last executing test programs: 10.978352352s ago: executing program 2 (id=9899): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r3, &(0x7f0000000080)={&(0x7f0000001340)=@phonet={0x23, 0x7f, 0x6, 0x9}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000800)='\x00\x00\x00\x00\x00\x00', 0x6}], 0x1}, 0x20000001) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={r4, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76ea090000000000009ba56a88ca", 0x0, 0x6400, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xc}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) r8 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r8, &(0x7f00000000c0), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r8, &(0x7f00000002c0)={&(0x7f0000000100)={0x1d, r9}, 0x10, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4e701e9b2472e58fa20000000000000038520ccbc120cb45eec0b34ef9e8bed00e309f836a616bbf7d10289c83e931e1c9", @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="0000008001000000010000e0010300006000170611100000"], 0x48}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) r10 = socket(0x400000000010, 0x3, 0x0) r11 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r12, {0x4, 0xa}, {}, {0xb, 0x6}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x8}]}}, @TCA_BPF_CLASSID={0x8, 0x3, {0x1, 0xb}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x858}, 0x20004844) r13 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r14, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x8}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x4, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) r16 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r16, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0300002e00090027bd70000000000004000000480311802e2e"], 0x35c}, 0x1, 0x0, 0x0, 0x42804}, 0x4000010) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c0000001d00070f2cbd70000000000007000000", @ANYRES32=r15, @ANYBLOB="408052"], 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000000203034403000000000000000200ffff0800010001000000"], 0x1c}}, 0x0) r17 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r17, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x2, 0x3, 0x401, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) 4.920183172s ago: executing program 2 (id=9910): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) (async) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) (async) sendmmsg$inet(r0, &(0x7f0000006780)=[{{0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f0000001f00)="f9e3a965bb4daa0bab7712cc54610a977ec93c90e60260c8d46a07502803377390240fc97779abd960ad4b198c89e416df50d215ed09b501c36ac4387061f679e605108685b21add81393bb4a45633e30ae31b5c42c725d92fec36e88ba551e8aa3ef39fa45c75ad9edc099cfbb97be2a0e327425a7b6bccbc259c5dc45dc3f1c9e52f7d5a627d61f235aa", 0x8b}, {&(0x7f0000003cc0)="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", 0x76a}, {&(0x7f0000000400)="8685a6512c8e89780d6e4879d373213d2a1c8fef067c51d06f7c3f1065de657d753e3c54b8c6c9799e51f118fcc4aedeef6cbad4dce1a888933609ced25dbd5525a583bd7b94ef797a0eb28197ef4f3e5cdcf4fc8cdfb8ff86a0c8b7470e3d5361aaa0709a9a8a0587316bcbec41f13110833be72c914b06f785368b5830746acc57f6f629ee681ed3fb6a3a896e7c9722c8ac8b8c59aff8cd0e7769b6eea894b7b11e9b4392", 0xa6}, {&(0x7f00000004c0)="6e75d71644d097ce0bfb3e004ea3c969ddc5682dacdad41331c3f80489325e0a50890e3468bf60a74d395a072146537fc6504fa3050000009e455adf23bf04a685d6c082c37ca7ad0879fa14ad333bba2a7f83dba458371575758424ec", 0x5d}, {&(0x7f00000018c0)="0383071aff805a08e0b83c0faed1d5f92933f2ed750716ac3c0389228b7cbcb0d75f9f5d75e26e9f432ac5f826003cca23ac61360f4ade16c4ac16b291481a22446dc8c732d65971588ee14903008ac19ff5c1ac5b9f6f138adbb41516a3ee63ad8d260dd737983c52a28e24f27b3a85196771c201ef70b2437e06906b63885711ac2f27999c33efcd608c265918c8a7485af9a35a7c7426e1e11296447d0eb14192d4cb5711de509c3ade553d4dcf2d85120d97779695f3717741023dc4773a18449ef8a14a5e725efb446b7271eec1f2bebb0b14d07ef7c509b60d6555", 0xde}, {&(0x7f00000019c0)="4e9179cc5f902b2b1aa3b90d8876cde166e55bae701a77fee43bdb4c2d540e8802cebf31c1b7709b569db88b3506812deb57685adb642578ce64670d4955ac2c9379b1d610bc5bb6c16f27d22ada909a20473e5c15ee8de7", 0x58}, {&(0x7f0000001a40)="8a93baf0add5d266f18216ebc9d334f18cd93f5e01e88e5ff0d95ddf18aaba6fd27b0ef90a19c834ce99caaca27ae1", 0x2f}], 0x7}}], 0x1, 0x48004) (async) setsockopt$bt_BT_POWER(r0, 0x112, 0x4, 0x0, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$MRT6_PIM(r2, 0x29, 0xd0, &(0x7f0000000040)=0x200, 0x4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz0\x00', 0x1ff) (async) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x4001, 0x3, 0x458, 0x300, 0xb, 0x148, 0x308, 0x148, 0x3c0, 0x230, 0x242, 0x3c0, 0x215, 0x3, 0x0, {[{{@ip={@local, @remote, 0x0, 0x0, 'batadv_slave_0\x00', 'macvtap0\x00', {}, {}, 0x73}, 0x0, 0x2d0, 0x300, 0x0, {0xff0f000000000000}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x8}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0xe, 0x0, 0x6, './file0\x00'}}]}, @common=@inet=@SET2={0x30}}, {{@uncond, 0xec010000, 0xa0, 0xc0, 0x0, {}, [@common=@ah={{0x30}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4b8) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010025bd7000fbdbdf250100000006000600234e000014000200776730"], 0x30}}, 0x20000880) openat$cgroup_int(r4, &(0x7f0000000040)='notify_on_release\x00', 0x2, 0x0) (async) r7 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r7, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) (async) setsockopt$inet_tcp_int(r7, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r7, 0x6, 0x14, 0x0, 0x0) (async) connect$inet(r7, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) (async) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r7, 0x6, 0x16, &(0x7f0000000340)=[@sack_perm, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @timestamp, @window={0x3, 0xfffe}, @sack_perm], 0x200000000000005e) (async) sendto$inet(r7, &(0x7f00000001c0)='l', 0x1, 0x24008015, 0x0, 0x0) (async) setsockopt$inet_tcp_TCP_CONGESTION(r7, 0x6, 0xd, &(0x7f0000000300)='veno', 0x4) (async) setsockopt$inet_tcp_TCP_REPAIR(r7, 0x6, 0x13, &(0x7f0000000000), 0x4) (async) sendto$inet(r7, &(0x7f0000000080)='<', 0xffffffffffffffef, 0x4805, 0x0, 0xfe8d) ioctl$XFS_IOC_START_COMMIT(0xffffffffffffffff, 0x80585882, &(0x7f0000000040)) (async) socket(0x10, 0x3, 0x0) (async) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a40)=ANY=[@ANYBLOB="b70200000d000000bfa300000000000005000000000000007a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065060400010000050404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000496cf27fb6d2c643db7e2d5fb4b0936cdf827fb43a431ca711fcd0cdfa146ed3d09a6175037958e27106e225b7937f02008b5e5a076d83923dd29c034055b67d5b310efcfa89147a7fb0a93d035f2f206d2ef831ab7ea0c34f17e3ad6eecbb622003b538dfd8e012e79578e51bc53099e90f4580d7be3e8c254a5cba117cbdb9cd38bdb2ca8e050000003a14817ac61e4dd11183a13477bf7e060e3670ef0e6a9f65f1328d6704902cbe7bc04b82d2789cb132b8667c214733a18c8b6619f28d996d60a17e3c184b751c51160100000000000080148b9a31ee8dc8b544f3c4a532e60a0ac346dfebd31a08060000000200000000000000334d83239dd20100008000000000d858e8327ef01fb6c86acac12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e957bc73ddc4eabba08a406f99f7b1e1ad828267d4eadd3964663e085354133f7130856f756436303767d2e24f29e5dad9796edb697a6ea0183babc190ae2ebf8aad34732181feb28cb0bae7c34dc5e7c805210600000000000000c3dec04b25df45d4f71ab158c36657b7218baa07a99bd50499ccc421ace5e845885efb5b9964e4beba3da8223fe5308e4e65ee93e107000000f8ddebf70132a4d01776839b8eccf707882042e716df9b57b290c661d4e85031086197bcc5cb0e221a0c34323c129102b6ff0100002e88a1940b3c02ed9c92d6f64b1282dc51bb0015982730711c599e1c72ffa11ed8be1a6830d7507005154c46bd3ca96318c570f0721fc7aa2a5836ba99fe1f86468694f22cdf550ef091a78098534f0d973059594119d06d5ea9a8d0857382ec6e2a071474cfc12346e47ad97f4ead7cf70a9d1cdac944779dc08a705414888700a30e2366c6a06b3367a389ca39059787790017b0689a173db9c24db65c1e00015c1d093dab18fd0699fe3304000000323e9c7080397bc49d70c060d57bc88fbe3bbaa058b040362ab926150363fb099408885afc2bf9a46a076b7babfcddeff8c35030669ea69f5e4be1b8e0d6697e97186f9ae97d5670dba6623279f73db9dec75070cd9ab0fda6b069ef6d2857ca3e4e6068f1bf710d133d541da86e0477e4a6cc999dc21c3ef408e6b178e7c9f274d7fafc8d757d33dfa35aa2b2ff7f9a7d365e63845f3e1092f8dde8af3904ea0f4b82649b83ed4fa0f873339c4cadecc13219ba7518aa4f7db34ead13484742067ab743c1d82a5687f2ed690000010000000000000000000000000000000000000099d4fa0000000000003f0ecdc7c82e72919c91d2039afe17e95edef8ba72205beff7771bcb293747b88486cacee403000000a2919a4b09e168e4e4d5ff2ed893f2e314679fa69fc7e0cf761f918725704a01c56009a9f748e5aaf30a10bd8c409b1870c1f75e26b45264e3d3f8e0048e55ae289c2f884d0766cddc76eb7f601110ff39053c262279f4ef00fbdb8c328615a9ec84f27a9f3938ae736138b8c1ec220c1540bf3d162dc1c27fa30f0dc60b9f257db5d1c7ed2efce676a93110904d5e055af44664b53c764d61443f73552195c7ccfbf9f03c44432eaa3b7501d4239354da8de21eada75d3a3afb2c76ff0700007976694b6a0f0e946766f57544ff52cef0dd811bec4e3c0a30f2d7d19d26d201721b8eded3bc475958dd498ee2b2d6146e33fc0de1dc2e0516ac565ddb1d4ae89e671282a2d3066ac968c7d7d7db195f255b1b4a85eb9ee0a3b68c9e209756623adf685dd715d68ed1274b4d5502f512493af8f98c615cac3666c58f785c3f758be352a71871d5c081197d37980e4f4e26b5476fb20407ff7098b7174bef66fa03a99b5c0c20b378065fac4ef9ac2d0d804b9400000060e5d3f1749f6aecf69ba83a71caa9bdddc679f1b826f74b6563a4be1fd82b73c8c2bc65f63982b951fb058fd3c7b6341c4580376b2c16bd94d2da66059de81abfa15eeeae3b0ba38d8bb1bf032c73f1285e21fff5a1d138e061b1dc7bbda199b5fab8e0719e9cd69b47dcb52b0be6a3a73afdf328132e1d4f21065716be0c53a23940d07188b015fa341dbc92231c8b5e5717eac184f46c9f61b69f55cd2231bcf821052429a1f250e8b734be0605a15f25923d599544b319319ff0a32621019347df460a098119a6f47eb1bac47946d7a009cbc6ec74c19a93cc7c7138b28c95270116181fd5f5533d3c58104d2ad0e10d3663488e664401453f22f0d76d2162635365258af61ae1f46f4a7866f302d91e3f7c2781f602220522e84602a939a8d5e4137ae31ccd397404dc72e06715a6503d4d865182803ee6725da7293b23daeebefd6fce7411c9624a7e8d5ba5a13e1c32adc4f3274497c6882a72475e4280a4d9a47c003c6ed3071330c58145be813a10788a720a6b5a498ca2b42496c479a0a71e2f6f9bad8c84bc6be20281bde0b348cf2c60538a505ad4a0510eebb023e4954c9eb6cd70627f5c03d867dbf3ad5d1f1dc852064dd0efafc3df20ec8faf3d194db76127f88f284fa1b71ab964fdd2474471da76373e65e9a8bf844bdfdd348bc7d00c4c7e7abc231f8cde79b7a6c5aafe954b8ba37818e40c14b36f2d7c23f9f614576b689436fef2f27f8b1e756e00262e22bca49c43fd73e7e99b2fa44a8c1df7ffffff735ad6c5fabf082e0df0f8ba7e24272165f2f5b28230c095162b82ceaeaae9b1713b5f2ee68e2b53d44bd84bf6960157e96bbb96b5e10d66c87e7a9a7d53c281d88ebb175a4dbb82130e6870980e47913110f091d21760d985afd3163f2e6880682432f9b3b97d57a9f980edfa1116a3d04d58872a07d6a7e12db673acd2f7b8988d833e71943fe2c1c65a3cf355e5b91114052f8a398d8e10c96b955c56b55bfd3ecf0af694c71a03f2996c15b1ba971de1cb9c7e6a0000000000000014783ef54c51199317413f98dca8ff3df3572a7d9ef5f6103997f1f9e4b0c3970bda50f6c0af58dbd6c031b1a5a7512c58965c514adfa17d31429c68db50a93d88199defd3b4625fea426ff9293a28a544a6a9e24d192d67a1b3c6b14c4ec6d164e902ce4913843d65d841973468729ea12bf6d3499036dbb66718f3497855c3baa6cc07c0fa388ec9df0617c1a28ef5a595ee267a76175b8a057e6efaf4fefe46def451f2858fe71a53e77b1a44e98843bb3a40102da3703dfb9f61bdcea2fb810b32d52e2157a150a63ea6135d1cf6f864c2e68884d7245bc5d61dc5a114d10ffb2200040000fc1e3865d17d128306d1b81884a934cb0000000000d367000098a4526e6468987dbc63bff7590eb388afaba43d811996333eef7e9f472bee293f0c40d434b8be07cbd52325296e22802493edb5c590ad208bac683a8b2d4c9d2d57ff846ae8c422e0b28546671f11d8157bb762c91f3fbcca8e21589c92446ae65d408c0637ffcc2d44b615ce003dd1e12b085e186d069a55c2e96efbe5024d61a56a36d988c0f530043a6cd72af0fcd540a9d4e293690c5e697b3a1480e46df5371bca1cfb28a57c1b3c956ec81397e81fbf870a673804220423f52ad8178b9fd04bff816e00000000000000000000000000000000000000000079aaf19bd1e18f582aac5b83d76bd57297512fdcdad18bcf2455bc80394d8f34e2ef84733038f4b6ef516d7baa99f24f2f100fc46aec9dc19b30fe9966b7ae563b6459d86fd3b4c7173f06387517e4189f3fb09c069e20220354b054f2391efe55a0cc7f738b3987ae033ceabddec65ec31f98c7e0858e8d411087889964b8fb3c31f74fa7b2e6e1c1d84a46d8be8afff1ac67eb2da30294d4a0f89978d4e2137319b6448da45bd00eb23aa5be1d566782b5a4aa291a854a4932bcbf472fd1175b521edb1763bb7dae4a124b0006e2ce4799519b3dbd3c0109b17fe2b4b87f6ad4b7176c9c1959669ef42cfce81fbc6dcdc7f9bde1a66c0b3cf9329bfecf0217bda1b72924ee9d90a3bd0be833f206244b5ba0648309018da5442ebd22bca0363183aae9d38f80638f52015cab5a8d772f9b92cb2f286783fa976f7d215136cae0b0b0539dc7dbd56035a69807514c732763f542f10401e65368b821b584fe2f82c94b2f5930246800000000000000000000000000000000000000c8ed77d8ac9f28a2e8f205900241ec8872fe3ecdf73abfc4024298a69649e17f3fe5ebba1e17f2f280e6d3f094cd3448700c5ee102b5d1b04f08ab2e5272990646eca26a62431e8c942ea2c0c621b4821eb5beceee6d53468852159452cf47aead473a8638a4d1ce2d4c6df1074e8cb3ec16149e6b4b7ec1a9aa1b63f41d08afd3d885b98330e25eedaaf5f361b2e81ce0c52ee84a2b340afdc59b177921e2f2a99132b82ed3291196038fe9a4f5a5dc734788c71bf46222d266a48628774c87b88bf3dcbea4574a87726345587e1e233fd4117063d183f477cc53c52a3fafcb998a96cf9f61cdd9ffa82d648880552ac506811accffc85ca34b262ed983d4645f4657522ed32b278891c26d5e70d41f9a5c8df8dc163fd84a81af0020a10fe53ce940d350d62b526f198620abdad179a273682175da1d9d82fde7eb9a45b566e78904238d00908b5876b4ebfca376d631b9b0caf3f1ef32ae87507aace4715efaf840ebda28e741a8b6b29eed5861168b4e1b3842f6db4443974dd0f0d4ceed9ca62fd2a839a8150335dc2b9640825b83c8bf4f931a51b093bf2dc84809af7c14f04b58d64e4f852bc49cf1126567e11f61774559bdbcc500000000000000000000000000eab10c8c592cb6f1ebccd9eb16c155a0666189eb16cea09f164363456645c9b7c168bc214615a7e94ff3d53f85c6396c42050f3205cef3009458f33949efa6a583d87795448b8b21ab6a7ca4bd8b0da30dee0af8b3a0f3cfd0ad9a8e7819b2057e2e5d8b453b6f743f8fc4dee677658958c4d4663ddcdfd0fc44e996665ab5586a4eb40a959fb0dababa05e776c29cf2443ad1d2fa0920288db88e645033ae1a4357078810d20bd93b8194214554c3f8c6efd61bc40000"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r8, 0x18000000000002a0, 0xe40, 0x0, &(0x7f00000002c0)="f6eb094549002060009b8538a4ba", 0x0, 0x806, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) socket$nl_netfilter(0x10, 0x3, 0xc) 4.623687211s ago: executing program 3 (id=9912): syz_emit_ethernet(0x46, &(0x7f0000000000)={@random="91b882b09a5b", @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x26}}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010101, @rand_addr=0x64010100}, "08000071ae9b1c43"}}}}}, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) clock_gettime(0x0, &(0x7f0000000680)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000000600)=[{{&(0x7f0000000080)=@can, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/148, 0x94}, {&(0x7f00000001c0)=""/195, 0xc3}], 0x2}, 0xdf95}, {{&(0x7f0000000300)=@nl=@proc, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000380)=""/144, 0x90}, {&(0x7f0000000440)=""/116, 0x74}], 0x2, &(0x7f0000000500)=""/255, 0xff}, 0x1}], 0x2, 0x12022, &(0x7f00000006c0)={r1, r2+10000000}) 4.622210531s ago: executing program 2 (id=9913): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b2b, &(0x7f0000000040)={'virt_wifi0\x00', @remote}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x58, 0x10, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x4}, @IFLA_MACVLAN_BC_QUEUE_LEN={0x8, 0x9, 0x3}]}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'macvlan0\x00'}]}, 0x58}}, 0x8000) ioctl(r0, 0x8b2a, &(0x7f0000000040)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x60, 0x2, 0x6, 0x200, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0xb}]}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x60}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000003460200bfa30000000000001702000000feffff7a0af0ff14ffffff79a4f0ff00000000b7060000ff0800007e640200000000005502faff037202000404000001007d60a6040000001000006a0a58fe39000f00850000003f0000009c600000000000009500000000000000a81bbfa32d51a7d0679fd43041097666ab982de7b0efc5733ed236e4add6de094e0832aaa6912a8b2ce571c4580034fb000000e3a94bd24d2eb3860d808922433e3e0f242a46b3009a54f4077db0d4968a384b0559c7919b893d3b72cd6c832e986440ff0a7e8620cb231ccd00000000000000000000007777e2704653f620b2272c3c7fea60491073847c4b04000000f33fb382d91ae8e18c9b6c9f0322ec5f1c7cc5869ff455896712198c4e2ddf8b86e714229527ca40b24cfd6a1f00e891728807982d90e116bba29bb70900000000000000c63ad2e7402f9cb424ac416e66af9ebbfea905d37cf226312cb81ec8439cea06e7fa5e5b3596301460142f83b464d9e57dfdb06dcb9101000100130033d649d2110cf2e1f4682c24a314447c5e0807f0b1766ebdecbd061772daa52a38539295d3fea7a7e669441e1ff04114dfa904fb43897f8d9c3c287acba716973eadf1bf9cd0a38edc345415c42d3d2dd3339d32a5796cbe8925efd0c81af69a3e97588878d7ce18b68bc37e061d33357d6a39d33c702576cc2a8891663e3776c7a37c5c962e12102f237bbf60c0a3bf07d55b3888418de2b2ad23d25395dd4ccddf247dd2c712e2e2eaf7d432e968122cc5dcaa7ba330963b7093a58a02dba114f75e1ffd5c2912b506bfb93122fc776aadec51a367658100000000000000b148a90000000000a2a283801ff218538cb12c72b56ffb6b7a062581ec749f5700000000009f1f5ab2e02739ccd50523d3360300005cbeaf95c7d797d6e094c4a3aee025bf43cebde7e7cdbae9b1698e19eb0e6d5244c1ffb0e97628a88a5e37032f1e8f6c893e514f6b3e1028cd404a1d8fe6569da0385e65e4d523166c4213abb8dae5b1409317f29572e788af92aedb0287f2816e301fc8a24dba6fca8b270d44fe65e7bd90a5fc16387bcb5e3df18d7d2a33c72cfda827b8926a6dc6bc19ce398cb8fe48b11b7f93e6fdfb040283c9627bd40909ee4307c4197b15797af17845fbc02846d2f8543f65594cb535a9598eb067b21111dbaa58b19a52f3f12880128d08eb477ad349ca214bc7f80000000000ffb52da89cff41552996e20a585c7d265bd749eeba040fa7111c84142757709d7c475fac2839beb833327db41c6b647c7ee9ad419a6c68dd5c2ce4fa23c280518fc6e54d1b055cae5492e8c4cdd314a49631a15de2bffc920dd74e670594acec7a9da17d809bf956f1af51cf3c0711792d3071dfdaec3c66053cdb00028f6fba8da8f53de39a5999e56fc26ae866674627c8a53d3fd245050060ed40782d1d98bf1e1f5dfd4d1fb399624c12732e300818b222ce029ce01055f941721226e3e5f05d2837240f8f6831b6ef2a02ec64aae1eea9cfac06d8b7042e8ebdc6cb0d4a14281e631d06afc99d397c5b67b290344e347c953806b298f288884335f624378b3748a4a86bbd0a62127b2c28ce3737661b98bd45965b537ece7bd4e365ffd5567df4d02034c8d488a49c6fb1a0a02eaab2f271d3a14e44211e4ff602d146f72355972860bdd14719d65301964d022819b75696ce47534c9d989d69a445095ff8fbebd2c84635acc333f2aca4623cfe9f9e6c3f9fbb4374c08e1be5eec12c329a87d335fd7a52a4e4e7c2e57fa2f0df9500347b300f84230783cb665f3fa44f5d6fa987aa93c2619ef4977f9e4d38adec323778f3bc987533ffd85fe5417398a3001b394fccbd2faee83b5e2b8a2dd18cf067b6198366283c531b3ef336a84e825c63b9bc7b98b4ad6a471692224adef86f4c9930169dfa133e22929d5a27e10bfbcfe7c02ca451afd74d26f489e0e09cf1b596ae0c959cf26cb0c8114a9311b7f2fe2ad977074ff5f62f674eadd43a62ad1173491a5c099290393e1f85aeb3886fbb7f6646212054a850d58a71c6d6027cd3a5ff22e98672349f9bddb23622e2f19b39e51ced84524567ec1fcb233a2fb85371e9b08b6fd4adcd4db148ed26757123a0e604bcf6ffdcc303956e1805f1746361bd3eeb55d3fefe6ac274c2e6c78963430118942d62a465698e600dadd81a53ffd29358746e8db2499e3fca62b0ff660b0aaeedadeb194a9217e9fed2ce04cc24451871d5bcd76173ab7123cc27eef33dbb4d3c3bf1fc2df68a98345c15667388c5000000000000000000000015000000c0459f900702908d4979288d06c7159ef2663dc7ea9302b10bf2da21e3990ddf20a38adc1fd15124310daf2461224cfbfd5e6265d012d60fc9e39209ce3209720f8d7bf39bf71d0d46ed6d51eede797da70cf0b7463cffc8557f9a2e15483dbafb146a3221c20d51f172cf2eefe1e6b28cffc1e40a789d5513626f5c4fbf65a2b5a093634b806b7ee570f70f624ce8c02d4c1ec7a9370f42a807f1d46fe77be0637a8007343b7771788f64b36cab94a99243bc780702f98f34a80f81aeb853f97c3e9586805d1a240d7e870b15defbc6b21fdc98a79759c9b8375313deea0000000009e38e9539d6b9507b6f3f8d29992d080a13aed8879a1f2cf352fb5a376427f89d432f7fe7c0cad2ce38427fc773cef47e00000000000000000000000000000000000d09b8ee6321377ffcb6cc386f8704ae9ce6c11b4bb91d0097ef2b77e0cd28af1222e68c2745eca64fa40db07f6e5925224069d14395f7170ab9c2d396f7510f65ce5b0405d895a37117d13c5b2f684c52bff2dc895f5e06e497adee9de0012dd140c592137c90319f8a578007b57aaba3fb93d29a6584313e5b58f8a71cebf77a0891f3633dba69588ec728e785e6e4431fce5a143451c7a51c22b1b605347db811eb9a461f4ef2612181aa8cafc33a2047b7ba57a5d1fe58a00c6855ada17dcbb20a2f03164292a1e4e53e4140224ba82b599de2604398b860906dccd87c1bf0e8d0cce2e34589ef2bd3672907b7604034d4697fa3f957622eaa59df5c02b307bceaf138b419ce49f4850328069ed4d5559babf388329d6605f74dc1c21c9f0f1aa9826ba2936f14affb0b06d0aeb1054b2d044cafe64979590000000000000000000000784de836bec51a9db6533248165f79bf47b13d6d2c83a7442632f60f9eb0cc4fa54e08e5e349cc3afdff6f3175a80c4015d380ee0880a8a822d0a630a864c823392420ec93fab6d4d98a53c8b75221a9576e8204169fa1046355a0342539527e882e7fcaf062f0733fc0fb97474aaa3ed8ebec63f74a540129caab9b463ed476be27e159edb4ddc9d268c903bc3aa8ceddb9a45b31929dd461215ec14663b2eff6569222c7d7d8efdee8707a97806ddf1cf9574b688eeaf3888eab2dde6bb1dd8c11f78c5ac4103cbc501bca8fbfccf91aff06c24d83b6d270991266da"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040)={0x0, 0x0, 0x1}, 0x10}, 0x94) 4.488097994s ago: executing program 3 (id=9914): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000004f0c000000000000fcffffff95000000a2e3ccec88ea5306fa1e4600000000"], &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x1b, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r1, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000006c0)={'wlan1\x00', 0x0}) r5 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000007c0)=@generic={&(0x7f0000000780)='./file0\x00', 0x0, 0x10}, 0x18) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000800)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3, 0x1}, 0x50) (async) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000800)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3, 0x1}, 0x50) pipe(&(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000940)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000008c0), &(0x7f0000000900)='%pS \x00'}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x18, 0x13, &(0x7f0000000400)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xffffff79}, [@alu={0x4, 0x1, 0x5, 0x7, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x4}, @cb_func={0x18, 0x7, 0x4, 0x0, 0xfffffffffffffffd}, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}, @map_idx={0x18, 0x0, 0x5, 0x0, 0x4}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x6}]}, &(0x7f00000005c0)='syzkaller\x00', 0x8, 0xb5, &(0x7f0000000600)=""/181, 0x41000, 0x6b, '\x00', r4, 0x0, r0, 0x8, &(0x7f0000000700)={0x5, 0x2}, 0x8, 0x10, &(0x7f0000000740)={0x4, 0xf, 0x5, 0x7}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000980)=[r5, r6, r7, r8], &(0x7f00000009c0)=[{0x2, 0x1, 0x10, 0xa}], 0x10, 0x8}, 0x94) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)={0x30, r9, 0x1, 0x70bd2c, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x1c}}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}]}, 0x30}, 0x1, 0xff07}, 0x2000000) (async) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)={0x30, r9, 0x1, 0x70bd2c, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x1c}}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}]}, 0x30}, 0x1, 0xff07}, 0x2000000) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x94, r9, 0x10, 0x70bd2d, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x1}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x7}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x33}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x40}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x10}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}]}, @MPTCP_PM_ATTR_TOKEN={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}]}, 0x94}, 0x1, 0x0, 0x0, 0x40002}, 0x0) 4.274476459s ago: executing program 3 (id=9918): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0x6) (async) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) (async, rerun: 64) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000003c0)={'gre0\x00', &(0x7f0000000280)={'ip_vti0\x00', 0x0, 0x10, 0x8, 0x5, 0x23, {{0x2e, 0x4, 0x1, 0x7, 0xb8, 0x64, 0x0, 0x6, 0x4, 0x0, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0x35}, {[@generic={0x94, 0x3, "0f"}, @ssrr={0x89, 0xb, 0x29, [@rand_addr=0x64010101, @multicast2]}, @timestamp={0x44, 0x10, 0x3e, 0x0, 0x2, [0x5, 0x0, 0xf9]}, @end, @timestamp_addr={0x44, 0x54, 0x53, 0x1, 0x1, [{@remote, 0x7}, {@broadcast, 0x2}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x6}, {@dev={0xac, 0x14, 0x14, 0x1e}, 0x6}, {@private=0xa010101, 0xc2e}, {@broadcast, 0x1ff}, {@broadcast, 0x7ff}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x2}, {@private=0xa010100, 0x800}, {@local, 0x3}]}, @generic={0x86, 0x3, "93"}, @lsrr={0x83, 0x23, 0xfa, [@multicast1, @empty, @local, @dev={0xac, 0x14, 0x14, 0x2b}, @empty, @empty, @local, @rand_addr=0x64010100]}, @ssrr={0x89, 0xb, 0x15, [@remote, @remote]}]}}}}}) (rerun: 64) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000480)={'tunl0\x00', &(0x7f0000000400)={'gretap0\x00', 0x0, 0x8000, 0x8, 0x9, 0x4, {{0xc, 0x4, 0x1, 0x32, 0x30, 0x68, 0x0, 0xb9, 0x2f, 0x0, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@cipso={0x86, 0x11, 0x0, [{0x1, 0xb, "d3285c8f13520dfbb3"}]}, @generic={0x82, 0x8, "d4093ab8fbdd"}]}}}}}) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@updsa={0x288, 0x1a, 0x20, 0x70bd2c, 0x25dfdbfb, {{@in6=@remote, @in=@remote, 0x4e21, 0x0, 0x4e23, 0x3, 0x2, 0x0, 0x0, 0x87, r2}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4d5, 0x32}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, {0x2, 0x2, 0x6, 0x9, 0xffffffffffff8000, 0x1000}, {0x6, 0x7, 0xcf88, 0x2}, {0x2d, 0x3}, 0x70bd2c, 0x3507, 0x2, 0x3, 0x2, 