last executing test programs: 2.96006726s ago: executing program 1 (id=3246): r0 = socket$inet6_udp(0xa, 0x2, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYRES16=r1], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000800)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r4, &(0x7f0000000380)="ff", &(0x7f0000000480)=@udp6=r5, 0x2}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r5, 0x5, 0xe, 0x0, &(0x7f00000003c0)="000000000000000000000001e370", 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x50) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r6 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52", 0xa}], 0x1}], 0x1, 0x40800) splice(r6, 0x0, r2, 0x0, 0x9, 0x1200000000000000) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x2, 0x6, 0x798, 0x1b0, 0x6c8, 0x498, 0x290, 0x498, 0x6c8, 0x6c8, 0x6c8, 0x6c8, 0x6c8, 0x6, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x39}, @private1, [0x0, 0x0, 0xffffffff, 0xffffff00], [], 'pimreg0\x00', 'macvtap0\x00', {}, {}, 0x6}, 0x0, 0x188, 0x1b0, 0x0, {0x7a00000010000000}, [@common=@srh1={{0x90}, {0x2f, 0x0, 0xe, 0x0, 0x3ff, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @private1={0xfc, 0x1, '\x00', 0x1}, @private0, [0xffffff00, 0xff000000, 0xff, 0xff000000], [0xffffffff, 0x0, 0xff000000, 0xffffff00], [0x0, 0x0, 0xff000000, 0xff000000], 0x3, 0x4000}}, @common=@inet=@multiport={{0x50}, {0x0, 0x0, [], [], 0xfd}}]}, @HL={0x28}}, {{@ipv6={@private2={0xfc, 0x2, '\x00', 0x1}, @dev, [], [], 'veth1_macvtap\x00', 'veth1_vlan\x00', {}, {}, 0x0, 0x0, 0x0, 0x22}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}, {{@ipv6={@ipv4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [0x0, 0x0, 0xff000000], 'dummy0\x00', 'bond_slave_0\x00'}, 0x0, 0xa8, 0x118, 0x48000000}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x1ff, 0x8, 0x4, 0x1, 0x0, "52146ee9ae44b62f269737ed481b837e8196a5702a25a4409e992b2c65fd4ce47d5510261c8694c511bcdcbca881691621e9e9f5a9cc6d7b009686f0fdb6fdc2"}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4, @ipv4=@loopback}}}, {{@uncond, 0x0, 0x208, 0x230, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@rt={{0x138}, {0x0, [], 0x0, 0x0, 0x0, [@empty, @private0, @private0, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, @mcast2, @dev={0xfe, 0x80, '\x00', 0x22}, @private1, @empty, @loopback, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x32}}, @remote, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0]}}]}, @HL={0x28, 'HL\x00', 0x0, {0x0, 0x5}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x7f8) 2.812100191s ago: executing program 1 (id=3249): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000007c0)=ANY=[@ANYBLOB="3000000013000100", @ANYRES32=0x0, @ANYBLOB="0000000000000000080013"], 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) setsockopt$packet_drop_memb(r0, 0x107, 0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0xc, &(0x7f00000004c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @alu={0x7, 0x0, 0xd, 0x9, 0x7, 0x2, 0x10}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}]}, &(0x7f0000000400)='GPL\x00', 0x2, 0xbb, &(0x7f0000000580)=""/187, 0x40f00, 0x6, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)=[r1, r1]}, 0x94) syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 2.244900031s ago: executing program 1 (id=3254): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x96) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a00fe0000000087080000000000007b8af0ff00000000bda100000000000027000000f8ffffffbfa400000000000007040000f0ffffffb70200000200000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000008000000850000004900000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="7638300c000000000000e9000000", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000080), 0xffffffffffffffff) r4 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x80000) ioctl$SIOCX25SDTEFACILITIES(r4, 0x89eb, &(0x7f0000000380)={0x0, 0x6, 0x0, 0x4, 0x2, 0x4, 0x0, "a471174324b28d742b0f84837b7bce4f145b5f90", "680dce499b35b46c1c4b318083839dff59aaf798"}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x2000, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x24, 0x2, [@TCA_CAKE_RTT={0x8, 0x7, 0x6}, @TCA_CAKE_WASH={0x8, 0xd, 0x1}, @TCA_CAKE_FLOW_MODE={0x8, 0x5, 0x4}, @TCA_CAKE_ATM={0x8, 0x4, 0x1}]}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x2, 0x1}}, {0x4}}]}]}, 0x78}}, 0x4000010) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)={'syztnl2\x00', &(0x7f00000000c0)={'syztnl1\x00', 0x0, 0x29, 0x9, 0x9, 0x8, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x700, 0x40, 0x1, 0x1}}) r8 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000080)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x4008010}, 0x0) socketpair(0x1, 0x100000005, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r9, &(0x7f00000010c0), &(0x7f0000000140)=@tcp, 0x1}, 0x20) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'team0\x00', 0x0}) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040), 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x44, r3, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_LINK={0x8, 0x1, r6}, @GTPA_MS_ADDRESS={0x8, 0x5, @local}, @GTPA_LINK={0x8, 0x1, r7}, @GTPA_NET_NS_FD={0x8, 0x7, r8}, @GTPA_I_TEI={0x8}, @GTPA_LINK={0x8, 0x1, r10}]}, 0x44}, 0x1, 0x0, 0x0, 0x80035}, 0x80) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x3, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="1802000041f7fff700000000fcffffff850000005300000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2c}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r12, 0x0, 0xe, 0x0, &(0x7f00000003c0)="c274386d178550cb864bd57221bc", 0x0, 0x1200000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$nl_netfilter(0x10, 0x3, 0xc) r13 = syz_init_net_socket$x25(0x3, 0x5, 0x3) ioctl$SIOCX25SFACILITIES(r13, 0x89e3, &(0x7f0000000000)={0x6b, 0xa238, 0x7, 0x6, 0x2, 0x81}) 2.120884275s ago: executing program 0 (id=3257): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000013b767f3a9849dd1a2631ec7408f61c2ed5de028e26aed4bf83e961c7ed953d5a58cae84a163b5eabf4f95ad57005eef12fe3e188f0284ab1eda5de5f41f0c565c1892d9a4601d638f508523c94044d0e2471d00fbff31b3fb2139c6db39d4e719f7f9e13d8d9d096b70a764df14c8822898e5be5daffe7626192f968670cbde1f3d1d155e42679b6563"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r0}, 0x4) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r0}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x18, &(0x7f00000003c0)=ANY=[@ANYBLOB="180200000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300007f0000008500000006000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa4000000000000f00300182300"/156, @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a50000009500000000000000"], &(0x7f0000000080)='GPL\x00'}, 0x94) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x18, &(0x7f00000003c0)=ANY=[@ANYBLOB="180200000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300007f0000008500000006000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa4000000000000f00300182300"/156, @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a50000009500000000000000"], &(0x7f0000000080)='GPL\x00'}, 0x94) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r2, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000001100)={0x28, 0x140f, 0x2bdb2fde77614cad, 0x70bd2b, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x7, 0x45, 'sa\x00'}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}]}, 0x28}, 0x1, 0x0, 0x0, 0xc804}, 0x8000) (async) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r2, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000001100)={0x28, 0x140f, 0x2bdb2fde77614cad, 0x70bd2b, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x7, 0x45, 'sa\x00'}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}]}, 0x28}, 0x1, 0x0, 0x0, 0xc804}, 0x8000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x78, 0x0, 0x1, 0x401, 0x0, 0x0, {0x5}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x4}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}]}, 0x78}}, 0x0) (async) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x78, 0x0, 0x1, 0x401, 0x0, 0x0, {0x5}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x4}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}]}, 0x78}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x85, 0x0, 0x0, 0x0, 0x6c, 0x4}}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000100)={0xb8, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x24, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6}]}]}]}, 0xb8}}, 0x0) (async) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000100)={0xb8, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x24, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6}]}]}]}, 0xb8}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)) socket$kcm(0x10, 0x100000000002, 0x4) (async) r5 = socket$kcm(0x10, 0x100000000002, 0x4) sendmsg$kcm(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="39000000140081ae00002c000500015601618575e285af0100d41b2cc32b38d3440c6942cb76cab300"/57, 0x39}], 0x1, 0x0, 0x0, 0xc00e}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000002200000000000000000080071107a000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, 0xd}, 0x94) r6 = socket$pppl2tp(0x18, 0x1, 0x1) unshare(0x400) (async) unshare(0x400) socket$inet6(0xa, 0x2, 0x0) (async) r7 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r7, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r7, &(0x7f0000000600)={0x2, 0x4e21, 0x0, @private0, 0x4}, 0x1c) (async) connect$inet6(r7, &(0x7f0000000600)={0x2, 0x4e21, 0x0, @private0, 0x4}, 0x1c) r8 = socket$netlink(0x10, 0x3, 0x8000000004) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r9, 0x29, 0x15, &(0x7f00000001c0)={@private2={0xfc, 0x2, '\x00', 0x1}}, 0x14) socket$inet_mptcp(0x2, 0x1, 0x106) writev(r8, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ff0000f03ac710aa7d0000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) epoll_pwait(r10, &(0x7f0000000600)=[{}], 0x1, 0x6, &(0x7f0000000640)={[0x5]}, 0x8) connect$pppl2tp(r6, &(0x7f0000000440)=@pppol2tp={0x18, 0x1, {0x0, r3, {0x2, 0x1, @remote}, 0xa}}, 0x26) sendmsg$xdp(r10, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000680)="d12a725d0328fdeb8fc826d708768d5b5e3d81dbd0be95377cd2cf7e616ede06638668cf3358f2e2ffbe34f2d77fdf400d53fb587c2895db7fbebbda73407c48e7c87b9cc7cbe3dca3d998e505480a38bff4eb06f6bcd379f83d2a6f5f885e56ce1935e063aa77be06ab6b575e5dc27b6b24659f47b281d94efc28e3715187e81e5a242a37af6dd8a05e8aa4aaf7fe06baf275c019d5f17c44d4b05fb1ccd44d7da65c376a0abda6ebfb4ba5dc8de2ed5406d0fe01874ebdfeae8bb4736c8b1d560f3e0a1c94da1ceeae508f08a167864b21db07d7c2ecbc390bd9aa5b9e2c70218295cb5e2150", 0xe7}, {&(0x7f0000000780)="8fb9a2605dc4b3a204419294e5a446a2b442b4f86a9538d3a52e854d66cb0ff19202b35ffdd993c0febb530ddc17c2e8a10232b2364985cbc3c9a89666703ad12406469a0a60c4d0acf06b29fcc914c7817819ec84b53c936d5821e10dc0fb8a555686a69430f12d405d3f811bc81aea342f375f98c85f6a99e71be4fbbfe1a7565d1c", 0x83}, {&(0x7f0000000840)="136a93829d0b676d24e5f65eaab62a7bbc20f369c7d198bbac2425be0f2f73f1e7216edc912b58f1757200eec372378e677ce0d3a142b85c698fcceff5ce4aada1534ce8e5eeac205bd6bb9a3b8ae5e3294418cf3019165041aacc66115861aa29ac6c569df5383b3a513da1152b6ba7ca1c032325d7477eedec06fae422796644099c8dc4405ede667aeeff600740718d35cb9d2751f294a2bdc8ce714b7eda6117f2e24c9baba833ab56f65ed902a1d6a581fe0998af805df3051e6ed85d5443b06616147fd1c50a1f274c1814a1863a82782c7ab71c6d826e62efbd7d402f6e46230287eecddebe90f5fa6369", 0xee}, {&(0x7f00000001c0)="648a43863d6caa9141c23da6c4baf605e14569a5b01b7891b025b7cbfbf265757c3ac6da8fee672c59d7cddd89f738ceb7786f915cac177967fe99ff8b775bba62be35a77507fbcb0e570636ceabf6835383d68f74bbb09a94fe2c", 0x5b}], 0x4}, 0x2d610e196363a022) sendmmsg$inet(r6, &(0x7f0000005f80)=[{{0x0, 0x0, &(0x7f0000000940)=[{0x0}, {&(0x7f0000000240)="24ac45d5", 0x4}], 0x2}}], 0x1, 0x8040) 1.960746513s ago: executing program 0 (id=3258): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000040)={0x0, 0xb, 0x20}, &(0x7f0000000080)=0xc) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000000040), 0x4) 1.870916697s ago: executing program 0 (id=3259): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup/syz0\x00', 0x1ff) r1 = openat$cgroup_int(r0, &(0x7f0000000100)='hugetlb.2MB.failcnt\x00', 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x7, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_USERDATA={0xa, 0x3, "91abc12404cf"}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x9}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x88}}, 0x0) close(0x3) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) connect$l2tp6(r4, &(0x7f0000000500)={0xa, 0x0, 0x3, @loopback, 0x2880}, 0x20) sendmsg$DEVLINK_CMD_RATE_DEL(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000580)={&(0x7f0000000680)={0x48, 0x0, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}]}, 0x48}, 0x1, 0x0, 0x0, 0x200488e0}, 0x0) r5 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r5, 0x118, 0x1, &(0x7f0000000140)=0x4bc, 0x4) bind$nfc_llcp(r5, &(0x7f00000001c0)={0x27, 0x0, 0x0, 0x2, 0x0, 0x49, "c46e9fd1a84b7fa0bf2cca6beb9363a680b652a86bcf56a1b9ca5386103a5ccbe47b7b9aa6d8d701a3ba00000000b97800001022f987617c318500", 0x3a}, 0x60) getsockopt$inet_buf(r5, 0x118, 0x1, 0x0, &(0x7f00000003c0)) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01411800000000002c8a0c0000000c0002000200096b000000"], &(0x7f0000001f80)=""/226, 0x26, 0x81, 0x2}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r2}, &(0x7f0000000840), &(0x7f0000000880)=r6}, 0x20) sendmsg$IPSET_CMD_PROTOCOL(r3, &(0x7f0000000480)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0xf6946897e700a71a}, 0xc, &(0x7f00000002c0)={&(0x7f00000003c0)={0x64, 0x1, 0x6, 0x101, 0x0, 0x0, {0x1, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x4f}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x48011) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r6, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000440)="b9ff03076804268c989e14f088a8", 0x0, 0x90d, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r7 = openat$cgroup_int(r0, &(0x7f0000000080)='hugetlb.2MB.rsvd.max_usage_in_bytes\x00', 0x2, 0x0) sendfile(r7, r1, 0x0, 0x5) 1.713455816s ago: executing program 2 (id=3261): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000140), 0x10) r1 = socket(0x1e, 0x5, 0x0) connect$tipc(r1, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x1, 0x2}}}, 0x10) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}]}, &(0x7f00000002c0)=0x10) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x103040, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000009c00)={r4, @in6={{0xa, 0x4e21, 0x6, @private2, 0x3}}}, &(0x7f0000009cc0)=0x84) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000800)={0x0}}, 0x0) r5 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r5, 0x89fc, &(0x7f0000000040)={'bond0\x00', 0x10000}) sendmsg$can_bcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="05000000d97e94090000000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="0000000001"], 0x80}}, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000040000000400000009"], 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0xc48e, 0x4, 0x1, 0x0, r6}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r7, 0xffffffffffffffff}, &(0x7f0000000840), &(0x7f0000000880)=r6}, 0x20) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0xfff, r8}, 0x38) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r9, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x1}, 0x6e) sendmmsg$unix(r10, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r9, &(0x7f00000000c0), 0x400000000000290, 0x0, 0x0) 1.258482909s ago: executing program 0 (id=3262): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800180001"], 0x48) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6(0xa, 0x3, 0x5) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000001a80)=@raw={'raw\x00', 0x8, 0x3, 0x12d8, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1208, 0xffffffff, 0xffffffff, 0x1208, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0x0, 0x62], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {0xff}, 0x0, 0xfd}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x7fff, 0x30, 0x1}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [0x0, 0x0, 0xff000000], [], 'wg1\x00', 'ip6gretap0\x00', {}, {}, 0x3b, 0x0, 0x0, 0x3}, 0x0, 0x1108, 0x1138, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x1, 0x0, 0x0, './cgroup.cpu/syz0\x00', 0x2, {0x8}}}, @common=@srh={{0x30}, {0x1, 0x4, 0x7, 0x3, 0x8001, 0x4000, 0x3004}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0x0, 0x0, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x1338) (async) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000001a80)=@raw={'raw\x00', 0x8, 0x3, 0x12d8, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1208, 0xffffffff, 0xffffffff, 0x1208, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0x0, 0x62], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {0xff}, 0x0, 0xfd}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x7fff, 0x30, 0x1}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [0x0, 0x0, 0xff000000], [], 'wg1\x00', 'ip6gretap0\x00', {}, {}, 0x3b, 0x0, 0x0, 0x3}, 0x0, 0x1108, 0x1138, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x1, 0x0, 0x0, './cgroup.cpu/syz0\x00', 0x2, {0x8}}}, @common=@srh={{0x30}, {0x1, 0x4, 0x7, 0x3, 0x8001, 0x4000, 0x3004}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0x0, 0x0, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x1338) sendmsg$nl_route(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a00"/28, @ANYRES32=r1, @ANYBLOB="06001500070000000c00168008000100", @ANYRES16=r0], 0x38}}, 0x48050) (async) sendmsg$nl_route(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a00"/28, @ANYRES32=r1, @ANYBLOB="06001500070000000c00168008000100", @ANYRES16=r0], 0x38}}, 0x48050) r3 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_subtree(r5, &(0x7f0000000140)=ANY=[], 0x21) getsockopt$IP_VS_SO_GET_SERVICES(r5, 0x0, 0x482, &(0x7f0000000180)=""/61, &(0x7f00000001c0)=0x3d) (async) getsockopt$IP_VS_SO_GET_SERVICES(r5, 0x0, 0x482, &(0x7f0000000180)=""/61, &(0x7f00000001c0)=0x3d) ioctl$int_in(r5, 0x5452, &(0x7f0000000040)=0x1ff) setsockopt$netrom_NETROM_T4(r4, 0x103, 0x6, &(0x7f00000000c0)=0x4010, 0x4) (async) setsockopt$netrom_NETROM_T4(r4, 0x103, 0x6, &(0x7f00000000c0)=0x4010, 0x4) splice(r4, 0x0, r6, 0x0, 0x21, 0x5) (async) splice(r4, 0x0, r6, 0x0, 0x21, 0x5) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'gre0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="500000001000210425bd70000000000000000000", @ANYRES32=r7, @ANYBLOB="000000000002010030001280080001006772650024000280060010004e200004060011"], 0x50}}, 0x0) 1.211424786s ago: executing program 1 (id=3264): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000000c0)="5c00000014006b05c84e21000ab16d6e230675f811000000440002005817d30461bc24eeb556a705251e6182149a36c23d3b48dfd8cdbf9367b098fa51f60a64c9f408000000e786a6d0bdd70000b6c0504bb9189d9193e9bd1c1b78", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x24000000) (async) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000000c0)="5c00000014006b05c84e21000ab16d6e230675f811000000440002005817d30461bc24eeb556a705251e6182149a36c23d3b48dfd8cdbf9367b098fa51f60a64c9f408000000e786a6d0bdd70000b6c0504bb9189d9193e9bd1c1b78", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x24000000) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000440)={0x2, 0xfffffffc, 0x6}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x1c, 0x16, 0xa01, 0x0, 0x0, {0x80}, [@typed={0x6, 0x53, 0x0, 0x0, @str='!