last executing test programs: 5.763695274s ago: executing program 3 (id=3716): setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000640)={@ieee802154={0x24, @long={0x3, 0x2, {0xaaaaaaaaaaaa0102}}}, {0x0}, 0x0, 0x59}, 0xa0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee6, 0x8031, r0, 0x215eb000) r1 = socket$can_bcm(0x1d, 0x2, 0x2) recvmsg(r1, &(0x7f0000002640)={&(0x7f0000000340)=@phonet, 0x80, &(0x7f0000000500)=[{&(0x7f00000003c0)=""/69, 0x45}, {&(0x7f0000000440)=""/10, 0xa}, {&(0x7f0000000480)=""/111, 0x6f}], 0x3, &(0x7f0000001640)=""/4096, 0x1000}, 0x160) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_GET_ADDR(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="080003001c00080002b9c600"/22], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x40080) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x12) r4 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000300)={'tunl0\x00', &(0x7f0000000280)=@ethtool_gfeatures}) setsockopt$ARPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x61, 0x0, 0x0) r5 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f0000000080)={0x10000000}) close(r7) getsockname$packet(r1, &(0x7f0000000240), &(0x7f0000000540)=0x14) r8 = socket$rds(0x15, 0x5, 0x0) bind$rds(r8, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r8, &(0x7f0000001600)={&(0x7f0000000040)={0x2, 0x0, @private=0xa010100}, 0x10, 0x0, 0x0, &(0x7f0000000300)=[@rdma_dest={0x10, 0x114, 0xc}], 0x18}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r3) getsockopt$IP_SET_OP_GET_BYNAME(r6, 0x1, 0x53, 0x0, &(0x7f00000000c0)) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r7, 0x8982, &(0x7f0000000000)={0x0, 'virt_wifi0\x00', {0x2}, 0x1}) 5.225030313s ago: executing program 2 (id=3719): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r0, &(0x7f0000000140)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x6}, 0xe) getsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0x4, 0x0, &(0x7f00000000c0)) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x18, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000001000000bfa30000000000000703000030feffff6203f0fff8ffffff71a4f0ff000000002d040300000000003d030000000000006504000001ed000079110000000000006c440000000000007a0ab0fe000000007913000000000000b5000000000000009500000000000000023bc065b7a379d183f9333379fc9e94af05000000f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a715bc5181554a090f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128c4e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c26f71b29ee35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d0800af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8ea8fcb913466aaa7f6d150352e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d390dd65be2467b373eafd9aa48f2077184b6a89adaf17b0a6041bdef728d236619074d6ebdf098bc908f523d228a40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c5da18ec0ae5630800c5363092adaa1d8964162a27afea62d84f3a10746443d64364f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b93d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d710b651f898ba749e40bc6980fe78683ac5c0c31030699ddd71063be9261b2e1aab1675b34a220488c126aeef5f510a8f1aded94a129e4aec6ffc3a15d96c2ea3e2e04cfe0e669e51731b2875353193f82ade69d0540059fe6c7fe7cd86975023cb08cc7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee96a1c685508e6ca4fe5a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9029bd50b994fda7a9de44022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed82641687f3b3a70bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c5538a294270a1ad10c80fef7c24c87afce829ba0f85da6d888f18ea40ab959f6074ab2a4009b9e5f07ab513cdc6c0e57fb1c1ca571380d7b4ead35a655e0b4a26b702396df7e0cbe02b6e4114f244a9bf93f05beb72f0861f75c345edcb84ac7eeedcf2ba1a9508f9d6aba5823a34a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a9b702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b728fe26e37037f27f277b8a8346962a350845ffa0d829e4f79adc287906943408e6df3adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d0a874c74b777df005c55fc30511d00000000c85265b2bd83d64a532869d708000000000000007baa5b6a682b50f0937f778af083e055f6138a757ebd0ed91114a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a9037d2283c42efc54fa84323a56edbd287eba0af35c35d91f3c62a0ca74836a640224de85f2b4a5fee500bbc584328a6a7a4628c4378c9b71dff64075b74a6520adb187b40d2cccbcb08c0634ee74658d3e23bf511c8b0bf1b69d2b3782b3f481c320e7bd4615dbbf24c06ac95bd639e68d0e6aa7f0d07bf69a93365f803f0144af37236ea133c2255b0613bf8ba1d538e06c2411e8d70053b712084fd0e313de9bb19266e49a3a2190cb039c6f89610acd896319b9c8d1b8aac2eaa5a4f8be7419a09e3fb5be3be2fcdadd2299839cc40e684e6e2b4e1385fde7a0bad3b0be672110268a34dad364fddee69e564119cebb6940c6356ff83ca527c573d700000000000000c6299263e6d9097f225de969485bce3d7dc471c0669bb6a467cf0de54dfcc1857048fe22a19dbb1b3cb9babaa839f1f6e817a62d95a5b971ff96a5c66c338c6f2a2da4644519f40761402e9c81013d76c7152c95ba5efa24ce1930f23a2277f057ffb6b0144f3b434a2adc456ef4d2fbdf7c6238c2bb00ffcf2d23d68cb9b027f3b225ec4e09b089f7956b66c5692b46ea03abb6a404c8ccceaa4ba4161409fcb54b86eaca26b2a0c4b81f7b71cbfcefb9303a7861fce422f3f9c422a1619e6c6c2dd825743b22a6f93604c73d886c25ecaaeafccdeb19bd0cdbc5d22dae879561ea5606fa0c9dc23c0f52621aaae42180aecfd32cd6a66a1efa0949bc195dfcb691a26344362989371f2d5bf274363416b3cafb9a3331285449dc1afe9af7fed27bd4e36fa423d6c05ffa2acee27e2444b5ca28fc16fe31bd1320d4415ec0f5471b0b671d7626f773"], &(0x7f00000000c0)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0xffffffffffffffff}, 0x4e) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) (async) bind$bt_l2cap(r0, &(0x7f0000000140)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x6}, 0xe) (async) getsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0x4, 0x0, &(0x7f00000000c0)) (async) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x18, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000001000000bfa30000000000000703000030feffff6203f0fff8ffffff71a4f0ff000000002d040300000000003d030000000000006504000001ed000079110000000000006c440000000000007a0ab0fe000000007913000000000000b5000000000000009500000000000000023bc065b7a379d183f9333379fc9e94af05000000f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a715bc5181554a090f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128c4e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c26f71b29ee35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d0800af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8ea8fcb913466aaa7f6d150352e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d390dd65be2467b373eafd9aa48f2077184b6a89adaf17b0a6041bdef728d236619074d6ebdf098bc908f523d228a40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c5da18ec0ae5630800c5363092adaa1d8964162a27afea62d84f3a10746443d64364f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b93d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d710b651f898ba749e40bc6980fe78683ac5c0c31030699ddd71063be9261b2e1aab1675b34a220488c126aeef5f510a8f1aded94a129e4aec6ffc3a15d96c2ea3e2e04cfe0e669e51731b2875353193f82ade69d0540059fe6c7fe7cd86975023cb08cc7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee96a1c685508e6ca4fe5a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9029bd50b994fda7a9de44022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed82641687f3b3a70bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c5538a294270a1ad10c80fef7c24c87afce829ba0f85da6d888f18ea40ab959f6074ab2a4009b9e5f07ab513cdc6c0e57fb1c1ca571380d7b4ead35a655e0b4a26b702396df7e0cbe02b6e4114f244a9bf93f05beb72f0861f75c345edcb84ac7eeedcf2ba1a9508f9d6aba5823a34a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a9b702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b728fe26e37037f27f277b8a8346962a350845ffa0d829e4f79adc287906943408e6df3adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d0a874c74b777df005c55fc30511d00000000c85265b2bd83d64a532869d708000000000000007baa5b6a682b50f0937f778af083e055f6138a757ebd0ed91114a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a9037d2283c42efc54fa84323a56edbd287eba0af35c35d91f3c62a0ca74836a640224de85f2b4a5fee500bbc584328a6a7a4628c4378c9b71dff64075b74a6520adb187b40d2cccbcb08c0634ee74658d3e23bf511c8b0bf1b69d2b3782b3f481c320e7bd4615dbbf24c06ac95bd639e68d0e6aa7f0d07bf69a93365f803f0144af37236ea133c2255b0613bf8ba1d538e06c2411e8d70053b712084fd0e313de9bb19266e49a3a2190cb039c6f89610acd896319b9c8d1b8aac2eaa5a4f8be7419a09e3fb5be3be2fcdadd2299839cc40e684e6e2b4e1385fde7a0bad3b0be672110268a34dad364fddee69e564119cebb6940c6356ff83ca527c573d700000000000000c6299263e6d9097f225de969485bce3d7dc471c0669bb6a467cf0de54dfcc1857048fe22a19dbb1b3cb9babaa839f1f6e817a62d95a5b971ff96a5c66c338c6f2a2da4644519f40761402e9c81013d76c7152c95ba5efa24ce1930f23a2277f057ffb6b0144f3b434a2adc456ef4d2fbdf7c6238c2bb00ffcf2d23d68cb9b027f3b225ec4e09b089f7956b66c5692b46ea03abb6a404c8ccceaa4ba4161409fcb54b86eaca26b2a0c4b81f7b71cbfcefb9303a7861fce422f3f9c422a1619e6c6c2dd825743b22a6f93604c73d886c25ecaaeafccdeb19bd0cdbc5d22dae879561ea5606fa0c9dc23c0f52621aaae42180aecfd32cd6a66a1efa0949bc195dfcb691a26344362989371f2d5bf274363416b3cafb9a3331285449dc1afe9af7fed27bd4e36fa423d6c05ffa2acee27e2444b5ca28fc16fe31bd1320d4415ec0f5471b0b671d7626f773"], &(0x7f00000000c0)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0xffffffffffffffff}, 0x4e) (async) 5.116655044s ago: executing program 1 (id=3720): r0 = socket$packet(0x11, 0x3, 0x300) bpf$TOKEN_CREATE(0x24, &(0x7f0000000300)={0x0, r0}, 0x8) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0x4, &(0x7f0000001680)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000440)=@bpf_tracing={0x1a, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="180000004700000000000000f9ffffffffffffff00080000"], 0x0, 0x7, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, 0x3c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2bad3, r1, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYNAME(r2, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000001380)=ANY=[@ANYBLOB="140000000e06010200000000000000000c000008"], 0x14}}, 0x28000000) (async) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) splice(r3, 0xfffffffffffffffc, r0, 0x0, 0x20, 0x0) (async) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r4, 0x29, 0x8, 0x0, 0x0) (async) ioctl$BTRFS_IOC_START_SYNC(r3, 0x80089418, &(0x7f0000000180)) (async) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r5}, &(0x7f0000000540), &(0x7f0000000580)=r6}, 0x20) (async) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r5, &(0x7f0000000780)}, 0x20) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xe, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000007000000000000000000000061104f00000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1e}, 0x94) (async) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, &(0x7f0000002880)={{r1, &(0x7f0000000080)='\x00', 0x400, &(0x7f0000000100)={@align=0x82d, {0x3, 0x1, 0x3, 0x1}}, 0x7, &(0x7f0000000140)={@_ha_fsid}, &(0x7f0000000280)=0x8000}, 0x3, &(0x7f0000002800)=[{0x3, 0x1, &(0x7f00000002c0)='\x00', &(0x7f0000000780)="02f68eb70d28ec9f7281314615a236a0143be2727d1018eeaff4a0f138bd15a97f038822552a07fea0528bde4720c76cd7d340bcde02de6d2a40140fc6ace15668c7ae9cd4641d73aa17b97ee882bfd8c4a46e8edb7bbc05edfd9eb4a2401debc27fda126752fbb89a161531132e3cd053e5565aa6ab6a44abec71ba13adf9ca872e1b9abc4a2166bf063bbcd2cf7b2d8051c9c7c87629ee3b2f94610fc86707831ade2a9dfabe1aed16bda13ae19af56ac9ddb8b77016b0d15c79783ed9a9816a5ea76764928fcf2ad6ee44f4f792ff8cd51c3c2267be79d9cb15ba69bfde778176e4d4c3ca34a02159d04132", 0xed, 0x40}, {0x2, 0x2, &(0x7f0000000880)='-!\x00', &(0x7f0000001740)="f5075b152e50f1d4194ddeaace34c8decf4e0a6f62e3df238efb5c4acfd599cc9e82089638b758efcf8412127a6868e7e2dff49ca5d5eadac96f2fba935bd64a18657cb3a6827b0166bc022425e766329defa5b6388def5fe6a0d886f20f182c04b889d35a54c240899b14ed33c827aaf87e3265c5787a40b9471531a5112ff19abb48c0b5761e902eb10ded117a75d8cebbce592befd2e800234550f1a830ea2228aa92fb8d787e55375ec5e983529bbc1c8c16b9f532e7a1841adb25946c08abc3495b9639322fe7b15d5b6f9adfe9998f949f2836c820d2bf1f52bc8694ae6fc62fa333065e94cdd085acadddf8ccc68c81334152eeaca6cefe3d3796e53b55144e4e8c0f59a6f9916e2f63f9cdcdf24bca01869d796c9dbd7496e0e359c300af2aa8c0621153ad48da0c8da5dbb79ae77a65a0d226e8a7d46427f6cad9561f50fd8360cc8c4375c52d488fdb95c1e0d9fc073e4c7b68045d4ab9314ed406a51f21ebccdac48f7321824b03032707dcf8587a0b176a6cc08d2336425ed0264b4b0911ade53fe6178c88d210a7f09c1bdacf5886625774f9f55faac27597e982e6754c42aeaeaaada492d32b6c6535d71fc65e343cab6340d412712d3b7f0a35d232bd29e732023a87db7582d0ffb1b39735046e4333fcb615cdf817b9bb46a89fcb5171f8b2f5a12389e61b32b083ea9f5b90b2fc6e6518e8afaf49a89c13b9dd49226e23ede3166facb7f4a7ad950cb28ec78c66b8da115839d594f6899cf8c83a0ef67d2f79f972d9b0b947a1d39ccbc4e4127f4089d4232dafcf58da7bd8f3b8bc980548b9906f06bc3084a7f9d5ec6ccd3c20634a3ad1cc411d2a3a8ac83bef2a57302094b6e30719edfa2ca455af8e83cfabfe528bcf6c52219dcfc689e48f9032630639f0d2a09e9fab45b2053fe7afe698bf085547471b2ee6f20802978d76da0164be31fb1a859229a735d9289cadda320e944a852b84e3449869ee61f220b2f77d35ff55c1463a54e678896738f835a328eb4950b98086b1c1996cfc58ea7a8cd461aec403de738d928a0176f9f64043e0b218e7747a8f4b1cd3ab9431571e2b7ac39d77ae98339c44593045f30217a00b8f68314bd14b61b05858560d2400be96a08c6eb3a97074df222c8c686345be9e023818c596374ef5119acc6ff8eb70140e595ad0da8dc824a1075a27f90e86b1ee878ead3d5315c0fd0e243bf9dc95c65ddca800303beaf72cd6933d75c8d19dbd522a7ae7fc47bd2d537f574fe5e1feab9b65dcf9f8fc556aad044a3063584cad0e54fa96697801650202c2487b72dc35ce838fd7f7c3a7d2e1fe9fccc2556a691b7bb54cd4662f4c54fa1368889fc281b5cdd02f870a4b746247dcfe371d633dc2228c04a40a7b31c39378e5dd758a3f78d123c928764edd743c54de4dd201ce570e6ec6530b76147077c33ca5eeee8d57aabb9fe6f481f4f372f26593ca8fbb97b0e8dcd4b2a7792c63031dea4aa3451743a6cea14a1264f08d5a7b6833bb4cb65967cb622cba88c2f7ddd95bf8b44026c2ffe0c8e8d1e0b0f55d21f459d52cf7090a198329dcde7e507c951dfc6ac85e3445a2e500abcdaf9cebc75f9570d8b5157e9526c486f0f511a234f3f84a96302cdb332f9d1b5af818646ace266ad3cfc815ac52d2782e5d66c0e235ab12dc1d14112a1b1071d7526fd0fe68dfbc16069ac4ac01324e700ed129f6fce3ea204d2295a347000a85fce27de31486f24d512220f1cc57d0d559f2d70e623e57531062c02bafeabd8071ab425e7d9d7edf87c0ed51b01a7e507502b32ee0b19032ca719301f0fb404f3c0d259e6eb3823913822f9ee37f5e7055e693a55d10ff8e1059f62231ba2a30e1645b38c01235ed96d0c42c7f63e47f604878d4083d956a11b937da58f4b6bcffbcee1d1d3caacc279a3c8e2ce5bc7d74e14d7b4d6f1c73a3a6a13db5c7830c2372539436288cd2f9aa05910395590323bcc1ec86f535fc4669beef0906e7b37c5d74e7f292fa83aff5c2128125afb62767114fdae234c42e9fa2a27476747f88855fcf69e69a9a6bca516540dc0d7ffb8d68ad942f3c98bf07cbff97f95e24034b47f1c79aa13c4bc70991eb052e5e04543163c513328db32d1b18ee21c17ed9a3223b67afec65a80af929a3b150c08333f3bed05ad24c631797e51457ed604f15ce75844b1aabae7fbe6767204894495076ad3d30353807e4b1b6a82ff4c0b731e4cbc2c04ec1b19c5d9b2daceceec3594a38ae4b52aebfb99aeca3ce4159bcb527c5a6090bec7880808be6cf092633c2f8930c0cca0177e2392382aed9afef6747e145dc2ab4238c8275ef5d40af6f268f3eded96ea316a078a7dc15f94a917d3729204242eb56ae34211bc48eaaab5a37d0e0a6d22145aed58afb530560ab848906a8b00f2ccd38b926cc5055f2d0041a7dcbd3aff9ceb16d3665eba9bc1ce755c7430507f2ae3e9df2c41ee95435a57f3aea1231d16926fb382f065f267768be008a2fe60255c8da6eeb664f1fe49a8657e7798c0979ba35153a1588a32f54325c9d8d70d8e728c3981762c8fb31780bcb596f6c67cd4323056872a54477c7348a342f7d865a27d67e0e78044eb38f40470919145e2371c70d86eb2d5d9906b8c8d52c2ada6ead0a4a07221fb75b6fe30877363cd55e0b817187261e4633586167478f45dd84a7801da3e01e2f95820ca4f2446a3a0d19afb4301a8d2113ca5f505114c70574dacdf80bc09559920a524067b5ac53a58d898d16d1808d679977550c8a73f9bb823c0270b7d17a41f9ffd675c523b3d26f756fed4f5d7865249851a658a6a8a4d44270cbbfefcd78ddd3dcbd79014e5b6c2da6f8abd166b1aa8d72cde595e0c62b397d5ddebc868e89b898e3bff414a2f86a4ee55fe6d7a44469f03e8113f7d4ca1f76f1479484309701c78bda2630e0b2285b927687cb47786ad365faacb82fd7d50e0a96d1a999a92bfa9d66bd30b47640c49fd0f7def2d5caa7f6f57fbd681d9b6bbed6abb1918dc48922a8788ef105921fa2f4826ecc29e5685391e2eb551c73e891cfba6897aa059e977cc74dc1355e294c97a1d5617a4ecf6540061bd76ab5dc611d08517b5d030e9ba3c286be0ec770c64d19510ebacff94a72a124d326196f5c1ff7b350602d8461d68cebdcf5a5beb04966c0e189da45b39f79464055e565cc2efecd9ff562772a15fbbd491c7c1e86c509814bb007f31eff6557fc908d486b87567cc0e97a6d199f06db8f9cb634d0633e680a188f6149f3ebc24c5b1e379f3a52b7dcbfc235c3ed7be1a9410185619b04b06b865f45cc93ccd46e7da4ec797bcabd70c7b355e696cb15de2a1004156abd491257a9b52a846812f98ee42b2beff0db78782db12083fff8779e32d5804779db05c4e9611693815fb6b59eaa826af0b4e7d8f53ed7c0f9af2f7821db5b3614312fcc343ace1502227597b36ca251e55464a1c157e9799e2a8d9f783bc88e7ba2573325d93ac67e3133c958ce92e60575c0f2c247308748ff305497a0957b662b0bb2c77413a7b310925c13489fce79fb43ee2ecc8a1eda8660ef09157f5a501298ff46b38bf21b6f97161588df1b1f9c8b9df16ea8cb530be5851ea31aeb15bd16383e86f88d99c25dcb9f26eca2dd80620aef04266ca7be31c2cb0c86fdb3b7dc7511688d6a961fb5ebb2cd4451697d8e3e621dbecee127409c249c984be27c67fe3a813a7c77924118a76ee3d2f04bd2cbf08d741e980a0a63ddca8a12c79420e1696c33337bd3c39614241d15cbaa73078b743c3dc36112de1031200936382d52ac5a388378288704872c712de0addb5ac6d2a08b45b799b55b533c992fd72a2f48b84d68370747290a361173400c2f1cbc4881b3546f37c5e9fbc31554d29ea55a16d812729e1ca33d297050e3fdd611505ef0dbf47546f0855fe040a4da7691be930c903ab2f115cc6b3388abcb6f9b0ee2574e78d97e5f87dcd5f96d2d565b973be04aef2731fef57ac3129e651d43bc9f5d847875b8038a4f705262be0a3c50a2a49fb3e7131627983a84ca52ad3eec3b7e8927df3c320a38924ed2b42e9532801d2326deb7cee58f24eec8a265e26b53204157062ff74d78d1223bfb63622c39805fe0e566299b7d04ddcaa354e2162c5aaf142414c41b75c022c53730d34c5808081132deb6ca8aacebc7a700e1a792f10499575398089d962e76f3058510f056099e3f457ee187422c75a75058e0693b4c61aea579ff8a7e8b4f45d1187ed3db03130a24d6706b66b3c93baa93e432d6d2c2a1173d7e9960848213c90a4c1f73f3fd6a0cf95d27b1c594097c37e9a70dabbac751695094f9ae2a03ff957548a8d580aba3d72d1ac2da6e2d2018a2c7c2294a207cc99f8af62a3daa17e4b8cf4611950bd2cb4b291ee94ea6ad3809dac07f2613d71d2ca7f28a976352f3f2782e99f9bff652bae954b1eb5e521f03db4b702e0c63d572ff7a39abdedaa36964e1ba03b5d2ce1d391aafa39d06526752a6281d12a83235217ab795a618654ba497f0ceca0fc79160c729a0547693f00b27e92f52ce025362d58e672fa53a62e20e6997da6ffb06ec6f877a49bef512840eef14a8a322486c9a0ac19588b9c4149cb61f2444b99d1c9f4936c34d5d8dba109e6425e9340791759cecf68e57ee1db64efb49a59e6af0c640325d6e90ddedabb9aa971f684d99c1e09dbf38c5f0361044b201f15ca062083abb5a1fbcdef6fcfd45b7718cd2f02f16ad0dd37b2f7bd934c766c3baf30fdbd92713bc6843a9aa3b86dbfc572b2b6ac3c4c4386bcb166afb311828a388602f9d5607ff60d549c7a673771f7e2e8fe2c1df41b9e95ae4253b98600b58503611199ec9229643c6e8592fbbb85d1d8e8c7d6dadda56f50bf2590f3129cfca6fa6450a42e405a1c92dbfd00bfc190024ae9adecee9a8130d2e4ec7e720b39277519d31cd11118e8323666fc6d1bc74d80fab83ddabea2e93e4efd57bd23e9f4c4964ad16779fe61fc3b1db34e8602f5e3f658167969ab695c222d143dcb3bfb47c3c44ecd735e9e0224fa64ee1ae3c001f3d3437e27e8034f649f8ef1501f090c63687ee17192e2b8271f2587bf0e71eee58808c729d90b9fa0f08698ee1f839a4f95257a1b8ad054d9bd6dea4425353935decf11e0888b79ca8a592d5597fdcf1fecc40fc2113d9c125c382817938820e5aa1559d74a97e1f4752174f4c98f06a51efff5a5bb11d0d705b142aaae346604fc4b6adda6689d87d65028703863c78db241be6e430b68a186ce64f5677bcfa3da85d35d77ecf63277fc75db70354d599f831eeec835f7e5d5a2bbc93b20cb0fd7b0b707a756f3d261b4294eff68f87b2498930123cd5bb01017dad075f1a04de0ac67cc2447e10927beafb7ac0f687dfb9f7fa87a5dd7ff1749f452f169443e46be9263a17f849b92a1549e89bac879987f32cf5028e240bf29b125d6d8a9a88cb10a7dc2dcae2a2953711190d8668241bcdea0058a1585e35f19e95726dd590efe1ae8fd5635448e57b7d0e331a94c5ba5a81fcf53370463fc5fb22f341bd8fbd0505ec58231d7426b4df22db40bccab4c0127b6ba67b64ffc3a3213dc707175ec37a89d78a52d5d61fce1db9be208762811ff08311c55e596159b22ff1ff3c9f5c86b2fa9bb1bc30958ad8b6a65a5144a7bd0b204576d69e9e458b47e616b5dbb11b48d0a99b16be65840dc9c4264fc69ea2b3415ec96de2d39fb27e820df56024e0261e2e2ecb332b4d7777055f0e21ef", 0x1000, 0x10}, {0x1, 0x0, &(0x7f0000002740)='\\\xd9:\x00', &(0x7f0000002780)="b17dfbb5bd3b5eb980fbd2bec1aa570a7733dd5b88e67ef986c4d9b2aab6ee479e42b08efbf07bbdd77e9841774cece98bb267a0961ac329a111a55d49efa9197cc7169870f7b3fa97c72ab90f5258c8fc9dd90130ec7c693655c6ebb2b977457dd51e3318db9510cca1a4c640c9993c56275ea2", 0x74, 0x2}]}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x17, &(0x7f0000002900)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x7fffffff}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [@printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, 0x31}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x15, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffe49}, 0x42) 4.92956748s ago: executing program 2 (id=3722): r0 = socket$inet6(0xa, 0x3, 0xff) setsockopt$inet6_int(r0, 0x29, 0x16, &(0x7f0000000000), 0x4) close(r0) r1 = socket(0x28, 0x5, 0x0) getsockopt$inet_tcp_int(r1, 0x6, 0x4, 0x0, &(0x7f0000000180)) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="00000300000000020000000000", @ANYRES32=0x0, @ANYRES32], 0x48) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'batadv0\x00', 0x1000}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r2, 0xc400941d, &(0x7f00000002c0)={0x0, 0x1ff, 0x1ff}) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380), 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r6, &(0x7f0000000000), &(0x7f00000000c0)=@udp, 0x1}, 0x20) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r4, 0xc400941d, &(0x7f00000006c0)={r5, 0x10001, 0x8e2, 0x1}) preadv(r3, &(0x7f0000000b80)=[{&(0x7f0000000140)=""/10, 0xa}, {0x0, 0x61}], 0x2, 0x7, 0x8000) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) ioctl$F2FS_IOC_DEFRAGMENT(r3, 0xc010f508, &(0x7f0000000000)={0x8095, 0x1}) 4.757045319s ago: executing program 4 (id=3723): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) syz_emit_ethernet(0xe, &(0x7f0000000180)={@dev, @random, @void, {@ipv4={0x8864, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @multicast2}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000040000000800800101"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7, 0x0, 0xffffffffffffffff, 0x68000000}, 0x48) 4.755914643s ago: executing program 1 (id=3724): r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000000)={0x0, 0x10000}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000080)={r1, 0x8}, &(0x7f00000000c0)=0x8) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000000100)=0xf) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000140)={r1, @in={{0x2, 0x4e22, @private=0xa010101}}, 0x800, 0x8822, 0x4, 0xd0, 0x40, 0x8, 0x3}, &(0x7f0000000200)=0x9c) setsockopt$inet_sctp_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, &(0x7f0000000240)=r2, 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r3, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x2c, r4, 0x2, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x7}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x50}, 0x10) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r5, 0x84, 0x13, &(0x7f00000003c0)={r1, 0xfffffffa}, &(0x7f0000000400)=0x8) setsockopt$inet_int(r0, 0x0, 0xd, &(0x7f0000000440)=0x5, 0x4) ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000000480)={0x0, 0x0, 0x4, 0x0, '\x00', [{0xb, 0x6, 0x7ac9, 0x21a, 0x9, 0x1000}, {0x8, 0x2, 0x89cf, 0x7, 0x80000000000000, 0x1}], ['\x00', '\x00', '\x00', '\x00']}) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000640)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) getsockopt$inet6_mptcp_buf(r6, 0x11c, 0x2, &(0x7f0000000680)=""/75, &(0x7f0000000700)=0x4b) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), r6) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000007c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r3, &(0x7f0000000880)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x3c, r7, 0x1, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x1, 0x2e}}}}, [@NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_SEQ={0xb, 0xa, "7eceff3f0ec4e9"}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x80) getsockopt$IP_SET_OP_VERSION(r0, 0x1, 0x53, &(0x7f00000008c0), &(0x7f0000000900)=0x8) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r5, 0x84, 0x5, &(0x7f0000000940)={r2, @in6={{0xa, 0x4e24, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1}}}, 0x84) r9 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$XFS_IOC_FD_TO_HANDLE(r6, 0xc038586a, &(0x7f0000000b00)={r5, &(0x7f0000000a00)='\x00', 0x204000, &(0x7f0000000a40)={@_ha_fsid={[0x400, 0x8]}, {0x30a, 0xd, 0x3, 0xa1}}, 0x5, &(0x7f0000000a80), &(0x7f0000000ac0)=0xbe9}) r11 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000b40)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x88, '\x00', 0x0, r6, 0x3, 0x1, 0x5}, 0x50) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r6, 0x89f8, &(0x7f0000000e00)={'erspan0\x00', &(0x7f0000000dc0)={'syztnl0\x00', 0x0, 