0x21}, [@lastused={0xc, 0xf, 0xb38f}, @algo_comp={0x72, 0x3, {{'deflate\x00'}, 0x150, "88b67f4813525f1656e8f7a2556d20c3ec5731b0a4ecea2ec118f939d87aa2650bee1023b27385e4cdfa"}}, @sa={0xe4, 0x6, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4e20, 0x0, 0x4e21, 0x2, 0x2, 0x0, 0x20, 0x84, r3}, {@in6=@rand_addr=' \x01\x00', 0x4d5, 0x6c}, @in=@remote, {0x31a8, 0x1, 0x9, 0x5a, 0x6, 0x100000001, 0x2, 0x3}, {0x9, 0x400, 0x81, 0x7}, {0x7ff, 0x5, 0x7}, 0x70bd28, 0x3507, 0xa, 0x3, 0xd3, 0x8}}, @sec_ctx={0x28, 0x8, {0x24, 0x8, 0x0, 0x86, 0x1c, "0af04245c7bbf3db110711d4860e5a7b088abfd59952e8960200eef2"}}, @lastused={0xc, 0xf, 0xe}]}, 0x288}, 0x1, 0x0, 0x0, 0x8801}, 0x0) (async) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) (async, rerun: 64) r5 = socket(0x2d, 0x2, 0x0) (rerun: 64) bind$inet(r5, 0x0, 0x0) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newtaction={0x6c, 0x30, 0x1, 0x70bd28, 0x0, {}, [{0x58, 0x1, [@m_skbmod={0x54, 0x1, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0xffffffff, 0x10001, 0xffffffffffffffff, 0x3c, 0x3}, 0x400000000a}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4}, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007e40)=[{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f00000000c0)="4789d3aefc1a4d03345aed327be33c", 0xf}], 0x1, 0x0, 0x0, 0x20000000}], 0x1, 0x20040894) r7 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20010840) (async) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) (async) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@bridge_getneigh={0x20, 0x1e, 0xeed0b46ffaee1393, 0x70bd2c, 0x25dfdbfd, {0x7, 0x0, 0x0, 0x0, 0x8001, 0x12010}}, 0x20}}, 0x0) (async) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) (async) getpeername$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000140)=0x14) sendmsg$MPTCP_PM_CMD_REMOVE(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x64, r8, 0x8, 0x70bd26, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x2a}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x40, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r9}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x1}]}, 0x64}}, 0x4040804) (async) getsockopt$inet_mreq(r5, 0x0, 0x0, &(0x7f0000000780)={@multicast2, @dev}, &(0x7f00000007c0)=0x8) (async, rerun: 64) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000940)=@newsa={0x140, 0x1a, 0x1, 0xfffffffe, 0x100, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x717, 0x4e23, 0x5, 0xa, 0x0, 0x20, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, {0xfe, 0x1000000000000192, 0x8000000009ba3, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffc, 0x4}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffe, 0x3f9}, 0x7e, 0x3505, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @XFRMA_IF_ID={0x8, 0x1f, 0x2}]}, 0x140}}, 0x844) (rerun: 64) 4.183778744s ago: executing program 4 (id=9920): r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="8c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800b000100697036677265000030000280140007002001000000000000000000000000000014000600fc020000000000000000000000000000040012000800280070cf00000c0019800500060014000000080004"], 0x8c}}, 0x0) connect$can_j1939(r0, 0x0, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000fc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x3a0, 0x1c0, 0x111, 0x4b4, 0x0, 0xd4feffff, 0x2d0, 0x20a, 0x278, 0x2d0, 0x278, 0x3, 0x0, {[{{@ipv6={@empty, @empty, [0xffffffff, 0xffffff00], [], 'ipvlan0\x00', 'team_slave_0\x00', {}, {}, 0x6}, 0x0, 0x198, 0x1c0, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x2, 0xe}}, @common=@unspec=@string={{0xc0}, {0x0, 0x0, 'fsm\x00', "6d93eb04697dfa39de04767f46614613a407abbf4ed2e83a63b484dbb3bf6b2a850e79009e2905d2f98ba19f91f3c9faee6d3686e9bee067f4e77d9ad66238750c4100d7ee97ec7646259d90edece6e9787a97bc956c01754c34c5c9518c46178ed5f9194454980e579c80eca35a58dc47d1d5e4ff6e216c724e88c702448587", 0x28}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x31}, @mcast2, [], [], 'veth1_to_hsr\x00', 'pim6reg1\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x400) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="000000000000000000eaff000000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x18, 0x1c, &(0x7f00000002c0)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {{}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x6, 0x0, 0xb, 0x9, 0x0, 0x8, 0x40}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x7, 0x1, 0xb, 0x6, 0x8, 0x10}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r3}, {}, {0x15, 0x0, 0x0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0xb4}}}, &(0x7f0000000980)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket(0x10, 0x3, 0x0) r5 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000100)={0xffffffffffffffff, 0x54c7c0a, 0x10}, 0xc) ioctl$OCFS2_IOC_GROUP_EXTEND(r5, 0x40046f01, &(0x7f00000001c0)=0x3) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="580000001000ffff26bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="1414000021200000300012800c0001006d6163766c616e002000028008000100100000000a000400aaaaaaaaaa29000008000300", @ANYRES32], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0xc008006) sendmmsg(r4, &(0x7f0000000000), 0x400000000000235, 0x0) 4.160966756s ago: executing program 2 (id=9921): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000640)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r1, 0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, &(0x7f0000000100)=[{}, {}], 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x2}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xc0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000000b80)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000740)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELOBJ={0xc8, 0x14, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_USERDATA={0xa5, 0x8, "0335dbaf6f0e9e3cfcdcb6811fcc8b909fc7d8ced5682209796bb6d5ca3b853b3d2fcf774753d364510b3a1f6002a90b7197d8dba9f7db3d63c696b638fd280eef257929f2193dd17f5b085fd38a11241ca4b6f6bd9c7bfb7b61dd91b39d0f37a17b212c00d272ef150407026e94ec1a8a355812416b7b3502f03241c61541897ae2c4aa7ace0eb129c27ae7c64cd4e3a6d2b0e712e37c0cb02610c67cda6eb15c"}]}, @NFT_MSG_DELOBJ={0x68, 0x14, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x8}, [@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x4}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x9}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x6}, @NFTA_OBJ_USERDATA={0x16, 0x8, "0b11f45c5262c11531424e6f48dcbab5950e"}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0xa}]}, @NFT_MSG_NEWTABLE={0x198, 0x0, 0xa, 0x3b61437b27d855c4, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_USERDATA={0xe7, 0x6, "8a37c9fbe24fb91585647a481ae2ebb66a6b852296f7ed09ea7baeecfa934c26bd29ff99eec5779908aed94278f8f4715e2ad14e165dd9b82ff3d49715923f5b21bb799c9f69a5efc2e720e7b3194fd3aefa4d82aef5b90c7edf34c346b141c9e48153388d8b0fcd97c8b48adc75229f84027113bc55e9f0743fec10a9ae99ad262226c11636ced7ef40aa6f0d98863ba2ae72b578379c7ea955d563df086bbbbc8561966043977a4b1f8339d3d7b88396f75e5c5d0cdc3d2bd023ce1b9e3b833a285653052ef17877c6d9f62439e272295e0a8dd17790ed47f3c6aa6f688e5049e90e"}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_USERDATA={0x18, 0x6, "e639f81f4373f3444a8b8ba41ca6d058ed856485"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_USERDATA={0x42, 0x6, "65fc46462f4536237f2b7072c848eb9825fb98ab80b26e5f23c8ad75b71ee8e0b5f5d027e0499dd9a7fda091fdc93cb91f0caa11f685b522daa6d5bf392f"}, @NFTA_TABLE_USERDATA={0x18, 0x6, "5b502cb96751e459892b9e841508609aba51619b"}]}, @NFT_MSG_DELSETELEM={0x24, 0xe, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}]}, @NFT_MSG_NEWTABLE={0xe4, 0x0, 0xa, 0x0, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_USERDATA={0x9e, 0x6, "00a430c1b68b6b2b552dfbae5a5aaacd0ee2440beb6cd89a4aa88e2d61fc42f7141ce527d46944826d9e1cc5e0c4e3a6fa36e30c9eb0c8dd6e3257d7fd2cc790b2805bcea5085b84013f95cd0d7b26d1f8f7c90c35f1b6e1ecd0208a3bedaf67e42485ea6a42c7696257bff9558a76c36620f0d995707473dc0e09a96e7348be434d2ac96cc7c450d5fc2896da7297e1dbf26804dbf02b393982"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x3f8}, 0x1, 0x0, 0x0, 0x20000800}, 0x10) 4.069795193s ago: executing program 3 (id=9922): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000004c0)={'ip6_vti0\x00', &(0x7f0000000440)={'syztnl2\x00', 0x0, 0x0, 0x7, 0x6, 0x52f8, 0x20, @private1, @private2, 0x0, 0x8000, 0xfffffd67, 0xffff8000}}) (async, rerun: 32) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xac, 0xac, 0x7, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x1, 0x7}}, @var={0x5, 0x0, 0x0, 0xe, 0x4, 0x2}, @union={0x7, 0x2, 0x0, 0x5, 0x1, 0x9, [{0xa, 0x5, 0x40}, {0x7, 0x4, 0x1fc0000}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x3, 0xfffffff9}}, @union={0xe, 0x5, 0x0, 0x5, 0x0, 0x4, [{0xf, 0x0, 0x1ff}, {0x3, 0x3, 0xfffffed2}, {0xe, 0x1, 0x5}, {0x4, 0x4, 0x9}, {0x1, 0x1, 0x101}]}]}, {0x0, [0x61, 0x30, 0x61, 0x30, 0x30]}}, &(0x7f0000000600)=""/39, 0xcb, 0x27, 0x1, 0x41d8, 0x10000}, 0x28) (async) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4001, 0x1, @ipv4={'\x00', '\xff\xff', @empty}, 0x3e}, 0x1c) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000480), 0x10) sendmmsg$inet(r4, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="050000007402b8f4191db62b", 0xc}, {&(0x7f0000000440)="9f336d70bf41f19e47e98b4015e3b0384d86a1ceb4e530554ebc8154bf392bcf9ce0b09f879bd7aaf9d086e3", 0x2c}], 0x2}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) (async) r5 = socket$kcm(0x2, 0x200000000000001, 0x106) (async) r6 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r6, 0x0, 0x0, 0x20000800, &(0x7f0000000080)={0x2, 0x0, @dev}, 0x1) (async) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$kcm(r5, &(0x7f0000001900)={0x0, 0x0, 0x0}, 0x20040000) sendmsg$inet(r5, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000c40)={0x14, 0x24, 0x1, 0x70bd26, 0x25dfdbfc, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) (async) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0xd, 0xb, &(0x7f00000006c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xe09, 0x0, 0x0, 0x0, 0x8a1}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @jmp={0x5, 0x0, 0x7, 0x8, 0xb, 0xc, 0x10}, @map_idx={0x18, 0x4, 0x5, 0x0, 0x7}, @exit, @map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1}, @call={0x85, 0x0, 0x0, 0x4e}]}, &(0x7f0000000740)='syzkaller\x00', 0x634, 0x64, &(0x7f0000000780)=""/100, 0x41000, 0x2c, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x8, &(0x7f0000000800)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000000840)={0x3, 0x4, 0x0, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x5, &(0x7f0000000880)=[0x1, 0xffffffffffffffff], &(0x7f00000008c0)=[{0x0, 0x3, 0x10, 0x5}, {0x3, 0x5, 0xf, 0x9}, {0x2, 0x3, 0x1, 0x5}, {0x0, 0x2, 0x6, 0x2}, {0x0, 0x1, 0x1, 0x5}], 0x10, 0x3}, 0x94) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000a40)=@generic={&(0x7f0000000a00)='./file0\x00', 0x0, 0x8}, 0x18) (async) r10 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000a80)={0xffffffffffffffff, 0x67b8, 0x10}, 0xc) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000b40)=@bpf_tracing={0x1a, 0x2, &(0x7f0000000140)=ANY=[@ANYBLOB="18130000", @ANYRES32=0x1, @ANYBLOB="026b9dc135e1e7b24a43d5554cfb00"/26], &(0x7f0000000100)='GPL\x00', 0x0, 0xfd, &(0x7f00000001c0)=""/253, 0x41000, 0x2, '\x00', r1, 0x18, r2, 0x8, &(0x7f0000000680)={0x7, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x224bc, r8, 0x1, &(0x7f0000000ac0)=[r9, r10], &(0x7f0000000b00)=[{0x1, 0x4, 0xa, 0x8}], 0x10, 0x9}, 0x94) r11 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r0) sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="c800329b62f6005e", @ANYRES16=r11, @ANYBLOB="000128bd7000ffdbdf25080000002400078008000100060000000c00040009000000000000000c0003000200000000000000240007800c00040004000000000000000c000400060000000000000008000100000000001c000280040004000400040008000200070000000800020009000000500007800c00030002000000000000000c00030008000000000000000c000300fc5f00000000000008000100ffffff7f0c00030007000000000000000c000300040000000000000008000100ff7f0000"], 0xc8}, 0x1, 0x0, 0x0, 0x20020011}, 0x20000080) (async) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001140)={0x18, 0x40, 0x107, 0x70bd26, 0x0, {0x4, 0x7c}, [@nested={0x4, 0x2}]}, 0x18}, 0x1, 0x0, 0x0, 0x4048081}, 0xc000) 3.992179241s ago: executing program 2 (id=9923): r0 = socket(0x10, 0x3, 0x0) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r4], 0x1c}}, 0x840) r5 = syz_genetlink_get_family_id$nfc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, r5, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x10}, @NFC_ATTR_IM_PROTOCOLS={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x10}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x120}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20008000) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x5}]}, 0x3c}}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r6, 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_TIME_STAMP(r7, 0x0, 0x3, &(0x7f0000000080), 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f00000001c0)=ANY=[], &(0x7f0000000480)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4d27}, 0x94) 3.986984205s ago: executing program 1 (id=9925): unshare(0x62000000) r0 = socket$inet6(0xa, 0x80001, 0x0) getsockopt$bt_hci(r0, 0x0, 0x60, &(0x7f00001e3000)=""/30, &(0x7f0000d23000)=0x44) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20040844) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="c40000000a06010100000000000000000300000908000944800000010900020073797a310000000005000100070000000800094000000005880008800c"], 0x13a}, 0x1, 0x0, 0x0, 0x90be2d9b0c93a716}, 0x48084) syz_emit_ethernet(0x56, &(0x7f0000000100)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa86dd60f4adf700202c10fe800000000000000000000000000000ff020000000000000000008da45ae759ec95515600000000013c00000000000000c20400008001000008000000000000008100907800000000"], 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000180)='wi\n', 0x3}], 0x1, 0x1) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f00000002c0)={'syztnl2\x00', &(0x7f0000000200)={'ip_vti0\x00', 0x0, 0x1, 0x8000, 0x71, 0x8, {{0x20, 0x4, 0x1, 0x3, 0x80, 0x65, 0x0, 0x8, 0x2f, 0x0, @empty, @empty, {[@ra={0x94, 0x4, 0x1}, @end, @cipso={0x86, 0x2c, 0x0, [{0x7, 0x3, 'g'}, {0x5, 0xa, "74e18d840b5d3e26"}, {0x2, 0x9, "b9db7191d67df9"}, {0x5, 0x10, "5d1e6f2808f441cce3cfc396f3ed"}]}, @end, @ssrr={0x89, 0x17, 0xe2, [@initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0x3b}, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @end, @generic={0x7, 0x3, "b5"}, @timestamp={0x44, 0x1c, 0x56, 0x0, 0x7, [0x0, 0xff, 0x0, 0x2, 0xa, 0x200]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000380)={'syztnl2\x00', &(0x7f0000000300)={'syztnl1\x00', r4, 0x4, 0x40, 0x3, 0x1, 0x12, @local, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10, 0x20, 0x6, 0x10}}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) syz_emit_ethernet(0x6a, &(0x7f0000000140)={@broadcast, @random="17043a73dbde", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @empty=0xac1414aa, @rand_addr, {[@lsrr={0x83, 0x3}, @rr={0x7, 0x3}, @timestamp_prespec={0x44, 0x24, 0x0, 0x3, 0x0, [{@private=0xa010102, 0x10000}, {@loopback}, {@local}, {@remote}]}]}}}}}}}, 0x0) write$cgroup_subtree(r5, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) mkdirat$cgroup(r3, &(0x7f0000000080)='syz1\x00', 0x1ff) 3.959558894s ago: executing program 4 (id=9926): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xb, 0x3, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x8d}}, &(0x7f0000000000)='GPL\x00'}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000002000000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000000006600020000000000180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222}, 0x78) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0a00000004000000060000008000000042000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000e2b1860e2aa"], 0x48) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4001, 0x0, @empty}, 0x1c) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$inet6(r1, &(0x7f0000008c80)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0xfd4e, @empty, 0xc}, 0x1c, 0x0}}], 0x1, 0x20000800) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000600)={'syztnl2\x00', &(0x7f0000000580)={'ip6tnl0\x00', 0x0, 0x4, 0x2, 0x34, 0x9, 0x4a, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @local, 0x8, 0x700, 0x3, 0x2}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x11, 0x5, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x16000000, 0x0, 0x0, 0x0, 0x200}, [@cb_func={0x18, 0xa, 0x4, 0x0, 0x5}]}, &(0x7f00000001c0)='GPL\x00', 0xd7, 0xd9, &(0x7f0000000200)=""/217, 0x41000, 0x6, '\x00', r2, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x5, 0x1}, 0x8, 0x10, &(0x7f0000000680)={0x5, 0x3, 0x2, 0x10000000}, 0x10, 0x0, 0x0, 0x1, &(0x7f00000006c0), &(0x7f0000000700)=[{0x7, 0x3, 0xa}], 0x10, 0x4}, 0x9c) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000800)={@private2={0xfc, 0x2, '\x00', 0x1}, @loopback, @local, 0x2, 0xfffc, 0xe4, 0x0, 0x0, 0xb8ee1df18a41d065, r2}) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000180)=@newtfilter={0x44, 0x2c, 0x42f, 0x870bd28, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0xc, 0xa}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_CT_STATE={0x6}, @TCA_FLOWER_KEY_CT_STATE_MASK={0x6, 0x5c, 0x2}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f00000006c0)={r2, 0x1, 0x6}, 0x10) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000540), &(0x7f0000000080), 0x619, r0}, 0x38) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) 3.671595213s ago: executing program 3 (id=9927): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYRES16, @ANYRES32=r0, @ANYBLOB="010001000000b100000087cc6a001400"], 0x44}}, 0x44984) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c000280080001400000000014000180090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x40004}, 0x20050840) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = socket(0x848000000015, 0x805, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x0, &(0x7f0000000040)={0xa, 0x0, 0xf444, @ipv4={'\x00', '\xff\xff', @broadcast}}, 0x1c) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r5) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="410000000000000001000603000014000300060afc04090300f006e8ffff00000001080007002e3a2f2f140002"], 0x44}, 0x1, 0x1000000, 0x0, 0xc4}, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) ioctl$FS_IOC_GETFSLABEL(r1, 0x400452c8, &(0x7f0000000100)) ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c9, &(0x7f0000000100)) 3.080537711s ago: executing program 1 (id=9929): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYRES64=r0], 0x7c}}, 0x0) r1 = socket(0x15, 0x5, 0x0) recvmmsg(r1, &(0x7f0000004ec0)=[{{0x0, 0x0, 0x0}, 0x401}], 0x1, 0x40012160, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a70000000060a0b0400000000000000000200000044000480400001800a0001006d6174636800000030000280080002400000000118000300d6ed31ebc6e1f7ce7a537c4c3060c6a405106c720a0001006f776e65720000000900010073797a30000000000900020073797a32"], 0x98}}, 0x4048010) 2.92365001s ago: executing program 1 (id=9930): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{}, {0x0, 0x2}]}]}}, &(0x7f0000000540)=""/228, 0x36, 0xe4, 0x1}, 0x20) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x15, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0xa0}, {0x4, 0x1, 0xb, 0x9, 0x0, 0x10}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x56010000}}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5}, {0x7, 0x0, 0x2}, {}, {}, {0x25}}], {{0x6}, {0x5}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) 2.767270091s ago: executing program 1 (id=9931): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = socket$rxrpc(0x21, 0x2, 0x2) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'streebog512\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmsg$kcm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000140)="d0d0648b9fff74a74c4b12ed95", 0xd}, {&(0x7f0000000240)="6fbccee3101c7a3518719d", 0xb}, {&(0x7f0000000000)="c9bf51ba4f1785089658b6b41db8da336f37a213e5848adbdab75e64a14fad286c0d65b523c3b756", 0x28}], 0x3}, 0x0) setsockopt$RXRPC_SECURITY_KEYRING(r3, 0x110, 0x4, 0x0, 0x0) r6 = accept4(r2, 0x0, 0x0, 0x80800) setsockopt$sock_int(r6, 0x1, 0x20, &(0x7f0000000940)=0x1000008, 0x4) socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r7) sendmsg$ETHTOOL_MSG_STRSET_GET(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000023c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01002dbd7000ffdbdf250600000018000180140002006970766c616e3100007b3b27"], 0x2c}, 0x1, 0x0, 0x0, 0x2001}, 0x4010000) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r10 = accept4(r9, 0x0, 0x0, 0x0) sendmmsg$alg(r10, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10", 0x48}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r10, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000200)=""/83, 0x53}], 0x2}, 0x2040) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18010000000000000000000000000000850000007a00000095"], &(0x7f0000000000)='syzkaller\x00', 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000000600)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000540)={&(0x7f0000000340)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000028bd7000fedbe7a52d89000008000300", @ANYRES32=0x0, @ANYBLOB="04006c00"], 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x0) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000040)=r11, 0x4) ioctl$XFS_IOC_EXCHANGE_RANGE(r5, 0x40285881, &(0x7f0000000300)={r2, 0x0, 0x2, 0xa641, 0xfffffffffffffffa, 0x4}) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x54, r1, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xd}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000011}, 0x0) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x34, r1, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x20, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3e}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140) 2.762925239s ago: executing program 4 (id=9932): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) r4 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) writev(r4, &(0x7f0000000240)=[{&(0x7f0000000380)='-#', 0x2}], 0x1) sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f00000003c0)={0x30, r2, 0xb97534d5fe9704cf, 0x0, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x20004080}, 0x4040004) r5 = socket$inet6_icmp(0xa, 0x2, 0x3a) getsockopt$inet6_mtu(r5, 0x29, 0x17, &(0x7f0000000000), &(0x7f0000000080)=0x4) 2.698670914s ago: executing program 0 (id=9933): socket(0x10, 0x80003, 0x0) r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=@deltfilter={0x498, 0x2d, 0x200, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0xffe0, 0x2}, {0xc, 0xfff1}, {0x0, 0xfff1}}, [@TCA_RATE={0x6, 0x5, {0x4}}, @TCA_CHAIN={0x8, 0xb, 0x5}, @filter_kind_options=@f_bpf={{0x8}, {0x42c, 0x2, [@TCA_BPF_POLICE={0x428, 0x2, [@TCA_POLICE_RATE64={0xc, 0x8, 0x800}, @TCA_POLICE_RESULT={0x8, 0x5, 0x8cb}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7, 0x688, 0x0, 0x44, 0x7, 0x7, 0x7, 0x401, 0x1, 0x3, 0x0, 0x6, 0x1, 0x3, 0x4, 0x6, 0x3, 0x1, 0x8, 0xa, 0x1ff, 0x9, 0x5, 0x122, 0x7, 0x8, 0x4, 0x82, 0x2, 0x1e, 0xa, 0x5, 0x10, 0x6b56, 0xfff, 0x1, 0x200, 0x6, 0x2, 0x9, 0x88, 0x7, 0xfffffff9, 0xd456, 0xe, 0x7, 0x7f, 0x2, 0x9, 0x6, 0x4, 0x4, 0x0, 0x7fff, 0x200, 0x7, 0x4, 0x9, 0xd, 0x8, 0x1, 0x5, 0x8, 0x8, 0x4, 0xf, 0x437e6056, 0x6, 0x2afd, 0x2, 0x5, 0x0, 0x2, 0x5, 0xffc00000, 0xda, 0x8, 0xfff, 0x7, 0x5, 0xfffffffa, 0x9, 0x3, 0x8, 0xc, 0x8, 0x2, 0x7, 0x6, 0xfffffffd, 0x8, 0x1ff, 0x1, 0xffff, 0x1, 0x7, 0x6, 0x7fffffff, 0x0, 0x10, 0x0, 0x7, 0x6, 0x6, 0x2, 0xd, 0xc, 0x7b, 0xfff, 0x0, 0x3, 0x2, 0xf1, 0xb1dd, 0x9, 0x6, 0x15fa, 0xe9, 0x2, 0x30, 0xec, 0x4, 0x4, 0x6, 0x9, 0x7, 0x7f, 0x2, 0x4, 0x9, 0x9, 0x4, 0x9, 0xaa7f, 0x7, 0x2, 0xffffff48, 0x4be, 0x400, 0x8000, 0x5, 0x4, 0x1, 0x40, 0x7fff, 0xf5, 0x3, 0x8000, 0x4, 0x10000000, 0x2781, 0x5, 0xfff, 0xffff, 0x6, 0x3, 0xff, 0x200, 0x1, 0x2, 0xfffffff0, 0xc0db, 0x8, 0x1, 0x0, 0x2, 0x4, 0xfffffff8, 0x6, 0x4, 0xffffef2b, 0x4, 0x40, 0x2, 0x7f, 0x7, 0x6, 0x7fffffff, 0xfffffffa, 0x40, 0x3, 0xfffffffd, 0x7798, 0x401, 0xd, 0x56, 0x3ff, 0xae3, 0x400, 0x9, 0x0, 0xb, 0x6, 0x60, 0x2, 0x3, 0xffff8000, 0xa, 0x5, 0x1, 0x0, 0x2, 0x400, 0xdf, 0x2, 0x0, 0x0, 0x3, 0xfffffffa, 0x4, 0xe, 0x2, 0x1, 0x9, 0x7fff, 0x69b, 0x8, 0xf, 0x6, 0xffff26f5, 0x10001, 0x4a, 0xf6, 0x5, 0x4, 0x5, 0x6, 0x7, 0x4, 0x9, 0xc, 0x2, 0x400, 0x3, 0x10000, 0xffffffff, 0x6, 0xd, 0x9, 0x6ec, 0x7, 0x7ffffffb, 0x52, 0x1, 0x2, 0x800, 0x3, 0x4, 0xffffffff, 0x7b, 0x1, 0x6, 0xffffffff, 0x6, 0x7, 0x8]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x2}]}]}}, @TCA_RATE={0x6, 0x5, {0x0, 0x76}}, @TCA_RATE={0x6, 0x5, {0x6, 0x3}}, @TCA_RATE={0x6, 0x5, {0x83, 0x3}}, @TCA_RATE={0x6, 0x5, {0x80, 0x3}}, @TCA_CHAIN={0x8, 0xb, 0xffffff60}, @TCA_RATE={0x6, 0x5, {0x4, 0x3}}]}, 0x498}, 0x1, 0x0, 0x0, 0x4000890}, 0x20004004) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@migrate={0xac, 0x21, 