\x00'}]}, 0x1c}}, 0x0) 956.716591ms ago: executing program 1 (id=3266): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket(0xa, 0x3, 0x3a) (async) r1 = socket$kcm(0x2, 0xa, 0x2) (async) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'wg2\x00', @link_local}) (async) write$tun(r0, &(0x7f00000006c0)=ANY=[@ANYBLOB="000086dd00000a000000740000006809c2b400033aff00000000000020000000000000000000ff020000000000000000000000000001"], 0x9e) 956.301379ms ago: executing program 4 (id=3174): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000003c0)={'syz_tun\x00', 0xd201}) r1 = socket$kcm(0x2, 0x3, 0x2) (async) syz_emit_ethernet(0xc2, &(0x7f0000000680)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xb4, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010100, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x2c, 0x0, {0x26, 0x4, 0x0, 0x0, 0x0, 0x0, 0x210, 0x0, 0x89, 0x0, @private=0xa010100, @local, {[@cipso={0x86, 0x2a, 0x0, [{0x0, 0xd, "5e000000ff000000000000"}, {0x5, 0x5, "4eb8a6"}, {0x0, 0x12, "9606053d0006ff00800000b61af93a93"}]}, @lsrr={0x83, 0x13, 0x0, [@dev, @broadcast, @loopback, @multicast2]}, @cipso={0x86, 0x34, 0xffffffffffffffff, [{0x2, 0x7, "4b6cefc500"}, {0x0, 0xc, "df61168c24ac88ad078c"}, {0x0, 0xa, "2189ea43a2149b84"}, {0x6, 0xb, "f7d11634eea26b75af"}, {0x0, 0x6, "02a20948"}]}, @timestamp={0x44, 0x10, 0x56, 0x0, 0x0, [0x0, 0xfe8, 0xfffffffe]}]}}}}}}}, 0x0) (async) r2 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c) (async) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000000)=[{0x6, 0x9, 0x8, 0xf5a}]}, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = getpid() sendmsg$nl_generic(r3, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0xac, 0x41, 0x200, 0x70bd28, 0x25dfdbfb, {0xe}, [@typed={0xc, 0xfa, 0x0, 0x0, @u64=0x3bfc1e9c}, @typed={0x8, 0x87, 0x0, 0x0, @pid=r4}, @nested={0x83, 0x3f, 0x0, 0x1, [@generic="b0f70c63ae27b47c00124d7c2c041ae58d4c13fe60ef847c94708272e1a35c34d21845c53a778cfc52a9ff1e6c99c02dcb1b367a52feb7f9152da7bed70a819a826798533315b39fd3aad58164799dd2fb7405da0643304cffc70a807c30c4ab159164e8c998deece7de65", @typed={0xc, 0x133, 0x0, 0x0, @u64=0x1}, @nested={0x4, 0x142}, @nested={0x4, 0x1e}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x40000}, 0x800) r5 = accept$nfc_llcp(0xffffffffffffffff, 0x0, &(0x7f0000000140)) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r5, 0x8983, &(0x7f0000000180)={0x8, 'caif0\x00', {'syz_tun\x00'}}) (async) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000540)=""/4096, 0x1000, 0x40000020, &(0x7f0000000380)={0xa, 0x4e20, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xffffffff}, 0x1c) (async) write$tun(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0800080000000000000012000000456f00b0006690e1401190780a010102ac1414124e244e20009c907801000b82e56e05e9a3f461bd8f05c60ff304e7fee8a3221bb54970b8807c69e8ed451c3c1a9dff75f0f264e44cbb999c8f292e5aa143fd63ea1886e0cd425df0d8e5e72bdc61214ad793ad9f48b4d287b15c14be6bd51b0000000000000449359f6d209769ac883aaf76bbf000ad9a5cd7bcd4dc8e1acb0a7808793cfd119c0000001800"/189], 0xbe) 955.989477ms ago: executing program 3 (id=3267): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xa4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000002140)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000800)="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", 0x21f}, {&(0x7f0000000300)="17e37d3e106d9beae191613d45501cb6a8d8eaeb96ee68b2d800ad34b8c528b97ead9f051e427e309b714d3d12d8d4010c04a27e6c586b3956f0dfc7086e9550bd651b9e019d7b671b231c7a8cbfd52bea572b327362fd4db8e4a162096a0464fd2529fc31f79947d137520a8823ae6f0c068c299db997db4d44cfd7657ea53a691a386f018286b4dbe415596964ab56a9c0d7280e592ad174e737a4e5e4cd560030a7380c37f6629e3da2d24a2b6b5ea407e3f075fbf8174a58b3ffeb4d2a0fc8f94fe18a75bc699e8cea7bf13ba6388dc9a8011dfba9b9fcd2a495a4fd80351d16", 0xe2}], 0x2}}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000640)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637808dde804a048fd8696e524b2934126c443ce93d82e931eb9918e6c08276", 0x62}], 0x1}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000001b00)="c779a881400f168b3cd3b9dcb8505d626656e6b4f5441fb27838fa6f26bfe21f20605b23fffe6978fe6148e25caa0c0f9b6e4434877b8978a5caa4c641dfe5b407dd88d709f6c3aaf2eb6d966f38806c79f63870496f06f64302d7f1292499f44695", 0x62}, {&(0x7f0000000540)="6f433f8987fc9e72c982b56a37a1c7b7ab31e2f6b098f57a62f9d8a98a9d4f7199", 0x21}, {&(0x7f00000005c0)="8e26189d110469a886116da338", 0xd}, {&(0x7f0000002240)="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", 0x587}], 0x4}}], 0x4, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000b00)=""/4096, 0x1000, 0x1, 0x0}, &(0x7f0000000180)=0x40) sendto$inet(r0, &(0x7f0000000580)="04", 0x1, 0x10008095, 0x0, 0x0) 884.851938ms ago: executing program 3 (id=3268): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x4, 0xdd, 0xa}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket(0x10, 0x3, 0x0) close(0x3) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r2, &(0x7f0000000300)={{0x6, @rose, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}, 0x48) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r3, &(0x7f00000004c0)={{0x6, @rose, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x48) listen(r3, 0x80) r4 = accept$netrom(r3, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r4, 0xc038943b, &(0x7f0000000580)={0x1, 0x28, '\x00', 0x1, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0]}) close(0x3) close(0x3) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r5}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x7a, 0xa, 0x0, 0xff00, 0x0, 0x71, 0x10, 0x43}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c0000001800dd8d0000000000000000020000000000000500000000060015000100000028001680240001"], 0x4c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000004c0)=ANY=[], 0x6c}, 0x1, 0x0, 0x0, 0x18840}, 0x4000841) socket$vsock_stream(0x28, 0x1, 0x0) r7 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r7, &(0x7f0000000140), 0x4924b68, 0x0) pwritev(r6, &(0x7f0000000440)=[{&(0x7f0000000000)="ecef274e660776571b2610aa3e4ec81572fc5c33ed734f1b8b9e215079ab928547a79e3642f52bf8", 0x28}, {&(0x7f0000000100)="2afd7281c753d7a0fae6e6c7dab89d00aaea9d5266e5bf4eb8e6e5d8e1c699a8ca", 0x21}, {&(0x7f00000001c0)="9703c312921bd730376950441f4f0a1a8d2446bca426338963b8b95be0461821e533e01cc748e2ba62b028086f9ad698c4e52e06bc512ac3cccabdd02f", 0x3d}, {&(0x7f0000000200)="76da2b173f5d8068ebe46b8f63c109fede0838ad5b2528ce71f5008686901526bd69cdc047aa1fc1e02355209bc903bcac1a13d1b13518d74f6f1e64ae08936ab9146f41603d9ad24036d6c323b854d3ee29822c99de10b7412dc9ed57b1177751ca92c60e815da6b16f5fdc957fcdf73f6fa696cd2df4b4c50072c28e09d74dc5070ed96e4bf3a6563fd1943bee62a9e99261fad437d66f05b27fbb60cbc55346dadea7999998b4d298b1598609bb1de1c214b35ce5c7d7e552dbc904fde4da778ff0c685a3eaf83507dd8d49c1ce50a109970ce8d6120aec66f4f4301fd62b0e32e761bcb4430578fd06542e5d70f1607b60eb1f16ea2ae3faaba5", 0xfc}, {&(0x7f0000000300)}, {&(0x7f0000000700)="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", 0x1000}, {&(0x7f0000000340)="3998ae807f216d5357dca340315cdf69ac4660aeefd2c2851f9667aa35db7f5de0a5f6c5a1842fa8f3e431cdf03897571d84caddc52b72fb76932cf32d9a08985d57d08b10eeb7194e9d94af5022bb93e7cef0eebbc612efcf63ee9209a2cf362979f7c75062a5e97aa22c9d011d40d4fdfefa3c4c98832d863abe090f97c8e6a0764df63537e44683a9e1c1249dc694cbacc04d0f87c4ea21ece56c8891af779753204444b186913bd5c070f557d5939fa552709ee94104e7eb9ffd1b60c539d92f7b8df31e383d732410625f304d", 0xcf}], 0x7, 0x8, 0x9) 834.853144ms ago: executing program 1 (id=3269): syz_emit_ethernet(0x52, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaebbbbbbbbbbbb080445000044000000000001904b0f8433780a0101e7ab1414aa030e9078000000044a0000000068000007064ba7e0000002ac1414bb4414ba637f000001fe0e5018ffffffff"], 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a60000000000000020", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a60000000000000020", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) (async) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) socket$netlink(0x10, 0x3, 0x0) (async) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0xff05, 0x8000000, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0x157f}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x40}}, 0x20000840) r4 = socket(0x10, 0x3, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000009c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, 0x0, 0xff87) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc0000001900010000000000fcdbdf2500000000000000000000000000000000fe8000000002000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000004000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000001000000000000004400050000000000000000000000000000000000000000022b0000000a000000fe8000000000000000000000000000aa0000000004"], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000000), r8) (async) r9 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000000), r8) sendmsg$NLBL_CIPSOV4_C_ADD(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)={0x38, r9, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x14, 0x4, 0x0, 0x1, [{0x5}, {0x5, 0x3, 0x7}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x20008086}, 0x0) r10 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r10, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r10, &(0x7f0000000480)={0x2, 0x4e21, @multicast2}, 0x10) (async) connect$inet(r10, &(0x7f0000000480)={0x2, 0x4e21, @multicast2}, 0x10) sendmmsg(r10, &(0x7f0000007fc0), 0x800001d, 0x1c) (async) sendmmsg(r10, &(0x7f0000007fc0), 0x800001d, 0x1c) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@local, 0x0, 0x0, 0x1, 0x1}, 0x20) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="400000001000030400000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c", @ANYBLOB, @ANYRES64=r4], 0x40}}, 0x0) (async) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="400000001000030400000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c", @ANYBLOB, @ANYRES64=r4], 0x40}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="050000000800000000e0fc463cd1fb569607b50a0000000c000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) 784.876295ms ago: executing program 4 (id=3270): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700000001000030500000000ffdbdf2500000000", @ANYRES32=0x0, @ANYRESHEX=r0, @ANYRESHEX=r0], 0x70}, 0x1, 0x0, 0x0, 0x240488c0}, 0x40000d1) 763.257743ms ago: executing program 2 (id=3271): unshare(0x8040600) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x4, 0x4, 0x12}, 0x50) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000002c0)={r0, r1, 0x4, 0x0, @val=@tracing={0x0, 0x1}}, 0x20) r2 = socket(0x11, 0x80a, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), r2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000800000001f00000071028000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x4, 0xb, &(0x7f0000000080)=""/11, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb}, 0x24) 726.027001ms ago: executing program 4 (id=3272): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000ac0)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='&'], 0x10) recvmmsg(r0, &(0x7f0000000b80)=[{{0x0, 0xffffffffffffff6c, 0x0, 0x0, 0x0, 0x52}, 0xa}], 0x360, 0x120, 0x0) recvfrom$inet6(r0, &(0x7f00000000c0)=""/53, 0x35, 0x0, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000bc0)=@security={'security\x00', 0xe, 0x4, 0x538, 0xffffffff, 0x110, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x468, 0x468, 0x468, 0xffffffff, 0x4, &(0x7f0000000040), {[{{@ipv6={@private2, @dev={0xfe, 0x80, '\x00', 0x25}, [0xff000000, 0xff, 0x0, 0xff], [0xffffff00, 0x0, 0xff000000], 'sit0\x00', 'ipvlan1\x00', {}, {0xff}, 0x2, 0x1, 0x7, 0x11}, 0x0, 0xd0, 0x110, 0x0, {}, [@common=@icmp6={{0x28}, {0x3, "8ac9", 0x1}}]}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0xebe9, 0x0, 0x400, 0xe, 0x1, 0x7fff, 0x100]}}}, {{@uncond, 0x0, 0xd0, 0x108, 0x0, {}, [@common=@hl={{0x28}, {0x2, 0x8}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x5, 0x1}, {0x1, 0x5, 0x2}, {0x1, 0x5, 0x3}, 0x4, 0x7a}}}, {{@uncond, 0x0, 0x210, 0x250, 0x0, {}, [@common=@frag={{0x30}, {[0x0, 0x9], 0x5, 0x0, 0x1}}, @common=@rt={{0x138}, {0x1, [0x400, 0x5], 0x7, 0x10, 0x0, [@mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @empty, @loopback, @private0, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast1, @local, @private1, @mcast2, @local, @private2, @private1={0xfc, 0x1, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @empty}], 0xd}}]}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x1, 0x148, 0x1, 0x0, 0x7, 0xd3f, 0x6]}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x598) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x14, &(0x7f0000000100)=@raw=[@map_fd={0x18, 0x2, 0x1, 0x0, r2}, @map_fd={0x18, 0xa, 0x1, 0x0, r2}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @tail_call={{0x18, 0x2, 0x1, 0x0, r2}}, @call={0x85, 0x0, 0x0, 0x33}, @map_val={0x18, 0x1, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1}, @cb_func={0x18, 0x6, 0x4, 0x0, 0xfffffffffffffffc}, @ldst={0x1, 0x3, 0x2, 0x8, 0x7, 0xffffffffffffffff, 0x8}], &(0x7f0000000080)='syzkaller\x00', 0xfffffffe, 0xfefa, &(0x7f0000000240)=""/103, 0x41100, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000001c0)={0x0, 0x3}, 0x8, 0x10, &(0x7f00000002c0)={0x3, 0x5, 0xc7, 0xb}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000300)=[r2, r2, r2, r2, r2, r2], &(0x7f0000000340)=[{0x5, 0x5, 0x3, 0x2}, {0x3, 0x1, 0x3, 0x6}], 0x10, 0x80000001}, 0x94) 656.69707ms ago: executing program 2 (id=3273): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="14000000220001002dbd7000fddbdf2506000000"], 0x14}, 0x1, 0x0, 0x0, 0x200c0000}, 0x20000040) 644.691612ms ago: executing program 4 (id=3274): socket(0x10, 0x3, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="240000005e00250e000000000300000008007700", @ANYRES32=0x0, @ANYBLOB="4c00001003001e00"], 0x24}], 0x1}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001a00010000000000000000001c000000000000000000000014"], 0x30}}, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)={0x114, r1, 0xe701ac47a3d23ecd, 0x0, 0x2, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_MGMT_A_DOMAIN={0xce, 0x1, 'C\xec\xf8\xa0w\x15|\xd8\xbcs\xe1\xb93\x14\xcd\xcb\xb6\xb9\xbb\x84\xe5\xbc\xdb\x7f\x9a\xf2\xea\xcc\x91:v@\xe83-\x1d\xaagQl\x7f\tKt\fc\x1f\x17]\xd5\xd0\xf0\xa8\xeb\xd2g\x92\x04\x00\x00\x00od\xe6,\xd3@I\x17\xf3\xbees0\xad\xc6\xbf/*\xb6(o\x91t\x12\x93U6\xf4@n\xdc\xdc\x8a7y\x81FY\xbe\xbbc\xd2\xc3\x01\xa5\xe2V\x8c\xb3im~\xd2V\xdaG\xbdbF\xc8n\x86\xac\x9c\xfb\xda\xe2&\"\xb4:\x13\xe9\tc\x85\xb4\xcb\x17\xbfm\x846\xe7\x7fp\x9eCdb\xad;\xa2\x8fs\xbf6\xe8\xe3Xg3&\xe2 \xd6\n\x9d=~<\x93/\xaf\x89\x06+\x96]\xb5+\xee\xff8^D*\xdb\xb8\xd8t\x80\xd4\x8fK=E0\xe8R\x83'}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x37}}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x114}, 0x1, 0x0, 0x0, 0xa00}, 0x48880) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000080)=0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r5, 0x6, 0x4, &(0x7f0000000080)=0x6, 0x4) getsockopt$inet_mptcp_buf(r5, 0x6, 0x4, 0xfffffffffffffffd, &(0x7f0000000000)) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x2, &(0x7f00000000c0)=@gcm_128={{0x304}, "bd88818314ff7d84", "877dab43c700", "0200", "0100"}, 0x28) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NBD_CMD_STATUS(r0, &(0x7f0000000680)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x20, r6, 0x2, 0x70bd29, 0x25dfdbfc, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x8010) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r4) shutdown(r4, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEP_LINK_DOWN(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x53781461d7e2925e}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, r2, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x1}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4008024}, 0x50040) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000780)={'ip6tnl0\x00', &(0x7f0000000700)={'ip6tnl0\x00', 0x0, 0x4, 0x6, 0xf, 0x6, 0x24, @remote, @dev={0xfe, 0x80, '\x00', 0x28}, 0x40, 0x1, 0x8001, 0xffffffff}}) r8 = socket(0x10, 0x3, 0x0) r9 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f00000003c0)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0x4}, {0xb}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8084}, 0x4091) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000880)={'sit0\x00', &(0x7f00000007c0)={'erspan0\x00', 0x0, 0x8000, 0x20, 0x2, 0x400, {{0x25, 0x4, 0x1, 0x34, 0x94, 0x66, 0x3, 0xff, 0x2f, 0x0, @private=0xa010101, @local, {[@timestamp={0x44, 0x8, 0xc9, 0x0, 0x2, [0x1]}, @cipso={0x86, 0x35, 0xffffffffffffffff, [{0x2, 0x6, "63f4581f"}, {0x5, 0x9, "6af1931c3ee67a"}, {0x7, 0xf, "fdbfd225501e0f31ab2609e9fa"}, {0x6, 0x11, "f0653709f619a07d36b27340a270b4"}]}, @ra={0x94, 0x4}, @rr={0x7, 0xb, 0xe1, [@private=0xa010102, @broadcast]}, @timestamp_prespec={0x44, 0x34, 0xd8, 0x3, 0x0, [{@private=0xa010101, 0x7}, {@remote, 0x1}, {@multicast1, 0xffffffff}, {@multicast1, 0x1}, {@remote, 0x2}, {@private=0xa010101}]}]}}}}}) 501.91428ms ago: executing program 3 (id=3275): r0 = socket$can_j1939(0x1d, 0x2, 0x7) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) (async) r3 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r3, &(0x7f0000000080)={0x1d, r2, 0x5, {0x0, 0x0, 0x4}}, 0x18) r4 = socket$can_j1939(0x1d, 0x2, 0x7) r5 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f00000003c0)={0x1d, r6, 0xfffffffffffffdfd, {0x2, 0xff, 0x7}, 0xfd}, 0x18) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000280)={'vcan0\x00', 0x0}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x3, [@typedef={0x1, 0x0, 0x0, 0x8, 0x3}, @ptr, @type_tag={0x1, 0x0, 0x0, 0x12, 0x2}]}, {0x0, [0x2e]}}, 0x0, 0x3f, 0x0, 0x1}, 0x28) (async) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r7, 0xfffffffffffffffd, {0x1, 0xff, 0x4}, 0xfd}, 0x18) connect$can_j1939(r0, &(0x7f0000000080)={0x1d, r7, 0x0, {0x0, 0x0, 0x2}, 0xfe}, 0x18) (async) sendmsg$can_j1939(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) 433.308778ms ago: executing program 2 (id=3276): r0 = socket$netlink(0x10, 0x3, 0x4) openat$rfkill(0xffffffffffffff9c, &(0x7f0000002740), 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pselect6(0x40, &(0x7f0000000100), &(0x7f0000000000)={0x1f, 0x0, 0x3837, 0x0, 0xfffffffffffffffc, 0x0, 0x8}, 0x0, 0x0, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000440)="580000001400192340834b80040d8c560a067fbc45ff810500000000070058000b480400945f640094272d7061d328b92d0000000000008000f0fffeffe809000000fff5dd00000008000100040808004149004001040800", 0x58}], 0x1) ioctl$F2FS_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0xf50f, 0x0) socket$netlink(0x10, 0x3, 0x4) (async) openat$rfkill(0xffffffffffffff9c, &(0x7f0000002740), 0x0, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) pselect6(0x40, &(0x7f0000000100), &(0x7f0000000000)={0x1f, 0x0, 0x3837, 0x0, 0xfffffffffffffffc, 0x0, 0x8}, 0x0, 0x0, 0x0) (async) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000440)="580000001400192340834b80040d8c560a067fbc45ff810500000000070058000b480400945f640094272d7061d328b92d0000000000008000f0fffeffe809000000fff5dd00000008000100040808004149004001040800", 0x58}], 0x1) (async) ioctl$F2FS_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0xf50f, 0x0) (async) 401.867725ms ago: executing program 4 (id=3277): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = epoll_create1(0x0) (async) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) (async) sendmmsg$inet6(r2, &(0x7f0000000440)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x280020}, 0x1c, &(0x7f00000004c0)=[{&(0x7f0000000100)}], 0x1}}], 0x1, 0x20008050) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) (async) ppoll(&(0x7f0000000500)=[{r5}], 0x1, 0x0, 0x0, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x20040884}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@dellink={0x34, 0x11, 0x1, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1020, 0x40000}, [@IFLA_IFNAME={0x14, 0x3, 'veth1_vlan\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="7c010000190001000000000003000000e0000002000000000000000000000000f48000000000000000000000000000aa00000000000000000a00008000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000c4000500e0000001000000000000000000000000000004d53c00000002000000e00000010000000000000000000000000735000004030700080000000400000002000000fe80000000000000000000000000000c000004d36c00000002000000fe8800000000000000000000000001010135000002007300008000000400000007000000e0000002000000000000000000000000800000013c0000000a000000ac1414bb000000000000000000000000000000000101090008000000e700000007000000"], 0x17c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000100), 0xa, 0x0, 0x0) (async) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r4, &(0x7f0000000100)={0x20000014}) (async) r10 = socket$netlink(0x10, 0x3, 0x6) writev(r10, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0500000004000000080000000c00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000edd368c1e65048d64970de32616d7e48bf9d74a053ee84fbd12d85f7ef6497dd9ce2dc31152584d1fbf54787d6e8ade09b8b53dff30a3cf7d80e81f351bdb3bcd7228917e90b70fca3014129a9564a2533cdf098542d2b72d3f727b5b15ee196edabe396375e70c06d28f89f9d431dd01017ff43e59ebb1fdcb04291026f1aa5dd973d37883f382ca6ec71abeb535a93522bb4b72b05bfff729ce3c98d9b157dc942a560e7fccd1119f0e5407747c87e5d1359a77e3c689a50a08b881f5da3c29dc7742897398ba090cd1317759f8fb7968745db5850"], 0x50) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000008c0)={'veth1_to_bridge\x00', 0x0}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000010c0)={0xffffffffffffffff, 0xe0, &(0x7f0000001280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000600)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, &(0x7f0000000940)=[0x0], &(0x7f0000000980)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x78, &(0x7f0000000a00)=[{}], 0x8, 0x10, &(0x7f0000000a40), &(0x7f0000000a80), 0x8, 0x7d, 0x8, 0x8, &(0x7f0000000040)}}, 0x10) (async) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000001240)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001200)={&(0x7f0000001100)=ANY=[@ANYBLOB="98000000", @ANYRES16=0x0, @ANYBLOB="000025bd7000fddbdf25110000003800018008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="140002007665746830000000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="3c0001801400020070696d7265673000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="1400020069705f7674693000000000000000000008000100", @ANYRES32=r11, @ANYBLOB="040001800c000180080003000300000050402991fc6da00d4f17fca2d654df477057ef03c42b529e7d9fdf7f6f3d8eb614d3a7b139336db96ea34384336a614f12008672400b775f8070578628207df64b8c48abfca4af450ca7c40194dacaad"], 0x98}, 0x1, 0x0, 0x0, 0x4400c000}, 0x4000000) bpf$PROG_LOAD(0x5, &(0x7f0000010400)={0x11, 0x13, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000006000000000000000700000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b703000000000000850055090100000000009500000000000000185b000000000000000000000000000018360000010000000000000000000000bf91000000000000b7020000011e00008500000084000000b7000000000000009500000000008000"/128], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="5000000010000100"/20, @ANYRES32=0x0, @ANYBLOB="5d5b0000000000001c001a8018000a8014000700fe8000000000270000000000000000aa1400350077673100"/56], 0x50}}, 0x0) 388.827757ms ago: executing program 3 (id=3278): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xa4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000002140)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000800)="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", 