0x700, 0x1, 0x0, 0x2, {{0x7, 0x4, 0x3, 0x3e, 0x1c, 0x64, 0x0, 0x3, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x12}, @broadcast, {[@ssrr={0x89, 0x7, 0xe2, [@loopback]}]}}}}}) r13 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000f40)={0x6, 0x1f, &(0x7f0000000bc0)=@raw=[@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r10}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r6}}, @map_val={0x18, 0x0, 0x2, 0x0, r6, 0x0, 0x0, 0x0, 0x4}, @map_fd={0x18, 0x5, 0x1, 0x0, r6}, @btf_id={0x18, 0x7, 0x3, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x8e}, @tail_call={{0x18, 0x2, 0x1, 0x0, r6}}, @map_val={0x18, 0x5, 0x2, 0x0, r11, 0x0, 0x0, 0x0, 0x8001}], &(0x7f0000000cc0)='syzkaller\x00', 0x79, 0xa8, &(0x7f0000000d00)=""/168, 0x41000, 0x8, '\x00', r12, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000e40)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000e80)={0x4, 0x10, 0x7, 0xfffffffd}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000ec0)=[r6, 0x1, 0xffffffffffffffff, r6, r6, r6, r6, r6, r6, r6], &(0x7f0000000f00)=[{0x2, 0x5, 0xd, 0x2}, {0x3, 0x1, 0x4}, {0x5, 0x2, 0x9, 0xa}], 0x10, 0x2}, 0x94) r14 = gettid() getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000001740)={0x0, 0x0}, &(0x7f0000001780)=0xc) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000017c0)={0x0, 0x0, 0x0}, &(0x7f0000001800)=0xc) r17 = socket$phonet(0x23, 0x2, 0x1) sendmmsg$unix(r6, &(0x7f0000001f40)=[{{&(0x7f0000001000)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000001680)=[{&(0x7f0000001080)="9a5b35178015dba02196728b833fbf9d568f3b53a1e277712c6e27c45beb1724c91b1b7ae7abe00e30b1407426bb678b8d7f27f1222940ddd325a961e2c7c17f7731a68a2c1f79384c59ca9375247090343d87de798238f55690e97a2099e1a3d10affc13107688d19480c4aa1885e79bc31aefc9243803a878096accafa650519215526a04eaca1a5fda2249f57a11fb990c1a77cc57374dcfcaa63a3253aa9801cc0fd151ff45f3d07e65de2b4c6b9b5db2eea7d115fe927da3fe5d3c76731993563a765", 0xc5}, {&(0x7f0000001180)="da52ad27e28fc49393f9325900dacdc28b1499665d55749da94dff7ced732b1ee82a5bb6ab8667eb11b6b7804474e044a2650d138e1106e895ddf1be5216365d69731477b89c5e016e3ae8db52ea8bb4857901bdde5fdb1547a64dfbb37f6069c40f4e7dd2f0db0f8a38376b806a58ed94228a", 0x73}, {&(0x7f0000001200)="6dfe5e28bb0d27767f4aa3f3eb9149a6d24f82bf09762f2408c826286cacf9071104c53c96a29eb55b428437fdda923ae55a6973a82a92ae10bfe6fbad144de271e67fef9aa4c20efb765768b13349824f28b2d649ccfdd058c69e1b20db53aace72aac6a86dc2dff0583988fbe9757acac6e7ea2bb68915f4d9bdf5614a3739d0e9c775adba69f2817af05a844f10cc7f311ceca073351982468e5156754f2f2553187982", 0xa5}, {&(0x7f00000012c0)="6f1b650b1f6791c5964bc7a0aba697c49865aa1a481fcf9584d52e8a843eff8522dcdf2b4d52225427d07bbc54db7f709062e14e2cde7e178f32baca2403d3e332193eda95", 0x45}, {&(0x7f0000001340)="d559dda733f9733951bf79a157522c19ba214b7833f2efd34620c41b46a80b4a7232279fdef66b3036abe54f05e81c296c6cabb7d7898c0bc5295f98b4f0ebb9a56893008f3884162688b1acfc58c5aa5eaf7684ed8fd673bd4070266fd4cfb46dfe66a6e0bccd02ecce9c00c994fb0a02c759596076eb7709a42069af9500c33a02b032a422effbd447e822031c82571e9bd0e6ac5cbef1a30d21c94002d295b38d1a76713ffdea2d09fa86064e4a76d19952711240c2e1ba", 0xb9}, {&(0x7f0000001400)="76f5cdf04fdee3d921ffcfa0b94b17106ec38dcb6e1768879ec0c68c24d56c91782bd3954e39b15d7401505f6f4ab61e", 0x30}, {&(0x7f0000001440)="8986c105de63ba9d45e36ab58f750f6d42aa222bec2325dda1", 0x19}, {&(0x7f0000001480)="d741f3036a577ea6dc24216d9e5739e9d55702d99405ccd802f97866cf18e986d22ed4ba12330710185d300ca28d", 0x2e}, {&(0x7f00000014c0)="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", 0xfa}, {&(0x7f00000015c0)="f715d4245028e1e2afc464f4dca19d056fee4bd845d414aee5a4ca96660da631fe25380f4b4b2520ac9441da707c09a4f88cef5355e803c304611ba0de42404f256da8a31a66eb70da6b04181f3769f833dfc770ae3da63a053c5dec5c9b601d9ec8817d026242795b01cf7f5958fdd3ef057b3ec240b418280cfd08e8b2c80e21b079a3ad415242e3da5c72e8373bc7fc853b3fb65bd460f8ded11329861abfc8c3f3fa0c8cdb9f132b48", 0xab}], 0xa, &(0x7f0000001840)=[@rights={{0x24, 0x1, 0x1, [r9, r10, r0, r0, r13]}}, @rights={{0x18, 0x1, 0x1, [r0, r13]}}, @cred={{0x1c, 0x1, 0x2, {r14, r15, r16}}}, @rights={{0x1c, 0x1, 0x1, [r6, r3, r13]}}], 0x80, 0x20000000}}, {{0x0, 0x0, &(0x7f0000001a00)=[{&(0x7f00000018c0)="2c9af380f2c83525c1c509172da785f52a6881e098cf8760745babbfff1e13cec9312f873cfe12373ed7e86cef2e4a8863f99d00d6fb6b0217131a701cbe951ceaf41f69058e64a53584cb8984174f7a83b559e65bae61ae1cc64a8c55", 0x5d}, {&(0x7f0000001940)="1e54dbde5a008b86811d0d86c7126d85e5eee302db4eedfbcaca03d1568899b5f2c14cac4ea855ed0e29a64e80a0fc5c513843a3aa52cff82f23e88c35affca16e19871606e1a18d86ea166de7171d4f242f7db3b2e3e5e904adeca63e6e7dc16b3afd4679a9aa526332cc789e8449e2d79551508ee0c0f2b1aef7c4c6032999d91d41d389c8195ac1c4bf2dae1539e4ad6cc0c4190c7448", 0x98}], 0x2, &(0x7f0000001a80)=[@rights={{0x28, 0x1, 0x1, [r0, r17, r5, r13, 0xffffffffffffffff, r10]}}], 0x28, 0x40}}, {{&(0x7f0000001ac0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001d40)=[{&(0x7f0000001b40)="398719bfd8fb085ace8a6e1dae9c0e2db7ab50f5c68c21beba9544480afc0f3a65130ed2dcffda97afddadda59e383550d120206d4ad3afe17efffe436a0c3d8ebb34bf935db0835a52609c0908c28d5262b89c0575730b1302274be7b5613eeebac8030bc89", 0x66}, {&(0x7f0000001bc0)="b35fb41781418ecc2b44179459ab1892b961a2dfff63cd3497b20f1dc3da9bd38b6717be73733f07b224283c", 0x2c}, {&(0x7f0000001c00)="a3651074f43b81fa7e9af8", 0xb}, {&(0x7f0000001c40)="274c97dc91378e0b7e5a99db66c0e2d60c5f8b66822c56bc5328846a661b89c671206db3f255d9adff64bb6866a05ac554e2f8d7df0478c75ccb81335cbd4c74d840b320ee9ba33e486b062f372422200198b1677c2c5e7d6484709e584e6e6d205bc2065aaf7e87086d3d3123961d0596fcdac053a4436f611845e552d5eaf1f4a29e5365cca97f58bbfa643122a1a6310a1febdbc01198bb6cc1fd414c8e38a7d8feeeeb6be74db3de490872e0161fcf279eaab46e65c510f35eab43d93adb0d89988cd0d66c981c5d7b40861dc8dbde58eb87b3eb3a999f4e14933db29c", 0xdf}], 0x4, &(0x7f0000001e80)=[@rights={{0x14, 0x1, 0x1, [r5]}}, @rights={{0x20, 0x1, 0x1, [r11, 0xffffffffffffffff, r6, r3]}}, @rights={{0x14, 0x1, 0x1, [r0]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}, @rights={{0x18, 0x1, 0x1, [r5, r3]}}, @rights={{0x14, 0x1, 0x1, [r6]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r11]}}], 0xc0, 0x800}}], 0x3, 0x10) 4.400711124s ago: executing program 4 (id=3727): r0 = socket(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) (async) write(r0, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) (async) connect$netlink(r0, &(0x7f00000005c0)=@proc={0x10, 0x0, 0x1}, 0xc) (async, rerun: 32) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000b4bffc)=0x8, 0x4) (async, rerun: 32) sendmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000000c0)="7816", 0x2}], 0x1}}], 0x1, 0x20040020) (async) syz_genetlink_get_family_id$team(&(0x7f0000000200), r0) (async) ppoll(0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0) socket$packet(0x11, 0x3, 0x300) (async) r1 = socket$can_raw(0x1d, 0x3, 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x972a4000) (async) r2 = socket(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x100000001, 0x210000, 0x1, 0xa}, 0x1c) (async) pselect6(0x40, &(0x7f0000000000)={0x7, 0x101, 0xfff, 0x9, 0xfffffffffffffff8, 0x6, 0x100000001, 0x8}, 0x0, &(0x7f00000000c0)={0x8, 0x8, 0x4, 0x8, 0x6, 0x1, 0x8}, &(0x7f0000000100), 0x0) (async, rerun: 32) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r2) (rerun: 32) sendmsg$DEVLINK_CMD_PORT_GET(r2, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000240)={&(0x7f0000000440)={0x38, r4, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}}]}, 0x38}, 0x1, 0x0, 0x0, 0xc801}, 0x0) (async) bind$netlink(r2, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) (async, rerun: 64) write(r2, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) (async, rerun: 64) connect$netlink(r2, &(0x7f00000005c0)=@proc={0x10, 0x0, 0x1}, 0xc) (async) setsockopt$sock_int(r2, 0x1, 0x21, &(0x7f0000b4bffc)=0x8, 0x4) (async, rerun: 64) sendmmsg(r2, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000000c0)="7816", 0x2}], 0x1}}], 0x1, 0x20040020) (async, rerun: 64) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x14, 0x0, 0x0) (async) ioctl$int_in(r6, 0x5421, &(0x7f0000000000)=0x10100) (async, rerun: 32) connect$inet(r6, &(0x7f00000001c0)={0x2, 0x200, @local}, 0x10) (async, rerun: 32) splice(r6, 0x0, r5, 0x0, 0x5, 0xa) (async) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[], 0x10448) 4.386332456s ago: executing program 1 (id=3728): bpf$ENABLE_STATS(0x20, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x800) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000340)={0xffffffffffffffff, 0x8c, 0xffffffff80000000, 0x4}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000020b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x17, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r2, 0x84, 0x7a, 0x0, &(0x7f00000000c0)) bpf$ENABLE_STATS(0x20, &(0x7f0000000300), 0x4) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000005000000000000000200000d0000000001000000000000000000000000000000005f10"], 0x0, 0x39, 0x0, 0x3fffe}, 0x28) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x9, 0x0, 0xffffffff}, 0x1c) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x48}, 0x94) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000affc21dc000000100000001800018014000200776c616e300000000000000000000800080006"], 0x34}, 0x1, 0x0, 0x0, 0x40000c5}, 0x4040010) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000880)={'macvtap0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x15, 0x1c, &(0x7f0000000e80)=@framed={{0x18, 0x0, 0x0, 0x0, 0x40}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x5c1, 0x0, 0x0, 0x0, 0x552}, @ldst={0x0, 0x3, 0x6, 0x3, 0x8, 0xfffffffffffffff8}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @ldst={0x1, 0x2, 0x4, 0x9, 0x2, 0xfffffffffffffff0, 0xfffffffffffffff0}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}}, @alu={0x7, 0x0, 0x3, 0x3, 0x8, 0xffffffffffffffff, 0x8}, @map_idx={0x18, 0x1, 0x5, 0x0, 0x6}, @jmp={0x5, 0x0, 0x6, 0xb, 0x3, 0x8, 0x8}]}, &(0x7f0000000f80)='syzkaller\x00', 0xcd81, 0x28, &(0x7f0000000fc0)=""/40, 0x41100, 0x0, '\x00', 0x0, @sk_reuseport=0x27, r3, 0x8, &(0x7f0000001000)={0x4, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, r1, 0x0, &(0x7f0000001040)=[0xffffffffffffffff, r0, r0, r0, 0xffffffffffffffff, r0, r0, r0, r0, r0], 0x0, 0x10, 0xe}, 0x94) getsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f00000008c0)={@private, @empty, 0x0}, &(0x7f0000000900)=0xc) getpeername$packet(r0, &(0x7f0000000940)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000980)=0x14) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000c00)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000001140)=ANY=[@ANYBLOB="ac010000", @ANYRES16=r7, @ANYRES8=r5, @ANYRES32=r8, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="1c000180080003000100000008000100", @ANYRES32=r9, @ANYBLOB="08000100", @ANYRESDEC=r10, @ANYBLOB="04000300600102804c0001800800010000000000080001000600000008000100080000000800010008000000080001000500000008000100000000000800010004000000080001000200000008000100040000005400018008000100080000000800010008000000080001000400000008000100000000000800010002000000080001000000000008000100050000000800010005000000080001000700000008000100010000001c0001800800010001000000080001000800000008000100030000003400018008000100010000000800010005000000080001000100000008000100000000000800010003000000080001000100000044000180080001000200000008000100050000000800010005000000080001000400000008000100030000000800010008000000080001000500000008000100010000000c00018008000100070000001c000180080001000700000008000100020000000800010008000000"], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x8800) r11 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000780)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r12 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), r0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000700)={'ip6gre0\x00', &(0x7f0000000680)={'syztnl1\x00', 0x0, 0x2f, 0x3, 0x3, 0x3, 0x1956eb0f47a7c07d, @rand_addr=' \x01\x00', @private0, 0x20, 0x7, 0x5, 0x3ff}}) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r2, &(0x7f0000000800)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="020029bd7000fddbdf250400000008003c000000000008000300", @ANYRES32=r13, @ANYBLOB="08003c0080d341a0d7000b0006000000"], 0x34}, 0x1, 0x0, 0x0, 0x41844}, 0x8800) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r11, 0x5, 0xe, 0x0, &(0x7f0000001e40)="fc5cc45c490704289349a8af1d25", 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r14 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_buf(r14, 0x1, 0x48, 0x0, &(0x7f00000003c0)) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000c40)=ANY=[@ANYBLOB="9feb0100180000000000000098000000980000000b001d020000000000000000000001000000002a003f020c0000000100007557f8ac9a2f13dbf58c883506040000000d00000032feffff030000000000000b010000000e000000000000010000000051006606000000000300000d0000000007000000e3ff00000f000000010000000100000000009301000000010000000000000e02cfc5e7400000000900000000000009010000000d000000000000070000000000000000c7516100"/199], &(0x7f00000001c0)=""/15, 0xbb, 0xf, 0x1, 0x400}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000100010000000000000000006c239de02c676d31b90685000000411c473c0000009500000000000000"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4.223842083s ago: executing program 2 (id=3729): r0 = socket(0x10, 0x803, 0x0) (async) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040), 0xc, 0x0}, 0x0) (async) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r1, 0x0, 0x0) (async) getsockopt$inet_mptcp_buf(r1, 0x11c, 0x3, &(0x7f0000000040)=""/185, &(0x7f0000000140)=0xb9) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GENEVE_UDP_ZERO_CSUM6_TX={0x5, 0x9, 0x8f}, @IFLA_GENEVE_COLLECT_METADATA={0x4}, @IFLA_GENEVE_REMOTE6={0x14, 0x7, @private2}]}}}]}, 0x54}}, 0x0) 4.080803382s ago: executing program 0 (id=3730): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000580)={@in={{0x2, 0x4e03, @remote}}, 0x0, 0x0, 0x3c, 0x0, "ede10c90e0d6d4b2b1651d4ddc62e17b5f4fa4a45bc87ce8b6cab0b0bf814a73a752ff5d0f912a8eff0b48b4c25e7d5ae1e974f8cdaa3dccaccd26482b83f2a4afd000"}, 0xd8) (async) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0x20, &(0x7f0000000080)={@in={{0x2, 0x0, @multicast2}}, 0x3, 0x0, 0x1a, 0x0, "5ec800000000000000fabcaff49c2eeb8c4614c85b196a0c67a7768e058e3008931c08d43101cb8242bc42b8e0662749302c1ffcd1d1190000000000000000000000000000000000000000000200"}, 0xd8) (async) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r4, 0xa17, 0x70bd28, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4800}, 0xc114) (async, rerun: 32) r5 = socket(0x10, 0x3, 0x0) (rerun: 32) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000710435000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) (async, rerun: 32) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0xd4, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r2, {0x0, 0x8}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0xa4, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x68, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0xfcdd, 0x4, 0x8001}]}, {0x24, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x6}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x1000}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x40}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x0, 0x4, 0x1b}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x0, 0x3, 0xef}]}, {0x34, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x7}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x1}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x722}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x4}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x7}]}]}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x38, 0x2, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x18}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x2}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x3ff}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0xffffffff}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x7}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x8}]}]}]}}]}, 0xd4}, 0x1, 0x0, 0x0, 0x40001}, 0x10) (async, rerun: 32) r6 = syz_genetlink_get_family_id$wireguard(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x48, r6, 0x300, 0x70bd27, 0x25dfdbfc, {}, [@WGDEVICE_A_FWMARK={0x8, 0x7, 0x2}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e23}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}]}, 0x48}}, 0x20008010) (async, rerun: 32) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10) (async, rerun: 32) r7 = socket$alg(0x26, 0x5, 0x0) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000400)=@get={0x1, &(0x7f00000003c0), 0x10}) bind$alg(r7, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-384\x00'}, 0x58) (async) r8 = accept4(r7, 0x0, 0x0, 0x800) (async) r9 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x2, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xfff3}, {0xffff, 0xffff}, {0x0, 0x6}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_ECN={0x8}]}}]}, 0x3c}}, 0x2000400c) sendmsg$NL80211_CMD_SET_CQM(r8, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="04002bbd7000fbdbdf253f0000000c0099009a0000007c00000054005e8008000900f202000008000900030000000800020040000000100001000500000005000000080000000800020008000000080002000010000008000300800000000800020008000000080003000000000014005e8008000500180000000800090007000000"], 0x88}, 0x1, 0x0, 0x0, 0x4000}, 0x10) 4.04932804s ago: executing program 3 (id=3731): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) epoll_create1(0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000540)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e0001000d000000ba8000001201", 0x2e}], 0x1}, 0x0) getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000040)=""/32, &(0x7f0000000080)=0x20) write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0x6) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) epoll_create1(0x0) (async) socket$kcm(0x10, 0x2, 0x0) (async) sendmsg$kcm(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000540)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e0001000d000000ba8000001201", 0x2e}], 0x1}, 0x0) (async) getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000040)=""/32, &(0x7f0000000080)=0x20) (async) write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0x6) (async) 3.971959697s ago: executing program 2 (id=3732): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="83be4809a0accb1800000000000000000000000a6c000000060a0b04000000000000000002000000400004803c0001800a0001006c696d69740000002c0002800c000240000000000000000708000440000000010c000140000000000000000408000340ffffea7fd90c3e54bcaa64b41a418e35ffff0900011173797a30000000000900220073797a3200000000140000001100010000000000000000000000000a"], 0x94}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x0, 0x0, 0x0, 0x6f, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000780)=[{0x3, 0x4, 0x1, 0x7}, {0x1, 0x2, 0xc, 0x3}], 0x10, 0x80000000}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) shutdown(r2, 0x0) recvmsg$unix(r2, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}], 0x20}, 0x0) syz_open_procfs$namespace(r3, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x14, 0x0, 0x0) ioctl$int_in(r4, 0x5421, &(0x7f0000000000)=0x10100) connect$inet(r4, &(0x7f00000001c0)={0x2, 0x200, @local}, 0x10) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r7) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000280)={'veth0_to_hsr\x00'}) sendmsg$nl_route_sched(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b925, 0x25dfdc04, {0x0, 0x0, 0x0, r9, {0x0, 0xd}, {0xffff, 0xb}, {0xfffe, 0xffe0}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4040010}, 0x4890) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r10 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000001c0)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x300, r11, 0x3e}, 0x80, &(0x7f0000002080)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x0) splice(r4, 0x0, 0xffffffffffffffff, 0x0, 0x5, 0xa) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'sit0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x21dfdbfe, {0x0, 0x0, 0x0, r12, {}, {0xffff, 0xffff}, {0xe, 0x4}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x0, 0xb}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x4000010) 3.905207714s ago: executing program 0 (id=3733): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0xa, 0x1, 0x0) r4 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010026bd7000fbdbdf2503000000100007800c00018008000100", @ANYRES32=r3, @ANYBLOB="080001"], 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x20000844) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@newlink={0x40, 0x10, 0xffffffffffffffff, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x21ac6, 0x51a23}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_CREATE_SOCKETS={0x5, 0x5, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x20040040) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000710427000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) socket$inet6_tcp(0xa, 0x1, 0x0) 3.744312585s ago: executing program 3 (id=3734): r0 = socket$netlink(0x10, 0x3, 0xb) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@newtfilter={0x4c, 0x2c, 0xd3f, 0x70ad25, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x2, 0x4}, {0x0, 0x9}, {0xf, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x10, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0xc, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_DEPTH={0x5, 0x1, 0x1}]}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 3.581679801s ago: executing program 4 (id=3735): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10) (async) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r1, &(0x7f0000000400), 0x0}, 0x20) (async) r2 = socket$igmp6(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r2, 0x29, 0x22, &(0x7f0000000080)={{0xa, 0x0, 0x101, @empty}, {0xa, 0x0, 0x0, @dev}, 0x0, {[0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}}, 0x5c) (async) sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0x0) 3.501122554s ago: executing program 1 (id=3736): r0 = socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, r2}, [@IFA_ADDRESS={0x14, 0x1, @mcast1}, @IFA_FLAGS={0x8}]}, 0x34}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[], 0x3c}}, 0x0) 3.453299414s ago: executing program 0 (id=3737): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r0) (async) close(r0) ioctl$SIOCSIFHWADDR(r0, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random='\x00\x00\x00\x00\x00 '}) (async) ioctl$SIOCSIFHWADDR(r0, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random='\x00\x00\x00\x00\x00 '}) r1 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000080)=@generic={&(0x7f0000000100)='./file0\x00', 0x0, 0x8}, 0x18) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f00000000c0)={0x4}) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x2c, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8}, @TCA_FQ_FLOW_DEFAULT_RATE={0x8}, @TCA_FQ_ORPHAN_MASK={0x8, 0xa, 0x7ff}, @TCA_FQ_LOW_RATE_THRESHOLD={0x8, 0xb, 0x2}, @TCA_FQ_RATE_ENABLE={0x8, 0x5, 0xfffffffc}]}}]}, 0x58}}, 0x0) setsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000040)=0x44, 0x4) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x8847, &(0x7f0000000140)=[{&(0x7f0000000180)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe55a10a0007000140020203600e4109000800ac00060311000000160012000a00ff000000035c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000008af26c8b7b55f4d2a6823a45f28fcb1d", 0xd8}], 0x1}, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r6, &(0x7f00000004c0)={0xa, 0x4e22, 0x80000001, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x9}, 0x1c) ioctl$NILFS_IOCTL_DELETE_CHECKPOINT(r1, 0x40086e81, &(0x7f0000000540)=0x4) (async) ioctl$NILFS_IOCTL_DELETE_CHECKPOINT(r1, 0x40086e81, &(0x7f0000000540)=0x4) setsockopt$sock_int(r4, 0x1, 0x2a, &(0x7f0000000500)=0x6e, 0x4) (async) setsockopt$sock_int(r4, 0x1, 0x2a, &(0x7f0000000500)=0x6e, 0x4) ioctl$VFAT_IOCTL_READDIR_SHORT(r2, 0x82307202, &(0x7f0000000280)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) 3.2619208s ago: executing program 0 (id=3738): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = accept4$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14, 0x40000) getsockname$packet(r1, &(0x7f0000000080), &(0x7f00000001c0)=0x14) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=@updsa={0x154, 0x1a, 0x1, 0x0, 0x0, {{@in6=@local, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x2}, {@in, 