0x1, 0x70bd27, 0x25dfdbfb, {{@in6=@mcast1, @in6=@remote, 0x4e21, 0x0, 0x4e21, 0x9ffd, 0x7, 0x180, 0x20, 0x1d}, 0x6e6ba8, 0x4b75cd6ef3e93cb3}, [@migrate={0x50, 0x11, [{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in6=@loopback, @in=@broadcast, @in6=@empty, 0x6c, 0x1, 0x0, 0x0, 0xa, 0x2}]}, @offload={0xc, 0x1c, {0x0, 0x2}}]}, 0xac}, 0x1, 0x0, 0x0, 0x4000840}, 0x20004040) socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r4, 0x10e, 0xc, &(0x7f0000000040)=0x8, 0x4) sendmsg$nl_route(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000012000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00', @ANYRES32=r4], 0x28}}, 0x802) 2.403257296s ago: executing program 0 (id=9934): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0x10}}}, 0x24}}, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x1, 0x70bd2d, 0x4, {0x0, 0x0, 0x0, 0x0, {0x8, 0x3}, {0xa, 0xffe0}, {0xfff1, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xfb0a}, @TCA_FQ_PIE_TUPDATE={0x8, 0x4, 0x7ff}]}}]}, 0x44}}, 0x20004055) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) (async, rerun: 64) r1 = socket$netlink(0x10, 0x3, 0x0) (rerun: 64) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async, rerun: 32) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x15}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x6}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0) (rerun: 32) 2.13923521s ago: executing program 0 (id=9935): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x46, 0x0, "2431d0edd9b36cb74d7df7671eacf04be3b08353efa3641776f56c7556fd3713097bd0072577bc6fefb4cdc9e94e420b0ea4fbc5b07a32056eff5e6c42784b46ddab72b1b8fc87f208ad6db80d8dfe25"}, 0xd8) listen(r0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000001c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, "aeb81d8ee3a82d67eea9e5bdf2247481041a5b9cddbc936efc471c56ae3d5f6945d296a285858a891a3b4e7bff572ef69992da867f406182d70f47773434b8349435f2ad628d62a3b45bb98872fb1900"}, 0xd8) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000540)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a066f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0effeffe809005300fff5dd00000010000100080c10000000000000000000", 0x58}], 0x1) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000000)={'gre0\x00', &(0x7f00000000c0)={'gre0\x00', 0x0, 0x700, 0x700, 0x8, 0xffffff89, {{0x8, 0x4, 0x3, 0x18, 0x20, 0x65, 0x0, 0x2, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0xb}, @local, {[@timestamp_prespec={0x44, 0xc, 0xa3, 0x3, 0xd, [{@loopback, 0x100000}]}]}}}}}) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f00000000c0)=@abs={0x1}, 0x6e) r3 = socket$kcm(0x10, 0x2, 0x0) recvmsg$kcm(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000a40)=""/4072, 0xfe8}], 0x1}, 0x0) write$cgroup_subtree(r3, &(0x7f0000001ec0)=ANY=[@ANYBLOB="004000003a00913a74067388481f9c0e0a"], 0xfe33) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x6000, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r8, 0x0, r9, 0x0, 0xf3a, 0x0) write(r6, &(0x7f0000000240)="94", 0x1) vmsplice(r9, &(0x7f0000000380)=[{&(0x7f0000013580)="0dd2e7c8926dc6acd0ae6c178054e95986faff9544de5fc4c30adf404da41181a77466ac5075905ea5f50134fdd517a957fe2ee59b61f9fe8d7aabe595ea23de2723e437af0423a56686a4c2d957be1a0ab922fbbd3cb1d8c6ab0d58440a327c8eb05d445b4ac5f20abe449e4084f8b996268d0564f67980d3ed3479e0edfe5cec7b4f89bface391c9c4c58ad123b91c33173c72326d1df18804a9ea20f9ece48f784d8ca2318e3d2b316666b5dfb7295c4915989d5bcb120e8fedaa97b93a137c256ce4", 0x20013644}, {&(0x7f0000013680)="c578381bf5113dad8319d9ea5294285ae9a90384ce23866477bef9de4399237d8b3522c9c194e71edaf3332a2f169682f9d8fa271683d4d441b710409e506333e0c3b64e52e8720734b6787f4a84f5bebb046649c6c697d978affd349031b2cd874c7a8961a586a9f2d62f945e7a5bf2f5f7a31684c0503704881d2578a2a98ac3ef4e4a4b0dcdb70db735d5c1652eed3848b2dd4131bb0eb7cfadfaf5", 0x9d}], 0x2, 0x0) tee(r5, r9, 0x8f5, 0x0) write(r7, 0x0, 0x0) r10 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r10, 0x0, &(0x7f00000000c0)=0x0) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r12) sendmsg$NFC_CMD_DEV_UP(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r13, @ANYBLOB="010023010000340200000200000008000100", @ANYRES32=r11], 0x1c}}, 0x0) write$nci(r10, &(0x7f0000000000)=@NCI_OP_RF_INTF_ACTIVATED_NTF={0x1, 0x0, 0x3, 0x5, 0x9, @b={0x1, 0x0, 0x2, 0x1, 0x5, 0x9, 0xfc, {}, 0x40, 0x6, 0x2, 0x3}}, 0x10) socket(0x5, 0x4, 0x3) ioctl$SIOCSIFHWADDR(r4, 0x8924, &(0x7f0000000040)={'macsec0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x30}}) 927.218507ms ago: executing program 3 (id=9936): socket$kcm(0x10, 0x2, 0x0) socket(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1900000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000e0a900"/28], 0x48) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x80800) setsockopt$sock_int(r2, 0x1, 0x20, &(0x7f0000000940)=0x1000008, 0x4) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmmsg$unix(r2, &(0x7f0000001780)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000580)=""/223, 0xdf}], 0x1}}], 0x1, 0x42, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r0, &(0x7f0000000280)="ca", &(0x7f0000000000)=""/3, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r0, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r4 = socket$inet_sctp(0x2, 0x5, 0x84) r5 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000040)={r6, 0x2, 0x10}, &(0x7f0000000240)=0xc) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r3, 0x84, 0x79, &(0x7f00000000c0)={r6, 0xfa64, 0x3}, 0x8) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x20000841) 667.127085ms ago: executing program 1 (id=9937): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETIFINDEX(r2, 0x400454da, 0x0) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYRESHEX=r2, @ANYRES64=r2, @ANYRESHEX=r2, @ANYRESHEX=0x0, @ANYRES8=r0, @ANYRES8=r3, @ANYRESHEX=r0, @ANYRES8=r1, @ANYRESHEX=r0], 0x7c}, 0x1, 0x0, 0x0, 0x4084}, 0x20008040) syz_emit_ethernet(0xcf, &(0x7f0000000400)=ANY=[@ANYBLOB="bbbbbbbbbbbbbbbbbbbbbbbb080046e300c10066000042019078ac141438ac1e01010000000005019078640101004716000e00667fff032900830000000064010101891341ac1414347f00000164010101e000000287097a6f965de6d776442c3b23ac1414aa00000003ac1414aa00000007e000000200000000ac14141800000401e000000200000008892764ffffffac1414400000000064010102ffffffff6401010064010102ffffffff7f00000194040000891372e000000100000000ac1414aa0a01010000001e3d5af6d400"], 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) r5 = socket$kcm(0x2, 0x2, 0x73) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000080)='lo\x00', 0x10) bind$inet(r5, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) r6 = socket$kcm(0x2, 0x2, 0x73) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) bind$inet(r6, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x10) r7 = socket$unix(0x1, 0x5, 0x0) ppoll(&(0x7f0000000080)=[{r7, 0x16}], 0x1, 0x0, 0x0, 0x0) r8 = socket$inet(0x2, 0x3, 0x4) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000004a40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@ip_tos_int={{0x14, 0x0, 0x1, 0xfffffffa}}], 0x18}}], 0x1, 0x0) setsockopt$inet_opts(r8, 0x0, 0x4, &(0x7f0000000400)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r8, 0x1, 0x19, &(0x7f00000000c0)='xfrm0\x00', 0x10) connect$inet(r8, &(0x7f0000000080)={0x2, 0x4e20, @private=0xa010100}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0x0, 0x0, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) sendmmsg$inet(r8, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10, 0x0}}], 0x68000, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="44000000100001081419cfcb0000000000000000", @ANYRES32=0x0, @ANYBLOB="9500010004200400"], 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x40) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000000040)=""/182, &(0x7f0000000100)=0xb6) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000040000000160a01020000000000000000010000000900010073797a30000000000900020073797a3000000000140003800800024000000000080001400000000084000000160a010100000000000000000100000058000380540003801400010067656e65766531000000000000000000140001006d6163736563300000000000c498d61050000100766574683100000000000000000000001400010073797a6b616c6c6572310000000000000900010073797a30000000000900020073797a30"], 0x10c}}, 0x0) 665.147831ms ago: executing program 4 (id=9938): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18020000000000020000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00'}, 0x94) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6(0xa, 0x2, 0x3a) bind$inet6(r2, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(r1, 0xffffffffffffffff, 0x4000) getsockname$packet(0xffffffffffffffff, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0x32, &(0x7f0000000200)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x78}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@printk={@llu}, @exit, @exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @initr0={0x18, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x7}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}}, @map_idx={0x18, 0x3, 0x5, 0x0, 0x7}, @map_val={0x18, 0x5, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000003c0)='GPL\x00', 0x1, 0x19, &(0x7f0000000400)=""/25, 0x41100, 0x12, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000440)={0x0, 0x0, 0x9, 0x2}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000480)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1], &(0x7f00000004c0)=[{0x1, 0x3, 0x8, 0x3}], 0x10, 0xa}, 0x94) write(r4, &(0x7f0000000840)="24299fa5d78c591bacc8f6db9bb602b0fdf5da7470433ff826ca2c45d81683d9ee425fa25a0202988bd916774c938e2cc207c608d15820da99dc289918ea588623b895d40ad4c1210e584696de8169d05b6fc9e26e5554e3317b7895680c41b958d6d90b17a3032a4c35f35289bc5298185c23130da5ee3648d39e3e982e7f8eed4b00a6943ade9e27bdf86036a5809aa3ea33deeb30370e027f3e89faed7c7e594b087452a4ffc516594752d43c0af3ef1abd5c3c7cdec5a64cf94c41ecb346a9320a7aa2d04d937ee5da8c704c5bec877dcfb188a21710c56957663365", 0xde) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r3, @ANYBLOB="00001000252155b21c0012000c000100626f6e64"], 0x3c}}, 0x40000) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r0, r3, 0x25, 0x0, @val=@netkit={@void, @value=r0}}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x18, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', r3, 0x24}, 0x94) 663.439782ms ago: executing program 0 (id=9939): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0xc0a41, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x2f00, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="e3ff0000000000002400128009000100626f6e64000000001400028005001b00000000000500010006"], 0x44}}, 0x0) (async) close(r0) r2 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) (async) write$tun(r0, &(0x7f0000000240)={@val={0x8, 0x806}, @val={0x7, 0x0, 0x0, 0x300, 0x14}, @ipv4=@tcp={{0x5, 0x4, 0x0, 0x3c, 0x28, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @broadcast}, {{0xa200, 0x22eb, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}, 0x36) 662.916344ms ago: executing program 2 (id=9940): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448e1, &(0x7f0000000000)={0x0, 0x0, "957008"}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_SWAP(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, 0x6, 0x6, 0x201, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x40051}, 0x408d0) (async) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x1c, 0x18, 0x1, 0x70bd29, 0x0, {0xa, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 579.839293ms ago: executing program 4 (id=9941): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000002c0)={'wpan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000002c0)={'wpan1\x00'}) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x44, 0x0, 0x0, 0x70bd24, 0x25dfdbfb, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x1}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e23}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @remote}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040000}, 0x40004) syz_80211_inject_frame(0x0, 0x0, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c0300002e00090027bd70000000000004000000480311802ef9"], 0x35c}, 0x1, 0x0, 0x0, 0x42804}, 0x4000010) (async) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c0300002e00090027bd70000000000004000000480311802ef9"], 0x35c}, 0x1, 0x0, 0x0, 0x42804}, 0x4000010) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)) ioctl$SIOCSIFHWADDR(r3, 0x8b26, &(0x7f0000000080)={'wlan1\x00', @random="09fe000500"}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) (async) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) (async) socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r8, {0x0, 0x1}, {0xffff, 0xffff}, {0xb, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r8, {0x0, 0x1}, {0xffff, 0xffff}, {0xb, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000003d80)=@newtfilter={0x48, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x0, 0xfff3}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x14, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0x1, 0x1e}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20001091}, 0x40) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) r10 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IPT_SO_SET_REPLACE(r10, 0x0, 0x40, &(0x7f0000000700)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3e8, 0xa0, 0xa0, 0x1d8, 0xa0, 0x138, 0xa0, 0x380, 0x380, 0x380, 0x380, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x3, 0x7, @multicast1, 0x4e22}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0xe, 0x4, 0x2}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x36}, @loopback, 0x1fffffffe, 0xff, 'pimreg1\x00', 'dummy0\x00', {0xff}, {}, 0x2, 0x1, 0x40}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x4, @remote, 0x4e21}}}, {{@ip={@remote, @multicast1, 0xff, 0x0, 'virt_wifi0\x00', 'team_slave_0\x00', {0xff}, {0xff}, 0x6c, 0x2, 0x59}, 0x0, 0x70, 0x98}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x1, 0x3, 0x2}, {0x3, 0x0, 0x4}}}}, {{@ip={@local, @remote, 0xffffff00, 0xff, 'gretap0\x00', 'batadv0\x00', {}, {}, 0x84, 0x1, 0x5}, 0x0, 0x70, 0xe0}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x1, 0x0, 0x46c5, 0x0, 0x0, "2b4e84400af0c61fe4b77d62d90d10d33fce7dc71425d4209d84f086ee827a4b064c417320a5f57e2dcc64d51dd574bd8c47cabfe9f21364d0c1a47f3240e300"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x448) (async) setsockopt$IPT_SO_SET_REPLACE(r10, 0x0, 0x40, &(0x7f0000000700)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3e8, 0xa0, 0xa0, 0x1d8, 0xa0, 0x138, 0xa0, 0x380, 0x380, 0x380, 0x380, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x3, 0x7, @multicast1, 0x4e22}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0xe, 0x4, 0x2}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x36}, @loopback, 0x1fffffffe, 0xff, 'pimreg1\x00', 'dummy0\x00', {0xff}, {}, 0x2, 0x1, 0x40}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x4, @remote, 0x4e21}}}, {{@ip={@remote, @multicast1, 0xff, 0x0, 'virt_wifi0\x00', 'team_slave_0\x00', {0xff}, {0xff}, 0x6c, 0x2, 0x59}, 0x0, 0x70, 0x98}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x1, 0x3, 0x2}, {0x3, 0x0, 0x4}}}}, {{@ip={@local, @remote, 0xffffff00, 0xff, 'gretap0\x00', 'batadv0\x00', {}, {}, 0x84, 0x1, 0x5}, 0x0, 0x70, 0xe0}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x1, 0x0, 0x46c5, 0x0, 0x0, "2b4e84400af0c61fe4b77d62d90d10d33fce7dc71425d4209d84f086ee827a4b064c417320a5f57e2dcc64d51dd574bd8c47cabfe9f21364d0c1a47f3240e300"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x448) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0xabc4d89f73965fd9, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r9, {0x1}, {0xffff, 0x3}, {0x1, 0xe}}}, 0x24}}, 0x40084) (async) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0xabc4d89f73965fd9, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r9, {0x1}, {0xffff, 0x3}, {0x1, 0xe}}}, 0x24}}, 0x40084) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r3, 0x800442d2, &(0x7f0000000180)={0x0, &(0x7f0000000200)}) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0xffcd}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x4000) (async) sendmsg$nl_route(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0xffcd}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x4000) ioctl$sock_inet_SIOCSIFDSTADDR(r11, 0x8918, &(0x7f0000000580)={'macvlan1\x00', {0x2, 0x4e21, @empty}}) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4048587b, &(0x7f0000000380)={{0xffffffffffffffff, &(0x7f0000000040)='.-\'\x00', 0x310a00, &(0x7f0000000200)={@_ha_fsid={[0xa26, 0x3]}, {0x1, 0xa, 0xfffffffd, 0x5}}, 0xffff, &(0x7f0000000240), &(0x7f0000000280)=0x3e0e}, 0x0, &(0x7f0000000340)}) 251.524629ms ago: executing program 0 (id=9942): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x1, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000140), 0x4) getsockopt$bt_hci(r0, 0x11a, 0x2, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000d80)=@ipv4_newaddr={0x28, 0x14, 0x509, 0x0, 0x3, {0x2, 0x1, 0x0, 0xfe, r2}, [@IFA_ADDRESS={0x8, 0x1, @broadcast}, @IFA_LOCAL={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x41}}]}, 0x28}}, 0x0) 124.844126ms ago: executing program 4 (id=9943): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[], 0x1a000}, 0x1, 0x0, 0x0, 0x4}, 0x40) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), r1) sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0x1c}}, 0x0) recvfrom$inet6(r0, &(0x7f0000000280)=""/11, 0x1a000, 0x102, 0x0, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40000c0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000004c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) pipe(&(0x7f00000003c0)={0xffffffffffffffff}) openat$cgroup_ro(r6, &(0x7f0000000400)='cpuacct.usage_all\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd0a, 0x25dfdbff, {0x0, 0x0, 0x0, r10, {0x0, 0x4}, {0xffff, 0xffff}, {0xfff2, 0xfff1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000780)=@newtfilter={0x94, 0x2c, 0xd27, 0x70bd26, 0x259fdc02, {0x0, 0x0, 0x0, r7, {0xb, 0xfff3}, {}, {0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0x60, 0x2, [@TCA_MATCHALL_ACT={0x5c, 0x2, [@m_skbedit={0x58, 0x1, 0x0, 0x0, {{0xc}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x4, 0x4}}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x3, 0x1ff, 0xffffffffffffffff, 0x4, 0x77}}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x2fc}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x810}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@RTM_GETMDB={0x18, 0x56, 0x10, 0x70bd2c, 0x25dfdbff, {0x7, r11}, [""]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x4000810) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x10, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000071103a0000000000950000000000000022fc98384daf010da5602806fb12cb752109a59c08105a4fb7374dfd55726e5fc227b4e306c335def0bffbf05c34abf2052b557ee7d176faf7a578771f67dfa1098e78b3d53a5353630b0f0ddbbc020af9af591e"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8}, 0x94) 82.488079ms ago: executing program 0 (id=9944): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x1, &(0x7f00000000c0)=ANY=[@ANYBLOB="04f2e4f099000000e9ac94bcf6c3123988102de7e5459d86d4a794c585b502b8747beac4b3d60a140917aa0e9255f7fd78c49cd0de9730feed4ffb51"], &(0x7f0000000000)='GPL\x00'}, 0x94) r1 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000040)={r0, 0xffffffffffffffff, 0x3, 0x0, @void}, 0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000080)=r1, 0x4) 0s ago: executing program 1 (id=9945): r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfc, 0x2ffffffff}, 0xc) r1 = socket(0x2a, 0x2, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0xf0b, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfffe}}}, 0x24}}, 0x44884) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106-gcm-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000009c0)="ad56b6c5820fae9d6dcd3292ea54c7be8bbdadbb1632ea5704cae881ef915d374c90c200", 0x24) r4 = accept4(r3, 0x0, 0x0, 0x800) syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r4) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newtfilter={0x30, 0x2c, 0xd27, 0x2070bd2d, 0x25dfdffd, {0x0, 0x0, 0x0, r2, {0x6, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_DYING(r1, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, 0x6, 0x1, 0x5, 0x0, 0x0, {0x3, 0x0, 0x5}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4048091}, 0x8080) r6 = socket$kcm(0x10, 0x2, 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r7, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f0000000180)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@empty, 0x4e22, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x1}, {0xfffffffffffffffd, 0x0, 0x6, 0x0, 0x5, 0x80000000, 0x0, 0x7fffffffffffffff}, {0x0, 0x0, 0xffffffffffffffff, 0x20000000000000}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x4d5, 0x6c}, 0xa, @in=@private=0xa010102, 0x350a, 0x4, 0x0, 0x0, 0x0, 0x0, 0x200000}}, 0xe8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r7, 0x84, 0x7a, &(0x7f0000000040)={r8, @in6={{0xa, 0x4e24, 0xfffffff7, @private1={0xfc, 0x1, '\x00', 0x1}, 0x74}}}, &(0x7f0000000280)=0x84) write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00-'], 0xfe33) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@mpls_delroute={0xa0, 0x19, 0x1, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_NEWDST={0x84, 0x12}]}, 0xa0}}, 0x0) bind$netlink(r5, &(0x7f0000000080)={0x10, 0x0, 0x25dfdbfb, 0x8}, 0xc) kernel console output (not intermixed with test programs): cted, max 3 bearers permitted [ 1093.945829][ T5939] xt_hashlimit: invalid rate [ 1094.086349][ C1] tipc: Duplicate 8031100 using eth(aa:aa:aa:aa:aa:32) seen on [ 1094.291676][ T5961] openvswitch: netlink: IP tunnel dst address not specified [ 1094.313415][ T5961] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1094.742236][ T5985] IPv6: NLM_F_CREATE should be specified when creating new route [ 1094.820106][ T5988] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1094.850125][ T5988] IPv6: Can't replace route, no match found [ 1095.012219][ T5999] netlink: 'syz.1.8620': attribute type 1 has an invalid length. [ 1095.124699][ C1] tipc: Duplicate 8031100 using eth(aa:aa:aa:aa:aa:32) seen on [ 1095.172264][ T6008] nbd: must specify at least one socket [ 1095.305640][ T6017] __nla_validate_parse: 10 callbacks suppressed [ 1095.305661][ T6017] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8624'. [ 1095.346127][ T6017] netlink: 'syz.4.8624': attribute type 1 has an invalid length. [ 1095.400248][ T6017] netlink: 'syz.4.8624': attribute type 1 has an invalid length. [ 1095.442511][ T6017] netlink: 'syz.4.8624': attribute type 2 has an invalid length. [ 1095.473369][ T6017] netlink: 68 bytes leftover after parsing attributes in process `syz.4.8624'. [ 1095.510047][ T6026] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8626'. [ 1095.612546][ T6030] syzkaller0: entered promiscuous mode [ 1095.625278][ T6030] syzkaller0: entered allmulticast mode [ 1095.676531][ T6030] tipc: Enabled bearer , priority 0 [ 1095.758632][ T6029] tipc: Resetting bearer [ 1095.848234][ T6036] netlink: 'syz.2.8631': attribute type 4 has an invalid length. [ 1095.857748][ T6029] tipc: Disabling bearer [ 1096.172053][ C0] tipc: Duplicate 8031100 using eth(aa:aa:aa:aa:aa:32) seen on [ 1096.885987][ T6036] netlink: 'syz.2.8631': attribute type 29 has an invalid length. [ 1096.914502][ T6036] netlink: 'syz.2.8631': attribute type 29 has an invalid length. [ 1097.206263][ C1] tipc: Duplicate 8031100 using eth(aa:aa:aa:aa:aa:32) seen on [ 1097.564313][ T6113] netlink: 212344 bytes leftover after parsing attributes in process `syz.1.8643'. [ 1097.683955][ T6117] tipc: Enabled bearer , priority 0 [ 1097.713549][ T6121] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8646'. [ 1097.737144][ T6119] syzkaller0: entered promiscuous mode [ 1097.757941][ T6119] syzkaller0: entered allmulticast mode [ 1097.766940][ T6121] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1097.814736][ T6126] netlink: 'syz.3.8645': attribute type 1 has an invalid length. [ 1097.905058][ T6126] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1097.936633][ T6119] tipc: Resetting bearer [ 1097.949498][ T6132] xt_hashlimit: size too large, truncated to 1048576 [ 1097.977175][ T6137] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 1098.069027][ T6119] tipc: Disabling bearer [ 1098.097443][ T6139] IPv6: NLM_F_CREATE should be specified when creating new route [ 1098.245563][ C0] tipc: Duplicate 8031100 using eth(aa:aa:aa:aa:aa:32) seen on [ 1098.267383][ T6126] bond5: (slave veth11): Enslaving as an active interface with a down link [ 1098.366490][ T6134] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1098.400504][ T6134] bond5: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 1098.763077][ T6158] sctp: [Deprecated]: syz.0.8653 (pid 6158) Use of int in max_burst socket option. [ 1098.763077][ T6158] Use struct sctp_assoc_value instead [ 1098.779158][ T6162] tc_dump_action: action bad kind [ 1098.798507][ T6163] ipt_ECN: cannot use operation on non-tcp rule [ 1098.926035][ T6171] IPVS: set_ctl: invalid protocol: 47 10.1.1.2:20001 [ 1099.284385][ C0] tipc: Duplicate 8031100 using eth(aa:aa:aa:aa:aa:32) seen on [ 1099.496162][ T6198] netlink: 64 bytes leftover after parsing attributes in process `syz.0.8662'. [ 1099.517557][ T6198] netlink: 64 bytes leftover after parsing attributes in process `syz.0.8662'. [ 1099.765812][ T6214] netlink: 'syz.1.8667': attribute type 83 has an invalid length. [ 1099.876379][ T6222] netlink: 14 bytes leftover after parsing attributes in process `syz.1.8667'. [ 1100.185707][ T6229] bond11: option arp_all_targets: invalid value (18446744073709551613) [ 1100.200120][ T6229] bond11 (unregistering): Released all slaves [ 1100.264092][ T6237] pim6reg527: entered allmulticast mode [ 1100.333035][ C1] tipc: Duplicate 8031100 using eth(aa:aa:aa:aa:aa:32) seen on [ 1100.475807][ T6246] netlink: 'syz.1.8673': attribute type 1 has an invalid length. [ 1100.620777][ T6246] bond12: entered promiscuous mode [ 1100.629499][ T6246] 8021q: adding VLAN 0 to HW filter on device bond12 [ 1100.737996][ T6258] 8021q: adding VLAN 0 to HW filter on device bond12 [ 1100.771912][ T6258] bond12: (slave vcan0): The slave device specified does not support setting the MAC address [ 1100.828761][ T6258] bond12: (slave vcan0): Setting fail_over_mac to active for active-backup mode [ 1100.884957][ T6258] bond12: (slave vcan0): making interface the new active one [ 1100.920627][ T6258] vcan0: entered promiscuous mode [ 1100.949830][ T6258] bond12: (slave vcan0): Enslaving as an active interface with an up link [ 1101.048525][ T6267] ip6tnl0: entered promiscuous mode [ 1101.079877][ T6273] netlink: 14 bytes leftover after parsing attributes in process `syz.0.8680'. [ 1101.148590][ T6271] netdevsim netdevsim0: Direct firmware load for . failed with error -2 [ 1101.181094][ T6271] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 1101.368258][ C1] tipc: Duplicate 8031100 using eth(aa:aa:aa:aa:aa:32) seen on [ 1101.381560][ T6292] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8685'. [ 1101.768223][ T6273] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1101.916856][ T6273] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1101.965907][ T6273] bond0 (unregistering): (slave netdevsim1): Releasing backup interface [ 1101.979449][ T6273] bond0 (unregistering): Released all slaves [ 1102.071550][ T6298] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8687'. [ 1102.105203][ T6298] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8687'. [ 1102.122568][ T6298] netlink: 36 bytes leftover after parsing attributes in process `syz.3.8687'. [ 1102.195533][ T6305] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8689'. [ 1102.230187][ T6305] netlink: 'syz.4.8689': attribute type 7 has an invalid length. [ 1102.258306][ T6305] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8689'. [ 1102.285711][ T6300] syzkaller0: entered promiscuous mode [ 1102.294833][ T6307] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8690'. [ 1102.299209][ T6300] syzkaller0: entered allmulticast mode [ 1102.409395][ C1] tipc: Duplicate 8031100 using eth(aa:aa:aa:aa:aa:32) seen on [ 1102.855645][ T6329] lo speed is unknown, defaulting to 1000 [ 1103.052902][ T6345] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8700'. [ 1103.066257][ T6346] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8699'. [ 1103.105032][ T6348] netlink: 'syz.3.8698': attribute type 4 has an invalid length. [ 1103.124510][ T6346] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 1103.368453][ T6360] netlink: 'syz.3.8703': attribute type 1 has an invalid length. [ 1103.414370][ T6364] netlink: 'syz.1.8704': attribute type 5 has an invalid length. [ 1103.445882][ C0] tipc: Duplicate 8031100 using eth(aa:aa:aa:aa:aa:32) seen on [ 1103.674398][ T6380] netlink: zone id is out of range [ 1103.702582][ T6380] netlink: zone id is out of range [ 1103.718524][ T6380] netlink: zone id is out of range [ 1103.733377][ T6380] netlink: del zone limit has 4 unknown bytes [ 1104.442911][ T6398] netlink: 'syz.3.8713': attribute type 4 has an invalid length. [ 1104.495158][ C0] tipc: Duplicate 8031100 using eth(aa:aa:aa:aa:aa:32) seen on [ 1105.177575][ T6424] netlink: 'syz.4.8723': attribute type 10 has an invalid length. [ 1105.523010][ C0] tipc: Duplicate 8031100 using eth(aa:aa:aa:aa:aa:32) seen on [ 1105.540515][ T6439] bond6: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 1105.567744][ T6439] bond6 (unregistering): Released all slaves [ 1105.868998][ T6454] xt_socket: unknown flags 0x50 [ 1106.321567][ T6471] __nla_validate_parse: 15 callbacks suppressed [ 1106.321589][ T6471] netlink: 64 bytes leftover after parsing attributes in process `syz.0.8736'. [ 1106.572880][ C1] tipc: Duplicate 8031100 using eth(aa:aa:aa:aa:aa:32) seen on [ 1106.628682][ T6479] netlink: 'syz.1.8740': attribute type 4 has an invalid length. [ 1106.787696][ T6489] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8744'. [ 1106.865935][ T6498] vlan6: entered allmulticast mode [ 1106.872537][ T6498] bond0: entered allmulticast mode [ 1106.876605][ T6503] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8747'. [ 1106.877835][ T6498] bond_slave_0: entered allmulticast mode [ 1106.897058][ T6498] bond_slave_1: entered allmulticast mode [ 1106.915962][ T6498] team0: entered allmulticast mode [ 1106.931428][ T6498] team_slave_0: entered allmulticast mode [ 1106.947480][ T6498] team_slave_1: entered allmulticast mode [ 1107.081922][ T6512] veth0: entered promiscuous mode [ 1107.106059][ T6512] veth0: left promiscuous mode [ 1107.136091][ T6518] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1107.198975][ T6523] netlink: 'syz.4.8753': attribute type 3 has an invalid length. [ 1107.219129][ T6522] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8754'. [ 1107.548901][ T6544] netlink: 27 bytes leftover after parsing attributes in process `syz.0.8758'. [ 1107.613281][ C0] tipc: Duplicate 8031100 using eth(aa:aa:aa:aa:aa:32) seen on [ 1107.638371][ T6549] IPVS: set_ctl: invalid protocol: 8 255.255.255.255:20003 [ 1107.653562][ T6550] x_tables: duplicate underflow at hook 2 [ 1108.630739][ T6607] syzkaller1: entered promiscuous mode [ 1108.654461][ C1] tipc: Duplicate 8031100 using eth(aa:aa:aa:aa:aa:32) seen on [ 1108.674483][ T6607] syzkaller1: entered allmulticast mode [ 1108.750384][ T6618] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8776'. [ 1108.874648][ T6627] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8779'. [ 1109.168209][ T6637] netlink: 'syz.4.8781': attribute type 1 has an invalid length. [ 1109.223250][ T6641] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8781'. [ 1109.236899][ T6639] netlink: 'syz.2.8783': attribute type 1 has an invalid length. [ 1109.259167][ T6641] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8781'. [ 1109.263292][ T6643] netlink: 'syz.3.8784': attribute type 21 has an invalid length. [ 1109.279002][ T6639] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8783'. [ 1109.322011][ T6637] bond11: entered promiscuous mode [ 1109.327782][ T6637] 8021q: adding VLAN 0 to HW filter on device bond11 [ 1109.586029][ T6659] syzkaller0: entered promiscuous mode [ 1109.596451][ T6659] syzkaller0: entered allmulticast mode [ 1109.684251][ C1] tipc: Duplicate 8031100 using eth(aa:aa:aa:aa:aa:32) seen on [ 1110.130093][ T6675] xt_CT: No such helper "snmp_trap" [ 1110.176233][ T6687] netlink: 'syz.3.8796': attribute type 10 has an invalid length. [ 1110.206674][ T6690] netlink: 'syz.3.8796': attribute type 10 has an invalid length. [ 1110.404073][ T6700] ipvlan2: entered allmulticast mode [ 1110.434241][ T6700] batadv_slave_1: entered allmulticast mode [ 1110.465656][ T6700] batman_adv: batadv0: Adding interface: ipvlan2 [ 1110.473148][ T6700] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1110.520663][ T6700] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1110.578013][ T6700] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1110.622047][ T6700] batman_adv: batadv0: Interface activated: ipvlan2 [ 1110.702625][ T6714] x_tables: ip_tables: owner match: used from hooks PREROUTING, but only valid from OUTPUT/POSTROUTING [ 1110.731103][ C0] tipc: Duplicate 8031100 using eth(aa:aa:aa:aa:aa:32) seen on [ 1110.931659][ T6720] netlink: 'syz.0.8804': attribute type 2 has an invalid length. [ 1110.950568][ T6720] netlink: 'syz.0.8804': attribute type 1 has an invalid length. [ 1111.364146][ T6740] __nla_validate_parse: 3 callbacks suppressed [ 1111.364166][ T6740] netlink: 404 bytes leftover after parsing attributes in process `syz.3.8812'. [ 1111.428706][ T6740] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8812'. [ 1111.464502][ T6740] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8812'. [ 1111.501683][ T6740] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8812'. [ 1111.739177][ T6762] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8819'. [ 1111.769595][ C0] tipc: Duplicate 8031100 using eth(aa:aa:aa:aa:aa:32) seen on [ 1111.920534][ T6772] netlink: 'syz.4.8820': attribute type 1 has an invalid length. [ 1111.954856][ T6773] netlink: 'syz.1.8821': attribute type 5 has an invalid length. [ 1111.975440][ T6773] netlink: 64 bytes leftover after parsing attributes in process `syz.1.8821'. [ 1112.053603][ T6778] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8824'. [ 1112.067713][ T6780] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8824'. [ 1112.078346][ T6779] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8824'. [ 1112.099603][ T6776] netlink: 40 bytes leftover after parsing attributes in process `syz.2.8823'. [ 1112.630776][ T6803] netlink: 'syz.0.8830': attribute type 13 has an invalid length. [ 1112.671758][ T6803] macsec0: entered allmulticast mode [ 1112.745521][ T5637] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1112.757826][ T5637] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1112.770539][ T5637] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1112.781772][ T5637] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1112.792751][ T5637] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1112.819332][ C0] tipc: Duplicate 8031100 using eth(aa:aa:aa:aa:aa:32) seen on [ 1112.960498][ T5642] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1112.992100][ T5642] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1113.003285][ T5642] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1113.027253][ T5642] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1113.044638][ T5642] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1113.529405][ T6834] syzkaller0: entered promiscuous mode [ 1113.535202][ T6834] syzkaller0: entered allmulticast mode [ 1113.846907][ C0] tipc: Duplicate 8031100 using eth(aa:aa:aa:aa:aa:32) seen on [ 1113.913460][ T6808] lo speed is unknown, defaulting to 1000 [ 1114.450584][ T6808] bridge0: port 1(bridge_slave_0) entered blocking state [ 1114.458070][ T6808] bridge0: port 1(bridge_slave_0) entered disabled state [ 1114.465745][ T6808] bridge_slave_0: entered allmulticast mode [ 1114.476030][ T6808] bridge_slave_0: entered promiscuous mode [ 1114.496449][ T6808] bridge0: port 2(bridge_slave_1) entered blocking state [ 1114.506670][ T6808] bridge0: port 2(bridge_slave_1) entered disabled state [ 1114.514167][ T6808] bridge_slave_1: entered allmulticast mode [ 1114.522508][ T6808] bridge_slave_1: entered promiscuous mode [ 1114.557062][ T6808] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1114.574522][ T6808] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1114.612501][ T6808] team0: Port device team_slave_0 added [ 1114.622142][ T6808] team0: Port device team_slave_1 added [ 1114.652932][ T6808] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1114.659931][ T6808] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1114.686408][ T6808] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1114.698886][ T6808] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1114.706081][ T6808] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1114.732825][ T6808] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1114.808142][ T6808] hsr_slave_0: entered promiscuous mode [ 1114.815353][ T6808] hsr_slave_1: entered promiscuous mode [ 1114.823351][ T6808] debugfs: 'hsr0' already exists in 'hsr' [ 1114.829153][ T6808] Cannot create hsr debugfs directory [ 1114.892070][ C1] tipc: Duplicate 8031100 using eth(aa:aa:aa:aa:aa:32) seen on [ 1115.075701][ T6808] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1115.087645][ T6808] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1115.122281][ T5642] Bluetooth: hci1: command tx timeout [ 1115.214274][ T6808] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1115.225159][ T6808] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1115.310505][ T6808] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1115.321636][ T6808] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1115.417692][ T6808] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1115.432656][ T6808] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1115.921776][ C0] tipc: Duplicate 8031100 using eth(aa:aa:aa:aa:aa:32) seen on [ 1116.468678][ T6834] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1116.479296][ T6867] nbd: couldn't find a device at index 1048580 [ 1116.537382][ T6808] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1116.590096][ T6876] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1116.630415][ T6808] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1116.692678][ T6808] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1116.719880][ T6808] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1116.729669][ T6880] __nla_validate_parse: 4 callbacks suppressed [ 1116.729690][ T6880] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8847'. [ 1116.740190][ T6881] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.8846'. [ 1116.789049][ T6881] veth0_to_bond: default FDB implementation only supports local addresses [ 1116.798625][ T6808] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1116.832836][ T6808] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1116.868518][ T6882] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8848'. [ 1116.868794][ T6808] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1116.887448][ T6885] netlink: 'syz.4.8849': attribute type 2 has an invalid length. [ 1116.922840][ T6808] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1116.964242][ C0] tipc: Duplicate 8031100 using eth(aa:aa:aa:aa:aa:32) seen on [ 1117.083985][ T6896] sctp: [Deprecated]: syz.0.8850 (pid 6896) Use of int in maxseg socket option. [ 1117.083985][ T6896] Use struct sctp_assoc_value instead [ 1117.179390][ T6808] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1117.214576][ T5642] Bluetooth: hci1: command tx timeout [ 1117.259493][ T6808] 8021q: adding VLAN 0 to HW filter on device team0 [ 1117.276787][ T7957] bridge0: port 1(bridge_slave_0) entered blocking state [ 1117.284056][ T7957] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1117.327494][ T6909] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8856'. [ 1117.340251][ T6909] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8856'. [ 1117.374389][ T6903] bridge0: port 3(vlan1) entered blocking state [ 1117.391575][ T6903] bridge0: port 3(vlan1) entered disabled state [ 1117.403899][ T6903] vlan1: entered allmulticast mode [ 1117.409523][ T6903] geneve0: entered allmulticast mode [ 1117.418499][ T6903] vlan1: entered promiscuous mode [ 1117.424211][ T6903] geneve0: entered promiscuous mode [ 1117.472612][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 1117.479832][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1117.669658][ T6921] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8858'. [ 1117.735426][ T6923] xt_hashlimit: size too large, truncated to 1048576 [ 1117.793568][ T6925] netlink: 'syz.4.8860': attribute type 5 has an invalid length. [ 1117.986716][ T6936] syz.3.8862: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1118.022117][ C1] tipc: Duplicate 8031100 using eth(aa:aa:aa:aa:aa:32) seen on [ 1118.067128][ T6936] CPU: 0 UID: 0 PID: 6936 Comm: syz.3.8862 Not tainted syzkaller #0 PREEMPT(full) [ 1118.067160][ T6936] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1118.067175][ T6936] Call Trace: [ 1118.067185][ T6936] [ 1118.067195][ T6936] dump_stack_lvl+0xe8/0x150 [ 1118.067230][ T6936] warn_alloc+0x249/0x340 [ 1118.067285][ T6936] ? stack_trace_save+0xa9/0x100 [ 1118.067327][ T6936] ? __pfx_warn_alloc+0x10/0x10 [ 1118.067368][ T6936] ? kasan_save_track+0x4f/0x80 [ 1118.067398][ T6936] ? kasan_save_track+0x3e/0x80 [ 1118.067426][ T6936] ? __kasan_kmalloc+0x93/0xb0 [ 1118.067456][ T6936] ? __kmalloc_cache_noprof+0x31c/0x660 [ 1118.067487][ T6936] ? xskq_create+0x56/0x170 [ 1118.067517][ T6936] ? xsk_setsockopt+0x54c/0x990 [ 1118.067542][ T6936] ? do_sock_setsockopt+0x17c/0x1b0 [ 1118.067573][ T6936] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 1118.067604][ T6936] ? do_syscall_64+0x15f/0xf80 [ 1118.067643][ T6936] __vmalloc_node_range_noprof+0x132/0x1750 [ 1118.067711][ T6936] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1118.067752][ T6936] ? __kasan_kmalloc+0x93/0xb0 [ 1118.067791][ T6936] vmalloc_user_noprof+0xad/0xe0 [ 1118.067823][ T6936] ? xskq_create+0xbf/0x170 [ 1118.067863][ T6936] xskq_create+0xbf/0x170 [ 1118.067897][ T6936] xsk_init_queue+0x8a/0xe0 [ 1118.067930][ T6936] xsk_setsockopt+0x54c/0x990 [ 1118.067960][ T6936] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1118.067989][ T6936] ? __pfx_aa_sk_perm+0x10/0x10 [ 1118.068032][ T6936] ? aa_sock_opt_perm+0xff/0x1a0 [ 1118.068068][ T6936] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 1118.068099][ T6936] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1118.068130][ T6936] do_sock_setsockopt+0x17c/0x1b0 [ 1118.068167][ T6936] __x64_sys_setsockopt+0x13d/0x1b0 [ 1118.068203][ T6936] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1118.068229][ T6936] do_syscall_64+0x15f/0xf80 [ 1118.068261][ T6936] ? trace_irq_disable+0x3b/0x140 [ 1118.068295][ T6936] ? clear_bhb_loop+0x40/0x90 [ 1118.068323][ T6936] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1118.068346][ T6936] RIP: 0033:0x7f09f359ce59 [ 1118.068370][ T6936] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1118.068390][ T6936] RSP: 002b:00007f09f43c0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1118.068415][ T6936] RAX: ffffffffffffffda RBX: 00007f09f3815fa0 RCX: 00007f09f359ce59 [ 1118.068433][ T6936] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 1118.068448][ T6936] RBP: 00007f09f3632d6f R08: 0000000000000004 R09: 0000000000000000 [ 1118.068463][ T6936] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1118.068478][ T6936] R13: 00007f09f3816038 R14: 00007f09f3815fa0 R15: 00007ffdcd83d498 [ 1118.068514][ T6936] [ 1118.070904][ T6936] Mem-Info: [ 1118.428350][ T6936] active_anon:6457 inactive_anon:0 isolated_anon:0 [ 1118.428350][ T6936] active_file:2885 inactive_file:40310 isolated_file:0 [ 1118.428350][ T6936] unevictable:768 dirty:47 writeback:0 [ 1118.428350][ T6936] slab_reclaimable:12326 slab_unreclaimable:118470 [ 1118.428350][ T6936] mapped:29269 shmem:1299 pagetables:3527 [ 1118.428350][ T6936] sec_pagetables:0 bounce:0 [ 1118.428350][ T6936] kernel_misc_reclaimable:0 [ 1118.428350][ T6936] free:1271862 free_pcp:24036 free_cma:0 [ 1118.499228][ T6936] Node 0 active_anon:25828kB inactive_anon:0kB active_file:11540kB inactive_file:161036kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:39252kB dirty:184kB writeback:0kB shmem:3660kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:15244kB pagetables:13940kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1118.567338][ T6936] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:77824kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:168kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1118.625849][ T6936] Node 0 DMA free:12572kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:184kB local_pcp:124kB free_cma:0kB [ 1118.684983][ T6936] lowmem_reserve[]: 0 2492 2493 2493 2493 [ 1118.699438][ T6948] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 1118.709941][ T6936] Node 0 DMA32 free:1393324kB boost:0kB min:34188kB low:42732kB high:51276kB reserved_highatomic:0KB free_highatomic:0KB active_anon:25628kB inactive_anon:0kB active_file:11540kB inactive_file:161036kB unevictable:1536kB writepending:184kB zspages:0kB present:3129332kB managed:2552548kB mlocked:0kB bounce:0kB free_pcp:33204kB local_pcp:17984kB free_cma:0kB [ 1118.777439][ T6950] netlink: 'syz.0.8865': attribute type 4 has an invalid length. [ 1118.791211][ T6936] lowmem_reserve[]: 0 0 0 0 0 [ 1118.826693][ T6936] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:668kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB [ 1118.876518][ T6936] lowmem_reserve[]: 0 0 0 0 0 [ 1118.892523][ T6936] Node 1 Normal free:3690632kB boost:0kB min:55704kB low:69628kB high:83552kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:60364kB local_pcp:27216kB free_cma:0kB [ 1119.006524][ T6954] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8866'. [ 1119.007808][ T6936] lowmem_reserve[]: 0 0 0 0 0 [ 1119.046537][ C0] tipc: Duplicate 8031100 using eth(aa:aa:aa:aa:aa:32) seen on [ 1119.067591][ T6936] Node 0 DMA: 1*4kB (U) 1*8kB (U) 1*16kB (U) 0*32kB 2*64kB (U) 2*128kB (U) 2*256kB (U) 2*512kB (U) 3*1024kB (U) 3*2048kB (UM) 1*4096kB (U) = 15260kB [ 1119.095088][ T6936] Node 0 DMA32: 12071*4kB (UM) 8738*8kB (UM) 5159*16kB (UM) 202*32kB (UM) 742*64kB (UM) 1026*128kB (UME) 773*256kB (UE) 393*512kB (U) 323*1024kB (U) 135*2048kB (U) 0*4096kB = 1392348kB [ 1119.135458][ T6954] syzkaller1: entered promiscuous mode [ 1119.146218][ T6954] syzkaller1: entered allmulticast mode [ 1119.156609][ T6936] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1119.169705][ T6936] Node 1 Normal: 2*4kB (U) 4*8kB (UM) 8*16kB (UM) 3*32kB (UM) 12*64kB (UM) 7*128kB (UM) 7*256kB (UM) 7*512kB (UM) 7*1024kB (UM) 5*2048kB (U) 895*4096kB (UM) = 3690632kB [ 1119.188790][ T6954] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8866'. [ 1119.199131][ T6954] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8866'. [ 1119.210732][ T6936] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1119.241929][ T6936] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1119.265020][ T6960] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8867'. [ 1119.291524][ T5642] Bluetooth: hci1: command tx timeout [ 1119.299034][ T6936] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1119.334732][ T6936] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1119.348315][ T6936] 44507 total pagecache pages [ 1119.374115][ T6936] 0 pages in swap cache [ 1119.378471][ T6936] Free swap = 124996kB [ 1119.383439][ T6936] Total swap = 124996kB [ 1119.387754][ T6936] 2097051 pages RAM [ 1119.392352][ T6936] 0 pages HighMem/MovableOnly [ 1119.397195][ T6936] 427132 pages reserved [ 1119.402475][ T6936] 0 pages cma reserved [ 1119.414713][ T6960] bridge10: entered allmulticast mode [ 1119.569250][ T6971] netlink: 'syz.1.8871': attribute type 5 has an invalid length. [ 1119.665987][ T6971] geneve4: entered promiscuous mode [ 1119.675183][ T6974] netlink: 'syz.4.8872': attribute type 1 has an invalid length. [ 1119.690773][ T6971] geneve4: entered allmulticast mode [ 1119.715931][ T13] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 1119.771928][ T13] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 1119.789243][ T13] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 1119.796933][ T6978] SET target dimension over the limit! [ 1119.813770][ T6808] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1119.850926][ T13] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 1120.074156][ T6808] veth0_vlan: entered promiscuous mode [ 1120.083991][ C1] tipc: Duplicate 8031100 using eth(aa:aa:aa:aa:aa:32) seen on [ 1120.139035][ T6990] netlink: 'syz.1.8879': attribute type 1 has an invalid length. [ 1120.151185][ T6808] veth1_vlan: entered promiscuous mode [ 1120.179368][ T6994] netlink: 'syz.0.8880': attribute type 24 has an invalid length. [ 1120.413763][ T6990] veth7: entered promiscuous mode [ 1120.434578][ T6990] bond13: (slave veth7): Enslaving as a backup interface with a down link [ 1120.468689][ T6808] veth0_macvtap: entered promiscuous mode [ 1120.487380][ T6999] 8021q: adding VLAN 0 to HW filter on device bond13 [ 1120.524600][ T6808] veth1_macvtap: entered promiscuous mode [ 1120.617731][ T6808] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1120.666539][ T6808] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1120.727737][T13441] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1120.756086][T13441] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1120.910557][T13441] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1120.986248][T13441] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1121.123109][ C1] tipc: Duplicate 8031100 using eth(aa:aa:aa:aa:aa:32) seen