0x21f}, {&(0x7f0000000300)="17e37d3e106d9beae191613d45501cb6a8d8eaeb96ee68b2d800ad34b8c528b97ead9f051e427e309b714d3d12d8d4010c04a27e6c586b3956f0dfc7086e9550bd651b9e019d7b671b231c7a8cbfd52bea572b327362fd4db8e4a162096a0464fd2529fc31f79947d137520a8823ae6f0c068c299db997db4d44cfd7657ea53a691a386f018286b4dbe415596964ab56a9c0d7280e592ad174e737a4e5e4cd560030a7380c37f6629e3da2d24a2b6b5ea407e3f075fbf8174a58b3ffeb4d2a0fc8f94fe18a75bc699e8cea7bf13ba6388dc9a8011dfba9b9fcd2a495a4fd80351d16", 0xe2}], 0x2}}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000640)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637808dde804a048fd8696e524b2934126c443ce93d82e931eb9918e6c08276", 0x62}], 0x1}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000001b00)="c779a881400f168b3cd3b9dcb8505d626656e6b4f5441fb27838fa6f26bfe21f20605b23fffe6978fe6148e25caa0c0f9b6e4434877b8978a5caa4c641dfe5b407dd88d709f6c3aaf2eb6d966f38806c79f63870496f06f64302d7f1292499f44695", 0x62}, {&(0x7f0000000540)="6f433f8987fc9e72c982b56a37a1c7b7ab31e2f6b098f57a62f9d8a98a9d4f7199", 0x21}, {&(0x7f00000005c0)="8e26189d110469a886116da338", 0xd}, {&(0x7f0000002240)="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", 0x587}], 0x4}}], 0x4, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000b00)=""/4096, 0x1000, 0x1, 0x0}, &(0x7f0000000180)=0x40) sendto$inet(r0, &(0x7f0000000580)="04", 0x1, 0x10008095, 0x0, 0x0) 260.551967ms ago: executing program 0 (id=3279): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000000203010400000000ffffffff000000000800010001"], 0x28}}, 0x0) ioctl$BTRFS_IOC_DEFRAG_RANGE(0xffffffffffffffff, 0x40309410, &(0x7f0000000080)={0x4, 0x1, 0x2, 0x8, 0x1, [0x2, 0x4, 0x2, 0x10001]}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha20\x00'}, 0x58) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1800002, 0x12, r2, 0x88fa6000) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000300)="c9", 0x1) r3 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'team_slave_0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @private0={0xfc, 0x0, '\x00', 0x1}, [], [0xff], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) r4 = socket$inet6(0xa, 0x3, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f00000003c0)={{{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in=@multicast1, 0x4e22, 0x0, 0x0, 0x3, 0x2, 0x0, 0x80}, {0x0, 0x200000004, 0x40000000007, 0x20000a0da, 0x100000000, 0x9, 0x200000003, 0x9}, {0x5, 0x0, 0x0, 0x400}, 0x1, 0x0, 0x1, 0x0, 0x6, 0x3}, {{@in=@broadcast, 0x4d3, 0x6c}, 0xa, @in=@empty, 0x3502, 0x1, 0x8, 0xf7, 0x9075, 0x7, 0x1}}, 0xe8) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x4}}}, 0x1c) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x4ea4, 0x0, @local, 0x9}, 0x1c) sendmsg(r3, &(0x7f00000000c0)={0x0, 0x953a, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xffd0}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000001435010026bd0c333c84df250a4022fe", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x40}, 0x1, 0x0, 0x0, 0x2000c800}, 0x0) r5 = socket$inet6(0x10, 0x3, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) r7 = accept4(r6, 0x0, 0x0, 0x800) r8 = socket$l2tp6(0xa, 0x2, 0x73) bind$inet6(r8, &(0x7f0000000340)={0xa, 0x4e21, 0x3, @mcast2, 0xb23}, 0x1c) sendmmsg$alg(r7, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000140)="b57523cb1a2c90d8acad2e2d98dfc9ea7a5843c3b63b683ced2b3266175599b779617e66e6b3e15c042be90635a2d36160bbf9a2edcacc0bbe015b84150a1928de94397894ff36aa430fc2a0814ba634308d6d0837250dfd1eca5383f9d151449743b1a0c4ffc51242a229c5d6d06f147a61d797ea7ffeda95b76f5623", 0x7d}, {&(0x7f00000001c0)="66f7", 0x2}, {&(0x7f0000000300)='l3', 0x2}], 0x3, 0x0, 0x0, 0x20000000}], 0x1, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r10, 0x8933, &(0x7f00000002c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000001400090509bd7000fddbdf25022000ed", @ANYRES32=r11, @ANYBLOB="080004006401010208000100640101010800020064010102080001007f00000108"], 0x48}, 0x1, 0x0, 0x0, 0x4040014}, 0x408c0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYRES16=r11], 0x18}}, 0x0) sendto$inet6(r5, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000002a30104000100000000000003eeef9b2534eb853800000009000200"], 0x20}, 0x1, 0x0, 0x0, 0x24000880}, 0x80) 260.293308ms ago: executing program 2 (id=3280): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x50400, 0x0) write$tun(r0, &(0x7f0000000040)={@val={0x0, 0xdada}, @val={0x0, 0x0, 0x5, 0x6, 0x9, 0x7}, @arp=@generic={0x321, 0x800, 0x6, 0x4, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x41}, "3a9a2d75"}}, 0x26) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$qrtr(0x2a, 0x2, 0x0) r3 = socket(0x28, 0xab81af9fcb36090a, 0x10001) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r3, 0x84, 0x1b, &(0x7f00000000c0)={0x0, 0xae, "79b25fa02fd5e305adb74a3c8a2fe8a9d869a878064d9513cd6a38c41b4f58385867e9f897151c443423544b8db350593f349768f26ca116edfcbb13316dd3f1cc831da9b151076c5be117a241e4caac129ac6212269dbea7d2818758581274fe362a93d6372ec6b9788f31eea76da047eeac382215c416b70da75cf4ed22bd3404d88fc4ed3c6f151c2417ab24558643aad5efbf2a860c5f66af0b86447cbc5355c338024dbd1da873cfcacb7e2"}, &(0x7f0000000180)=0xb6) ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000080)={'ip_vti0\x00', {0x2, 0x0, @empty}}) sendmsg$IPCTNL_MSG_EXP_DELETE(r1, &(0x7f0000006540)={0x0, 0x0, &(0x7f0000006500)={&(0x7f0000006380)={0x2c, 0x2, 0x2, 0x101, 0x0, 0x0, {0xa, 0x0, 0x2}, [@CTA_EXPECT_TUPLE={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @loopback}}}]}]}, 0x2c}}, 0x4000000) 258.625994ms ago: executing program 3 (id=3281): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000700)={0x60, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x11, 0x1, 0x0, 0xc}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x60}, 0x1, 0x0, 0x0, 0x40010}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000800)=ANY=[@ANYRES16=r3, @ANYRES16=r2, @ANYRESDEC=r0, @ANYRES32=r3], 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x1400c004) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000412ff8)="3665a1ab415b7ac7", 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket(0x10, 0x803, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x70bd28, 0x0, {0xa, 0x40, 0x0, 0x0, r7}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_FLAGS={0x8, 0x8, 0x300}]}, 0x34}}, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_FLAGS={0x8, 0x8, 0x610}]}, 0x34}}, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000200)={0x2c, 0x0, 0x1, 0x0, 0x0, {0x1c}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}]}, 0x2c}}, 0x0) r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="140100002800010004000000f8dbdf2503"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) r10 = accept(r4, 0x0, 0x0) sendmmsg$alg(r10, &(0x7f0000000740)=[{0x0, 0x0, &(0x7f0000000000), 0x1, &(0x7f0000000480)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="0a57a2a4", @ANYRES16=r12, @ANYBLOB="05000000000000000000460000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008e00030000000c008f000000000000000000030090000000000000000000"], 0x54}}, 0x0) recvmsg(r10, &(0x7f000000b680)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f000000b4c0)=""/5, 0x5}, {&(0x7f000000b500)=""/153, 0x99}, {&(0x7f0000000000)=""/100, 0x64}], 0x3}, 0x0) 176.72329ms ago: executing program 4 (id=3282): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x319e01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000006080)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd21, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x2, 0x8}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8848}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) recvfrom$inet6(r4, 0x0, 0x0, 0x2002, 0x0, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0xc, 0xc}, {0x0, 0xfff1}, {0xfff2, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x4041080) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x34}}, 0x0) syz_genetlink_get_family_id$batadv(0x0, r7) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r8, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r8, &(0x7f0000000000)="0a000000010001", 0x7) connect$tipc(0xffffffffffffffff, &(0x7f0000000040)=@name={0x1e, 0x2, 0x1, {{0x42, 0x4}, 0x7}}, 0x10) socket$inet_icmp(0x2, 0x2, 0x1) bpf$ENABLE_STATS(0x20, 0x0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="bbbbbbbbbbbb50a245d5cde0080045000028000000000002907800000000ffffffff11e0917800000000008100010000000000000000"], 0x0) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@remote, @in=@local, 0x0, 0x5, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}}, 0xb8}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0), 0xc) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r10, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e20, @private=0xa010101}]}, &(0x7f0000000180)=0x10) 91.246952ms ago: executing program 2 (id=3283): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e22, 0x100, @mcast2, 0x24003}, 0x1c) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) getsockopt$IP_VS_SO_GET_VERSION(r2, 0x0, 0x480, &(0x7f00000002c0), &(0x7f0000000300)=0x40) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001980)=[{{0x0, 0x0, &(0x7f0000001300)=[{0x0}, {&(0x7f0000000100)=""/224, 0xe0}], 0x2}}], 0x1, 0x0, 0x0) r6 = socket$unix(0x1, 0x2, 0x0) bind$unix(r6, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmsg$unix(r6, &(0x7f00000000c0)={&(0x7f0000000200)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x303de1f53b11ae}, 0x20008840) setsockopt$SO_TIMESTAMP(r6, 0x1, 0x1d, &(0x7f0000000080)=0x7, 0x4) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x41, &(0x7f0000000040)=0x4ff, 0x4) recvmmsg(r6, &(0x7f0000000c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/57, 0x39}, 0x8}], 0x3ffffffffffff2e, 0x1000400000de, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=@newqdisc={0x3c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}, @TCA_RATE={0x6, 0x5, {0x7d, 0x5}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240480dd}, 0x0) connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r0, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x400000000000284, 0xf00) r10 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r10, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r10, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6, 0x5, 0x0, 0xfffffc}]}, 0x10) 310.459µs ago: executing program 3 (id=3284): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x94) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000540)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r2 = accept4(r1, 0x0, 0x0, 0x80800) sendmsg$key(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={0x2, 0xd, 0x47, 0x0, 0x2, 0x0, 0x70bd2d, 0x25dfdbfd}, 0x10}}, 0x20000000) recvmsg$can_raw(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000000)=""/29, 0x1d}], 0x1}, 0xf0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='writeback_bdi_register\x00', r0, 0x0, 0xfffffffffffffffe}, 0x5f) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0) 0s ago: executing program 0 (id=3285): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x421, 0x4, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad, 0x26d2}, [@IFLA_GSO_MAX_SEGS={0x8, 0x28, 0xa760}]}, 0x28}, 0x1, 0x0, 0x0, 0x132ffec8484dadb3}, 0xc080) kernel console output (not intermixed with test programs): ered allmulticast mode [ 256.865419][T13219] syzkaller0: entered promiscuous mode [ 256.871096][T13219] syzkaller0: entered allmulticast mode [ 256.909911][T13212] tipc: Resetting bearer [ 256.921389][T13211] tipc: Resetting bearer [ 256.943121][T13211] tipc: Disabling bearer [ 256.993232][T13219] sch_tbf: burst 3 is lower than device syzkaller0 mtu (1514) ! [ 257.267153][T13228] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1966'. [ 257.276993][T13227] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1966'. [ 257.618925][T13244] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1970'. [ 257.646148][T13244] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1970'. [ 257.723340][T13254] veth0: entered allmulticast mode [ 257.995725][T13276] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1978'. [ 258.027545][T13276] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1978'. [ 258.549103][T13249] syz.4.1969: vmalloc error: size 6291456, failed to allocated page array size 12288, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 258.567762][T13249] CPU: 1 UID: 0 PID: 13249 Comm: syz.4.1969 Not tainted syzkaller #0 PREEMPT(full) [ 258.567787][T13249] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 258.567799][T13249] Call Trace: [ 258.567806][T13249] [ 258.567813][T13249] dump_stack_lvl+0x189/0x250 [ 258.567834][T13249] ? __pfx_dump_stack_lvl+0x10/0x10 [ 258.567847][T13249] ? __pfx__printk+0x10/0x10 [ 258.567858][T13249] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 258.567872][T13249] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 258.567886][T13249] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 258.567901][T13249] warn_alloc+0x214/0x310 [ 258.567920][T13249] ? __pfx_warn_alloc+0x10/0x10 [ 258.567939][T13249] ? __get_vm_area_node+0x28f/0x300 [ 258.567953][T13249] ? hash_ipportip6_resize+0x1e4/0x1cc0 [ 258.567968][T13249] __vmalloc_node_range_noprof+0x690/0x12d0 [ 258.567983][T13249] ? __alloc_frozen_pages_noprof+0x9f/0x370 [ 258.568008][T13249] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 258.568021][T13249] ? hash_ipportip6_resize+0x1e4/0x1cc0 [ 258.568034][T13249] ? rcu_is_watching+0x15/0xb0 [ 258.568047][T13249] ? hash_ipportip6_resize+0x1e4/0x1cc0 [ 258.568057][T13249] __kvmalloc_node_noprof+0x674/0x910 [ 258.568072][T13249] ? hash_ipportip6_resize+0x1e4/0x1cc0 [ 258.568088][T13249] hash_ipportip6_resize+0x1e4/0x1cc0 [ 258.568104][T13249] ? __pfx_hash_ipportip6_uadt+0x10/0x10 [ 258.568123][T13249] ? call_ad+0x2d4/0xb00 [ 258.568138][T13249] call_ad+0x44e/0xb00 [ 258.568155][T13249] ? __pfx_call_ad+0x10/0x10 [ 258.568178][T13249] ? __nla_parse+0x40/0x60 [ 258.568192][T13249] ip_set_ad+0x791/0x930 [ 258.568209][T13249] ? __pfx_ip_set_ad+0x10/0x10 [ 258.568219][T13249] ? __lock_acquire+0xab9/0xd20 [ 258.568252][T13249] nfnetlink_rcv_msg+0xb4d/0x1130 [ 258.568263][T13249] ? unwind_get_return_address+0x4d/0x90 [ 258.568275][T13249] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 258.568288][T13249] ? nfnetlink_rcv_msg+0x20d/0x1130 [ 258.568309][T13249] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 258.568348][T13249] netlink_rcv_skb+0x208/0x470 [ 258.568362][T13249] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 258.568374][T13249] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 258.568393][T13249] ? bpf_lsm_capable+0x9/0x20 [ 258.568405][T13249] ? security_capable+0x7e/0x2e0 [ 258.568423][T13249] nfnetlink_rcv+0x282/0x2590 [ 258.568434][T13249] ? __local_bh_enable_ip+0x12d/0x1c0 [ 258.568445][T13249] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 258.568465][T13249] ? __dev_queue_xmit+0x2ab/0x3180 [ 258.568478][T13249] ? __dev_queue_xmit+0x2ab/0x3180 [ 258.568492][T13249] ? __dev_queue_xmit+0x1987/0x3180 [ 258.568504][T13249] ? do_syscall_64+0xfa/0xfa0 [ 258.568521][T13249] ? __dev_queue_xmit+0x2ab/0x3180 [ 258.568537][T13249] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 258.568552][T13249] ? __pfx___dev_queue_xmit+0x10/0x10 [ 258.568569][T13249] ? ref_tracker_free+0x63a/0x7d0 [ 258.568579][T13249] ? __asan_memcpy+0x40/0x70 [ 258.568592][T13249] ? __pfx_ref_tracker_free+0x10/0x10 [ 258.568612][T13249] ? skb_clone+0x246/0x3a0 [ 258.568627][T13249] ? __netlink_deliver_tap+0x807/0x850 [ 258.568639][T13249] ? netlink_deliver_tap+0x2e/0x1b0 [ 258.568655][T13249] ? netlink_deliver_tap+0x2e/0x1b0 [ 258.568672][T13249] netlink_unicast+0x82f/0x9e0 [ 258.568688][T13249] ? __pfx_netlink_unicast+0x10/0x10 [ 258.568700][T13249] ? netlink_sendmsg+0x642/0xb30 [ 258.568711][T13249] ? skb_put+0x11b/0x210 [ 258.568725][T13249] netlink_sendmsg+0x805/0xb30 [ 258.568742][T13249] ? __pfx_netlink_sendmsg+0x10/0x10 [ 258.568757][T13249] ? aa_sock_msg_perm+0xf1/0x1d0 [ 258.568772][T13249] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 258.568782][T13249] ? __pfx_netlink_sendmsg+0x10/0x10 [ 258.568794][T13249] __sock_sendmsg+0x21c/0x270 [ 258.568812][T13249] ____sys_sendmsg+0x505/0x830 [ 258.568827][T13249] ? __pfx_____sys_sendmsg+0x10/0x10 [ 258.568845][T13249] ? import_iovec+0x74/0xa0 [ 258.568860][T13249] ___sys_sendmsg+0x21f/0x2a0 [ 258.568874][T13249] ? __pfx____sys_sendmsg+0x10/0x10 [ 258.568907][T13249] ? __fget_files+0x2a/0x420 [ 258.568917][T13249] ? __fget_files+0x3a0/0x420 [ 258.568933][T13249] __x64_sys_sendmsg+0x19b/0x260 [ 258.568947][T13249] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 258.568969][T13249] ? do_syscall_64+0xbe/0xfa0 [ 258.568984][T13249] do_syscall_64+0xfa/0xfa0 [ 258.568996][T13249] ? lockdep_hardirqs_on+0x9c/0x150 [ 258.569009][T13249] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 258.569019][T13249] ? clear_bhb_loop+0x60/0xb0 [ 258.569031][T13249] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 258.569041][T13249] RIP: 0033:0x7f8f3218f749 [ 258.569052][T13249] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 258.569061][T13249] RSP: 002b:00007f8f33067038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 258.569072][T13249] RAX: ffffffffffffffda RBX: 00007f8f323e6180 RCX: 00007f8f3218f749 [ 258.569080][T13249] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000007 [ 258.569086][T13249] RBP: 00007f8f32213f91 R08: 0000000000000000 R09: 0000000000000000 [ 258.569092][T13249] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 258.569098][T13249] R13: 00007f8f323e6218 R14: 00007f8f323e6180 R15: 00007ffcdd589c58 [ 258.569116][T13249] [ 258.569209][T13249] Mem-Info: [ 259.080543][T13249] active_anon:7403 inactive_anon:0 isolated_anon:0 [ 259.080543][T13249] active_file:3279 inactive_file:39956 isolated_file:0 [ 259.080543][T13249] unevictable:768 dirty:154 writeback:0 [ 259.080543][T13249] slab_reclaimable:12331 slab_unreclaimable:118819 [ 259.080543][T13249] mapped:34673 shmem:4756 pagetables:992 [ 259.080543][T13249] sec_pagetables:0 bounce:0 [ 259.080543][T13249] kernel_misc_reclaimable:0 [ 259.080543][T13249] free:1297371 free_pcp:18085 free_cma:0 [ 259.161720][T13249] Node 0 active_anon:29728kB inactive_anon:0kB active_file:13116kB inactive_file:159616kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:138744kB dirty:672kB writeback:0kB shmem:17492kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13776kB pagetables:3664kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 259.219240][T13249] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:140kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 259.260223][T13249] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 259.314266][T13249] lowmem_reserve[]: 0 2504 2504 2504 2504 [ 259.322414][T13249] Node 0 DMA32 free:1283324kB boost:0kB min:34308kB low:42884kB high:51460kB reserved_highatomic:0KB free_highatomic:0KB active_anon:29928kB inactive_anon:0kB active_file:13116kB inactive_file:159616kB unevictable:1536kB writepending:672kB zspages:0kB present:3129332kB managed:2564988kB mlocked:0kB bounce:0kB free_pcp:53352kB local_pcp:32508kB free_cma:0kB [ 259.393173][T13315] netlink: 'syz.0.1989': attribute type 58 has an invalid length. [ 259.406534][T13249] lowmem_reserve[]: 0 0 0 0 0 [ 259.411302][T13249] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 259.411870][T13315] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1989'. [ 259.468610][T13320] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1990'. [ 259.472130][T13249] lowmem_reserve[]: 0 0 0 0 0 [ 259.482971][T13249] Node 1 Normal free:3890788kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:19932kB local_pcp:11660kB free_cma:0kB [ 259.515820][T13249] lowmem_reserve[]: 0 0 0 0 0 [ 259.524647][T13249] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 259.538709][T13249] Node 0 DMA32: 41*4kB (UE) 755*8kB (UME) 656*16kB (UME) 920*32kB (UME) 281*64kB (UM) 110*128kB (UME) 54*256kB (UME) 26*512kB (UME) 16*1024kB (UM) 1*2048kB (E) 283*4096kB (UM) = 1282940kB [ 259.558138][T13249] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 259.570021][T13249] Node 1 Normal: 195*4kB (UE) 67*8kB (UME) 34*16kB (UME) 99*32kB (UME) 25*64kB (UME) 9*128kB (UME) 6*256kB (UME) 3*512kB (ME) 3*1024kB (UME) 1*2048kB (U) 946*4096kB (M) = 3890788kB [ 259.588567][T13249] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 259.599884][T13249] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 259.609324][T13249] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 259.619040][T13249] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 259.628499][T13249] 47989 total pagecache pages [ 259.633443][T13249] 0 pages in swap cache [ 259.637797][T13249] Free swap = 124996kB [ 259.641954][T13249] Total swap = 124996kB [ 259.646335][T13249] 2097051 pages RAM [ 259.650325][T13249] 0 pages HighMem/MovableOnly [ 259.655348][T13249] 424162 pages reserved [ 259.659596][T13249] 0 pages cma reserved [ 259.771391][T13326] netlink: 10 bytes leftover after parsing attributes in process `syz.0.1993'. [ 259.806891][T13325] tipc: Enabled bearer , priority 0 [ 259.829942][T13325] syzkaller0: entered promiscuous mode [ 259.845378][T13325] syzkaller0: entered allmulticast mode [ 259.949593][T13325] tipc: Resetting bearer [ 260.008018][T13323] tipc: Resetting bearer [ 260.046878][T13323] tipc: Disabling bearer [ 260.307384][T13354] syzkaller0: entered promiscuous mode [ 260.312894][T13354] syzkaller0: entered allmulticast mode [ 260.349598][T13358] lo speed is unknown, defaulting to 1000 [ 260.359159][T13358] wg1 speed is unknown, defaulting to 1000 [ 260.460360][T13361] lo speed is unknown, defaulting to 1000 [ 260.480986][T13361] wg1 speed is unknown, defaulting to 1000 [ 260.901499][T13375] lo speed is unknown, defaulting to 1000 [ 260.922748][T13375] wg1 