last executing test programs: 2m47.233499631s ago: executing program 3 (id=4540): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0xa, [@struct={0x8, 0x1, 0x0, 0xf, 0x0, 0x20008, [{0x1, 0x0, 0x3}]}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e]}}, &(0x7f0000000040)=""/249, 0x3a, 0xf9, 0x6}, 0x20) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f0000001480)={{r1, &(0x7f0000000080)='syzkaller\x00', 0x4c0100, &(0x7f00000001c0)={@_ha_fsid={[0x7]}, {0x6, 0x6, 0x3, 0x9}}, 0x8, &(0x7f0000000300), &(0x7f0000000380)=0xe}, {[0x3, 0x8, 0xfffffffd, 0xf]}, 0x81, 0x1000, &(0x7f0000000480)=""/4096}) setsockopt$bt_l2cap_L2CAP_OPTIONS(r2, 0x6, 0x1, &(0x7f0000001500)={0x8, 0x5, 0x800, 0x80, 0x7, 0xd, 0x7}, 0xc) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r1, &(0x7f0000000100)={0x2, 0x4e26, @dev={0xac, 0x14, 0x14, 0xe}}, 0x10) sendto$inet(r1, &(0x7f00000002c0)="abc7153306", 0xffffff59, 0x4000805, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x404, 0x9}, 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x3, 0x4, 0x801, 0x1, r3, 0x15b4}, 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000000)={r4, &(0x7f00000000c0), 0x0}, 0x20) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)={{0x14}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x18, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x15}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x88}}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000039c0)=ANY=[@ANYBLOB="b702000006000000bfa300000000000007030000407effff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000496cf2827fb43a431ca7ebfcd0cd00006ed3d09a6175037958e271b60dedf8937f02008b6d83923dd29c034055d47dafe6c8dc3d5d78c07f34e4d5b3185b310efd4989147a00000000f110026e6d2ef831ab7ea0c34f17e3adeef3bb622003b538dfd8e012e71f6420b90adddff61b5b0a341a2d7cbdb90000bdb2ca76050000003a14817ac61e4dd11183a13477bf7e060e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132658555cf476619f28d9961b626c57c2691208171656d60a17e3c1c4b751ca532e6ea09c346df3d7cb4ebd31a08b32808980200000000000000334d83239d0c2e9ff10ff2d27080e71113610e10c358e8327e7050b6c860dac12233f9a1fb9c2aec61ce63a38d316ef49b66d6e42fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a5f3d74ca891c4594e8a4399e01eadd3964663e88535c133f7130856f75643619f567d2e24f29e5dad9326edb697a6ea0182babc18cae2ed4b4390af9a9ceefd07e002cab5ebfcaad34732181feb215139f15eafddcb0c7cbe31fbae7c34d5ac5e7e64c21add9191eadd6e1795ad6a0f7f8cd3fccbdc3dec04b25dfc17975238345d4f71af35910b158e56657b7218baaa7cbf781c0a99bd50499ccff0f000000000000c7beba3da8223fe5308e4e2833baace04f4087c4f0da0d9a88f9dbb593ddeb3f0932a4d0175b889b8eccf707882042e716df9b57b290c661d4e85031086e97bcc5ca0e221a0e34323c129102b7b7a643e82e88a1940b3c02ed9c92d6f64b1282dc519b00159830d7617001154c46bd3ca96318c570f0721fc7aa2a58090000000000000094f22cdf550ef091a78098534f0d973058594000000000000000c12346e47ad97f4ead7cf754a52e4b2d0f22d428bd705414888700a30e2366c6a06b3367a389ca3905689a1f3db9c24db65c1e0001581d573dab18fd0600885f1ea8f2fd299fc3cdafda323e9c7080397bc49d70c060d57bc88fbe09baa058b040360ab9261503d2f363fb099408885afc2bf9a4f8c3506b669e889f5e4be1b8e0d634ebc1057b7e98186fc5141bd670dba6f43279f73db9dec75070cd9ab0fd969169ef6d2857b6bf955012cf7fe50d133da86c0477e42b98a6cc999dc21c3ef408e633dfa35f14d6e734837d365e63845f3c1092f8dd4fc7ea0000af3904ea0f3698cd9492794b8212a350d726bff873339c4cad4ead1348474250eda2c8067ab730c1d82a5687f2ed690000522a0b7426000000000000000000000000000000000000000093fc7a82b98f99d9dedf7ba17f5f0b6d15e552fbd21f7eecff10243a43af03eea84c4304a5d3f93c3fc74c00000000000043e1ed82b9aa0ae92a499984a009000000937523f5292d12659906005cde64f903c3415c458a2b32c2318f0858f19c6def80e1481e8e1c0098fc3f38b7a57211adb15d824cfdcf229628c0de49860e44286fe0e257cfa4ce50f3d10763d442824414a73c06837fe08de62f8710ca977960b74d0000ce73da6022a8671d1a3575b4e18c28c73203bf134686dd65808452cb6b76fcb134252c78de9b240de7b4cd015a77f76bb6470c05fc980b3d8f3f964f432a4bf6cddd6222c2da006b6fdb9c8468ae1d986a893b9519444d16a6dfa92c04331a6698507048fab5ae402acd05fe621f22712dfd09004770b4278fa14547d8ce3c21188e5e4e2baacd98e8e451d6aaaf090000006ed1d9018000008dd952595d78e9583bf4ea5de36099e3cd32941a815e3f3ceafe3065b9594fdcb24ebb6eddb9e87c9ecec7a42c0000abe1c6ea55887dfa18d0aea1b6eca5a883702b0bf3aefcb225895db90e237157a34e9f447237ea5b391bddd1290f7ce987a0e36b8e71b1779bbe95ffa9c3c0f6ba66e4d48e75253e3d633811e4b3220616aafbe7a3a18375ae593eb58fd500426286472466823cb8e1800aaaa0d9463c0c4ea5541a55df6eeffec0b66482228816cdfccb98374c644eea45de7867a0efbad0ab2bc33b350440a90b791b2b33f74a112a3b91b40bed8db2df8633207f8387e04ca52ab0f3f7b058b13523b896800b992972d9609551c27a5916ea16069c5b0300000026d3c27e7945b29996e5cefbc9f857bc1332d200194f658b930780603134ae6b7f5092772bd5d880dbe21b790c475b14b7fe4fe002dffd651faa79bb0cee0cdac2bc3218f2ddaa6f7ba04b696a30d313bed30ba8f35569a9b07ee7308da09c01a4b827aa1784d927aca9b8540534c5c49a0300cfbc2213fc1572b0204dd456b11a454d1f3f14179974aae624ea59500f5e048b2780666de81a040663c57f49af25be909984ae4e679107a14bbb24851f6199eaf9a1b81f33426f86b4b941c08dfe2bc8ec246ec1aae120c42405e428923f3a83d9ba5c373f5e8a54120b451e2806370f1ed60c9fd5d9af4d16cb0f413c324da52d4bd2e01d3ac2d578d72e2d63322dfc9245ce3e3a097fb82f4e3b61a55594616020f72f1c55ee3d325c7496a7c2f10cfeae16ae436751227378f0b1ee78bd33c50206700dd90b96a330f92bff736c83ca53e7f02b734d1a9292337e2be3896f7e7f244bfab4946c7042e88206f641eafcc5b4ba7a7880533cde00995d1caf6936f356ecf07a0084e7adc2dc12417997b03087c7b3b44b06f6158a2a18ce0e56ffbeb22f40521dd9972583d413098aa80db98ef324a2bfb6961c07b47521973cf0bb6f5530f6216b047b35d6e06b72b22b29de42bb1bc8ce0a0e3500000000000000000000000000b92eb197e4149627920000008000000000801792756f90b37f0858efc387f559203f314a4b0ed750fa72e5948ac3fe5921c14ef578d420e7b2a9e2f87f7b44949fe14c00000000000f47030c09f62d444b4981db81799776eeb4448278de519705fa8b56779bc8cc927b308c8e50815c4c3b27487996c09121caf47f76158362c74904f89cbc588aae84567a83571ff72bb65c082b5a8dedc05a3167d84205d5af86553c21e1f023a51c0e179fccfbc201982ebddcaa45613899d19082453b180ca0c525b8d3cfaf7d0bcddeb5d5c7166038f276a92941393ba5e51f77172822bd903d9f8b436656771774ed88daab0d0cfdd1bffc30ab566e1a4cb3ad66d830e10f7c1de13218aea21e7def613204c2b7c1ad48b01c20024032e9b3bba7d6ceca38d3e96db049b92fc32ee34fe7b8419c8fbf03d61c159dc5864e030000a2c55b614d622b8de966c97e1940026f96db3c78ca18c9f08d1c47edf1a4d7298109f31b6078711ee72eacab61213bf50000000000e1000000000000000000001217887d0452aa6d26e4614d511710abeec84b78c027c160ba3759fa55249b832ce4dfb91122193d514ed992c07f8cd6d897b314907e15642da228dbc03429e6e0e7ac118ed351c3b0c44bf5d8b58be5732f29eed98d5b3688d80f7c66f8333aa8cc2ec5b5e305b3dee2562d415b4b9ed530797f55f9fe8510423409629a09000000000000009a35d9ca93e4b4591679547b8de8af1782451f7b8e1de508f1e9e525210d62bb850f8035040ad9e57abe58797515b737bfb21d35ac560f99dbd18dad5e6345a464955e8141d75b6177e4fa176a020b0000000000006e76f0294fee7d19a0f327f8796d77b6e24b8df4bb438b527d10e657d49b844198ea9f93c4fd6fd2daa9bd87fd1e02ecc8075dca1280c201043257e9bd3c9a7aa150eb1711632b76d4dc053e64bfcfd057980136d6e9faca03b24fa300ef90bfe4ad364256937796f941c2fead94785f48777941f0cd3dba54ab6a5d5e91e90ac9ae994c3d4108b2fe7eca9413ac9bc138c74800487eb19c48db3f79be964808d409b5e36fc7fdd40080361427b6b9c118e5c9a0a1d5ca24886eb8a78796540635ac3530b9025d8bad0533a7f81b2188ec75a5fc9302e3815bdcc9ab11201ef940569c995c21eeaefe2e8fc02e0433dc7371d1f72124bad23e554c30fdd7cd8c2da1e8706417da9ad8916551a1182fac08603dfc2f2279ba161c13984cd753b54a85e6f3018c7d48c4b6c2f6910975e9ff51318b09fa13e2d38ce013aab41524c298c3719e31bcb1f102eaeee69a19e006bcdb1acc2664efa949a1a07bb3d7848d5e1381fbe63c522053a3bb32eb6345e10f7a12bf84e0e196a00833f464dd2f6547f14ebf137fce33efeb813211f31ff24d7dbb00f2574ccda59b3ea068fc2a18c37ee579f5a9ecc47da73684bcadd209ae5bbb7147df745ae7a4e446ca16d027d8d0adcdb54182c9de8053fc8b1b9d19c16c53d34db6e26f6a88d449f6abf378ca2e577e206a758a3d46e45e7949c5b5069103009693a798a330a1ccb32d49772e80862df36dc0156b3f72cd85083f8e96ca1697457ec722766bd46ee2424975a38149bd57e5c0eb4087fc243e7e51b0aca9f0ab0668d7f2ee9ad9f267d8804417aa7e36a64d489bb84a1483fd3c3ecb024060002858cbb1f7708f5b41fca2fee7c03b1f862ce88dc313d913e041dd7583a1ac41c466757c5dd07ea2c5d62a000b84b11308b6636b735b3c654cbc0000000000000019a4e9a9c2cbc906f97fd6eb00b18d09a5df123ebbdb2827b43aed6a29e9942e402c1ae52e9cb98f3019d364fc21ea02023db91ced3c2f06550cef8a79ed39091e4776001187d0ab2f82478431d36470cc008d745ce8fd64c9aa64da230bb080945a557081b767beb75b1ea856a55c71b8fda672289aa6085100d48ac8039f19fec3acbcc5944a4e6fd44af8f10110db730a8d0d41b4ea36f9510f843a471963bd4621b9e43f08d341bb69df430ac4bf5c06c6398c1b28bdd3f4c2353c330d8457cf728294e8ea1861ce50c367498945285f73c94d91210652eb4f3077cab6be2a3512eddbcb63d091d69fb1b26c8ada9a99d747d38ef5042053299b8e95decc637a022a49664742606cfdb2a3258498a6a0a82369d70177433e52b851ac396163ca09e6c22ad796a565cf23d87ae9be7235553aa6b8ab74842d3d4ba738b3fa997f079d225335f2af55644478e514aed8ba202805ad458d9ae6ab8d156f11f3cfe7def690f2bbbb463063664625223d23386540e0db96d8eb1755ad49ae817683de97a6dd32d584391302e65594b12bb2e6630217401031c8a1b964ca32f735421bbf64c9f1f9329e5cfda139ea79619e1d00a9a3ab49993362f30d191aa3387101feaa3e326190804eae2114437f8f4b27480900dd6511844a643886588fbdee7f8863a8dfdd75a9e128c6c15166a5f92d3c2d4952e5d07c59bfce0724a02600094c3369be3024edf451ff76a59855fd90353a0de907834bb77a059c56e92eed2f1415b3d8178453c7aecd8fbd161e2ffd66bcf2be175e45184f06bafd1c1c4fd7006a6c90d8afd126f1c51ee0f724ffbbed25a286c95d17c8b4297f8bba8efd565ecb157f0be244fb9657f737354b20e3a5012abb36052eec7a4fe9bc5b5283581b208d90d28d78f1c5422c3bcad67278e8bb88d7e6ccf72dd61319b44aa617d667000000000000a5edbd3e8605225681090853fc66a20e30fb9938e5886ae748236f5e071278763e070b2b75ce0a9e6870033d25dd19733152b01b507d812216e0f7fc89bbe200806f079e9515dd886a781a46ebe3da4c8307885b535109bb1678d08eeef3717bea30f64282ee844b6d64ec51b1221d175b59c1537089dfa803275ab6dcd40b1fe4e851597c1993a477c225201087b7b0977be62a71927bb01b705267aabe967add451795dfd5114726193415cc3e0784a37db8ab8b97a171bc4ad9593f7c750ad440a26b93d24ee8f080de0f2a16cbd5cd1f370bc1235d88d5cbd25acf91daa392731dab4c9c15015de2fded6332b6ebccf6e1588f3f1a5a3e853587a6843ee1a3f3c270e3ab4462bcff01c70b03e8f8c9d816d7d69e4040155e9f999ce4e366a816c6e7224f41df7eead6d6d214ed98708e1d269f4b469af2e2a2559258439758f4fded2780e736568c7eea209c5ed54a1beaf06013bb4b330d39518528a46d68b277faf926672650cad335ae285aeb0b0130a9c7016580a857722b9c51a5a37a856ccb9b6673f58ebfa66f1db4d041741e104cdd91efa4b3248ebecff3568f31b547b19a939708c3b4b45f46377b4a345248489ddef4bc87426717971de1c0049006d2fb99c311fa91c364749917ee81ea8fd51365449d568eadbad6aead6101b7e6582e793670492d814d58e4a9faa8a4a3027b230e8f5b2349fb3ff3c4365df6bd85aa7f76c388ef94f0155c81b04863624fb4708f83ebf93a51d1438d7761d4b1b929d9aa8faef691676834a2591b75205ede2e4a709c3a9899d06c5cb5a571159402e429c5cf839f49957aed76dc7db43f9fdc754e40d7c662ad7939a09bfdbc31deb0d327895afae1eca61820e09abc2c0ed5ce083aceb89c8e24ad45483d3128f0547869970dc84c8787a06046bf79f28a7678b03baeff239ce600d91a07236e255ff7ea441ff0602bb38d7aaa1c414a94c4e143ea2cca9d14a01bb70ff93057a03288bd71c45b025731765ca5250b162f08be1a29460a53f213bfb88a8e80e4c46dbfa5936894a95d27c4e90c151748f8ee457c29cb7e21deb805a9c5c6abf373a4bad5e1"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffffe8}, 0x48) writev(r6, &(0x7f00000002c0)=[{&(0x7f0000000180)='3', 0x1}], 0x1) recvmmsg(r1, &(0x7f0000004780)=[{{0x0, 0x0, 0x0}}], 0x1, 0x62, 0x0) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=r7, @ANYBLOB="ad43000000000000600004"], 0x14}}, 0x0) 2m46.397205894s ago: executing program 3 (id=4566): r0 = socket$kcm(0xa, 0x5, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="500000000001010400000000000000000200000014001880080001409c0fe1c7b61c0d7b4acdbdfe9b728611000000000800004000000000240001801400018008000100e0000001"], 0x50}}, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8910, &(0x7f0000000000)={'vlan0\x00', @random="010000201000"}) r3 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_JOIN_FILTERS(r3, 0x65, 0x6, &(0x7f0000000000), &(0x7f0000000040)=0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_SET(r4, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x58, r5, 0x200, 0x0, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}]}, 0x58}}, 0x0) 2m46.25960747s ago: executing program 3 (id=4570): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000540)=@filter={'filter\x00', 0x42, 0x4, 0x410, 0xffffffff, 0x2a8, 0x210, 0x2a8, 0xffffffff, 0xffffffff, 0x378, 0x378, 0x378, 0xffffffff, 0x4, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'veth0_to_batadv\x00', 'wlan0\x00', {}, {0xff}, 0x84, 0x2, 0x2}, 0x0, 0x1e8, 0x210, 0x0, {0x100000000000000}, [@common=@inet=@sctp={{0x148}, {[0x4e20, 0x4e20], [0x4e21, 0x4e24], [0x4, 0x8, 0x7f, 0x7, 0x1, 0x7, 0x1ff, 0x9, 0xab2, 0x2, 0x300000, 0x5, 0x9, 0x1, 0x9, 0xcd4, 0x7, 0xc5a, 0x4, 0x7, 0xffffffff, 0xb87d, 0x5b000000, 0x6, 0x1, 0x6c7f, 0x9, 0x0, 0x9, 0x9, 0x8, 0x0, 0x80000001, 0x9, 0x200, 0x71e5e785, 0xfffffbff, 0x19, 0xf6b, 0xab19, 0x81, 0x9, 0xf4, 0x9, 0x2, 0x2, 0x3, 0x1, 0x7, 0x5, 0xcd, 0x6, 0x8f, 0x9, 0x5, 0x4b7d, 0x9, 0x1, 0x7, 0x6, 0x4, 0x6, 0x2, 0xfaa0], 0x6, [{0x5, 0x2, 0xf8}, {0x9, 0x7f, 0x1}, {0x4, 0x9, 0x10}, {0xf, 0x5, 0x1}], 0x11, 0x1, 0x1}}, @common=@unspec=@connmark={{0x30}}]}, @REJECT={0x28}}, {{@ip={@loopback, @rand_addr=0x64010101, 0xffffff00, 0xff000000, 'geneve0\x00', 'macvlan0\x00', {0xff}, {}, 0x2e, 0x0, 0x4}, 0x0, 0x70, 0x98}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x10, 0x9, 0x2}}}, {{@ip={@private=0xa010101, @loopback, 0xff, 0xff000000, 'bond0\x00', 'dvmrp0\x00', {}, {}, 0x2f, 0x0, 0x21}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0xd, 0x8, [0x8, 0x27, 0x3d, 0x16, 0x13, 0xe, 0x2d, 0x21, 0x2d, 0x32, 0x3f, 0x20, 0x28, 0x18, 0x22, 0x12], 0x0, 0x0, 0x6}}}], {{'\x00', 0x0, 0x70, 0x98, 0x4000000}, {0x28}}}}, 0x470) 2m46.230843015s ago: executing program 3 (id=4573): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001800)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) recvmmsg(r0, &(0x7f0000000d80)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000600)=""/91, 0x5b}, {&(0x7f0000000000)=""/66, 0x42}, {&(0x7f0000000440)=""/62, 0x3e}, {&(0x7f0000000900)=""/108, 0x6c}, {&(0x7f0000001840)=""/4137, 0x1019}, {&(0x7f00000001c0)=""/215, 0xe5}], 0x6}, 0xffffffff}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x4100}, 0x2}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffefe}, 0x5}], 0x29, 0x2030, 0x0) 2m43.492369016s ago: executing program 3 (id=4596): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xa, 0x5, &(0x7f0000000740)=@framed={{0x18, 0x0, 0x0, 0x0, 0x400000}, [@map_fd={0x18, 0x9, 0x1, 0x0, r0, 0x0, 0x0, 0x0, 0x95ff}]}, &(0x7f0000001840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2m38.647043649s ago: executing program 3 (id=4600): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="180300000000000000000000000000008510000006"], 0x0}, 0x94) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000001280)=@nat={'nat\x00', 0x2, 0x5, 0x4b0, 0xf0, 0x220, 0xffffffff, 0x0, 0x220, 0x3e0, 0x3e0, 0xffffffff, 0x3e0, 0x3e0, 0x5, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x2, @ipv4=@multicast1, @ipv6=@empty, @icmp_id=0x65, @gre_key=0x732}}}, {{@uncond, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@unspec=@connlimit={{0x40}, {[], 0x0, 0x2}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@loopback, @ipv6=@private0, @icmp_id, @port=0x4e22}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast2}, @private0, [0xffffffff, 0xff000000, 0xffffff00, 0xffffff00], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], 'syzkaller1\x00', 'pim6reg1\x00', {0xff}, {0xff}, 0x33, 0x2, 0x5, 0x20}, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @gre_key, @gre_key}}}, {{@ipv6={@remote, @mcast1, [], [0x0, 0xffffffff], 'ipvlan0\x00', 'pim6reg\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x510) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000100)={r0, 0xfff, 0x1, 0x1}) setsockopt$inet_tcp_int(r3, 0x6, 0x1e, &(0x7f00000001c0)=0x1, 0x4) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x80802, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000000040)) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c00000001040300000000000000000000000007050001000100"], 0x1c}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="1c0000000104010100000000e1000000000000070500010001"], 0x1c}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) sendmsg$IPSET_CMD_LIST(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x30, 0x7, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0x6}, [@IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x7f}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x5684a600016f0af6) ioctl$PPPIOCSACTIVE(r4, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0}) clock_gettime(0x0, &(0x7f0000005f80)={0x0, 0x0}) recvmmsg(0xffffffffffffffff, &(0x7f0000005e00)=[{{&(0x7f0000000300)=@nl, 0x80, &(0x7f0000001cc0)=[{&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000001640)=""/148, 0x94}, {&(0x7f0000001780)=""/100, 0x64}, {&(0x7f0000001800)=""/243, 0xf3}, {&(0x7f0000001900)=""/222, 0xde}, {&(0x7f0000001a00)=""/209, 0xd1}, {&(0x7f0000001b00)=""/144, 0x90}, {&(0x7f0000001bc0)=""/231, 0xe7}], 0x8, &(0x7f0000001d40)=""/28, 0x1c}, 0xf}, {{0x0, 0x0, &(0x7f0000002e80)=[{&(0x7f0000001d80)=""/231, 0xe7}, {&(0x7f0000001e80)=""/4096, 0x1000}], 0x2, &(0x7f0000002ec0)}}, {{&(0x7f0000002f00)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private1}}, 0x80, &(0x7f0000004100)=[{&(0x7f0000002f80)=""/30, 0x1e}, {&(0x7f0000002fc0)=""/22, 0x16}, {&(0x7f0000003000)=""/60, 0x3c}, {&(0x7f0000003040)=""/185, 0xb9}, {&(0x7f0000003100)=""/4096, 0x1000}], 0x5, &(0x7f0000004180)=""/29, 0x1d}, 0x54}, {{&(0x7f00000041c0)=@pppoe={0x18, 0x0, {0x0, @broadcast}}, 0x80, &(0x7f0000004340)=[{&(0x7f0000004240)=""/218, 0xda}], 0x1, &(0x7f0000004380)=""/4096, 0x1000}, 0xe65a}, {{0x0, 0x0, &(0x7f0000005800)=[{&(0x7f0000005380)=""/187, 0xbb}, {&(0x7f0000005440)=""/115, 0x73}, {&(0x7f00000054c0)=""/134, 0x86}, {&(0x7f0000005580)=""/193, 0xc1}, {&(0x7f0000005680)=""/195, 0xc3}, {&(0x7f0000005780)=""/127, 0x7f}], 0x6, &(0x7f0000005880)=""/181, 0xb5}, 0x8}, {{&(0x7f0000005940)=@hci, 0x80, &(0x7f0000005d40)=[{&(0x7f00000059c0)=""/88, 0x58}, {&(0x7f0000005a40)=""/252, 0xfc}, {&(0x7f0000005b40)=""/215, 0xd7}, {&(0x7f0000005c40)=""/29, 0x1d}, {&(0x7f0000005c80)=""/13, 0xd}, {&(0x7f0000005cc0)=""/126, 0x7e}], 0x6, &(0x7f0000005dc0)=""/9, 0x9}, 0xbfc2}], 0x6, 0x2042, &(0x7f0000005fc0)={r7, r8+10000000}) read(r4, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xc, 0x4, &(0x7f0000000140)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x8b}]}, &(0x7f0000000280)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_emit_ethernet(0x82, &(0x7f0000000040)={@link_local, @dev, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x48, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, "508359", 0x0, 0x0, 0x0, @private1, @private2, [@hopopts={0x3a, 0x1, '\x00', [@calipso={0x7, 0x8, {0x0, 0x0, 0x0, 0x80}}]}]}}}}}}}, 0x0) r9 = socket$kcm(0x2, 0xa, 0x2) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000002c0)="27030200dc0f14000e00203c0024", 0xe}], 0x1}, 0x4005) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000380)={@val={0x6f01, 0x800}, @val={0x3, 0x4, 0x27}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x3, 0xfffffffffffffebd, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffff20, @local}, {{0x4e22, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xd, 0x0, 0x700, 0x0, 0x18, {[@window={0x9, 0x3}, @fastopen={0x22, 0x0, "ef1dee18f3a2cbe3dd6d75"}, @fastopen={0x22, 0x11, "c3dd3892841f68c5c3e15c1fda5852"}]}}}}}}, 0x56) 2m23.516064929s ago: executing program 32 (id=4600): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="180300000000000000000000000000008510000006"], 0x0}, 0x94) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000001280)=@nat={'nat\x00', 0x2, 0x5, 0x4b0, 0xf0, 0x220, 0xffffffff, 0x0, 0x220, 0x3e0, 0x3e0, 0xffffffff, 0x3e0, 0x3e0, 0x5, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x2, @ipv4=@multicast1, @ipv6=@empty, @icmp_id=0x65, @gre_key=0x732}}}, {{@uncond, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@unspec=@connlimit={{0x40}, {[], 0x0, 0x2}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@loopback, @ipv6=@private0, @icmp_id, @port=0x4e22}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast2}, @private0, [0xffffffff, 0xff000000, 0xffffff00, 0xffffff00], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], 'syzkaller1\x00', 'pim6reg1\x00', {0xff}, {0xff}, 0x33, 0x2, 0x5, 0x20}, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @gre_key, @gre_key}}}, {{@ipv6={@remote, @mcast1, [], [0x0, 0xffffffff], 'ipvlan0\x00', 'pim6reg\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x510) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000100)={r0, 0xfff, 0x1, 0x1}) setsockopt$inet_tcp_int(r3, 0x6, 0x1e, &(0x7f00000001c0)=0x1, 0x4) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x80802, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000000040)) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c00000001040300000000000000000000000007050001000100"], 0x1c}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="1c0000000104010100000000e1000000000000070500010001"], 0x1c}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) sendmsg$IPSET_CMD_LIST(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x30, 0x7, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0x6}, [@IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x7f}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x5684a600016f0af6) ioctl$PPPIOCSACTIVE(r4, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0}) clock_gettime(0x0, &(0x7f0000005f80)={0x0, 0x0}) recvmmsg(0xffffffffffffffff, &(0x7f0000005e00)=[{{&(0x7f0000000300)=@nl, 0x80, &(0x7f0000001cc0)=[{&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000001640)=""/148, 0x94}, {&(0x7f0000001780)=""/100, 0x64}, {&(0x7f0000001800)=""/243, 0xf3}, {&(0x7f0000001900)=""/222, 0xde}, {&(0x7f0000001a00)=""/209, 0xd1}, {&(0x7f0000001b00)=""/144, 0x90}, {&(0x7f0000001bc0)=""/231, 0xe7}], 0x8, &(0x7f0000001d40)=""/28, 0x1c}, 0xf}, {{0x0, 0x0, &(0x7f0000002e80)=[{&(0x7f0000001d80)=""/231, 0xe7}, {&(0x7f0000001e80)=""/4096, 0x1000}], 0x2, &(0x7f0000002ec0)}}, {{&(0x7f0000002f00)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private1}}, 0x80, &(0x7f0000004100)=[{&(0x7f0000002f80)=""/30, 0x1e}, {&(0x7f0000002fc0)=""/22, 0x16}, {&(0x7f0000003000)=""/60, 0x3c}, {&(0x7f0000003040)=""/185, 0xb9}, {&(0x7f0000003100)=""/4096, 0x1000}], 0x5, &(0x7f0000004180)=""/29, 0x1d}, 0x54}, {{&(0x7f00000041c0)=@pppoe={0x18, 0x0, {0x0, @broadcast}}, 0x80, &(0x7f0000004340)=[{&(0x7f0000004240)=""/218, 0xda}], 0x1, &(0x7f0000004380)=""/4096, 0x1000}, 0xe65a}, {{0x0, 0x0, &(0x7f0000005800)=[{&(0x7f0000005380)=""/187, 0xbb}, {&(0x7f0000005440)=""/115, 0x73}, {&(0x7f00000054c0)=""/134, 0x86}, {&(0x7f0000005580)=""/193, 0xc1}, {&(0x7f0000005680)=""/195, 0xc3}, {&(0x7f0000005780)=""/127, 0x7f}], 0x6, &(0x7f0000005880)=""/181, 0xb5}, 0x8}, {{&(0x7f0000005940)=@hci, 0x80, &(0x7f0000005d40)=[{&(0x7f00000059c0)=""/88, 0x58}, {&(0x7f0000005a40)=""/252, 0xfc}, {&(0x7f0000005b40)=""/215, 0xd7}, {&(0x7f0000005c40)=""/29, 0x1d}, {&(0x7f0000005c80)=""/13, 0xd}, {&(0x7f0000005cc0)=""/126, 0x7e}], 0x6, &(0x7f0000005dc0)=""/9, 0x9}, 0xbfc2}], 0x6, 0x2042, &(0x7f0000005fc0)={r7, r8+10000000}) read(r4, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xc, 0x4, &(0x7f0000000140)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x8b}]}, &(0x7f0000000280)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_emit_ethernet(0x82, &(0x7f0000000040)={@link_local, @dev, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x48, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, "508359", 0x0, 0x0, 0x0, @private1, @private2, [@hopopts={0x3a, 0x1, '\x00', [@calipso={0x7, 0x8, {0x0, 0x0, 0x0, 0x80}}]}]}}}}}}}, 0x0) r9 = socket$kcm(0x2, 