0x0, 0x6c}, @in6=@mcast1, {}, {}, {}, 0x0, 0x0, 0xa}, [@replay_esn_val={0x1c}, @algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x154}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv4_newrule={0x30, 0x20, 0x301, 0x3, 0x0, {0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x8, 0x1f}, [@FRA_GENERIC_POLICY=@FRA_OIFNAME={0x14, 0x11, 'veth1_to_bridge\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x81}, 0x44004) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@getneightbl={0x14, 0x42, 0x100, 0x70bd2a, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x40008c0) 3.124967357s ago: executing program 3 (id=3739): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x28, 0x801, 0x0) sendmsg$xdp(r1, &(0x7f0000000240)={&(0x7f0000000000)={0x2c, 0x1, 0x0, 0x3}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x24008050}, 0x20000004) sendmsg$nl_route_sched(r0, &(0x7f0000005c40)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0xa0, 0x30, 0x9, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{}, {0x35, 0x0, 0x5}, {}, {}, {}, {}, {}]}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa0}}, 0x0) 2.522299797s ago: executing program 4 (id=3740): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) ioctl$XFS_IOC_PATH_TO_HANDLE(r1, 0xc0385869, &(0x7f0000000180)={r1, &(0x7f0000000080)='nl80211\x00', 0xc0000, &(0x7f00000000c0)={@align=0x1, {0x8, 0x7fff, 0x9, 0x100000000}}, 0x0, &(0x7f0000000100), &(0x7f0000000140)=0x3ff}) ioctl$SIOCGETVIFCNT(r2, 0x89e0, &(0x7f00000001c0)={0x1}) sendmmsg$alg(r1, &(0x7f0000000400)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), r1) 1.5614247s ago: executing program 4 (id=3741): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="5800800010000d0400"/20, @ANYRES32=0x0, @ANYBLOB="0000000008000000240012800c0001006d6163766c616e0014000280080001000400000008000900ffffffff140035006d6163766c616e300000000000000000"], 0x58}}, 0x8000) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c02000019000100000000000000000000000000000000000000ffff00000000ac1414bb00000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x23c}}, 0x4000) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket(0x10, 0x3, 0x0) r3 = socket$inet(0x2, 0x2, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(r3, 0x0, 0x63, &(0x7f0000000000)={'icmp6\x00'}, &(0x7f0000000040)=0x1e) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x2004088c}, 0x2000800) (async) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000080)={{{@in6=@loopback, @in6=@loopback, 0x4e23, 0x2, 0x4e20, 0x7, 0xa, 0xa0, 0x20, 0x3c}, {0x0, 0x9031, 0x9, 0x0, 0xfffffffffffffff4, 0x4, 0x7, 0x7}, {0x8001, 0x5, 0x71a, 0x9}, 0x9, 0x6e6bbe, 0x1, 0x7bbbbeaf0e80c2d7, 0x2}, {{@in=@private=0xa010100, 0x4d2, 0x3c}, 0xa, @in6=@mcast1, 0x34ff, 0x4, 0x3, 0xd, 0x1, 0x81c, 0xb}}, 0xe8) (async) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000e29d1b328bb17c5533f530f93600949f62a3784c4a68ec6eece4cec1d268feff368e9001e48eee9bda8a07f7bb9ec77aa455366230135824b9f05093a58c74b348f3362966ce909da47530418a08ed46eca1ed21045dfbc2d5d94bec5c29304b5fb8965e49a02050fe5e34df16b3b2f9ac65ff48db33768dd67ced36ff1b8a9dd72e5f4e13a3b28c2aa8295c11a20aba520b1196f8540232aa6d4635dadc00ed91f31cb45289083b36a9f79c3cb6b93c9df5f2ff1032ef66ade943a0d797e1c6b270e1183f724ce479", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0xf, &(0x7f0000000700)=ANY=[@ANYBLOB="18080000ff00000018140000", @ANYRES32=r4, @ANYRESOCT=r4, @ANYRESHEX, @ANYRES8], &(0x7f0000000640)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f0000000000)) (async) ioctl$PPPIOCSPASS(r5, 0x40107447, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{}, {0x0, 0x0, 0x0, 0xfff}]}) (async) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000049c0)=[{&(0x7f0000000040)=@in={0x2, 0x4e21, @multicast2}, 0x10, &(0x7f00000002c0)=[{&(0x7f00000001c0)="ed", 0x1}], 0x1, 0x0, 0x0, 0x24008040}], 0x1, 0x62048800) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x1c, &(0x7f0000000500)=[@in6={0xa, 0x4e21, 0x1ff, @local, 0xc}]}, &(0x7f0000000180)=0x10) (async) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000006c0), r6) sendmsg$IEEE802154_ASSOCIATE_RESP(r6, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000980)={0x1c, r7, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@IEEE802154_ATTR_STATUS={0x5, 0x3, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x7, &(0x7f0000000140)=0x3000, 0x4) (async) r8 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000c80)=ANY=[@ANYBLOB="540000001400b59500000000000000000a000000", @ANYBLOB="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", @ANYRESHEX, @ANYBLOB="08cdfb8f2bd550d1353601ae3520f4fe47c2691bb18ca411b84c0e0016493fd0a4c911ad12ee0fa137e0f27c63f6c285ee05f88e452a4a36e93ac5eaad74ed20c2006cc12585a3ac816d73ba64aaa0ec43ab6a2badb6d55d6c554ea17f6c3f22effe4b26a847a66500c981730b4ec9c7e996046d3e3a9c648577b5657bf3e1203dcf0d54ae897b5558102036e749928786db925f71e7f7c72cdcace84cd12e219884ee89798a38cfcab2d0f94d2f3c217b23c99b30f0dc8cccde9c37ef085ea4be2486af5744", @ANYRESHEX], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x4000040) (async) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0) r9 = socket$rds(0x15, 0x5, 0x0) bind$rds(r9, &(0x7f0000000080)={0x2, 0x1, @loopback}, 0x10) (async) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'bridge0\x00', 0x0}) (async) r11 = socket$packet(0x11, 0x2, 0x300) bind$packet(r11, &(0x7f00000000c0)={0x11, 0x18, r10, 0x1, 0x83, 0x6, @multicast}, 0x14) 430.597471ms ago: executing program 1 (id=3742): r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$inet(r1, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) close(r2) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$bt_hci(r3, 0x84, 0x7d, &(0x7f0000000840)=""/4127, &(0x7f0000000000)=0x101f) (async) getsockopt$bt_hci(r3, 0x84, 0x7d, &(0x7f0000000840)=""/4127, &(0x7f0000000000)=0x101f) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) setsockopt$sock_int(r4, 0x1, 0x1, 0x0, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd6708100000003aff00034000000000000000ffffac1414aaff020000000000000000000000000001"], 0x0) (async) syz_emit_ethernet(0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd6708100000003aff00034000000000000000ffffac1414aaff020000000000000000000000000001"], 0x0) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendfile(r0, r0, &(0x7f0000000080)=0x1, 0x8) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4) close(r6) (async) close(r6) socket$nl_route(0x10, 0x3, 0x0) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$XFS_IOC_SCRUBV_METADATA(r0, 0xc0285840, &(0x7f0000000140)={0x1ff, 0x7fff, 0x5, 0x0, 0x1, 0x3, 0x0, &(0x7f00000001c0)=[{0x0, 0x101, 0x2}, {0x16, 0x101, 0x7}, {0x5, 0xfe, 0x5}]}) sendmsg$nl_route(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c00000010003df600"/20, @ANYRES8=r0, @ANYRES64=r7, @ANYRES32=r5], 0x4c}, 0x1, 0x0, 0x0, 0x11}, 0x8000) (async) sendmsg$nl_route(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c00000010003df600"/20, @ANYRES8=r0, @ANYRES64=r7, @ANYRES32=r5], 0x4c}, 0x1, 0x0, 0x0, 0x11}, 0x8000) 381.255268ms ago: executing program 3 (id=3743): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWSETELEM={0x7c, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x50, 0x3, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_KEY_END={0x34, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x10c6f7a0b5ec}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x108}}, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001340)={r0, &(0x7f0000000100)="79cd2e98dd72cb982572ed3374a2f028ce64988e1be698a5ac6bf33284636322a3e3cab6628710cd81562aa599b301d1646ef7a14bc32445b3ca5b229531a7f2a7334272b3a92a6273edd239ca2c1b7bb1d87fc0c89e66af3596fbdfe826fa8152c906fae548efde1934de3319f33cdf5b3d3bcb5ea2237cb5a9ee2e423c0a2e932232aa4dda36ccf3270d9b62023b671660c97ff9ff6116f4c02cdb154a9f", &(0x7f0000000340)=""/4096}, 0x20) 361.84457ms ago: executing program 0 (id=3744): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000005500)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000400)="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", 0x142}, {&(0x7f0000000180)="23ade41881a1e7ca07379924e2cb53138ec1e2ac415947eb6c7f56319ff90032d5b900000000c49134d1d57bf4cf20e6ba85156f3c5aa55a181146316537eceea0fff85f05333feea12645495ffa00000000000000", 0x55}, {&(0x7f0000000140)="66348451d22f5e2e4385e0bf75c5c3d30327039c072cd147f3b25df80100010000000004706aa85896228ef23136cbc160147a23", 0x34}, {&(0x7f0000000840)="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", 0x15c}, {&(0x7f0000000280)="1b1eb47967b8c59413baaf1384ad9c758abf845c5714a919ca02735c5514fa78f9f084d72227c10900000000000000169535d0b2bb594ecb92b8df361bca805ac5595a389d39a58a35c0ff662c2c83431c0c2e2ece5ca6a104d1d45c1c15ca4d75cab6b1bb923cac1c51270bf5230d77cf4c79ba54a6c45a345cc13208fa430c1e54548e5a9c5cf45337451511abc0a7d3539ac22191025d5655a5d05c4024b8cb0fb4aabeb6fd575b631eedf691f55e7f6d2c2a8b3e08520a96eb0aa5db49afc24b7a78cf11373b0000", 0xca}], 0x5, 0x0, 0x0, 0x4}], 0x1, 0x4014) (async) sendmmsg$alg(r1, &(0x7f0000005500)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000400)="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", 0x142}, {&(0x7f0000000180)="23ade41881a1e7ca07379924e2cb53138ec1e2ac415947eb6c7f56319ff90032d5b900000000c49134d1d57bf4cf20e6ba85156f3c5aa55a181146316537eceea0fff85f05333feea12645495ffa00000000000000", 0x55}, {&(0x7f0000000140)="66348451d22f5e2e4385e0bf75c5c3d30327039c072cd147f3b25df80100010000000004706aa85896228ef23136cbc160147a23", 0x34}, {&(0x7f0000000840)="000000000100000058473cabd427d746ca7d9bbf4f24ec7659b1c254940281f0a248dfc8c103fad1369a53e340d110b77170735064ceae5fcf381d21cc8960440e0a459705262c4c53065f369fe8e63b46a53009cec75dd608e2e86ff9b9c7650112b91fdcca8616f6013241ceff93fd8cdab5a479b9614318eedd5a609b633b114f0030c80bc3b7fe6320e9f2e5a824c14aa3cccac383bacd0a126a9675ad5c41c171807570ac0501332c2794950f4633a074325e58cd43cf8340513dbc10eaaf4ff3c4b8d98621267d8b1abdbf01d7de9a86c2d4373dd907da5ae1d44537fb96b50a65e0dd0ab100020000000000004c8f4e350b487c88a5fababc1cd73038625a27280000005c5610ba38f13d9f3b2605404c5137fc4a61d3fc2b061cd0820e0ce9489901d6854860a57b2f0cf41d58b8182bb215f5a5909782e2c0c18d78f7f0b8824f57a970d361d041f859641cb7e287c1c31307b48ff5f69f", 0x15c}, {&(0x7f0000000280)="1b1eb47967b8c59413baaf1384ad9c758abf845c5714a919ca02735c5514fa78f9f084d72227c10900000000000000169535d0b2bb594ecb92b8df361bca805ac5595a389d39a58a35c0ff662c2c83431c0c2e2ece5ca6a104d1d45c1c15ca4d75cab6b1bb923cac1c51270bf5230d77cf4c79ba54a6c45a345cc13208fa430c1e54548e5a9c5cf45337451511abc0a7d3539ac22191025d5655a5d05c4024b8cb0fb4aabeb6fd575b631eedf691f55e7f6d2c2a8b3e08520a96eb0aa5db49afc24b7a78cf11373b0000", 0xca}], 0x5, 0x0, 0x0, 0x4}], 0x1, 0x4014) recvmmsg(r1, &(0x7f0000003c80)=[{{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1}, 0xffffff0b}], 0x2, 0x2001, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x0, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x6}, 0x8, 0x10, &(0x7f00000000c0), 0x10}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xf}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) sendmsg(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000040)=@ll={0x11, 0x7, r3, 0x1, 0x8}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000100)="323d2340c6185bf5dd1d538a7af1a930cbc1f90bf4a885bf412b3479cc866a1dfa32d9856a7cfb20fc1059c01f902e00aa6f4aeb521633f5622b37f8219e", 0x3e}, {&(0x7f0000000140)="b0f3f64bf8ef0cb1ac95889c367b7f4944c44e001bd23fba2fe4db95aa298747d490dfa252b096f18c43f3bab80d1ae712c2d582ccdea167434cd9b37baf6e591a63bfb2c4cb687c839daa8823ebe4035599752ca604ab96acd24a2dee9a95a37e83172cc962b7c4864d9830c002a86f800cd84ae77d39", 0x77}, {&(0x7f0000000200)="7db90f159aa0b0ac0322ad91c7b7d0d9a1a93ac1258bf7781caea7565757ef9aa2aa315fdaaf7ef145167c66a2aa8c954288b3d383a26241c1708cbe8445d699341a12aee53a3083e728", 0x4a}, {&(0x7f0000000280)="6af20c8b21d3be6835bfccab70bbb066c5a05bb3879454f20f57c0af04260da0f352b0b40ac9a5436d", 0x29}, {&(0x7f00000002c0)="4f4cc9d44de83f22fdd128d0351d9dceed9eb23429133380766759deaa9db8fb9d0b0de2161c98a3d731a1fb7abdac252636aefe47a49f357b71cadcc7b64b105a397b1ab26ad9ec198002a63f0cccadca0e963fabefb7ed9f6749da3f1285d0bf51c1231188825d404478e35d69685f01d76c32df5ea1969f2ce1a50398122c21b578f72326b2c7b303cdd81ddcda9a8f3266f54a4f395c5bdfa489879d7b2ae8456046026039c262a05a473c574c9113a2adca32af04b74a43cc9fec65f7ed509253c117e4db363573fb4df75d61fe18891c98588d4c3b04df3eec13e9386c42b29079", 0xe4}, {&(0x7f00000003c0)="d8d4ff92b23fd984a8bf466708da2a9257d68dfba7c7cd51b2535a4e33fa0def3ccaabd48b41bb474b80784018e83b75336abd1b6957f9cff5faa54793020432c4217ba68c1bcdde7e14f801eb006aa6129481616dbd73c8a1ceabf5f02a7c1e6cbce68ec50ea13bb68d5559782a0c2af97c4880ac1689f81fc4fe03f86ae3e7d88caf9cc08a3308d1c8af5d73cfa6101e93bcc3c22721b8687bd4162662c43a3641c9b429799378b47fd14b6983671a6d7fc11eb5ebdfb15c676ed3ce399728ec", 0xc1}], 0x6}, 0x0) (async) sendmsg(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000040)=@ll={0x11, 0x7, r3, 0x1, 0x8}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000100)="323d2340c6185bf5dd1d538a7af1a930cbc1f90bf4a885bf412b3479cc866a1dfa32d9856a7cfb20fc1059c01f902e00aa6f4aeb521633f5622b37f8219e", 0x3e}, {&(0x7f0000000140)="b0f3f64bf8ef0cb1ac95889c367b7f4944c44e001bd23fba2fe4db95aa298747d490dfa252b096f18c43f3bab80d1ae712c2d582ccdea167434cd9b37baf6e591a63bfb2c4cb687c839daa8823ebe4035599752ca604ab96acd24a2dee9a95a37e83172cc962b7c4864d9830c002a86f800cd84ae77d39", 0x77}, {&(0x7f0000000200)="7db90f159aa0b0ac0322ad91c7b7d0d9a1a93ac1258bf7781caea7565757ef9aa2aa315fdaaf7ef145167c66a2aa8c954288b3d383a26241c1708cbe8445d699341a12aee53a3083e728", 0x4a}, {&(0x7f0000000280)="6af20c8b21d3be6835bfccab70bbb066c5a05bb3879454f20f57c0af04260da0f352b0b40ac9a5436d", 0x29}, {&(0x7f00000002c0)="4f4cc9d44de83f22fdd128d0351d9dceed9eb23429133380766759deaa9db8fb9d0b0de2161c98a3d731a1fb7abdac252636aefe47a49f357b71cadcc7b64b105a397b1ab26ad9ec198002a63f0cccadca0e963fabefb7ed9f6749da3f1285d0bf51c1231188825d404478e35d69685f01d76c32df5ea1969f2ce1a50398122c21b578f72326b2c7b303cdd81ddcda9a8f3266f54a4f395c5bdfa489879d7b2ae8456046026039c262a05a473c574c9113a2adca32af04b74a43cc9fec65f7ed509253c117e4db363573fb4df75d61fe18891c98588d4c3b04df3eec13e9386c42b29079", 0xe4}, {&(0x7f00000003c0)="d8d4ff92b23fd984a8bf466708da2a9257d68dfba7c7cd51b2535a4e33fa0def3ccaabd48b41bb474b80784018e83b75336abd1b6957f9cff5faa54793020432c4217ba68c1bcdde7e14f801eb006aa6129481616dbd73c8a1ceabf5f02a7c1e6cbce68ec50ea13bb68d5559782a0c2af97c4880ac1689f81fc4fe03f86ae3e7d88caf9cc08a3308d1c8af5d73cfa6101e93bcc3c22721b8687bd4162662c43a3641c9b429799378b47fd14b6983671a6d7fc11eb5ebdfb15c676ed3ce399728ec", 0xc1}], 0x6}, 0x0) 289.00829ms ago: executing program 2 (id=3745): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$inet(r0, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e22, @remote}, 0x10, &(0x7f0000000380)=[{&(0x7f00000001c0)="91cf", 0x2}], 0x1}, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x24, 0x68, 0x1, 0x0, 0x0, {0x2}, [@NHA_BLACKHOLE={0x4}, @NHA_OIF={0x8}]}, 0x24}}, 0x0) sendmsg$rds(r0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) 242.973566ms ago: executing program 4 (id=3746): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r1, &(0x7f0000000000)="c5", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x15}, 0x1c) setsockopt$inet6_mreq(r1, 0x29, 0x2d, 0x0, 0x0) sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000001c0)={&(0x7f00000007c0)={0x14, 0xb, 0x6, 0x801, 0x0, 0x0, {0x1, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x4048811}, 0x24048000) socket$nl_audit(0x10, 0x3, 0x9) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000002000000000000000000000b000000000000"], 0x0, 0x26}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000300)={r3, 0x100000, 0x0}, 0x10) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) write$nci(r4, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0xeb) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000480)={&(0x7f0000000740)={0x60, r5, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x5}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xfffffffa}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4040040}, 0x4800) r6 = socket(0x26, 0x1, 0x0) getsockopt$TIPC_SRC_DROPPABLE(r6, 0x10f, 0x80, 0xffffffffffffffff, &(0x7f0000000580)=0x4e) sendmsg$AUDIT_GET(r6, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000340)={&(0x7f00000005c0)={0x10, 0x3e8, 0x8, 0x70bd29, 0x25dfdbff, "", ["", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x8001}, 0x80) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="0000060000020500010007000007801800218014000240fe8000000000000000000008000000bb060004404e2100000524d51c3038ce8ec1e5184517c50007001600000005000306650000000900"], 0x5c}, 0x1, 0x0, 0x0, 0x20008041}, 0x24008084) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0xf, &(0x7f000000c280)={&(0x7f0000000540)=ANY=[@ANYRESOCT=r5], 0xac}, 0x1, 0x0, 0x0, 0x44008815}, 0x48000) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [], {0x14}}, 0x28}, 0x1, 0x0, 0x0, 0x20044841}, 0x802) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r9 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r9, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xa004}, 0x4) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r11 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r10, &(0x7f0000000700)=ANY=[@ANYBLOB="000088b5aaaaaaaaaa29bbbbbbbbbbbb080045190f"], 0x26) sendmsg$IPSET_CMD_FLUSH(r8, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="54000002040603000000000000000000010000050500010007000000050001000700000005000100070000000900020073797a30000000000900020001797a310000000005000100070000000500010007000000"], 0x54}}, 0x20000051) 127.010571ms ago: executing program 3 (id=3747): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={0x5c, r4, 0x1, 0x70bd28, 0x0, {}, [@TIPC_NLA_NODE={0x48, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x44, 0x4, {'gcm(aes)\x00', 0x1c, "e3de3d7b4cd07ec3ee777dee74fc7986cc8df2165c8a7cc0483e375b"}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x48040}, 0x4000004) socket$kcm(0x10, 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f00000005c0), r5) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000600)={0x14, r6, 0x1, 0x70bd25, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x20000004}, 0x844) (async) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000600)={0x14, r6, 0x1, 0x70bd25, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x20000004}, 0x844) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000300)={r5, 0x9, 0x9, 0x6}) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@cgroup=r7, 0x2f, 0x0, 0xfffffffe, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f0000000140)=[0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@cgroup=r7, 0x2f, 0x0, 0xfffffffe, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f0000000140)=[0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x28, r1, 0x331, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x6}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED]}, 0x28}}, 0x0) (async) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x28, r1, 0x331, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x6}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED]}, 0x28}}, 0x0) 72.780983ms ago: executing program 0 (id=3748): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)={0x14, r1, 0x303, 0x70bd29, 0x25dfdbff, {0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x48890}, 0x20000804) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r4) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r6], 0x1c}}, 0x4008054) write$nci(r3, &(0x7f00000004c0)=ANY=[@ANYBLOB="7103b3"], 0xb6) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5}, 0x94) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x15, 0x301, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADD(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002, 0x0, 0x800}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r7], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r8, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r10, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) writev(r2, &(0x7f00000024c0)=[{&(0x7f0000000240)="0d850ecd33a42b86f08a86e396e0af7133653b85edbd976c2a338c922a667eae1c94c629c93d8fda25f9670238c3ed769485a3df4c091e882367ad5d9caedcd48a", 0x41}], 0x1) r11 = socket$netlink(0x10, 0x3, 0x1) accept(r11, 0x0, &(0x7f0000000000)) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0) r12 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r12, 0x10c, 0x3, &(0x7f0000000040), 0x4) 57.853574ms ago: executing program 2 (id=3749): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DIRECTION={0x5}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_CT_DREG={0x8, 0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)={'sit0\x00', &(0x7f0000000080)={'ip_vti0\x00', 0x0, 0x40, 0x8000, 0x9, 0x10000, {{0x23, 0x4, 0x0, 0xd, 0x8c, 0x66, 0x0, 0x4, 0x4, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010101, {[@rr={0x7, 0xf, 0x31, [@empty, @dev={0xac, 0x14, 0x14, 0x15}, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @noop, @timestamp={0x44, 0x10, 0x45, 0x0, 0x8, [0xe, 0x8, 0x3a5]}, @ssrr={0x89, 0xb, 0xd0, [@loopback, @multicast1]}, @noop, @ssrr={0x89, 0x23, 0xe8, [@empty, @remote, @rand_addr=0x64010100, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, @rand_addr=0x64010101]}, @ssrr={0x89, 0x1b, 0x3f, [@initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0x41}, @rand_addr=0x64010100, @remote, @broadcast]}, @timestamp_addr={0x44, 0xc, 0x3e, 0x1, 0xf, [{@remote, 0x2e21}]}]}}}}}) sendto$packet(r2, &(0x7f0000000000)="1470f9bcc0f3b1b108d9cd7ef38d541911337bbbb3fe2602c92352931a", 0x1d, 0x40, &(0x7f0000000180)={0x11, 0xf5, r3, 0x1, 0xc3, 0x6, @broadcast}, 0x14) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=@newlink={0x2c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40010}, [@IFLA_BROADCAST={0xa, 0x2, @random="1dc53d488727"}]}, 0x2c}, 0x1, 0xba01}, 0x0) 0s ago: executing program 1 (id=3750): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4001, 0xfffffffe, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3d}, 0x1c) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv4_newrule={0x24, 0x20, 0x1, 0x0, 0x0, {}, [@FRA_GENERIC_POLICY=@FRA_IP_PROTO={0x5, 0x19, 0x3c}]}, 0x24}}, 0x48850) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "fe3000", 0x10, 0x3a, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, {[], @ni={0x4e8ef1decde2b390, 0x0, 0x0, 0x1, 0x2, 0xa6f}}}}}}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000140), 0x1003}, 0x6d) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f0000000780)={'pim6reg0\x00', 0x400}) close(0x3) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_SET(r4, 0x0, 0x0) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000048000000160a01020000000000000000010000000900010073797a30000000000900020073797a3000000000140003800800024000000000080001400000000008000740000000015c000000160a01010000000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014000100626ff96430000000001700000000d5001400010076657468305f746f5f7465616d00"], 0xec}}, 0x0) ioctl$sock_ifreq(r5, 0x8910, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) close(r5) kernel console output (not intermixed with test programs): t with an inconsistent configuration, please check. [ 324.994116][T13575] gtp1: entered allmulticast mode [ 325.000215][T13583] IPVS: ip_vs_edit_dest(): server weight less than zero [ 325.017343][T13575] gtp1: entered promiscuous mode [ 325.038565][T13583] __nla_validate_parse: 1 callbacks suppressed [ 325.038612][T13583] netlink: 88 bytes leftover after parsing attributes in process `syz.4.2063'. [ 325.040279][T13575] team0: Device gtp1 is of different type [ 325.124062][T13591] netlink: 'syz.0.2065': attribute type 1 has an invalid length. [ 325.236916][T13593] netlink: 'syz.3.2067': attribute type 1 has an invalid length. [ 325.445422][T13594] ip6gretap1: entered promiscuous mode [ 325.461407][T13594] ip6gretap1: entered allmulticast mode [ 325.482607][T13594] bond5: (slave ip6gretap1): making interface the new active one [ 325.498941][T13594] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 325.510751][T13594] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 325.525941][T13594] bond5: (slave ip6gretap1): Enslaving as an active interface with an up link [ 325.538259][T13601] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2068'. [ 326.018966][T13618] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2076'. [ 326.048259][T13619] syz_tun: entered allmulticast mode [ 326.124549][T13621] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2077'. [ 