speed is unknown, defaulting to 1000 [ 261.640302][T13404] dummy0 (unregistering): left allmulticast mode [ 261.814870][T13412] __nla_validate_parse: 16 callbacks suppressed [ 261.814890][T13412] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2016'. [ 262.443867][T13433] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2019'. [ 262.938762][T13445] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2023'. [ 263.006696][T13446] netlink: 'syz.3.2023': attribute type 29 has an invalid length. [ 263.015179][T13446] netlink: 'syz.3.2023': attribute type 29 has an invalid length. [ 263.044642][T13445] netlink: 'syz.3.2023': attribute type 29 has an invalid length. [ 263.051999][T13446] netlink: 548 bytes leftover after parsing attributes in process `syz.3.2023'. [ 263.186471][T13452] syzkaller0: entered promiscuous mode [ 263.208437][T13452] syzkaller0: entered allmulticast mode [ 263.867956][T13498] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2036'. [ 264.231268][T13520] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2045'. [ 264.408697][T13530] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2046'. [ 265.017377][T13546] lo speed is unknown, defaulting to 1000 [ 265.047599][T13546] wg1 speed is unknown, defaulting to 1000 [ 265.457568][T13553] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2051'. [ 265.738226][T13566] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2055'. [ 265.747338][T13566] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2055'. [ 265.756604][T13566] netlink: 'syz.1.2055': attribute type 1 has an invalid length. [ 265.774923][T13560] veth0_to_hsr: Caught tx_queue_len zero misconfig [ 265.784952][T13566] block nbd2: Unsupported socket: should be TCP or UNIX. [ 266.092150][T13580] FAULT_INJECTION: forcing a failure. [ 266.092150][T13580] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 266.138861][T13580] CPU: 0 UID: 0 PID: 13580 Comm: syz.0.2060 Not tainted syzkaller #0 PREEMPT(full) [ 266.138889][T13580] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 266.138900][T13580] Call Trace: [ 266.138907][T13580] [ 266.138915][T13580] dump_stack_lvl+0x189/0x250 [ 266.138943][T13580] ? __pfx____ratelimit+0x10/0x10 [ 266.138972][T13580] ? __pfx_dump_stack_lvl+0x10/0x10 [ 266.138993][T13580] ? __pfx__printk+0x10/0x10 [ 266.139012][T13580] ? __might_fault+0xb0/0x130 [ 266.139047][T13580] should_fail_ex+0x414/0x560 [ 266.139076][T13580] _copy_from_user+0x2d/0xb0 [ 266.139099][T13580] __sys_bpf+0x1e3/0x860 [ 266.139120][T13580] ? __pfx___sys_bpf+0x10/0x10 [ 266.139154][T13580] ? ksys_write+0x22a/0x250 [ 266.139179][T13580] ? __pfx_ksys_write+0x10/0x10 [ 266.139208][T13580] __x64_sys_bpf+0x7c/0x90 [ 266.139232][T13580] do_syscall_64+0xfa/0xfa0 [ 266.139252][T13580] ? lockdep_hardirqs_on+0x9c/0x150 [ 266.139273][T13580] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 266.139290][T13580] ? clear_bhb_loop+0x60/0xb0 [ 266.139311][T13580] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 266.139327][T13580] RIP: 0033:0x7f036f18f749 [ 266.139344][T13580] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 266.139359][T13580] RSP: 002b:00007f0370024038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 266.139378][T13580] RAX: ffffffffffffffda RBX: 00007f036f3e5fa0 RCX: 00007f036f18f749 [ 266.139391][T13580] RDX: 0000000000000094 RSI: 0000200000000240 RDI: 0000000000000005 [ 266.139402][T13580] RBP: 00007f0370024090 R08: 0000000000000000 R09: 0000000000000000 [ 266.139414][T13580] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 266.139424][T13580] R13: 00007f036f3e6038 R14: 00007f036f3e5fa0 R15: 00007ffd298f53e8 [ 266.139456][T13580] [ 266.635143][T13583] 8021q: adding VLAN 0 to HW filter on device bond0 [ 266.642661][T13583] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 266.692926][T13593] ip6tnl2: entered allmulticast mode [ 266.716462][T13593] sctp: [Deprecated]: syz.4.2064 (pid 13593) Use of struct sctp_assoc_value in delayed_ack socket option. [ 266.716462][T13593] Use struct sctp_sack_info instead [ 266.818181][T13602] __nla_validate_parse: 2 callbacks suppressed [ 266.818199][T13602] netlink: 7 bytes leftover after parsing attributes in process `syz.2.2066'. [ 266.867166][T13602] netlink: 7 bytes leftover after parsing attributes in process `syz.2.2066'. [ 267.128737][T13615] syzkaller0: entered promiscuous mode [ 267.144457][T13615] syzkaller0: entered allmulticast mode [ 267.263147][T13632] sch_tbf: burst 3 is lower than device syzkaller0 mtu (1514) ! [ 267.289569][T13635] FAULT_INJECTION: forcing a failure. [ 267.289569][T13635] name failslab, interval 1, probability 0, space 0, times 0 [ 267.309197][T13635] CPU: 1 UID: 0 PID: 13635 Comm: syz.4.2073 Not tainted syzkaller #0 PREEMPT(full) [ 267.309223][T13635] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 267.309233][T13635] Call Trace: [ 267.309239][T13635] [ 267.309247][T13635] dump_stack_lvl+0x189/0x250 [ 267.309275][T13635] ? __pfx____ratelimit+0x10/0x10 [ 267.309297][T13635] ? __pfx_dump_stack_lvl+0x10/0x10 [ 267.309318][T13635] ? __pfx__printk+0x10/0x10 [ 267.309341][T13635] ? __pfx___might_resched+0x10/0x10 [ 267.309358][T13635] ? fs_reclaim_acquire+0x7d/0x100 [ 267.309378][T13635] should_fail_ex+0x414/0x560 [ 267.309406][T13635] should_failslab+0xa8/0x100 [ 267.309426][T13635] __kmalloc_cache_node_noprof+0x74/0x6f0 [ 267.309451][T13635] ? __get_vm_area_node+0x13f/0x300 [ 267.309478][T13635] __get_vm_area_node+0x13f/0x300 [ 267.309503][T13635] __vmalloc_node_range_noprof+0x30c/0x12d0 [ 267.309526][T13635] ? bpf_prog_alloc_no_stats+0x4a/0x4d0 [ 267.309546][T13635] ? __lock_acquire+0xab9/0xd20 [ 267.309575][T13635] ? __lock_acquire+0xab9/0xd20 [ 267.309597][T13635] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 267.309623][T13635] ? __might_fault+0xb0/0x130 [ 267.309653][T13635] ? bpf_prog_alloc_no_stats+0x4a/0x4d0 [ 267.309669][T13635] __vmalloc_noprof+0xb1/0xf0 [ 267.309691][T13635] ? bpf_prog_alloc_no_stats+0x4a/0x4d0 [ 267.309710][T13635] bpf_prog_alloc_no_stats+0x4a/0x4d0 [ 267.309732][T13635] bpf_prog_alloc+0x3c/0x1a0 [ 267.309751][T13635] bpf_prog_load+0x735/0x19e0 [ 267.309782][T13635] ? __pfx_bpf_prog_load+0x10/0x10 [ 267.309822][T13635] ? bpf_lsm_bpf+0x9/0x20 [ 267.309846][T13635] ? security_bpf+0x7e/0x300 [ 267.309870][T13635] __sys_bpf+0x507/0x860 [ 267.309889][T13635] ? __pfx___sys_bpf+0x10/0x10 [ 267.309923][T13635] ? ksys_write+0x22a/0x250 [ 267.309948][T13635] ? __pfx_ksys_write+0x10/0x10 [ 267.309975][T13635] __x64_sys_bpf+0x7c/0x90 [ 267.309999][T13635] do_syscall_64+0xfa/0xfa0 [ 267.310016][T13635] ? lockdep_hardirqs_on+0x9c/0x150 [ 267.310033][T13635] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 267.310046][T13635] ? clear_bhb_loop+0x60/0xb0 [ 267.310062][T13635] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 267.310077][T13635] RIP: 0033:0x7f8f3218f749 [ 267.310090][T13635] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 267.310104][T13635] RSP: 002b:00007f8f330a9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 267.310123][T13635] RAX: ffffffffffffffda RBX: 00007f8f323e5fa0 RCX: 00007f8f3218f749 [ 267.310135][T13635] RDX: 0000000000000094 RSI: 0000200000000240 RDI: 0000000000000005 [ 267.310145][T13635] RBP: 00007f8f330a9090 R08: 0000000000000000 R09: 0000000000000000 [ 267.310155][T13635] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 267.310165][T13635] R13: 00007f8f323e6038 R14: 00007f8f323e5fa0 R15: 00007ffcdd589c58 [ 267.310193][T13635] [ 267.638265][T13637] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2074'. [ 267.857260][T13644] netlink: 'syz.4.2077': attribute type 21 has an invalid length. [ 267.873572][T13644] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2077'. [ 268.441538][T13673] netlink: 'syz.4.2084': attribute type 1 has an invalid length. [ 268.710623][T13686] syzkaller0: entered promiscuous mode [ 268.720787][T13688] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2090'. [ 268.730995][T13686] syzkaller0: entered allmulticast mode [ 268.797482][T13686] sch_tbf: burst 3 is lower than device syzkaller0 mtu (1514) ! [ 268.967237][T13698] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2092'. [ 268.994734][T13700] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2091'. [ 269.008698][T13698] bond0: option fail_over_mac: unable to set because the bond device has slaves [ 269.158012][T13695] bond7 (unregistering): Released all slaves [ 269.301946][T13710] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2096'. [ 269.607556][T13729] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2104'. [ 269.622431][T13727] syzkaller0: entered promiscuous mode [ 269.630092][T13727] syzkaller0: entered allmulticast mode [ 269.661714][T13727] sch_tbf: burst 3 is lower than device syzkaller0 mtu (1514) ! [ 269.787481][T13732] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.2105'. [ 270.015516][T13741] xt_connbytes: Forcing CT accounting to be enabled [ 270.668860][T13770] lo: Caught tx_queue_len zero misconfig [ 271.588691][T13810] syzkaller0: entered promiscuous mode [ 271.594202][T13810] syzkaller0: entered allmulticast mode [ 271.600010][T12561] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 271.833876][T13821] lo speed is unknown, defaulting to 1000 [ 271.857200][T13829] erspan0: left allmulticast mode [ 271.872623][T13829] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 271.884237][T13831] __nla_validate_parse: 3 callbacks suppressed [ 271.884253][T13831] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2130'. [ 271.913991][T13831] netlink: 'syz.2.2130': attribute type 1 has an invalid length. [ 271.973002][T13821] wg1 speed is unknown, defaulting to 1000 [ 272.026784][T13838] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2130'. [ 272.089577][T13838] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 272.186168][T13844] bond8: option ad_user_port_key: invalid value (65535) [ 272.193350][T13844] bond8: option ad_user_port_key: allowed values 0 - 1023 [ 272.223333][T13844] bond8 (unregistering): Released all slaves [ 272.267911][T13827] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2126'. [ 272.408402][T13833] lo speed is unknown, defaulting to 1000 [ 272.474784][T13833] wg1 speed is unknown, defaulting to 1000 [ 272.523297][T13856] tipc: Enabled bearer , priority 0 [ 272.567488][T13856] syzkaller0: entered promiscuous mode [ 272.573050][T13856] syzkaller0: entered allmulticast mode [ 272.626559][T13860] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2135'. [ 272.669176][T13856] tipc: Resetting bearer [ 272.679091][T13855] tipc: Resetting bearer [ 272.702729][T13864] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2135'. [ 272.717156][T13855] tipc: Disabling bearer [ 272.738311][ T3577] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 272.902519][T13877] netlink: 'syz.0.2138': attribute type 4 has an invalid length. [ 272.939626][T13877] netlink: 'syz.0.2138': attribute type 4 has an invalid length. [ 272.971560][T13877] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2138'. [ 273.013009][T13879] 8021q: VLANs not supported on syzkaller1 [ 273.122793][T13880] lo speed is unknown, defaulting to 1000 [ 273.279712][T13880] wg1 speed is unknown, defaulting to 1000 [ 273.727076][T13898] macsec1: entered allmulticast mode [ 273.732542][T13898] macsec0: entered allmulticast mode [ 273.741455][T13898] gretap0: entered allmulticast mode [ 273.878113][T12561] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 274.197971][T13890] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 274.432323][T13919] syzkaller0: entered promiscuous mode [ 274.445258][T13919] syzkaller0: entered allmulticast mode [ 274.506246][T13919] sch_tbf: burst 3 is lower than device syzkaller0 mtu (1514) ! [ 274.996420][T12550] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 275.070177][T13949] batadv2: entered promiscuous mode [ 275.103091][T13952] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2161'. [ 275.215362][T13949] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2160'. [ 275.404926][T13959] lo speed is unknown, defaulting to 1000 [ 275.419472][T13965] digital: digital_start_poll: Unknown protocol [ 275.438707][T13959] wg1 speed is unknown, defaulting to 1000 [ 275.642476][T13970] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2165'. [ 275.733927][T13973] x_tables: ip_tables: recent.0 match: invalid size 216 (kernel) != (user) 4096 [ 275.799192][T13975] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2164'. [ 276.026087][T13982] syzkaller0: entered promiscuous mode [ 276.032973][T13982] syzkaller0: entered allmulticast mode [ 276.175668][T12550] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 276.214202][T13989] sch_tbf: burst 3 is lower than device syzkaller0 mtu (1514) ! [ 276.574896][T14012] xt_CT: You must specify a L4 protocol and not use inversions on it [ 276.586508][T14005] netlink: 'syz.4.2172': attribute type 4 has an invalid length. [ 276.595246][T14002] netlink: 'syz.4.2172': attribute type 4 has an invalid length. [ 276.639699][T14015] xt_CT: You must specify a L4 protocol and not use inversions on it [ 276.662651][T14013] netlink: zone id is out of range [ 276.667888][T14013] netlink: zone id is out of range [ 276.673074][T14013] netlink: zone id is out of range [ 276.678727][T14013] netlink: zone id is out of range [ 276.683983][T14013] netlink: get zone limit has 4 unknown bytes [ 276.697243][T14012] netlink: 'syz.0.2175': attribute type 1 has an invalid length. [ 276.970044][T14026] lo speed is unknown, defaulting to 1000 [ 276.979485][T14026] wg1 speed is unknown, defaulting to 1000 [ 277.154056][T14030] netlink: 'syz.2.2178': attribute type 12 has an invalid length. [ 277.297126][T12550] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 277.399186][T14038] __nla_validate_parse: 4 callbacks suppressed [ 277.399203][T14038] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2181'. [ 277.479779][T14043] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2185'. [ 277.494296][T14043] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2185'. [ 277.638168][T14057] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 277.789532][T14064] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2189'. [ 277.801067][T14064] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2189'. [ 277.849971][T14064] netlink: 'syz.4.2189': attribute type 11 has an invalid length. [ 277.864366][T14067] IPVS: set_ctl: invalid protocol: 135 255.255.255.255:20000 [ 277.883720][T14066] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2190'. [ 277.914247][T14067] IPVS: set_ctl: invalid protocol: 41 0.0.0.0:20001 [ 277.984838][T14071] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2193'. [ 278.019435][T14074] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 278.045318][T14072] ip6tnl1: entered promiscuous mode [ 278.051551][T14076] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2195'. [ 278.063002][T14072] ip6tnl1: entered allmulticast mode [ 278.436341][T12552] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 278.620829][T14108] netlink: 'syz.4.2202': attribute type 1 has an invalid length. [ 278.661817][T14108] netlink: 228 bytes leftover after parsing attributes in process `syz.4.2202'. [ 278.686694][T14112] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2202'. [ 278.840742][T14104] syzkaller0: entered promiscuous mode [ 278.880995][T14104] syzkaller0: entered allmulticast mode [ 278.937502][T14126] Set syz1 is full, maxelem 0 reached [ 279.019402][T14125] gretap0: entered promiscuous mode [ 279.027180][T14125] gretap0: left promiscuous mode [ 279.547238][T12552] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 280.482773][T14143] netlink: 'syz.2.2212': attribute type 1 has an invalid length. [ 280.491953][T14143] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 280.539521][T14149] netlink: 'syz.1.2213': attribute type 1 has an invalid length. [ 280.548150][T14149] netlink: 'syz.1.2213': attribute type 7 has an invalid length. [ 280.556122][T14149] netlink: 'syz.1.2213': attribute type 8 has an invalid length. [ 280.564847][T14149] netlink: 'syz.1.2213': attribute type 2 has an invalid length. [ 280.574369][T14149] netlink: 'syz.1.2213': attribute type 1 has an invalid length. [ 280.655583][T12550] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 280.677072][T14155] syz_tun: entered allmulticast mode [ 280.687946][T14150] syz_tun: left allmulticast mode [ 281.421111][T14219] syzkaller0: entered promiscuous mode [ 281.432477][T14219] syzkaller0: entered allmulticast mode [ 281.473905][T14219] sch_tbf: burst 3 is lower than device syzkaller0 mtu (1514) ! [ 281.740674][T14254] sctp: [Deprecated]: syz.0.2230 (pid 14254) Use of int in max_burst socket option. [ 281.740674][T14254] Use struct sctp_assoc_value instead [ 281.765565][T14256] openvswitch: netlink: IP tunnel dst address not specified [ 281.803691][T14256] ipvlan2: entered promiscuous mode [ 281.809037][T14256] ipvlan2: entered allmulticast mode [ 281.818048][T14256] geneve1: entered allmulticast mode [ 281.937974][T14266] xt_ecn: cannot match TCP bits for non-tcp packets [ 282.426720][T14288] __nla_validate_parse: 10 callbacks suppressed [ 282.426739][T14288] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2238'. [ 282.623676][T14298] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2241'. [ 283.206540][T14325] netlink: 'syz.3.2244': attribute type 1 has an invalid length. [ 283.241533][T14325] 8021q: adding VLAN 0 to HW filter on device bond8 [ 283.579732][T14345] tipc: Enabling of bearer rejected, failed to enable media [ 283.617677][T14345] syzkaller0: entered promiscuous mode [ 283.630688][T14345] syzkaller0: entered allmulticast mode [ 283.677573][T14342] lo speed is unknown, defaulting to 1000 [ 283.688112][T14345] sch_tbf: burst 3 is lower than device syzkaller0 mtu (1514) ! [ 283.770598][T14342] wg1 speed is unknown, defaulting to 1000 [ 283.800315][T14350] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2256'. [ 283.834280][T14350] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2256'. [ 283.911036][T14350] netlink: 'syz.1.2256': attribute type 1 has an invalid length. [ 284.045577][T14350] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2256'. [ 284.064080][T14352] bond7: (slave veth5): Enslaving as an active interface with a down link [ 284.077136][T14355] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2257'. [ 284.114236][T14350] 8021q: adding VLAN 0 to HW filter on device bond7 [ 284.369237][T14369] openvswitch: netlink: Flow key attr not present in new flow. [ 284.400839][T14366] bond8: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 284.464439][T14366] bond8 (unregistering): Released all slaves [ 284.632400][T14375] netlink: 96 bytes leftover after parsing attributes in process `syz.4.2262'. [ 284.762795][T14386] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2263'. [ 284.811918][T14386] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2263'. [ 284.862441][T14386] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2263'. [ 284.909045][T14390] No such timeout policy "syz0" [ 284.916746][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 284.925670][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 284.934081][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 284.948004][T14390] netlink: 'syz.0.2264': attribute type 1 has an invalid length. [ 285.277173][T14401] tipc: Enabling of bearer rejected, failed to enable media [ 285.291012][T14401] syzkaller0: entered promiscuous mode [ 285.298530][T14401] syzkaller0: entered allmulticast mode [ 285.323951][T14401] sch_tbf: burst 3 is lower than device syzkaller0 mtu (1514) ! [ 285.611707][T14418] batadv_slave_1: entered promiscuous mode [ 285.719088][T14417] batadv_slave_1: left promiscuous mode [ 285.821486][ T30] audit: type=1804 audit(1764715521.608:6): pid=14422 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.2273" name="/newroot/476/memory.events" dev="tmpfs" ino=2449 res=1 errno=0 [ 285.846011][T14431] netlink: 'syz.0.2276': attribute type 2 has an invalid length. [ 285.872726][ T30] audit: type=1800 audit(1764715521.608:7): pid=14422 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2273" name="memory.events" dev="tmpfs" ino=2449 res=0 errno=0 [ 286.374443][T14463] bridge0: port 1(veth0_to_bridge) entered blocking state [ 286.383885][T14463] bridge0: port 1(veth0_to_bridge) entered disabled state [ 286.392778][T14463] veth0_to_bridge: entered allmulticast mode [ 286.401368][T14463] veth0_to_bridge: entered promiscuous mode [ 286.469106][T14467] netlink: zone id is out of range [ 286.474324][T14467] netlink: zone id is out of range [ 286.480868][T14467] netlink: zone id is out of range [ 286.487091][T14467] netlink: zone id is out of range [ 286.492336][T14467] netlink: zone id is out of range [ 286.500386][T14467] netlink: zone id is out of range [ 286.643030][T14478] netlink: 'syz.3.2291': attribute type 1 has an invalid length. [ 286.733425][T14485] tipc: Enabled bearer , priority 0 [ 286.822266][T14478] bond10: option ad_actor_sys_prio: mode dependency failed, not supported in mode broadcast(3) [ 286.848105][T14478] bond10 (unregistering): Released all slaves [ 286.965362][T14474] tipc: Resetting bearer [ 287.031648][T14474] tipc: Disabling bearer [ 287.509185][T14527] netlink: 'syz.2.2305': attribute type 13 has an invalid length. [ 287.543342][T14527] netlink: 'syz.2.2305': attribute type 17 has an invalid length. [ 287.543362][T14529] __nla_validate_parse: 13 callbacks suppressed [ 287.543374][T14529] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2306'. [ 287.933275][T14535] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2308'. [ 