on [ 1121.361946][ T5642] Bluetooth: hci1: command tx timeout [ 1121.463449][T26234] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1121.489795][T26234] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1121.600341][ T7960] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1121.634247][ T7960] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1122.166420][ C1] tipc: Duplicate 8031100 using eth(aa:aa:aa:aa:aa:32) seen on [ 1122.259652][ T7075] __nla_validate_parse: 8 callbacks suppressed [ 1122.259674][ T7075] netlink: 52 bytes leftover after parsing attributes in process `syz.1.8901'. [ 1122.280198][ T7074] netlink: 52 bytes leftover after parsing attributes in process `syz.1.8901'. [ 1122.402686][ T7080] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8903'. [ 1122.441234][ T7080] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8903'. [ 1122.557993][ T7083] veth0: entered promiscuous mode [ 1122.580338][ T7083] syzkaller0: entered promiscuous mode [ 1122.586375][ T7083] syzkaller0: entered allmulticast mode [ 1122.632440][ T7083] syzkaller1: entered allmulticast mode [ 1122.962579][ T7082] veth0: left promiscuous mode [ 1123.201806][ C0] tipc: Duplicate 8031100 using eth(aa:aa:aa:aa:aa:32) seen on [ 1123.949391][ T7114] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8912'. [ 1124.033710][ T7114] workqueue: Failed to create a rescuer kthread for wq "bond11": -EINTR [ 1124.251546][ C0] tipc: Duplicate 8031100 using eth(aa:aa:aa:aa:aa:32) seen on [ 1124.359814][ T7133] x_tables: duplicate underflow at hook 1 [ 1124.509352][ T7143] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8920'. [ 1124.538868][ T7145] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_team, syncid = 4, id = 0 [ 1124.552359][ T7143] netlink: 13 bytes leftover after parsing attributes in process `syz.3.8920'. [ 1124.801433][ T7159] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8926'. [ 1125.083526][ T7172] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8927'. [ 1125.165952][ T7176] netlink: 'syz.0.8930': attribute type 61 has an invalid length. [ 1125.234523][ T7176] bridge0: port 4(vlan0) entered blocking state [ 1125.256842][ T7176] bridge0: port 4(vlan0) entered disabled state [ 1125.282403][ C0] tipc: Duplicate 8031100 using eth(aa:aa:aa:aa:aa:32) seen on [ 1125.326998][ T7176] vlan0: entered allmulticast mode [ 1125.365845][ T7176] geneve0: entered allmulticast mode [ 1125.418411][ T7176] vlan0: entered promiscuous mode [ 1125.451506][ T7176] geneve0: entered promiscuous mode [ 1126.039413][ T7207] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1126.098358][ T7207] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8935'. [ 1126.180541][ T7207] xfrm1: entered promiscuous mode [ 1126.202226][ T7207] xfrm1: entered allmulticast mode [ 1126.276455][ T7209] bridge1: entered allmulticast mode [ 1126.322134][ C0] tipc: Duplicate 8031100 using eth(aa:aa:aa:aa:aa:32) seen on [ 1127.363815][ C0] tipc: Duplicate 8031100 using eth(aa:aa:aa:aa:aa:32) seen on [ 1127.925461][ T7298] 8021q: VLANs not supported on tunl0 [ 1127.978551][ T7303] xt_connbytes: Forcing CT accounting to be enabled [ 1128.089174][ T7307] __nla_validate_parse: 2 callbacks suppressed [ 1128.089194][ T7307] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8956'. [ 1128.195895][ T7311] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8958'. [ 1128.403243][ C1] tipc: Duplicate 8031100 using eth(aa:aa:aa:aa:aa:32) seen on [ 1128.517952][ T7328] netlink: 'syz.2.8961': attribute type 1 has an invalid length. [ 1128.813358][ T7328] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1129.016736][ T7357] netlink: 'syz.2.8964': attribute type 15 has an invalid length. [ 1129.032971][ T7357] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8964'. [ 1129.136150][ T7960] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 2816 - 0 [ 1129.138081][ T7357] netlink: 'syz.2.8964': attribute type 15 has an invalid length. [ 1129.161720][ T7356] netlink: 'syz.3.8965': attribute type 10 has an invalid length. [ 1129.206558][ T7960] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 2816 - 0 [ 1129.210152][ T7356] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8965'. [ 1129.233617][ T7357] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8964'. [ 1129.279449][ T7960] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 2816 - 0 [ 1129.326886][ T7960] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 2816 - 0 [ 1129.436320][ T7372] netlink: 'syz.0.8967': attribute type 6 has an invalid length. [ 1129.445518][ C1] tipc: Duplicate 8031100 using eth(aa:aa:aa:aa:aa:32) seen on [ 1129.539561][ T7377] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8968'. [ 1129.900359][ T7397] IPVS: stopping master sync thread 7145 ... [ 1130.074187][ T7408] tipc: Enabling of bearer rejected, already enabled [ 1130.292531][ T7419] "syz.4.8982" (7419) uses obsolete ecb(arc4) skcipher [ 1130.376743][ T7424] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8981'. [ 1130.441851][ T7427] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8980'. [ 1130.485188][ C1] tipc: Duplicate 8031100 using eth(aa:aa:aa:aa:aa:32) seen on [ 1130.709722][ T7434] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8984'. [ 1130.827883][ T7453] netlink: 'syz.3.8987': attribute type 4 has an invalid length. [ 1130.848115][ T7453] netlink: 17 bytes leftover after parsing attributes in process `syz.3.8987'. [ 1131.303927][ T7467] syzkaller0: entered promiscuous mode [ 1131.341244][ T7467] syzkaller0: entered allmulticast mode [ 1131.522179][ C1] tipc: Duplicate 8031100 using eth(aa:aa:aa:aa:aa:32) seen on [ 1131.564067][ T7484] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1131.571415][ T7484] IPv6: NLM_F_CREATE should be set when creating new route [ 1131.618210][ T7481] syzkaller0: entered promiscuous mode [ 1131.643391][ T7481] syzkaller0: entered allmulticast mode [ 1131.691327][ T7488] netlink: 'syz.1.8998': attribute type 13 has an invalid length. [ 1132.069102][ T7514] netlink: 'syz.1.9006': attribute type 1 has an invalid length. [ 1132.562770][ C1] tipc: Duplicate 8031100 using eth(aa:aa:aa:aa:aa:32) seen on [ 1132.758634][ T7545] ¾x9ÿ: renamed from bridge_slave_0 (while UP) [ 1132.787113][ T7547] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 1132.826149][ T7547] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 1132.884598][ T7547] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 1133.050408][ T7547] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 1133.309701][ T13] smbdirect: ib_dev[syz2] removed [ 1133.601608][ C1] tipc: Duplicate 8031100 using eth(aa:aa:aa:aa:aa:32) seen on [ 1133.711450][ T7583] __nla_validate_parse: 7 callbacks suppressed [ 1133.711472][ T7583] netlink: 44 bytes leftover after parsing attributes in process `syz.3.9027'. [ 1134.652138][ C0] tipc: Duplicate 8031100 using eth(aa:aa:aa:aa:aa:32) seen on [ 1135.250616][ T7639] vlan2: entered allmulticast mode [ 1135.269308][ T7611] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1135.281802][ T7640] netlink: 14 bytes leftover after parsing attributes in process `syz.0.9042'. [ 1135.295376][ T7639] bond0: entered allmulticast mode [ 1135.684275][ C0] tipc: Duplicate 8031100 using eth(aa:aa:aa:aa:aa:32) seen on [ 1135.716841][ T7668] xt_l2tp: invalid flags combination: 8 [ 1135.881797][ T7674] netlink: 64 bytes leftover after parsing attributes in process `syz.4.9053'. [ 1136.012002][ T7678] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9054'. [ 1136.085946][ T7678] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9054'. [ 1136.154996][ T7680] syzkaller1: entered promiscuous mode [ 1136.160712][ T7680] syzkaller1: entered allmulticast mode [ 1136.365838][T15820] IPVS: starting estimator thread 0... [ 1136.373038][ T7689] openvswitch: netlink: Missing key (keys=40, expected=100) [ 1136.488232][ T7690] IPVS: using max 28 ests per chain, 67200 per kthread [ 1136.634981][ T7701] xt_hashlimit: Unknown mode mask 2000, kernel too old? [ 1136.721923][ C1] tipc: Duplicate 8031100 using eth(aa:aa:aa:aa:aa:32) seen on [ 1136.786706][ T7707] netlink: 52 bytes leftover after parsing attributes in process `syz.3.9062'. [ 1136.833946][ T7707] netlink: 52 bytes leftover after parsing attributes in process `syz.3.9062'. [ 1137.197969][ T7728] bridge5: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 1137.288670][ T7738] IPv6: NLM_F_CREATE should be specified when creating new route [ 1137.478880][ T7728] syzkaller0: entered promiscuous mode [ 1137.502799][ T7728] syzkaller0: entered allmulticast mode [ 1137.762819][ C0] tipc: Duplicate 8031100 using eth(aa:aa:aa:aa:aa:32) seen on [ 1137.817714][ T7766] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.9070'. [ 1138.770895][ T7796] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9077'. [ 1138.804041][ C1] tipc: Duplicate 8031100 using eth(aa:aa:aa:aa:aa:32) seen on [ 1138.825483][ T7796] 8021q: adding VLAN 0 to HW filter on device bond11 [ 1138.958642][ T7814] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9078'. [ 1138.976419][ T7816] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1138.983832][ T7816] IPv6: NLM_F_CREATE should be set when creating new route [ 1138.991149][ T7816] IPv6: NLM_F_CREATE should be set when creating new route [ 1139.002881][ T7816] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9077'. [ 1139.094789][ T7796] 8021q: adding VLAN 0 to HW filter on device bond12 [ 1139.106027][ T7796] bond11: (slave bond12): Enslaving as an active interface with an up link [ 1139.285374][ T7816] bond11 (unregistering): (slave bond12): Releasing backup interface [ 1139.342905][ T7816] bond11 (unregistering): Released all slaves [ 1139.466585][ T7819] sch_tbf: burst 7 is lower than device syzkaller0 mtu (1514) ! [ 1139.674417][ T7832] bond2: entered promiscuous mode [ 1139.699984][ T7832] bond2: entered allmulticast mode [ 1139.713815][ T7832] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1139.844790][ C1] tipc: Duplicate 8031100 using eth(aa:aa:aa:aa:aa:32) seen on [ 1139.986940][ T7851] netlink: 'syz.2.9086': attribute type 5 has an invalid length. [ 1140.013962][ T7852] netlink: 20 bytes leftover after parsing attributes in process `syz.3.9087'. [ 1140.063625][ T7854] netlink: 104 bytes leftover after parsing attributes in process `syz.4.9088'. [ 1140.074319][ T7857] netlink: 20 bytes leftover after parsing attributes in process `syz.3.9087'. [ 1140.096020][ T7854] netlink: 'syz.4.9088': attribute type 1 has an invalid length. [ 1140.116790][ T7854] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9088'. [ 1140.145020][ T7854] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9088'. [ 1140.507766][ T7879] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9095'. [ 1140.560371][ T7883] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9097'. [ 1140.718087][ T7893] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1140.883782][ C0] tipc: Duplicate 8031100 using eth(aa:aa:aa:aa:aa:32) seen on [ 1141.918998][ T7954] netlink: 'syz.0.9115': attribute type 1 has an invalid length. [ 1141.947418][ C1] tipc: Duplicate 8031100 using eth(aa:aa:aa:aa:aa:32) seen on [ 1142.015375][ T7955] bond3: (slave veth0_to_bond): Releasing active interface [ 1142.039439][ T7955] veth0_to_bond: left promiscuous mode [ 1142.053978][ T7955] veth0_to_bond: left allmulticast mode [ 1142.144099][ T7954] 8021q: adding VLAN 0 to HW filter on device bond11 [ 1142.437862][ T7985] syzkaller0: entered promiscuous mode [ 1142.454687][ T7985] syzkaller0: entered allmulticast mode [ 1142.510039][ T7986] netlink: 'syz.3.9123': attribute type 1 has an invalid length. [ 1142.548897][ T7990] netlink: 'syz.2.9124': attribute type 1 has an invalid length. [ 1142.763450][ T7990] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1142.886359][ T7989] bond3: (slave geneve2): making interface the new active one [ 1142.923731][ T7989] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 1142.962581][ C1] tipc: Duplicate 8031100 using eth(aa:aa:aa:aa:aa:32) seen on [ 1143.199209][ T8013] netlink: 'syz.0.9132': attribute type 1 has an invalid length. [ 1143.553332][ T8027] netlink: 'syz.3.9134': attribute type 1 has an invalid length. [ 1144.006560][ C0] tipc: Duplicate 8031100 using eth(aa:aa:aa:aa:aa:32) seen on [ 1144.166921][ T8062] __nla_validate_parse: 10 callbacks suppressed [ 1144.166944][ T8062] netlink: 284 bytes leftover after parsing attributes in process `syz.2.9143'. [ 1144.228693][ T8070] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9145'. [ 1144.513177][ T8080] sock: sock_timestamping_bind_phc: sock not bind to device [ 1144.664156][ T8082] vet: renamed from veth0_vlan (while UP) [ 1144.694822][ T8089] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9152'. [ 1144.708410][ T8082] tipc: Resetting bearer [ 1144.830257][ T7969] tipc: Resetting bearer [ 1145.044439][ T8106] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9155'. [ 1145.050650][ T8108] netlink: 64 bytes leftover after parsing attributes in process `syz.3.9157'. [ 1145.127453][ T8111] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 1146.164515][ T8139] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9164'. [ 1146.238051][ T8142] xt_l2tp: v2 doesn't support IP mode [ 1146.320798][ T8139] vlan3: entered allmulticast mode [ 1146.338787][ T8139] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 1146.466387][ T8152] netlink: 40 bytes leftover after parsing attributes in process `syz.4.9168'. [ 1146.515404][ T8156] netlink: 'syz.3.9170': attribute type 3 has an invalid length. [ 1146.682865][ T8160] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9172'. [ 1146.949487][ T8178] netlink: 'syz.0.9177': attribute type 20 has an invalid length. [ 1146.964547][ T8178] IPv6: NLM_F_CREATE should be specified when creating new route [ 1146.988165][ T8176] netlink: 68 bytes leftover after parsing attributes in process `syz.3.9176'. [ 1147.057623][ T8176] vlan0: entered promiscuous mode [ 1147.098069][ T8176] bond4: entered promiscuous mode [ 1147.119303][ T8176] ip6gretap1: entered promiscuous mode [ 1147.178566][ T8188] netlink: 'syz.0.9180': attribute type 5 has an invalid length. [ 1147.216236][ T8188] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9180'. [ 1147.228439][ T8176] team0: Port device vlan0 added [ 1147.248923][ T8188] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1147.258009][ T8188] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1147.308369][ T8183] tipc: Enabled bearer , priority 0 [ 1147.950638][ T8211] xt_TCPMSS: Only works on TCP SYN packets [ 1147.973755][ T8211] xt_ecn: cannot match TCP bits for non-tcp packets [ 1148.018643][ T5637] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1148.036335][ T5637] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1148.054204][ T5637] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1148.082368][ T5637] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1148.092237][ T5637] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1148.332235][ T7961] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1148.351636][ T7961] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1148.365315][ T7961] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 1148.449920][ T8218] veth3: entered allmulticast mode [ 1148.665757][ T7961] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1148.694880][ T7961] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1148.714084][ T7961] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 1148.941280][ T7961] bond0: (slave netdevsim1): Releasing backup interface [ 1148.975071][ T7961] netdevsim netdevsim1 netdevsim1 (unregistering): left allmulticast mode [ 1149.029363][ T7961] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1149.073144][ T7961] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1149.113530][ T7961] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 1149.183392][ T8260] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1149.190752][ T8260] IPv6: NLM_F_CREATE should be set when creating new route [ 1149.198097][ T8260] IPv6: NLM_F_CREATE should be set when creating new route [ 1149.424016][ T7961] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1149.435399][ T7961] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1149.471571][ T7961] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 1149.527115][ T8271] __nla_validate_parse: 6 callbacks suppressed [ 1149.527140][ T8271] netlink: 132 bytes leftover after parsing attributes in process `syz.2.9202'. [ 1149.562352][ T8276] openvswitch: netlink: IP tunnel dst address not specified [ 1149.594262][ T8213] lo speed is unknown, defaulting to 1000 [ 1149.615638][ T8276] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9204'. [ 1149.956433][T13443] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1149.973094][ T8287] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9208'. [ 1150.018824][ T8284] syzkaller1: entered promiscuous mode [ 1150.036386][ T8284] syzkaller1: entered allmulticast mode [ 1150.050775][T13439] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1150.087477][ T8287] netlink: 'syz.2.9208': attribute type 3 has an invalid length. [ 1150.163419][ T5642] Bluetooth: hci0: command tx timeout [ 1150.196891][ T7960] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1150.286223][ T13] netdevsim netdevsim1 eth4: set [1, 0] type 2 family 0 port 6081 - 0 [ 1150.442399][ T7961] dvmrp6: left allmulticast mode [ 1150.452231][ T7961] pimreg: left allmulticast mode [ 1150.996863][ T7961] team0: Port device ip6gre1 removed [ 1151.354568][ T8334] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9217'. [ 1151.356739][ T8335] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9217'. [ 1151.439346][ T7961] bond3 (unregistering): (slave bridge2): Releasing backup interface [ 1151.471581][ T8337] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9218'. [ 1151.741793][ T7961] bond0 (unregistering): Released all slaves [ 1151.758377][ T7961] bond1 (unregistering): Released all slaves [ 1151.786983][ T7961] bond2 (unregistering): Released all slaves [ 1151.803999][ T7961] bond3 (unregistering): Released all slaves [ 1151.827791][ T7961] bond4 (unregistering): Released all slaves [ 1151.849363][ T7961] bond5 (unregistering): Released all slaves [ 1151.866597][ T7961] bond6 (unregistering): Released all slaves [ 1151.889512][ T7961] bond7 (unregistering): Released all slaves [ 1151.906751][ T7961] bond8 (unregistering): Released all slaves [ 1151.928940][ T7961] bond9 (unregistering): Released all slaves [ 1151.961706][ T7961] bond10 (unregistering): Released all slaves [ 1151.978621][ T7961] bond11 (unregistering): Released all slaves [ 1151.997782][ T7961] bond12 (unregistering): (slave vcan0): Releasing backup interface [ 1152.006096][ T7961] vcan0: left promiscuous mode [ 1152.024131][ T7961] bond12 (unregistering): Released all slaves [ 1152.043051][ T7961] bond13 (unregistering): (slave veth7): Releasing backup interface [ 1152.053478][ T7961] bond13 (unregistering): Released all slaves [ 1152.070398][ T7961] bond14 (unregistering): Released all slaves [ 1152.244032][ T5642] Bluetooth: hci0: command tx timeout [ 1152.300014][ T7961] : left promiscuous mode [ 1152.570567][ T7961] tipc: Disabling bearer [ 1152.585330][ T7961] tipc: Left network mode [ 1153.677310][ T8398] sch_fq: defrate 0 ignored. [ 1153.908270][ T8408] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9233'. [ 1153.936067][ T8213] bridge0: port 1(bridge_slave_0) entered blocking state [ 1153.960703][ T8213] bridge0: port 1(bridge_slave_0) entered disabled state [ 1153.983950][ T8412] netlink: 244 bytes leftover after parsing attributes in process `syz.0.9232'. [ 1153.988496][ T8213] bridge_slave_0: entered allmulticast mode [ 1154.037367][ T8213] bridge_slave_0: entered promiscuous mode [ 1154.068544][ T8213] bridge0: port 2(bridge_slave_1) entered blocking state [ 1154.090146][ T8418] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9235'. [ 1154.101407][ T8213] bridge0: port 2(bridge_slave_1) entered disabled state [ 1154.108801][ T8213] bridge_slave_1: entered allmulticast mode [ 1154.127650][ T8213] bridge_slave_1: entered promiscuous mode [ 1154.162500][ T8413] netlink: 'syz.4.9234': attribute type 4 has an invalid length. [ 1154.328420][ T8425] netlink: 20 bytes leftover after parsing attributes in process `syz.3.9235'. [ 1154.339332][ T5642] Bluetooth: hci0: command tx timeout [ 1154.518718][ T8408] bond4 (unregistering): Released all slaves [ 1154.610077][ T8437] __nla_validate_parse: 1 callbacks suppressed [ 1154.610100][ T8437] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9238'. [ 1154.706171][ T5289] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1154.820001][ T8213] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1154.923849][ T7961] hsr_slave_0: left promiscuous mode [ 1154.942405][ T8445] SET target dimension over the limit! [ 1154.954777][ T7961] hsr_slave_1: left promiscuous mode [ 1154.967390][ T8446] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9240'. [ 1154.997755][ T8446] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 1155.057838][ T8453] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9241'. [ 1155.302738][ T7961] pim6reg (unregistering): left allmulticast mode [ 1155.899874][ T8483] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9245'. [ 1155.995303][ T8213] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1156.081849][ T8486] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9245'. [ 1156.348548][ T8213] team0: Port device team_slave_0 added [ 1156.411959][ T5642] Bluetooth: hci0: command tx timeout [ 1156.754889][ T8213] team0: Port device team_slave_1 added [ 1156.787187][ T8496] bridge: RTM_NEWNEIGH with invalid state 0x20 [ 1156.816977][ T7961] IPVS: stop unused estimator thread 0... [ 1156.843764][ T8506] pimreg: entered allmulticast mode [ 1156.956143][ T8510] syz_tun: left allmulticast mode [ 1156.977933][ T8510] pimreg: left allmulticast mode [ 1157.059026][ T8213] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1157.077879][ T8213] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1157.167894][ T8213] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1157.227923][ T8513] netlink: 'syz.0.9252': attribute type 2 has an invalid length. [ 1157.289886][ T8213] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1157.333917][ T8213] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1157.459344][ T8213] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1157.827736][ T8213] hsr_slave_0: entered promiscuous mode [ 1157.857816][ T8213] hsr_slave_1: entered promiscuous mode [ 1157.885483][ T8213] debugfs: 'hsr0' already exists in 'hsr' [ 1157.912252][ T8213] Cannot create hsr debugfs directory [ 1158.652618][ T8213] netdevsim netdevsim1 eth4 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1158.877231][ T5289] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1158.909767][ T8570] netlink: 92 bytes leftover after parsing attributes in process `syz.2.9266'. [ 1158.945246][ T8570] netlink: 'syz.2.9266': attribute type 1 has an invalid length. [ 1158.961273][ T8572] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1159.050214][ T8213] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1159.345157][ T8213] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1159.492655][ T8593] syzkaller1: entered promiscuous mode [ 1159.516020][ T8593] syzkaller1: entered allmulticast mode [ 1159.610734][ T8597] netlink: 'syz.3.9272': attribute type 1 has an invalid length. [ 1159.650032][ T8213] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1159.651882][ T8597] netlink: 224 bytes leftover after parsing attributes in process `syz.3.9272'. [ 1159.703259][ T8601] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9271'. [ 1159.930633][ T8606] netlink: 120 bytes leftover after parsing attributes in process `syz.3.9273'. [ 1159.954989][ T8606] openvswitch: netlink: Flow actions attr not present in new flow. [ 1160.551349][ T8618] bond4: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 1160.626872][ T8618] bond4 (unregistering): Released all slaves [ 1160.936302][ T8633] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9280'. [ 1161.120762][ T8637] netlink: 168 bytes leftover after parsing attributes in process `syz.2.9281'. [ 1161.131715][ T8213] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1161.173282][ T8213] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1161.198097][ T8213] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1161.284109][ T8213] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1161.318095][ T8647] IPv6: NLM_F_CREATE should be specified when creating new route [ 1161.331654][ T8213] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1161.386567][ T8213] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1161.410549][ T8213] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1161.441726][ T8653] netlink: 'syz.2.9284': attribute type 1 has an invalid length. [ 1161.451752][ T8652] netlink: 