326.150136][T13619] dvmrp8: entered allmulticast mode [ 326.179892][T13616] syz_tun: left allmulticast mode [ 326.186720][T13621] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2077'. [ 326.404275][T13631] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2080'. [ 326.440872][T13633] ip6gre0: Master is either lo or non-ether device [ 326.639260][T13639] netlink: 284 bytes leftover after parsing attributes in process `syz.3.2080'. [ 326.779493][T13642] bond6: option arp_all_targets: invalid value (18446744073709551613) [ 326.821647][T13642] bond6 (unregistering): Released all slaves [ 327.247093][T13672] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2089'. [ 327.257947][T13670] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2090'. [ 327.260545][T13666] bond6: (slave gre0): Device is not bonding slave [ 327.274358][T13666] bond6: option active_slave: invalid value (gre0) [ 327.281350][T13672] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2089'. [ 327.298993][T13666] bond6 (unregistering): Released all slaves [ 328.219368][T13726] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 328.289472][T13724] vlan4: entered promiscuous mode [ 328.321163][T13724] hsr0: entered promiscuous mode [ 328.337424][T13724] vlan4: entered allmulticast mode [ 328.362595][T13724] hsr0: entered allmulticast mode [ 328.388584][T13724] hsr_slave_0: entered allmulticast mode [ 328.921765][T13754] netlink: 'syz.3.2117': attribute type 1 has an invalid length. [ 329.111874][T13759] xt_CT: You must specify a L4 protocol and not use inversions on it [ 329.259099][T13765] netlink: 'syz.1.2119': attribute type 2 has an invalid length. [ 329.349095][T13765] : entered promiscuous mode [ 329.523682][ T29] audit: type=1107 audit(1782759594.749:4): pid=13778 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='Ù‹5ž÷Œ•%èÍUýAÊÃËÙ ë0ä™l…t¿Ý•/Öÿ Ž6òŠ¨Šç›' [ 329.548816][ T29] audit: type=1107 audit(1782759594.769:5): pid=13778 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='Ù‹5ž÷Œ•%èÍUýAÊÃËÙ ë0ä™l…t¿Ý•/Öÿ Ž6òŠ¨Šç›' [ 329.661098][T13796] xt_TCPMSS: Only works on TCP SYN packets [ 329.946730][T13798] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 329.992029][T13798] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 330.118711][T13809] __nla_validate_parse: 6 callbacks suppressed [ 330.118732][T13809] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2130'. [ 330.279787][T13809] veth1_macvtap: left promiscuous mode [ 330.325536][T13827] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2133'. [ 330.479640][T13829] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2134'. [ 330.855733][T13845] netlink: 'syz.0.2139': attribute type 1 has an invalid length. [ 331.009035][T13845] 8021q: adding VLAN 0 to HW filter on device bond6 [ 331.103624][T13850] bond6: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 331.399306][T13865] netlink: 'syz.2.2146': attribute type 1 has an invalid length. [ 331.417196][T13866] RDS: rds_bind could not find a transport for 400:0:1200:0:1030:0:ffff:ffff, load rds_tcp or rds_rdma? [ 331.451963][T13873] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2146'. [ 331.567804][T13876] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2149'. [ 331.627968][T13877] syzkaller0: entered promiscuous mode [ 331.645597][T13877] syzkaller0: entered allmulticast mode [ 331.983481][T13895] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2153'. [ 332.100833][T13895] bond13 (unregistering): Released all slaves [ 332.117831][T13902] netlink: 'syz.2.2155': attribute type 3 has an invalid length. [ 332.250315][T13904] netlink: 'syz.0.2154': attribute type 27 has an invalid length. [ 332.268304][T13904] netlink: 'syz.0.2154': attribute type 4 has an invalid length. [ 332.290603][T13904] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2154'. [ 332.738306][T13923] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2162'. [ 332.748276][T13920] openvswitch: netlink: Flow key attr not present in new flow. [ 332.759082][T13920] netlink: 'syz.0.2160': attribute type 2 has an invalid length. [ 332.814540][T13926] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2162'. [ 332.858032][T13926] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2162'. [ 332.948320][T13935] netlink: 'syz.2.2163': attribute type 17 has an invalid length. [ 334.151027][T13980] netlink: 'syz.2.2174': attribute type 83 has an invalid length. [ 334.301236][T13973] macsec0: entered promiscuous mode [ 334.322335][T13973] bridge0: entered promiscuous mode [ 334.335997][T13973] macsec0: entered allmulticast mode [ 334.342199][T13973] bridge0: entered allmulticast mode [ 334.349923][T13973] bridge0: port 3(macsec0) entered blocking state [ 334.364806][T13973] bridge0: port 3(macsec0) entered disabled state [ 334.508062][T13973] bridge0: left allmulticast mode [ 334.514128][T13973] bridge0: left promiscuous mode [ 334.570418][T13987] lo: entered allmulticast mode [ 334.577637][T13987] lo: left allmulticast mode [ 334.758617][T13999] openvswitch: netlink: IP tunnel dst address not specified [ 334.871844][T14001] openvswitch: netlink: Flow actions attr not present in new flow. [ 335.683531][T14042] tipc: Enabling of bearer rejected, failed to enable media [ 335.744277][T14043] __nla_validate_parse: 8 callbacks suppressed [ 335.744314][T14043] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2195'. [ 335.828077][T14042] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2195'. [ 335.909510][T14052] syzkaller0: entered promiscuous mode [ 335.930649][T14052] syzkaller0: entered allmulticast mode [ 336.098071][T14068] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2202'. [ 336.112837][T14068] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2202'. [ 336.132273][T14068] netlink: 'syz.1.2202': attribute type 12 has an invalid length. [ 336.151576][T14068] netlink: 'syz.1.2202': attribute type 11 has an invalid length. [ 336.485222][T14087] netlink: 388 bytes leftover after parsing attributes in process `syz.2.2206'. [ 337.078181][T14108] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2219'. [ 337.088721][T14110] netlink: 'syz.1.2220': attribute type 2 has an invalid length. [ 337.117737][T14108] vcan0 (unregistering): left allmulticast mode [ 337.182871][T14112] netdevsim netdevsim2 netdevsim2: IPsec offload requires 128 bit authentication [ 337.276627][T14116] netlink: 'syz.3.2221': attribute type 1 has an invalid length. [ 337.644392][T14134] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2223'. [ 337.901435][T14146] netlink: 'syz.1.2227': attribute type 2 has an invalid length. [ 338.041924][T14154] netlink: 'syz.0.2232': attribute type 1 has an invalid length. [ 338.074223][T14154] netlink: 228 bytes leftover after parsing attributes in process `syz.0.2232'. [ 338.275810][T14162] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 338.356432][T14166] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2236'. [ 338.374809][T14168] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2234'. [ 338.467694][ T1180] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 338.503981][ T9588] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 338.514302][ T1180] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 338.703898][T14182] ieee802154 phy0 wpan0: encryption failed: -90 [ 338.946899][ T9588] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 339.054599][ T9] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 340.552705][T14259] netlink: 'syz.0.2266': attribute type 1 has an invalid length. [ 340.781031][T14259] 8021q: adding VLAN 0 to HW filter on device bond7 [ 341.299605][T14278] __nla_validate_parse: 1 callbacks suppressed [ 341.299624][T14278] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2270'. [ 341.711838][ T1164] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 341.780950][T14280] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 342.066686][T14287] syzkaller0: entered promiscuous mode [ 342.084840][T14287] syzkaller0: entered allmulticast mode [ 342.217300][T14306] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2275'. [ 342.792463][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 342.858243][T14323] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2278'. [ 344.484693][T14313] vlan3: entered allmulticast mode [ 344.491106][T14313] veth1_virt_wifi: entered allmulticast mode [ 344.606485][T14325] syzkaller1: entered promiscuous mode [ 344.632294][T14325] syzkaller1: entered allmulticast mode [ 344.761551][T14333] syzkaller0: entered promiscuous mode [ 344.785750][T14333] syzkaller0: entered allmulticast mode [ 344.819508][T14331] tipc: Enabled bearer , priority 0 [ 344.921596][T14330] sch_tbf: peakrate 9 is lower than or equals to rate 3838 ! [ 344.982837][T14340] netlink: 'syz.2.2283': attribute type 2 has an invalid length. [ 345.018727][T14330] tipc: Resetting bearer [ 345.029430][T14340] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2283'. [ 345.087894][T14343] sctp: [Deprecated]: syz.4.2284 (pid 14343) Use of struct sctp_assoc_value in delayed_ack socket option. [ 345.087894][T14343] Use struct sctp_sack_info instead [ 345.180118][T14330] tipc: Disabling bearer [ 345.359400][T14354] tipc: Enabling of bearer rejected, media not registered [ 345.415089][T14360] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2286'. [ 345.446024][T14359] netlink: 'syz.4.2287': attribute type 2 has an invalid length. [ 345.497048][T14360] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2286'. [ 345.548991][T14360] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2286'. [ 345.593465][T14368] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2289'. [ 345.649004][T14358] xt_ecn: cannot match TCP bits for non-tcp packets [ 345.675647][T14370] netlink: 'syz.3.2291': attribute type 1 has an invalid length. [ 346.205397][T14388] tipc: Started in network mode [ 346.228056][T14388] tipc: Node identity ca6efaeb0ca, cluster identity 4711 [ 346.265563][T14388] tipc: Enabled bearer , priority 0 [ 346.365419][T14388] xt_nat: multiple ranges no longer supported [ 346.498244][T14393] syzkaller0: entered promiscuous mode [ 346.513978][T14393] syzkaller0: entered allmulticast mode [ 346.534717][T14393] tipc: Resetting bearer [ 346.566060][T14382] tipc: Resetting bearer [ 346.594703][T14402] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2301'. [ 346.622394][T14402] netlink: 'syz.0.2301': attribute type 7 has an invalid length. [ 346.634176][T14402] netlink: 'syz.0.2301': attribute type 8 has an invalid length. [ 346.643390][T14402] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2301'. [ 346.689616][T14407] netlink: 272 bytes leftover after parsing attributes in process `syz.2.2302'. [ 347.045025][T14417] netlink: 'syz.3.2304': attribute type 8 has an invalid length. [ 347.104531][T14417] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2304'. [ 348.689435][T14382] tipc: Disabling bearer [ 348.709211][ T9582] tipc: Node number set to 3335453419 [ 348.973410][T14420] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2305'. [ 349.005293][T14428] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 349.019765][T14427] netlink: 5680 bytes leftover after parsing attributes in process `syz.2.2308'. [ 349.052302][T14429] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 349.139064][T14432] syzkaller0: entered promiscuous mode [ 349.150571][T14432] syzkaller0: entered allmulticast mode [ 349.386463][T14442] netlink: 256 bytes leftover after parsing attributes in process `syz.3.2313'. [ 349.699214][T14458] block nbd0: NBD_DISCONNECT [ 349.717591][T14458] block nbd0: Send disconnect failed -32 [ 349.775941][T14458] block nbd0: shutting down sockets [ 349.816829][T14457] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2317'. [ 349.891497][T14458] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2318'. [ 349.937346][T14470] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2320'. [ 350.054040][T14468] tipc: Enabled bearer , priority 0 [ 350.088307][T14468] syzkaller0: entered promiscuous mode [ 350.106138][T14468] syzkaller0: entered allmulticast mode [ 350.159557][T14471] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 350.243362][T14480] netlink: 'syz.2.2324': attribute type 4 has an invalid length. [ 350.381990][T14464] tipc: Resetting bearer [ 350.447208][T14483] netlink: 'syz.2.2324': attribute type 1 has an invalid length. [ 350.461978][T14464] tipc: Disabling bearer [ 350.616122][T14486] syzkaller1: entered promiscuous mode [ 350.637036][T14492] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 350.652032][T14486] syzkaller1: entered allmulticast mode [ 350.853412][T14498] IPVS: set_ctl: invalid protocol: 11612 172.20.20.11:21 [ 350.911731][T14498] IPVS: lc: FWM 3 0x00000003 - no destination available [ 351.385737][T14513] syzkaller0: entered promiscuous mode [ 351.402881][T14513] syzkaller0: entered allmulticast mode [ 351.612268][T14521] bond8: Removing last ns target with arp_interval on [ 351.640453][T14521] bridge0: entered promiscuous mode [ 351.648113][T14521] bridge0: entered allmulticast mode [ 351.662379][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 352.149940][T14544] netlink: 'syz.2.2341': attribute type 1 has an invalid length. [ 352.186272][T14550] netlink: 'syz.0.2343': attribute type 39 has an invalid length. [ 352.345963][T14553] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 352.665392][T14567] netlink: 'syz.0.2349': attribute type 63 has an invalid length. [ 352.677509][T14565] __nla_validate_parse: 6 callbacks suppressed [ 352.677561][T14565] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2347'. [ 352.704427][T14565] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2347'. [ 352.722801][T14567] netlink: 'syz.0.2349': attribute type 63 has an invalid length. [ 352.762399][T14567] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2349'. [ 352.803686][T14571] netlink: 'syz.3.2348': attribute type 17 has an invalid length. [ 352.838782][T14563] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2346'. [ 352.934422][T14563] tipc: Started in network mode [ 352.959471][T14563] tipc: Node identity 02497f56d08e, cluster identity 4711 [ 353.002583][T14563] tipc: Enabled bearer , priority 0 [ 353.130871][T14587] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2353'. [ 353.141229][T14568] syzkaller0: entered promiscuous mode [ 353.148049][T14568] syzkaller0: entered allmulticast mode [ 353.156952][T14568] tipc: Resetting bearer [ 353.184603][T14581] netlink: 144 bytes leftover after parsing attributes in process `syz.1.2353'. [ 353.219235][T14587] 8021q: adding VLAN 0 to HW filter on device bond6 [ 353.228174][T14562] tipc: Resetting bearer [ 353.277477][T14586] netlink: 'syz.4.2354': attribute type 4 has an invalid length. [ 355.401129][T14562] tipc: Disabling bearer [ 355.421694][T14581] macvlan2: entered promiscuous mode [ 355.428174][T14581] macvlan2: entered allmulticast mode [ 355.435384][T14581] bond6: entered promiscuous mode [ 355.441109][T14581] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 355.454885][T14581] bond6: left promiscuous mode [ 355.525506][ T9] tipc: Node number set to 3536289622 [ 356.061346][T14624] netlink: 'syz.4.2363': attribute type 1 has an invalid length. [ 356.231258][T14624] bond9: entered promiscuous mode [ 356.240816][T14624] 8021q: adding VLAN 0 to HW filter on device bond9 [ 356.436815][T14633] IPVS: set_ctl: invalid protocol: 0 127.0.0.1:20002 [ 356.460995][T14642] netlink: 'syz.4.2368': attribute type 1 has an invalid length. [ 356.470693][T14642] netlink: 756 bytes leftover after parsing attributes in process `syz.4.2368'. [ 356.699104][T14654] netlink: 240 bytes leftover after parsing attributes in process `syz.4.2368'. [ 356.828952][T14657] netlink: 236 bytes leftover after parsing attributes in process `syz.0.2372'. [ 356.856112][T14657] netlink: 236 bytes leftover after parsing attributes in process `syz.0.2372'. [ 357.499005][T14688] netlink: 'syz.1.2379': attribute type 83 has an invalid length. [ 358.190031][T14719] __nla_validate_parse: 1 callbacks suppressed [ 358.190077][T14719] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2387'. [ 358.292253][T14723] batadv1: entered allmulticast mode [ 358.807191][T14742] netlink: 252 bytes leftover after parsing attributes in process `syz.3.2395'. [ 358.825428][T14740] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2393'. [ 358.836390][T14742] netlink: 'syz.3.2395': attribute type 3 has an invalid length. [ 358.852017][T14742] netlink: 'syz.3.2395': attribute type 1 has an invalid length. [ 358.866222][T14740] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 358.878590][T14742] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2395'. [ 358.884527][T14745] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2394'. [ 358.890989][T14740] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 358.922504][T14745] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2394'. [ 358.980332][T14742] syzkaller1: entered promiscuous mode [ 358.993183][T14742] syzkaller1: entered allmulticast mode [ 359.008059][T14742] netlink: 220 bytes leftover after parsing attributes in process `syz.3.2395'. [ 359.122627][ T5637] Bluetooth: hci4: command 0x0405 tx timeout [ 359.406156][T14755] syzkaller1: entered promiscuous mode [ 359.430667][T14755] syzkaller1: entered allmulticast mode [ 360.553641][T14813] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2414'. [ 360.585498][T14815] sch_tbf: burst 7 is lower than device syzkaller0 mtu (1514) ! [ 360.674166][T14818] netlink: 'syz.0.2417': attribute type 11 has an invalid length. [ 360.695096][T14818] netlink: 4312 bytes leftover after parsing attributes in process `syz.0.2417'. [ 360.716007][T14818] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2417'. [ 361.051968][T14837] netlink: 'syz.1.2420': attribute type 4 has an invalid length. [ 361.101703][T14838] netlink: 'syz.1.2420': attribute type 4 has an invalid length. [ 361.647779][T14858] netlink: 'syz.3.2426': attribute type 1 has an invalid length. [ 361.655909][T14858] netlink: 'syz.3.2426': attribute type 2 has an invalid length. [ 361.937597][T14869] veth0_to_team: entered allmulticast mode [ 362.074420][T14844] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 362.460704][T14898] openvswitch: netlink: Key type 31 is not supported [ 362.486172][T14898] openvswitch: netlink: Key type 31 is not supported [ 362.912993][T14910] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 362.920289][T14910] IPv6: NLM_F_CREATE should be set when creating new route [ 362.927609][T14910] IPv6: NLM_F_CREATE should be set when creating new route [ 363.242856][T14920] __nla_validate_parse: 7 callbacks suppressed [ 363.242874][T14920] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2442'. [ 363.364891][T14924] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2446'. [ 363.376887][T14924] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2446'. [ 363.380021][T14920] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2442'. [ 363.476540][T14916] syzkaller0: entered promiscuous mode [ 363.483229][T14916] syzkaller0: entered allmulticast mode [ 363.561148][T14920] vlan0: entered promiscuous mode [ 363.645407][T14926] SET target dimension over the limit! [ 363.871374][T14931] netlink: 1 bytes leftover after parsing attributes in process `syz.2.2447'. [ 366.088040][T14943] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2450'. [ 366.296635][T14946] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2451'. [ 366.315629][T14946] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2451'. [ 366.349275][T14946] netlink: 'syz.2.2451': attribute type 4 has an invalid length. [ 366.517235][T14958] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2455'. [ 366.562927][T14953] bond13: option fail_over_mac: invalid value (16) [ 366.575441][T14953] bond13 (unregistering): Released all slaves [ 366.843027][T14971] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2457'. [ 367.358228][T14989] netlink: 'syz.4.2463': attribute type 28 has an invalid length. [ 367.399517][T14989] netlink: 'syz.4.2463': attribute type 3 has an invalid length. [ 367.807410][T15004] sch_tbf: burst 0 is lower than device lo mtu (11337746) ! [ 367.939124][T15010] netlink: 'syz.2.2470': attribute type 7 has an invalid length. [ 368.276109][T15033] __nla_validate_parse: 52 callbacks suppressed [ 368.276130][T15033] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2473'. [ 368.315151][T15036] netlink: 'syz.0.2475': attribute type 3 has an invalid length. [ 368.943286][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 368.975499][T15060] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2482'. [ 369.038134][T15064] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2483'. [ 369.053076][T15060] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2482'. [ 369.066933][T15069] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2483'. [ 369.096589][T15067] IPv6: NLM_F_CREATE should be specified when creating new route [ 369.261246][T15073] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2486'. [ 369.386235][T15084] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2486'. [ 369.509833][T15084] veth0_macvtap: left promiscuous mode [ 369.934912][T15108] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2495'. [ 370.218742][T15119] netlink: 'syz.0.2500': attribute type 3 has an invalid length. [ 370.228797][T15119] netlink: 666 bytes leftover after parsing attributes in process `syz.0.2500'. [ 370.280933][T15122] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2501'. [ 370.536221][T15134] netlink: 'syz.4.2503': attribute type 3 has an invalid length. [ 370.944277][T15149] IPVS: Unknown mcast interface: vcan0 [ 372.140993][T15183] syzkaller0: entered promiscuous mode [ 372.148556][T15183] syzkaller0: entered allmulticast mode [ 372.706030][T15214] RDS: rds_bind could not find a transport for ::ffff:172.30.0.2, load rds_tcp or rds_rdma? [ 373.721862][T15263] __nla_validate_parse: 9 callbacks suppressed [ 373.721882][T15263] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2538'. [ 374.125673][T15281] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2544'. [ 374.514923][T15297] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2552'. [ 374.554975][T15302] netlink: 'syz.3.2551': attribute type 20 has an invalid length. [ 374.589279][T15302] IPv6: NLM_F_CREATE should be specified when creating new route [ 374.853909][T15315] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2556'. [ 374.952432][T15324] netlink: 'syz.1.2558': attribute type 1 has an invalid length. [ 374.961172][T15324] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2558'. [ 374.984541][T15318] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2557'. [ 375.025571][T15318] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2557'. [ 375.074361][T15318] netlink: 2 bytes leftover after parsing attributes in process `syz.3.2557'. [ 375.164003][T15318] veth1_to_bridge: entered allmulticast mode [ 375.187198][T15318] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2557'. [ 375.214266][T15318] netlink: 2 bytes leftover after parsing attributes in process `syz.3.2557'. [ 375.251359][T15340] ipt_rpfilter: unknown options [ 375.313933][ T6845] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 375.334974][ T6845] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 375.436638][T15346] xt_hashlimit: size too large, truncated to 1048576 [ 375.503879][T15350] netlink: 'syz.3.2566': attribute type 1 has an invalid length. [ 375.554764][ T6845] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 375.610012][T15351] bridge_slave_0 (unregistering): left allmulticast mode [ 375.619405][T15351] bridge_slave_0 (unregistering): left promiscuous mode [ 375.652516][T15351] bridge0: port 1(bridge_slave_0) entered disabled state [ 375.874286][T15350] bond13: entered promiscuous mode [ 375.931990][T15350] 8021q: adding VLAN 0 to HW filter on device bond13 [ 375.991621][ T6845] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 376.125576][T15360] gtp1: entered promiscuous mode [ 376.139986][T15360] gtp1: entered allmulticast mode [ 377.372667][T15412] syzkaller0: entered promiscuous mode [ 377.384581][T15412] syzkaller0: entered allmulticast mode [ 377.494352][T15405] veth0: Caught tx_queue_len zero misconfig [ 381.896900][T15438] __nla_validate_parse: 7 callbacks suppressed [ 381.896927][T15438] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2582'. [ 