287.955008][T14527] 8021q: adding VLAN 0 to HW filter on device bond0 [ 287.967331][T14527] 8021q: adding VLAN 0 to HW filter on device team0 [ 287.994666][ T43] lo speed is unknown, defaulting to 1000 [ 288.012206][ T43] syz1: Port: 1 Link ACTIVE [ 288.130296][T14531] lo speed is unknown, defaulting to 1000 [ 288.158009][T14531] wg1 speed is unknown, defaulting to 1000 [ 288.381854][T14550] netlink: 244 bytes leftover after parsing attributes in process `syz.1.2313'. [ 288.419098][T14555] lo speed is unknown, defaulting to 1000 [ 288.521421][T14564] vxcan0: entered allmulticast mode [ 288.633649][T14555] wg1 speed is unknown, defaulting to 1000 [ 288.634815][T14554] lo speed is unknown, defaulting to 1000 [ 288.699446][T14554] wg1 speed is unknown, defaulting to 1000 [ 288.851969][T14568] lo speed is unknown, defaulting to 1000 [ 288.866885][T14568] wg1 speed is unknown, defaulting to 1000 [ 289.013029][T14565] dvmrp1: tun_chr_ioctl cmd 35111 [ 289.946992][T14590] xt_CONNSECMARK: invalid mode: 66 [ 290.024780][T14593] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2322'. [ 290.499012][T14604] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2326'. [ 290.519841][T14605] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2327'. [ 290.566692][T14608] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2328'. [ 290.760651][T14608] syzkaller0: entered promiscuous mode [ 290.776194][T14608] syzkaller0: entered allmulticast mode [ 290.784892][T14619] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2332'. [ 291.147703][T14640] 8021q: adding VLAN 0 to HW filter on device bond8 [ 291.451781][T14667] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2346'. [ 291.532167][T14673] net_ratelimit: 54 callbacks suppressed [ 291.532194][T14673] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 291.605873][T14661] lo speed is unknown, defaulting to 1000 [ 291.612557][T14671] openvswitch: netlink: IP tunnel dst address not specified [ 291.615974][T14661] wg1 speed is unknown, defaulting to 1000 [ 291.635849][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 291.644325][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 291.652777][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 291.827289][T14682] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2349'. [ 292.404388][T14699] tipc: Enabling of bearer rejected, failed to enable media [ 292.458441][T14701] syzkaller0: entered promiscuous mode [ 292.463950][T14701] syzkaller0: entered allmulticast mode [ 292.495724][T14699] sch_tbf: burst 3 is lower than device syzkaller0 mtu (1514) ! [ 293.145552][T14732] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 293.512204][T14764] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 293.530941][T14757] lo speed is unknown, defaulting to 1000 [ 293.540749][T14757] wg1 speed is unknown, defaulting to 1000 [ 293.556370][T14760] lo speed is unknown, defaulting to 1000 [ 293.583985][T14760] wg1 speed is unknown, defaulting to 1000 [ 293.674396][T14767] __nla_validate_parse: 1 callbacks suppressed [ 293.674415][T14767] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2372'. [ 293.983619][T14779] lo speed is unknown, defaulting to 1000 [ 294.002704][T14779] wg1 speed is unknown, defaulting to 1000 [ 294.002833][T14775] lo speed is unknown, defaulting to 1000 [ 294.093001][T14775] wg1 speed is unknown, defaulting to 1000 [ 294.477325][T14793] syzkaller0: entered promiscuous mode [ 294.483047][T14793] syzkaller0: entered allmulticast mode [ 294.492119][T14790] netlink: 'syz.2.2376': attribute type 6 has an invalid length. [ 294.844908][T14786] lo speed is unknown, defaulting to 1000 [ 294.931075][T14786] wg1 speed is unknown, defaulting to 1000 [ 295.075842][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 295.084317][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 295.092732][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 296.413438][T14848] netlink: 'syz.3.2388': attribute type 1 has an invalid length. [ 296.492546][T14849] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2388'. [ 296.670198][T14848] bond10: entered promiscuous mode [ 296.710337][T14848] 8021q: adding VLAN 0 to HW filter on device bond10 [ 296.745905][T14849] bond10: entered allmulticast mode [ 297.109660][T14868] netlink: 'syz.1.2390': attribute type 2 has an invalid length. [ 297.119078][T14868] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2390'. [ 297.166199][T14871] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2392'. [ 297.195587][T14872] IPv6: addrconf: prefix option has invalid lifetime [ 297.407849][T14891] netlink: 'syz.2.2395': attribute type 6 has an invalid length. [ 297.439966][T14891] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2395'. [ 297.598340][T14905] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 297.831467][T14902] syzkaller0: entered promiscuous mode [ 297.857459][T14902] syzkaller0: entered allmulticast mode [ 297.869651][T14921] tipc: Enabled bearer , priority 0 [ 298.083121][ T3577] tipc: Resetting bearer [ 298.355372][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 298.363884][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 298.372260][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 299.359736][T14943] netlink: 'syz.1.2406': attribute type 12 has an invalid length. [ 299.369498][T14901] tipc: Resetting bearer [ 299.639299][T14954] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2410'. [ 299.698311][ T5831] block nbd2: Receive control failed (result -107) [ 300.885420][T14901] tipc: Disabling bearer [ 300.931078][T14948] bond0: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 300.942211][T14959] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check. [ 301.716977][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 301.725458][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 301.733886][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 302.031218][T14985] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2416'. [ 302.134983][T14992] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2420'. [ 302.210168][T14990] lo speed is unknown, defaulting to 1000 [ 302.244941][T14990] wg1 speed is unknown, defaulting to 1000 [ 302.374965][T15000] lo speed is unknown, defaulting to 1000 [ 302.419785][T15000] wg1 speed is unknown, defaulting to 1000 [ 302.430803][T15012] netlink: 9 bytes leftover after parsing attributes in process `syz.2.2421'. [ 302.458710][T15012] netlink: 9 bytes leftover after parsing attributes in process `syz.2.2421'. [ 302.490408][T15016] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2427'. [ 303.212642][T15044] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2433'. [ 303.240221][T15042] tipc: Enabled bearer , priority 0 [ 303.264962][T15046] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2433'. [ 303.314032][T15045] syzkaller0: entered promiscuous mode [ 303.327238][T15045] syzkaller0: entered allmulticast mode [ 303.487544][T15052] tipc: Enabled bearer , priority 0 [ 303.492008][T15042] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2432'. [ 303.507668][T15052] syzkaller0: entered promiscuous mode [ 303.513163][T15052] syzkaller0: entered allmulticast mode [ 303.519773][T15044] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2433'. [ 303.582963][T15052] tipc: Resetting bearer [ 303.593003][T15051] tipc: Resetting bearer [ 303.645669][ C1] syzkaller0: tun_net_xmit 90 [ 303.678099][T15051] tipc: Disabling bearer [ 303.724550][T15042] tipc: Resetting bearer [ 303.736909][T15042] syzkaller0: tun_net_xmit 90 [ 303.779407][T15041] tipc: Resetting bearer [ 303.803263][ T5839] Bluetooth: hci4: command 0x0405 tx timeout [ 303.812619][T15041] tipc: Disabling bearer [ 303.939464][T15068] 0{X: left allmulticast mode [ 303.946776][T15068] erspan0: left allmulticast mode [ 303.980547][T15068] 8021q: adding VLAN 0 to HW filter on device bond0 [ 303.989125][T15068] 8021q: adding VLAN 0 to HW filter on device team0 [ 304.012995][T15068] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 304.039881][T15082] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 304.050472][T15082] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 304.059610][T15082] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 304.210739][T15090] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 304.224169][T15094] IPVS: sh: FWM 3 0x00000003 - no destination available [ 304.303289][ C0] IPVS: sh: FWM 3 0x00000003 - no destination available [ 304.733947][T15107] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 304.747024][T15107] netlink: 'syz.4.2449': attribute type 10 has an invalid length. [ 304.953019][T15115] tipc: Enabled bearer , priority 0 [ 305.043902][T15109] tipc: Disabling bearer [ 305.075376][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 305.083873][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 305.235353][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 305.310401][T15125] lo speed is unknown, defaulting to 1000 [ 305.343080][T15125] wg1 speed is unknown, defaulting to 1000 [ 305.378591][T15139] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 305.411373][T15138] lo speed is unknown, defaulting to 1000 [ 305.513460][T15138] wg1 speed is unknown, defaulting to 1000 [ 305.634620][T15144] __nla_validate_parse: 3 callbacks suppressed [ 305.634638][T15144] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2457'. [ 305.703530][T15152] netlink: 'syz.4.2460': attribute type 13 has an invalid length. [ 305.729143][T15152] netlink: 'syz.4.2460': attribute type 17 has an invalid length. [ 305.740180][T15153] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2457'. [ 305.749634][T15153] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2457'. [ 306.087035][T15169] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2467'. [ 306.382803][T15177] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.2469'. [ 306.621044][T15183] raw_sendmsg: syz.4.2470 forgot to set AF_INET. Fix it! [ 306.912152][T15198] netlink: 'syz.1.2475': attribute type 13 has an invalid length. [ 306.957365][T15201] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2476'. [ 307.129106][T15198] hsr0: left promiscuous mode [ 307.169934][T15201] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 307.199389][ T3577] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.220901][ T3577] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.229802][ T3577] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.276348][ T3577] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.467919][T15223] netlink: 'syz.2.2480': attribute type 2 has an invalid length. [ 307.477033][T15223] netlink: 'syz.2.2480': attribute type 8 has an invalid length. [ 307.484768][T15223] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2480'. [ 308.210425][T15263] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2493'. [ 308.223546][T15263] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2493'. [ 308.427357][T15265] vlan2: entered promiscuous mode [ 308.432610][T15265] vlan2: entered allmulticast mode [ 308.439395][T15265] hsr_slave_1: entered allmulticast mode [ 308.537509][T15267] lo speed is unknown, defaulting to 1000 [ 308.567193][T15267] wg1 speed is unknown, defaulting to 1000 [ 308.639471][T15275] 8021q: VLANs not supported on lo [ 308.661285][T15265] lo speed is unknown, defaulting to 1000 [ 308.686322][T15281] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2498'. [ 308.726107][T15281] veth0_to_bond: entered allmulticast mode [ 308.751626][T15265] wg1 speed is unknown, defaulting to 1000 [ 309.452015][T15302] IPVS: Error connecting to the multicast addr [ 309.999477][T15316] bridge7: the hash_elasticity option has been deprecated and is always 16 [ 310.059345][T15316] bridge7: entered allmulticast mode [ 310.364698][T15321] tc_dump_action: action bad kind [ 310.706640][T15340] lo speed is unknown, defaulting to 1000 [ 310.721182][T15340] wg1 speed is unknown, defaulting to 1000 [ 311.045935][T15357] __nla_validate_parse: 5 callbacks suppressed [ 311.045952][T15357] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2517'. [ 311.104835][T15357] netlink: 'syz.3.2517': attribute type 5 has an invalid length. [ 311.115343][T15357] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2517'. [ 311.210082][T15357] geneve3: entered promiscuous mode [ 311.215961][T15357] geneve3: entered allmulticast mode [ 311.230961][T12557] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 256 - 0 [ 311.268851][T12557] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 256 - 0 [ 311.292259][T12557] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 256 - 0 [ 311.333915][T12557] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 256 - 0 [ 311.344663][T15367] netlink: 'syz.1.2522': attribute type 1 has an invalid length. [ 311.407737][T15376] netlink: 'syz.2.2523': attribute type 1 has an invalid length. [ 311.416312][T15376] netlink: 228 bytes leftover after parsing attributes in process `syz.2.2523'. [ 311.491636][T15377] 8021q: adding VLAN 0 to HW filter on device bond10 [ 311.502690][T15377] bond9: (slave bond10): making interface the new active one [ 311.512929][T15377] bond9: (slave bond10): Enslaving as an active interface with an up link [ 311.673546][T15376] tipc: Enabled bearer , priority 0 [ 311.683543][T15381] syzkaller0: entered promiscuous mode [ 311.690974][T15381] syzkaller0: entered allmulticast mode [ 311.728668][T15397] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2527'. [ 311.755971][T15397] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2527'. [ 311.798127][T15401] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2527'. [ 311.846549][T15397] vti1: entered promiscuous mode [ 311.860991][T15397] vti1: entered allmulticast mode [ 311.885095][T15404] gretap0: entered promiscuous mode [ 311.893999][T15395] tipc: Resetting bearer [ 311.900486][T15401] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 311.909071][T15401] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 312.004679][T15374] tipc: Resetting bearer [ 312.072885][T15374] tipc: Disabling bearer [ 312.268624][T15407] lo speed is unknown, defaulting to 1000 [ 312.418024][T15407] wg1 speed is unknown, defaulting to 1000 [ 312.589115][T15430] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2535'. [ 312.886897][T15442] netlink: 'syz.2.2538': attribute type 2 has an invalid length. [ 312.897315][T15440] lo speed is unknown, defaulting to 1000 [ 312.906158][T15442] netlink: 'syz.2.2538': attribute type 1 has an invalid length. [ 312.917485][T15442] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2538'. [ 312.931554][T15440] wg1 speed is unknown, defaulting to 1000 [ 312.952982][T15444] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2539'. [ 313.048102][T15449] sctp: [Deprecated]: syz.0.2540 (pid 15449) Use of int in maxseg socket option. [ 313.048102][T15449] Use struct sctp_assoc_value instead [ 313.152489][T15453] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2542'. [ 313.182462][T15453] netlink: 'syz.1.2542': attribute type 1 has an invalid length. [ 314.096862][T15498] netlink: 'syz.2.2552': attribute type 2 has an invalid length. [ 314.159628][T15502] bond7: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 314.182643][T15502] bond7: (slave lo): speed changed to 0 on port 1 [ 314.187025][T15501] netlink: 'syz.0.2556': attribute type 1 has an invalid length. [ 314.197729][T15502] bond7: (slave lo): Enslaving as a backup interface with an up link [ 314.216833][T15502] net_ratelimit: 4 callbacks suppressed [ 314.216852][T15502] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 314.257053][ T6475] lo speed is unknown, defaulting to 1000 [ 314.257997][ T43] lo speed is unknown, defaulting to 1000 [ 314.268792][ T6485] lo speed is unknown, defaulting to 1000 [ 314.352455][T15508] Bluetooth: MGMT ver 1.23 [ 314.631788][T12553] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 314.641746][T12553] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.654543][T12553] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 314.667965][T12553] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.688773][T12553] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 314.710196][T12553] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.734955][T12553] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 314.760568][T12553] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.785018][T15519] ip6tnl4: entered allmulticast mode [ 314.847587][T15523] netlink: 'syz.3.2562': attribute type 2 has an invalid length. [ 314.859428][T15523] netlink: 'syz.3.2562': attribute type 1 has an invalid length. [ 315.131753][T15544] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 315.292860][T15556] vlan3: entered promiscuous mode [ 315.404397][T15546] lo speed is unknown, defaulting to 1000 [ 315.423769][T15546] wg1 speed is unknown, defaulting to 1000 [ 315.473606][T15569] RDS: rds_bind could not find a transport for 0:0:20::, load rds_tcp or rds_rdma? [ 317.911298][T15623] tipc: Enabling of bearer rejected, media not registered [ 317.986161][T15617] lo speed is unknown, defaulting to 1000 [ 318.018943][T15617] wg1 speed is unknown, defaulting to 1000 [ 318.152162][T15644] __nla_validate_parse: 9 callbacks suppressed [ 318.152179][T15644] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2593'. [ 318.175959][T15638] can: request_module (can-proto-5) failed. [ 318.194038][T15644] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2593'. [ 318.263169][T15644] netlink: 'syz.0.2593': attribute type 15 has an invalid length. [ 318.499275][T15653] xt_ecn: cannot match TCP bits for non-tcp packets [ 318.528946][T15653] nbd: must specify at least one socket [ 318.586922][T15658] netlink: 'syz.0.2597': attribute type 72 has an invalid length. [ 318.608288][T15662] netlink: get zone limit has 4 unknown bytes [ 319.065778][T15694] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2604'. [ 319.093703][T15691] lo speed is unknown, defaulting to 1000 [ 319.161081][T15696] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2607'. [ 319.168018][T15701] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2608'. [ 319.171881][T15691] wg1 speed is unknown, defaulting to 1000 [ 319.240238][T15700] lo speed is unknown, defaulting to 1000 [ 319.281687][T15700] wg1 speed is unknown, defaulting to 1000 [ 319.426033][T15709] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2611'. [ 319.799828][T15726] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2618'. [ 319.836838][T15726] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2618'. [ 320.118043][T15734] syzkaller0: entered promiscuous mode [ 320.123616][T15734] syzkaller0: entered allmulticast mode [ 320.219103][T15734] sch_tbf: burst 3 is lower than device syzkaller0 mtu (1514) ! [ 320.466309][T15741] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2623'. [ 320.771615][T15746] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2625'. [ 320.789617][T15736] IPVS: length: 24 != 12312 [ 320.876827][T15749] bond8: (slave ip6gretap1): Enslaving as an active interface with an up link [ 320.910961][T15746] bond8 (unregistering): (slave ip6gretap1): Releasing backup interface [ 320.943062][T15746] bond8 (unregistering): Released all slaves [ 321.034854][T15758] RDS: rds_bind could not find a transport for ::ffff:100.1.1.2, load rds_tcp or rds_rdma? [ 321.122592][T15759] lo speed is unknown, defaulting to 1000 [ 321.187938][T15759] wg1 speed is unknown, defaulting to 1000 [ 321.847534][T15794] bridge5: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 322.512908][T15821] lo speed is unknown, defaulting to 1000 [ 322.547317][T15821] wg1 speed is unknown, defaulting to 1000 [ 322.658458][T15831] netlink: 'syz.3.2650': attribute type 1 has an invalid length. [ 322.736661][T15831] bond11: entered promiscuous mode [ 322.747948][T15831] 8021q: adding VLAN 0 to HW filter on device bond11 [ 322.790035][T15835] bond11: (slave bridge6): making interface the new active one [ 322.836261][T15835] bridge6: entered promiscuous mode [ 322.861718][T15835] bond11: (slave bridge6): Enslaving as an active interface with an up link [ 323.273025][T15859] IPVS: sh: FWM 3 0x00000003 - no destination available [ 323.307581][T15866] siw: device registration error -23 [ 323.333592][ C0] IPVS: sh: FWM 3 0x00000003 - no destination available [ 323.690376][T15878] 8021q: VLANs not supported on gre0 [ 323.767529][T15892] __nla_validate_parse: 11 callbacks suppressed [ 323.767547][T15892] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2666'. [ 323.843369][T15896] vcan0: tx drop: invalid sa for name 0x0000000000200000 [ 323.913091][T15902] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2669'. [ 323.952448][T15902] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2669'. [ 324.077908][T15911] SET target dimension over the limit! [ 324.081642][T15907] mac80211_hwsim hwsim9 syzkaller0: entered promiscuous mode [ 324.090031][T15911] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2672'. [ 324.126448][T15907] mac80211_hwsim hwsim9 syzkaller0: entered allmulticast mode [ 324.179904][T12553] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 324.190703][T12553] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 324.209174][T12553] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 324.230249][T12553] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 324.378455][T15927] netlink: 'syz.1.2673': attribute type 22 has an invalid length. [ 324.452696][T15935] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2673'. [ 324.460139][T15934] netlink: 'syz.3.2677': attribute type 5 has an invalid length. [ 324.505786][T15938] netlink: 