'syz.3.9283': attribute type 15 has an invalid length. [ 1161.493089][ T8213] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1161.536033][ T8653] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 1161.834811][ T8213] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1161.980592][ T8213] 8021q: adding VLAN 0 to HW filter on device team0 [ 1162.150581][T10086] bridge0: port 1(bridge_slave_0) entered blocking state [ 1162.157880][T10086] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1162.196950][T10086] bridge0: port 2(bridge_slave_1) entered blocking state [ 1162.204252][T10086] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1162.264438][ T8696] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9289'. [ 1162.322477][ T8696] netlink: 272 bytes leftover after parsing attributes in process `syz.2.9289'. [ 1162.366196][ T8698] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9290'. [ 1162.774460][ T8718] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9293'. [ 1163.005214][ T8722] netlink: 'syz.0.9294': attribute type 61 has an invalid length. [ 1163.039074][ T8686] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9288'. [ 1164.113604][ T8213] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1164.475745][ T8213] veth0_vlan: entered promiscuous mode [ 1164.526615][ T8213] veth1_vlan: entered promiscuous mode [ 1165.085101][ T8213] veth0_macvtap: entered promiscuous mode [ 1165.189147][ T8213] veth1_macvtap: entered promiscuous mode [ 1165.316611][ T8825] netlink: 'syz.3.9313': attribute type 1 has an invalid length. [ 1165.325167][ T8213] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1165.416681][ T8830] __nla_validate_parse: 6 callbacks suppressed [ 1165.416702][ T8830] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9314'. [ 1165.450237][ T8825] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1165.475329][ T8213] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1165.488768][ T8834] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1165.662550][T26234] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1165.675369][ T8837] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9316'. [ 1165.692331][ T7972] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1165.726708][ T8837] netlink: 'syz.4.9316': attribute type 4 has an invalid length. [ 1165.748471][ T7972] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1165.771496][ T8837] netlink: 224 bytes leftover after parsing attributes in process `syz.4.9316'. [ 1165.881066][ T7972] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1166.063408][ T30] audit: type=1800 audit(1779478665.484:26): pid=8848 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.9319" name="memory.events" dev="tmpfs" ino=2704 res=0 errno=0 [ 1166.180614][T30735] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1166.246414][T30735] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1166.280410][ T8858] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9322'. [ 1166.389291][ T8865] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1166.442894][T13442] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1166.459474][T13442] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1166.727166][ T8878] IPv6: NLM_F_CREATE should be specified when creating new route [ 1166.972615][ C1] vcan0: j1939_tp_rxtimer: 0xffff888021aedc00: rx timeout, send abort [ 1167.314986][ T8893] netlink: 'syz.1.9329': attribute type 1 has an invalid length. [ 1167.472757][ C1] vcan0: j1939_tp_rxtimer: 0xffff888021aee000: rx timeout, send abort [ 1167.481219][ C1] vcan0: j1939_tp_rxtimer: 0xffff888021aedc00: abort rx timeout. Force session deactivation [ 1167.539821][ T5637] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1167.560560][ T8902] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9329'. [ 1167.565058][ T5637] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1167.580762][ T5637] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1167.599698][ T5637] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1167.611493][ T5637] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1167.723938][ T8905] netlink: 40 bytes leftover after parsing attributes in process `syz.3.9331'. [ 1167.867218][ T8893] bond1 (unregistering): Released all slaves [ 1167.981394][ C1] vcan0: j1939_tp_rxtimer: 0xffff888021aee000: abort rx timeout. Force session deactivation [ 1168.269288][ T8915] netlink: 96 bytes leftover after parsing attributes in process `syz.4.9333'. [ 1168.372209][ T8920] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9335'. [ 1168.612614][ T8931] netlink: 20 bytes leftover after parsing attributes in process `syz.3.9339'. [ 1168.807478][ T30] audit: type=1107 audit(1779478668.234:27): pid=8944 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='Ù‹5ž÷Œ•%èÍUýAÊÃËÙ ë0ä™l…t¿Ý•/Öÿ Ž6òŠ¨Šç›' [ 1168.863953][ T8901] lo speed is unknown, defaulting to 1000 [ 1169.037548][ T8952] netlink: 'syz.2.9344': attribute type 1 has an invalid length. [ 1169.064893][ T8952] netlink: 476 bytes leftover after parsing attributes in process `syz.2.9344'. [ 1169.549280][ T8901] bridge0: port 1(bridge_slave_0) entered blocking state [ 1169.557324][ T8901] bridge0: port 1(bridge_slave_0) entered disabled state [ 1169.565942][ T8901] bridge_slave_0: entered allmulticast mode [ 1169.575229][ T8901] bridge_slave_0: entered promiscuous mode [ 1169.584848][ T8901] bridge0: port 2(bridge_slave_1) entered blocking state [ 1169.593537][ T8901] bridge0: port 2(bridge_slave_1) entered disabled state [ 1169.600875][ T8901] bridge_slave_1: entered allmulticast mode [ 1169.613427][ T8901] bridge_slave_1: entered promiscuous mode [ 1169.658469][ T8987] netlink: 'syz.2.9352': attribute type 1 has an invalid length. [ 1169.681333][ T5637] Bluetooth: hci5: command tx timeout [ 1169.772639][ T8901] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1169.816768][ T8987] bond4: (slave bridge3): making interface the new active one [ 1169.826617][ T8987] bond4: (slave bridge3): Enslaving as an active interface with an up link [ 1169.857871][ T8901] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1169.895826][ T8987] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1170.033676][ T8901] team0: Port device team_slave_0 added [ 1170.073987][ T8901] team0: Port device team_slave_1 added [ 1170.210479][ T8901] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1170.220246][ T8901] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1170.284702][ T8901] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1170.309065][ T8901] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1170.326560][ T8901] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1170.354479][ T8901] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1170.489415][ T8901] hsr_slave_0: entered promiscuous mode [ 1170.496445][ T8901] hsr_slave_1: entered promiscuous mode [ 1170.505748][ T8901] debugfs: 'hsr0' already exists in 'hsr' [ 1170.513701][ T8901] Cannot create hsr debugfs directory [ 1170.973717][ T8901] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1170.985473][ T8901] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1171.133714][ T9033] __nla_validate_parse: 7 callbacks suppressed [ 1171.133730][ T9033] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9363'. [ 1171.157470][ T8901] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1171.170642][ T8901] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1171.290896][ T8901] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1171.312153][ T9037] netlink: 7064 bytes leftover after parsing attributes in process `syz.3.9366'. [ 1171.322403][ T9037] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 1171.322862][ T8901] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1171.345981][ T9036] netlink: 216 bytes leftover after parsing attributes in process `syz.4.9365'. [ 1171.413552][ T9036] tipc: Resetting bearer [ 1171.416586][ T9038] netlink: 'syz.3.9366': attribute type 2 has an invalid length. [ 1171.550531][ T9042] netlink: 20 bytes leftover after parsing attributes in process `syz.2.9367'. [ 1171.590247][ T9042] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9367'. [ 1171.667948][ T8901] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1171.683642][ T8901] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1171.765201][ T5637] Bluetooth: hci5: command 0x041b tx timeout [ 1171.956078][ T9059] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9371'. [ 1172.468332][ T9062] bond0: (slave bond_slave_1): Error: Device is in use and cannot be enslaved [ 1172.478194][ T8901] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1172.513825][ T8901] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1172.538008][ T8901] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1172.570824][ T8901] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1172.588774][ T8901] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1172.620518][ T8901] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1172.637257][ T8901] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1172.666112][ T8901] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1172.696144][ T9079] netlink: 'syz.2.9376': attribute type 1 has an invalid length. [ 1172.935496][ T9001] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1172.984846][ T9092] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9380'. [ 1172.988159][ T8901] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1173.092645][ T8901] 8021q: adding VLAN 0 to HW filter on device team0 [ 1173.120787][T13441] bridge0: port 1(bridge_slave_0) entered blocking state [ 1173.128051][T13441] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1173.188571][T13441] bridge0: port 2(bridge_slave_1) entered blocking state [ 1173.195849][T13441] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1173.258590][ T9098] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9382'. [ 1173.560674][ T9113] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9386'. [ 1173.842502][ T5642] Bluetooth: hci5: command 0x041b tx timeout [ 1173.945390][ T9132] netlink: 'syz.3.9394': attribute type 4 has an invalid length. [ 1174.035256][ T9137] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9393'. [ 1174.070048][ T9134] netlink: 'syz.2.9392': attribute type 12 has an invalid length. [ 1174.345065][ T8901] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1174.530240][ T8901] veth0_vlan: entered promiscuous mode [ 1174.571918][ T8901] veth1_vlan: entered promiscuous mode [ 1174.638555][ T9170] pimreg: entered allmulticast mode [ 1174.706431][ T9173] mac80211_hwsim hwsim74 syzkaller0: entered promiscuous mode [ 1174.721997][ T9173] mac80211_hwsim hwsim74 syzkaller0: entered allmulticast mode [ 1174.773685][ T8901] veth0_macvtap: entered promiscuous mode [ 1174.786657][ T8901] veth1_macvtap: entered promiscuous mode [ 1174.814464][ T8901] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1174.835854][ T8901] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1174.864531][ T7961] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1174.875734][ T7961] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1174.898865][ T7961] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1174.925843][ T7961] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1174.974913][ T9180] netlink: 'syz.2.9404': attribute type 1 has an invalid length. [ 1175.158735][ T9184] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 1175.215386][ T9184] syzkaller1: Refused to change device type [ 1175.216456][ T9186] openvswitch: netlink: Message has 5 unknown bytes. [ 1175.368959][ T7972] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1175.379829][ T7972] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1175.474832][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1175.489086][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1175.735614][ T9199] mac80211_hwsim hwsim74 syzkaller0: left promiscuous mode [ 1175.753073][ T9199] mac80211_hwsim hwsim74 syzkaller0: left allmulticast mode [ 1175.772023][ T9199] tipc: Resetting bearer [ 1175.797214][ T9206] syz_tun: entered allmulticast mode [ 1175.921620][ T5642] Bluetooth: hci5: command 0x041b tx timeout [ 1176.035657][ T9212] netlink: 'syz.3.9414': attribute type 1 has an invalid length. [ 1176.077978][ T9212] netlink: 'syz.3.9414': attribute type 2 has an invalid length. [ 1176.118310][ T9212] netlink: 'syz.3.9414': attribute type 1 has an invalid length. [ 1176.187892][ T9221] netlink: 'syz.2.9418': attribute type 58 has an invalid length. [ 1176.204189][ T9217] tipc: Started in network mode [ 1176.227195][ T9217] tipc: Node identity ae250463d02d, cluster identity 4711 [ 1176.244864][ T9221] __nla_validate_parse: 5 callbacks suppressed [ 1176.244882][ T9221] netlink: 20 bytes leftover after parsing attributes in process `syz.2.9418'. [ 1176.272540][ T9217] tipc: Enabled bearer , priority 0 [ 1176.300359][ T9227] syzkaller0: entered promiscuous mode [ 1176.332634][ T9227] syzkaller0: entered allmulticast mode [ 1176.366228][ T5637] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1176.381074][ T5637] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1176.393765][ T5637] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1176.407387][T30735] tipc: Resetting bearer [ 1176.416802][ T5637] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1176.428173][ T5637] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1176.501469][ T9217] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 1176.688104][ T9214] tipc: Resetting bearer [ 1176.809547][ T9214] tipc: Disabling bearer [ 1177.690526][T26234] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1177.704854][T26234] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1177.770901][ T9276] tipc: Started in network mode [ 1177.781460][ T9276] tipc: Node identity 2adade16670b, cluster identity 4711 [ 1177.788816][ T9276] tipc: Enabled bearer , priority 0 [ 1177.849212][ T9280] netlink: 20 bytes leftover after parsing attributes in process `syz.3.9429'. [ 1177.878064][ T9276] tipc: Disabling bearer [ 1177.991496][T26234] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1178.001907][ T5642] Bluetooth: hci5: command 0x041b tx timeout [ 1178.015735][T26234] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1178.098662][ T9281] pim6reg: entered allmulticast mode [ 1178.154114][ T9229] lo speed is unknown, defaulting to 1000 [ 1178.378360][T26234] bond0: (slave netdevsim1): Releasing backup interface [ 1178.399902][T26234] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1178.417056][T26234] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1178.484855][ T5642] Bluetooth: hci2: command tx timeout [ 1178.547786][T26234] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1178.558880][T26234] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1178.644905][ T9313] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9434'. [ 1178.655672][ T9313] openvswitch: netlink: Unknown nsh attribute 0 [ 1178.807100][T30735] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1178.974675][T13442] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1179.063665][T13442] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1179.103125][T13441] netdevsim netdevsim4 eth4: set [1, 0] type 2 family 0 port 6081 - 0 [ 1179.126321][T26234] bridge_slave_1: left allmulticast mode [ 1179.132554][T26234] bridge_slave_1: left promiscuous mode [ 1179.138501][T26234] bridge0: port 2(bridge_slave_1) entered disabled state [ 1179.152611][T26234] bridge_slave_0: left allmulticast mode [ 1179.158351][T26234] bridge_slave_0: left promiscuous mode [ 1179.165326][T26234] bridge0: port 1(bridge_slave_0) entered disabled state [ 1179.222116][T26234] dvmrp0: left allmulticast mode [ 1179.395099][T26234] bond7 (unregistering): (slave ip6gre2): Releasing backup interface [ 1180.093156][T26234] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1180.104374][T26234] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1180.115614][T26234] bond0 (unregistering): Released all slaves [ 1180.130352][T26234] bond1 (unregistering): (slave lo): Releasing backup interface [ 1180.138755][T26234] bond1 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 1180.153105][T26234] bond1 (unregistering): Released all slaves [ 1180.171551][T26234] bond2 (unregistering): Released all slaves [ 1180.188391][T26234] bond3 (unregistering): (slave vxcan3): Releasing backup interface [ 1180.199058][T26234] bond3 (unregistering): Released all slaves [ 1180.220149][T26234] bond4 (unregistering): Released all slaves [ 1180.238443][T26234] bond5 (unregistering): Released all slaves [ 1180.257946][T26234] bond6 (unregistering): Released all slaves [ 1180.276049][T26234] bond7 (unregistering): Released all slaves [ 1180.305923][T26234] bond8 (unregistering): (slave veth9): Releasing active interface [ 1180.316463][T26234] bond8 (unregistering): Released all slaves [ 1180.337093][T26234] bond9 (unregistering): Released all slaves [ 1180.360011][T26234] bond10 (unregistering): Released all slaves [ 1180.388488][T26234] bond11 (unregistering): Released all slaves [ 1180.489990][ T9229] bridge0: port 1(bridge_slave_0) entered blocking state [ 1180.509246][ T9229] bridge0: port 1(bridge_slave_0) entered disabled state [ 1180.534948][ T9229] bridge_slave_0: entered allmulticast mode [ 1180.554595][ T9229] bridge_slave_0: entered promiscuous mode [ 1180.562845][ T5642] Bluetooth: hci2: command tx timeout [ 1180.582692][ T9229] bridge0: port 2(bridge_slave_1) entered blocking state [ 1180.597049][ T9229] bridge0: port 2(bridge_slave_1) entered disabled state [ 1180.617130][ T9229] bridge_slave_1: entered allmulticast mode [ 1180.635714][ T9229] bridge_slave_1: entered promiscuous mode [ 1180.707546][T26234] tipc: Disabling bearer [ 1180.736672][T26234] tipc: Disabling bearer [ 1180.743532][T26234] tipc: Disabling bearer [ 1180.749342][T26234] tipc: Left network mode [ 1180.770791][ T9229] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1180.784403][ T9229] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1180.877561][ T9229] team0: Port device team_slave_0 added [ 1180.888679][ T9229] team0: Port device team_slave_1 added [ 1180.952862][ T9229] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1180.962554][ T9229] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1180.989321][ T9229] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1181.002529][ T9229] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1181.009521][ T9229] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1181.064626][ T9229] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1181.085930][ T9285] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1181.123298][T26234] IPVS: stopping master sync thread 3407 ... [ 1181.410839][ T9336] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1181.498348][ T9351] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9438'. [ 1181.633909][ T9229] hsr_slave_0: entered promiscuous mode [ 1181.687214][ T9229] hsr_slave_1: entered promiscuous mode [ 1181.747824][ T9229] debugfs: 'hsr0' already exists in 'hsr' [ 1181.770067][ T9229] Cannot create hsr debugfs directory [ 1182.641500][ T5642] Bluetooth: hci2: command tx timeout [ 1182.749260][ T9395] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9449'. [ 1182.783846][ T9395] IPv4: Oversized IP packet from 127.202.26.0 [ 1183.039472][ T9405] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9452'. [ 1183.069064][ T9405] netlink: 24 bytes leftover after parsing attributes in process `syz.3.9452'. [ 1183.142532][ T5289] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1183.164333][ T9411] netlink: 52 bytes leftover after parsing attributes in process `syz.0.9451'. [ 1183.366583][ T9229] netdevsim netdevsim4 eth4 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1183.495169][T26234] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1183.513541][T26234] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1183.532737][T26234] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1183.540309][T26234] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1183.557784][T26234] veth1_macvtap: left promiscuous mode [ 1183.563984][T26234] veth0_macvtap: left promiscuous mode [ 1183.569697][T26234] veth1_vlan: left allmulticast mode [ 1183.576105][T26234] veth1_vlan: left promiscuous mode [ 1183.876503][T26234] team0 (unregistering): Port device macvlan1 removed [ 1184.048000][T26234] team0 (unregistering): Port device team_slave_1 removed [ 1184.083838][T26234] team0 (unregistering): Port device team_slave_0 removed [ 1184.233549][ T9229] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1184.334667][ T9229] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1184.463866][ T9229] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1184.627593][ T9432] netlink: 'syz.0.9458': attribute type 21 has an invalid length. [ 1184.684432][ T9432] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9458'. [ 1184.721438][ T5642] Bluetooth: hci2: command tx timeout [ 1184.776814][ T9432] netlink: 'syz.0.9458': attribute type 21 has an invalid length. [ 1184.785001][T10086] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1184.795952][ T9432] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9458'. [ 1184.819529][T10086] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1184.892373][T10086] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1184.902680][T10086] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1184.983281][T26234] IPVS: stop unused estimator thread 0... [ 1185.058832][ T9374] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1185.165236][ T9229] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1185.230048][ T9229] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1185.268338][ T9229] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1185.349099][ T9229] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1185.376168][ T9229] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1185.449849][ T9229] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1185.495619][ T9229] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1185.617458][ T9229] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1185.727221][ T9466] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 1185.792466][ T9470] netlink: 'syz.3.9464': attribute type 1 has an invalid length. [ 1185.845756][ T9475] netlink: 20 bytes leftover after parsing attributes in process `syz.3.9464'. [ 1185.887839][ T9475] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9464'. [ 1185.942800][ T9480] x_tables: duplicate underflow at hook 1 [ 1186.064738][ T9489] netlink: 'syz.3.9464': attribute type 1 has an invalid length. [ 1186.077279][ T9488] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9467'. [ 1186.097678][ T9470] bond8: entered promiscuous mode [ 1186.111812][ T9470] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1186.199016][ T9488] netlink: 'syz.0.9467': attribute type 2 has an invalid length. [ 1186.276715][ T9470] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1186.302492][ T9470] bond8: (slave ip6tnl3): The slave device specified does not support setting the MAC address [ 1186.316256][ T9470] bond8: (slave ip6tnl3): Setting fail_over_mac to active for active-backup mode [ 1186.356209][ T9470] bond8: (slave ip6tnl3): making interface the new active one [ 1186.384255][ T9470] ip6tnl3: entered promiscuous mode [ 1186.418741][ T9470] bond8: (slave ip6tnl3): Enslaving as an active interface with an up link [ 1186.521617][ T9506] netlink: 'syz.0.9470': attribute type 1 has an invalid length. [ 1186.690098][ T9229] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1186.763631][ T9514] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9473'. [ 1186.800545][ T9229] 8021q: adding VLAN 0 to HW filter on device team0 [ 1186.834935][T26234] bridge0: port 1(bridge_slave_0) entered blocking state [ 1186.842195][T26234] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1186.880048][ T7960] bridge0: port 2(bridge_slave_1) entered blocking state [ 1186.887303][ T7960] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1187.056145][ T9530] netlink: 'syz.1.9477': attribute type 1 has an invalid length. [ 1187.115076][ T9530] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1187.574818][ T9556] openvswitch: netlink: Flow key attr not present in new flow. [ 1187.596984][ T9554] tipc: Failed to remove unknown binding: 66,0,0/0:2734825089/2734825090 [ 1187.647445][ T9554] tipc: Failed to remove unknown binding: 66,0,0/0:2734825089/2734825090 [ 1187.675799][ T9562] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9484'. [ 1187.696255][ T9563] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9481'. [ 1187.702422][ T9562] openvswitch: netlink: Missing key (keys=40, expected=80) [ 1187.732167][ T9563] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9481'. [ 1187.865202][ T9563] gretap0: entered promiscuous mode [ 1187.922204][ T9563] gretap0: left promiscuous mode [ 1188.316895][ T9585] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9487'. [ 