0xa, 0x2) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000002c0)="27030200dc0f14000e00203c0024", 0xe}], 0x1}, 0x4005) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000380)={@val={0x6f01, 0x800}, @val={0x3, 0x4, 0x27}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x3, 0xfffffffffffffebd, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffff20, @local}, {{0x4e22, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xd, 0x0, 0x700, 0x0, 0x18, {[@window={0x9, 0x3}, @fastopen={0x22, 0x0, "ef1dee18f3a2cbe3dd6d75"}, @fastopen={0x22, 0x11, "c3dd3892841f68c5c3e15c1fda5852"}]}}}}}}, 0x56) 1m33.629238625s ago: executing program 4 (id=4646): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x4008054) r4 = socket(0x1e, 0x4, 0x0) write$nci(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="5001", @ANYRES8=r1, @ANYRES16=r4], 0x14) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r4, 0x84, 0x10, 0x0, 0x0) 1m30.189805788s ago: executing program 4 (id=4650): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000100)={{r0}, &(0x7f0000000080), &(0x7f00000000c0)='%pS \x00'}, 0x20) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0xc, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) bind$alg(0xffffffffffffffff, 0x0, 0x0) (async) r2 = socket$igmp(0x2, 0x3, 0x2) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x1092}, 0x48) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="c194cfa7", @ANYRES16=r4, @ANYBLOB="200027bd7000ffdbdf25100000000800060004000000080006000300000038000380060007004e2100000600040006000000050008000d000000080001000200000014000600000000000000000000000000000000000800040007000000200001801400030000000000000000000000ffffac141418060002006f0000006400038008000100020000000600040080000000060004000700000014000600fc020000000000000000000000000000060007004e24000005000800e400000014000600ff01000000000000000000000000000108000500ac1e010108000500ffffffff08000500cf000000"], 0xf0}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) setsockopt$MRT_ADD_MFC_PROXY(r2, 0x0, 0xd2, &(0x7f0000000040)={@broadcast, @multicast1, 0x1, "0d5011f02b7fab96e0aa834d3a9e7cfc12178ac0ab1e6227c2b6ddaa5effda90", 0x5, 0x16, 0xfffffffe, 0x1}, 0x3c) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r5, 0x0, 0xd2, &(0x7f0000000000)={@broadcast, @multicast1, 0x0, "12ceaac82ab7d944e84b6fbd6178697e3b10c9b81bede26c85ee73daab4158e8", 0x2, 0x6, 0x4, 0x4}, 0x3c) setsockopt$MRT_FLUSH(r5, 0x0, 0xd4, &(0x7f0000000100)=0xe, 0x4) 1m29.012641294s ago: executing program 1 (id=4653): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x14, 0x0, &(0x7f0000000380)) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) poll(&(0x7f0000000100)=[{r3, 0x18d}], 0x1, 0x8001) close(r3) (async) write$cgroup_subtree(r4, &(0x7f0000000040), 0xfffffc3f) (async) r5 = socket(0x10, 0x3, 0x0) (async) r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) (async) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000340), r7) (async, rerun: 32) ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f00000000c0)=0x0) (rerun: 32) sendmsg$NFC_CMD_DEV_UP(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c000000", @ANYBLOB="08054bf8f5a6c9c7bad991b09a0d83bfbee38fb27ee08d28", @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r8], 0x1c}}, 0x840) (async) write$nci(r6, &(0x7f0000000400)=ANY=[@ANYBLOB="6f0501"], 0x4) (async, rerun: 64) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="2c000000130001c3000000000000000000000800", @ANYRES32, @ANYBLOB="0000d40000000000a5"], 0x2c}}, 0x0) (async, rerun: 64) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x42}, 0xe0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000007f00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) (async) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) (async, rerun: 64) r10 = socket$inet(0x2, 0x5, 0x1) (rerun: 64) setsockopt$sock_int(r10, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4) shutdown(r10, 0x0) (async) recvmmsg(r10, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) (async, rerun: 64) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000001c0)={r9, 0x3d, 0x0}, 0x10) (async, rerun: 64) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a44000000060a0b040000000900000000020000060c00034000000000000000010900010073797a30000000000900020073797a32000000000c0005800800024000000000140000001100010000000000000000000000000a"], 0x6c}}, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000300)={'syztnl1\x00', &(0x7f0000000100)={'ip6_vti0\x00', 0x0, 0x2f, 0x7, 0x5, 0x3, 0x30, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast2, 0x10, 0x8000, 0x6, 0x4}}) connect$packet(r0, &(0x7f0000000200)={0x1f, 0xf8, r11, 0x1, 0x2}, 0x14) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) 1m26.25824878s ago: executing program 1 (id=4656): ioctl$XFS_IOC_START_COMMIT(0xffffffffffffffff, 0x80585882, &(0x7f0000000180)) (async) ioctl$XFS_IOC_START_COMMIT(0xffffffffffffffff, 0x80585882, &(0x7f0000000180)={0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x4c, &(0x7f00000003c0), 0x4) recvmsg$unix(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2000) ioctl$TUNSETNOCSUM(r2, 0xff0a, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f0000000240)}, 0x20) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r2, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000340)=r0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x5, 0x1c, &(0x7f0000000a40)=ANY=[@ANYBLOB="18000000ff070000000000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000085000000b100000018120000", @ANYRES32=r3, @ANYBLOB="00000000001b004d21dae846c436f138b500b703000000000000850000000c000000b7009c8bd2de1766f80653c419242b0b110945e304b9fa0b0fee7525cf1a545dcb67cd7ed2d5c7410765cda201f187695dce77dd1939dd6e056f5c6367ad34ff5cad40bf4d8373ada9f3b1dde474e73a74aea52d7c6e0a7e0f8b1c537c1f8a", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000018100000", @ANYRES32=r4, @ANYBLOB="0000000000000000bf91000000000000b7020000020000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'vcan0\x00', 0x0}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x7, 0x4, 0x8, 0x3}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000005c0)={r7, &(0x7f0000000500), &(0x7f0000000200)=@tcp}, 0x20) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000005c0)={r7, &(0x7f0000000500), &(0x7f0000000200)=@tcp}, 0x20) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000860629c98500000015000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000005c0)={0x1b, 0x0, 0x0, 0x744, 0x0, 0x1, 0x10, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1, 0x5}, 0x50) (async) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000005c0)={0x1b, 0x0, 0x0, 0x744, 0x0, 0x1, 0x10, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1, 0x5}, 0x50) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) close(r11) (async) close(r11) splice(r10, 0x0, r11, &(0x7f00000002c0), 0x6, 0x2) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000640)={0x0, 0x8, 0x10}, 0xc) (async) r12 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000640)={0x0, 0x8, 0x10}, 0xc) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000700)={{}, &(0x7f0000000680), &(0x7f00000006c0)='%pK \x00'}, 0x20) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000700)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000680), &(0x7f00000006c0)='%pK \x00'}, 0x20) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000007c0)=@bpf_tracing={0x1a, 0x25, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x4}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xab}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_idx={0x18, 0x2, 0x5, 0x0, 0x3}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @map_fd={0x18, 0x0, 0x1, 0x0, r4}, @func, @initr0={0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xfffffeed}]}, &(0x7f0000000500)='syzkaller\x00', 0x7ff, 0x0, 0x0, 0x41000, 0x20, '\x00', r6, 0x1a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000580)={0x0, 0x0, 0x7fffffff, 0x6}, 0x10, 0x164ae, 0xffffffffffffffff, 0x2, &(0x7f0000000740)=[r7, r8, r9, r11, r12, r13], &(0x7f0000000780)=[{0x2, 0x1, 0x5, 0x9}, {0x4, 0x3, 0x5, 0xc}], 0x10, 0x81}, 0x94) r14 = socket(0x3, 0x4, 0x2) connect$netlink(r14, &(0x7f0000000140)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000000c0)=0x10, 0x0) (async) accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000000c0)=0x10, 0x0) socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048801) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x10010}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x10010}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b80)=@ipv4_newroute={0x118, 0x18, 0x400, 0x70bd2a, 0x25dfdbfe, {0x2, 0x10, 0x80, 0x8, 0x0, 0x4, 0xfe, 0x5, 0x1000}, [@RTA_PRIORITY={0x8, 0x6, 0x47b}, @RTA_METRICS={0xea, 0x8, 0x0, 0x1, "709857ba5a78084751b55c98a816c811fde1ea878dc8eba83573ca6e2b880b796213d37a027e858b2eaf465b35816945a4bcf1950ffd84e379179443e42b61fba2db8be65217e2448a3e6bc17a1d543e01dee911d198eeb1259db0a5cf1e59c2ff1b0a86acaaae95560db2393d2f7ac59cb4da8401651d2d516072015c61a8c55003880684ddead56155456ab3d8ddccc48bca870faab8b290958249ada062b59862e0aa3f67ac4824d5948368ddae1528280a48fceac8b978c0f8ce6914662f0e5743486906a592d96a0c9bb6f5a825846cef23c385dbaa64dbc783165308b5d5eb6fb9bf72"}, @RTA_SRC={0x8, 0x2, @rand_addr=0x64010101}]}, 0x118}, 0x1, 0x0, 0x0, 0x14005003}, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b80)=@ipv4_newroute={0x118, 0x18, 0x400, 0x70bd2a, 0x25dfdbfe, {0x2, 0x10, 0x80, 0x8, 0x0, 0x4, 0xfe, 0x5, 0x1000}, [@RTA_PRIORITY={0x8, 0x6, 0x47b}, @RTA_METRICS={0xea, 0x8, 0x0, 0x1, "709857ba5a78084751b55c98a816c811fde1ea878dc8eba83573ca6e2b880b796213d37a027e858b2eaf465b35816945a4bcf1950ffd84e379179443e42b61fba2db8be65217e2448a3e6bc17a1d543e01dee911d198eeb1259db0a5cf1e59c2ff1b0a86acaaae95560db2393d2f7ac59cb4da8401651d2d516072015c61a8c55003880684ddead56155456ab3d8ddccc48bca870faab8b290958249ada062b59862e0aa3f67ac4824d5948368ddae1528280a48fceac8b978c0f8ce6914662f0e5743486906a592d96a0c9bb6f5a825846cef23c385dbaa64dbc783165308b5d5eb6fb9bf72"}, @RTA_SRC={0x8, 0x2, @rand_addr=0x64010101}]}, 0x118}, 0x1, 0x0, 0x0, 0x14005003}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x4008840) 1m25.82271456s ago: executing program 4 (id=4657): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x4, 0x1, 0x101}, 0x14}}, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000940), r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000280)={0x800000, 0x3, 0x0, 0xfffffffe}, 0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="a00000001900010000000000000000001c140000fe0000010000000084001900"], 0xa0}}, 0x0) 1m24.523359736s ago: executing program 2 (id=4658): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}, 0x1, 0x2000000, 0x0, 0x2000094}, 0x80) 1m22.834368683s ago: executing program 1 (id=4660): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x3, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0xff85}}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x70, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x3, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0xff85}}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x70, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x8e40, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000000), &(0x7f0000000180)=0x8) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000280)={r3, 0x1, 0x6, @multicast}, 0x10) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xd, 0xf}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x4, 0x7, 0x1f45, 0x4, 0x7ff}, 0x4, 0x1, 0x0, 0x7, 0x2ff, 0xb, 0x1a, 0x1c, 0x4, 0x7131d5f9, {0x7, 0x80000001, 0x7, 0x81, 0x3, 0xf70a}}}}]}, 0x78}}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) socket$kcm(0x11, 0x3, 0x0) (async) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)={@random="91b882b09a5b", @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x26}}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010101, @rand_addr=0x64010100}, "08000071ae9b1c43"}}}}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001300)=@newtfilter={0xea4, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r9, {0x1, 0x4}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe70, 0x2, [@TCA_MATCHALL_ACT={0xe6c, 0x2, [@m_pedit={0xe68, 0x1, 0x0, 0x0, {{0xa}, {0xe3c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe38, 0x2, {{{0x2, 0x9, 0x5, 0x6}, 0x1, 0xfb, [{0xfffffa7d, 0xce, 0xfffffe00, 0x3, 0x7, 0xf5c8}]}, [{0x2, 0x9c, 0x81, 0x6, 0x2, 0x7}, {0x1, 0x6, 0x4, 0x3, 0xfffffffd, 0x81}, {0x1, 0x1, 0x8, 0x101, 0x3}, {0x3, 0x3, 0x0, 0x7, 0x5, 0x4}, {0xf, 0x7, 0x694, 0x51, 0x8001}, {0x3, 0x8004, 0xc, 0x101, 0x3, 0x84b5}, {0x9c, 0x4, 0x9, 0x2, 0x487, 0x8}, {0x1, 0x10000, 0x5, 0x4, 0x3, 0x8000}, {0x7, 0x9, 0x1ff, 0x8, 0x2, 0x7fff}, {0x439356e7, 0x609, 0x16, 0xfffffffc, 0x10000, 0x6}, {0x5, 0x3, 0x8, 0x3, 0x400000, 0xffffffff}, {0x685, 0x0, 0x7, 0x7, 0x8, 0x5}, {0x5, 0x8, 0x9, 0x5, 0xfffff000, 0x7}, {0x768d, 0xcd, 0x8, 0x7, 0x5, 0x9}, {0x1, 0xfffffffb, 0x6, 0x7, 0x7ff, 0x6}, {0xfffffffb, 0x3, 0xfffffffa, 0x6, 0x2}, {0xfffff9fd, 0x9, 0xa5f, 0xa, 0x5, 0x2}, {0x6, 0x9, 0x167, 0x2, 0x71, 0xa2}, {0x140, 0x2, 0xc, 0x8, 0x87, 0x60}, {0x5, 0xa, 0x2, 0x4, 0x3, 0x2000}, {0x32d, 0x8, 0x7fff, 0x4, 0x8, 0x6}, {0x8, 0x200, 0x58fe, 0x7ff, 0x4, 0x3}, {0x101, 0xd, 0x101, 0x1, 0x3, 0x8}, {0x0, 0x3, 0x1ff, 0x7437ec78, 0x2, 0x9}, {0xffffffff, 0x1, 0x9, 0x0, 0x1, 0x4}, {0xc, 0xe, 0x0, 0x3, 0x8, 0x81}, {0x3, 0x3, 0x6, 0xe, 0x0, 0x80}, {0xd, 0x0, 0x7ff, 0x0, 0x80000000, 0x2}, {0x4, 0xb, 0x6c5f1878, 0x57c4, 0x8, 0x25ff}, {0x4, 0xd, 0x1fadd976, 0x3071, 0x0, 0x1}, {0x5, 0x800, 0x3, 0x3, 0x3, 0x9}, {0x9, 0x1ff, 0x1000, 0x9c, 0x1, 0x7}, {0x9, 0xd76, 0x6, 0xdc2, 0xa16a, 0x2}, {0x1ff, 0x5, 0x7, 0x2, 0x2, 0x1}, {0x1, 0x32158142, 0x0, 0x8, 0x6, 0x7}, {0xe, 0x4, 0x9000, 0x2, 0x2, 0x7f}, {0x3, 0x2ec74d53, 0xd, 0x0, 0x8, 0x2}, {0x5, 0xfff, 0xffffff13, 0x9, 0x6, 0x6}, {0x1, 0x6, 0x3, 0x4, 0xffb, 0xc}, {0x6, 0x6, 0x1ff, 0x8, 0x7ff, 0x8001}, {0x4, 0xffffffff, 0x0, 0xfffff740, 0x4, 0x4}, {0xffff, 0x5, 0x7, 0xac, 0xf}, {0x5, 0x3, 0x6, 0x1000, 0xd8fe, 0x8001}, {0xd, 0x3, 0x80000000, 0x0, 0xffffff81, 0x7ff}, {0xfffffffb, 0x2, 0x1ff, 0xf9, 0xffff8001, 0x800000}, {0x0, 0x6, 0x7ffc, 0x9, 0x500, 0x7}, {0x1, 0xffffffff, 0x834, 0x7, 0x0, 0x3}, {0x7fff, 0x6, 0x0, 0x2002, 0x2, 0x8}, {0xf61, 0x101, 0x9, 0x2, 0x80000000, 0x7fff}, {0xc7, 0x4, 0x8, 0x2, 0xffff, 0x20000000}, {0x0, 0x5, 0x1, 0xffff, 0x3, 0x3}, {0x8, 0x10001, 0x9f98, 0x1, 0x8, 0x66a}, {0xfff, 0x6, 0x8, 0x80000001, 0x0, 0x7f}, {0x8, 0x6, 0x7f, 0x2, 0x3, 0xb}, {0x4, 0x4b, 0x0, 0x1, 0x7f, 0x7fffffff}, {0xfff, 0x47e4, 0x1, 0x0, 0x80000001, 0x9}, {0x3, 0x9, 0x7, 0x6, 0x3e6b7592, 0x5}, {0x9, 0x9, 0x1, 0x9, 0x0, 0x2}, {0x8, 0x80000001, 0x7fff, 0xb2d9, 0xfffffffe, 0x8}, {0x80000001, 0x9, 0x5202, 0x2, 0x53ce, 0x3}, {0x6, 0x7, 0x8, 0x8, 0x7f, 0x80000000}, {0xfffffff9, 0x9, 0x6, 0x6, 0x9, 0x83}, {0xfffffffd, 0x8, 0x6, 0x5, 0x3, 0x8f}, {0x741, 0x0, 0x9, 0x7fffffff, 0x2, 0x200}, {0x401, 0x2, 0x8, 0x4, 0x4, 0xc6e9}, {0x1, 0x2d73, 0x400, 0x5, 0x9f17, 0xffffff7f}, {0x2, 0x8401, 0x2b00, 0xfffff57b, 0xfffffc00, 0xd}, {0x3, 0x4, 0xc52b, 0x9, 0x5, 0xff}, {0x0, 0x4, 0x401, 0x0, 0x1, 0x9}, {0x8, 0x4, 0x1, 0x2, 0x10, 0x1}, {0xff, 0x8, 0x6, 0x5, 0xff}, {0x2, 0xb15ce2d, 0x80000001, 0xbeab, 0x8, 0x5}, {0x3, 0x8, 0x3, 0x7, 0x8, 0x4}, {0xfff, 0x9, 0x6, 0x3, 0x100, 0x57}, {0x9, 0x5, 0x4, 0x3, 0xa, 0x2}, {0xb3, 0xe, 0x3, 0x7e8, 0x7, 0x9}, {0x400000ff, 0x7, 0x5, 0x10001, 0x6, 0x6}, {0x2, 0x8f, 0x9, 0xffffff46, 0x84, 0x80000000}, {0x9, 0x2, 0xfffffffc, 0x0, 0xd50, 0x3}, {0xd203, 0x7, 0x1, 0x10000, 0x43, 0x1ff}, {0x4, 0x3ff, 0xffffffff, 0x1, 0x5, 0x100}, {0x1ff, 0x3, 0x7ff, 0xfffffff8, 0x1ff, 0x9}, {0x7, 0xd, 0x3ff, 0x1, 0x7, 0x4}, {0x0, 0x6, 0x0, 0x9, 0xffff0001, 0xcca}, {0x7, 0x1, 0xfffffff1, 0x3ff, 0x100, 0x4}, {0x3, 0x9, 0x0, 0xed4, 0x4, 0x6}, {0x9, 0x7, 0x8001, 0x7, 0x7, 0x2}, {0x3, 0xfff, 0x9, 0x5, 0xb5, 0x3}, {0x0, 0x1, 0x1, 0x5, 0xffffff01, 0xfff}, {0x7, 0x5, 0x2, 0x2, 0x0, 0xfffff9de}, {0x5, 0xffffffff, 0xe6b, 0xb, 0xb, 0x4}, {0x1d, 0xffffff10, 0x1, 0x2, 0xff, 0x52e2}, {0x0, 0x1, 0x0, 0x7, 0xdb, 0x5}, {0x7, 0x2, 0x9, 0x8, 0xa, 0x100}, {0x81, 0x4, 0x988, 0x4, 0x0, 0x7}, {0xdc03, 0x7, 0x402c, 0x8, 0xfffffff9, 0x4}, {0xa, 0xfffffffe, 0x1, 0x1ff, 0x1ff, 0xc1b7}, {0xa24b, 0x947d, 0x40, 0x4, 0x9, 0x2}, {0x9, 0x401, 0xa89, 0x5ef, 0x9, 0x8}, {0x4, 0x7fff, 0x0, 0x4, 0x7fffffff}, {0x3, 0xb8c, 0x6, 0x21761f6a, 0xfffffffe, 0x4}, {0xfff, 0xda, 0x1f, 0x4, 0x8, 0x5}, {0x8, 0x10, 0x100, 0x0, 0xfffffff7, 0x43}, {0xfffff000, 0x8, 0xe96, 0x9, 0x9, 0x34b0}, {0x4, 0x8, 0x8, 0x3, 0x6cf4, 0x1}, {0x3, 0x3, 0x7, 0x4, 0xbe, 0x81}, {0x4, 0x800, 0x4, 0x5, 0x8, 0xfa2f}, {0x10, 0x5e20, 0x81, 0x2, 0x8, 0x6}, {0x9, 0x2, 0x6, 0x4, 0xf, 0x5}, {0x100, 0x1, 0xffffffff, 0xffffffff, 0x9, 0x74}, {0x4, 0x4, 0x8, 0x1, 0x0, 0x3}, {0xfffffff8, 0xfffffffb, 0xffffffff, 0x62f, 0x401, 0x30564e0}, {0x9a2f, 0x800, 0x8, 0x1, 0x7}, {0x20000002, 0x2, 0x800, 0x200, 0x9, 0x3}, {0x7, 0x6, 0x8936, 0xdcb, 0x0, 0x2}, {0x6, 0x80000000, 0x2a8b7572, 0xe, 0xfffffffa, 0x8de3}, {0x0, 0x9, 0x8, 0xfff, 0x6, 0x1ff}, {0x8195, 0x2, 0x1000}, {0x1, 0x50, 0xff, 0x9e0f, 0x5, 0x6}, {0x7fff, 0x6, 0x0, 0x5, 0x8000, 0x3}, {0x7ff, 0x9, 0xa, 0x6, 0x7, 0xe77}, {0x1, 0x5e12, 0x3, 0xfffffffa, 0x2, 0x80000001}, {0xffffff8c, 0x2, 0x1, 0x1, 0x4, 0x5}, {0x4, 0x7, 0x104, 0x78d, 0xffffcff9, 0x9}, {0x2001, 0xe, 0x7, 0x2, 0x2, 0x207f}, {0x10, 0x5, 0xfffffffa, 0xff, 0x80000, 0xfff}, {0x1, 0x7ff, 0x696e, 0xa, 0x49d, 0xb}, {0x9bf4, 0x0, 0x5, 0x3, 0x3, 0x1000}], [{0x1, 0x1}, {0x2}, {0x5}, {0x2}, {0x1, 0x745e81639ff0f356}, {0x4}, {0x5}, {0x3}, {0x3}, {0x2}, {0x3}, {0x4}, {0x0, 0x1}, {0x2}, {0x2}, {}, {0x3}, {0x0, 0x1}, {0x0, 0x1}, {0x5}, {0x3, 0x1}, {0x1}, {0x2, 0x1}, {0x2}, {0x3, 0x1}, {0x2}, {0x3}, {0x2}, {0x1, 0x1}, {0x1}, {0x1, 0x1}, {0x5}, {0x4}, {0x5, 0x1}, {0x5, 0x1}, {}, {0x4, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x5}, {0xa}, {0x3, 0x1}, {0x3}, {0x2, 0x1}, {0x3}, {0x4, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x2}, {0x4}, {0x4, 0x1}, {0x4}, {0x4}, {0x2, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x1}, {0x4}, {0x0, 0x1}, {0x2}, {0x1, 0x1}, {0x3, 0x1}, {0x5}, {0x3, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x3}, {0x6}, {0xa}, {0x3, 0x1}, {}, {0x1, 0x1}, {0x1}, {0x4, 0x1}, {0x5}, {0x3}, {0x3, 0x1}, {0x4}, {0x0, 0x1}, {0x5}, {0x6}, {0x2}, {0xb82e57098c7a44ef}, {0x3, 0x1}, {0x1}, {0x0, 0x1}, {0x4}, {0x1, 0x1}, {0x1}, {0x0, 0x1}, {0x4}, {0x4}, {0x0, 0x1}, {0x2}, {0x4, 0x1}, {0x1}, {0x1, 0x1}, {0x2}, {0x3}, {0x1, 0x1}, {}, {0x4, 0x1}, {0x3}, {0x3}, {0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x3, 0x1}, {0x0, 0x1}, {0x4}, {0x4, 0x1}, {0x1}, {0x5, 0x1}, {0x4}, {0x0, 0x1}, {0x3}, {0x1}, {0x0, 0x1}, {0x4}], 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xea4}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$kcm(r6, &(0x7f0000002900)={&(0x7f0000000500)=@xdp={0x2c, 0x8, r5, 0x10c}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000380)="da", 0x14}], 0x1}, 0x4000880) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xb2}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xb2}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getpeername$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000080)=0x14) (async) getpeername$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000080)=0x14) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(0xffffffffffffffff) (async) close(0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bond_slave_0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bond_slave_0\x00'}) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x8201, 0x9) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x7ff, '\x00', r10, 0xffffffffffffffff, 0x4, 0x0, 0x1}, 0x50) 1m21.188359914s ago: executing program 4 (id=4661): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) close(r0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xf, 0x4, 0x4, 0x12}, 0x50) connect$unix(r0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r1}, &(0x7f0000000440), &(0x7f0000000140)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000000480)='GPL\x00', 0x2, 0xb4, &(0x7f000000cf3d)=""/180, 0x21600, 0x0, '\x00', 0x0, @sk_msg}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r2}, 0x8) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000001300), 0x4) connect$inet6(r5, &(0x7f0000001380)={0xa, 0x4e22, 0x1000, @private0, 0x9b}, 0x1c) write$tun(r3, &(0x7f0000000140)={@val={0x800e, 0x6006}, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x1, 0x8, 0x1c, 0x65, 0x0, 0x3, 0x1, 0x0, @rand_addr=0x64010102, @rand_addr=0x64010100}, @address_reply={0x12, 0x0, 0x0, 0x80}}}}}}, 0x2e) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000007c0)=ANY=[@ANYBLOB="300000001a0001000000000000000000818000000003000000000000140001"], 0x30}}, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x7, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b708000000000000a50a000000000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000007700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r9 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000002c0)=@base={0x1b, 0x4, 0x9, 0x2, 0x0, r2, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x50) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={@fallback=r2, 0x1e, 0x0, 0x6, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000340)=ANY=[@ANYRES8=r7, @ANYRES32=r8, @ANYRESDEC=r10, @ANYRES32, @ANYRES32=r9, @ANYBLOB="02013ba38ff8c9b688e1bdd66d3bbd7151bdb50bdcd8ee234b0f4a343371c463475f431efef80af878f493ebd90d61"], 0x20) bind$alg(0xffffffffffffffff, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00', 0x0}) sendmsg$nl_route(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x2, 0x0, {}, [@NHA_OIF={0x8, 0x5, r13}]}, 0x20}}, 0x0) r14 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r14, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) 1m21.187364302s ago: executing program 2 (id=4662): bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000040), 0x10) listen(0xffffffffffffffff, 0x0) r0 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r0, &(0x7f0000000080), 0x10) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f000000f000/0x4000)=nil, 0x4000, 0x2, 0x3032, 0xffffffffffffffff, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x1, 0x5}, 0x8) sendmmsg(r0, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{}], 0x1}}], 0x1, 0x24008094) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c010000190001000000000000000000fc02000000000000000000000000000000000000000000000000000000000000000000030000000002000020080000", @ANYRES32=0x0, @ANYBLOB="00000000000180000000020000000000fdffffffffffffff00000000000000000000000000000000000000000000000000000000000000001d00000000000000000000000000000000000000000000000000000000000000dd02000000000000000000004c850000000000000000000084000500ac14143b000000000000000000000000000000ed2b00000000000000ac14140c000000000000000000000000000000000000ff00000000000000000000000000fc020000000000000000000000000001000000003200000000000000000000000000000000000000000000de02350000000000002011c954"], 0x13c}}, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x2, 0x1000000, 0x0, 0x5, 0xfffffffffffffffb}, {0x0, 0x40000000000000, 0x200000000000000}, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010) 1m17.842822157s ago: executing program 2 (id=4664): r0 = socket$netlink(0x10, 0x3, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000001c0)=@newlink={0x44, 0x10, 0x503, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20991, 0x11c05}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ICV_LEN={0x5, 0x3, 0xc}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x48890}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000080)) 1m17.403341241s ago: executing program 1 (id=4665): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a03000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000180003801400020000007468305f746f5f68737200000000080002"], 0xe8}}, 0x0) write$tun(r0, &(0x7f0000000840)={@val={0x8, 0x800}, @val={0x6, 0x0, 0x6, 0x8, 0x14}, @ipv4=@generic={{0x5, 0x4, 0x2, 0x2, 0x7b3, 0x66, 0x79f, 0xb, 0x2f, 0x0, @rand_addr=0x64010101, @broadcast}, "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"}}, 0x7c1) 1m14.475160656s ago: executing program 2 (id=4667): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000100001000000000000dfff000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000004000038008000140000000002c0003801400010067656e65766530000000000000000000140001006c6f0000000000000000000000000000080002"], 0xb4}}, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r2, &(0x7f0000000100)="f257a8ea7bc273dfaeab968586dd", 0xe, 0x0, &(0x7f0000000000)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) sendmmsg(r1, &(0x7f0000000580)=[{{&(0x7f0000000080)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x2, 0x4, 0x1, 0x2, {0xa, 0x4e23, 0x5, @loopback, 0xd}}}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000380)="27be7b2d74f674120a34b1d41b51223710ceca76b536649da596ba7f2017d1bc4d8a9bcadf69f8eb7240db6c914467e6602e2b6b94e844854477f3bc01a266f7384f8212436b7bbdb7628a097ced0fcbac506827a66aa16634ef6f1ba492e094a9db9d615b90f94a650a38039bcbe682fa925835a644272a95506dce07cae544a0500ca59dd6626489e7c5b7e1f412935fc6ac485b9cc1b9eac1902e528723a17f9388a86f3e756a276b449840aed2a03f8404c0e40fe762b58281d21d2e57965909002b61506ce1f45d0c8c007afd2feec0145424e45901f7fcb0f47d598a4466df93f771959834212c84ef73922e", 0xef}, {&(0x7f0000000480)="8e412fea90454953984cd7d81b908cf986aa17294e2b196004041b3aa9a85d2ade8511db8941a5766d10e99dc8a125dca02d5405cb7d5523a4d4c3267b731b717a53911805", 0x45}, {&(0x7f0000000500)="61aabeeb02f995bf57f542afaec4038398af42caad54ec7c20868c47bcdf56dd4f83a687f90d2f4ba9dc562d", 0x2c}], 0x3}}], 0x1, 0x20000000) 1m13.751632235s ago: executing program 4 (id=4668): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000180)=0x6, 0x4) r1 = socket$inet6(0xa, 0x1, 0x100) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000440)={@map, 0xffffffffffffffff, 0xd}, 0x20) r3 = socket(0x2b, 0x80801, 0x1) setsockopt$inet6_mtu(r3, 0x29, 0x17, 0x0, 0x0) setsockopt$inet6_int(r2, 0x29, 0x1a, &(0x7f0000000000)=0x7ff, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000000540)=[@in6={0xa, 0x4e23, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}}], 0x1c) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, &(0x7f0000000440)={0x0}, &(0x7f0000000300)=0x8) r5 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001400010600000000000000002bfa00006f87496ba0715fa589aaddd137c8eef70debafe6a55999e68504a8b6faae11dee5c20228db54aed679e81ba859a635891b333734e5d1f41ab39043f00e4b65fd2d5c5591a52fd834"], 0x14}}, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000900)={r4, @in6={{0xa, 0x4e22, 0x1, @empty, 0x7}}, 0x6, 0xc169, 0x4, 0x8, 0x40, 0x5daf, 0x8}, 0x9c) r7 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x3f8, 0x0, 0xffffffff, 0xffffffff, 0x250, 0xffffffff, 0x328, 0xffffffff, 0xffffffff, 0x250, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x228, 0x250, 0x0, {}, [@common=@ipv6header={{0x28}, {0x1a, 0x1, 0x1}}, @common=@inet=@policy={{0x158}, {[{@ipv4=@local, [0xff], @ipv6=@remote, [0x0, 0xff000000, 0xff000000, 0xffffff00], 0x4d3, 0x34ff, 0x1, 0x1, 0x15, 0x10}, {@ipv4=@multicast1, [0x0, 0xffffffff, 0xffffffff, 0xff], @ipv4=@rand_addr=0x64010100, [0xff000000, 0xffffffff], 0x4d6, 0x3503, 0x87, 0x0, 0x2, 0x10}, {@ipv4=@empty, [0x0, 0xffffffff, 0xff000000, 0xffffff00], @ipv4=@dev={0xac, 0x14, 0x14, 0x11}, [0xff000000, 0x0, 0xff, 0xff000000], 0x4d6, 0x3500, 0x3a, 0x0, 0x0, 0x4}, {@ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, [0xff, 0xffffff00, 0x0, 0xffffff00], @ipv6=@mcast1, [0xff000000, 0xffffffff, 0xff000000, 0xffffffff], 0x4d3, 0x0, 0x2f, 0x0, 0x4, 0x1a}], 0x1, 0x3}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x18}}, [], [], 'wg1\x00', 'caif0\x00', {}, {}, 0x62}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0x0, 0x0, 0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x458) bind$alg(r6, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r8 = accept4(r5, 0x0, 0x0, 0x80000) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000240), r8) r9 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, &(0x7f0000000340)="80a7e653121d896348ca8080d3a04afde26a588b8dd32a66d131034ec105d759f6afd483609cc1923dea918826c9a8421abea78f7d6d3a29110d9dd28ac8c19ae352e4f9a4af1f206a9f526fddaa6df8213daaefe1fcb9c42beb707e50cc2e08cce823747fa3f4dc581deb4a0e74cace7518b82dc823d74319eb3b59aaa1a3a6f3c62a7e92cd0ef93be02a4a3749b30cbe859aabacb1b04ca6cf1c5b7864e92827", 0xa1) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYRESDEC=r1, @ANYRES32=0x0, @ANYRESHEX=r9, @ANYRES32=r0], 0x24}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 1m12.731474366s ago: executing program 2 (id=4669): r0 = socket$packet(0x11, 0x2, 0x300) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x30, r2, 0x1, 0x3, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x81}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x2400c000}, 0x804) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) (async) r4 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r4, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) (async) setsockopt$inet6_MCAST_MSFILTER(r4, 0x29, 0x30, &(0x7f0000000500)=ANY=[@ANYBLOB="01000000000000000a000002c639e70000000000ff01000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003e00"/144], 0x90) r5 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYRES32=r4, @ANYRES32=r0, @ANYRESOCT=r4, @ANYRESDEC=r3, @ANYRES8=r0, @ANYRES64=r5, @ANYRES64=r5], 0x48) (async, rerun: 64) r6 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) r7 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) (async, rerun: 32) ioctl$ifreq_SIOCGIFINDEX_wireguard(r6, 0x8933, &(0x7f00000003c0)={'wg2\x00', 0x0}) (rerun: 32) sendmsg$WG_CMD_SET_DEVICE(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000880)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01000054000010008000010c000008000100", @ANYRES32=r8, @ANYBLOB="4c00088048000080200004000a004e2100000000000000000000000000000000000000010003000024000100975c9d81c983c8209ee781254b899f8ed925ae9f0923c23c62f53c57cdbf691c"], 0x68}}, 0x0) (async) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) socketpair$unix(0x1, 0x0, 0x0, 0x0) (async) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r9, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000240)=r10}, 0x20) ioctl$XFS_IOC_START_COMMIT(r11, 0x80585882, &(0x7f00000002c0)={0xffffffffffffffff}) ioctl$sock_inet_SIOCRTMSG(r12, 0x890d, &(0x7f0000000380)={0x0, {0x2, 0x4e22, @multicast2}, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x2, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000340)='veth1_macvtap\x00', 0x6, 0x2, 0xbc}) (async, rerun: 64) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r10, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) (rerun: 64) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000004c0)={'vlan1\x00'}) (async) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c000000130001000000000000000000070000017177605058aef5281e74e9bf76b32304dc0e4205f873a8b99b0669670b0780025bc1b129e096d4b393df9966d95630fe82638d3d5a4bece44b391226b03fdf50150543e8b399c67759ef0ad971460151206b0bc57cfccb59d200131427e136388722d57e4a812a46a9b5b5956cc86146e8abd620f45e7c611c1066e573a76821aabd097223aa50e68e90bb10404cb2d2f608392a3ba4ff8508fcb57102d3beff", @ANYRES32=r3, @ANYBLOB="00000000000000001c001a801800048014000680"], 0x3c}, 0x1, 0x0, 0x0, 0xc005}, 0x4004000) (async) pipe(&(0x7f0000000400)) 1m9.80800615s ago: executing program 4 (id=4671): r0 = socket(0x10, 0x803, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x16, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x4, 0x0, 0x1, 0x92}]}, &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="440000001000030400"/20, @ANYRES32=r1, @ANYBLOB="56060800000000002400128009000100626f6e640000000014000280050022"], 0x44}}, 0x40) socket(0x10, 0x803, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x16, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x4, 0x0, 0x1, 0x92}]}, &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="440000001000030400"/20, @ANYRES32=r1, @ANYBLOB="56060800000000002400128009000100626f6e640000000014000280050022"], 0x44}}, 0x40) (async) 1m7.739657564s ago: executing program 2 (id=4672): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000800)=@newtaction={0x60, 0x30, 0xffff, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x20000000}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0xb00}}}}]}]}, 0x60}}, 0x0) 1m6.016239552s ago: executing program 1 (id=4674): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_STATS(r1, &(0x7f0000000700)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x5, 0x1, 0x201, 0x0, 0x0, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000080}, 0x44801) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000005, 0x13, r2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0xe, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x2, 0x8c}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb7, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x8c}, [@ldst={0x4}]}, &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x2a) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000300)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB='\a'], 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r6 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendfile(r6, r5, 0x0, 0xfffbffff) r7 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={r3, r5, 0x20, 0x0, @void}, 0x10) ioctl$XFS_IOC_OPEN_BY_HANDLE(r7, 0xc038586b, &(0x7f0000000340)={r6, &(0x7f0000000100)='cgroup.controllers\x00', 0x0, &(0x7f0000000200)={@align=0x7, {0x2, 0x80, 0x5402, 0x8}}, 0x1de7, &(0x7f0000000280), &(0x7f00000002c0)=0x100}) vmsplice(r3, &(0x7f0000000600)=[{&(0x7f0000000480)="0068ea0f9769c329f28e429e7a2196fee8d609f0366091161a8a57af97f423fc6a545849fde1287b3e1702a05e324f9becaab6897b78268eb54212690b5f40de7ff0cf385c9ebfc03171127029859b52b9d4d4ea0ef7c049296793c30f848e8e88ee8827a5e0d854700d50a47ee2f86759855e96a343d9b3078cb620b3872ff74b4f4f5758019aec5d552f94d7cd1214c266633b2f", 0x95}, {&(0x7f0000000540)="922a4053757cf1b91126aa7cdce8a8d53bf32a8943d274f1155e1da575c5efe83d71374d444e11b3150674b9ef7d40fe44dba75639b0593be90a8656b859136d8ce272d451c20cc85d17bd5d45bf", 0x4e}, {&(0x7f00000005c0)="c4f437", 0x3}], 0x3, 0xb6b644d5e5dd6273) ioctl$SIOCSIFMTU(r0, 0x89b1, &(0x7f0000000040)={'wlan1\x00', 0x8000003}) 1m2.157170314s ago: executing program 1 (id=4676): setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x34, 0x0, 0x0) listen(0xffffffffffffffff, 0xfffffffd) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="000086dd00000100000000000000600000000f982c00fe80c00f0000000000000000000000aaff02000000000000000000000000000104"], 0xfce) socket$inet_udp(0x2, 0x2, 0x0) 53.13033846s ago: executing program 33 (id=4671): r0 = socket(0x10, 0x803, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x16, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x4, 0x0, 0x1, 0x92}]}, &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="440000001000030400"/20, @ANYRES32=r1, @ANYBLOB="56060800000000002400128009000100626f6e640000000014000280050022"], 0x44}}, 0x40) socket(0x10, 0x803, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x16, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x4, 0x0, 0x1, 0x92}]}, &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="440000001000030400"/20, @ANYRES32=r1, @ANYBLOB="56060800000000002400128009000100626f6e640000000014000280050022"], 0x44}}, 0x40) (async) 52.470513s ago: executing program 34 (id=4672): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000800)=@newtaction={0x60, 0x30, 0xffff, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x20000000}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0xb00}}}}]}]}, 0x60}}, 0x0) 46.2572619s ago: executing program 35 (id=4676): setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x34, 0x0, 0x0) listen(0xffffffffffffffff, 0xfffffffd) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="000086dd00000100000000000000600000000f982c00fe80c00f0000000000000000000000aaff02000000000000000000000000000104"], 0xfce) socket$inet_udp(0x2, 0x2, 0x0) 37.134786764s ago: executing program 0 (id=4686): r0 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0100000000000000000009000000440003800800010002000000140002007663616e300000000000000000000000080003"], 0x58}, 0x1, 0x0, 0xfdffffffffffffff}, 0x0) 34.603555082s ago: executing program 0 (id=4687): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 32) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="1c0000001800011306007000000000000a001400fe04ff06"], 0x1c}}, 0x0) (async, rerun: 32) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000180)={'syztnl1\x00', &(0x7f0000000100)={'ip6gre0\x00', 0x0, 0x2f, 0x55, 0x65, 0x4, 0x4, @dev={0xfe, 0x80, '\x00', 0xb}, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x7800, 0x700, 0xa3a, 0x8000}}) sendto$packet(r1, &(0x7f0000000080)="21758ddaf85871c73567ae9b39b5da0cbf38616f172e62822acd759bce9f7d47eb5c979108666f434424a0076bcdb3b070267256521e167d69c61011487b09f7debec09bf8a0717d344086704278e78d59d75c848d1b8cb02d385e97bf4281454121a8eb6ff75b42482bf6b434325f57d8960120c1ac181e0f7dd26bce0bba", 0x7f, 0x20000044, &(0x7f00000001c0)={0x11, 0x18, r2, 0x1, 0xeb, 0x6, @local}, 0x14) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000000c0), r3) sendmsg$NLBL_CALIPSO_C_LISTALL(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x14, r4, 0x3d810686a7d95765, 0x70bd2a, 0x25dfdb75}, 0x14}, 0x1, 0x0, 0x0, 0x4481}, 0x24004052) (async, rerun: 64) syz_genetlink_get_family_id$net_dm(&(0x7f0000000180), r3) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000200)={'wpan4\x00'}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r0) 31.353222964s ago: executing program 0 (id=4688): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000540), 0xffffffffffffffff) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(0x3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r4 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x40000, @dev={0xfe, 0x80, '\x00', 0x26}}}}, 0x108) setsockopt$inet6_group_source_req(r4, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) ioctl$sock_inet_tcp_SIOCINQ(r4, 0x541b, &(0x7f0000000000)) splice(r3, 0x0, r2, 0x0, 0x10000008ebc, 0x0) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r1, 0x301, 0x70bd2a, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x20000090}, 0x20000080) 28.343914776s ago: executing program 0 (id=4689): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newlink={0x50, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfa, {0x0, 0x0, 0x0, 0x0, 0x115}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0x1a, 0x17}}, @IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x50}, 0x1, 0x400000000000000}, 0x8048802) 18.240720196s ago: executing program 0 (id=4690): socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)="a6df3cb9d4faa1f22e100607ff695d576d8b2ce9c8f93474d239adbb3b134e74d9a4a2f0388273554702dd7cefe175d084b10d87da270b70fc2b320459bed8e4ba9144086d8cc916a2fc820e695dfc1fdabfad0af4fe618146b1a0441386d8052b465e59afdba5255a6a442a335a7ae3c6e20ed804160af69646dff915a9904ce5ac8cdf45533f213f5505f1db658e595eb38f21", 0x94}, {&(0x7f0000000300)="884734ef35be754e06921271202e6bfc947f78ec51d1c00f42682f44eb7dd6362dee11bafe774c77c3a114dd3ebf7ba7ca5872853bc231fd9780410b2735fdb6d7e38cea327e1949df3542d1afb5b686ae8c27f55c193a7f24287db30a7fcec95d3e941b87ab5df741e5a964300e6790e9f439c1bd22fb02cce8940c4e55b975aacda12be68e4dad3081fe79363e29aff7224bd4af7011cacb4034ab4ce8e74f763189dec402399bace01cdfb69bcbb9ed0ce454cd81ca0dce1e4932ec5413b2e2996887048d495b4419a553ca2b8d5ec503749c9c86fac45d448da68d263cbb79b46e4966477bb7ecbdd5af09b14d", 0xef}, {&(0x7f0000000400)="67c348ec6b03968593504c9a3b21612972512f9386ec9b5ec4bbff02e148ae661795d6d37e605e34fd52eb094394", 0x2e}], 0x3, 0x0, 0x0, 0x2663}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x3, [@union, @var={0x1, 0x0, 0x0, 0x11, 0x1}]}, {0x0, [0x5f]}}, 0x0, 0x37}, 0x20) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "2d9421fe8a4c9563", "cf6ff9ff337ed301000100c747fbbfc1", '\x00', "4f9e86d67a8426bd"}, 0x28) recvfrom(r1, 0x0, 0x0, 0x2023, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x42, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x37}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x76}, @exit={0x95, 0x0, 0x1008}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000140)='syzkaller\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) sendmsg$TCPDIAG_GETSOCK(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="54000000120003032dbd7000fdff0eff000402004e224e230400000007000000faffffff000000040200000080000000ff0f0000000000002b36e114469720e6dd5ec9d87c61b321537a5f47d2bb07ff4d01916d6b6bb199177228bfd3e8a41de13dada5"], 0x54}, 0x1, 0x0, 0x0, 0x20040849}, 0x8004) 16.887335885s ago: executing program 0 (id=4691): r0 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000001c0)=@newlink={0x44, 0x10, 0x503, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20991, 0x11c05}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ICV_LEN={0x5, 0x3, 0xc}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x44}, 0x1, 0x0, 0x0, 0x48890}, 0x0) setsockopt$WPAN_WANTLQI(r2, 0x0, 0x3, &(0x7f0000000080)=0x1, 0x4) 0s ago: executing program 36 (id=4691): r0 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000001c0)=@newlink={0x44, 0x10, 0x503, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20991, 0x11c05}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ICV_LEN={0x5, 0x3, 0xc}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x44}, 0x1, 0x0, 0x0, 0x48890}, 0x0) setsockopt$WPAN_WANTLQI(r2, 0x0, 0x3, &(0x7f0000000080)=0x1, 0x4) kernel console output (not intermixed with test programs): 16061] netlink: 'syz.3.3357': attribute type 62 has an invalid length. [ 323.711789][T16063] xt_nat: multiple ranges no longer supported [ 323.760496][T16070] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3359'. [ 323.809081][T16077] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3361'. [ 323.918692][T16085] xt_SECMARK: invalid mode: 9 [ 323.979530][T16089] vlan0: entered allmulticast mode [ 324.000125][T16089] bond0: entered allmulticast mode [ 324.148067][T16106] netlink: 'syz.3.3372': attribute type 62 has an invalid length. [ 324.346763][T16121] syzkaller0: entered promiscuous mode [ 324.374928][T16121] syzkaller0: entered allmulticast mode [ 324.443317][T16133] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3370'. [ 324.546897][T16140] xt_SECMARK: invalid mode: 9 [ 324.650711][T16153] netlink: 'syz.2.3383': attribute type 62 has an invalid length. [ 324.692508][T16156] bridge: RTM_NEWNEIGH with invalid ether address [ 324.713595][T16161] FAULT_INJECTION: forcing a failure. [ 324.713595][T16161] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 324.727031][T16161] CPU: 0 UID: 0 PID: 16161 Comm: syz.3.3384 Not tainted syzkaller #0 PREEMPT(full) [ 324.727051][T16161] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 324.727060][T16161] Call Trace: [ 324.727065][T16161] [ 324.727071][T16161] dump_stack_lvl+0xe8/0x150 [ 324.727092][T16161] should_fail_ex+0x40c/0x560 [ 324.727111][T16161] _copy_from_user+0x2d/0xb0 [ 324.727130][T16161] ___sys_sendmsg+0x1c6/0x360 [ 324.727152][T16161] ? rcu_is_watching+0x15/0xb0 [ 324.727168][T16161] ? get_pid_task+0x20/0x1f0 [ 324.727203][T16161] ? __pfx____sys_sendmsg+0x10/0x10 [ 324.727224][T16161] ? rcu_is_watching+0x15/0xb0 [ 324.727252][T16161] ? __fget_files+0x2a/0x420 [ 324.727268][T16161] ? __fget_files+0x3a2/0x420 [ 324.727287][T16161] __x64_sys_sendmsg+0x1b1/0x290 [ 324.727307][T16161] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 324.727331][T16161] ? rcu_is_watching+0x15/0xb0 [ 324.727347][T16161] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 324.727362][T16161] do_syscall_64+0x174/0x580 [ 324.727382][T16161] ? trace_irq_disable+0x3b/0x140 [ 324.727401][T16161] ? clear_bhb_loop+0x40/0x90 [ 324.727417][T16161] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 324.727432][T16161] RIP: 0033:0x7fb321d9ce59 [ 324.727446][T16161] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 324.727460][T16161] RSP: 002b:00007fb322c99028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 324.727478][T16161] RAX: ffffffffffffffda RBX: 00007fb322015fa0 RCX: 00007fb321d9ce59 [ 324.727489][T16161] RDX: 00000000240000d4 RSI: 0000200000000240 RDI: 0000000000000004 [ 324.727500][T16161] RBP: 00007fb322c99090 R08: 0000000000000000 R09: 0000000000000000 [ 324.727510][T16161] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 324.727519][T16161] R13: 00007fb322016038 R14: 00007fb322015fa0 R15: 00007ffe90b4d228 [ 324.727539][T16161] [ 324.955944][T16164] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode [ 324.982027][T16164] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode [ 325.135617][T16181] FAULT_INJECTION: forcing a failure. [ 325.135617][T16181] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 325.157057][T16181] CPU: 1 UID: 0 PID: 16181 Comm: syz.0.3392 Not tainted syzkaller #0 PREEMPT(full) [ 325.157080][T16181] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 325.157098][T16181] Call Trace: [ 325.157104][T16181] [ 325.157111][T16181] dump_stack_lvl+0xe8/0x150 [ 325.157133][T16181] should_fail_ex+0x40c/0x560 [ 325.157153][T16181] prepare_alloc_pages+0x230/0x650 [ 325.157178][T16181] __alloc_frozen_pages_noprof+0x12f/0x380 [ 325.157201][T16181] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 325.157223][T16181] ? __pfx_policy_nodemask+0x10/0x10 [ 325.157245][T16181] ? trace_kmalloc+0x2a/0xf0 [ 325.157268][T16181] alloc_pages_mpol+0x212/0x380 [ 325.157292][T16181] alloc_pages_noprof+0xac/0x2a0 [ 325.157314][T16181] alloc_skb_with_frags+0x264/0x760 [ 325.157340][T16181] sock_alloc_send_pskb+0x878/0x990 [ 325.157363][T16181] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 325.157378][T16181] ? is_bpf_text_address+0x26/0x2b0 [ 325.157399][T16181] ? rcu_is_watching+0x15/0xb0 [ 325.157416][T16181] ? rcu_is_watching+0x15/0xb0 [ 325.157432][T16181] ? iov_iter_advance+0x8b/0x1c0 [ 325.157451][T16181] tun_get_user+0x94f/0x4350 [ 325.157470][T16181] ? is_bpf_text_address+0x292/0x2b0 [ 325.157496][T16181] ? lock_release+0x4b/0x3c0 [ 325.157517][T16181] ? arch_stack_walk+0xfb/0x150 [ 325.157537][T16181] ? aa_file_perm+0x4ed/0x15f0 [ 325.157553][T16181] ? __pfx_tun_get_user+0x10/0x10 [ 325.157574][T16181] ? kstrtoull+0x12f/0x1d0 [ 325.157592][T16181] ? ref_tracker_alloc+0x341/0x4b0 [ 325.157610][T16181] ? get_pid_task+0x20/0x1f0 [ 325.157625][T16181] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 325.157641][T16181] ? rcu_is_watching+0x15/0xb0 [ 325.157656][T16181] ? tun_get+0x1c/0x2f0 [ 325.157672][T16181] ? tun_get+0x1c/0x2f0 [ 325.157687][T16181] ? rcu_is_watching+0x15/0xb0 [ 325.157698][T16181] ? tun_get+0x1c/0x2f0 [ 325.157713][T16181] ? lock_release+0x4b/0x3c0 [ 325.157732][T16181] ? apparmor_file_permission+0x1f4/0x300 [ 325.157750][T16181] ? tun_get+0x1c/0x2f0 [ 325.157762][T16188] xt_TCPMSS: Only works on TCP SYN packets [ 325.157767][T16181] tun_chr_write_iter+0x113/0x200 [ 325.157785][T16181] vfs_write+0x612/0xba0 [ 325.157804][T16181] ? __pfx_vfs_write+0x10/0x10 [ 325.157825][T16181] ? __fget_files+0x2a/0x420 [ 325.157846][T16181] ksys_write+0x150/0x270 [ 325.157865][T16181] ? __pfx_ksys_write+0x10/0x10 [ 325.157885][T16181] ? rcu_is_watching+0x15/0xb0 [ 325.157901][T16181] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 