] ? __pfx_worker_thread+0x10/0x10 [ 627.863212][ C0] ? __pfx_kthread+0x10/0x10 [ 627.863224][ C0] ret_from_fork+0x51e/0xb90 [ 627.863243][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 627.863260][ C0] ? __switch_to+0xc7d/0x1450 [ 627.863275][ C0] ? __pfx_kthread+0x10/0x10 [ 627.863288][ C0] ret_from_fork_asm+0x1a/0x30 [ 627.863313][ C0]