96 bytes leftover after parsing attributes in process `syz.4.2678'. [ 324.612580][T15943] can: request_module (can-proto-5) failed. [ 324.812493][T15957] bridge0: entered promiscuous mode [ 324.818126][T15955] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2682'. [ 324.838012][T15959] x_tables: unsorted entry at hook 1 [ 324.839638][T15957] macsec1: entered promiscuous mode [ 324.896908][T15960] netlink: 'syz.2.2684': attribute type 3 has an invalid length. [ 324.904878][T15960] netlink: 'syz.2.2684': attribute type 3 has an invalid length. [ 324.916950][T15960] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2684'. [ 326.127820][T16019] netlink: 'syz.4.2700': attribute type 4 has an invalid length. [ 326.339131][T16022] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2703'. [ 326.386823][T16029] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2704'. [ 326.543665][T16035] syzkaller1: entered promiscuous mode [ 326.567551][T16035] syzkaller1: entered allmulticast mode [ 326.740154][T16045] ipvlan3: entered promiscuous mode [ 326.757897][T16045] bridge0: port 1(ipvlan3) entered blocking state [ 326.776515][T16045] bridge0: port 1(ipvlan3) entered disabled state [ 326.789283][T16045] ipvlan3: entered allmulticast mode [ 326.802935][T16045] bridge0: entered allmulticast mode [ 326.819942][T16045] ipvlan3: left allmulticast mode [ 326.832558][T16045] bridge0: left allmulticast mode [ 327.352418][T16062] xt_connbytes: Forcing CT accounting to be enabled [ 327.566720][T16069] netlink: 'syz.1.2713': attribute type 1 has an invalid length. [ 327.892705][T16069] 8021q: adding VLAN 0 to HW filter on device bond11 [ 327.916509][T16060] lo speed is unknown, defaulting to 1000 [ 327.950471][T16063] lo speed is unknown, defaulting to 1000 [ 327.980894][T16060] wg1 speed is unknown, defaulting to 1000 [ 328.051502][T16063] wg1 speed is unknown, defaulting to 1000 [ 328.792478][T16107] lo speed is unknown, defaulting to 1000 [ 328.851865][T16107] wg1 speed is unknown, defaulting to 1000 [ 329.009228][T16110] lo speed is unknown, defaulting to 1000 [ 329.093963][T16110] wg1 speed is unknown, defaulting to 1000 [ 330.272029][T16148] ip6t_srh: unknown srh invflags BA61 [ 330.355547][T16145] bond4: option tlb_dynamic_lb: invalid value (5) [ 330.388094][T16145] bond4 (unregistering): Released all slaves [ 331.160536][T16181] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 331.578668][T16189] netlink: 'syz.4.2743': attribute type 1 has an invalid length. [ 331.729466][T16189] __nla_validate_parse: 3 callbacks suppressed [ 331.729485][T16189] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2743'. [ 331.770713][T16201] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2744'. [ 331.990329][T16189] 8021q: adding VLAN 0 to HW filter on device bond4 [ 332.036111][T16200] can: request_module (can-proto-0) failed. [ 332.052567][T16195] 8021q: adding VLAN 0 to HW filter on device bond4 [ 332.070814][T16195] bond4: (slave geneve3): making interface the new active one [ 332.104363][T16195] bond4: (slave geneve3): Enslaving as an active interface with an up link [ 332.189745][ T3577] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 332.211945][ T3577] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 332.278995][ T3577] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 332.295961][T16226] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2750'. [ 332.306748][T16226] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2750'. [ 332.318467][T16224] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2750'. [ 332.340479][T16224] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2750'. [ 332.353000][ T3577] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 332.905273][T16248] lo speed is unknown, defaulting to 1000 [ 332.933468][T16248] wg1 speed is unknown, defaulting to 1000 [ 333.283514][T16283] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2763'. [ 333.335166][T16283] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2763'. [ 333.558416][T16296] syzkaller0: entered promiscuous mode [ 333.563935][T16296] syzkaller0: entered allmulticast mode [ 333.626761][T16296] sch_tbf: burst 3 is lower than device syzkaller0 mtu (1514) ! [ 333.711610][T16301] bond8: Removing last ns target with arp_interval on [ 333.798475][T16304] x_tables: duplicate underflow at hook 1 [ 334.140788][T16319] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2774'. [ 334.180654][T16314] bond12: Unable to set down delay as MII monitoring is disabled [ 334.214118][T16314] bond12 (unregistering): Released all slaves [ 334.527702][T16343] pim6reg: entered allmulticast mode [ 334.793525][T16361] netlink: 7064 bytes leftover after parsing attributes in process `syz.3.2785'. [ 334.822147][T16361] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 334.841190][T16359] xt_TPROXY: Can be used only with -p tcp or -p udp [ 335.340150][T16388] lo speed is unknown, defaulting to 1000 [ 335.419809][T16395] lo speed is unknown, defaulting to 1000 [ 335.422480][T16401] netlink: 'syz.1.2796': attribute type 3 has an invalid length. [ 335.455402][T16401] netlink: 'syz.1.2796': attribute type 1 has an invalid length. [ 335.475991][T16388] wg1 speed is unknown, defaulting to 1000 [ 335.566265][T16395] wg1 speed is unknown, defaulting to 1000 [ 337.562928][T16462] __nla_validate_parse: 4 callbacks suppressed [ 337.562944][T16462] netlink: 3 bytes leftover after parsing attributes in process `syz.4.2814'. [ 337.585900][T16464] lo speed is unknown, defaulting to 1000 [ 337.594990][T16464] wg1 speed is unknown, defaulting to 1000 [ 337.686474][T16462] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2814'. [ 337.706110][T16462] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2814'. [ 337.709088][T16466] vxcan0: entered allmulticast mode [ 337.778562][T16462] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2814'. [ 337.827456][T16462] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2814'. [ 337.941362][T16475] netlink: zone id is out of range [ 337.947832][T16475] netlink: zone id is out of range [ 337.953080][T16475] netlink: zone id is out of range [ 337.958967][T16475] netlink: zone id is out of range [ 337.964141][T16475] netlink: zone id is out of range [ 337.970521][T16475] netlink: zone id is out of range [ 337.980633][T16475] netlink: zone id is out of range [ 338.000710][T16475] netlink: zone id is out of range [ 338.035687][T16475] netlink: zone id is out of range [ 338.158515][T16480] lo speed is unknown, defaulting to 1000 [ 338.177452][T16480] wg1 speed is unknown, defaulting to 1000 [ 338.186273][T16483] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2819'. [ 338.390744][T16487] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2821'. [ 338.430419][T16487] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2821'. [ 338.472450][T16487] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2821'. [ 338.597619][T16487] tipc: Enabled bearer , priority 0 [ 338.739483][T16487] tipc: Resetting bearer [ 339.044897][T16504] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2826'. [ 339.077263][T16513] netlink: 'syz.2.2829': attribute type 21 has an invalid length. [ 339.104016][T16513] netlink: 'syz.2.2829': attribute type 4 has an invalid length. [ 339.126590][T16513] netlink: 'syz.2.2829': attribute type 3 has an invalid length. [ 339.149474][T16518] netlink: 'syz.1.2830': attribute type 29 has an invalid length. [ 339.389746][T16532] netlink: 'syz.2.2831': attribute type 1 has an invalid length. [ 339.455341][T16542] netlink: 'syz.1.2834': attribute type 9 has an invalid length. [ 339.504464][T16531] : entered promiscuous mode [ 339.512214][T16532] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 339.581170][T16539] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 339.631419][T16544] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 339.818623][T16562] netlink: 'syz.1.2840': attribute type 21 has an invalid length. [ 339.847167][T16562] netlink: 'syz.1.2840': attribute type 4 has an invalid length. [ 339.857150][T16562] netlink: 'syz.1.2840': attribute type 5 has an invalid length. [ 340.030807][T16578] lo speed is unknown, defaulting to 1000 [ 340.064208][T16578] wg1 speed is unknown, defaulting to 1000 [ 340.111396][T16585] netlink: 'syz.1.2846': attribute type 21 has an invalid length. [ 340.133094][T16589] net_ratelimit: 6 callbacks suppressed [ 340.133112][T16589] openvswitch: netlink: Flow key attr not present in new flow. [ 340.223488][T16593] openvswitch: netlink: Flow key attr not present in new flow. [ 340.354623][T16598] bond12: option packets_per_slave: mode dependency failed, not supported in mode balance-tlb(5) [ 340.379787][T16598] bond12 (unregistering): Released all slaves [ 340.542726][T16606] lo speed is unknown, defaulting to 1000 [ 340.577505][T16606] wg1 speed is unknown, defaulting to 1000 [ 340.598455][T16608] lo speed is unknown, defaulting to 1000 [ 340.608943][T16608] wg1 speed is unknown, defaulting to 1000 [ 340.951299][T16620] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 341.665921][T16626] lo speed is unknown, defaulting to 1000 [ 341.711348][T16626] wg1 speed is unknown, defaulting to 1000 [ 342.127080][T16665] lo speed is unknown, defaulting to 1000 [ 342.160268][T16665] wg1 speed is unknown, defaulting to 1000 [ 342.776029][ T5831] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 342.786500][ T5831] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 342.794909][ T5831] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 342.808049][ T5831] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 342.816804][ T5831] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 343.092316][T16674] lo speed is unknown, defaulting to 1000 [ 343.147231][T16674] wg1 speed is unknown, defaulting to 1000 [ 344.296169][T16697] lo speed is unknown, defaulting to 1000 [ 344.306352][T16697] wg1 speed is unknown, defaulting to 1000 [ 344.317929][T16703] xfrm0: entered promiscuous mode [ 344.323478][T16703] xfrm0: entered allmulticast mode [ 344.607697][T16712] __nla_validate_parse: 16 callbacks suppressed [ 344.607714][T16712] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2876'. [ 344.644734][T16712] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2876'. [ 344.800318][T16712] 8021q: adding VLAN 0 to HW filter on device bond12 [ 344.838662][T16714] 8021q: adding VLAN 0 to HW filter on device bond0 [ 344.849305][T16714] bond12: (slave bond0): Enslaving as an active interface with an up link [ 344.915691][ T5831] Bluetooth: hci2: command tx timeout [ 344.946258][T16720] xt_hashlimit: max too large, truncated to 1048576 [ 344.953216][T16720] xt_CT: You must specify a L4 protocol and not use inversions on it [ 345.140859][T16717] bond12 (unregistering): (slave bond0): Releasing backup interface [ 345.152166][T16717] bond12 (unregistering): Released all slaves [ 345.250727][T16728] lo speed is unknown, defaulting to 1000 [ 345.301326][T16674] chnl_net:caif_netlink_parms(): no params data found [ 345.334611][T16728] wg1 speed is unknown, defaulting to 1000 [ 345.851885][T16741] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2883'. [ 345.931953][T16744] 8021q: adding VLAN 0 to HW filter on device bond12 [ 346.034703][T16674] bridge0: port 1(bridge_slave_0) entered blocking state [ 346.042948][T16674] bridge0: port 1(bridge_slave_0) entered disabled state [ 346.053132][T16674] bridge_slave_0: entered allmulticast mode [ 346.064482][T16674] bridge_slave_0: entered promiscuous mode [ 346.073179][T16674] bridge0: port 2(bridge_slave_1) entered blocking state [ 346.080426][T16674] bridge0: port 2(bridge_slave_1) entered disabled state [ 346.087897][T16674] bridge_slave_1: entered allmulticast mode [ 346.095914][T16674] bridge_slave_1: entered promiscuous mode [ 346.263214][T16674] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 346.288469][T16759] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2889'. [ 346.307031][T16757] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2888'. [ 346.309307][T16674] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 346.498682][T16674] team0: Port device team_slave_0 added [ 346.539851][T16769] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2892'. [ 346.542727][T16674] team0: Port device team_slave_1 added [ 346.656002][T16674] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 346.665453][T16674] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 346.719246][T16778] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2894'. [ 346.723149][T16674] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 346.743732][T16674] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 346.753599][T16674] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 346.788884][T16674] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 346.811174][T16784] validate_nla: 2 callbacks suppressed [ 346.811190][T16784] netlink: 'syz.4.2895': attribute type 1 has an invalid length. [ 346.829040][T16784] netlink: 'syz.4.2895': attribute type 3 has an invalid length. [ 346.838259][T16784] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2895'. [ 346.934000][T16674] hsr_slave_0: entered promiscuous mode [ 346.941763][T16674] hsr_slave_1: entered promiscuous mode [ 346.949189][T16674] debugfs: 'hsr0' already exists in 'hsr' [ 346.955840][T16674] Cannot create hsr debugfs directory [ 347.006894][ T5831] Bluetooth: hci2: command tx timeout [ 347.653803][T16813] lo speed is unknown, defaulting to 1000 [ 347.661777][T16816] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2904'. [ 347.664464][T16813] wg1 speed is unknown, defaulting to 1000 [ 347.674507][T16816] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2904'. [ 347.896977][T16826] netlink: 'syz.3.2907': attribute type 1 has an invalid length. [ 347.912298][T16827] netlink: 'syz.3.2907': attribute type 1 has an invalid length. [ 347.950724][T16826] 8021q: adding VLAN 0 to HW filter on device bond13 [ 348.064645][T16830] bond13 (unregistering): Released all slaves [ 348.331759][T16674] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 348.349819][T16674] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 348.403153][T16839] sit1: entered promiscuous mode [ 348.417389][T16674] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 348.533315][T16674] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 348.548939][T16846] netlink: 'syz.3.2912': attribute type 1 has an invalid length. [ 348.557234][T16846] netlink: 'syz.3.2912': attribute type 3 has an invalid length. [ 349.080667][ T5831] Bluetooth: hci2: command tx timeout [ 349.085666][T16674] 8021q: adding VLAN 0 to HW filter on device bond0 [ 349.100103][T16875] lo speed is unknown, defaulting to 1000 [ 349.117678][T16875] wg1 speed is unknown, defaulting to 1000 [ 349.160598][T16872] lo speed is unknown, defaulting to 1000 [ 349.203425][T16674] 8021q: adding VLAN 0 to HW filter on device team0 [ 349.240429][T16878] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode [ 349.254839][T16878] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 349.270587][T12551] bridge0: port 1(bridge_slave_0) entered blocking state [ 349.277774][T12551] bridge0: port 1(bridge_slave_0) entered forwarding state [ 349.315744][T16872] wg1 speed is unknown, defaulting to 1000 [ 349.326137][T12551] bridge0: port 2(bridge_slave_1) entered blocking state [ 349.333304][T12551] bridge0: port 2(bridge_slave_1) entered forwarding state [ 349.378485][T16887] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 349.999238][T16902] bridge0: entered allmulticast mode [ 350.127596][T16674] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 350.530486][ T3577] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 350.545646][ T3577] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 350.557356][T16674] veth0_vlan: entered promiscuous mode [ 350.615388][T16928] __nla_validate_parse: 5 callbacks suppressed [ 350.615406][T16928] netlink: 88 bytes leftover after parsing attributes in process `syz.2.2930'. [ 350.639182][T16674] veth1_vlan: entered promiscuous mode [ 350.669911][T16929] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2930'. [ 350.870608][T16929] syzkaller1: entered promiscuous mode [ 350.883048][T16929] syzkaller1: entered allmulticast mode [ 350.936981][T16674] veth0_macvtap: entered promiscuous mode [ 351.119177][T16944] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2934'. [ 351.129373][T16944] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2934'. [ 351.147533][T16937] veth1_vlan: left allmulticast mode [ 351.155844][ T5831] Bluetooth: hci2: command tx timeout [ 351.252034][T16674] veth1_macvtap: entered promiscuous mode [ 351.296703][T12552] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.306882][T12552] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.316662][T12548] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.368225][T12548] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.390068][T16674] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 351.407068][T16946] lo speed is unknown, defaulting to 1000 [ 351.430221][T16674] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 351.450068][T16946] wg1 speed is unknown, defaulting to 1000 [ 351.456065][T12552] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.456111][T12552] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.456143][T12552] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.456174][T12552] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.603453][T16952] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2937'. [ 351.863726][T12551] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 351.871855][T12551] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 351.893570][T16954] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2936'. [ 351.973872][T12551] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 351.985974][T12551] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 352.122456][T16969] bond5: entered promiscuous mode [ 352.139766][T16969] bond5: entered allmulticast mode [ 352.165834][T16969] 8021q: adding VLAN 0 to HW filter on device bond5 [ 352.235228][T16983] batadv1: entered promiscuous mode [ 352.359091][T16983] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2945'. [ 352.529718][T16995] pim6reg: entered allmulticast mode [ 352.622711][T16998] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2949'. [ 352.703954][T16991] lo speed is unknown, defaulting to 1000 [ 352.813578][T16991] wg1 speed is unknown, defaulting to 1000 [ 352.990709][T17009] bridge0: port 1(bridge_slave_0) entered disabled state [ 353.002913][T17010] netlink: 'syz.1.2951': attribute type 16 has an invalid length. [ 353.054338][T17009] bridge0: port 2(bridge_slave_1) entered disabled state [ 353.077333][T17010] netlink: 'syz.1.2951': attribute type 17 has an invalid length. [ 353.122641][T17010] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2951'. [ 353.318043][T17013] netlink: 'syz.4.2952': attribute type 1 has an invalid length. [ 353.322521][T16994] pim6reg: left allmulticast mode [ 353.370757][ T5839] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 353.390394][ T5839] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 353.401225][ T5839] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 353.410295][ T5839] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 353.418851][ T5839] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 353.429516][T17014] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 353.518797][T17023] netlink: 'syz.2.2954': attribute type 1 has an invalid length. [ 353.605998][T17013] 8021q: adding VLAN 0 to HW filter on device bond6 [ 353.643382][T17016] bond6: (slave ip6gretap3): making interface the new active one [ 353.667231][T17016] bond6: (slave ip6gretap3): Enslaving as an active interface with an up link [ 353.681371][T17024] erspan0: entered allmulticast mode [ 353.764917][T17023] bond9: entered promiscuous mode [ 353.772484][T17023] bond9: entered allmulticast mode [ 353.778601][T17023] 8021q: adding VLAN 0 to HW filter on device bond9 [ 353.830781][T17023] netlink: 1372 bytes leftover after parsing attributes in process `syz.2.2954'. [ 354.225267][T17038] syzkaller0: entered promiscuous mode [ 354.231008][T17038] syzkaller0: entered allmulticast mode [ 354.509037][ T5839] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 354.520147][ T5839] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 354.535762][ T5839] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 354.552042][ T5839] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 354.572084][ T5839] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 354.714642][T17054] netlink: 'syz.2.2959': attribute type 1 has an invalid length. [ 354.995588][ C1] af_packet: tpacket_rcv: packet too big, clamped from 56 to 4294967272. macoff=96 [ 355.925297][T17054] 8021q: adding VLAN 0 to HW filter on device bond10 [ 355.932715][T17060] __nla_validate_parse: 1 callbacks suppressed [ 355.932731][T17060] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2961'. [ 355.956552][T17055] vlan2: entered promiscuous mode [ 355.961622][T17055] bond10: entered promiscuous mode [ 355.966967][T17055] vlan2: entered allmulticast mode [ 355.972090][T17055] bond10: entered allmulticast mode [ 355.990724][T17056] bond10: (slave gretap3): making interface the new active one [ 355.998709][T17056] gretap3: entered promiscuous mode [ 356.013620][T17056] gretap3: entered allmulticast mode [ 356.022644][T17056] bond10: (slave gretap3): Enslaving as an active interface with an up link [ 356.118464][T17048] lo speed is unknown, defaulting to 1000 [ 356.139604][T17048] wg1 