325.157917][T16181] do_syscall_64+0x174/0x580 [ 325.157937][T16181] ? trace_irq_disable+0x3b/0x140 [ 325.157956][T16181] ? clear_bhb_loop+0x40/0x90 [ 325.157973][T16181] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 325.157987][T16181] RIP: 0033:0x7f8c8c39ce59 [ 325.158002][T16181] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 325.158015][T16181] RSP: 002b:00007f8c8d1ce028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 325.158032][T16181] RAX: ffffffffffffffda RBX: 00007f8c8c615fa0 RCX: 00007f8c8c39ce59 [ 325.158043][T16181] RDX: 0000000000000fce RSI: 0000200000000340 RDI: 0000000000000003 [ 325.158053][T16181] RBP: 00007f8c8d1ce090 R08: 0000000000000000 R09: 0000000000000000 [ 325.158062][T16181] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 325.158071][T16181] R13: 00007f8c8c616038 R14: 00007f8c8c615fa0 R15: 00007ffc4b760ca8 [ 325.158100][T16181] [ 325.217669][T16193] netlink: 'syz.2.3396': attribute type 62 has an invalid length. [ 325.257347][T16195] tipc: Enabling of bearer rejected, failed to enable media [ 325.542994][ T53] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 36151 - 0 [ 325.558568][ T53] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 36151 - 0 [ 325.573006][ T53] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 36151 - 0 [ 325.602608][ T53] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 36151 - 0 [ 325.689080][T16219] netlink: 'syz.0.3406': attribute type 8 has an invalid length. [ 325.804940][T16229] netlink: 'syz.2.3410': attribute type 22 has an invalid length. [ 325.858106][T16233] vlan5: entered promiscuous mode [ 326.036316][T16261] netlink: 'syz.1.3421': attribute type 8 has an invalid length. [ 326.055016][T16261] bridge12: entered promiscuous mode [ 326.076811][T16263] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode [ 326.106696][T16263] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode [ 326.164709][T16274] netlink: 'syz.4.3426': attribute type 62 has an invalid length. [ 326.258959][T16278] syzkaller0: entered promiscuous mode [ 326.277079][T16278] syzkaller0: entered allmulticast mode [ 326.510061][ T35] net_ratelimit: 28 callbacks suppressed [ 326.510079][ T35] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 326.660349][ T3352] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 326.698313][T16298] netlink: 'syz.4.3435': attribute type 22 has an invalid length. [ 326.771375][T16339] netlink: 'syz.0.3446': attribute type 1 has an invalid length. [ 326.789283][ T3300] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 326.802854][T16298] netlink: 'syz.4.3435': attribute type 22 has an invalid length. [ 326.821676][ T3300] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 326.846209][ T3300] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 326.856335][ T3300] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 326.949998][ T138] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 327.062989][ T138] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 327.089420][T16364] netlink: 'syz.4.3455': attribute type 8 has an invalid length. [ 327.160843][T16364] bridge12: entered promiscuous mode [ 327.171069][T16364] bridge12: entered allmulticast mode [ 327.198066][T16368] syzkaller0: entered promiscuous mode [ 327.218651][T16368] syzkaller0: entered allmulticast mode [ 327.255829][T16378] netlink: 'syz.3.3459': attribute type 1 has an invalid length. [ 327.270396][ T3300] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 327.331695][T16378] lo speed is unknown, defaulting to 1000 [ 327.352021][T16379] ipvlan1: mtu less than device minimum [ 327.390701][ T3300] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 327.462798][T16394] xt_SECMARK: invalid mode: 9 [ 327.520283][T16398] vlan1: Caught tx_queue_len zero misconfig [ 327.549737][ T138] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 327.561770][T16398] syzkaller0: entered promiscuous mode [ 327.567576][T16398] syzkaller0: entered allmulticast mode [ 327.624868][T16378] xfrm0 speed is unknown, defaulting to 1000 [ 327.671286][ T3300] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 327.800102][ T3300] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 327.879631][T16378] xfrm0 speed is unknown, defaulting to 1000 [ 327.946671][T16429] xt_SECMARK: invalid mode: 9 [ 327.977880][T16433] __nla_validate_parse: 20 callbacks suppressed [ 327.977897][T16433] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3481'. [ 328.129343][T16449] syzkaller0: entered promiscuous mode [ 328.135101][T16449] syzkaller0: entered allmulticast mode [ 328.197770][T16455] netlink: 'syz.1.3486': attribute type 63 has an invalid length. [ 328.352520][T16464] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3491'. [ 328.363675][T16465] vlan4: entered promiscuous mode [ 328.437292][T16471] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3494'. [ 328.672766][T16496] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3503'. [ 328.729793][T16495] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3503'. [ 328.825351][T16509] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3506'. [ 328.947182][T16515] nbd0: detected capacity change from 0 to 67108864 [ 328.970901][T15240] block nbd0: Dead connection, failed to find a fallback [ 329.034304][T16517] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3510'. [ 329.084886][T16525] bridge13: entered promiscuous mode [ 329.096370][T16525] bridge13: entered allmulticast mode [ 329.112935][T16527] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.3516'. [ 329.221522][T16540] netlink: 'syz.4.3519': attribute type 11 has an invalid length. [ 329.307679][T16549] netlink: 212348 bytes leftover after parsing attributes in process `syz.3.3518'. [ 329.547941][T16566] syzkaller1: entered promiscuous mode [ 329.573776][T16566] syzkaller1: entered allmulticast mode [ 329.674984][T16580] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3535'. [ 329.699869][T16583] bond11 (unregistering): Released all slaves [ 329.795678][T16591] 8021q: VLANs not supported on vcan0 [ 330.011156][T15240] block nbd0: shutting down sockets [ 330.024683][T15240] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 330.042330][T15240] Buffer I/O error on dev nbd0, logical block 0, async page read [ 330.063840][T15240] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 330.074205][T15240] Buffer I/O error on dev nbd0, logical block 0, async page read [ 330.082488][T15240] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 330.099253][T15240] Buffer I/O error on dev nbd0, logical block 0, async page read [ 330.107410][T15240] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 330.143472][T15240] Buffer I/O error on dev nbd0, logical block 0, async page read [ 330.164658][T15240] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 330.184865][T15240] Buffer I/O error on dev nbd0, logical block 0, async page read [ 330.192774][T16622] syzkaller1: entered promiscuous mode [ 330.192793][T16622] syzkaller1: entered allmulticast mode [ 330.227313][T15240] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 330.238034][T15240] Buffer I/O error on dev nbd0, logical block 0, async page read [ 330.246962][T15240] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 330.256259][T16627] ipvlan0: entered allmulticast mode [ 330.256277][T16627] veth0_vlan: entered allmulticast mode [ 330.270740][T15240] Buffer I/O error on dev nbd0, logical block 0, async page read [ 330.278553][T15240] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 330.287975][T15240] Buffer I/O error on dev nbd0, logical block 0, async page read [ 330.296077][T15240] ldm_validate_partition_table(): Disk read failed. [ 330.303369][T15240] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 330.323493][T15240] Buffer I/O error on dev nbd0, logical block 0, async page read [ 330.331743][T15240] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 330.351513][T15240] Buffer I/O error on dev nbd0, logical block 0, async page read [ 330.386742][T15240] Dev nbd0: unable to read RDB block 0 [ 330.398730][T15240] nbd0: unable to read partition table [ 330.417691][T15240] ldm_validate_partition_table(): Disk read failed. [ 330.428597][T15240] Dev nbd0: unable to read RDB block 0 [ 330.438346][T15240] nbd0: unable to read partition table [ 330.695105][T16655] sctp: [Deprecated]: syz.0.3557 (pid 16655) Use of int in maxseg socket option. [ 330.695105][T16655] Use struct sctp_assoc_value instead [ 331.620069][ T35] net_ratelimit: 33 callbacks suppressed [ 331.620087][ T35] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 331.740095][ T138] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 331.849790][ T138] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 331.959846][ T35] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 332.069746][ T35] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 332.180092][ T35] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 332.299999][ T35] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 332.410149][ T53] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 332.519733][ T138] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 332.630060][ T35] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 333.770922][T16667] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 333.780509][T16688] validate_nla: 9 callbacks suppressed [ 333.780526][T16688] netlink: 'syz.0.3564': attribute type 1 has an invalid length. [ 333.903888][T16718] netlink: 'syz.1.3573': attribute type 1 has an invalid length. [ 334.008387][T16736] __nla_validate_parse: 12 callbacks suppressed [ 334.008404][T16736] netlink: 256 bytes leftover after parsing attributes in process `syz.2.3580'. [ 334.120919][T16751] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3583'. [ 334.201667][T16755] netlink: 'syz.2.3585': attribute type 8 has an invalid length. [ 334.209500][T16755] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3585'. [ 334.237886][T16759] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.3584'. [ 334.247356][T16755] nbd: must specify a device to reconfigure [ 334.329816][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 334.343587][T16769] netlink: 'syz.0.3592': attribute type 62 has an invalid length. [ 334.424360][T16774] netlink: 277 bytes leftover after parsing attributes in process `syz.2.3591'. [ 334.523813][T16784] netlink: 'syz.3.3597': attribute type 5 has an invalid length. [ 334.565066][T16787] netlink: 212348 bytes leftover after parsing attributes in process `syz.3.3598'. [ 334.615370][T16798] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3601'. [ 334.874931][T16819] netlink: 'syz.0.3609': attribute type 21 has an invalid length. [ 334.882885][T16819] IPv6: NLM_F_CREATE should be specified when creating new route [ 334.942408][T16821] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.3611'. [ 334.979033][T16824] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 334.986804][T16824] syzkaller1: Refused to change device type [ 335.086776][T16831] No such timeout policy "syz1" [ 335.150580][T16838] netlink: 156 bytes leftover after parsing attributes in process `syz.4.3616'. [ 335.320707][T16844] dvmrp0: entered allmulticast mode [ 335.427533][T16850] syzkaller0: entered promiscuous mode [ 335.436053][T16850] syzkaller0: entered allmulticast mode [ 335.593562][T16861] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3627'. [ 335.606046][T16864] xt_SECMARK: invalid mode: 9 [ 335.675900][T16870] netlink: 'syz.1.3630': attribute type 8 has an invalid length. [ 335.886037][T16885] : renamed from bond0 (while UP) [ 336.302592][T16933] netlink: 'syz.0.3651': attribute type 1 has an invalid length. [ 336.369146][T16933] 8021q: adding VLAN 0 to HW filter on device bond18 [ 336.378329][T16938] IPv6: NLM_F_CREATE should be specified when creating new route [ 336.393252][T16941] bond18: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 336.422863][T16946] netlink: 'syz.4.3657': attribute type 23 has an invalid length. [ 336.675881][T16969] netlink: 'syz.0.3663': attribute type 21 has an invalid length. [ 336.677135][T16968] net_ratelimit: 37 callbacks suppressed [ 336.677149][T16968] netlink: zone id is out of range [ 336.710290][T16968] netlink: zone id is out of range [ 336.728334][T16968] netlink: zone id is out of range [ 336.733749][ T53] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 336.744205][T16968] netlink: zone id is out of range [ 336.757156][T16968] netlink: zone id is out of range [ 336.784804][T16968] netlink: zone id is out of range [ 336.793700][T16968] netlink: zone id is out of range [ 336.798893][T16968] netlink: zone id is out of range [ 336.810705][T16968] netlink: zone id is out of range [ 336.898559][T16982] bond19: option arp_validate: invalid value (134217728) [ 336.912442][T16982] bond19 (unregistering): Released all slaves [ 336.969133][T16983] 8021q: adding VLAN 0 to HW filter on device bond15 [ 336.988752][T16993] bond15: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 337.022856][T16983] macvlan3: entered promiscuous mode [ 337.028220][T16983] macvlan3: entered allmulticast mode [ 337.035235][T16983] bond15: entered promiscuous mode [ 337.048014][T16983] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 337.061842][T16983] bond15: (slave macvlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 337.096434][T16983] bond15: left promiscuous mode [ 337.119302][T17014] vlan5: entered promiscuous mode [ 337.128029][T16993] IPVS: set_ctl: invalid protocol: 44 172.20.20.187:20001 [ 337.642603][T17060] syzkaller0: entered promiscuous mode [ 337.648162][T17060] syzkaller0: entered allmulticast mode [ 338.019865][T17096] ip6_vti0: entered promiscuous mode [ 338.026279][T17096] ip6_vti0: entered allmulticast mode [ 338.154074][T17105] IPVS: set_ctl: invalid protocol: 58 224.0.0.1:20002 [ 338.283028][T17119] tipc: Failed to remove unknown binding: 66,0,0/4:1564330971/1564330972 [ 338.300505][T17119] tipc: Failed to remove unknown binding: 66,0,0/4:1564330971/1564330972 [ 339.059393][T17195] __nla_validate_parse: 30 callbacks suppressed [ 339.059411][T17195] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3742'. [ 339.096331][T17201] netlink: 165 bytes leftover after parsing attributes in process `syz.0.3743'. [ 339.115300][T17201] validate_nla: 2 callbacks suppressed [ 339.115313][T17201] netlink: 'syz.0.3743': attribute type 83 has an invalid length. [ 339.210203][T17210] netlink: 6024 bytes leftover after parsing attributes in process `syz.2.3745'. [ 339.265286][T17215] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3747'. [ 339.299112][T17217] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3749'. [ 339.311294][T17217] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3749'. [ 339.328614][ T3352] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 339.341801][ T3352] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 339.350504][ T5734] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 339.472816][T17225] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3752'. [ 339.488834][T17238] xt_SECMARK: invalid mode: 9 [ 339.504015][ T5734] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 339.512906][T17239] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3754'. [ 339.628059][T17251] netlink: 256 bytes leftover after parsing attributes in process `syz.4.3759'. [ 339.721936][T17264] netlink: 'syz.0.3763': attribute type 8 has an invalid length. [ 339.787103][T17268] Cannot find del_set index 4 as target [ 339.805212][T17268] netlink: 'syz.1.3764': attribute type 17 has an invalid length. [ 339.817608][T17271] netlink: 'syz.0.3766': attribute type 1 has an invalid length. [ 339.839883][ T5734] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 339.859628][T17271] netlink: 'syz.0.3766': attribute type 6 has an invalid length. [ 340.009282][T17293] netlink: 'syz.1.3771': attribute type 30 has an invalid length. [ 340.153968][T17315] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3778'. [ 340.243494][T17325] netlink: 'syz.1.3781': attribute type 3 has an invalid length. [ 340.646584][T17367] sctp: [Deprecated]: syz.0.3793 (pid 17367) Use of int in maxseg socket option. [ 340.646584][T17367] Use struct sctp_assoc_value instead [ 340.661704][T17368] sctp: [Deprecated]: syz.0.3793 (pid 17368) Use of int in maxseg socket option. [ 340.661704][T17368] Use struct sctp_assoc_value instead [ 340.728103][T17377] netlink: 'syz.3.3798': attribute type 8 has an invalid length. [ 341.113971][T17408] netlink: 'syz.4.3806': attribute type 142 has an invalid length. [ 341.135898][T17412] netlink: 'syz.0.3809': attribute type 1 has an invalid length. [ 341.184544][T17421] syzkaller0: entered promiscuous mode [ 341.191269][T17421] syzkaller0: entered allmulticast mode [ 341.559513][T17452] bridge19: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 341.569918][T17449] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 341.711768][ T35] net_ratelimit: 87 callbacks suppressed [ 341.711784][ T35] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 341.846953][ T35] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 341.970824][ T1158] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 342.113040][T17494] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap0 [ 342.123899][T17494] ip6gretap0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 342.132346][T17494] ip6gretap0: entered promiscuous mode [ 342.137880][T17494] ip6gretap0: entered allmulticast mode [ 342.160753][ T35] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 342.208706][T17503] syzkaller1: entered promiscuous mode [ 342.241779][T17503] syzkaller1: entered allmulticast mode [ 342.280279][ T35] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 342.362960][T17517] syzkaller0: entered promiscuous mode [ 342.387008][T17517] syzkaller0: entered allmulticast mode [ 342.433506][ T138] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 342.621485][ T138] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 342.740344][ T3352] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 342.846688][T17566] openvswitch: netlink: Invalid VLAN frame [ 342.861131][ T13] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 343.010435][T17581] Cannot find add_set index 46338 as target [ 343.069722][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 343.209795][ C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 343.329114][T17618] vlan0: entered promiscuous mode [ 343.342398][T17618] bond0: entered promiscuous mode [ 343.347643][T17618] vlan0: left allmulticast mode [ 343.355931][T17618] bond0: left allmulticast mode [ 343.435527][T17630] syzkaller0: entered promiscuous mode [ 343.449764][T17630] syzkaller0: entered allmulticast mode [ 343.485813][T17630] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 343.507056][T17630] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 343.528811][T17630] netdevsim netdevsim1 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 343.594821][T17630] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 343.607755][T17630] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 343.623488][T17630] netdevsim netdevsim1 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 343.648384][ T5283] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 343.685230][T17630] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 343.714183][T17630] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 343.734108][T17630] netdevsim netdevsim1 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 343.765893][T17630] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 343.778206][T17630] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 343.791738][T17630] netdevsim netdevsim1 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 343.802559][T17652] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 343.835644][T17659] xt_SECMARK: invalid mode: 9 [ 343.906619][ T5283] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 343.918173][ T1158] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 343.956911][ T1158] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 343.966598][ T1158] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 343.981215][ T13] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 343.994673][ T13] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 344.003543][ T13] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 344.019220][ T13] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 344.029314][ T13] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 344.038074][ T13] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 344.061625][ T13] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 344.070393][T17674] __nla_validate_parse: 24 callbacks suppressed [ 344.070408][T17674] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3887'. [ 344.080638][ T13] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 344.096169][ T13] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 344.249756][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 344.315798][T17692] xt_SECMARK: invalid mode: 9 [ 344.891317][T17749] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3909'. [ 345.041290][T17767] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3913'. [ 345.097132][T17774] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 345.150242][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 345.174751][T17786] netlink: 16215 bytes leftover after parsing attributes in process `syz.0.3919'. [ 345.320823][T17798] syzkaller1: entered promiscuous mode [ 345.335203][T17798] syzkaller1: entered allmulticast mode [ 345.390280][T17806] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3927'. [ 345.398736][T17810] validate_nla: 11 callbacks suppressed [ 345.398751][T17810] netlink: 'syz.4.3928': attribute type 1 has an invalid length. [ 345.546051][T17826] netlink: 'syz.0.3932': attribute type 8 has an invalid length. [ 345.802836][T17852] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3941'. [ 345.840391][T17847] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3939'. [ 345.842693][T17852] bond11: entered promiscuous mode [ 345.856040][T17852] 8021q: adding VLAN 0 to HW filter on device bond11 [ 345.883790][T17847] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3939'. [ 345.928576][T17847] block nbd3: Unsupported socket: should be TCP or UNIX. [ 345.938822][T17852] bridge15: entered promiscuous mode [ 345.956318][T17852] bond11: (slave bridge15): Enslaving as an active interface with an up link [ 346.078009][T17877] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3947'. [ 346.147050][T17885] veth0: entered promiscuous mode [ 346.166577][T17885] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3951'. [ 346.184855][T17885] veth0 (unregistering): left promiscuous mode [ 346.259739][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 346.461600][T17918] bridge0: entered allmulticast mode [ 346.683726][T17940] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode [ 346.711165][T17940] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode [ 346.738658][T17940] netlink: 'syz.0.3967': attribute type 21 has an invalid length. [ 346.774339][T17940] netlink: 'syz.0.3967': attribute type 1 has an invalid length. [ 346.800417][ T13] net_ratelimit: 35 callbacks suppressed [ 346.800431][ T13] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 346.941226][T17970] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 346.959232][T17972] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 346.981286][T17970] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 346.991144][ T35] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 