382.129736][T15461] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2586'. [ 382.541859][T15472] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2590'. [ 382.631137][T15472] ip6tnl2: entered allmulticast mode [ 382.656372][T15477] netlink: 'syz.3.2592': attribute type 19 has an invalid length. [ 382.815548][T15477] netlink: 'syz.3.2592': attribute type 19 has an invalid length. [ 382.945881][T15490] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 383.408203][T15509] netlink: 'syz.3.2601': attribute type 8 has an invalid length. [ 383.859916][T15524] ip6t_rpfilter: unknown options [ 384.034979][T15527] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2605'. [ 384.086836][T15527] openvswitch: netlink: Missing key (keys=40, expected=100) [ 384.137555][T15531] netlink: 'syz.1.2607': attribute type 1 has an invalid length. [ 384.277329][T15538] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2608'. [ 384.296514][T15531] bond7: entered promiscuous mode [ 384.303362][T15531] 8021q: adding VLAN 0 to HW filter on device bond7 [ 384.345209][T15540] macvtap1: entered allmulticast mode [ 384.369801][T15539] syzkaller0: entered promiscuous mode [ 384.385023][T15542] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2610'. [ 384.405370][T15539] syzkaller0: entered allmulticast mode [ 384.526505][T15531] macvtap2: entered allmulticast mode [ 384.608048][T15553] netlink: 'syz.2.2612': attribute type 1 has an invalid length. [ 384.657495][T15540] bond7: (slave bridge4): making interface the new active one [ 384.677238][T15540] bridge4: entered promiscuous mode [ 384.709469][T15540] bond7: (slave bridge4): Enslaving as an active interface with an up link [ 385.185659][T15567] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2615'. [ 385.236043][T15569] netlink: 420 bytes leftover after parsing attributes in process `syz.0.2617'. [ 385.642989][T15585] bond8: Unable to set peer notification delay as MII monitoring is disabled [ 385.679161][T15585] bond8 (unregistering): Released all slaves [ 385.760796][T15592] netlink: 4096 bytes leftover after parsing attributes in process `syz.3.2624'. [ 385.787375][T15595] can: request_module (can-proto-0) failed. [ 385.985188][T15599] netlink: 'syz.4.2629': attribute type 1 has an invalid length. [ 386.007077][T15599] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2629'. [ 386.065125][T15607] xt_ecn: cannot match TCP bits for non-tcp packets [ 386.401893][T15624] netlink: 'syz.0.2633': attribute type 1 has an invalid length. [ 386.610834][T15629] netlink: 'syz.1.2638': attribute type 1 has an invalid length. [ 386.643256][T15624] bond9: entered promiscuous mode [ 386.648796][T15624] 8021q: adding VLAN 0 to HW filter on device bond9 [ 386.848608][T15629] 8021q: adding VLAN 0 to HW filter on device bond8 [ 386.920726][T15627] bond9: (slave bridge10): making interface the new active one [ 386.928815][T15627] bridge10: entered promiscuous mode [ 386.941593][T15627] bond9: (slave bridge10): Enslaving as an active interface with an up link [ 386.992577][T15632] bond8: (slave geneve2): making interface the new active one [ 387.005265][T15632] bond8: (slave geneve2): Enslaving as an active interface with an up link [ 387.022740][ T6841] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 387.049766][ T6841] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 387.100117][ T1156] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 387.134979][ T1156] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 387.157117][T15647] gretap0: left allmulticast mode [ 387.168089][T15647] gretap0: left promiscuous mode [ 387.177366][T15647] bridge0: port 3(gretap0) entered disabled state [ 387.240322][T15647] bridge_slave_1: left allmulticast mode [ 387.259524][T15647] bridge_slave_1: left promiscuous mode [ 387.267976][T15647] bridge0: port 2(bridge_slave_1) entered disabled state [ 387.295395][T15647] bond6: (slave veth0_to_bond): Releasing active interface [ 387.331056][T15647] : (slave bond_slave_0): Releasing backup interface [ 387.348101][T15647] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 387.364906][T15647] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 387.970651][T15681] IPVS: persistence engine module ip_vs_pe_À not found [ 388.009989][T15679] ipvlan2: entered allmulticast mode [ 388.016612][T15679] batadv_slave_1: entered allmulticast mode [ 388.028273][T15679] batman_adv: batadv0: Adding interface: ipvlan2 [ 388.036300][T15679] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 388.126588][T15679] batman_adv: batadv0: Interface activated: ipvlan2 [ 388.197694][T15684] siw: device registration error -23 [ 388.238814][T15684] ±ÿª¨úrBº“: renamed from lo (while UP) [ 388.247286][T15687] sctp: [Deprecated]: syz.4.2654 (pid 15687) Use of struct sctp_assoc_value in delayed_ack socket option. [ 388.247286][T15687] Use struct sctp_sack_info instead [ 388.367956][ T9582] xfrm0 speed is unknown, defaulting to 1000 [ 388.374909][T15690] __nla_validate_parse: 3 callbacks suppressed [ 388.374926][T15690] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2653'. [ 388.394496][ T9582] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 388.425115][T15690] tipc: Invalid UDP bearer configuration [ 388.425167][T15690] tipc: Enabling of bearer rejected, failed to enable media [ 388.471221][T15693] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2655'. [ 388.629914][T15696] sctp: [Deprecated]: syz.2.2656 (pid 15696) Use of int in max_burst socket option. [ 388.629914][T15696] Use struct sctp_assoc_value instead [ 388.792754][T15709] xt_hashlimit: Unknown mode mask 2000, kernel too old? [ 388.997867][T15716] netlink: 'syz.0.2661': attribute type 4 has an invalid length. [ 389.019397][T15716] netlink: 17 bytes leftover after parsing attributes in process `syz.0.2661'. [ 389.047304][T15716] netlink: 14601 bytes leftover after parsing attributes in process `syz.0.2661'. [ 389.204011][ T9582] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 389.597669][T15723] tipc: Enabling of bearer rejected, failed to enable media [ 390.144406][T15723] syzkaller0: entered promiscuous mode [ 390.150395][T15723] syzkaller0: entered allmulticast mode [ 390.159286][T15740] netlink: 'syz.2.2666': attribute type 16 has an invalid length. [ 390.179696][T15740] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2666'. [ 390.191491][T15742] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2667'. [ 392.419493][T15705] Set syz1 is full, maxelem 65536 reached [ 392.969621][T15736] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 393.481176][T15740] veth0_macvtap: entered allmulticast mode [ 393.753827][T15767] IPv6: NLM_F_CREATE should be specified when creating new route [ 393.775838][T15770] netlink: 'syz.3.2675': attribute type 10 has an invalid length. [ 393.796434][T15767] netlink: 'syz.3.2675': attribute type 10 has an invalid length. [ 393.816083][T15769] netlink: 'syz.1.2672': attribute type 7 has an invalid length. [ 393.960122][T15777] ip6t_srh: unknown srh match flags 5F28 [ 394.101784][T15783] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2678'. [ 394.265421][T15789] xt_TPROXY: Can be used only with -p tcp or -p udp [ 394.340930][T15785] erspan0: entered promiscuous mode [ 394.470795][T15796] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2680'. [ 394.550723][T15785] 8021q: adding VLAN 0 to HW filter on device bond0 [ 394.596664][T15785] 8021q: adding VLAN 0 to HW filter on device team0 [ 394.651390][T15785] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 394.897988][T15785] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 395.110277][T15785] virt_wifi0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 395.138550][T15785] veth1_vlan: left promiscuous mode [ 395.159925][T15785] veth0_vlan: left promiscuous mode [ 395.219796][T15785] veth0_vlan: entered promiscuous mode [ 395.240466][T15785] veth1_vlan: entered promiscuous mode [ 395.261727][T15785] veth1_macvtap: left promiscuous mode [ 395.271110][T15785] veth0_macvtap: left promiscuous mode [ 395.279239][T15785] veth0_macvtap: entered promiscuous mode [ 395.289631][T15785] veth1_macvtap: entered promiscuous mode [ 395.312916][T15785] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 395.324474][T15785] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 395.335071][T15785] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 395.344469][T15785] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 395.369351][T15785] 8021q: adding VLAN 0 to HW filter on device bond1 [ 395.387359][T15785] A link change request failed with some changes committed already. Interface geneve2 may have been left with an inconsistent configuration, please check. [ 395.487932][ T6841] bridge0: port 1(bridge_slave_0) entered blocking state [ 395.495213][ T6841] bridge0: port 1(bridge_slave_0) entered listening state [ 395.536379][ T6841] bridge0: port 2(bridge_slave_1) entered blocking state [ 395.543644][ T6841] bridge0: port 2(bridge_slave_1) entered listening state [ 395.670806][ T932] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.690894][ T932] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.734438][ T932] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.758875][ T932] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.801309][T15820] veth1_to_bond: entered allmulticast mode [ 395.835292][T15821] veth1_to_bond: entered promiscuous mode [ 395.860840][T15820] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2686'. [ 395.911981][T15820] veth1_to_bond (unregistering): left allmulticast mode [ 395.930319][T15820] veth1_to_bond (unregistering): left promiscuous mode [ 395.949066][T15820] bond0: (slave bond_slave_1): Releasing backup interface [ 395.979913][T15820] bond_slave_1 (unregistering): left allmulticast mode [ 395.998491][T15825] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2687'. [ 396.485065][T15839] xt_CT: You must specify a L4 protocol and not use inversions on it [ 396.899532][T15856] xt_TCPMSS: Only works on TCP SYN packets [ 396.959779][T15857] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2697'. [ 398.103427][T15804] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 398.113898][T15808] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 398.428395][T15871] netlink: 'syz.1.2701': attribute type 1 has an invalid length. [ 398.447673][T15869] netlink: 'syz.2.2700': attribute type 4 has an invalid length. [ 398.890720][T15890] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2709'. [ 398.948813][T15884] can: request_module (can-proto-0) failed. [ 398.984628][T15894] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2710'. [ 399.455795][T15918] Bluetooth: MGMT ver 1.23 [ 399.570820][T15918] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2715'. [ 399.820876][T15918] geneve3: entered promiscuous mode [ 399.977810][T15934] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2715'. [ 400.118953][T15943] netlink: 'syz.1.2720': attribute type 2 has an invalid length. [ 400.132173][T15944] netlink: 'syz.1.2720': attribute type 2 has an invalid length. [ 400.334893][T15955] xt_ecn: cannot match TCP bits for non-tcp packets [ 400.385654][T15955] Cannot find del_set index 4 as target [ 400.924219][T15977] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2729'. [ 400.948104][T15980] netlink: 'syz.4.2730': attribute type 1 has an invalid length. [ 400.960688][T15979] netlink: 'syz.0.2731': attribute type 1 has an invalid length. [ 401.050540][T15986] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2731'. [ 401.156714][T15979] 8021q: adding VLAN 0 to HW filter on device bond10 [ 402.130079][T16021] netlink: 348 bytes leftover after parsing attributes in process `syz.3.2742'. [ 402.146601][T16023] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2743'. [ 402.171011][T16025] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2743'. [ 402.258801][T16027] netlink: 348 bytes leftover after parsing attributes in process `syz.3.2742'. [ 402.759378][T16052] netlink: 232 bytes leftover after parsing attributes in process `syz.0.2751'. [ 403.103701][T16068] netlink: 'syz.3.2759': attribute type 3 has an invalid length. [ 403.130684][T16068] netlink: 3 bytes leftover after parsing attributes in process `syz.3.2759'. [ 403.201833][T16068] tunl0: entered promiscuous mode [ 403.228835][T16068] netlink: 'syz.3.2759': attribute type 3 has an invalid length. [ 403.502509][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 403.578387][T16081] netlink: 'syz.3.2762': attribute type 12 has an invalid length. [ 403.593632][T16081] team0: No ports can be present during mode change [ 404.230286][T16096] netlink: 'syz.4.2758': attribute type 4 has an invalid length. [ 404.381917][T16102] xt_hashlimit: size too large, truncated to 1048576 [ 404.614032][T16069] lo speed is unknown, defaulting to 1000 [ 404.650530][T16069] xfrm0 speed is unknown, defaulting to 1000 [ 405.268267][T16133] __nla_validate_parse: 6 callbacks suppressed [ 405.268288][T16133] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2776'. [ 405.409158][T16132] raw_sendmsg: syz.0.2777 forgot to set AF_INET. Fix it! [ 406.232361][ T5637] Bluetooth: hci4: command 0x0405 tx timeout [ 406.437371][T16165] netdevsim netdevsim1: Firmware load for '..' refused, path contains '..' component [ 408.229886][T16144] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 408.241348][T16144] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.704889][T16144] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 408.716834][T16144] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.740116][T16178] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2788'. [ 408.921616][T16144] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 408.940664][T16144] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 409.098933][T16144] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 409.113569][T16144] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 409.352300][T16190] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 409.373502][T16191] veth0_to_bond: left promiscuous mode [ 409.379897][T16191] veth0_to_bond: left allmulticast mode [ 409.818039][ T6840] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 409.856911][ T6840] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 410.155698][ T932] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 410.172284][ T932] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 410.221973][ T932] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 410.242813][ T932] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 410.264726][T16213] syzkaller0: entered promiscuous mode [ 410.283349][T16213] syzkaller0: entered allmulticast mode [ 410.338714][ T1156] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 410.358235][ T1156] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 410.542305][ C1] bridge0: port 1(bridge_slave_0) entered learning state [ 410.582855][T16223] set match dimension is over the limit! [ 410.605030][T16223] IPVS: set_ctl: invalid protocol: 0 10.1.1.1:20001 [ 411.024504][T16238] bond0: (slave bond_slave_0): Releasing backup interface [ 411.107317][T16238] bond0: (slave veth0_to_bond): Releasing backup interface [ 411.134843][T16244] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2806'. [ 411.185051][ C1] bridge0: port 2(bridge_slave_1) entered learning state [ 411.295968][ T5637] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 411.316609][ T5637] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 411.327908][ T5637] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 411.339119][ T5637] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 411.350360][ T5637] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 411.956184][T16266] netlink: 'syz.2.2812': attribute type 1 has an invalid length. [ 412.159204][T16266] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2812'. [ 412.280345][T16266] ip6gretap2: entered promiscuous mode [ 412.326421][T16266] ip6gretap2: entered allmulticast mode [ 412.416698][T16281] netlink: 'syz.3.2814': attribute type 10 has an invalid length. [ 412.444740][T16281] openvswitch: netlink: Flow key attr not present in new flow. [ 412.576443][T16285] A link change request failed with some changes committed already. Interface 26±ÿª¨úrBº“ may have been left with an inconsistent configuration, please check. [ 412.688048][T16285] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 413.047351][T16303] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2820'. [ 413.083587][T16303] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2820'. [ 413.144105][T16303] gretap0: entered promiscuous mode [ 413.200498][T16303] gretap0: left promiscuous mode [ 413.309648][T16246] lo speed is unknown, defaulting to 1000 [ 413.368277][T16246] xfrm0 speed is unknown, defaulting to 1000 [ 413.434136][ T5637] Bluetooth: hci5: command tx timeout [ 413.581817][T16319] netlink: zone id is out of range [ 413.596741][T16319] netlink: set zone limit has 4 unknown bytes [ 413.807240][T16326] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2827'. [ 413.900721][T16330] x_tables: duplicate underflow at hook 4 [ 414.146971][T16338] netlink: 'syz.3.2832': attribute type 3 has an invalid length. [ 414.170181][T16338] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2832'. [ 414.610600][T16361] lo: left promiscuous mode [ 414.630536][T16361] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 415.502378][ T5637] Bluetooth: hci5: command tx timeout [ 415.537711][T16394] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 415.637062][T16246] bridge0: port 1(bridge_slave_0) entered blocking state [ 415.689674][T16246] bridge0: port 1(bridge_slave_0) entered disabled state [ 415.733080][T16246] bridge_slave_0: entered allmulticast mode [ 415.775089][T16246] bridge_slave_0: entered promiscuous mode [ 415.825578][T16246] bridge0: port 2(bridge_slave_1) entered blocking state [ 415.841310][T16402] netlink: 'syz.2.2848': attribute type 4 has an invalid length. [ 415.856332][T16246] bridge0: port 2(bridge_slave_1) entered disabled state [ 415.867290][T16400] netlink: 'syz.2.2848': attribute type 4 has an invalid length. [ 415.884818][T16246] bridge_slave_1: entered allmulticast mode [ 415.924844][T16246] bridge_slave_1: entered promiscuous mode [ 416.101557][T16246] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 416.155639][T16246] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 416.217561][T16411] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2851'. [ 416.255813][T16410] netlink: 'syz.3.2850': attribute type 1 has an invalid length. [ 416.307552][T16246] team0: Port device team_slave_0 added [ 416.340192][T16246] team0: Port device team_slave_1 added [ 416.503810][T16246] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 416.524339][T16419] netlink: 'syz.1.2853': attribute type 1 has an invalid length. [ 416.534124][T16246] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 416.603522][T16246] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 416.659109][T16246] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 416.693360][T16246] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 416.787812][T16246] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 417.066343][T16246] hsr_slave_0: entered promiscuous mode [ 417.099511][T16246] hsr_slave_1: entered promiscuous mode [ 417.120213][T16246] debugfs: 'hsr0' already exists in 'hsr' [ 417.139856][T16246] Cannot create hsr debugfs directory [ 417.164390][T16437] 8021q: VLANs not supported on ip6_vti0 [ 417.384789][T16433] syzkaller0: entered promiscuous mode [ 417.407957][T16433] syzkaller0: entered allmulticast mode [ 417.524647][T16459] netlink: 'syz.4.2861': attribute type 1 has an invalid length. [ 417.582590][ T5637] Bluetooth: hci5: command tx timeout [ 417.683360][T16459] 8021q: adding VLAN 0 to HW filter on device bond10 [ 417.781141][T16462] bond10: (slave ip6gretap2): making interface the new active one [ 417.840218][T16462] bond10: (slave ip6gretap2): Enslaving as an active interface with an up link [ 418.016826][T16472] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2863'. [ 418.049135][T16472] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2863'. [ 418.121342][T16478] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2865'. [ 418.132893][T16477] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2865'. [ 418.427189][T16246] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 418.666183][T16491] bridge0: port 1(bridge_slave_0) entered blocking state [ 418.673461][T16491] bridge0: port 1(bridge_slave_0) entered listening state [ 419.087191][T16501] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2870'. [ 419.106263][T16491] veth0_to_team: entered promiscuous mode [ 419.172687][T16516] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2873'. [ 419.183914][T16516] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2873'. [ 419.270377][T16491] 8021q: adding VLAN 0 to HW filter on device bond2 [ 419.326282][T16491] A link change request failed with some changes committed already. Interface vxlan0 may have been left with an inconsistent configuration, please check. [ 419.354776][ T1156] bridge0: port 2(bridge_slave_1) entered blocking state [ 419.361999][ T1156] bridge0: port 2(bridge_slave_1) entered listening state [ 419.409989][T16516] gretap1: entered promiscuous mode [ 419.428604][T16516] gretap1: entered allmulticast mode [ 419.494831][T16246] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 419.674448][ T5646] Bluetooth: hci5: command tx timeout [ 419.756440][T16246] : (slave netdevsim1): Releasing backup interface [ 419.784876][T16246] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 419.917162][T16529] bond10: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5) [ 419.936142][T16529] bond10 (unregistering): Released all slaves [ 420.053138][T16246] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 420.376326][T16544] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2882'. [ 421.181188][T16246] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 421.234171][T16246] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 421.309190][T16582] netlink: 'syz.1.2888': attribute type 2 has an invalid length. [ 421.384245][T16246] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 421.402903][T16246] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 421.434200][T16246] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 421.489386][T16246] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 421.554061][T16246] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 421.604984][T16246] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 421.946034][T16607] netlink: 'syz.3.2897': attribute type 26 has an invalid length. [ 421.994077][T16614] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2898'. [ 422.155769][T16246] 8021q: adding VLAN 0 to HW filter on device bond0 [ 422.274440][T16246] 8021q: adding VLAN 0 to HW filter on device team0 [ 422.317190][ T1156] bridge0: port 1(bridge_slave_0) entered blocking state [ 422.324414][ T1156] bridge0: port 1(bridge_slave_0) entered forwarding state [ 422.392710][ T1156] bridge0: port 2(bridge_slave_1) entered blocking state [ 422.400794][ T1156] bridge0: port 2(bridge_slave_1) entered forwarding state [ 422.471326][T16630] xt_cgroup: xt_cgroup: no path or classid specified [ 422.530022][T16628] syzkaller0: entered promiscuous mode [ 422.537287][T16628] syzkaller0: entered allmulticast mode [ 422.800037][T16641] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input5 [ 423.023747][T16650] syzkaller0: entered promiscuous mode [ 423.065810][T16650] syzkaller0: entered allmulticast mode [ 423.209157][T16660] netlink: 84 bytes leftover after parsing attributes in process `syz.2.2910'. [ 423.255633][T16660] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2910'. [ 423.462021][T16660] xt_hashlimit: size too large, truncated to 1048576 [ 423.795011][T16679] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.2914'. [ 423.854019][T16681] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 424.712648][T16715] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2922'. [ 424.846619][T16246] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 425.169296][T16246] veth0_vlan: entered promiscuous mode [ 425.252905][T16246] veth1_vlan: entered promiscuous mode [ 425.379490][T16738] ±ÿª¨úrBº“: renamed from lo (while UP) [ 425.514249][T16668] lo speed is unknown, defaulting to 1000 [ 425.537195][T16246] veth0_macvtap: entered promiscuous