speed is unknown, defaulting to 1000 [ 356.307308][T17074] lo speed is unknown, defaulting to 1000 [ 356.330659][T17074] wg1 speed is unknown, defaulting to 1000 [ 356.375223][T17082] ipt_rpfilter: unknown options [ 356.676041][ T5839] Bluetooth: hci3: command tx timeout [ 356.784780][T17048] chnl_net:caif_netlink_parms(): no params data found [ 357.280380][T17048] bridge0: port 1(bridge_slave_0) entered blocking state [ 357.301110][T17048] bridge0: port 1(bridge_slave_0) entered disabled state [ 357.328150][T17048] bridge_slave_0: entered allmulticast mode [ 357.346853][T17048] bridge_slave_0: entered promiscuous mode [ 357.364207][T17048] bridge0: port 2(bridge_slave_1) entered blocking state [ 357.376598][T17048] bridge0: port 2(bridge_slave_1) entered disabled state [ 357.384479][T17048] bridge_slave_1: entered allmulticast mode [ 357.392833][T17048] bridge_slave_1: entered promiscuous mode [ 357.475591][T17121] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2973'. [ 357.506841][T17122] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2974'. [ 357.510196][T17048] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 357.549866][T17048] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 357.700382][T17124] bond1 (unregistering): Released all slaves [ 357.751498][T17048] team0: Port device team_slave_0 added [ 357.764339][T17132] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2976'. [ 357.790803][T17048] team0: Port device team_slave_1 added [ 357.936766][T17048] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 357.949715][T17145] netlink: 'syz.4.2979': attribute type 4 has an invalid length. [ 357.962503][T17048] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 358.004169][T17048] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 358.023333][T17048] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 358.030452][T17048] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 358.055859][T17151] netlink: 116 bytes leftover after parsing attributes in process `syz.0.2981'. [ 358.062180][T17048] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 358.067863][T17151] nbd: couldn't find a device at index 0 [ 358.187765][T17048] hsr_slave_0: entered promiscuous mode [ 358.188608][T17156] xt_CT: You must specify a L4 protocol and not use inversions on it [ 358.194424][T17048] hsr_slave_1: entered promiscuous mode [ 358.233639][T17158] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2983'. [ 358.254861][T17048] debugfs: 'hsr0' already exists in 'hsr' [ 358.270475][T17048] Cannot create hsr debugfs directory [ 358.302849][T17162] netlink: 'syz.4.2985': attribute type 4 has an invalid length. [ 358.323010][T17163] netlink: 'syz.4.2985': attribute type 4 has an invalid length. [ 358.348334][T17165] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2986'. [ 358.403608][T17165] netlink: 'syz.0.2986': attribute type 3 has an invalid length. [ 358.689702][T17181] netlink: 'syz.2.2991': attribute type 3 has an invalid length. [ 358.698425][T17181] netlink: 'syz.2.2991': attribute type 3 has an invalid length. [ 358.724470][T17048] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 358.736897][T17048] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.748427][T17048] netdevsim netdevsim3 eth3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 358.760308][ T5839] Bluetooth: hci3: command tx timeout [ 358.858566][T17048] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 358.870957][T17048] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.890754][T17048] netdevsim netdevsim3 eth2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 358.982824][T17048] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 358.998816][T17048] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.019427][T17048] netdevsim netdevsim3 eth1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 359.118621][T17048] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 359.129955][T17048] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.140974][T17048] netdevsim netdevsim3 eth0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 359.289471][T17208] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 359.307209][T17048] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 359.363422][T17048] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 359.388054][T17048] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 359.407480][T17225] tipc: Resetting bearer [ 359.425518][T17048] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 359.531493][T17236] erspan0: left allmulticast mode [ 359.730932][T17239] cgroup: fork rejected by pids controller in /syz0 [ 359.748295][T17236] hsr0: left promiscuous mode [ 359.756786][T17236] macvlan0: left allmulticast mode [ 359.788172][T17236] geneve1: left promiscuous mode [ 359.794963][T17236] mac80211_hwsim hwsim10 wlan0: left promiscuous mode [ 359.809142][T17236] veth3: left promiscuous mode [ 359.817428][T17236] batadv0: left promiscuous mode [ 359.839811][T17236] gtp1: left promiscuous mode [ 359.848652][T17236] gtp1: left allmulticast mode [ 359.860627][T17236] gretap1: left promiscuous mode [ 359.869000][T17236] gretap1: left allmulticast mode [ 359.883988][T17236] veth5: left promiscuous mode [ 359.891019][T17236] ip6tnl2: left allmulticast mode [ 360.249547][T17236] vlan2: left promiscuous mode [ 360.254581][T17236] vlan2: left allmulticast mode [ 360.266114][T17236] hsr_slave_1: left allmulticast mode [ 360.392476][T17236] bond5: left promiscuous mode [ 360.408069][T17236] bond5: left allmulticast mode [ 360.486082][T16136] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 20004 - 0 [ 360.504381][T16136] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 20004 - 0 [ 360.584960][T16136] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 20004 - 0 [ 360.671356][T16136] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 20004 - 0 [ 360.837696][ T5831] Bluetooth: hci3: command tx timeout [ 360.933296][T17048] 8021q: adding VLAN 0 to HW filter on device bond0 [ 360.991389][T17048] 8021q: adding VLAN 0 to HW filter on device team0 [ 361.009341][T12550] bridge0: port 1(bridge_slave_0) entered blocking state [ 361.016537][T12550] bridge0: port 1(bridge_slave_0) entered forwarding state [ 361.063030][T12550] bridge0: port 2(bridge_slave_1) entered blocking state [ 361.070230][T12550] bridge0: port 2(bridge_slave_1) entered forwarding state [ 361.467336][T17389] lo speed is unknown, defaulting to 1000 [ 361.496028][T12553] bridge_slave_1: left allmulticast mode [ 361.512108][T12553] bridge_slave_1: left promiscuous mode [ 361.534410][T12553] bridge0: port 2(bridge_slave_1) entered disabled state [ 361.588974][T12553] bridge_slave_0: left allmulticast mode [ 361.599227][T12553] bridge_slave_0: left promiscuous mode [ 361.605087][T12553] bridge0: port 1(bridge_slave_0) entered disabled state [ 361.882267][ T5148] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 361.892548][ T5148] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 361.901628][ T5148] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 361.923675][ T5148] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 361.938062][ T5148] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 362.174135][T12553] dvmrp0 (unregistering): left allmulticast mode [ 362.285614][T12553] bridge0 (unregistering): left allmulticast mode [ 362.806842][T12553] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 362.815756][T12553] bond_slave_0: left promiscuous mode [ 362.822253][T12553] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 362.831440][T12553] bond_slave_1: left promiscuous mode [ 362.837262][T12553] bond0 (unregistering): Released all slaves [ 362.916474][ T5148] Bluetooth: hci3: command 0x0419 tx timeout [ 362.935212][T12553] bond1 (unregistering): (slave veth3): Releasing backup interface [ 362.943808][T12553] bond1 (unregistering): Released all slaves [ 362.956343][T12553] bond2 (unregistering): Released all slaves [ 363.045757][T12553] bond3 (unregistering): Released all slaves [ 363.131145][T12553] bond4 (unregistering): Released all slaves [ 363.218857][T12553] bond5 (unregistering): Released all slaves [ 363.287167][T17395] lo speed is unknown, defaulting to 1000 [ 363.306952][T17389] wg1 speed is unknown, defaulting to 1000 [ 363.313094][T17408] lo speed is unknown, defaulting to 1000 [ 363.330553][T17395] wg1 speed is unknown, defaulting to 1000 [ 363.340738][T17408] wg1 speed is unknown, defaulting to 1000 [ 363.359623][T17048] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 363.386854][T12553] : left promiscuous mode [ 363.498246][T12553] tipc: Left network mode [ 363.567884][T17048] veth0_vlan: entered promiscuous mode [ 363.651727][T17048] veth1_vlan: entered promiscuous mode [ 363.802783][T17437] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3026'. [ 363.818781][T17048] veth0_macvtap: entered promiscuous mode [ 363.894274][T17439] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3027'. [ 363.997002][T17048] veth1_macvtap: entered promiscuous mode [ 364.035351][ T5148] Bluetooth: hci0: command tx timeout [ 364.108511][T17048] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 364.139833][T17048] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 364.191294][T12539] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.227505][T12539] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.262479][T12539] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.293699][T12539] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.503315][T17451] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3029'. [ 364.512451][T17450] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3029'. [ 364.521860][T12552] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 364.531962][T12552] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 364.556307][T17450] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 364.563564][T17450] IPv6: NLM_F_CREATE should be set when creating new route [ 364.584634][T17451] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 364.606373][T17450] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 364.613618][T17450] IPv6: NLM_F_CREATE should be set when creating new route [ 364.620838][T17451] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 364.647273][T12539] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 364.656203][T12539] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 364.943113][T17459] sctp: [Deprecated]: syz.2.3031 (pid 17459) Use of struct sctp_assoc_value in delayed_ack socket option. [ 364.943113][T17459] Use struct sctp_sack_info instead [ 364.997447][ T5148] Bluetooth: hci3: command 0x0419 tx timeout [ 365.176608][T17460] lo speed is unknown, defaulting to 1000 [ 365.302963][T17478] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3034'. [ 365.330147][T17459] syzkaller1: entered promiscuous mode [ 365.336547][T17459] syzkaller1: entered allmulticast mode [ 365.389349][T17460] wg1 speed is unknown, defaulting to 1000 [ 365.469763][T12553] hsr_slave_0: left promiscuous mode [ 365.496211][T12553] hsr_slave_1: left promiscuous mode [ 365.528304][T12553] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 365.550139][T12553] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 365.603871][T12553] pimreg (unregistering): left allmulticast mode [ 365.911806][T12553] team0 (unregistering): Port device team_slave_1 removed [ 365.948072][T12553] team0 (unregistering): Port device team_slave_0 removed [ 366.115350][ T5148] Bluetooth: hci0: command tx timeout [ 366.159105][T12553] veth0_vhrt_wifi (unregistering): left allmulticast mode [ 366.526062][T17493] netlink: 80 bytes leftover after parsing attributes in process `syz.1.3038'. [ 366.539303][T17493] netlink: 'syz.1.3038': attribute type 1 has an invalid length. [ 366.555858][T17493] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3038'. [ 366.588677][ T5826] IPVS: starting estimator thread 0... [ 366.612329][T17408] chnl_net:caif_netlink_parms(): no params data found [ 366.642837][T17494] netlink: 128 bytes leftover after parsing attributes in process `syz.2.3037'. [ 366.686871][T17497] IPVS: using max 27 ests per chain, 64800 per kthread [ 366.830528][T12553] IPVS: stop unused estimator thread 0... [ 366.952051][T17408] bridge0: port 1(bridge_slave_0) entered blocking state [ 366.964156][T17408] bridge0: port 1(bridge_slave_0) entered disabled state [ 366.975313][T17408] bridge_slave_0: entered allmulticast mode [ 366.997797][T17408] bridge_slave_0: entered promiscuous mode [ 367.017439][T17408] bridge0: port 2(bridge_slave_1) entered blocking state [ 367.030526][T17408] bridge0: port 2(bridge_slave_1) entered disabled state [ 367.040820][T17408] bridge_slave_1: entered allmulticast mode [ 367.051146][T17408] bridge_slave_1: entered promiscuous mode [ 367.339963][T17408] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 367.353329][T17408] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 367.402256][T17522] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3044'. [ 367.541810][T17408] team0: Port device team_slave_0 added [ 367.551057][T17408] team0: Port device team_slave_1 added [ 367.561231][T17525] netlink: 'syz.1.3045': attribute type 1 has an invalid length. [ 367.623764][T17525] 8021q: adding VLAN 0 to HW filter on device bond1 [ 367.675816][T17532] netlink: 19 bytes leftover after parsing attributes in process `syz.2.3047'. [ 368.206080][ T5148] Bluetooth: hci0: command tx timeout [ 368.907366][T17408] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 368.914416][T17408] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 368.941387][T17408] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 368.965226][T17531] 8021q: adding VLAN 0 to HW filter on device bond1 [ 368.972243][T17531] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 368.983775][T17531] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 369.027583][T17525] veth3: entered promiscuous mode [ 369.036439][T17525] bond1: (slave veth3): Enslaving as an active interface with a down link [ 369.077772][T17408] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 369.084752][T17408] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 369.135505][T17408] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 369.276806][T17537] tipc: Failed to remove unknown binding: 66,1,1/0:3848156466/3848156468 [ 369.303166][T17408] hsr_slave_0: entered promiscuous mode [ 369.320055][T17537] tipc: Failed to remove unknown binding: 66,1,1/0:3848156466/3848156468 [ 369.322639][T17408] hsr_slave_1: entered promiscuous mode [ 370.285463][ T5148] Bluetooth: hci0: command tx timeout [ 370.612317][T17573] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 370.666272][T17408] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 370.689370][T17408] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 370.719533][T17408] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 370.740791][T17408] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 370.976495][T17408] 8021q: adding VLAN 0 to HW filter on device bond0 [ 371.013721][T17408] 8021q: adding VLAN 0 to HW filter on device team0 [ 371.071968][T12540] bridge0: port 1(bridge_slave_0) entered blocking state [ 371.079155][T12540] bridge0: port 1(bridge_slave_0) entered forwarding state [ 371.107127][T12540] bridge0: port 2(bridge_slave_1) entered blocking state [ 371.114288][T12540] bridge0: port 2(bridge_slave_1) entered forwarding state [ 371.127970][T17601] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3062'. [ 371.586517][T17408] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 371.701871][T17408] veth0_vlan: entered promiscuous mode [ 371.744894][T17408] veth1_vlan: entered promiscuous mode [ 371.829340][T17408] veth0_macvtap: entered promiscuous mode [ 371.868494][T17408] veth1_macvtap: entered promiscuous mode [ 371.908538][T17408] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 371.947615][T17408] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 372.007899][T12545] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 372.033527][T12545] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 372.066848][T12545] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 372.211020][T12545] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 372.616271][T17642] lo speed is unknown, defaulting to 1000 [ 372.626365][T17642] wg1 speed is unknown, defaulting to 1000 [ 372.765773][T12545] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 372.805845][T12545] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 372.880447][T12539] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 372.890468][T12539] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 373.055166][T17647] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3074'. [ 373.249411][T17653] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3076'. [ 373.313747][T17658] netem: change failed [ 373.357271][T17653] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3076'. [ 373.374617][T17658] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3077'. [ 373.422981][T17661] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3075'. [ 373.679312][T17672] netlink: 'syz.1.3081': attribute type 1 has an invalid length. [ 373.893198][T17672] 8021q: adding VLAN 0 to HW filter on device bond2 [ 374.007897][T17681] 8021q: adding VLAN 0 to HW filter on device bond2 [ 374.015182][T17681] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 374.026818][T17681] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 374.059434][T17688] mac80211_hwsim hwsim29 wlan0: entered promiscuous mode [ 374.106652][T17688] bond2: (slave wlan0): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 374.484918][T17703] netlink: 'syz.4.3088': attribute type 11 has an invalid length. [ 374.506524][T17703] netlink: 228 bytes leftover after parsing attributes in process `syz.4.3088'. [ 374.533870][T17705] lo speed is unknown, defaulting to 1000 [ 374.553310][T17705] wg1 speed is unknown, defaulting to 1000 [ 374.724074][T17713] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 374.891439][T17717] x_tables: ip_tables: owner match: used from hooks PREROUTING, but only valid from OUTPUT/POSTROUTING [ 375.109279][T17720] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3093'. [ 375.149453][ T5839] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 375.159672][ T5839] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 375.160577][T17720] tipc: Enabling of bearer rejected, failed to enable media [ 375.177497][ T5839] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 375.188057][ T5839] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 375.199456][ T5839] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 375.281453][T17730] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3094'. [ 375.328252][T17721] lo speed is unknown, defaulting to 1000 [ 375.346457][T17721] wg1 speed is unknown, defaulting to 1000 [ 375.556682][T17738] IPVS: Error connecting to the multicast addr [ 375.780348][T17750] netlink: 'syz.4.3100': attribute type 13 has an invalid length. [ 375.810541][T17755] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 375.812640][T17750] netlink: 'syz.4.3100': attribute type 17 has an invalid length. [ 375.889784][T17750] gretap0: left promiscuous mode [ 376.044509][T17750] 8021q: adding VLAN 0 to HW filter on device bond0 [ 376.064650][T17750] 8021q: adding VLAN 0 to HW filter on device ` [ 376.093896][T17750] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 376.358724][T17774] 8021q: adding VLAN 0 to HW filter on device bond1 [ 376.652103][T17785] lo speed is unknown, defaulting to 1000 [ 376.703489][T17792] xt_l2tp: v2 sid > 0xffff: 4294901760 [ 376.715904][T17721] chnl_net:caif_netlink_parms(): no params data found [ 376.793663][T17785] wg1 speed is unknown, defaulting to 1000 [ 377.109273][T17721] bridge0: port 1(bridge_slave_0) entered blocking state [ 377.135965][T17721] bridge0: port 1(bridge_slave_0) entered disabled state [ 377.163101][T17721] bridge_slave_0: entered allmulticast mode [ 377.171960][T17721] bridge_slave_0: entered promiscuous mode [ 377.198482][T17721] bridge0: port 2(bridge_slave_1) entered blocking state [ 377.214953][T17721] bridge0: port 2(bridge_slave_1) entered disabled state [ 377.245176][ T5148] Bluetooth: hci4: command tx timeout [ 377.375333][T17721] bridge_slave_1: entered allmulticast mode [ 377.394355][T17721] bridge_slave_1: entered promiscuous mode [ 377.558721][T17721] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 377.586203][T17818] netlink: 76 bytes leftover after parsing attributes in process `syz.4.3114'. [ 377.593091][T17721] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 377.732889][T17721] team0: Port device team_slave_0 added [ 377.749055][T17819] lo speed is unknown, defaulting to 1000 [ 377.752740][T17721] team0: Port device team_slave_1 added [ 377.837391][T17823] lo speed is unknown, defaulting to 1000 [ 377.842615][T17721] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 377.843307][T17819] wg1 speed is unknown, defaulting to 1000 [ 377.850443][T17721] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 377.891544][T17721] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 377.911981][T17823] wg1 speed is unknown, defaulting to 1000 [ 377.912737][T17721] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 377.926429][T17721] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 377.952502][T17721] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 377.975151][T17824] lo speed is unknown, defaulting to 1000 [ 378.036927][T17721] hsr_slave_0: entered promiscuous mode [ 378.043955][T17721] hsr_slave_1: entered promiscuous