347.057002][T17979] vlan4: entered promiscuous mode [ 347.120440][ T35] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 347.140648][T17983] bridge_slave_1: left allmulticast mode [ 347.147414][T17983] bridge_slave_1: left promiscuous mode [ 347.153650][T17983] bridge0: port 2(bridge_slave_1) entered disabled state [ 347.164821][T17983] bond6: (slave veth0_to_bond): Releasing active interface [ 347.178159][T17983] bond0: (slave bond_slave_0): Releasing backup interface [ 347.193641][T17983] team0: Port device team_slave_0 removed [ 347.211570][T17983] team0: Port device team_slave_1 removed [ 347.229780][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 347.235636][T17983] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 347.259556][T17983] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 347.292181][ T1158] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 347.375006][T18009] nbd: socks must be embedded in a SOCK_ITEM attr [ 347.410283][ T1158] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 347.495728][T18015] syzkaller0: entered promiscuous mode [ 347.501690][T18015] syzkaller0: entered allmulticast mode [ 347.519793][ T3300] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 347.590368][T18027] bond12: entered promiscuous mode [ 347.596080][T18027] 8021q: adding VLAN 0 to HW filter on device bond12 [ 347.624700][T18027] bridge17: entered promiscuous mode [ 347.630802][T18027] bond12: (slave bridge17): Enslaving as an active interface with an up link [ 347.641665][ T13] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 347.776014][T18046] netlink: 'syz.2.4006': attribute type 2 has an invalid length. [ 347.908389][ T5283] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 348.176222][T18102] IPv6: sit3: Disabled Multicast RS [ 348.182833][T18102] sit3: entered allmulticast mode [ 348.196483][T18104] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode [ 348.205356][T18104] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode [ 348.410467][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 348.689605][T18149] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 348.729788][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 348.730180][ T5625] Bluetooth: hci0: command 0x0c1a tx timeout [ 348.753584][ T5628] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 348.970684][T18174] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 348.991339][T18174] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 349.001965][T18174] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 349.015933][T18174] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 349.033648][T18174] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 349.045589][T18174] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 349.067740][T18174] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 349.078173][T18174] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 349.087396][T18174] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 349.095113][T18174] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 349.108636][T18174] tipc: Resetting bearer [ 349.204077][T17774] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 349.222420][T18213] netlink: 'syz.4.4059': attribute type 1 has an invalid length. [ 349.274086][T18213] bond16: entered promiscuous mode [ 349.280402][T18213] 8021q: adding VLAN 0 to HW filter on device bond16 [ 349.317346][T18213] 8021q: adding VLAN 0 to HW filter on device bond16 [ 349.334500][T18213] bond16: (slave vti0): The slave device specified does not support setting the MAC address [ 349.347062][T18213] bond16: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 349.366581][T18213] bond16: (slave vti0): making interface the new active one [ 349.380341][T18213] vti0: entered promiscuous mode [ 349.389003][T18213] bond16: (slave vti0): Enslaving as an active interface with an up link [ 349.411920][T18231] __nla_validate_parse: 21 callbacks suppressed [ 349.411934][T18231] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4064'. [ 349.427143][T18235] syzkaller1: entered promiscuous mode [ 349.427608][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 349.483292][T18244] netlink: 'syz.0.4067': attribute type 8 has an invalid length. [ 349.484992][T18246] netlink: 'syz.4.4066': attribute type 1 has an invalid length. [ 349.502736][T18246] netlink: 224 bytes leftover after parsing attributes in process `syz.4.4066'. [ 349.510749][T18244] bridge17: entered promiscuous mode [ 349.554459][T18244] bridge17: entered allmulticast mode [ 349.571279][T18249] netlink: 'syz.4.4069': attribute type 32 has an invalid length. [ 349.581161][T18252] 8021q: VLANs not supported on syzkaller0 [ 349.656652][T18254] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4070'. [ 349.706811][T18254] : left promiscuous mode [ 349.888371][T18277] syzkaller0: entered promiscuous mode [ 349.906611][T18277] syzkaller0: entered allmulticast mode [ 350.039381][T18294] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4080'. [ 350.210405][T18315] netlink: 'syz.2.4088': attribute type 10 has an invalid length. [ 350.223770][T18313] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 350.329779][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 350.358978][T18337] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4095'. [ 350.421359][T18327] IPVS: length: 104 != 24 [ 350.435114][T18334] IPVS: length: 104 != 24 [ 350.452932][T18346] FAULT_INJECTION: forcing a failure. [ 350.452932][T18346] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 350.462168][T18348] netlink: 104 bytes leftover after parsing attributes in process `syz.3.4099'. [ 350.478239][T18346] CPU: 0 UID: 0 PID: 18346 Comm: syz.0.4098 Not tainted syzkaller #0 PREEMPT(full) [ 350.478260][T18346] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 350.478269][T18346] Call Trace: [ 350.478274][T18346] [ 350.478281][T18346] dump_stack_lvl+0xe8/0x150 [ 350.478302][T18346] should_fail_ex+0x40c/0x560 [ 350.478322][T18346] _copy_from_iter+0x1d3/0x1660 [ 350.478342][T18346] ? rcu_is_watching+0x15/0xb0 [ 350.478363][T18346] ? __pfx__copy_from_iter+0x10/0x10 [ 350.478379][T18346] ? kmem_cache_alloc_node_noprof+0x3ca/0x680 [ 350.478402][T18346] ? netlink_sendmsg+0x650/0xb40 [ 350.478417][T18346] ? skb_put+0x112/0x210 [ 350.478437][T18346] netlink_sendmsg+0x6c0/0xb40 [ 350.478455][T18346] ? __pfx_netlink_sendmsg+0x10/0x10 [ 350.478479][T18346] ? aa_sock_msg_perm+0xf1/0x1b0 [ 350.478495][T18346] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 350.478513][T18346] ? __pfx_netlink_sendmsg+0x10/0x10 [ 350.478535][T18346] ____sys_sendmsg+0x9b9/0xa20 [ 350.478565][T18346] ? __pfx_____sys_sendmsg+0x10/0x10 [ 350.478587][T18346] ? lock_release+0x4b/0x3c0 [ 350.478609][T18346] ? import_iovec+0x73/0xa0 [ 350.478629][T18346] ___sys_sendmsg+0x2a5/0x360 [ 350.478649][T18346] ? rcu_is_watching+0x15/0xb0 [ 350.478664][T18346] ? get_pid_task+0x20/0x1f0 [ 350.478680][T18346] ? __pfx____sys_sendmsg+0x10/0x10 [ 350.478703][T18346] ? rcu_is_watching+0x15/0xb0 [ 350.478738][T18346] ? __fget_files+0x2a/0x420 [ 350.478755][T18346] ? __fget_files+0x3a2/0x420 [ 350.478775][T18346] __x64_sys_sendmsg+0x1b1/0x290 [ 350.478797][T18346] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 350.478824][T18346] ? rcu_is_watching+0x15/0xb0 [ 350.478839][T18346] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 350.478855][T18346] do_syscall_64+0x174/0x580 [ 350.478875][T18346] ? trace_irq_disable+0x3b/0x140 [ 350.478894][T18346] ? clear_bhb_loop+0x40/0x90 [ 350.478911][T18346] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 350.478927][T18346] RIP: 0033:0x7f8c8c39ce59 [ 350.478941][T18346] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 350.478955][T18346] RSP: 002b:00007f8c8d1ce028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 350.478971][T18346] RAX: ffffffffffffffda RBX: 00007f8c8c615fa0 RCX: 00007f8c8c39ce59 [ 350.478982][T18346] RDX: 0000000000000080 RSI: 0000200000000000 RDI: 0000000000000003 [ 350.478993][T18346] RBP: 00007f8c8d1ce090 R08: 0000000000000000 R09: 0000000000000000 [ 350.479003][T18346] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 350.479012][T18346] R13: 00007f8c8c616038 R14: 00007f8c8c615fa0 R15: 00007ffc4b760ca8 [ 350.479031][T18346] [ 350.775081][T18353] bond17: option arp_all_targets: invalid value (18446744073709551613) [ 350.803463][T18353] bond17 (unregistering): Released all slaves [ 350.837797][T18363] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 350.850949][T18363] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 350.862443][T18363] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 350.916609][T18363] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 350.928380][T18363] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 350.940361][T18363] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 350.969765][ C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 350.995907][T18363] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 351.008233][T18363] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 351.019798][T18363] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 351.042689][T18381] xt_SECMARK: invalid mode: 9 [ 351.157541][T18363] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 351.315483][T18363] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 351.369570][T18432] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4112'. [ 351.379795][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 351.389127][T18363] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 351.438821][T18423] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4110'. [ 351.449014][T18423] netlink: 21 bytes leftover after parsing attributes in process `syz.4.4110'. [ 351.477352][T18423] netlink: 21 bytes leftover after parsing attributes in process `syz.4.4110'. [ 351.639508][T18410] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 351.652874][T18410] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 351.661663][T18410] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 351.673712][T18456] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 351.677723][T18410] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 351.694285][T18410] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 351.702681][T18410] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 351.761573][T18410] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 351.781591][T18410] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 351.802554][T18410] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 351.832627][T18405] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 351.853003][T18405] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 351.885837][T18405] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 351.908626][ T5283] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 351.909767][T18410] net_ratelimit: 28 callbacks suppressed [ 351.909781][T18410] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 351.962732][T18485] set match dimension is over the limit! [ 352.058138][T18496] sctp: [Deprecated]: syz.3.4127 (pid 18496) Use of int in maxseg socket option. [ 352.058138][T18496] Use struct sctp_assoc_value instead [ 352.073486][T18410] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 352.189927][ T13] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 352.320545][T18410] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 352.433704][ T29] audit: type=1804 audit(1782192528.835:14): pid=18540 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.4143" name="/newroot/754/cgroup.controllers" dev="tmpfs" ino=3839 res=1 errno=0 [ 352.456231][ T13] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 352.499750][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 352.544619][ T29] audit: type=1800 audit(1782192528.835:15): pid=18540 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.4143" name="cgroup.controllers" dev="tmpfs" ino=3839 res=0 errno=0 [ 352.570503][ T13] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 352.658945][T18569] validate_nla: 3 callbacks suppressed [ 352.658960][T18569] netlink: 'syz.1.4152': attribute type 1 has an invalid length. [ 352.756483][T18578] ip6gretap1: entered promiscuous mode [ 352.766344][T18578] ip6gretap1: entered allmulticast mode [ 352.776565][T18578] bond16: (slave ip6gretap1): making interface the new active one [ 352.785805][T18578] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 352.795878][T18578] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 352.803815][T18578] bond16: (slave ip6gretap1): Enslaving as an active interface with an up link [ 352.860591][T18405] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 352.905774][T18598] openvswitch: netlink: Key type 350 is out of range max 32 [ 353.043879][T18603] syzkaller0: entered promiscuous mode [ 353.061255][T18603] syzkaller0: entered allmulticast mode [ 353.089973][T18410] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 353.219875][ T12] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 353.381515][T18633] erspan0: left promiscuous mode [ 353.402803][T18633] 8021q: adding VLAN 0 to HW filter on device team0 [ 353.411917][T18633] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 353.446226][T18633] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 353.456972][T18633] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 353.470291][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 353.472019][T18633] vlan0: left promiscuous mode [ 353.484558][T18633] veth1_vlan: entered promiscuous mode [ 353.506991][T18633] veth1_macvtap: left promiscuous mode [ 353.514257][T18633] veth0_macvtap: left promiscuous mode [ 353.520849][T18633] veth0_macvtap: entered promiscuous mode [ 353.528159][T18633] veth1_macvtap: entered promiscuous mode [ 353.545553][T18633] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 353.552912][T18633] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 353.560700][T18633] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 353.568218][T18633] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 353.575843][T18633] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 353.607019][T18415] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 6081 - 0 [ 353.616011][T18415] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 6081 - 0 [ 353.641847][T18415] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 6081 - 0 [ 353.645438][T18660] x_tables: duplicate entry at hook 1 [ 353.658722][T18415] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 6081 - 0 [ 353.769756][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 353.809990][T18668] netlink: 'syz.0.4183': attribute type 6 has an invalid length. [ 354.490297][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 354.541513][T18766] netlink: 'syz.0.4205': attribute type 1 has an invalid length. [ 354.583957][T18774] netlink: 'syz.4.4208': attribute type 11 has an invalid length. [ 354.592032][T18774] netlink: 'syz.4.4208': attribute type 11 has an invalid length. [ 354.600261][T18774] __nla_validate_parse: 14 callbacks suppressed [ 354.600275][T18774] netlink: 224 bytes leftover after parsing attributes in process `syz.4.4208'. [ 354.625776][T18766] 8021q: adding VLAN 0 to HW filter on device bond19 [ 354.682077][T18777] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4207'. [ 354.767495][T18785] netlink: 372 bytes leftover after parsing attributes in process `syz.0.4212'. [ 354.932707][T18800] bond0: option resend_igmp: invalid value (32767) [ 354.939532][T18800] bond0: option resend_igmp: allowed values 0 - 255 [ 354.967021][T18800] bond0 (unregistering): Released all slaves [ 355.020201][T18802] syzkaller1: entered promiscuous mode [ 355.026371][T18802] syzkaller1: entered allmulticast mode [ 355.036227][T18801] netlink: 'syz.2.4216': attribute type 4 has an invalid length. [ 355.207831][T18823] FAULT_INJECTION: forcing a failure. [ 355.207831][T18823] name failslab, interval 1, probability 0, space 0, times 0 [ 355.265466][T18828] netlink: 'syz.3.4222': attribute type 1 has an invalid length. [ 355.313371][T18823] CPU: 0 UID: 0 PID: 18823 Comm: syz.2.4224 Not tainted syzkaller #0 PREEMPT(full) [ 355.313393][T18823] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 355.313402][T18823] Call Trace: [ 355.313408][T18823] [ 355.313415][T18823] dump_stack_lvl+0xe8/0x150 [ 355.313436][T18823] should_fail_ex+0x40c/0x560 [ 355.313455][T18823] should_failslab+0xa8/0x100 [ 355.313478][T18823] __kmalloc_noprof+0xe8/0x750 [ 355.313497][T18823] ? __pfx_dynamic_dname+0x10/0x10 [ 355.313512][T18823] ? tomoyo_encode+0x2ad/0x570 [ 355.313529][T18823] tomoyo_encode+0x2ad/0x570 [ 355.313547][T18823] tomoyo_realpath_from_path+0x5fa/0x640 [ 355.313567][T18823] ? tomoyo_path_number_perm+0x219/0x5f0 [ 355.313588][T18823] tomoyo_path_number_perm+0x246/0x5f0 [ 355.313608][T18823] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 355.313628][T18823] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 355.313647][T18823] ? preempt_count_add+0x91/0x190 [ 355.313670][T18823] ? rcu_is_watching+0x15/0xb0 [ 355.313690][T18823] ? hook_file_ioctl+0x1f0/0x5c0 [ 355.313719][T18823] ? lock_release+0x4b/0x3c0 [ 355.313742][T18823] ? __fget_files+0x2a/0x420 [ 355.313767][T18823] ? __fget_files+0x3a2/0x420 [ 355.313783][T18823] ? __fget_files+0x2a/0x420 [ 355.313800][T18823] security_file_ioctl+0xc3/0x2a0 [ 355.313821][T18823] __se_sys_ioctl+0x47/0x170 [ 355.313841][T18823] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 355.313857][T18823] do_syscall_64+0x174/0x580 [ 355.313876][T18823] ? trace_irq_disable+0x3b/0x140 [ 355.313893][T18823] ? clear_bhb_loop+0x40/0x90 [ 355.313910][T18823] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 355.313925][T18823] RIP: 0033:0x7f3c42d9ce59 [ 355.313937][T18823] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 355.313951][T18823] RSP: 002b:00007f3c43c89028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 355.313966][T18823] RAX: ffffffffffffffda RBX: 00007f3c43015fa0 RCX: 00007f3c42d9ce59 [ 355.313977][T18823] RDX: 0000200000000100 RSI: 00000000800452d2 RDI: 0000000000000004 [ 355.313987][T18823] RBP: 00007f3c43c89090 R08: 0000000000000000 R09: 0000000000000000 [ 355.313996][T18823] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 355.314005][T18823] R13: 00007f3c43016038 R14: 00007f3c43015fa0 R15: 00007ffde27e76c8 [ 355.314024][T18823] [ 355.314038][T18823] ERROR: Out of memory at tomoyo_realpath_from_path. [ 355.590204][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 355.748527][T18857] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4227'. [ 355.777198][T18857] netlink: 64 bytes leftover after parsing attributes in process `syz.3.4227'. [ 355.793249][T18857] syzkaller1: entered promiscuous mode [ 355.798814][T18857] syzkaller1: entered allmulticast mode [ 356.157125][T18894] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4238'. [ 356.291460][T18907] netlink: 'syz.3.4243': attribute type 8 has an invalid length. [ 356.304898][T18907] bridge0: entered promiscuous mode [ 356.310596][T18907] bridge0: entered allmulticast mode [ 356.322062][ T5283] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 356.404540][T18917] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4246'. [ 356.422368][T18919] netlink: 220 bytes leftover after parsing attributes in process `syz.3.4248'. [ 356.503260][T18926] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4251'. [ 356.518740][T18926] bond14: entered promiscuous mode [ 356.524377][T18926] 8021q: adding VLAN 0 to HW filter on device bond14 [ 356.542382][T18926] bridge19: entered promiscuous mode [ 356.548213][T18926] bond14: (slave bridge19): Enslaving as an active interface with an up link [ 356.591880][T18932] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4253'. [ 356.629773][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 356.807523][T18955] netlink: 'syz.2.4261': attribute type 1 has an invalid length. [ 356.817230][T18955] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 356.929829][T18717] net_ratelimit: 31 callbacks suppressed [ 356.929846][T18717] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 356.985225][T18960] gre0: left promiscuous mode [ 357.004445][T18960] 8021q: adding VLAN 0 to HW filter on device team0 [ 357.015627][T18960] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 357.036396][T18960] team_slave_1: left promiscuous mode [ 357.055380][T18960] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 357.086556][ T809] xfrm0 speed is unknown, defaulting to 1000 [ 357.100092][T18713] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 357.109128][ T809] syz2: Port: 1 Link ACTIVE [ 357.127721][T17774] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 357.151306][T18713] bond15: (slave veth0_to_bond): link status definitely up, 10000 Mbps full duplex [ 357.168564][T18713] bond15: (slave veth0_to_bond): making interface the new active one [ 357.187056][T18713] bond15: active interface up! [ 357.221916][T18713] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 357.342032][T19010] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 357.363950][T19014] netlink: 'syz.3.4278': attribute type 8 has an invalid length. [ 357.378481][T19014] bridge20: entered promiscuous mode [ 357.386097][T19014] bridge20: entered allmulticast mode [ 357.402839][T18712] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 357.490501][T19028] mac80211_hwsim hwsim11 wlan1: Caught tx_queue_len zero misconfig [ 357.529962][T18717] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 357.650336][T18713] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 357.669772][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 357.717835][T19047] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 357.770357][T18713] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 357.809915][T19049] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 357.830537][T19049] syzkaller1: linktype set to 823 [ 357.922217][T19070] IPVS: Unknown mcast interface: vcan0 [ 358.108460][T19090] vlan5: entered promiscuous mode [ 358.264995][T19107] netlink: 'syz.4.4312': attribute type 21 has an invalid length. [ 358.282894][T19111] syzkaller0: entered promiscuous mode [ 358.284752][T19107] netlink: 'syz.4.4312': attribute type 21 has an invalid length. [ 358.288478][T19111] syzkaller0: entered allmulticast mode [ 358.303534][T19115] nbd: couldn't find a device at index 1048580 [ 358.444651][T19122] netlink: 'syz.4.4317': attribute type 1 has an invalid length. [ 358.524765][T19127] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 358.536475][T19127] syzkaller1: linktype set to 823 [ 358.680468][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 358.804192][T19152] bond17: entered promiscuous mode [ 358.809729][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 358.812879][T19152] 8021q: adding VLAN 0 to HW filter on device bond17 [ 358.846015][T19156] bridge16: entered promiscuous mode [ 358.852017][T19156] bond17: (slave bridge16): Enslaving as an active interface with an up link [ 358.917696][T19155] geneve7: entered promiscuous mode [ 358.927528][T19155] geneve7: entered allmulticast mode [ 358.952598][T18712] netdevsim netdevsim4 netdevsim0: set [1, 2] type 2 family 0 port 19995 - 0 [ 358.961843][T18712] netdevsim netdevsim4 netdevsim1: set [1, 2] type 2 family 0 port 19995 - 0 [ 358.992613][T18712] netdevsim netdevsim4 netdevsim2: set [1, 2] type 2 family 0 port 19995 - 0 [ 359.013569][T18712] netdevsim netdevsim4 netdevsim3: set [1, 2] type 2 family 0 port 19995 - 0 [ 359.026937][T19167] netlink: 'syz.3.4334': attribute type 4 has an invalid length. [ 359.103108][T19167] netlink: 