mode [ 425.598227][T16668] xfrm0 speed is unknown, defaulting to 1000 [ 425.619309][T16246] veth1_macvtap: entered promiscuous mode [ 425.649016][T16744] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2928'. [ 425.691227][T16246] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 425.751166][T16246] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 425.809376][ T1156] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 425.855092][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 425.899970][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 425.909073][ C1] bridge0: port 1(bridge_slave_0) entered forwarding state [ 425.909109][ C1] bridge0: topology change detected, propagating [ 425.987514][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.267095][ T6841] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 426.300872][ T6841] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 426.369242][T16754] vcan0: tx drop: invalid da for name 0x0000000000000003 [ 426.487192][ T1164] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 426.508657][ T1164] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 426.542211][ C1] bridge0: port 2(bridge_slave_1) entered forwarding state [ 426.549515][ C1] bridge0: topology change detected, propagating [ 426.875352][T16772] ip6gre3: entered allmulticast mode [ 427.109150][T16793] netlink: 'syz.4.2939': attribute type 1 has an invalid length. [ 427.197752][T16794] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 427.280328][T16799] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2939'. [ 427.341060][T16784] syzkaller1: entered promiscuous mode [ 427.352237][T16784] syzkaller1: entered allmulticast mode [ 427.357995][T16799] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2939'. [ 427.414223][T16793] bond11: entered promiscuous mode [ 427.419926][T16793] 8021q: adding VLAN 0 to HW filter on device bond11 [ 427.477943][T16782] netlink: 288 bytes leftover after parsing attributes in process `syz.0.2807'. [ 427.494535][T16799] 8021q: VLANs not supported on gre0 [ 427.722757][T16804] netlink: 'syz.4.2940': attribute type 1 has an invalid length. [ 427.731836][T16804] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2940'. [ 427.748767][T16804] netlink: 'syz.4.2940': attribute type 49 has an invalid length. [ 430.437197][T16807] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2941'. [ 430.955220][T16822] netlink: 'syz.1.2947': attribute type 1 has an invalid length. [ 431.179725][T16827] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2947'. [ 431.228882][T16822] bond10: entered promiscuous mode [ 431.237109][T16822] 8021q: adding VLAN 0 to HW filter on device bond10 [ 431.361517][ T29] audit: type=1804 audit(1782759696.579:6): pid=16815 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.2943" name="/newroot/585/cgroup.controllers" dev="tmpfs" ino=2992 res=1 errno=0 [ 431.435613][T16838] C: renamed from lo (while UP) [ 431.442032][ T29] audit: type=1800 audit(1782759696.609:7): pid=16815 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2943" name="cgroup.controllers" dev="tmpfs" ino=2992 res=0 errno=0 [ 431.450289][T16838] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 431.528750][T16838] netlink: 260 bytes leftover after parsing attributes in process `syz.0.2951'. [ 431.764305][T16847] RDS: rds_bind could not find a transport for ::ffff:10.1.1.1, load rds_tcp or rds_rdma? [ 432.054907][T16861] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2956'. [ 432.159623][T16861] netlink: 'syz.1.2956': attribute type 1 has an invalid length. [ 432.918876][T16895] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2965'. [ 432.935717][T16898] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2964'. [ 432.954891][T16895] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2965'. [ 433.465379][T16916] netlink: 'syz.0.2968': attribute type 1 has an invalid length. [ 433.494355][T16895] syzkaller0: entered promiscuous mode [ 433.521902][T16895] syzkaller0: entered allmulticast mode [ 433.550137][T16922] netlink: 'syz.2.2967': attribute type 1 has an invalid length. [ 433.583922][T16916] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2968'. [ 433.660814][T16926] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2969'. [ 433.705520][T16923] 8021q: adding VLAN 0 to HW filter on device bond11 [ 433.719020][T16923] bond0: (slave bond11): Enslaving as a backup interface with an up link [ 433.730068][T16926] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2969'. [ 437.080905][T16980] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2985'. [ 437.396288][T16993] netlink: 27 bytes leftover after parsing attributes in process `syz.0.2989'. [ 437.601096][T16996] netlink: 84 bytes leftover after parsing attributes in process `syz.1.2990'. [ 437.678209][T16999] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2992'. [ 437.969043][ T5637] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 437.995714][ T5637] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 438.012295][ T5637] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 438.028114][ T5637] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 438.037227][ T5637] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 438.098769][T17010] netlink: 'syz.3.2995': attribute type 1 has an invalid length. [ 438.239243][T17022] __nla_validate_parse: 1 callbacks suppressed [ 438.239263][T17022] netlink: 336 bytes leftover after parsing attributes in process `syz.3.2995'. [ 438.324962][T17010] 8021q: adding VLAN 0 to HW filter on device bond14 [ 438.356389][T17020] bond14: option ad_user_port_key: mode dependency failed, not supported in mode balance-alb(6) [ 438.403943][T17026] lo: entered allmulticast mode [ 438.630147][T17032] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2999'. [ 438.988141][T17032] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 439.271437][T17040] syzkaller1: entered promiscuous mode [ 439.293353][T17040] syzkaller1: entered allmulticast mode [ 439.648616][T17033] netlink: 'syz.3.3000': attribute type 1 has an invalid length. [ 439.688642][T17033] netlink: 'syz.3.3000': attribute type 1 has an invalid length. [ 439.813725][T17066] bond12 (unregistering): Released all slaves [ 440.000868][T17082] netlink: zone id is out of range [ 440.025849][T17082] netlink: zone id is out of range [ 440.035281][T17082] netlink: zone id is out of range [ 440.041716][T17082] netlink: zone id is out of range [ 440.054555][T17082] netlink: zone id is out of range [ 440.064552][ T5646] Bluetooth: hci0: command tx timeout [ 440.081502][T17082] netlink: zone id is out of range [ 440.161309][T17076] bond12: entered promiscuous mode [ 440.170244][T17076] bond12: entered allmulticast mode [ 440.176618][T17076] 8021q: adding VLAN 0 to HW filter on device bond12 [ 440.690799][T17101] bond1: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5) [ 440.748427][T17101] bond1 (unregistering): Released all slaves [ 441.344272][T17006] lo speed is unknown, defaulting to 1000 [ 441.381770][T17006] xfrm0 speed is unknown, defaulting to 1000 [ 441.644777][T17142] veth13: entered allmulticast mode [ 441.661437][T17148] netlink: 10 bytes leftover after parsing attributes in process `syz.4.3024'. [ 442.114027][T17158] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3026'. [ 442.126177][T17158] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3026'. [ 442.144926][ T5646] Bluetooth: hci0: command tx timeout [ 442.205412][T17158] gretap1: entered promiscuous mode [ 442.214062][T17158] gretap1: entered allmulticast mode [ 442.410254][T17166] bridge0: port 1(veth1_to_bridge) entered blocking state [ 442.421578][T17166] bridge0: port 1(veth1_to_bridge) entered disabled state [ 442.430543][T17166] veth1_to_bridge: entered allmulticast mode [ 442.464803][T17166] veth1_to_bridge: entered promiscuous mode [ 442.533166][T17172] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 442.757953][T17173] bond1 (unregistering): Released all slaves [ 443.068967][T17195] xt_hashlimit: size too large, truncated to 1048576 [ 443.113172][T17199] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3037'. [ 443.128773][T17187] syzkaller0: entered promiscuous mode [ 443.153421][T17187] syzkaller0: entered allmulticast mode [ 443.309585][T17202] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3038'. [ 443.523753][T17209] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3041'. [ 443.533315][T17209] netlink: 43 bytes leftover after parsing attributes in process `syz.3.3041'. [ 443.552400][T17209] netlink: 'syz.3.3041': attribute type 6 has an invalid length. [ 443.563747][T17209] netlink: 'syz.3.3041': attribute type 5 has an invalid length. [ 443.575802][T17209] netlink: 43 bytes leftover after parsing attributes in process `syz.3.3041'. [ 444.228390][ T5646] Bluetooth: hci0: command tx timeout [ 445.853533][T17214] veth0_to_bond: entered allmulticast mode [ 446.064736][T17227] netlink: 'syz.1.3047': attribute type 1 has an invalid length. [ 446.086888][T17229] netlink: 'syz.3.3046': attribute type 2 has an invalid length. [ 446.147320][T17229] : entered promiscuous mode [ 446.181676][T17227] 8021q: adding VLAN 0 to HW filter on device bond13 [ 446.256707][T17234] veth1_macvtap: left promiscuous mode [ 446.270649][T17238] veth1_macvtap: left promiscuous mode [ 446.277982][T17238] macsec0: entered promiscuous mode [ 446.303182][ T5646] Bluetooth: hci0: command tx timeout [ 446.447075][T17240] netlink: 1116 bytes leftover after parsing attributes in process `syz.0.3048'. [ 446.670116][T17257] netlink: 'syz.3.3053': attribute type 21 has an invalid length. [ 446.895111][T17263] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3055'. [ 447.155891][T17006] bridge0: port 1(bridge_slave_0) entered blocking state [ 447.164374][T17006] bridge0: port 1(bridge_slave_0) entered disabled state [ 447.173089][T17006] bridge_slave_0: entered allmulticast mode [ 447.185693][T17006] bridge_slave_0: entered promiscuous mode [ 447.201498][T17006] bridge0: port 2(bridge_slave_1) entered blocking state [ 447.210407][T17006] bridge0: port 2(bridge_slave_1) entered disabled state [ 447.219069][T17006] bridge_slave_1: entered allmulticast mode [ 447.229880][T17006] bridge_slave_1: entered promiscuous mode [ 447.352790][T17006] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 447.391162][T17006] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 447.544881][T17006] team0: Port device team_slave_0 added [ 447.577157][T17006] team0: Port device team_slave_1 added [ 447.764594][T17006] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 447.772825][T17006] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 447.802199][T17006] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 447.819843][T17006] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 447.831484][T17006] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 447.860933][T17006] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 447.945294][T17006] hsr_slave_0: entered promiscuous mode [ 447.954212][T17006] hsr_slave_1: entered promiscuous mode [ 447.961478][T17006] debugfs: 'hsr0' already exists in 'hsr' [ 447.967766][T17006] Cannot create hsr debugfs directory [ 448.145204][T17006] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 448.155458][T17006] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.198614][T17006] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 448.208585][T17006] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.273319][T17006] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 448.284357][T17006] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.323947][T17006] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 448.333934][T17006] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.517115][T17006] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 448.530785][T17006] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 448.539834][T17006] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 448.551737][T17006] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 448.560528][T17006] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 448.570871][T17006] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 448.581628][T17006] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 448.594971][T17006] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 448.705501][T17006] 8021q: adding VLAN 0 to HW filter on device bond0 [ 448.734875][T17006] 8021q: adding VLAN 0 to HW filter on device team0 [ 448.752708][ T932] bridge0: port 1(bridge_slave_0) entered blocking state [ 448.760613][ T932] bridge0: port 1(bridge_slave_0) entered forwarding state [ 448.774708][ T932] bridge0: port 2(bridge_slave_1) entered blocking state [ 448.781969][ T932] bridge0: port 2(bridge_slave_1) entered forwarding state [ 448.943629][ C1] bridge0: port 1(bridge_slave_0) entered learning state [ 449.325076][T17006] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 449.392728][T17006] veth0_vlan: entered promiscuous mode [ 449.409724][T17006] veth1_vlan: entered promiscuous mode [ 449.456166][T17006] veth0_macvtap: entered promiscuous mode [ 449.470580][T17006] veth1_macvtap: entered promiscuous mode [ 449.494932][T17006] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 449.508283][T17006] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 449.546671][ T6846] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 449.556919][ T6846] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 449.570924][ T6846] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 449.584127][ C1] bridge0: port 2(bridge_slave_1) entered learning state [ 449.593569][ T6846] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 449.731639][ T6846] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 449.741262][ T6846] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 449.800915][ T6841] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 449.810823][ T6841] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 470.674264][T17326] netlink: 'syz.2.3065': attribute type 7 has an invalid length. [ 470.713147][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 470.765848][T17326] netlink: 'syz.2.3065': attribute type 7 has an invalid length. [ 470.774099][ T1164] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 470.811553][ T1164] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 470.839196][ T1164] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 470.893536][ T1164] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 471.062700][ T5637] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 471.075708][ T5637] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 471.087265][ T5637] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 471.098461][ T5637] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 471.107727][ T5637] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 471.326503][T17332] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3070'. [ 471.451927][T17345] tipc: Enabled bearer , priority 0 [ 471.664068][T17348] syzkaller0: entered promiscuous mode [ 471.695787][T17348] syzkaller0: entered allmulticast mode [ 471.722883][T17348] tipc: Resetting bearer [ 471.774461][T17340] tipc: Resetting bearer [ 471.906338][T17358] netlink: 'syz.0.3073': attribute type 2 has an invalid length. [ 473.183180][ T5646] Bluetooth: hci4: command tx timeout [ 474.990214][T17340] tipc: Disabling bearer [ 475.162355][ T5902] tipc: Node number set to 3336054082 [ 475.263778][ T5646] Bluetooth: hci4: command tx timeout [ 475.383883][T17403] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3082'. [ 475.470547][T17406] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3083'. [ 476.200175][T17426] netlink: 'syz.0.3089': attribute type 17 has an invalid length. [ 476.268923][T17428] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3090'. [ 476.408921][T17434] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3092'. [ 476.440835][T17329] lo speed is unknown, defaulting to 1000 [ 476.447518][T17432] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3092'. [ 476.465481][T17329] xfrm0 speed is unknown, defaulting to 1000 [ 476.972836][T17452] bond0: option all_slaves_active: invalid value (104) [ 477.123617][T17458] netlink: 92 bytes leftover after parsing attributes in process `syz.3.3098'. [ 477.171383][T17458] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3098'. [ 477.342444][ T5646] Bluetooth: hci4: command tx timeout [ 477.585846][T17476] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 477.637413][T17476] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 477.841038][T17485] netlink: 'syz.2.3106': attribute type 39 has an invalid length. [ 477.888627][T17485] hsr_slave_0: left promiscuous mode [ 477.899259][T17483] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3105'. [ 477.936346][T17479] xt_bpf: check failed: parse error [ 477.945668][T17485] hsr_slave_1: left promiscuous mode [ 478.386117][T17329] bridge0: port 1(bridge_slave_0) entered blocking state [ 478.409690][T17329] bridge0: port 1(bridge_slave_0) entered disabled state [ 478.417528][T17501] netlink: 576 bytes leftover after parsing attributes in process `syz.2.3108'. [ 478.429645][T17329] bridge_slave_0: entered allmulticast mode [ 478.445149][T17329] bridge_slave_0: entered promiscuous mode [ 478.488643][T17329] bridge0: port 2(bridge_slave_1) entered blocking state [ 478.515173][T17329] bridge0: port 2(bridge_slave_1) entered disabled state [ 478.533274][T17329] bridge_slave_1: entered allmulticast mode [ 478.556243][T17329] bridge_slave_1: entered promiscuous mode [ 478.711724][T17329] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 478.732659][T17329] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 478.897593][T17329] team0: Port device team_slave_0 added [ 478.986236][T17329] team0: Port device team_slave_1 added [ 479.004123][T17520] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3112'. [ 479.021274][T17522] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3113'. [ 479.031422][ C1] bridge0: port 1(bridge_slave_0) entered forwarding state [ 479.031446][ C1] bridge0: topology change detected, propagating [ 479.275000][T17329] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 479.300364][T17329] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 479.340231][T17329] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 479.360284][T17329] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 479.375429][T17329] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 479.406044][T17329] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 479.422552][ T5646] Bluetooth: hci4: command tx timeout [ 479.610982][T17329] hsr_slave_0: entered promiscuous mode [ 479.628141][T17329] hsr_slave_1: entered promiscuous mode [ 479.647220][T17329] debugfs: 'hsr0' already exists in 'hsr' [ 479.662743][T17329] Cannot create hsr debugfs directory [ 479.666320][ C1] bridge0: port 2(bridge_slave_1) entered forwarding state [ 479.675462][ C1] bridge0: topology change detected, propagating [ 480.758281][T17578] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 480.918768][T17329] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 480.929799][T17329] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 480.951136][T17329] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 481.347113][T17329] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 481.357468][T17604] netlink: 'syz.3.3133': attribute type 1 has an invalid length. [ 481.430460][T17329] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 481.457673][T17329] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 481.474016][T17608] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3134'. [ 481.732859][T17329] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 481.760713][T17329] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 481.776594][T17329] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 481.841978][T17618] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3136'. [ 481.874332][T17621] netlink: 'syz.2.3136': attribute type 1 has an invalid length. [ 482.007565][T17329] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 482.046827][T17329] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 482.083353][T17329] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 482.153041][T17634] netlink: 112 bytes leftover after parsing attributes in process `syz.3.3140'. [ 482.348623][T17633] bond15: option arp_validate: mode dependency failed, not supported in mode 802.3ad(4) [ 482.368197][T17633] bond15 (unregistering): Released all slaves [ 482.417435][T17640] ipvlan2: entered promiscuous mode [ 482.426220][T17636] syzkaller0: entered promiscuous mode [ 482.431933][T17636] syzkaller0: entered allmulticast mode [ 482.746454][T17647] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3142'. [ 483.914714][T17329] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 483.965971][T17329] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 483.996410][T17329] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 484.072593][T17329] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 484.099870][T17329] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 484.133547][T17682] netlink: 'syz.0.3152': attribute type 10 has an invalid length. [ 484.145103][T17682] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3152'. [ 484.156476][T17329] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 484.170938][T17329] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 484.193368][T17329] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 484.221022][ T5646] block nbd0: Receive control failed (result -32) [ 484.236675][T17682] team0: entered allmulticast mode [ 484.244051][T17682] team_slave_0: entered allmulticast mode [ 484.250454][T17682] team_slave_1: entered allmulticast mode [ 484.257940][T17682] bridge0: port 3(team0) entered blocking state [ 484.265581][T17682] bridge0: port 3(team0) entered disabled state [ 484.278622][T17682] team0: entered promiscuous mode [ 484.284560][T17682] team_slave_0: entered promiscuous mode [ 484.291170][T17682] team_slave_1: entered promiscuous mode [ 484.298735][T17682] bridge0: port 3(team0) entered blocking state [ 484.306043][T17682] bridge0: port 3(team0) entered forwarding state [ 484.796879][T17329] 8021q: adding VLAN 0 to HW filter on device bond0 [ 484.885304][T17329] 8021q: adding VLAN 0 to HW filter on device team0 [ 484.923904][ T1164] bridge0: port 1(bridge_slave_0) entered blocking state [ 484.931127][ T1164] bridge0: port 1(bridge_slave_0) entered forwarding state [ 484.986090][ T1164] bridge0: port 2(bridge_slave_1) entered blocking state [ 484.993377][ T1164] bridge0: port 2(bridge_slave_1) entered forwarding state [ 485.712530][T17736] netlink: 'syz.2.3167': attribute type 2 has an invalid length. [ 485.728638][T17737] netlink: 144 bytes leftover after parsing attributes in process `syz.3.3168'. [ 485.839938][T17741] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3169'. [ 485.852920][T17741] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3169'. [ 485.876307][T17736] : entered promiscuous mode [ 486.008741][T17750] tipc: Enabled bearer , priority 24 [ 486.889305][T17784] netlink: 'syz.4.3179': attribute type 9 has an invalid length. [ 486.907414][T17785] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap3 [ 487.088960][T17784] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3179'. [ 487.219430][T17329] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 487.521448][T17329] veth0_vlan: entered promiscuous mode [ 487.586184][T17806] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3185'. [ 487.604009][T17329] veth1_vlan: entered promiscuous mode [ 487.704740][T17815] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3185'. [ 487.756950][T17806] 8021q: adding VLAN 0 to HW filter on device bond13 [ 487.791686][T17817] netlink: 'syz.0.3187': attribute type 1 has an invalid length. [ 487.959560][T17817] 8021q: adding VLAN 0 to HW filter on device bond1 [ 488.000518][T17821] bond1: (slave geneve2): making interface the new active one [ 488.012754][T17821] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 488.275320][T17840] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3193'. [ 488.528926][T17329] veth0_macvtap: entered promiscuous mode [ 488.566880][T17329] veth1_macvtap: entered promiscuous mode [ 488.636572][T17329] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 488.690968][T17329] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 