1188.873893][ T9612] openvswitch: netlink: Geneve opt len 1 is not a multiple of 4. [ 1188.930365][ T9609] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9494'. [ 1189.469541][ T9229] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1189.507791][ T9623] sctp: [Deprecated]: syz.2.9496 (pid 9623) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1189.507791][ T9623] Use struct sctp_sack_info instead [ 1189.768882][ T9636] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9499'. [ 1190.223675][ T9658] netlink: 'syz.0.9501': attribute type 1 has an invalid length. [ 1191.161596][ T9658] bond1: entered promiscuous mode [ 1191.187937][ T9658] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1191.466877][ T9229] veth0_vlan: entered promiscuous mode [ 1191.515263][ T9229] veth1_vlan: entered promiscuous mode [ 1191.535453][ T9696] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9511'. [ 1191.579713][ T9700] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9508'. [ 1191.595735][ T9696] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9511'. [ 1191.695392][ T9696] netlink: 'syz.1.9511': attribute type 21 has an invalid length. [ 1191.879590][ T9229] veth0_macvtap: entered promiscuous mode [ 1191.937463][ T9229] veth1_macvtap: entered promiscuous mode [ 1191.996485][ T9712] bond2: entered promiscuous mode [ 1192.002993][ T9712] bond2: entered allmulticast mode [ 1192.008601][ T9712] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1192.080223][ T9229] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1192.162658][ T9229] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1192.210277][T13439] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1192.238148][T13439] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1192.266333][T13439] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1192.296685][T13439] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1192.489850][ T9719] netlink: 'syz.0.9514': attribute type 10 has an invalid length. [ 1192.557548][ T9719] macvlan1: entered promiscuous mode [ 1192.580699][ T9719] macvlan1: entered allmulticast mode [ 1192.629187][ T9719] veth1_vlan: entered allmulticast mode [ 1192.680359][ T9719] team0: Port device macvlan1 added [ 1192.720524][ T9729] wg1 speed is unknown, defaulting to 1000 [ 1192.800036][T13443] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1192.818405][ T9729] wg1 speed is unknown, defaulting to 1000 [ 1192.829601][ T9747] netlink: 'syz.2.9521': attribute type 1 has an invalid length. [ 1192.837891][T13443] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1192.848121][ T9736] netlink: 'syz.3.9520': attribute type 16 has an invalid length. [ 1192.857300][ T9736] netlink: 'syz.3.9520': attribute type 17 has an invalid length. [ 1192.904280][ T9729] wg1 speed is unknown, defaulting to 1000 [ 1192.939573][ T9729] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 1192.976846][ T9736] ip6tnl0: left promiscuous mode [ 1193.006314][ T9729] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 1193.024357][ T9729] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 1193.063197][ T9729] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 1193.101150][ T9736] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 1193.110307][ T9736] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1193.159127][ T9736] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1193.177882][ T9736] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1193.194736][ T9736] veth5: left allmulticast mode [ 1193.200483][ T9736] bond0: left promiscuous mode [ 1193.208177][ T9736] vlan0: left promiscuous mode [ 1193.213785][ T9736] bond4: left promiscuous mode [ 1193.218609][ T9736] ip6gretap1: left promiscuous mode [ 1193.229611][ T9736] veth7: left allmulticast mode [ 1193.253241][ T9736] A link change request failed with some changes committed already. Interface geneve2 may have been left with an inconsistent configuration, please check. [ 1193.269401][ T9737] batadv_slave_1: entered promiscuous mode [ 1193.313364][ T9749] bond5: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1193.339726][ T9749] bond5: (slave vxcan3): Setting fail_over_mac to active for active-backup mode [ 1193.370408][ T9749] bond5: (slave vxcan3): making interface the new active one [ 1193.399902][ T9749] bond5: (slave vxcan3): Enslaving as an active interface with an up link [ 1193.470166][ T9757] netlink: 'syz.3.9523': attribute type 8 has an invalid length. [ 1193.476188][ T9747] bond5: (slave vxcan5): The slave device specified does not support setting the MAC address [ 1193.494237][ T9747] bond5: (slave vxcan5): Enslaving as a backup interface with an up link [ 1193.535720][ T9729] wg1 speed is unknown, defaulting to 1000 [ 1193.555069][ T7960] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1193.564955][ T7960] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1193.573009][ T9746] batadv_slave_1: left promiscuous mode [ 1193.598055][ T9729] wg1 speed is unknown, defaulting to 1000 [ 1193.651158][ T9729] wg1 speed is unknown, defaulting to 1000 [ 1193.679574][T13439] bond5: (slave veth11): link status definitely up, 10000 Mbps full duplex [ 1193.725827][T13439] bond5: (slave veth11): making interface the new active one [ 1193.778482][T13439] bond5: active interface up! [ 1193.796687][ T9729] wg1 speed is unknown, defaulting to 1000 [ 1193.803484][T13442] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1193.803803][T13442] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1193.822803][ T5736] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1193.868064][ T9767] veth0_to_bridge: entered promiscuous mode [ 1193.885209][ T9729] wg1 speed is unknown, defaulting to 1000 [ 1193.902528][T13442] ip6_tunnel:  xmit: Local address not yet configured! [ 1193.922997][T13442] ip6_tunnel:  xmit: Local address not yet configured! [ 1193.931175][ T9729] wg1 speed is unknown, defaulting to 1000 [ 1193.932282][T15819] ip6_tunnel:  xmit: Local address not yet configured! [ 1193.967217][ T9773] lo: entered promiscuous mode [ 1193.984322][ T9773] tunl0: entered promiscuous mode [ 1193.995329][ T9773] gre0: entered promiscuous mode [ 1194.031812][ T9773] gretap0: entered promiscuous mode [ 1194.075038][ T9773] erspan0: entered promiscuous mode [ 1194.098862][ T9773] ip_vti0: entered promiscuous mode [ 1194.104439][ T9768] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1194.114973][ T9729] wg1 speed is unknown, defaulting to 1000 [ 1194.127723][ T9729] wg1 speed is unknown, defaulting to 1000 [ 1194.155849][ T9777] __nla_validate_parse: 2 callbacks suppressed [ 1194.155873][ T9777] netlink: 24 bytes leftover after parsing attributes in process `syz.3.9528'. [ 1194.194531][ T9729] wg1 speed is unknown, defaulting to 1000 [ 1194.288455][ T9768] veth0_to_bridge: left promiscuous mode [ 1194.564123][T20331] ip6_tunnel:  xmit: Local address not yet configured! [ 1194.642815][T15819] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1194.652895][ T9804] netlink: 7076 bytes leftover after parsing attributes in process `syz.0.9535'. [ 1194.685662][ T9804] openvswitch: netlink: Flow key attr not present in new flow. [ 1194.783683][ T9814] geneve3: entered promiscuous mode [ 1194.883233][T15819] ip6_tunnel:  xmit: Local address not yet configured! [ 1194.905426][T15819] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1194.930364][ T9819] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1195.267975][ T9831] netlink: 'syz.3.9544': attribute type 10 has an invalid length. [ 1195.406759][ T9831] team0: Port device netdevsim1 removed [ 1195.692000][ T9851] sctp: [Deprecated]: syz.1.9549 (pid 9851) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1195.692000][ T9851] Use struct sctp_sack_info instead [ 1195.790250][ T9862] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9551'. [ 1195.896092][ T9865] netlink: 212348 bytes leftover after parsing attributes in process `syz.3.9554'. [ 1196.105909][ T9878] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 1196.122675][ T9876] netlink: 'syz.1.9557': attribute type 1 has an invalid length. [ 1196.149648][ T9881] veth0_to_bond: entered allmulticast mode [ 1196.208284][ T9876] bond2: entered promiscuous mode [ 1196.214091][ T9876] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1196.224035][ T9884] veth0: entered promiscuous mode [ 1196.270493][ T9876] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1196.289258][ T9876] bond2: (slave vcan1): The slave device specified does not support setting the MAC address [ 1196.301458][ T9876] bond2: (slave vcan1): Setting fail_over_mac to active for active-backup mode [ 1196.392043][ T9876] bond2: (slave vcan1): making interface the new active one [ 1196.431560][ T9876] vcan1: entered promiscuous mode [ 1196.453252][ T9876] bond2: (slave vcan1): Enslaving as an active interface with an up link [ 1196.490278][ T9882] veth0: left promiscuous mode [ 1196.689605][ T9897] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9563'. [ 1196.718620][ T9897] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9563'. [ 1196.839022][ T9909] pim6reg1: entered promiscuous mode [ 1196.859886][ T9909] pim6reg1: entered allmulticast mode [ 1196.897759][ T9915] netlink: 'syz.0.9569': attribute type 2 has an invalid length. [ 1196.919177][ T9917] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9568'. [ 1196.961752][ T9917] nbd: must specify at least one socket [ 1197.396650][ T9932] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9575'. [ 1197.446379][ T9932] netlink: 44 bytes leftover after parsing attributes in process `syz.1.9575'. [ 1197.553201][ T9932] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9575'. [ 1197.576538][ T9932] veth0_macvtap: left promiscuous mode [ 1197.639201][ T9942] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 1198.312204][ T9970] netlink: 'syz.4.9586': attribute type 1 has an invalid length. [ 1199.047413][T10001] netlink: 'syz.4.9593': attribute type 1 has an invalid length. [ 1199.055611][T10001] netlink: 'syz.4.9593': attribute type 1 has an invalid length. [ 1199.065423][T10001] netlink: 'syz.4.9593': attribute type 8 has an invalid length. [ 1199.456665][T10012] openvswitch: netlink: nsh attribute has 5 unknown bytes. [ 1199.873237][T10017] __nla_validate_parse: 5 callbacks suppressed [ 1199.873257][T10017] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9597'. [ 1199.914632][T10019] x_tables: duplicate underflow at hook 2 [ 1199.953336][T10022] netlink: 'syz.1.9599': attribute type 1 has an invalid length. [ 1200.009114][T10023] Bluetooth: MGMT ver 1.23 [ 1200.290765][T10032] netlink: 32 bytes leftover after parsing attributes in process `syz.1.9603'. [ 1200.327227][T10032] syzkaller1: entered promiscuous mode [ 1200.336525][T10032] syzkaller1: entered allmulticast mode [ 1200.509895][T10048] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9608'. [ 1201.067871][T10048] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9608'. [ 1201.122702][T10074] netlink: 144 bytes leftover after parsing attributes in process `syz.3.9611'. [ 1201.214817][T10063] syzkaller0: entered promiscuous mode [ 1201.235130][T10063] syzkaller0: entered allmulticast mode [ 1201.879631][ T5637] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1201.896018][ T5637] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1201.927924][ T5637] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1201.940352][ T5637] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1201.955624][ T5637] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1204.082637][ T5642] Bluetooth: hci4: command tx timeout [ 1204.810722][ C0] ip6_tnl_xmit_ctl: 2 callbacks suppressed [ 1204.810743][ C0] ip6_tunnel:  xmit: Local address not yet configured! [ 1205.013780][T10101] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9617'. [ 1205.268781][T10101] team1: entered promiscuous mode [ 1205.274389][T10101] team1: entered allmulticast mode [ 1205.484169][T10124] netlink: 'syz.0.9620': attribute type 1 has an invalid length. [ 1205.617859][T13439] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1205.634938][T13439] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1205.716456][T10134] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1205.739532][T10124] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1205.794334][T10128] bond3: (slave veth3): Enslaving as an active interface with a down link [ 1205.813220][T10129] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1205.820557][T10129] bond3: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 1206.124440][T13439] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1206.174631][ T5642] Bluetooth: hci4: command tx timeout [ 1206.189037][T13439] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1206.299875][T10148] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9626'. [ 1206.335766][T10096] lo speed is unknown, defaulting to 1000 [ 1206.437997][T13439] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1206.448773][T13439] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1206.562285][T10096] wg1 speed is unknown, defaulting to 1000 [ 1206.690892][T10162] netlink: 56 bytes leftover after parsing attributes in process `syz.1.9631'. [ 1206.694604][T13439] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1206.722347][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1206.750312][T13439] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1206.939931][T10162] bond3 (unregistering): Released all slaves [ 1207.452883][T10182] syz_tun: entered allmulticast mode [ 1207.479237][T13437] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1207.728531][T13443] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1207.816323][T10195] syzkaller0: entered promiscuous mode [ 1207.836234][T10195] syzkaller0: entered allmulticast mode [ 1207.844205][T10197] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9639'. [ 1207.993976][T10195] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 1208.017026][T13437] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1208.242579][ T5642] Bluetooth: hci4: command tx timeout [ 1208.288643][T13437] netdevsim netdevsim3 eth4: set [1, 0] type 2 family 0 port 6081 - 0 [ 1208.550819][T13439] vlan1: left allmulticast mode [ 1208.556764][T13439] geneve0: left allmulticast mode [ 1208.568702][T10235] netlink: 56 bytes leftover after parsing attributes in process `syz.2.9646'. [ 1208.578762][T13439] vlan1: left promiscuous mode [ 1208.584452][T13439] geneve0: left promiscuous mode [ 1208.590252][T13439] bridge0: port 3(vlan1) entered disabled state [ 1208.625504][T13439] bridge_slave_1: left allmulticast mode [ 1208.635339][T13439] bridge_slave_1: left promiscuous mode [ 1208.648089][T13439] bridge0: port 2(bridge_slave_1) entered disabled state [ 1208.710008][T13439] bridge_slave_0: left allmulticast mode [ 1208.727778][T13439] bridge_slave_0: left promiscuous mode [ 1208.740875][T13439] bridge0: port 1(bridge_slave_0) entered disabled state [ 1209.233623][T10252] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9649'. [ 1209.266811][T10252] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9649'. [ 1209.278180][T10252] openvswitch: netlink: Invalid VLAN frame [ 1209.396837][T13439] bond4 (unregistering): (slave ip6gretap1): Releasing active interface [ 1209.458223][T10256] netlink: 'syz.1.9650': attribute type 21 has an invalid length. [ 1209.470488][T13439] bond8 (unregistering): (slave ip6tnl3): Releasing backup interface [ 1209.485059][T13439] ip6tnl3 (unregistering): left promiscuous mode [ 1209.492299][T10256] netlink: 128 bytes leftover after parsing attributes in process `syz.1.9650'. [ 1209.512570][T10257] netlink: 'syz.1.9650': attribute type 21 has an invalid length. [ 1209.520787][T10257] netlink: 128 bytes leftover after parsing attributes in process `syz.1.9650'. [ 1209.710190][T13439] bond1 (unregistering): (slave bridge1): Releasing active interface [ 1209.967318][T13439] bond1 (unregistering): Released all slaves [ 1209.983727][T13439] bond2 (unregistering): Released all slaves [ 1210.000773][T13439] bond3 (unregistering): Released all slaves [ 1210.048473][T13439] bond0 (unregistering): Released all slaves [ 1210.069024][T13439] team0: Port device vlan0 removed [ 1210.081400][T13439] bond4 (unregistering): Released all slaves [ 1210.105150][T13439] bond5 (unregistering): (slave veth11): Releasing active interface [ 1210.119953][T13439] bond5 (unregistering): Released all slaves [ 1210.144583][T13439] bond6 (unregistering): Released all slaves [ 1210.168585][T13439] bond7 (unregistering): Released all slaves [ 1210.188459][T13439] bond8 (unregistering): Released all slaves [ 1210.216396][T10235] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 1210.221958][ T5289] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1210.296007][T10256] netlink: 'syz.1.9650': attribute type 4 has an invalid length. [ 1210.311130][T10256] netlink: 'syz.1.9650': attribute type 5 has an invalid length. [ 1210.323941][ T5642] Bluetooth: hci4: command tx timeout [ 1210.327094][T10256] netlink: 3 bytes leftover after parsing attributes in process `syz.1.9650'. [ 1210.348747][T10257] netlink: 'syz.1.9650': attribute type 4 has an invalid length. [ 1210.357903][T10257] netlink: 'syz.1.9650': attribute type 5 has an invalid length. [ 1210.366357][T10257] netlink: 3 bytes leftover after parsing attributes in process `syz.1.9650'. [ 1210.479669][T10096] bridge0: port 1(bridge_slave_0) entered blocking state [ 1210.516217][T10096] bridge0: port 1(bridge_slave_0) entered disabled state [ 1210.562495][T10096] bridge_slave_0: entered allmulticast mode [ 1210.577096][T10096] bridge_slave_0: entered promiscuous mode [ 1210.671671][T10096] bridge0: port 2(bridge_slave_1) entered blocking state [ 1210.685702][T10096] bridge0: port 2(bridge_slave_1) entered disabled state [ 1210.698195][T10096] bridge_slave_1: entered allmulticast mode [ 1210.737063][T10096] bridge_slave_1: entered promiscuous mode [ 1210.894982][T13439] : left promiscuous mode [ 1211.118255][T10096] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1211.322943][T10096] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1211.364307][T13439] tipc: Disabling bearer [ 1211.379476][T13439] tipc: Disabling bearer [ 1211.403977][T13439] tipc: Left network mode [ 1211.747996][T10096] team0: Port device team_slave_0 added [ 1211.777469][T10096] team0: Port device team_slave_1 added [ 1212.016916][T10096] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1212.061731][T10096] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1212.139594][T10096] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1212.230115][T10096] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1212.292317][T10096] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1212.326935][T10325] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9665'. [ 1212.353237][T10096] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1212.610763][T10337] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9669'. [ 1212.655793][T10337] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9669'. [ 1212.695187][T10096] hsr_slave_0: entered promiscuous mode [ 1212.707666][T10343] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9670'. [ 1212.729382][T10096] hsr_slave_1: entered promiscuous mode [ 1212.745105][T10096] debugfs: 'hsr0' already exists in 'hsr' [ 1212.758188][T10096] Cannot create hsr debugfs directory [ 1212.810839][ T5289] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1212.940189][T10350] netlink: 'syz.2.9674': attribute type 4 has an invalid length. [ 1212.949217][T10350] netlink: 17 bytes leftover after parsing attributes in process `syz.2.9674'. [ 1212.999269][T10351] netlink: 14601 bytes leftover after parsing attributes in process `syz.2.9674'. [ 1213.074748][T10355] netlink: 640 bytes leftover after parsing attributes in process `syz.0.9673'. [ 1213.111283][T10355] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 1213.159229][T10358] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9676'. [ 1213.237258][T10358] ip6gre1: entered allmulticast mode [ 1213.528137][T10368] netlink: 'syz.0.9681': attribute type 5 has an invalid length. [ 1214.057989][T10395] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 1214.068867][T13439] hsr_slave_0: left promiscuous mode [ 1214.078259][T13439] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1214.106594][T13439] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1214.155398][T13439] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1214.201584][T13439] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1214.250675][T13439] veth1_macvtap: left promiscuous mode [ 1214.264388][T13439] veth0_macvtap: left promiscuous mode [ 1214.937504][T13439] team0 (unregistering): Port device team_slave_1 removed [ 1214.959691][T13439] team0 (unregistering): Port device team_slave_0 removed [ 1215.153437][T10096] netdevsim netdevsim3 eth4 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1215.236554][ T5289] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1215.644904][T10425] __nla_validate_parse: 3 callbacks suppressed [ 1215.644926][T10425] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9695'. [ 1215.707072][T10096] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1215.819970][T10435] xt_socket: unknown flags 0x50 [ 1216.051689][T10439] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9697'. [ 1216.203696][T10096] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1216.645038][T10096] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1216.797965][T13439] IPVS: stop unused estimator thread 0... [ 1217.183175][T10482] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9706'. [ 1217.447615][T10490] bond1 (unregistering): Released all slaves [ 1217.809822][T10510] netlink: 'syz.4.9711': attribute type 1 has an invalid length. [ 1217.830005][T10510] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9711'. [ 1217.842722][T10510] netlink: 'syz.4.9711': attribute type 1 has an invalid length. [ 1218.129248][T10511] bond1: (slave bridge1): Enslaving as a backup interface with an up link [ 1218.147613][T10515] macvlan2: entered promiscuous mode [ 1218.154479][T10515] macvlan2: entered allmulticast mode [ 1218.162007][T10515] bond1: entered promiscuous mode [ 1218.167230][T10515] bridge1: entered promiscuous mode [ 1218.188532][T10515] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1218.201544][T10515] bond1: left promiscuous mode [ 1218.206771][T10515] bridge1: left promiscuous mode [ 1218.536204][T10535] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9717'. [ 1218.553583][T10533] netlink: 20 bytes leftover after parsing attributes in process `syz.4.9716'. [ 1218.591803][T10534] netlink: 20 bytes leftover after parsing attributes in process `syz.4.9716'. [ 1218.617193][T10096] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1218.666895][T10096] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1218.680324][T10537] sctp: [Deprecated]: syz.0.9717 (pid 10537) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1218.680324][T10537] Use struct sctp_sack_info instead [ 1218.703108][T10096] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1218.717125][T10096] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1218.732958][T10535] netlink: 'syz.0.9717': attribute type 11 has an invalid length. [ 1218.743097][T10096] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1218.764296][T10535] netlink: 199828 bytes leftover after parsing attributes in process `syz.0.9717'. [ 1218.787595][T10096] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1218.806744][T10096] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1218.848898][T10096] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1219.237400][T10565] netlink: 208240 bytes leftover after parsing attributes in process `syz.4.9722'. [ 1219.313718][T10096] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1219.417313][T10096] 8021q: adding VLAN 0 to HW filter on device team0 [ 1219.521112][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 1219.528600][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1219.639732][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 1219.647391][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1219.726983][T10581] pim6reg: entered allmulticast mode [ 1220.218189][T10605] netlink: 60 bytes leftover after parsing attributes in process `syz.4.9729'. [ 1220.546602][T10618] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 1220.756027][T10626] bond0: (slave bond_slave_1): Releasing backup interface [ 1221.140657][T10642] syzkaller0: entered promiscuous mode [ 1221.161257][T10642] syzkaller0: entered allmulticast mode [ 1221.868833][T10096] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1222.140816][T10096] veth0_vlan: entered promiscuous mode [ 1222.194160][T10096] veth1_vlan: entered promiscuous mode [ 1222.298575][T10096] veth0_macvtap: entered promiscuous mode [ 1222.320094][T10096] veth1_macvtap: entered promiscuous mode [ 