'syz.3.4334': attribute type 4 has an invalid length. [ 359.112040][T19186] SET target dimension over the limit! [ 359.225539][T19190] bond20: entered promiscuous mode [ 359.642087][T19238] tipc: Enabled bearer , priority 24 [ 359.666060][T19240] __nla_validate_parse: 25 callbacks suppressed [ 359.666077][T19240] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4361'. [ 359.689922][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 359.694127][T19244] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 359.820038][T19251] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4366'. [ 359.863274][T19253] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 359.875065][T19246] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4364'. [ 359.894819][T19257] netlink: 'syz.0.4367': attribute type 8 has an invalid length. [ 359.932013][T19251] bond17: entered promiscuous mode [ 359.937608][T19251] 8021q: adding VLAN 0 to HW filter on device bond17 [ 359.951162][T19257] bridge18: entered promiscuous mode [ 359.956912][T19257] bridge18: entered allmulticast mode [ 359.998551][T19263] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4370'. [ 360.042930][T19267] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4371'. [ 360.104602][T19275] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4375'. [ 360.181149][T19289] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4377'. [ 360.289024][T19289] netlink: 212344 bytes leftover after parsing attributes in process `syz.0.4377'. [ 360.317492][T19309] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4382'. [ 360.333915][T19310] bridge7: left allmulticast mode [ 360.350145][T19310] geneve3: left allmulticast mode [ 360.363309][T19310] bond7: left allmulticast mode [ 360.364335][T19312] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4384'. [ 360.378166][T19310] bridge10: left allmulticast mode [ 360.389735][T19315] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 360.435540][T19322] netlink: 'syz.3.4387': attribute type 23 has an invalid length. [ 360.464954][T19324] netlink: 'syz.0.4388': attribute type 11 has an invalid length. [ 360.760275][ T10] tipc: Node number set to 1674150980 [ 360.760449][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 361.066950][T19390] bond18: entered promiscuous mode [ 361.074476][T19390] 8021q: adding VLAN 0 to HW filter on device bond18 [ 361.085236][T19393] netlink: 'syz.0.4412': attribute type 4 has an invalid length. [ 361.418463][T19431] xt_SECMARK: invalid mode: 9 [ 361.637427][T19450] xt_hashlimit: size too large, truncated to 1048576 [ 361.804330][T19466] 8021q: VLANs not supported on ip6_vti0 [ 361.879745][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 362.042687][T18711] net_ratelimit: 41 callbacks suppressed [ 362.042704][T18711] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 362.079506][T19494] bond0: Error: Cannot enslave bond to itself. [ 362.166417][T19506] FAULT_INJECTION: forcing a failure. [ 362.166417][T19506] name failslab, interval 1, probability 0, space 0, times 0 [ 362.182958][T18711] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 362.188799][T19506] CPU: 0 UID: 0 PID: 19506 Comm: syz.3.4454 Not tainted syzkaller #0 PREEMPT(full) [ 362.188820][T19506] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 362.188830][T19506] Call Trace: [ 362.188837][T19506] [ 362.188843][T19506] dump_stack_lvl+0xe8/0x150 [ 362.188865][T19506] should_fail_ex+0x40c/0x560 [ 362.188884][T19506] should_failslab+0xa8/0x100 [ 362.188907][T19506] kmem_cache_alloc_node_noprof+0x8f/0x680 [ 362.188927][T19506] ? rcu_is_watching+0x15/0xb0 [ 362.188944][T19506] ? __alloc_skb+0x1d7/0x7a0 [ 362.188962][T19506] ? trace_irq_enable+0x3b/0x140 [ 362.188984][T19506] __alloc_skb+0x1d7/0x7a0 [ 362.189003][T19506] netlink_sendmsg+0x5d4/0xb40 [ 362.189030][T19506] ? __pfx_netlink_sendmsg+0x10/0x10 [ 362.189053][T19506] ? rcu_is_watching+0x15/0xb0 [ 362.189068][T19506] ? aa_sock_msg_perm+0xf1/0x1b0 [ 362.189083][T19506] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 362.189101][T19506] ? __pfx_netlink_sendmsg+0x10/0x10 [ 362.189123][T19506] ____sys_sendmsg+0x9b9/0xa20 [ 362.189148][T19506] ? __pfx_____sys_sendmsg+0x10/0x10 [ 362.189170][T19506] ? lock_release+0x4b/0x3c0 [ 362.189194][T19506] ? import_iovec+0x73/0xa0 [ 362.189215][T19506] ___sys_sendmsg+0x2a5/0x360 [ 362.189235][T19506] ? rcu_is_watching+0x15/0xb0 [ 362.189252][T19506] ? __pfx____sys_sendmsg+0x10/0x10 [ 362.189271][T19506] ? irqentry_exit+0x218/0x8f0 [ 362.189292][T19506] ? rcu_is_watching+0x15/0xb0 [ 362.189319][T19506] ? __fget_files+0x2a/0x420 [ 362.189335][T19506] ? __fget_files+0x3a2/0x420 [ 362.189356][T19506] __x64_sys_sendmsg+0x1b1/0x290 [ 362.189378][T19506] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 362.189405][T19506] ? rcu_is_watching+0x15/0xb0 [ 362.189421][T19506] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 362.189437][T19506] do_syscall_64+0x174/0x580 [ 362.189456][T19506] ? trace_irq_disable+0x3b/0x140 [ 362.189475][T19506] ? clear_bhb_loop+0x40/0x90 [ 362.189491][T19506] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 362.189506][T19506] RIP: 0033:0x7fb321d9ce59 [ 362.189520][T19506] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 362.189534][T19506] RSP: 002b:00007fb322c99028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 362.189551][T19506] RAX: ffffffffffffffda RBX: 00007fb322015fa0 RCX: 00007fb321d9ce59 [ 362.189562][T19506] RDX: 000000002400c000 RSI: 00002000000003c0 RDI: 0000000000000003 [ 362.189573][T19506] RBP: 00007fb322c99090 R08: 0000000000000000 R09: 0000000000000000 [ 362.189583][T19506] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 362.189593][T19506] R13: 00007fb322016038 R14: 00007fb322015fa0 R15: 00007ffe90b4d228 [ 362.189611][T19506] [ 362.570221][T18713] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 362.731094][T18711] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 362.760745][T19553] block nbd4: not configured, cannot reconfigure [ 362.850076][T18710] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 362.883445][T19567] Cannot find set identified by id 144 to match [ 362.889753][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 362.929191][T19574] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 362.972325][T18713] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 363.092339][T18710] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 363.210393][T18717] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 363.320860][T18710] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 363.386111][T19611] Cannot find set identified by id 253 to match [ 363.443787][T18717] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 363.473276][T19618] vlan4: entered promiscuous mode [ 363.506440][T19621] netlink: 'syz.4.4489': attribute type 2 has an invalid length. [ 363.514604][T19620] netlink: 'syz.4.4489': attribute type 2 has an invalid length. [ 363.818409][T19648] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 363.849727][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 363.919762][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 363.964573][T19657] bond0: Removing last arp target with arp_interval on [ 364.026499][T19665] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 364.046385][T19665] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 364.067563][T19667] netlink: 'syz.3.4505': attribute type 2 has an invalid length. [ 364.075813][T19665] gretap2: entered promiscuous mode [ 364.089455][T19665] gretap2: entered allmulticast mode [ 364.182391][T19678] netlink: 'syz.4.4509': attribute type 1 has an invalid length. [ 364.564790][T19720] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 364.681118][T19738] __nla_validate_parse: 28 callbacks suppressed [ 364.681134][T19738] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4528'. [ 364.906223][T19759] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4532'. [ 364.947461][T19759] bond15: entered promiscuous mode [ 364.954097][T19759] 8021q: adding VLAN 0 to HW filter on device bond15 [ 364.969778][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 364.979152][T19759] bridge21: entered promiscuous mode [ 364.985670][T19759] bond15: (slave bridge21): Enslaving as an active interface with an up link [ 365.184311][T19781] tipc: Enabling of bearer rejected, media not registered [ 365.206184][T19783] netlink: 'syz.0.4539': attribute type 8 has an invalid length. [ 365.436299][T19807] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.4547'. [ 365.451419][T19807] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4547'. [ 365.464192][T19807] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4547'. [ 365.816543][T19838] netlink: 'syz.4.4554': attribute type 8 has an invalid length. [ 365.868446][T19846] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4555'. [ 365.938573][T19853] geneve1: Caught tx_queue_len zero misconfig [ 365.955310][T19853] netlink: 'syz.4.4558': attribute type 1 has an invalid length. [ 365.969740][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 365.981730][T19853] netlink: 224 bytes leftover after parsing attributes in process `syz.4.4558'. [ 366.015164][T19860] FAULT_INJECTION: forcing a failure. [ 366.015164][T19860] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 366.029270][T19860] CPU: 0 UID: 0 PID: 19860 Comm: syz.2.4562 Not tainted syzkaller #0 PREEMPT(full) [ 366.029297][T19860] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 366.029307][T19860] Call Trace: [ 366.029313][T19860] [ 366.029318][T19860] dump_stack_lvl+0xe8/0x150 [ 366.029344][T19860] should_fail_ex+0x40c/0x560 [ 366.029363][T19860] _copy_from_user+0x2d/0xb0 [ 366.029383][T19860] ___sys_sendmsg+0x1c6/0x360 [ 366.029404][T19860] ? rcu_is_watching+0x15/0xb0 [ 366.029419][T19860] ? get_pid_task+0x20/0x1f0 [ 366.029434][T19860] ? __pfx____sys_sendmsg+0x10/0x10 [ 366.029457][T19860] ? rcu_is_watching+0x15/0xb0 [ 366.029481][T19860] ? __fget_files+0x2a/0x420 [ 366.029498][T19860] ? __fget_files+0x3a2/0x420 [ 366.029518][T19860] __x64_sys_sendmsg+0x1b1/0x290 [ 366.029540][T19860] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 366.029566][T19860] ? rcu_is_watching+0x15/0xb0 [ 366.029580][T19860] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 366.029594][T19860] do_syscall_64+0x174/0x580 [ 366.029613][T19860] ? trace_irq_disable+0x3b/0x140 [ 366.029632][T19860] ? clear_bhb_loop+0x40/0x90 [ 366.029651][T19860] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 366.029666][T19860] RIP: 0033:0x7f3c42d9ce59 [ 366.029680][T19860] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 366.029692][T19860] RSP: 002b:00007f3c43c89028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 366.029709][T19860] RAX: ffffffffffffffda RBX: 00007f3c43015fa0 RCX: 00007f3c42d9ce59 [ 366.029720][T19860] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 366.029729][T19860] RBP: 00007f3c43c89090 R08: 0000000000000000 R09: 0000000000000000 [ 366.029739][T19860] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 366.029747][T19860] R13: 00007f3c43016038 R14: 00007f3c43015fa0 R15: 00007ffde27e76c8 [ 366.029766][T19860] [ 366.032741][T19858] xt_CT: You must specify a L4 protocol and not use inversions on it [ 366.092941][T19861] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4560'. [ 366.276617][T19875] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4566'. [ 366.330142][ C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 366.340529][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 366.444934][T19885] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 366.495884][T19893] netlink: 'syz.1.4575': attribute type 6 has an invalid length. [ 366.557308][T19899] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode [ 366.567787][T19899] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode [ 366.616194][T19903] netlink: 52 bytes leftover after parsing attributes in process `syz.1.4580'. [ 366.833907][T19926] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 366.877643][T19926] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 366.893169][T19926] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 366.979739][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 367.015369][T19940] netlink: 'syz.4.4593': attribute type 1 has an invalid length. [ 367.080970][T18712] net_ratelimit: 37 callbacks suppressed [ 367.080988][T18712] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 367.103186][T19940] workqueue: Failed to create a rescuer kthread for wq "bond18": -EINTR [ 368.069808][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 368.890571][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 369.119989][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 370.109760][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 370.383313][T18715] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 371.276940][ C0] sched: DL replenish lagged too much [ 371.280728][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 372.270052][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 372.739968][T18712] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 372.763460][T17774] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 373.210528][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 373.473284][ T1326] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 373.936856][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 374.249968][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 375.340037][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 376.489908][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 377.400046][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 378.510009][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 378.970075][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 379.479994][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 380.650064][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 380.700373][T18713] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 381.420921][T18710] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 381.569780][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 382.569812][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 382.600138][T18712] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 382.810394][T18705] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 383.038883][T18710] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 383.770664][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 384.019944][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 384.680577][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 385.699789][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 385.891054][T18711] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 386.759892][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 387.840708][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 387.942084][T18705] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 388.220448][T18717] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 388.349765][T18711] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 388.463305][T18714] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 388.899910][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 389.059981][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 389.239838][T18712] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 389.485270][T18713] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 389.880621][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 390.135969][T18712] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 390.989776][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 391.094427][ T5628] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 391.113679][ T5628] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 391.126505][ T5628] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 391.210268][ T5628] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 391.227544][ T5628] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 391.265107][T18708] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 392.000501][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 392.148932][T18718] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 392.227034][ T5625] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 392.269740][ T5625] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 392.365805][ T5625] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 392.999826][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 393.084950][ T5625] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 393.169853][ T5625] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 393.884938][T18708] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 394.030497][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 394.089830][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 394.259964][T20032] __nla_validate_parse: 3 callbacks suppressed [ 394.259980][T20032] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4613'. [ 394.293964][T20029] macvlan2: entered promiscuous mode [ 394.855287][T20029] macvlan2: entered allmulticast mode [ 395.080543][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 395.452740][ T5628] Bluetooth: hci5: command tx timeout [ 396.190514][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 396.409848][ C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 396.652492][T20032] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4613'. [ 397.220542][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 397.458448][T18718] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 397.530228][ T5628] Bluetooth: hci5: command tx timeout [ 398.170702][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 399.129822][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 399.250523][T20042] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 399.289873][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 399.610431][ T5628] Bluetooth: hci5: command tx timeout [ 400.259928][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 401.381195][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 401.690136][ T5628] Bluetooth: hci5: command tx timeout [ 402.339958][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 403.459922][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 404.089892][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 404.169784][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 404.479777][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 404.482820][T20027] mac80211_hwsim hwsim4 wlan0: left promiscuous mode [ 404.645377][T20027] A link change request failed with some changes committed already. Interface vxlan0 may have been left with an inconsistent configuration, please check. [ 405.319811][T17774] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 405.589809][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 405.684515][T18711] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 406.117363][T18710] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 406.639775][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 407.561899][T18714] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 407.579950][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 407.715587][T20067] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4619'. [ 408.650461][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 409.210350][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 409.729918][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 409.802612][T18718] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 410.240307][T18718] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 410.719867][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 411.676884][T18711] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 411.719867][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 412.090056][T18712] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 412.185738][T18708] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 412.207136][T18712] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 412.226936][T18712] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 412.740634][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 412.857491][T18711] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 413.769818][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 414.249865][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 414.849918][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 414.915095][T18712] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 415.522637][T18712] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 415.859833][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 415.939703][T20095] netlink: 196 bytes leftover after parsing attributes in process `syz.0.4624'. [ 416.238609][T20095] netlink: 196 bytes leftover after parsing attributes in process `syz.0.4624'. [ 416.477727][T20101] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4625'. [ 416.550307][T20095] netlink: 19 bytes leftover after parsing attributes in process `syz.0.4624'. [ 416.855865][T18715] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 416.939882][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 417.610790][T18715] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 417.667461][T20108] netlink: 'syz.4.4626': attribute type 1 has an invalid length. [ 417.950619][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 418.420006][T18711] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 419.060450][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 419.289751][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 419.592197][T18712] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 419.602432][T20013] lo speed is unknown, defaulting to 1000 [ 419.703520][T18705] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 420.030633][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 420.355143][T18705] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 421.219917][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 421.524891][T18712] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 421.662555][T18705] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 421.999206][T18712] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 422.190575][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 422.615834][T20122] sock: sock_set_timeout: `syz.4.4631' (pid 20122) tries to set negative timeout [ 423.022815][T18712] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 423.200670][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 423.818945][T18712] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 424.083176][T20132] xt_l2tp: missing protocol rule (udp|l2tpip) [ 424.169791][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 424.329722][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 424.462208][T18711] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 424.611757][T20130] netlink: 56 bytes leftover after parsing attributes in process `syz.0.4632'. [ 424.694830][T20133] netlink: 'syz.0.4632': attribute type 11 has an invalid length. [ 424.710082][T18715] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 425.069359][T20013] xfrm0 speed is unknown, defaulting to 1000 [ 425.127334][T20133] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4632'. [ 425.232986][T18715] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 425.319793][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 425.799688][T18715] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 426.340707][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 426.593529][T18705] net_ratelimit: 2 callbacks