488.741358][T12669] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 488.828700][ T1156] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 488.866119][ T1164] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 488.929857][ T1164] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 489.057174][T17866] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3201'. [ 489.349764][ T1156] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 489.384570][ T1156] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 489.517715][T17883] netlink: 144 bytes leftover after parsing attributes in process `syz.2.3206'. [ 489.570806][ T1164] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 489.590794][ T1164] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 490.846146][ T5637] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 490.869937][ T5637] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 490.887138][ T5637] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 490.905524][ T5637] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 490.916563][ T5637] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 491.475398][ T6840] pimreg: left allmulticast mode [ 491.620767][T17942] ksmbd: Unknown IPC event: 1, ignore. [ 491.798799][ T6840] bond5 (unregistering): (slave ip6gretap1): Releasing active interface [ 492.019875][ T6840] tipc: Disabling bearer [ 492.479402][ T6840] bond9 (unregistering): (slave bridge10): Releasing backup interface [ 492.488037][ T6840] bridge10 (unregistering): left promiscuous mode [ 492.508271][ T6840]  (unregistering): Released all slaves [ 492.523435][ T6840] bond1 (unregistering): Released all slaves [ 492.546351][ T6840] bond0 (unregistering): Released all slaves [ 492.571236][ T6840] bond2 (unregistering): Released all slaves [ 492.600891][ T6840] bond3 (unregistering): Released all slaves [ 492.684004][ T9582] IPVS: starting estimator thread 0... [ 492.691801][T17956] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 492.694910][ T6840] bond4 (unregistering): (slave veth3): Releasing active interface [ 492.720401][ T6840] bond4 (unregistering): Released all slaves [ 492.744068][ T6840] bond5 (unregistering): Released all slaves [ 492.767818][ T6840] bond6 (unregistering): Released all slaves [ 492.776764][T17957] IPVS: using max 28 ests per chain, 67200 per kthread [ 492.806517][ T6840] bond7 (unregistering): Released all slaves [ 492.831458][ T6840] bond8 (unregistering): Released all slaves [ 492.874951][ T6840] bond9 (unregistering): Released all slaves [ 492.901554][ T6840] bond10 (unregistering): Released all slaves [ 493.025465][ T5646] Bluetooth: hci2: command tx timeout [ 493.112956][ T6840] tipc: Disabling bearer [ 493.132997][ T6840] tipc: Left network mode [ 494.078973][T17990] xt_hashlimit: size too large, truncated to 1048576 [ 495.102418][ T5646] Bluetooth: hci2: command tx timeout [ 495.260790][T18015] netlink: 'syz.1.3237': attribute type 2 has an invalid length. [ 495.287752][T18015] netlink: 244 bytes leftover after parsing attributes in process `syz.1.3237'. [ 495.407397][T18019] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3239'. [ 495.478436][T18024] netlink: 'syz.2.3240': attribute type 2 has an invalid length. [ 495.544084][T18025] netlink: 'syz.2.3240': attribute type 2 has an invalid length. [ 495.569633][T18024] netlink: 'syz.2.3240': attribute type 8 has an invalid length. [ 495.610229][T18025] netlink: 'syz.2.3240': attribute type 8 has an invalid length. [ 495.644444][T18024] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3240'. [ 495.659161][T18028] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3241'. [ 495.672463][T18025] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3240'. [ 495.714197][T17925] lo speed is unknown, defaulting to 1000 [ 495.791287][T17925] xfrm0 speed is unknown, defaulting to 1000 [ 496.149693][T18040] gretap0: entered promiscuous mode [ 496.185641][T18040] vlan2: entered promiscuous mode [ 496.680226][T18050] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3247'. [ 497.045706][T18067] netlink: 332 bytes leftover after parsing attributes in process `syz.4.3252'. [ 497.182914][ T5646] Bluetooth: hci2: command tx timeout [ 498.366287][ T6840] hsr_slave_0: left promiscuous mode [ 498.404761][ T6840] hsr_slave_1: left promiscuous mode [ 498.422825][ T6840] batman_adv: batadv0: Interface deactivated: ipvlan2 [ 498.440444][ T6840] batman_adv: batadv0: Removing interface: ipvlan2 [ 499.264895][ T5646] Bluetooth: hci2: command tx timeout [ 499.399059][T18117] netlink: 80 bytes leftover after parsing attributes in process `syz.1.3263'. [ 499.423080][T18117] netlink: 80 bytes leftover after parsing attributes in process `syz.1.3263'. [ 499.645404][T18126] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3266'. [ 499.736687][T18128] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 499.781561][T18128] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 499.807585][T18128] gretap1: entered promiscuous mode [ 499.815129][T18128] gretap1: entered allmulticast mode [ 500.067218][ T6840] IPVS: stop unused estimator thread 0... [ 500.458424][T17925] bridge0: port 1(bridge_slave_0) entered blocking state [ 500.487250][T17925] bridge0: port 1(bridge_slave_0) entered disabled state [ 500.488666][T18158] __nla_validate_parse: 3 callbacks suppressed [ 500.488709][T18158] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3273'. [ 500.521645][T17925] bridge_slave_0: entered allmulticast mode [ 500.543406][T17925] bridge_slave_0: entered promiscuous mode [ 500.581526][T17925] bridge0: port 2(bridge_slave_1) entered blocking state [ 500.592360][T18150] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 500.616803][T17925] bridge0: port 2(bridge_slave_1) entered disabled state [ 500.643971][T17925] bridge_slave_1: entered allmulticast mode [ 500.673432][T17925] bridge_slave_1: entered promiscuous mode [ 500.732715][T18169] netlink: 216 bytes leftover after parsing attributes in process `syz.2.3271'. [ 500.879285][T17925] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 500.931764][T17925] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 500.979801][T18178] No such timeout policy "syz0" [ 501.005446][T18178] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3277'. [ 501.152985][T18185] netlink: 528 bytes leftover after parsing attributes in process `syz.1.3278'. [ 501.197555][T17925] team0: Port device team_slave_0 added [ 501.230190][T17925] team0: Port device team_slave_1 added [ 501.446863][T17925] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 501.490149][T17925] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 501.534777][T18196] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3282'. [ 501.567128][T17925] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 501.687728][T17925] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 501.709658][T17925] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 501.765551][T17925] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 501.954376][T18208] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3287'. [ 502.049567][T17925] hsr_slave_0: entered promiscuous mode [ 502.080130][T17925] hsr_slave_1: entered promiscuous mode [ 502.104891][T17925] debugfs: 'hsr0' already exists in 'hsr' [ 502.125815][T17925] Cannot create hsr debugfs directory [ 502.431918][T18211] veth1_macvtap: entered allmulticast mode [ 503.000453][T17925] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 503.029315][T17925] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 503.191681][T18246] netlink: 'syz.4.3296': attribute type 39 has an invalid length. [ 503.272010][T17925] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 503.330868][T17925] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 503.556118][T17925] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 503.599284][T17925] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 504.004694][T17925] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 504.020467][T17925] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 504.128396][T18283] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3305'. [ 504.242774][T18283] bond2: option lacp_strict: mode dependency failed, not supported in mode balance-rr(0) [ 504.262714][T18283] bond2 (unregistering): Released all slaves [ 504.486965][T18293] netlink: 'syz.1.3308': attribute type 1 has an invalid length. [ 504.506859][T18292] netlink: 'syz.1.3308': attribute type 1 has an invalid length. [ 504.581151][T18298] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3309'. [ 504.600687][T18293] 8021q: adding VLAN 0 to HW filter on device bond1 [ 504.616657][T18300] netlink: 'syz.4.3310': attribute type 29 has an invalid length. [ 504.634810][T18300] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3310'. [ 504.844146][T18303] pimreg: entered allmulticast mode [ 504.866566][T18307] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 504.887917][T18303] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3311'. [ 505.178553][T18308] syzkaller0: entered promiscuous mode [ 505.204182][T18308] syzkaller0: entered allmulticast mode [ 505.379119][T18327] dvmrp1: entered allmulticast mode [ 507.795946][T18319] syzkaller0: entered promiscuous mode [ 507.819671][T18319] syzkaller0: entered allmulticast mode [ 507.850174][T18322] netlink: 'syz.1.3315': attribute type 3 has an invalid length. [ 507.862172][T18322] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3315'. [ 508.041483][T17925] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 508.055493][T17925] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 508.073991][T17925] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 508.159454][T17925] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 508.207000][T17925] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 508.326511][T17925] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 508.350810][T17925] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 508.388865][T17925] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 508.737526][T17925] 8021q: adding VLAN 0 to HW filter on device bond0 [ 508.798049][T17925] 8021q: adding VLAN 0 to HW filter on device team0 [ 508.826522][ T932] bridge0: port 1(bridge_slave_0) entered blocking state [ 508.833769][ T932] bridge0: port 1(bridge_slave_0) entered forwarding state [ 508.917893][ T932] bridge0: port 2(bridge_slave_1) entered blocking state [ 508.925169][ T932] bridge0: port 2(bridge_slave_1) entered forwarding state [ 509.181222][T18390] bond2: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 509.224241][T18390] bond2 (unregistering): Released all slaves [ 509.544258][T18401] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3335'. [ 509.600491][T18401] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3335'. [ 509.766049][T18407] netlink: 9 bytes leftover after parsing attributes in process `syz.4.3338'. [ 509.811875][T18407] netlink: 9 bytes leftover after parsing attributes in process `syz.4.3338'. [ 510.156786][T18416] netlink: 'syz.2.3339': attribute type 1 has an invalid length. [ 511.067343][T17925] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 511.249863][T17925] veth0_vlan: entered promiscuous mode [ 511.296212][T17925] veth1_vlan: entered promiscuous mode [ 511.403903][T18442] IPVS: length: 127 != 24 [ 511.477663][T17925] veth0_macvtap: entered promiscuous mode [ 511.536763][T17925] veth1_macvtap: entered promiscuous mode [ 511.631242][T17925] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 511.704319][T17925] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 511.776651][ T1164] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 511.816724][ T1164] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 511.855295][ T1164] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 511.885381][ T1164] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 511.904976][T18458] ip6_tunnel: non-ECT from 0000:0000:0000:0000:0000:ffff:7f00:0001 with DS=0xb [ 511.935817][T18429] netlink: 'syz.2.3342': attribute type 4 has an invalid length. [ 512.140445][T18462] netlink: 'syz.4.3352': attribute type 3 has an invalid length. [ 512.173812][T18462] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3352'. [ 512.539508][ T6843] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 512.573565][ T6843] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 512.740690][ T1164] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 512.775151][ T1164] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 512.901014][T18486] netlink: 'syz.4.3358': attribute type 1 has an invalid length. [ 512.999566][T18486] bond14: entered promiscuous mode [ 513.007709][T18486] 8021q: adding VLAN 0 to HW filter on device bond14 [ 513.165828][T18492] netlink: 300 bytes leftover after parsing attributes in process `syz.3.3212'. [ 513.865627][T18512] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3365'. [ 513.937077][ T5637] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 513.952771][ T5637] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 513.962848][ T5637] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 513.975061][ T5637] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 513.991802][ T5637] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 514.384381][ T5637] Bluetooth: hci2: command 0x0405 tx timeout [ 514.800046][T18546] netlink: 1196 bytes leftover after parsing attributes in process `syz.2.3372'. [ 515.341447][T18561] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 515.556687][T18566] netlink: 204 bytes leftover after parsing attributes in process `syz.1.3378'. [ 515.581754][T18568] netlink: 'syz.3.3379': attribute type 49 has an invalid length. [ 515.727242][T18572] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3378'. [ 515.751494][T18568] ip6gretap0: entered promiscuous mode [ 515.770477][T18568] ip6gretap0: entered allmulticast mode [ 515.828663][T18566] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 515.863316][T18566] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 516.008796][T18571] geneve0: entered promiscuous mode [ 516.034922][T18571] macvlan2: entered promiscuous mode [ 516.065842][ T5637] Bluetooth: hci3: command tx timeout [ 516.097984][T18513] lo speed is unknown, defaulting to 1000 [ 516.134468][T18513] xfrm0 speed is unknown, defaulting to 1000 [ 517.140570][T18602] macsec0: entered promiscuous mode [ 517.575893][T18616] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3391'. [ 517.800604][T18618] vlan2: entered allmulticast mode [ 517.854081][T18618] bond0: entered allmulticast mode [ 517.892928][T18618] bond_slave_0: entered allmulticast mode [ 517.905091][T18618] bond_slave_1: entered allmulticast mode [ 518.157984][ T5637] Bluetooth: hci3: command tx timeout [ 518.600924][T18650] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3396'. [ 519.690216][T18513] bridge0: port 1(bridge_slave_0) entered blocking state [ 519.721125][T18513] bridge0: port 1(bridge_slave_0) entered disabled state [ 519.747464][T18513] bridge_slave_0: entered allmulticast mode [ 519.777479][T18513] bridge_slave_0: entered promiscuous mode [ 519.805405][T18513] bridge0: port 2(bridge_slave_1) entered blocking state [ 519.830359][T18513] bridge0: port 2(bridge_slave_1) entered disabled state [ 519.863340][T18513] bridge_slave_1: entered allmulticast mode [ 519.898790][T18513] bridge_slave_1: entered promiscuous mode [ 519.953931][T18687] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3406'. [ 520.065847][T18513] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 520.197759][T18697] xt_CT: You must specify a L4 protocol and not use inversions on it [ 520.237634][ T5637] Bluetooth: hci3: command tx timeout [ 520.369745][T18513] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 520.566791][T18513] team0: Port device team_slave_0 added [ 520.598561][T18513] team0: Port device team_slave_1 added [ 520.680324][T18707] netlink: 'syz.3.3412': attribute type 3 has an invalid length. [ 520.785043][T18513] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 520.804512][T18513] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 520.892300][T18513] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 520.917977][T18513] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 520.926149][T18513] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 520.957963][T18513] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 520.975761][T18713] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3413'. [ 520.997292][T18716] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 521.015574][T18720] netlink: 'syz.2.3415': attribute type 19 has an invalid length. [ 521.035800][T18719] netlink: 'syz.2.3415': attribute type 19 has an invalid length. [ 521.405253][T18513] hsr_slave_0: entered promiscuous mode [ 521.427733][T18513] hsr_slave_1: entered promiscuous mode [ 521.444654][T18513] debugfs: 'hsr0' already exists in 'hsr' [ 521.457891][T18513] Cannot create hsr debugfs directory [ 521.480396][T18734] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3419'. [ 521.818991][T18743] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3421'. [ 521.868635][T18743] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 522.263894][T18513] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 522.275882][T18513] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 522.313789][ T5637] Bluetooth: hci3: command tx timeout [ 522.458588][T18763] sit1: entered promiscuous mode [ 522.466069][T18763] sit1: entered allmulticast mode [ 522.693703][T18513] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 522.722776][T18513] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 522.857358][T18513] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 522.870166][T18513] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 523.124495][T18513] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 523.174995][T18513] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 523.380862][T18783] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 523.969744][T18513] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 524.017367][T18513] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 524.046310][T18513] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 524.103311][T18513] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 524.151601][T18814] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3440'. [ 524.253497][T18513] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 524.342047][T18513] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 524.388872][T18513] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 524.449893][T18513] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 525.056300][T18853] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3448'. [ 525.151703][T18513] 8021q: adding VLAN 0 to HW filter on device bond0 [ 525.207120][T18513] 8021q: adding VLAN 0 to HW filter on device team0 [ 525.221724][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 525.228955][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 525.295984][T18856] netlink: 'syz.0.3449': attribute type 1 has an invalid length. [ 525.336723][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 525.343960][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 525.473238][T18865] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3452'. [ 525.554154][T18867] openvswitch: netlink: Key 0 has unexpected len 4 expected 0 [ 525.811692][T18868] bond1: Unable to set down delay as MII monitoring is disabled [ 525.935762][T18868] bond1 (unregistering): Released all slaves [ 526.687259][T18906] netlink: 'syz.2.3461': attribute type 1 has an invalid length. [ 526.774678][T18905] bond1: (slave bridge1): making interface the new active one [ 526.787488][T18905] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 527.241249][T18915] ip6erspan0: entered allmulticast mode [ 527.569256][T18929] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3467'. [ 527.675559][T18929] bond2 (unregistering): Released all slaves [ 528.017748][T18944] netlink: 'syz.0.3469': attribute type 12 has an invalid length. [ 528.094047][T18944] netlink: 'syz.0.3469': attribute type 29 has an invalid length. [ 528.170942][T18944] netlink: 'syz.0.3469': attribute type 7 has an invalid length. [ 528.251225][T18944] netlink: 'syz.0.3469': attribute type 39 has an invalid length. [ 528.283146][T18952] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3471'. [ 528.639104][T18960] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3473'. [ 528.687313][T18960] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3473'. [ 529.081525][T18513] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 529.577875][T18982] netlink: 388 bytes leftover after parsing attributes in process `syz.3.3480'. [ 529.629298][T18984] bond_slave_0: entered promiscuous mode [ 530.433350][T19012] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3485'. [ 530.447652][T19015] netlink: 666 bytes leftover after parsing attributes in process `syz.3.3486'. [ 530.641641][T18513] veth0_vlan: entered promiscuous mode [ 530.754344][T18513] veth1_vlan: entered promiscuous mode [ 530.908086][T18513] veth0_macvtap: entered promiscuous mode [ 530.947424][T18513] veth1_macvtap: entered promiscuous mode [ 531.017186][T19034] netlink: 'syz.0.3490': attribute type 28 has an invalid length. [ 531.051696][T19034] netlink: 'syz.0.3490': attribute type 3 has an invalid length. [ 531.068356][T18513] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 531.092591][T19034] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3490'. [ 531.117084][T18513] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 531.167470][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 531.210737][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 531.288797][T19034] bridge4: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 531.372954][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 531.430862][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 531.542812][T19043] netlink: 'syz.1.3493': attribute type 1 has an invalid length. [ 531.594085][T19043] netlink: 'syz.1.3493': attribute type 1 has an invalid length. [ 531.861212][ T6843] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 531.881958][T19023] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 531.938152][ T6843] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 532.067517][ T5288] veth0_vlan: left promiscuous mode [ 532.133799][ T9588] veth0_vlan: entered promiscuous mode [ 532.195947][ T1156] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 532.236787][ T1156] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 533.148764][T19074] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3500'. [ 533.595685][T19085] netlink: 57021 bytes leftover after parsing attributes in process `syz.3.3502'. [ 533.872748][T19092] bridge1: entered promiscuous mode [ 533.912227][T19092] bridge1: entered allmulticast mode [ 533.946732][T19097] netlink: 'syz.4.3504': attribute type 11 has an invalid length. [ 534.191585][T19105] tipc: Started in network mode [ 534.197532][T19105] tipc: Node identity a60be5aee1c3, cluster identity 4711 [ 534.218585][T19105] tipc: Enabled bearer , priority 0 [ 534.258597][T19102] tipc: Resetting bearer [ 534.299259][T19094] tipc: Disabling bearer [ 534.570960][T19119] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3510'. [ 534.647243][T19119] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3510'. [ 534.779035][T19121] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3510'. [ 535.567419][T19163] netlink: 524 bytes leftover after parsing attributes in process `syz.0.3519'. [ 536.140468][T19182] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3526'. [ 536.312638][T19182] bond1 (unregistering): Released all slaves [ 536.696860][T19200] syzkaller0: entered promiscuous mode [ 536.706488][T19200] syzkaller0: entered allmulticast mode [ 536.755609][T19200] netlink: 220 bytes leftover after parsing attributes in process `syz.2.3530'. [ 536.780974][T19204] netlink: 'syz.4.3531': attribute type 2 has an invalid length. [ 536.828120][T19204] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3531'. [ 537.007350][T19217] netlink: 'syz.4.3531': attribute type 9 has an invalid length. [ 537.074781][T19219] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3534'. [ 537.276269][T19226] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3535'. [ 537.331880][T19222] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 