mode [ 378.051020][T17721] debugfs: 'hsr0' already exists in 'hsr' [ 378.057493][T17721] Cannot create hsr debugfs directory [ 378.063155][T17824] wg1 speed is unknown, defaulting to 1000 [ 378.739271][T17840] netlink: 'syz.1.3120': attribute type 2 has an invalid length. [ 378.761532][T17840] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3120'. [ 379.329040][ T5148] Bluetooth: hci4: command tx timeout [ 379.702823][T17721] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 379.853321][T17721] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 379.958841][T17847] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3121'. [ 380.008175][T17721] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 380.068648][T17721] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 380.212995][T17845] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 380.322098][T17850] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3122'. [ 380.489756][T17860] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3123'. [ 381.107381][T17867] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3125'. [ 381.167603][T17869] netlink: 277 bytes leftover after parsing attributes in process `syz.3.3126'. [ 381.329988][T17878] tipc: Enabling of bearer rejected, failed to enable media [ 381.364559][T17721] 8021q: adding VLAN 0 to HW filter on device bond0 [ 381.395296][ T5839] Bluetooth: hci4: command tx timeout [ 381.479047][T17721] 8021q: adding VLAN 0 to HW filter on device team0 [ 381.535958][T17878] syzkaller0: entered promiscuous mode [ 381.541653][T17878] syzkaller0: entered allmulticast mode [ 381.553094][T12546] bridge0: port 1(bridge_slave_0) entered blocking state [ 381.560279][T12546] bridge0: port 1(bridge_slave_0) entered forwarding state [ 381.628070][T12546] bridge0: port 2(bridge_slave_1) entered blocking state [ 381.635322][T12546] bridge0: port 2(bridge_slave_1) entered forwarding state [ 381.698721][T17890] netlink: 'syz.0.3131': attribute type 1 has an invalid length. [ 381.746706][T17890] bond_slave_1: Device is already in use. [ 382.192144][T17896] veth0_virt_wifi: renamed from veth0_vlan [ 382.543707][T17907] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3134'. [ 382.668189][T17721] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 382.936952][T17721] veth0_vlan: entered promiscuous mode [ 383.002285][T17721] veth1_vlan: entered promiscuous mode [ 383.146814][T17721] veth0_macvtap: entered promiscuous mode [ 383.220835][T17721] veth1_macvtap: entered promiscuous mode [ 383.300970][T17721] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 383.332500][T17721] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 383.366522][T12539] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.428596][T12539] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.460890][T12539] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.475477][ T5839] Bluetooth: hci4: command tx timeout [ 383.494073][T12539] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.522609][T12539] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 383.545195][T12539] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 383.610935][T12546] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 383.625108][T12546] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 384.003850][T17941] netlink: 'syz.3.3143': attribute type 11 has an invalid length. [ 384.029529][T17939] bond1: entered promiscuous mode [ 384.034712][T17939] bond1: entered allmulticast mode [ 384.041676][T17939] 8021q: adding VLAN 0 to HW filter on device bond1 [ 384.050753][T17941] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3143'. [ 384.570642][T17967] netlink: 'syz.3.3151': attribute type 1 has an invalid length. [ 384.885691][T17967] 8021q: adding VLAN 0 to HW filter on device bond2 [ 385.201043][T17844] Set syz1 is full, maxelem 65536 reached [ 385.213657][T17967] veth3: entered promiscuous mode [ 385.237020][T17967] bond2: (slave veth3): Enslaving as an active interface with a down link [ 385.606579][T17999] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3161'. [ 385.621557][T17997] x_tables: duplicate underflow at hook 1 [ 385.712577][T17999] lo speed is unknown, defaulting to 1000 [ 385.753091][T17999] wg1 speed is unknown, defaulting to 1000 [ 386.099441][T18026] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3167'. [ 386.108686][T18026] team0: No ports can be present during mode change [ 386.320952][ T30] audit: type=1800 audit(1764715622.108:8): pid=18025 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3169" name=CB dev="tmpfs" ino=3076 res=0 errno=0 [ 386.363899][ T5839] Bluetooth: hci4: command tx timeout [ 386.449646][T18031] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3171'. [ 386.485928][T12540] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 386.503085][T12540] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 386.634228][T18040] netlink: 67 bytes leftover after parsing attributes in process `syz.0.3172'. [ 386.665678][T12540] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 386.707505][T12540] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 386.756683][T18044] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3172'. [ 387.099239][T18059] netlink: 'syz.0.3176': attribute type 23 has an invalid length. [ 387.319400][T18063] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3177'. [ 387.426839][T18068] xt_hashlimit: size too large, truncated to 1048576 [ 387.523205][T18070] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3179'. [ 387.564441][T18070] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 387.821247][T12546] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 387.832703][ T5148] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 387.844565][ T5148] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 387.853735][ T5148] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 387.887158][T18079] nbd3: detected capacity change from 0 to 63 [ 387.893724][ T5148] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 387.894001][T18084] block nbd3: NBD_DISCONNECT [ 387.907403][ T5148] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 387.907920][T18084] block nbd3: Disconnected due to user request. [ 387.931986][T18084] block nbd3: shutting down sockets [ 387.948107][T18083] x_tables: ip_tables: ah match: only valid for protocol 51 [ 387.987983][T18083] netlink: 'syz.0.3182': attribute type 13 has an invalid length. [ 388.001070][T12546] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 388.152953][T12546] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 388.203795][T18095] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3185'. [ 388.214245][T18080] lo speed is unknown, defaulting to 1000 [ 388.233573][T18095] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3185'. [ 388.253254][T18080] wg1 speed is unknown, defaulting to 1000 [ 388.328770][T12546] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 388.452235][T18101] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 388.856752][T12546] bond1 (unregistering): (slave ip6gretap1): Releasing active interface [ 388.867532][T12546] ip6gretap1 (unregistering): left promiscuous mode [ 388.907987][T12546] bond6 (unregistering): (slave ip6gretap3): Releasing active interface [ 389.339157][T12546] bond4 (unregistering): (slave geneve3): Releasing active interface [ 389.817765][T12546] bond0 (unregistering): Released all slaves [ 389.910290][T12546] bond1 (unregistering): (slave veth3): Releasing active interface [ 389.919008][T12546] bond1 (unregistering): Released all slaves [ 389.931517][T12546] bond2 (unregistering): Released all slaves [ 389.969452][ T5831] Bluetooth: hci1: command tx timeout [ 390.039072][T12546] bond3 (unregistering): Released all slaves [ 390.131418][T12546] bond4 (unregistering): Released all slaves [ 390.224047][T12546] bond5 (unregistering): Released all slaves [ 390.312500][T12546] bond6 (unregistering): Released all slaves [ 390.550301][T12546] 9: left promiscuous mode [ 390.571372][T18145] netlink: 'syz.1.3198': attribute type 1 has an invalid length. [ 390.693841][T18145] 8021q: adding VLAN 0 to HW filter on device bond3 [ 390.713024][T18152] vlan2: entered allmulticast mode [ 390.720871][T18152] bond3: entered allmulticast mode [ 390.727918][T12546] tipc: Left network mode [ 390.799109][T18158] bond3: (slave gretap1): making interface the new active one [ 390.809103][T18158] gretap1: entered allmulticast mode [ 390.820151][T18158] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 390.865960][T18146] siw: device registration error -23 [ 390.900076][T18146] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 390.963864][T18080] chnl_net:caif_netlink_parms(): no params data found [ 391.098578][T18178] xt_nat: multiple ranges no longer supported [ 391.190374][T18184] netlink: 'syz.1.3207': attribute type 1 has an invalid length. [ 391.198763][ T1072] IPVS: starting estimator thread 0... [ 391.202388][T18185] netlink: 'syz.0.3206': attribute type 1 has an invalid length. [ 391.298258][T18185] bond1: entered promiscuous mode [ 391.303668][T18185] 8021q: adding VLAN 0 to HW filter on device bond1 [ 391.323800][T18186] IPVS: using max 30 ests per chain, 72000 per kthread [ 391.363731][T18191] bond4: (slave gretap2): making interface the new active one [ 391.372273][T18191] bond4: (slave gretap2): Enslaving as an active interface with an up link [ 391.466405][T18184] vlan3: entered allmulticast mode [ 391.470006][T18202] __nla_validate_parse: 3 callbacks suppressed [ 391.470021][T18202] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3210'. [ 391.475579][T18184] bond4: entered allmulticast mode [ 391.494887][T18184] gretap2: entered allmulticast mode [ 391.502479][T18184] bond4: (slave vlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 391.570339][T18080] bridge0: port 1(bridge_slave_0) entered blocking state [ 391.577886][T18080] bridge0: port 1(bridge_slave_0) entered disabled state [ 391.601402][T18080] bridge_slave_0: entered allmulticast mode [ 391.619568][T18080] bridge_slave_0: entered promiscuous mode [ 391.632841][T18203] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3210'. [ 391.642637][T18203] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3210'. [ 391.745217][T18080] bridge0: port 2(bridge_slave_1) entered blocking state [ 391.762979][T18080] bridge0: port 2(bridge_slave_1) entered disabled state [ 391.805801][T18080] bridge_slave_1: entered allmulticast mode [ 391.835456][T18080] bridge_slave_1: entered promiscuous mode [ 391.837025][T18213] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3214'. [ 392.037058][ T5831] Bluetooth: hci1: command tx timeout [ 392.173464][T18226] syzkaller0: entered promiscuous mode [ 392.185254][T18226] syzkaller0: entered allmulticast mode [ 392.202674][T18080] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 392.221988][T18221] batadv1: entered promiscuous mode [ 392.365161][T18222] tipc: Started in network mode [ 392.370164][T18222] tipc: Node identity 7a1bafe58c96, cluster identity 4711 [ 392.378275][T18222] tipc: Enabled bearer , priority 0 [ 392.391192][T18230] sch_tbf: burst 3 is lower than device syzkaller0 mtu (1514) ! [ 392.455651][T12546] hsr_slave_0: left promiscuous mode [ 392.461896][T12546] hsr_slave_1: left promiscuous mode [ 392.984265][T18232] tipc: Resetting bearer [ 392.993154][T18080] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 394.117443][ T5831] Bluetooth: hci1: command tx timeout [ 394.286223][T18215] tipc: Disabling bearer [ 394.316408][ T1072] tipc: Node number set to 4136480741 [ 394.327503][T18080] team0: Port device team_slave_0 added [ 394.340492][T18228] lo speed is unknown, defaulting to 1000 [ 394.344240][T18080] team0: Port device team_slave_1 added [ 394.395711][T18240] lo speed is unknown, defaulting to 1000 [ 394.397096][T18080] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 394.425367][T18080] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 394.480172][T18080] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 394.500777][T18228] wg1 speed is unknown, defaulting to 1000 [ 394.502381][T18080] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 394.513791][T18080] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 394.544024][T18080] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 394.566277][T18240] wg1 speed is unknown, defaulting to 1000 [ 394.700035][T18080] hsr_slave_0: entered promiscuous mode [ 394.708081][T18257] netlink: 'syz.0.3224': attribute type 2 has an invalid length. [ 394.721131][T18080] hsr_slave_1: entered promiscuous mode [ 394.731727][T18080] debugfs: 'hsr0' already exists in 'hsr' [ 394.738814][T18080] Cannot create hsr debugfs directory [ 394.753351][T18257] : entered promiscuous mode [ 394.849069][T12546] IPVS: stop unused estimator thread 0... [ 395.527290][T18270] netlink: 10 bytes leftover after parsing attributes in process `syz.0.3226'. [ 395.749489][T18274] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3228'. [ 395.763279][T18274] netlink: 35 bytes leftover after parsing attributes in process `syz.2.3228'. [ 395.837932][T18276] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3229'. [ 395.969530][T18281] tipc: Enabled bearer , priority 0 [ 395.978296][T18281] sch_tbf: burst 3 is lower than device syzkaller0 mtu (1514) ! [ 396.003117][T18281] tipc: Resetting bearer [ 396.098096][T18280] tipc: Disabling bearer [ 396.211264][T18285] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3233'. [ 396.221449][ T5831] Bluetooth: hci1: command tx timeout [ 396.242924][T18285] batadv0: entered promiscuous mode [ 396.257416][T18285] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 396.267076][T18285] batadv0: left promiscuous mode [ 396.311114][T18288] xt_hashlimit: max too large, truncated to 1048576 [ 396.344326][T18080] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 396.402807][T18080] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 396.430295][T18080] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 396.462568][T18080] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 396.785498][T18313] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3240'. [ 396.856525][T18318] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3242'. [ 397.093994][T18080] 8021q: adding VLAN 0 to HW filter on device bond0 [ 397.167512][T18080] 8021q: adding VLAN 0 to HW filter on device team0 [ 397.198827][T12539] bridge0: port 1(bridge_slave_0) entered blocking state [ 397.206015][T12539] bridge0: port 1(bridge_slave_0) entered forwarding state [ 397.218856][T18327] openvswitch: netlink: IP tunnel dst address not specified [ 397.241477][T12546] bridge0: port 2(bridge_slave_1) entered blocking state [ 397.248746][T12546] bridge0: port 2(bridge_slave_1) entered forwarding state [ 397.265435][T18327] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3243'. [ 397.274414][T18327] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3243'. [ 397.297542][T18330] netlink: 'syz.0.3245': attribute type 3 has an invalid length. [ 397.307630][T18330] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3245'. [ 397.361394][T18327] tipc: Started in network mode [ 397.369805][T18327] tipc: Node identity 5ee6dc2521b3, cluster identity 4711 [ 397.394102][T18327] tipc: Enabled bearer , priority 0 [ 397.419103][T18337] syzkaller0: entered promiscuous mode [ 397.424601][T18337] syzkaller0: entered allmulticast mode [ 397.444017][T18336] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3247'. [ 397.466038][T18336] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 397.471347][T18340] ip6t_srh: unknown srh invflags 4000 [ 397.518324][T18336] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 397.554744][T18342] netlink: 96 bytes leftover after parsing attributes in process `syz.0.3248'. [ 397.584357][T18342] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3248'. [ 397.596653][T18327] tipc: Resetting bearer [ 397.627072][T18080] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 397.651402][T18080] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 397.858110][T18324] tipc: Resetting bearer [ 397.894255][T18324] tipc: Disabling bearer [ 398.321585][T18080] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 398.791913][T18080] veth0_vlan: entered promiscuous mode [ 398.809020][T18080] veth1_vlan: entered promiscuous mode [ 398.856456][T18080] veth0_macvtap: entered promiscuous mode [ 398.867489][T18080] veth1_macvtap: entered promiscuous mode [ 398.893153][T18080] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 398.919551][T18080] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 398.941636][T12539] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.953577][T12539] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.989009][T12539] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 399.047160][T12539] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 399.126222][T18403] geneve2: entered promiscuous mode [ 399.158573][T12551] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 399.174651][T12551] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 399.197103][T18407] netlink: 'syz.1.3264': attribute type 2 has an invalid length. [ 399.197772][T18408] netlink: 'syz.1.3264': attribute type 2 has an invalid length. [ 399.220859][T12545] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 399.229063][T12545] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 399.229915][T18405] ip6t_srh: unknown srh match flags 4000 [ 399.243945][T18409] ip6t_srh: unknown srh match flags 4000 [ 399.248854][T18407] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3264'. [ 399.251873][T18410] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3262'. [ 399.576943][T18428] batadv1: entered promiscuous mode [ 400.214120][T18467] netlink: 'syz.3.3281': attribute type 1 has an invalid length. [ 400.385720][T12540] [ 400.388089][T12540] ============================================ [ 400.394229][T12540] WARNING: possible recursive locking detected [ 400.400374][T12540] syzkaller #0 Not tainted [ 400.404769][T12540] -------------------------------------------- [ 400.410894][T12540] kworker/u8:18/12540 is trying to acquire lock: [ 400.417195][T12540] ffffe8ffffd94cc0 (&pd_list->lock){+...}-{3:3}, at: padata_do_serial+0x707/0xb80 [ 400.426407][T12540] [ 400.426407][T12540] but task is already holding lock: [ 400.433751][T12540] ffffe8ffffda3548 (&pd_list->lock){+...}-{3:3}, at: padata_do_serial+0x590/0xb80 [ 400.442986][T12540] [ 400.442986][T12540] other info that might help us debug this: [ 400.451025][T12540] Possible unsafe locking scenario: [ 400.451025][T12540] [ 400.458465][T12540] CPU0 [ 400.461744][T12540] ---- [ 400.465010][T12540] lock(&pd_list->lock); [ 400.469338][T12540] lock(&pd_list->lock); [ 400.473656][T12540] [ 400.473656][T12540] *** DEADLOCK *** [ 400.473656][T12540] [ 400.481782][T12540] May be due to missing lock nesting notation [ 400.481782][T12540] [ 400.490080][T12540] 3 locks held by kworker/u8:18/12540: [ 400.495529][T12540] #0: ffff88801ffc0148 ((wq_completion)pdecrypt_parallel){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 400.507456][T12540] #1: ffffc90003c5fba0 ((work_completion)(&pw->pw_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 400.519284][T12540] #2: ffffe8ffffda3548 (&pd_list->lock){+...}-{3:3}, at: padata_do_serial+0x590/0xb80 [ 400.528961][T12540] [ 400.528961][T12540] stack backtrace: [ 400.534850][T12540] CPU: 1 UID: 0 PID: 12540 Comm: kworker/u8:18 Not tainted syzkaller #0 PREEMPT(full) [ 400.534869][T12540] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 400.534879][T12540] Workqueue: pdecrypt_parallel padata_parallel_worker [ 400.534907][T12540] Call Trace: [ 400.534913][T12540] [ 400.534919][T12540] dump_stack_lvl+0x189/0x250 [ 400.534940][T12540] ? __pfx_dump_stack_lvl+0x10/0x10 [ 400.534957][T12540] ? __pfx__printk+0x10/0x10 [ 400.534972][T12540] ? print_lock_name+0xde/0x100 [ 400.534986][T12540] print_deadlock_bug+0x28b/0x2a0 [ 400.535003][T12540] validate_chain+0x1a3f/0x2140 [ 400.535020][T12540] ? irqentry_exit+0x74/0x90 [ 400.535039][T12540] ? lockdep_hardirqs_on+0x9c/0x150 [ 400.535058][T12540] ? look_up_lock_class+0x74/0x170 [ 400.535076][T12540] ? register_lock_class+0x51/0x320 [ 400.535092][T12540] __lock_acquire+0xab9/0xd20 [ 400.535110][T12540] ? padata_do_serial+0x707/0xb80 [ 400.535127][T12540] lock_acquire+0x120/0x360 [ 400.535141][T12540] ? padata_do_serial+0x707/0xb80 [ 400.535165][T12540] _raw_spin_lock+0x2e/0x40 [ 400.535180][T12540] ? padata_do_serial+0x707/0xb80 [ 400.535199][T12540] padata_do_serial+0x707/0xb80 [ 400.535224][T12540] ? padata_parallel_worker+0x44/0x1d0 [ 400.535244][T12540] padata_parallel_worker+0x75/0x1d0 [ 400.535263][T12540] ? process_scheduled_works+0x9ef/0x17b0 [ 400.535281][T12540] process_scheduled_works+0xae1/0x17b0 [ 400.535319][T12540] ? __pfx_process_scheduled_works+0x10/0x10 [ 400.535345][T12540] worker_thread+0x8a0/0xda0 [ 400.535374][T12540] kthread+0x711/0x8a0 [ 400.535397][T12540] ? __pfx_worker_thread+0x10/0x10 [ 400.535414][T12540] ? __pfx_kthread+0x10/0x10 [ 400.535434][T12540] ? _raw_spin_unlock_irq+0x23/0x50 [ 400.535453][T12540] ? lockdep_hardirqs_on+0x9c/0x150 [ 400.535472][T12540] ? __pfx_kthread+0x10/0x10 [ 400.535492][T12540] ret_from_fork+0x4bc/0x870 [ 400.535511][T12540] ? __pfx_ret_from_fork+0x10/0x10 [ 400.535531][T12540] ? __switch_to_asm+0x39/0x70 [ 400.535545][T12540] ? __switch_to_asm+0x33/0x70 [ 400.535557][T12540] ? __pfx_kthread+0x10/0x10 [ 400.535575][T12540] ret_from_fork_asm+0x1a/0x30 [ 400.535592][T12540] [ 400.771293][T18471] Bluetooth: MGMT ver 1.23 [ 402.846272][ T5831] Bluetooth: hci0: command tx timeout