suppressed [ 426.593548][T18705] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 426.689814][T20130] netlink: 'syz.0.4632': attribute type 2 has an invalid length. [ 427.369735][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 428.430693][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 429.369903][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 429.439774][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 429.689896][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 430.509855][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 431.509906][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 432.489922][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 433.540144][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 434.277592][T18712] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 434.409742][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 434.659914][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 434.901895][ T1326] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 435.100063][T20013] xfrm0 speed is unknown, defaulting to 1000 [ 435.749778][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 436.541908][T18705] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 436.740572][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 437.779850][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 437.972936][T18718] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 438.819781][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 439.249852][T18717] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 439.449722][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 439.919760][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 440.270264][T18718] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 440.574520][T18718] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 440.909931][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 441.900432][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 442.150284][T18718] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 442.759065][T18717] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 442.890509][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 443.192372][T18708] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 443.330860][T18708] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 444.039680][T18718] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 444.130553][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 444.170145][T18717] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 444.294603][T18712] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 444.489903][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 445.019810][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 446.079752][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 446.522739][T20223] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4654'. [ 447.069876][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 447.630226][T18718] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 448.023679][T20013] bridge0: port 1(bridge_slave_0) entered blocking state [ 448.051199][T20013] bridge0: port 1(bridge_slave_0) entered disabled state [ 448.065944][T20013] bridge_slave_0: entered allmulticast mode [ 448.099829][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 448.802688][T20013] bridge_slave_0: entered promiscuous mode [ 449.093349][T18708] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 449.159887][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 449.782270][T20013] bridge0: port 2(bridge_slave_1) entered blocking state [ 450.259909][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 450.702282][T20013] bridge0: port 2(bridge_slave_1) entered disabled state [ 451.232327][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 451.689774][T20013] bridge_slave_1: entered allmulticast mode [ 452.071607][T20013] bridge_slave_1: entered promiscuous mode [ 452.360930][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 452.549889][T18717] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 452.971718][T18717] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 453.410741][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 454.013183][ T5625] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 454.228511][ T5625] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 454.239896][ T5625] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 454.294591][ T5625] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 454.309841][ T5625] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 454.409987][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 454.990243][T18717] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 455.289927][ C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 455.500521][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 456.430546][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 456.454604][ T5628] Bluetooth: hci3: command tx timeout [ 457.479799][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 457.772602][T18713] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 457.999770][T18708] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 458.342709][T18708] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 458.490075][ T5628] Bluetooth: hci3: command tx timeout [ 458.632062][T18713] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 458.649732][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 458.675666][T20285] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 458.809866][T18712] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 458.836389][T20278] syzkaller1: entered promiscuous mode [ 459.121016][T20278] syzkaller1: entered allmulticast mode [ 459.610579][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 459.621913][T18715] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 460.570104][ T5628] Bluetooth: hci3: command tx timeout [ 460.611108][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 461.690761][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 462.259849][T18710] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 462.669974][ T5628] Bluetooth: hci3: command tx timeout [ 462.679720][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 463.690683][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 464.749809][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 465.827456][T20310] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4671'. [ 465.840649][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 465.939987][T18710] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 466.107493][T20312] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4671'. [ 466.139029][T18718] bridge_slave_1: left allmulticast mode [ 466.578769][T18718] bridge_slave_1: left promiscuous mode [ 466.649796][T18718] bridge0: port 2(bridge_slave_1) entered disabled state [ 466.810675][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 467.197862][T18718] bridge_slave_0: left allmulticast mode [ 467.236644][T18718] bridge_slave_0: left promiscuous mode [ 467.836818][T18718] bridge0: port 1(bridge_slave_0) entered disabled state [ 467.899712][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 468.990464][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 469.116959][T17774] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 470.070456][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 470.969847][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 472.109811][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 472.379670][T20327] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4677'. [ 473.079762][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 474.259781][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 475.240460][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 476.269744][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 477.269900][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 478.299985][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 479.309918][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 479.611916][T18718] bond0 (unregistering): Released all slaves [ 480.099271][T18711] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 480.184714][T20310] workqueue: Failed to create a rescuer kthread for wq "bond18": -EINTR [ 480.370346][T20312] workqueue: Failed to create a rescuer kthread for wq "bond18": -EINTR [ 480.509985][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 480.739929][T18708] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 481.379732][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 482.530764][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 483.540582][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 484.629861][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 485.119888][ T5625] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 485.179307][T18717] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 485.199827][ T5625] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 485.226909][ T5625] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 485.592532][ T5625] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 485.629809][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 485.669163][ T5625] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 486.191996][T18710] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 486.233054][T20352] netlink: 2 bytes leftover after parsing attributes in process `syz.0.4682'. [ 486.659764][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 486.868509][ T49] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 486.882079][ T49] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 486.893936][ T49] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 486.912995][ T49] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 486.928497][ T49] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 487.620147][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 488.310030][T18706] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 488.483020][T18712] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 488.679780][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 488.790245][T20265] lo speed is unknown, defaulting to 1000 [ 488.823191][ T49] Bluetooth: hci5: command tx timeout [ 488.902225][T18705] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 489.171842][T18706] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 489.394578][ T5625] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 489.443495][ T5625] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 489.457695][ T5625] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 489.697443][ T5625] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 489.714338][ T5625] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 489.739946][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 489.770060][ T49] Bluetooth: hci6: command tx timeout [ 490.810562][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 490.904193][ T49] Bluetooth: hci5: command tx timeout [ 491.859829][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 491.874029][ T5625] Bluetooth: hci6: command tx timeout [ 491.930208][ T5625] Bluetooth: hci7: command tx timeout [ 492.272206][T18706] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 492.809817][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 492.969678][ T5625] Bluetooth: hci5: command tx timeout [ 492.981414][T18715] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 493.869781][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 493.936665][ T5625] Bluetooth: hci6: command tx timeout [ 494.010672][ T5625] Bluetooth: hci7: command tx timeout [ 494.929763][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 495.130107][ T5625] Bluetooth: hci5: command tx timeout [ 495.980616][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 496.024517][ T5625] Bluetooth: hci6: command tx timeout [ 496.090203][ T5625] Bluetooth: hci7: command tx timeout [ 496.328751][ T1326] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 497.009882][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 498.029727][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 498.170071][ T5625] Bluetooth: hci7: command tx timeout [ 499.249939][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 500.159745][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 501.259890][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 502.219932][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 503.279798][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 504.250558][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 505.349851][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 506.500538][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 507.480579][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 508.490534][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 509.460624][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 510.499844][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 511.550681][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 512.599828][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 513.419939][T18714] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 513.436596][T20265] xfrm0 speed is unknown, defaulting to 1000 [ 513.679749][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 513.864927][T18705] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 514.312118][T18710] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 514.641507][T18705] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 514.730502][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 514.839755][T18710] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 515.108491][T18710] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 515.515779][ T49] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 515.527603][ T49] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 515.544164][ T49] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 515.571898][ T49] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 515.618823][ T49] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 515.789784][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 515.980987][T18714] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 516.518414][T20361] lo speed is unknown, defaulting to 1000 [ 516.539903][T18714] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 516.769786][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 517.769969][ T49] Bluetooth: hci1: command tx timeout [ 517.790609][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 518.889752][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 519.849856][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 519.893075][ T49] Bluetooth: hci1: command tx timeout [ 520.970832][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 521.930066][ T49] Bluetooth: hci1: command tx timeout [ 522.019766][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 523.020019][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 524.069916][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 524.094276][ T49] Bluetooth: hci1: command tx timeout [ 525.060614][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 526.140536][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 527.219964][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 528.180753][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 529.250622][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 530.249854][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 530.620383][T18717] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 531.209618][T18715] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 531.369799][T18704] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 531.370520][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 531.429045][T20265] xfrm0 speed is unknown, defaulting to 1000 [ 531.500346][T18708] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 532.049683][T18715] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 532.064481][T20355] lo speed is unknown, defaulting to 1000 [ 532.171602][T18710] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 532.339793][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 532.960190][T20361] xfrm0 speed is unknown, defaulting to 1000 [ 532.966521][T18708] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 533.459850][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 533.625256][T17774] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 533.860903][T18708] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 534.436380][T18715] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 534.470532][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 535.539763][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 536.529877][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 537.580550][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 538.680513][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 539.027339][ T5625] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 539.469807][ T5625] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 539.479686][ T5625] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 539.499382][ T5625] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 539.514255][ T5625] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 539.620571][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 540.659742][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 541.829803][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 542.740669][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 543.549180][ T49] Bluetooth: hci2: command tx timeout [ 543.949848][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 544.979763][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 545.849896][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 545.939717][ T49] Bluetooth: hci2: command tx timeout [ 547.050563][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 547.449778][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 547.930549][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 548.013475][ T49] Bluetooth: hci2: command tx timeout [ 548.429776][T20355] xfrm0 speed is unknown, defaulting to 1000 [ 548.436079][T18715] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 549.039737][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 549.096748][T20370] lo speed is unknown, defaulting to 1000 [ 549.102800][T20361] xfrm0 speed is unknown, defaulting to 1000 [ 549.304418][T18704] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 550.069875][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 550.092738][ T49] Bluetooth: hci2: command tx timeout [ 550.200919][T18715] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 550.642636][T18710] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 551.159886][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 551.373919][ T5625] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 551.434324][ T5625] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 551.457923][ T5625] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 551.552032][ T5625] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 551.567266][ T5625] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 551.933322][T18715] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 552.206992][T18715] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 552.239806][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 552.245674][T20464] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 552.257116][T20464] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 552.266732][T20464] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 552.282988][T20467] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 552.284766][T20464] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 552.305293][T20464] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 552.329829][T20464] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 552.346632][T20464] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 552.464245][ T5625] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 552.482825][ T5625] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 553.189839][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 553.626749][T18717] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 553.698151][ T5625] Bluetooth: hci0: command tx timeout [ 553.786730][T18717] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 553.926698][T18717] netdevsim netdevsim1 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 554.169858][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 554.490282][ T5625] Bluetooth: hci4: command tx timeout [ 554.904255][ T5625] Bluetooth: hci8: command tx timeout [ 555.329723][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 555.842456][ T5625] Bluetooth: hci0: command tx timeout [ 556.430371][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 556.581571][ T5625] Bluetooth: hci4: command tx timeout [ 556.971321][ T5625] Bluetooth: hci8: command tx timeout [ 557.399866][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 557.690518][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 557.854916][ T5625] Bluetooth: hci0: command tx timeout [ 557.936262][ T1326] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 558.400488][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 558.649883][ T5625] Bluetooth: hci4: command tx timeout [ 559.050198][ T5625] Bluetooth: hci8: command tx timeout [ 559.409924][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 559.930235][ T5625] Bluetooth: hci0: command tx timeout [ 559.989882][T20370] xfrm0 speed is unknown, defaulting to 1000 [ 560.002159][T18711] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 560.429729][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 560.684247][T18717] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 560.751308][ T5625] Bluetooth: hci4: command tx timeout [ 560.764591][T18717] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 561.129625][T18717] netdevsim netdevsim1 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 561.139783][ T5625] Bluetooth: hci8: command tx timeout [ 561.470020][T18707] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 561.589856][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 561.952505][T18711] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 562.569820][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 563.209697][T18717] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 563.219473][T18717] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 563.259742][T18717] netdevsim netdevsim1 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 563.549833][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 563.590004][T18708] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 563.729894][T18710] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 564.610558][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 564.639421][T18717] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 564.855442][T18717] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 564.909660][T18717] netdevsim netdevsim1 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 565.035240][T20438] lo speed is unknown, defaulting to 1000 [ 565.110886][T18710] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 565.322759][T20355] xfrm0 speed is unknown, defaulting to 1000 [ 565.569776][T18715] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 565.681350][T18712] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 565.720550][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 