1222.446327][T10096] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1222.500671][T10096] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1222.556597][T26234] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1222.679536][T26234] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1222.707249][T26234] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1222.753767][T26234] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1223.057430][ T7960] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1223.100889][ T7960] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1223.202522][T10719] xt_NFQUEUE: number of total queues is 0 [ 1223.620166][T10736] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9753'. [ 1223.788288][T10717] bond2: left promiscuous mode [ 1223.810586][T10717] vcan1: left promiscuous mode [ 1223.845755][T10717] team1: left promiscuous mode [ 1223.851746][T10717] 8021q: adding VLAN 0 to HW filter on device team1 [ 1223.892299][ T5736] wg1 speed is unknown, defaulting to 1000 [ 1223.952783][ T7960] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1223.983630][ T7960] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1224.146087][T10744] batadv_slave_0: Caught tx_queue_len zero misconfig [ 1224.781609][T10770] netlink: 232 bytes leftover after parsing attributes in process `syz.2.9763'. [ 1224.808451][T10770] netlink: 232 bytes leftover after parsing attributes in process `syz.2.9763'. [ 1224.907083][T10775] netlink: 'syz.4.9764': attribute type 4 has an invalid length. [ 1224.928536][T10775] netlink: 17 bytes leftover after parsing attributes in process `syz.4.9764'. [ 1225.090544][T10787] netlink: 'syz.1.9767': attribute type 32 has an invalid length. [ 1225.101317][T10787] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9767'. [ 1225.140547][T10793] netlink: 'syz.3.9769': attribute type 2 has an invalid length. [ 1225.246404][T10796] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9770'. [ 1225.278878][T10787] bond3: Setting coupled_control to off (0) [ 1225.318504][T10793] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 1225.399991][T10796] lo: Caught tx_queue_len zero misconfig [ 1225.535523][T10807] netlink: 1 bytes leftover after parsing attributes in process `syz.1.9773'. [ 1225.568027][T10807] xt_policy: neither incoming nor outgoing policy selected [ 1226.022082][T10832] syzkaller0: entered promiscuous mode [ 1226.041192][T10832] syzkaller0: entered allmulticast mode [ 1226.107833][T10832] PF_CAN: dropped non conform CAN XL skbuff: dev type 280, len 40 [ 1226.446675][T10848] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 1226.469247][T10848] netlink: 40 bytes leftover after parsing attributes in process `syz.4.9785'. [ 1226.683628][T10855] xt_hashlimit: size too large, truncated to 1048576 [ 1226.918836][T10866] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9790'. [ 1227.166580][T10879] syzkaller1: entered promiscuous mode [ 1227.188576][T10879] syzkaller1: entered allmulticast mode [ 1227.297053][T10885] syzkaller1: left promiscuous mode [ 1227.317555][T10885] syzkaller1: left allmulticast mode [ 1227.691473][T10899] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9798'. [ 1228.023957][T10908] The dccp option matching is deprecated and scheduled to be removed in 2027. [ 1228.023957][T10908] Please contact the netfilter-devel mailing list or update your nftables rules. [ 1228.360540][T10927] netlink: 'syz.4.9806': attribute type 14 has an invalid length. [ 1228.824885][T10948] workqueue: Failed to create a rescuer kthread for wq "nfc5_nci_cmd_wq": -EINTR [ 1228.899632][ T30] audit: type=1804 audit(1779478728.324:28): pid=10953 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.9813" name="/newroot/106/cgroup.controllers" dev="tmpfs" ino=559 res=1 errno=0 [ 1229.058049][ T30] audit: type=1800 audit(1779478728.364:29): pid=10953 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.9813" name="cgroup.controllers" dev="tmpfs" ino=559 res=0 errno=0 [ 1229.418434][T10977] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1229.450354][T10976] netlink: 116 bytes leftover after parsing attributes in process `syz.2.9817'. [ 1229.503348][T10976] netlink: 116 bytes leftover after parsing attributes in process `syz.2.9817'. [ 1229.862093][T10995] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9822'. [ 1229.953061][ T5642] block nbd7: Receive control failed (result -107) [ 1230.058018][T11005] netlink: 'syz.0.9825': attribute type 11 has an invalid length. [ 1230.067005][T11005] netlink: 224 bytes leftover after parsing attributes in process `syz.0.9825'. [ 1230.283928][T11013] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1230.291686][T11013] IPv6: NLM_F_CREATE should be set when creating new route [ 1230.315832][T11013] netlink: 20 bytes leftover after parsing attributes in process `syz.2.9827'. [ 1230.354609][T11016] netlink: 'syz.1.9829': attribute type 20 has an invalid length. [ 1230.369572][T11016] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9829'. [ 1230.476349][T11016] netlink: 'syz.1.9829': attribute type 20 has an invalid length. [ 1230.477730][ T13] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1230.514966][T11016] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9829'. [ 1230.531797][ T7959] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1230.556247][T11018] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1230.618351][ T7959] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1230.679480][ T7959] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1230.958775][T11032] netlink: 'syz.0.9834': attribute type 1 has an invalid length. [ 1231.778183][T11070] x_tables: duplicate underflow at hook 2 [ 1232.477626][T11104] netlink: 155140 bytes leftover after parsing attributes in process `syz.2.9850'. [ 1232.801704][T11109] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9852'. [ 1232.903960][T11117] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9854'. [ 1233.407311][T11132] netlink: 'syz.0.9857': attribute type 1 has an invalid length. [ 1233.499309][T11124] bond4: (slave ip_vti0): Device is not bonding slave [ 1233.525439][T11124] bond4: option active_slave: invalid value (ip_vti0) [ 1233.565879][T11124] bond4 (unregistering): Released all slaves [ 1233.710335][T11133] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1234.068802][T11148] openvswitch: netlink: nsh attr 13535 is out of range max 3 [ 1234.527500][T11162] netlink: 830 bytes leftover after parsing attributes in process `syz.2.9865'. [ 1234.609047][T11162] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9865'. [ 1234.685848][T11175] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9867'. [ 1234.810607][T11175] bond0: entered promiscuous mode [ 1234.835526][T11175] bond_slave_0: entered promiscuous mode [ 1234.861806][T11175] bond_slave_1: entered promiscuous mode [ 1234.908099][T11175] bond0: left promiscuous mode [ 1234.935281][T11175] bond_slave_0: left promiscuous mode [ 1234.956334][T11175] bond_slave_1: left promiscuous mode [ 1235.207142][T11191] netlink: 'syz.1.9872': attribute type 1 has an invalid length. [ 1235.274012][T11191] netlink: 'syz.1.9872': attribute type 3 has an invalid length. [ 1235.316979][T11191] netlink: 224 bytes leftover after parsing attributes in process `syz.1.9872'. [ 1235.338221][T11198] netlink: 88 bytes leftover after parsing attributes in process `syz.0.9874'. [ 1235.374476][T11198] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9874'. [ 1235.417653][T11198] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9874'. [ 1235.533292][T11203] bond4: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 1235.572140][T11203] bond4 (unregistering): Released all slaves [ 1235.845438][T11207] bond4: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 1235.927285][T11207] bond4 (unregistering): Released all slaves [ 1236.028087][T11219] tipc: Enabling of bearer rejected, failed to enable media [ 1236.047316][T11224] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9880'. [ 1236.100037][T11224] netlink: 224 bytes leftover after parsing attributes in process `syz.2.9880'. [ 1236.158740][T11224] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9880'. [ 1236.358694][T11237] openvswitch: netlink: IPv4 tun info is not correct [ 1236.713162][T11253] veth0: entered promiscuous mode [ 1236.745179][ T30] audit: type=1804 audit(1779478736.174:30): pid=11256 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.9887" name="/newroot/104/cgroup.controllers" dev="tmpfs" ino=548 res=1 errno=0 [ 1236.820071][ T30] audit: type=1800 audit(1779478736.174:31): pid=11256 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.9887" name="cgroup.controllers" dev="tmpfs" ino=548 res=0 errno=0 [ 1237.084693][T11273] netlink: 'syz.0.9890': attribute type 5 has an invalid length. [ 1237.318503][T11281] openvswitch: netlink: Flow actions attr not present in new flow. [ 1237.363798][T11248] veth0: left promiscuous mode [ 1237.943465][T11290] syzkaller0: entered promiscuous mode [ 1237.962921][T11290] syzkaller0: entered allmulticast mode [ 1238.317008][T11313] netlink: 'syz.0.9902': attribute type 1 has an invalid length. [ 1244.111925][T11334] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 1244.116780][T11340] xt_bpf: check failed: parse error [ 1244.199946][T11336] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 1244.753035][T11376] __nla_validate_parse: 7 callbacks suppressed [ 1244.753058][T11376] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9920'. [ 1244.800883][T11376] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9920'. [ 1245.009364][T11389] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1245.018675][T11395] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9924'. [ 1245.088162][T11395] netlink: 224 bytes leftover after parsing attributes in process `syz.0.9924'. [ 1245.140646][T11395] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9924'. [ 1245.156961][T11405] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9925'. [ 1245.167401][T11397] lo speed is unknown, defaulting to 1000 [ 1245.245927][T11397] wg1 speed is unknown, defaulting to 1000 [ 1245.452952][T11421] netlink: 212312 bytes leftover after parsing attributes in process `syz.3.9927'. [ 1246.327655][T11455] "syz.1.9931" (11455) uses obsolete ecb(arc4) skcipher [ 1246.596770][T11462] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9934'. [ 1246.620202][T11462] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9934'. [ 1247.387518][ T5642] Bluetooth: hci4: link tx timeout [ 1247.394266][ T5642] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1247.926500][T11388] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1247.998116][ T5637] Bluetooth: hci4: link tx timeout [ 1248.008074][ T5637] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1248.166453][T11479] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9938'. [ 1248.409598][T11492] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1248.417109][T11492] IPv6: NLM_F_CREATE should be set when creating new route [ 1248.424745][T11492] IPv6: NLM_F_CREATE should be set when creating new route [ 1248.457363][T11485] bond4: entered promiscuous mode [ 1248.462693][T11485] bond4: entered allmulticast mode [ 1248.468431][T11485] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1248.733002][T11500] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1248.977346][ T7960] [ 1248.979766][ T7960] ====================================================== [ 1248.986814][ T7960] WARNING: possible circular locking dependency detected [ 1248.993876][ T7960] syzkaller #0 Not tainted [ 1248.998324][ T7960] ------------------------------------------------------ [ 1249.005858][ T7960] kworker/u8:13/7960 is trying to acquire lock: [ 1249.012228][ T7960] ffffffff8ea85420 (fs_reclaim){+.+.}-{0:0}, at: kmem_cache_alloc_node_noprof+0x4a/0x690 [ 1249.022495][ T7960] [ 1249.022495][ T7960] but task is already holding lock: [ 1249.030875][ T7960] ffff888033e4dd60 (k-sk_lock-AF_INET){+.+.}-{0:0}, at: inet_stream_connect+0x51/0xa0 [ 1249.040604][ T7960] [ 1249.040604][ T7960] which lock already depends on the new lock. [ 1249.040604][ T7960] [ 1249.051332][ T7960] [ 1249.051332][ T7960] the existing dependency chain (in reverse order) is: [ 1249.060388][ T7960] [ 1249.060388][ T7960] -> #7 (k-sk_lock-AF_INET){+.+.}-{0:0}: [ 1249.068452][ T7960] lock_sock_nested+0x41/0x100 [ 1249.073796][ T7960] mptcp_sendmsg_fastopen+0x128/0x580 [ 1249.079877][ T7960] mptcp_sendmsg+0x1b0c/0x1dc0 [ 1249.085237][ T7960] ____sys_sendmsg+0x80a/0x9f0 [ 1249.090633][ T7960] ___sys_sendmsg+0x2a5/0x360 [ 1249.095882][ T7960] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1249.101396][ T7960] do_syscall_64+0x15f/0xf80 [ 1249.106558][ T7960] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1249.113402][ T7960] [ 1249.113402][ T7960] -> #6 (sk_lock-AF_INET){+.+.}-{0:0}: [ 1249.121368][ T7960] lock_sock_nested+0x41/0x100 [ 1249.126792][ T7960] inet_shutdown+0x6a/0x390 [ 1249.132030][ T7960] nbd_mark_nsock_dead+0x2e9/0x560 [ 1249.137695][ T7960] recv_work+0x1c2e/0x1d40 [ 1249.142916][ T7960] process_scheduled_works+0xb5d/0x1860 [ 1249.149204][ T7960] worker_thread+0xa53/0xfc0 [ 1249.154339][ T7960] kthread+0x389/0x470 [ 1249.158974][ T7960] ret_from_fork+0x514/0xb70 [ 1249.164383][ T7960] ret_from_fork_asm+0x1a/0x30 [ 1249.169710][ T7960] [ 1249.169710][ T7960] -> #5 (&nsock->tx_lock){+.+.}-{4:4}: [ 1249.177586][ T7960] __mutex_lock+0x1a3/0x1550 [ 1249.182725][ T7960] nbd_queue_rq+0x37b/0x1100 [ 1249.187866][ T7960] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 1249.193980][ T7960] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 1249.200892][ T7960] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 1249.207436][ T7960] blk_mq_run_hw_queue+0x348/0x4f0 [ 1249.213100][ T7960] blk_mq_dispatch_list+0xd16/0xe10 [ 1249.218975][ T7960] blk_mq_flush_plug_list+0x48d/0x570 [ 1249.224918][ T7960] __blk_flush_plug+0x3ed/0x4d0 [ 1249.230433][ T7960] __submit_bio+0x28d/0x580 [ 1249.235497][ T7960] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 1249.241740][ T7960] block_read_full_folio+0x599/0x830 [ 1249.247573][ T7960] filemap_read_folio+0x137/0x3b0 [ 1249.253641][ T7960] do_read_cache_folio+0x358/0x590 [ 1249.259309][ T7960] read_part_sector+0xb6/0x2b0 [ 1249.265236][ T7960] adfspart_check_ICS+0xb1/0x960 [ 1249.270995][ T7960] bdev_disk_changed+0x817/0x1770 [ 1249.276839][ T7960] blkdev_get_whole+0x380/0x510 [ 1249.282352][ T7960] bdev_open+0x31e/0xd30 [ 1249.287170][ T7960] blkdev_open+0x470/0x610 [ 1249.292262][ T7960] do_dentry_open+0x785/0x14e0 [ 1249.297589][ T7960] vfs_open+0x3b/0x340 [ 1249.302380][ T7960] path_openat+0x2e08/0x3860 [ 1249.307788][ T7960] do_file_open+0x23e/0x4a0 [ 1249.313012][ T7960] do_sys_openat2+0x113/0x200 [ 1249.318352][ T7960] __x64_sys_openat+0x138/0x170 [ 1249.323764][ T7960] do_syscall_64+0x15f/0xf80 [ 1249.328935][ T7960] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1249.335463][ T7960] [ 1249.335463][ T7960] -> #4 (&cmd->lock){+.+.}-{4:4}: [ 1249.342873][ T7960] __mutex_lock+0x1a3/0x1550 [ 1249.348101][ T7960] nbd_queue_rq+0xc6/0x1100 [ 1249.353163][ T7960] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 1249.359438][ T7960] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 1249.366316][ T7960] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 1249.372856][ T7960] blk_mq_run_hw_queue+0x348/0x4f0 [ 1249.378567][ T7960] blk_mq_dispatch_list+0xd16/0xe10 [ 1249.384342][ T7960] blk_mq_flush_plug_list+0x48d/0x570 [ 1249.390552][ T7960] __blk_flush_plug+0x3ed/0x4d0 [ 1249.396402][ T7960] __submit_bio+0x28d/0x580 [ 1249.401463][ T7960] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 1249.407740][ T7960] block_read_full_folio+0x599/0x830 [ 1249.413867][ T7960] filemap_read_folio+0x137/0x3b0 [ 1249.419486][ T7960] do_read_cache_folio+0x358/0x590 [ 1249.425168][ T7960] read_part_sector+0xb6/0x2b0 [ 1249.430762][ T7960] adfspart_check_ICS+0xb1/0x960 [ 1249.436343][ T7960] bdev_disk_changed+0x817/0x1770 [ 1249.442227][ T7960] blkdev_get_whole+0x380/0x510 [ 1249.448237][ T7960] bdev_open+0x31e/0xd30 [ 1249.453280][ T7960] blkdev_open+0x470/0x610 [ 1249.458243][ T7960] do_dentry_open+0x785/0x14e0 [ 1249.463559][ T7960] vfs_open+0x3b/0x340 [ 1249.468186][ T7960] path_openat+0x2e08/0x3860 [ 1249.473338][ T7960] do_file_open+0x23e/0x4a0 [ 1249.478399][ T7960] do_sys_openat2+0x113/0x200 [ 1249.483969][ T7960] __x64_sys_openat+0x138/0x170 [ 1249.489452][ T7960] do_syscall_64+0x15f/0xf80 [ 1249.494855][ T7960] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1249.501289][ T7960] [ 1249.501289][ T7960] -> #3 (set->srcu){.+.+}-{0:0}: [ 1249.509346][ T7960] __synchronize_srcu+0xca/0x300 [ 1249.515256][ T7960] elevator_switch+0x1e8/0x7a0 [ 1249.520651][ T7960] elevator_change+0x2cc/0x450 [ 1249.526232][ T7960] elevator_set_default+0x36c/0x430 [ 1249.532280][ T7960] blk_register_queue+0x3e9/0x4e0 [ 1249.537866][ T7960] __add_disk+0x677/0xd50 [ 1249.542748][ T7960] add_disk_fwnode+0xfb/0x480 [ 1249.547975][ T7960] nbd_dev_add+0x72c/0xb50 [ 1249.552933][ T7960] nbd_init+0x168/0x1f0 [ 1249.557804][ T7960] do_one_initcall+0x250/0x870 [ 1249.563114][ T7960] do_initcall_level+0x104/0x190 [ 1249.568596][ T7960] do_initcalls+0x59/0xa0 [ 1249.573643][ T7960] kernel_init_freeable+0x2a6/0x3e0 [ 1249.579397][ T7960] kernel_init+0x1d/0x1d0 [ 1249.584299][ T7960] ret_from_fork+0x514/0xb70 [ 1249.589438][ T7960] ret_from_fork_asm+0x1a/0x30 [ 1249.595009][ T7960] [ 1249.595009][ T7960] -> #2 (&q->elevator_lock){+.+.}-{4:4}: [ 1249.603040][ T7960] __mutex_lock+0x1a3/0x1550 [ 1249.608191][ T7960] elevator_change+0x1b3/0x450 [ 1249.614102][ T7960] elevator_set_none+0xb5/0x140 [ 1249.619612][ T7960] blk_mq_update_nr_hw_queues+0x5e7/0x1a60 [ 1249.626058][ T7960] nbd_start_device+0x17f/0xb10 [ 1249.631460][ T7960] nbd_genl_connect+0x165b/0x1cf0 [ 1249.637035][ T7960] genl_family_rcv_msg_doit+0x22a/0x330 [ 1249.643388][ T7960] genl_rcv_msg+0x61c/0x7a0 [ 1249.648871][ T7960] netlink_rcv_skb+0x232/0x4b0 [ 1249.654883][ T7960] genl_rcv+0x28/0x40 [ 1249.659790][ T7960] netlink_unicast+0x75c/0x8e0 [ 1249.665680][ T7960] netlink_sendmsg+0x813/0xb40 [ 1249.671015][ T7960] ____sys_sendmsg+0x972/0x9f0 [ 1249.676431][ T7960] ___sys_sendmsg+0x2a5/0x360 [ 1249.682260][ T7960] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1249.687742][ T7960] do_syscall_64+0x15f/0xf80 [ 1249.692976][ T7960] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1249.699441][ T7960] [ 1249.699441][ T7960] -> #1 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 1249.708078][ T7960] blk_alloc_queue+0x546/0x680 [ 1249.713496][ T7960] __blk_mq_alloc_disk+0x197/0x390 [ 1249.719157][ T7960] nbd_dev_add+0x499/0xb50 [ 1249.724125][ T7960] nbd_init+0x168/0x1f0 [ 1249.728856][ T7960] do_one_initcall+0x250/0x870 [ 1249.734240][ T7960] do_initcall_level+0x104/0x190 [ 1249.739736][ T7960] do_initcalls+0x59/0xa0 [ 1249.744615][ T7960] kernel_init_freeable+0x2a6/0x3e0 [ 1249.750551][ T7960] kernel_init+0x1d/0x1d0 [ 1249.755427][ T7960] ret_from_fork+0x514/0xb70 [ 1249.760559][ T7960] ret_from_fork_asm+0x1a/0x30 [ 1249.765873][ T7960] [ 1249.765873][ T7960] -> #0 (fs_reclaim){+.+.}-{0:0}: [ 1249.773212][ T7960] __lock_acquire+0x15a5/0x2cf0 [ 1249.778602][ T7960] lock_acquire+0x106/0x350 [ 1249.783655][ T7960] fs_reclaim_acquire+0x71/0x100 [ 1249.789140][ T7960] kmem_cache_alloc_node_noprof+0x4a/0x690 [ 1249.795493][ T7960] __alloc_skb+0x1d0/0x7d0 [ 1249.800544][ T7960] tcp_stream_alloc_skb+0x3f/0x580 [ 1249.806192][ T7960] tcp_connect+0x15a9/0x53a0 [ 1249.811318][ T7960] tcp_v4_connect+0x10f7/0x19b0 [ 1249.816715][ T7960] __inet_stream_connect+0x25a/0xdd0 [ 1249.822889][ T7960] inet_stream_connect+0x66/0xa0 [ 1249.828363][ T7960] kernel_connect+0x141/0x1c0 [ 1249.833666][ T7960] rds_tcp_conn_path_connect+0x6f6/0x930 [ 1249.839862][ T7960] rds_connect_worker+0x1d8/0x290 [ 1249.845532][ T7960] process_scheduled_works+0xb5d/0x1860 [ 1249.851879][ T7960] worker_thread+0xa53/0xfc0 [ 1249.857014][ T7960] kthread+0x389/0x470 [ 1249.861648][ T7960] ret_from_fork+0x514/0xb70 [ 1249.866832][ T7960] ret_from_fork_asm+0x1a/0x30 [ 1249.872140][ T7960] [ 1249.872140][ T7960] other info that might help us debug this: [ 1249.872140][ T7960] [ 1249.882466][ T7960] Chain exists of: [ 1249.882466][ T7960] fs_reclaim --> sk_lock-AF_INET --> k-sk_lock-AF_INET [ 1249.882466][ T7960] [ 1249.895280][ T7960] Possible unsafe locking scenario: [ 1249.895280][ T7960] [ 1249.902756][ T7960] CPU0 CPU1 [ 1249.908133][ T7960] ---- ---- [ 1249.913606][ T7960] lock(k-sk_lock-AF_INET); [ 1249.918218][ T7960] lock(sk_lock-AF_INET); [ 1249.925179][ T7960] lock(k-sk_lock-AF_INET); [ 1249.932316][ T7960] lock(fs_reclaim); [ 1249.936334][ T7960] [ 1249.936334][ T7960] *** DEADLOCK *** [ 1249.936334][ T7960] [ 1249.944583][ T7960] 4 locks held by kworker/u8:13/7960: [ 1249.950226][ T7960] #0: ffff88807f172140 ((wq_completion)krds_cp_wq#16/0#6){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 1249.962265][ T7960] #1: ffffc90005947c40 ((work_completion)(&(&cp->cp_conn_w)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 1249.975193][ T7960] #2: ffff88806a1fb980 (&tc->t_conn_path_lock){+.+.}-{4:4}, at: rds_tcp_conn_path_connect+0x1cc/0x930 [ 1249.986311][ T7960] #3: ffff888033e4dd60 (k-sk_lock-AF_INET){+.+.}-{0:0}, at: inet_stream_connect+0x51/0xa0 [ 1249.996377][ T7960] [ 1249.996377][ T7960] stack backtrace: [ 1250.002279][ T7960] CPU: 1 UID: 0 PID: 7960 Comm: kworker/u8:13 Not tainted syzkaller #0 PREEMPT(full) [ 1250.002300][ T7960] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1250.002313][ T7960] Workqueue: krds_cp_wq#16/0 rds_connect_worker [ 1250.002336][ T7960] Call Trace: [ 1250.002345][ T7960] [ 1250.002354][ T7960] dump_stack_lvl+0xe8/0x150 [ 1250.002374][ T7960] print_circular_bug+0x2e1/0x300 [ 1250.002400][ T7960] check_noncircular+0x12e/0x150 [ 1250.002426][ T7960] __lock_acquire+0x15a5/0x2cf0 [ 1250.002451][ T7960] ? __lock_acquire+0x6b5/0x2cf0 [ 1250.002472][ T7960] ? kmem_cache_alloc_node_noprof+0x4a/0x690 [ 1250.002495][ T7960] lock_acquire+0x106/0x350 [ 1250.002512][ T7960] ? kmem_cache_alloc_node_noprof+0x4a/0x690 [ 1250.002537][ T7960] ? check_noncircular+0xda/0x150 [ 1250.002562][ T7960] fs_reclaim_acquire+0x71/0x100 [ 1250.002587][ T7960] ? kmem_cache_alloc_node_noprof+0x4a/0x690 [ 1250.002610][ T7960] kmem_cache_alloc_node_noprof+0x4a/0x690 [ 1250.002634][ T7960] ? __alloc_skb+0x1d0/0x7d0 [ 1250.002656][ T7960] ? ipv4_default_advmss+0x20/0x340 [ 1250.002677][ T7960] __alloc_skb+0x1d0/0x7d0 [ 1250.002702][ T7960] tcp_stream_alloc_skb+0x3f/0x580 [ 1250.002722][ T7960] ? __asan_memset+0x22/0x50 [ 1250.002749][ T7960] tcp_connect+0x15a9/0x53a0 [ 1250.002778][ T7960] ? get_random_u16+0x139/0x910 [ 1250.002799][ T7960] ? __pfx_tcp_connect+0x10/0x10 [ 1250.002822][ T7960] ? __asan_memset+0x22/0x50 [ 1250.002845][ T7960] ? __pfx_tcp_fastopen_defer_connect+0x10/0x10 [ 1250.002868][ T7960] ? secure_tcp_seq_and_ts_off+0xf2/0x1d0 [ 1250.002896][ T7960] ? sk_setup_caps+0x9ef/0xc40 [ 1250.002923][ T7960] ? sk_setup_caps+0x29/0xc40 [ 1250.002948][ T7960] tcp_v4_connect+0x10f7/0x19b0 [ 1250.002979][ T7960] ? __pfx_tcp_v4_connect+0x10/0x10 [ 1250.003000][ T7960] ? inet_csk_get_port+0x1178/0x16d0 [ 1250.003028][ T7960] ? __local_bh_enable_ip+0xd0/0x130 [ 1250.003048][ T7960] __inet_stream_connect+0x25a/0xdd0 [ 1250.003069][ T7960] ? do_raw_spin_lock+0x12b/0x2f0 [ 1250.003094][ T7960] ? lock_sock_nested+0x6a/0x100 [ 1250.003114][ T7960] ? __pfx___inet_stream_connect+0x10/0x10 [ 1250.003133][ T7960] ? inet_stream_connect+0x51/0xa0 [ 1250.003151][ T7960] ? __local_bh_enable_ip+0xd0/0x130 [ 1250.003170][ T7960] inet_stream_connect+0x66/0xa0 [ 1250.003188][ T7960] kernel_connect+0x141/0x1c0 [ 1250.003207][ T7960] ? __pfx_kernel_connect+0x10/0x10 [ 1250.003230][ T7960] ? __local_bh_enable_ip+0xd0/0x130 [ 1250.003249][ T7960] rds_tcp_conn_path_connect+0x6f6/0x930 [ 1250.003279][ T7960] ? __pfx_rds_tcp_conn_path_connect+0x10/0x10 [ 1250.003302][ T7960] ? do_raw_spin_unlock+0xf5/0x210 [ 1250.003329][ T7960] ? process_scheduled_works+0xa70/0x1860 [ 1250.003347][ T7960] ? process_scheduled_works+0xa70/0x1860 [ 1250.003368][ T7960] rds_connect_worker+0x1d8/0x290 [ 1250.003386][ T7960] ? process_scheduled_works+0xa70/0x1860 [ 1250.003404][ T7960] process_scheduled_works+0xb5d/0x1860 [ 1250.003435][ T7960] ? __pfx_process_scheduled_works+0x10/0x10 [ 1250.003455][ T7960] ? assign_work+0x3d5/0x5e0 [ 1250.003474][ T7960] worker_thread+0xa53/0xfc0 [ 1250.003503][ T7960] kthread+0x389/0x470 [ 1250.003525][ T7960] ? __pfx_worker_thread+0x10/0x10 [ 1250.003542][ T7960] ? __pfx_kthread+0x10/0x10 [ 1250.003564][ T7960] ret_from_fork+0x514/0xb70 [ 1250.003584][ T7960] ? __pfx_ret_from_fork+0x10/0x10 [ 1250.003602][ T7960] ? __switch_to+0xc79/0x1410 [ 1250.003628][ T7960] ? __pfx_kthread+0x10/0x10 [ 1250.003650][ T7960] ret_from_fork_asm+0x1a/0x30 [ 1250.003678][ T7960] [ 1250.135847][ T5637] Bluetooth: hci4: command 0x0406 tx timeout [ 1250.386067][T11487] Bluetooth: hci0: Opcode 0x080f failed: -110