566.709880][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 567.809718][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 568.740937][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 568.850213][T20419] lo speed is unknown, defaulting to 1000 [ 568.910160][T18712] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 569.849775][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 570.829745][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 571.959745][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 572.919878][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 573.770740][T18712] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 573.949777][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 575.119743][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 575.438964][T18717] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 575.499839][T18717] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 36151 - 0 [ 575.556025][T18717] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 575.719010][ T49] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 575.732474][ T49] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 575.743684][ T49] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 575.782193][ T49] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 575.799772][ T49] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 575.901960][T18717] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 2] type 2 family 0 port 19995 - 0 [ 576.080199][T20419] xfrm0 speed is unknown, defaulting to 1000 [ 576.092656][T18712] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 576.110579][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 576.250695][T18712] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 577.059805][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 577.978518][ T5625] Bluetooth: hci9: command tx timeout [ 578.089802][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 578.169904][ C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 578.442506][T18717] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 578.505577][T18717] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 36151 - 0 [ 578.598821][T18717] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 578.720037][T18717] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 2] type 2 family 0 port 19995 - 0 [ 578.804932][T20370] xfrm0 speed is unknown, defaulting to 1000 [ 579.136727][T18715] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 579.179806][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 579.237018][T20438] xfrm0 speed is unknown, defaulting to 1000 [ 579.243541][T20463] lo speed is unknown, defaulting to 1000 [ 580.039746][ T5625] Bluetooth: hci9: command tx timeout [ 580.189802][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 581.078647][T18717] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 581.099644][T18717] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 36151 - 0 [ 581.139719][T18717] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 581.179815][T18717] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 2] type 2 family 0 port 19995 - 0 [ 581.269854][T20456] lo speed is unknown, defaulting to 1000 [ 581.279806][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 581.288963][T18711] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 582.112040][ T5625] Bluetooth: hci9: command tx timeout [ 582.260468][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 583.290564][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 583.647809][T18717] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 583.707627][T18717] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 36151 - 0 [ 583.763976][T18717] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 583.832479][T18717] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 2] type 2 family 0 port 19995 - 0 [ 583.910213][T18707] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 584.170266][ T5625] Bluetooth: hci9: command tx timeout [ 584.330624][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 585.529755][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 586.459689][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 587.519939][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 587.610024][T18706] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 587.649942][T20462] lo speed is unknown, defaulting to 1000 [ 587.738170][ T5283] 8021q: adding VLAN 0 to HW filter on device eth1 [ 587.800961][T18711] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 588.549913][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 589.000319][T18715] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 589.569856][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 589.671222][T18712] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 590.000367][T18706] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 590.090507][T20456] xfrm0 speed is unknown, defaulting to 1000 [ 590.097046][T20438] xfrm0 speed is unknown, defaulting to 1000 [ 590.632931][T18717] team0: left promiscuous mode [ 590.681799][T18717] bridge0: port 1(team0) entered disabled state [ 590.729735][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 591.333374][T18717] bond10: left allmulticast mode [ 591.366524][T18717] bond10: left promiscuous mode [ 591.427392][T18717] bridge0: port 3(bond10) entered disabled state [ 591.568621][T18717] pim6reg: left allmulticast mode [ 591.619885][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 599.212268][ T49] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 599.224773][ T49] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 599.237210][ T49] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 599.262840][ T49] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 599.279727][ T49] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 601.552303][ T49] Bluetooth: hci3: command tx timeout [ 603.610243][ T49] Bluetooth: hci3: command tx timeout [ 605.690402][ T49] Bluetooth: hci3: command tx timeout [ 607.770161][ T49] Bluetooth: hci3: command tx timeout [ 611.175338][ T5625] Bluetooth: hci5: command 0x0406 tx timeout [ 613.522336][ T5625] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 613.548617][ T5625] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 613.565128][ T5625] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 613.856525][ T5625] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 613.871982][ T5625] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 616.009889][ T49] Bluetooth: hci6: command tx timeout [ 616.090565][ T49] Bluetooth: hci7: command 0x0406 tx timeout [ 618.089994][ T5625] Bluetooth: hci6: command tx timeout [ 618.134535][ T49] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 618.147336][ T49] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 618.159685][ T49] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 618.181339][ T49] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 618.192737][ T49] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 619.269674][ T5625] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 619.344493][ T5625] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 619.356369][ T5625] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 619.379839][ T5625] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 619.399744][ T5625] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 620.198376][T20464] Bluetooth: hci6: command tx timeout [ 620.330068][T20464] Bluetooth: hci10: command tx timeout [ 621.679994][T20464] Bluetooth: hci11: command tx timeout [ 622.252156][T20464] Bluetooth: hci6: command tx timeout [ 622.506231][T20464] Bluetooth: hci10: command tx timeout [ 623.690618][T20464] Bluetooth: hci11: command tx timeout [ 624.569851][T20464] Bluetooth: hci10: command tx timeout [ 625.770886][T20464] Bluetooth: hci11: command tx timeout [ 626.650610][T20464] Bluetooth: hci10: command tx timeout [ 627.876487][T20464] Bluetooth: hci11: command tx timeout [ 641.852759][ T5625] Bluetooth: hci1: command 0x0406 tx timeout [ 642.731979][ T49] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 642.744764][ T49] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 642.769687][ T49] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 643.093999][ T49] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 643.109797][ T49] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 645.265300][T20464] Bluetooth: hci12: command tx timeout [ 647.290446][T20464] Bluetooth: hci12: command tx timeout [ 649.370029][T20464] Bluetooth: hci12: command tx timeout [ 651.450006][T20464] Bluetooth: hci12: command tx timeout [ 660.005241][T18717] bond16 (unregistering): (slave ip6gretap1): Releasing active interface [ 662.139601][ T5625] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 662.149719][ T5625] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 662.160787][ T5625] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 662.179693][ T5625] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 662.206433][ T5625] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 664.410006][T20464] Bluetooth: hci13: command tx timeout [ 666.642345][ T49] Bluetooth: hci13: command tx timeout [ 667.292072][ T49] Bluetooth: hci2: command 0x0406 tx timeout [ 668.652661][ T5625] Bluetooth: hci13: command tx timeout [ 670.732483][ T5625] Bluetooth: hci13: command tx timeout [ 673.657005][ T49] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 673.792426][ T49] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 673.884086][ T49] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 673.909655][ T49] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 673.926564][ T49] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 674.415055][ T5625] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 674.482249][ T5625] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 674.494528][ T5625] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 674.602356][ T5625] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 674.644708][ T5625] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 674.899641][ T49] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 675.242084][ T49] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 675.258239][ T49] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 675.614588][T20591] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 675.629638][T20591] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 676.169931][ T5625] Bluetooth: hci14: command tx timeout [ 676.902394][ T5625] Bluetooth: hci15: command tx timeout [ 677.609645][ T49] Bluetooth: hci8: command 0x0406 tx timeout [ 677.615691][ T49] Bluetooth: hci4: command 0x0406 tx timeout [ 677.624342][T20464] Bluetooth: hci0: command 0x0406 tx timeout [ 677.770269][T20464] Bluetooth: hci16: command tx timeout [ 678.250183][T20464] Bluetooth: hci14: command tx timeout [ 679.038763][T20464] Bluetooth: hci15: command tx timeout [ 679.849867][T20464] Bluetooth: hci16: command tx timeout [ 680.329852][T20464] Bluetooth: hci14: command tx timeout [ 681.049910][T20464] Bluetooth: hci15: command tx timeout [ 681.929957][T20464] Bluetooth: hci16: command tx timeout [ 682.409892][T20464] Bluetooth: hci14: command tx timeout [ 683.010894][T18717] bond6 (unregistering): (slave bridge1): Releasing backup interface [ 683.037780][T18717] bridge1 (unregistering): left promiscuous mode [ 683.129852][T20464] Bluetooth: hci15: command tx timeout [ 684.010446][T20464] Bluetooth: hci16: command tx timeout [ 694.425777][T18717] bond17 (unregistering): (slave bridge16): Releasing backup interface [ 694.449678][T18717] bridge16 (unregistering): left promiscuous mode [ 695.915086][T18717] bond1 (unregistering): Released all slaves [ 696.638383][T18717] bond2 (unregistering): Released all slaves [ 697.346033][T18717] bond3 (unregistering): Released all slaves [ 697.551705][T20467] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 697.580077][T20467] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 697.592884][T20467] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 697.619626][T20467] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 697.639797][T20467] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 698.009720][T20467] Bluetooth: hci9: command 0x0406 tx timeout [ 698.866006][T18717] bond4 (unregistering): Released all slaves [ 699.578777][T18717] bond5 (unregistering): Released all slaves [ 699.690393][T20464] Bluetooth: hci17: command tx timeout [ 700.726547][T18717] bond6 (unregistering): Released all slaves [ 701.639044][T18717] bond7 (unregistering): Released all slaves [ 701.770434][T20464] Bluetooth: hci17: command tx timeout [ 703.008361][T18717] bond8 (unregistering): Released all slaves [ 703.852319][T20464] Bluetooth: hci17: command tx timeout [ 703.919643][T18717] bond9 (unregistering): Released all slaves [ 704.831839][T18717] bond10 (unregistering): Released all slaves [ 705.686000][T18717] bond11 (unregistering): Released all slaves [ 705.938568][T20464] Bluetooth: hci17: command tx timeout [ 706.528222][T18717] bond0 (unregistering): Released all slaves [ 707.408422][T18717] bond12 (unregistering): Released all slaves [ 708.267252][T18717] bond13 (unregistering): Released all slaves [ 708.972405][T18717] bond14 (unregistering): Released all slaves [ 709.787222][T18717] bond15 (unregistering): (slave veth0_to_bond): Releasing active interface [ 710.539804][T18717] bond15 (unregistering): Released all slaves [ 711.242071][T18717] bond16 (unregistering): Released all slaves [ 712.239783][T18717] bond17 (unregistering): Released all slaves [ 713.608616][T18717] bond18 (unregistering): Released all slaves [ 716.129177][T18717] bond11 (unregistering): (slave ip6gretap1): Releasing active interface [ 720.695188][T20467] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1 [ 720.707741][T20467] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9 [ 720.726847][T20467] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9 [ 720.748702][T20467] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4 [ 720.769654][T20467] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2 [ 722.954246][T20464] Bluetooth: hci18: command tx timeout [ 723.612421][ T49] Bluetooth: hci3: command 0x0406 tx timeout [ 724.969829][T20467] Bluetooth: hci18: command tx timeout [ 727.069064][T20467] Bluetooth: hci18: command tx timeout [ 727.350253][T18717] bond16 (unregistering): (slave vti0): Releasing backup interface [ 727.358201][T18717] vti0 (unregistering): left promiscuous mode [ 729.130018][T20467] Bluetooth: hci18: command tx timeout [ 733.050157][ T30] INFO: task syz-executor:20370 blocked for more than 143 seconds. [ 733.058091][ T30] Not tainted syzkaller #0 [ 733.947033][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 734.205884][ T30] task:syz-executor state:D stack:26000 pid:20370 tgid:20370 ppid:1 task_flags:0x400140 flags:0x00080002 [ 734.259688][T20464] Bluetooth: hci19: unexpected cc 0x0c03 length: 249 > 1 [ 735.206675][ T30] Call Trace: [ 735.212679][T20464] Bluetooth: hci20: unexpected cc 0x0c03 length: 249 > 1 [ 735.234165][T20464] Bluetooth: hci20: unexpected cc 0x1003 length: 249 > 9 [ 735.246629][T20464] Bluetooth: hci20: unexpected cc 0x1001 length: 249 > 9 [ 735.274146][T20464] Bluetooth: hci20: unexpected cc 0x0c23 length: 249 > 4 [ 735.299670][T20464] Bluetooth: hci20: unexpected cc 0x0c38 length: 249 > 2 [ 735.331689][T20464] Bluetooth: hci19: unexpected cc 0x1003 length: 249 > 9 [ 735.425496][T20464] Bluetooth: hci19: unexpected cc 0x1001 length: 249 > 9 [ 735.455033][T20464] Bluetooth: hci19: unexpected cc 0x0c23 length: 249 > 4 [ 735.476700][ T49] Bluetooth: hci19: unexpected cc 0x0c38 length: 249 > 2 [ 735.506052][ T30] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 736.092275][ T30] __schedule+0x17d9/0x56c0 [ 736.117648][ T30] ? kvm_sched_clock_read+0x11/0x20 [ 736.312927][ T30] ? __pfx___schedule+0x10/0x10 [ 737.179340][ T30] ? rcu_is_watching+0x15/0xb0 [ 737.364183][ T30] ? rcu_is_watching+0x15/0xb0 [ 737.400817][ T30] ? lock_release+0x4b/0x3c0 [ 737.530488][ T49] Bluetooth: hci20: command tx timeout [ 737.844322][ T30] schedule+0x164/0x360 [ 738.171281][ T49] Bluetooth: hci19: command tx timeout [ 738.350618][ T30] schedule_preempt_disabled+0x13/0x30 [ 738.358542][ T30] rwsem_down_write_slowpath+0x87d/0x1080 [ 738.939129][ T30] ? rwsem_down_write_slowpath+0x498/0x1080 [ 738.970369][ T49] Bluetooth: hci6: command 0x0406 tx timeout [ 739.277340][ T30] ? __pfx_rwsem_down_write_slowpath+0x10/0x10 [ 739.609897][ T49] Bluetooth: hci20: command tx timeout [ 739.814131][ T30] ? trace_irq_enable+0x3b/0x140 [ 739.819130][ T30] ? lock_acquire+0x5f/0x350 [ 740.250367][ T49] Bluetooth: hci19: command tx timeout [ 741.099857][ T30] down_write+0x1bc/0x200 [ 741.104226][ T30] ? __pfx_down_write+0x10/0x10 [ 741.109087][ T30] ? __rtnl_unlock+0xc8/0xf0 [ 741.129531][ T30] ? rdma_net_to_dev_net+0x23/0x240 [ 741.153083][ T30] ? rdma_net_to_dev_net+0x23/0x240 [ 741.169678][ T30] ? rdma_net_to_dev_net+0x1ed/0x240 [ 741.175306][ T30] rdma_dev_exit_net+0x8f/0x340 [ 741.189613][ T30] ? lock_release+0x4b/0x3c0 [ 741.206263][ T30] ? __pfx_rdma_dev_exit_net+0x10/0x10 [ 741.219593][ T30] ? net_generic+0x1e/0x240 [ 741.231891][ T30] ? rtnl_is_locked+0x15/0x20 [ 741.241356][ T30] ops_undo_list+0x43d/0x8d0 [ 741.252063][ T30] ? __pfx_ops_undo_list+0x10/0x10 [ 741.264485][ T30] ? ops_init+0x46a/0x5d0 [ 741.279729][ T30] setup_net+0x2f6/0x350 [ 741.284412][ T30] ? __pfx_setup_net+0x10/0x10 [ 741.464544][ T30] ? preinit_net+0x492/0x7b0 [ 741.469200][ T30] copy_net_ns+0x4f9/0x720 [ 741.486634][ T30] create_new_namespaces+0x3f0/0x6b0 [ 741.509650][ T30] ? security_capable+0x7e/0x2c0 [ 741.514902][ T30] unshare_nsproxy_namespaces+0x149/0x190 [ 741.529662][ T30] ksys_unshare+0x57d/0xa00 [ 741.541821][ T30] ? __pfx_ksys_unshare+0x10/0x10 [ 741.559550][ T30] ? rcu_is_watching+0x15/0xb0 [ 741.568382][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 741.613987][ T30] __x64_sys_unshare+0x38/0x50 [ 741.629682][ T30] do_syscall_64+0x174/0x580 [ 741.636712][ T30] ? trace_irq_disable+0x3b/0x140 [ 741.659588][ T30] ? clear_bhb_loop+0x40/0x90 [ 741.664626][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 741.686426][ T30] RIP: 0033:0x7f164479e127 [ 741.691188][ T49] Bluetooth: hci20: command tx timeout [ 741.799961][ T30] RSP: 002b:00007ffd20ce0138 EFLAGS: 00000202 ORIG_RAX: 0000000000000110 [ 741.813888][ T30] RAX: ffffffffffffffda RBX: 00007f1644a15f40 RCX: 00007f164479e127 [ 741.829704][ T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 741.849622][ T30] RBP: 00007f1644a167b8 R08: 0000000000000000 R09: 0000000000000000 [ 741.869618][ T30] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000008 [ 741.889720][ T30] R13: 0000000000000003 R14: 00007ffd20ce0378 R15: 0000000000000000 [ 741.905457][ T30] [ 741.919636][ T30] INFO: lockdep is turned off. [ 741.934422][T18717] bond9 (unregistering): (slave geneve2): Releasing active interface [ 741.941685][ T30] NMI backtrace for cpu 0 [ 741.941707][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 741.941725][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 741.941735][ T30] Call Trace: [ 741.941741][ T30] [ 741.941748][ T30] dump_stack_lvl+0xe8/0x150 [ 741.941771][ T30] nmi_cpu_backtrace+0x274/0x2d0 [ 741.941790][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 741.941814][ T30] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 741.941832][ T30] sys_info+0x135/0x170 [ 741.941846][ T30] watchdog+0xfd7/0x1030 [ 741.941869][ T30] ? watchdog+0x1c7/0x1030 [ 741.941891][ T30] kthread+0x388/0x470 [ 741.941906][ T30] ? __pfx_watchdog+0x10/0x10 [ 741.941923][ T30] ? __pfx_kthread+0x10/0x10 [ 741.941938][ T30] ret_from_fork+0x514/0xb70 [ 741.941955][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 741.941970][ T30] ? __switch_to+0xc89/0x1420 [ 741.941991][ T30] ? __pfx_kthread+0x10/0x10 [ 741.942007][ T30] ret_from_fork_asm+0x1a/0x30 [ 741.942031][ T30] [ 741.942037][ T30] Sending NMI from CPU 0 to CPUs 1: [ 742.056692][ C1] NMI backtrace for cpu 1 [ 742.056710][ C1] CPU: 1 UID: 0 PID: 1326 Comm: aoe_tx0 Not tainted syzkaller #0 PREEMPT(full) [ 742.056728][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 742.056738][ C1] RIP: 0010:__sanitizer_cov_trace_pc+0x0/0x70 [ 742.056764][ C1] Code: 89 fb e8 23 00 00 00 48 8b 3d 34 da 61 0c 48 89 de 5b e9 33 f8 5f 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 48 8b 04 24 65 48 8b 0d d8 59 74 11 65 8b 15 f9 59 74 [ 742.056779][ C1] RSP: 0018:ffffc90000a08808 EFLAGS: 00000287 [ 742.056793][ C1] RAX: ffffffff8688a45c RBX: 1ffff92000141192 RCX: 0000000000000100 [ 742.056806][ C1] RDX: ffff888029c0dd00 RSI: 000000000000000c RDI: 0000000000000010 [ 742.056817][ C1] RBP: dffffc0000000000 R08: ffff888040aa4680 R09: ffff888040aa4680 [ 742.056828][ C1] R10: 0000000000000000 R11: 000000d800000056 R12: ffffc90000a08c90 [ 742.056840][ C1] R13: ffffc90000a08c10 R14: ffff888040aa4580 R15: 000000000000000c [ 742.056851][ C1] FS: 0000000000000000(0000) GS:ffff88812537b000(0000) knlGS:0000000000000000 [ 742.056865][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 742.056876][ C1] CR2: 0000563dedd9da38 CR3: 0000000036c12000 CR4: 00000000003526f0 [ 742.056890][ C1] Call Trace: [ 742.056896][ C1] [ 742.056902][ C1] veth_xdp_tx+0x33b/0x5e0 [ 742.056928][ C1] veth_poll+0xf05/0x4160 [ 742.056948][ C1] ? veth_poll+0x76b/0x4160 [ 742.056979][ C1] ? __pfx_veth_poll+0x10/0x10 [ 742.056996][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 742.057015][ C1] ? rcu_is_watching+0x15/0xb0 [ 742.057033][ C1] ? rcu_is_watching+0x15/0xb0 [ 742.057051][ C1] ? do_raw_spin_unlock+0xf5/0x210 [ 742.057073][ C1] ? rcu_is_watching+0x15/0xb0 [ 742.057102][ C1] ? call_timer_fn+0x24b/0x5e0 [ 742.057120][ C1] ? xdp_do_check_flushed+0x204/0x230 [ 742.057145][ C1] __napi_poll+0xaa/0x330 [ 742.057214][ C1] net_rx_action+0x61d/0xf50 [ 742.057251][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 742.057270][ C1] ? kvm_sched_clock_read+0x11/0x20 [ 742.057295][ C1] ? __pfx_sched_clock_cpu+0x10/0x10 [ 742.057326][ C1] handle_softirqs+0x225/0x840 [ 742.057348][ C1] ? do_softirq+0x76/0xd0 [ 742.057369][ C1] ? __dev_queue_xmit+0x29b/0x37f0 [ 742.057389][ C1] do_softirq+0x76/0xd0 [ 742.057408][ C1] [ 742.057414][ C1] [ 742.057420][ C1] __local_bh_enable_ip+0xf8/0x130 [ 742.057439][ C1] ? __dev_queue_xmit+0x29b/0x37f0 [ 742.057454][ C1] __dev_queue_xmit+0x1ed7/0x37f0 [ 742.057469][ C1] ? rcu_is_watching+0x15/0xb0 [ 742.057491][ C1] ? __dev_queue_xmit+0x29b/0x37f0 [ 742.057506][ C1] ? __schedule+0x17ef/0x56c0 [ 742.057524][ C1] ? update_load_avg+0x1be/0x1950 [ 742.057546][ C1] ? __pfx___dev_queue_xmit+0x10/0x10 [ 742.057564][ C1] ? ref_tracker_free+0x689/0x830 [ 742.057590][ C1] ? rcu_is_watching+0x15/0xb0 [ 742.057607][ C1] ? rcu_is_watching+0x15/0xb0 [ 742.057623][ C1] ? trace_irq_enable+0x3b/0x140 [ 742.057646][ C1] tx+0x6b/0x190 [ 742.057665][ C1] ? __pfx_tx+0x10/0x10 [ 742.057682][ C1] kthread+0x1ed/0x420 [ 742.057703][ C1] ? __pfx_kthread+0x10/0x10 [ 742.057719][ C1] ? __pfx_default_wake_function+0x10/0x10 [ 742.057771][ C1] ? __kthread_parkme+0x71/0x1f0 [ 742.057794][ C1] ? __kthread_parkme+0x196/0x1f0 [ 742.057818][ C1] kthread+0x388/0x470 [ 742.057832][ C1] ? __pfx_kthread+0x10/0x10 [ 742.057848][ C1] ? __pfx_kthread+0x10/0x10 [ 742.057863][ C1] ret_from_fork+0x514/0xb70 [ 742.057880][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 742.057895][ C1] ? __switch_to+0xc89/0x1420 [ 742.057919][ C1] ? __pfx_kthread+0x10/0x10 [ 742.057934][ C1] ret_from_fork_asm+0x1a/0x30 [ 742.057961][ C1] [ 742.608255][T20467] Bluetooth: hci19: command tx timeout