538.649969][T19206] bridge0: port 1(bridge_slave_0) entered disabled state [ 538.680174][T19206] bridge_slave_0 (unregistering): left allmulticast mode [ 538.695367][T19206] bridge_slave_0 (unregistering): left promiscuous mode [ 538.712410][T19206] bridge0: port 1(bridge_slave_0) entered disabled state [ 539.668595][T19259] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input6 [ 540.270692][T19282] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3545'. [ 540.731038][T19297] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3549'. [ 540.795585][T19297] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3549'. [ 540.938141][T19295] bond1: option arp_all_targets: invalid value (18446744073709551613) [ 541.009392][T19295] bond1 (unregistering): Released all slaves [ 541.273000][T19312] syz.4.3554: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 541.366356][T19312] CPU: 1 UID: 0 PID: 19312 Comm: syz.4.3554 Not tainted syzkaller #0 PREEMPT(full) [ 541.366386][T19312] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 541.366412][T19312] Call Trace: [ 541.366421][T19312] [ 541.366429][T19312] dump_stack_lvl+0xe8/0x150 [ 541.366529][T19312] warn_alloc+0x24c/0x270 [ 541.366595][T19312] ? stack_depot_save_flags+0x33/0x800 [ 541.366764][T19312] ? __pfx_warn_alloc+0x10/0x10 [ 541.366825][T19312] ? kasan_save_track+0x3e/0x80 [ 541.366851][T19312] ? __kasan_kmalloc+0x93/0xb0 [ 541.366875][T19312] ? xsk_setsockopt+0x52a/0x960 [ 541.367009][T19312] ? do_sock_setsockopt+0x17c/0x1b0 [ 541.367092][T19312] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 541.367113][T19312] ? do_syscall_64+0x174/0x580 [ 541.367167][T19312] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 541.367224][T19312] __vmalloc_node_range_noprof+0x12c/0x1730 [ 541.367292][T19312] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 541.367332][T19312] ? __kasan_kmalloc+0x93/0xb0 [ 541.367357][T19312] ? __kmalloc_cache_noprof+0x32d/0x660 [ 541.367391][T19312] ? __kmalloc_cache_noprof+0x150/0x660 [ 541.367429][T19312] vmalloc_user_noprof+0xad/0xe0 [ 541.367463][T19312] ? xskq_create+0xbf/0x170 [ 541.367497][T19312] xskq_create+0xbf/0x170 [ 541.367532][T19312] xsk_init_queue+0x8a/0xe0 [ 541.367566][T19312] xsk_setsockopt+0x52a/0x960 [ 541.367595][T19312] ? __fget_files+0x2a/0x420 [ 541.367634][T19312] ? __pfx_xsk_setsockopt+0x10/0x10 [ 541.367665][T19312] ? __pfx_aa_sk_perm+0x10/0x10 [ 541.367771][T19312] ? aa_sock_opt_perm+0xff/0x1a0 [ 541.367814][T19312] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 541.367869][T19312] ? __pfx_xsk_setsockopt+0x10/0x10 [ 541.367902][T19312] do_sock_setsockopt+0x17c/0x1b0 [ 541.367931][T19312] __x64_sys_setsockopt+0x13d/0x1b0 [ 541.367958][T19312] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 541.367994][T19312] do_syscall_64+0x174/0x580 [ 541.368012][T19312] ? trace_irq_disable+0x3b/0x140 [ 541.368047][T19312] ? clear_bhb_loop+0x40/0x90 [ 541.368075][T19312] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 541.368096][T19312] RIP: 0033:0x7f1e4899ce59 [ 541.368118][T19312] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 541.368136][T19312] RSP: 002b:00007f1e498d4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 541.368158][T19312] RAX: ffffffffffffffda RBX: 00007f1e48c15fa0 RCX: 00007f1e4899ce59 [ 541.368174][T19312] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 541.368186][T19312] RBP: 00007f1e48a32e6f R08: 0000000000000004 R09: 0000000000000000 [ 541.368199][T19312] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 541.368213][T19312] R13: 00007f1e48c16038 R14: 00007f1e48c15fa0 R15: 00007ffde23a71e8 [ 541.368249][T19312] [ 541.371776][T19312] Mem-Info: [ 541.792886][T19312] active_anon:7047 inactive_anon:0 isolated_anon:0 [ 541.792886][T19312] active_file:0 inactive_file:43273 isolated_file:0 [ 541.792886][T19312] unevictable:768 dirty:61 writeback:0 [ 541.792886][T19312] slab_reclaimable:11725 slab_unreclaimable:128909 [ 541.792886][T19312] mapped:29438 shmem:2414 pagetables:3611 [ 541.792886][T19312] sec_pagetables:0 bounce:0 [ 541.792886][T19312] kernel_misc_reclaimable:0 [ 541.792886][T19312] free:1287528 free_pcp:8989 free_cma:0 [ 541.965622][T19312] Node 0 active_anon:24036kB inactive_anon:0kB active_file:0kB inactive_file:172884kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:117800kB dirty:228kB writeback:0kB shmem:3732kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:15720kB pagetables:14312kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 542.020671][T19231] lo speed is unknown, defaulting to 1000 [ 542.055151][T19231] xfrm0 speed is unknown, defaulting to 1000 [ 542.137260][T19312] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:156kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 542.250007][T19312] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 542.340400][T19312] lowmem_reserve[]: 0 2491 2492 2492 2492 [ 542.370586][T19312] Node 0 DMA32 free:1179880kB boost:0kB min:34184kB low:42728kB high:51272kB reserved_highatomic:0KB free_highatomic:0KB active_anon:23636kB inactive_anon:0kB active_file:0kB inactive_file:172884kB unevictable:1536kB writepending:228kB zspages:0kB present:3129332kB managed:2551440kB mlocked:0kB bounce:0kB free_pcp:40156kB local_pcp:19712kB free_cma:0kB [ 542.473370][T19312] lowmem_reserve[]: 0 0 0 0 0 [ 542.491639][T19312] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:624kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 542.566352][T19336] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 542.606015][T19312] lowmem_reserve[]: 0 0 0 0 0 [ 542.613977][T19312] Node 1 Normal free:3954592kB boost:0kB min:55708kB low:69632kB high:83556kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:500kB local_pcp:0kB free_cma:0kB [ 542.655009][T19312] lowmem_reserve[]: 0 0 0 0 0 [ 542.668470][T19312] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 542.760286][T19312] Node 0 DMA32: 1096*4kB (UME) 421*8kB (UM) 268*16kB (UME) 5*32kB (UM) 9*64kB (M) 432*128kB (UM) 412*256kB (UME) 217*512kB (UME) 112*1024kB (UM) 3*2048kB (UM) 189*4096kB (UM) = 1179624kB [ 542.782964][T19312] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 542.814839][T19312] Node 1 Normal: 1*4kB (M) 1*8kB (M) 1*16kB (M) 2*32kB (UM) 7*64kB (UM) 3*128kB (UM) 3*256kB (UM) 3*512kB (UM) 3*1024kB (UM) 0*2048kB 964*4096kB (UM) = 3954844kB [ 542.875556][T19312] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 542.907149][T19312] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 542.962404][T19312] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 542.976991][T19346] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3562'. [ 542.994672][T19312] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 543.013119][T19346] ksmbd: Unknown IPC event: 1, ignore. [ 543.038549][T19312] 44569 total pagecache pages [ 543.060193][T19312] 0 pages in swap cache [ 543.075785][T19312] Free swap = 124996kB [ 543.091584][T19312] Total swap = 124996kB [ 543.117477][T19312] 2097051 pages RAM [ 543.129914][T19312] 0 pages HighMem/MovableOnly [ 543.148022][T19312] 427420 pages reserved [ 543.164953][T19312] 0 pages cma reserved [ 543.361724][T19357] ksmbd: Unknown IPC event: 1, ignore. [ 543.560304][T19365] netlink: 'syz.0.3564': attribute type 1 has an invalid length. [ 543.597563][T19365] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 543.728089][T19367] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 543.818302][T19376] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3568'. [ 544.592032][T19400] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 544.801308][T19406] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3579'. [ 545.480189][T19421] bridge0: port 2(bridge_slave_1) entered disabled state [ 545.758153][T19438] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3587'. [ 545.773400][T19434] veth0: entered promiscuous mode [ 545.857268][T19436] veth0: left promiscuous mode [ 546.155223][T19446] netlink: 'syz.4.3590': attribute type 1 has an invalid length. [ 546.660689][T19466] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 547.293485][T19484] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.3598'. [ 547.294571][T19489] netlink: 'syz.4.3601': attribute type 10 has an invalid length. [ 547.349095][T19491] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3600'. [ 547.374327][T19491] netlink: 'syz.3.3600': attribute type 10 has an invalid length. [ 547.398373][T19491] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3600'. [ 547.552748][T19489] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 547.580187][T19489] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 547.967069][T19503] vlan2: entered allmulticast mode [ 547.990103][T19503] bond0: entered allmulticast mode [ 548.018035][T19503] bond_slave_0: entered allmulticast mode [ 548.051437][T19503] bond_slave_1: entered allmulticast mode [ 548.459276][T19528] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3612'. [ 548.803112][T19540] netlink: 170676 bytes leftover after parsing attributes in process `syz.2.3616'. [ 548.815827][T19540] openvswitch: netlink: ufid size 41726 bytes exceeds the range (1, 16) [ 548.837421][T19540] openvswitch: netlink: Message has 512 unknown bytes. [ 548.861780][T19541] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3615'. [ 548.940182][T19545] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3617'. [ 549.023941][T19548] netlink: 108 bytes leftover after parsing attributes in process `syz.3.3619'. [ 549.039570][T19548] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3619'. [ 549.720103][T19577] smc: net device team0 applied user defined pnetid SYZ0 [ 550.295908][T19603] wireguard0: entered allmulticast mode [ 550.346499][T19608] sctp: [Deprecated]: syz.1.3639 (pid 19608) Use of struct sctp_assoc_value in delayed_ack socket option. [ 550.346499][T19608] Use struct sctp_sack_info instead [ 550.744839][ T9588] IPVS: starting estimator thread 0... [ 550.796229][T19625] netlink: 'syz.2.3642': attribute type 2 has an invalid length. [ 550.853062][T19628] IPVS: using max 27 ests per chain, 64800 per kthread [ 550.930931][T19633] __nla_validate_parse: 3 callbacks suppressed [ 550.930949][T19633] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3646'. [ 551.080812][T19638] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3647'. [ 551.114706][T19635] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3647'. [ 551.705023][T19664] netlink: 'syz.3.3654': attribute type 1 has an invalid length. [ 551.908119][T19670] netlink: 'syz.4.3657': attribute type 39 has an invalid length. [ 552.413313][T19685] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3662'. [ 552.500810][T19690] IPVS: length: 8 != 1152 [ 552.526405][T19694] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3663'. [ 552.631688][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 552.963764][T19706] netlink: 'syz.2.3665': attribute type 19 has an invalid length. [ 552.975981][T19707] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 553.818568][T19728] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3672'. [ 553.921899][T19743] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3674'. [ 553.981717][T19744] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3674'. [ 554.349112][T19752] ip6t_rpfilter: unknown options [ 554.702380][ T5637] Bluetooth: hci5: command 0x0406 tx timeout [ 554.801744][T19770] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3680'. [ 554.950157][T19776] netlink: 'syz.0.3683': attribute type 13 has an invalid length. [ 555.028161][T19776] erspan0: refused to change device tx_queue_len [ 555.050756][T19776] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 555.463705][T19792] tipc: Started in network mode [ 555.480754][T19792] tipc: Node identity ce0c6f40942c, cluster identity 4711 [ 555.510670][T19792] tipc: Enabled bearer , priority 0 [ 555.558013][T19795] syzkaller0: entered promiscuous mode [ 555.597655][T19795] syzkaller0: entered allmulticast mode [ 555.676492][T19792] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 555.741481][T19799] xt_hashlimit: size too large, truncated to 1048576 [ 555.821715][T19803] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 555.854833][T19802] tipc: Resetting bearer [ 555.907187][T19790] tipc: Resetting bearer [ 556.058422][T19790] tipc: Disabling bearer [ 556.171120][T19811] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3692'. [ 556.184691][T19818] netlink: 'syz.4.3690': attribute type 1 has an invalid length. [ 556.644741][T19832] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3696'. [ 556.894540][ C1] vcan0: j1939_tp_rxtimer: 0xffff88803badd400: rx timeout, send abort [ 557.071018][T19846] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3700'. [ 557.227918][T19850] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 557.397511][T19846] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3700'. [ 557.551126][T19860] sctp: [Deprecated]: syz.2.3704 (pid 19860) Use of int in max_burst socket option. [ 557.551126][T19860] Use struct sctp_assoc_value instead [ 557.729576][T19866] netlink: 'syz.3.3705': attribute type 2 has an invalid length. [ 557.778034][T19866] netlink: 'syz.3.3705': attribute type 1 has an invalid length. [ 557.827331][T19866] netlink: 'syz.3.3705': attribute type 1 has an invalid length. [ 557.851075][T19866] netlink: 'syz.3.3705': attribute type 2 has an invalid length. [ 558.370810][T19884] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3711'. [ 558.575198][T19887] openvswitch: netlink: Tunnel attr 3 has unexpected len 8 expected 1 [ 558.664510][T19893] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 560.736863][T19970] Bluetooth: MGMT ver 1.23 [ 560.806715][T19975] block nbd0: reconnected socket [ 560.813070][ T5646] block nbd0: Receive control failed (result -107) [ 560.860634][T19975] gtp0: entered allmulticast mode [ 560.924500][T19975] gtp0: entered promiscuous mode [ 560.936485][T19975] team0: Device gtp0 is of different type [ 561.309758][T19978] syzkaller0: entered promiscuous mode [ 561.315610][T19978] syzkaller0: entered allmulticast mode [ 561.327101][T19992] sch_fq: defrate 0 ignored. [ 561.344703][T19993] netlink: 'syz.0.3737': attribute type 7 has an invalid length. [ 561.363271][T19993] netlink: 140 bytes leftover after parsing attributes in process `syz.0.3737'. [ 564.791685][ T35] [ 564.794066][ T35] ====================================================== [ 564.801111][ T35] WARNING: possible circular locking dependency detected [ 564.808183][ T35] syzkaller #0 Not tainted [ 564.812619][ T35] ------------------------------------------------------ [ 564.819651][ T35] kworker/u8:2/35 is trying to acquire lock: [ 564.825641][ T35] ffffffff8ea5eb20 (pcpu_alloc_mutex){+.+.}-{4:4}, at: pcpu_alloc_noprof+0x231/0x1900 [ 564.835275][ T35] [ 564.835275][ T35] but task is already holding lock: [ 564.842664][ T35] ffffffff8e7f6cc0 (wq_pool_mutex){+.+.}-{4:4}, at: __alloc_workqueue+0xa9c/0x2060 [ 564.852027][ T35] [ 564.852027][ T35] which lock already depends on the new lock. [ 564.852027][ T35] [ 564.862647][ T35] [ 564.862647][ T35] the existing dependency chain (in reverse order) is: [ 564.871676][ T35] [ 564.871676][ T35] -> #8 (wq_pool_mutex){+.+.}-{4:4}: [ 564.879166][ T35] __mutex_lock+0x19d/0x1550 [ 564.884367][ T35] __alloc_workqueue+0xa9c/0x2060 [ 564.889944][ T35] alloc_workqueue_noprof+0xe3/0x210 [ 564.895765][ T35] padata_alloc+0xbe/0x360 [ 564.900721][ T35] pcrypt_init_padata+0x27/0x100 [ 564.906328][ T35] pcrypt_init+0x60/0xc0 [ 564.911214][ T35] do_one_initcall+0x250/0x870 [ 564.916519][ T35] do_initcall_level+0x10a/0x1a0 [ 564.922087][ T35] do_initcalls+0x59/0xa0 [ 564.926959][ T35] kernel_init_freeable+0x29d/0x3e0 [ 564.932698][ T35] kernel_init+0x1d/0x1d0 [ 564.937637][ T35] ret_from_fork+0x514/0xb70 [ 564.942794][ T35] ret_from_fork_asm+0x1a/0x30 [ 564.948110][ T35] [ 564.948110][ T35] -> #7 (cpu_hotplug_lock){++++}-{0:0}: [ 564.955869][ T35] cpus_read_lock+0x42/0x160 [ 564.961106][ T35] static_key_slow_inc+0x12/0x30 [ 564.966575][ T35] nbd_genl_reconfigure+0x1301/0x1e80 [ 564.972562][ T35] genl_family_rcv_msg_doit+0x233/0x340 [ 564.978734][ T35] genl_rcv_msg+0x614/0x7a0 [ 564.983793][ T35] netlink_rcv_skb+0x226/0x4a0 [ 564.989102][ T35] genl_rcv+0x28/0x40 [ 564.993638][ T35] netlink_unicast+0x7bb/0x940 [ 564.998931][ T35] netlink_sendmsg+0x813/0xb40 [ 565.004245][ T35] sock_sendmsg_nosec+0x13a/0x180 [ 565.009895][ T35] ____sys_sendmsg+0x54e/0x850 [ 565.015198][ T35] ___sys_sendmsg+0x2a5/0x360 [ 565.020414][ T35] __x64_sys_sendmsg+0x1b1/0x290 [ 565.025891][ T35] do_syscall_64+0x174/0x580 [ 565.031024][ T35] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 565.037473][ T35] [ 565.037473][ T35] -> #6 (&nsock->tx_lock){+.+.}-{4:4}: [ 565.045143][ T35] __mutex_lock+0x19d/0x1550 [ 565.050273][ T35] nbd_queue_rq+0x373/0x1150 [ 565.055411][ T35] blk_mq_dispatch_rq_list+0x499/0x1990 [ 565.061604][ T35] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 565.068531][ T35] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 565.075054][ T35] blk_mq_run_work_fn+0x16c/0x300 [ 565.080620][ T35] process_scheduled_works+0xa8e/0x14e0 [ 565.086703][ T35] worker_thread+0xa47/0xfb0 [ 565.091859][ T35] kthread+0x388/0x470 [ 565.096475][ T35] ret_from_fork+0x514/0xb70 [ 565.101633][ T35] ret_from_fork_asm+0x1a/0x30 [ 565.106952][ T35] [ 565.106952][ T35] -> #5 (&cmd->lock){+.+.}-{4:4}: [ 565.114187][ T35] __mutex_lock+0x19d/0x1550 [ 565.119320][ T35] nbd_queue_rq+0xc1/0x1150 [ 565.124366][ T35] blk_mq_dispatch_rq_list+0x499/0x1990 [ 565.130473][ T35] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 565.137336][ T35] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 565.143858][ T35] blk_mq_run_work_fn+0x16c/0x300 [ 565.149417][ T35] process_scheduled_works+0xa8e/0x14e0 [ 565.155504][ T35] worker_thread+0xa47/0xfb0 [ 565.160643][ T35] kthread+0x388/0x470 [ 565.165241][ T35] ret_from_fork+0x514/0xb70 [ 565.170376][ T35] ret_from_fork_asm+0x1a/0x30 [ 565.175687][ T35] [ 565.175687][ T35] -> #4 (set->srcu){.+.+}-{0:0}: [ 565.182829][ T35] __synchronize_srcu+0xc9/0x2f0 [ 565.188351][ T35] elevator_switch+0x1e8/0x7b0 [ 565.193749][ T35] elevator_change+0x2fa/0x480 [ 565.199069][ T35] elevator_set_default+0x375/0x440 [ 565.204803][ T35] blk_register_queue+0x3f3/0x4e0 [ 565.210415][ T35] __add_disk+0x6cb/0xe30 [ 565.215307][ T35] add_disk_fwnode+0xfb/0x4b0 [ 565.220525][ T35] nbd_dev_add+0x733/0xb60 [ 565.225485][ T35] nbd_init+0x15f/0x1e0 [ 565.230301][ T35] do_one_initcall+0x250/0x870 [ 565.235617][ T35] do_initcall_level+0x10a/0x1a0 [ 565.241095][ T35] do_initcalls+0x59/0xa0 [ 565.245963][ T35] kernel_init_freeable+0x29d/0x3e0 [ 565.251700][ T35] kernel_init+0x1d/0x1d0 [ 565.256569][ T35] ret_from_fork+0x514/0xb70 [ 565.261711][ T35] ret_from_fork_asm+0x1a/0x30 [ 565.267013][ T35] [ 565.267013][ T35] -> #3 (&q->elevator_lock){+.+.}-{4:4}: [ 565.274866][ T35] __mutex_lock+0x19d/0x1550 [ 565.279991][ T35] elevator_change+0x1af/0x480 [ 565.285301][ T35] elevator_set_none+0xb5/0x140 [ 565.290693][ T35] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 565.297038][ T35] nbd_start_device+0x189/0xb30 [ 565.302427][ T35] nbd_genl_connect+0x1597/0x1c10 [ 565.307996][ T35] genl_family_rcv_msg_doit+0x233/0x340 [ 565.314099][ T35] genl_rcv_msg+0x614/0x7a0 [ 565.319150][ T35] netlink_rcv_skb+0x226/0x4a0 [ 565.324447][ T35] genl_rcv+0x28/0x40 [ 565.328967][ T35] netlink_unicast+0x7bb/0x940 [ 565.334267][ T35] netlink_sendmsg+0x813/0xb40 [ 565.339569][ T35] sock_sendmsg_nosec+0x13a/0x180 [ 565.345136][ T35] ____sys_sendmsg+0x54e/0x850 [ 565.350447][ T35] ___sys_sendmsg+0x2a5/0x360 [ 565.355664][ T35] __x64_sys_sendmsg+0x1b1/0x290 [ 565.361150][ T35] do_syscall_64+0x174/0x580 [ 565.366272][ T35] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 565.372704][ T35] [ 565.372704][ T35] -> #2 (&q->q_usage_counter(io)#50){++++}-{0:0}: [ 565.381497][ T35] blk_alloc_queue+0x544/0x690 [ 565.386817][ T35] __blk_mq_alloc_disk+0x194/0x390 [ 565.392484][ T35] nbd_dev_add+0x494/0xb60 [ 565.397458][ T35] nbd_init+0x15f/0x1e0 [ 565.402162][ T35] do_one_initcall+0x250/0x870 [ 565.407472][ T35] do_initcall_level+0x10a/0x1a0 [ 565.412958][ T35] do_initcalls+0x59/0xa0 [ 565.417847][ T35] kernel_init_freeable+0x29d/0x3e0 [ 565.423682][ T35] kernel_init+0x1d/0x1d0 [ 565.428567][ T35] ret_from_fork+0x514/0xb70 [ 565.433716][ T35] ret_from_fork_asm+0x1a/0x30 [ 565.439021][ T35] [ 565.439021][ T35] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 565.446251][ T35] fs_reclaim_acquire+0x71/0x100 [ 565.451728][ T35] prepare_alloc_pages+0x15b/0x650 [ 565.457406][ T35] __alloc_frozen_pages_noprof+0x12f/0x380 [ 565.463760][ T35] __alloc_pages_noprof+0x10/0x100 [ 565.469416][ T35] pcpu_populate_chunk+0x181/0xb30 [ 565.475071][ T35] pcpu_alloc_noprof+0xbca/0x1900 [ 565.480638][ T35] xt_percpu_counter_alloc+0x145/0x1e0 [ 565.486809][ T35] translate_table+0x129a/0x1f80 [ 565.492362][ T35] ipt_register_table+0x112/0x310 [ 565.497922][ T35] iptable_mangle_table_init+0x41/0x70 [ 565.503917][ T35] xt_find_table_lock+0x311/0x400 [ 565.509485][ T35] xt_request_find_table_lock+0x26/0x100 [ 565.515661][ T35] do_ipt_get_ctl+0x77f/0x1300 [ 565.520982][ T35] nf_getsockopt+0x26e/0x290 [ 565.526196][ T35] ip_getsockopt+0x19e/0x230 [ 565.531482][ T35] do_sock_getsockopt+0x51d/0x7e0 [ 565.537044][ T35] __x64_sys_getsockopt+0x1a4/0x240 [ 565.542787][ T35] do_syscall_64+0x174/0x580 [ 565.547925][ T35] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 565.554361][ T35] [ 565.554361][ T35] -> #0 (pcpu_alloc_mutex){+.+.}-{4:4}: [ 565.562123][ T35] __lock_acquire+0x1520/0x2cf0 [ 565.567575][ T35] lock_acquire+0x106/0x350 [ 565.572644][ T35] __mutex_lock+0x19d/0x1550 [ 565.577785][ T35] pcpu_alloc_noprof+0x231/0x1900 [ 565.583363][ T35] __alloc_workqueue+0xb2c/0x2060 [ 565.588925][ T35] alloc_workqueue_noprof+0xe3/0x210 [ 565.594746][ T35] __rds_conn_create+0x130d/0x2250 [ 565.600484][ T35] rds_conn_create+0x43/0x60 [ 565.605626][ T35] rds_tcp_accept_one+0x44f/0xd40 [ 565.611287][ T35] rds_tcp_accept_worker+0x1d/0x70 [ 565.616956][ T35] process_scheduled_works+0xa8e/0x14e0 [ 565.623057][ T35] worker_thread+0xa47/0xfb0 [ 565.628198][ T35] kthread+0x388/0x470 [ 565.632800][ T35] ret_from_fork+0x514/0xb70 [ 565.637934][ T35] ret_from_fork_asm+0x1a/0x30 [ 565.643242][ T35] [ 565.643242][ T35] other info that might help us debug this: [ 565.643242][ T35] [ 565.653481][ T35] Chain exists of: [ 565.653481][ T35] pcpu_alloc_mutex --> cpu_hotplug_lock --> wq_pool_mutex [ 565.653481][ T35] [ 565.666539][ T35] Possible unsafe locking scenario: [ 565.666539][ T35] [ 565.674003][ T35] CPU0 CPU1 [ 565.679380][ T35] ---- ---- [ 565.684804][ T35] lock(wq_pool_mutex); [ 565.689072][ T35] lock(cpu_hotplug_lock); [ 565.696104][ T35] lock(wq_pool_mutex); [ 565.702880][ T35] lock(pcpu_alloc_mutex); [ 565.707396][ T35] [ 565.707396][ T35] *** DEADLOCK *** [ 565.707396][ T35] [ 565.715550][ T35] 4 locks held by kworker/u8:2/35: [ 565.720672][ T35] #0: ffff88803336c940 ((wq_completion)krdsd){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 565.731601][ T35] #1: ffffc90000ab7c40 ((work_completion)(&rtn->rds_tcp_accept_w)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 565.744333][ T35] #2: ffff888076d68a60 (&rtn->rds_tcp_accept_lock){+.+.}-{4:4}, at: rds_tcp_accept_one+0xb3/0xd40 [ 565.755059][ T35] #3: ffffffff8e7f6cc0 (wq_pool_mutex){+.+.}-{4:4}, at: __alloc_workqueue+0xa9c/0x2060 [ 565.764828][ T35] [ 565.764828][ T35] stack backtrace: [ 565.770729][ T35] CPU: 0 UID: 0 PID: 35 Comm: kworker/u8:2 Not tainted syzkaller #0 PREEMPT(full) [ 565.770749][ T35] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 565.770761][ T35] Workqueue: krdsd rds_tcp_accept_worker [ 565.770784][ T35] Call Trace: [ 565.770792][ T35] [ 565.770800][ T35] dump_stack_lvl+0xe8/0x150 [ 565.770821][ T35] print_circular_bug+0x2e1/0x300 [ 565.770844][ T35] check_noncircular+0x12e/0x150 [ 565.770868][ T35] __lock_acquire+0x1520/0x2cf0 [ 565.770886][ T35] ? check_path+0x21/0x40 [ 565.770905][ T35] ? check_noncircular+0xda/0x150 [ 565.770925][ T35] ? add_lock_to_list+0xc7/0x100 [ 565.770946][ T35] ? lockdep_unlock+0x5d/0xd0 [ 565.770959][ T35] ? __lock_acquire+0x13e8/0x2cf0 [ 565.770978][ T35] ? pcpu_alloc_noprof+0x231/0x1900 [ 565.771002][ T35] lock_acquire+0x106/0x350 [ 565.771018][ T35] ? pcpu_alloc_noprof+0x231/0x1900 [ 565.771053][ T35] __mutex_lock+0x19d/0x1550 [ 565.771069][ T35] ? pcpu_alloc_noprof+0x231/0x1900 [ 565.771095][ T35] ? __pfx___mutex_trylock_common+0x10/0x10 [ 565.771119][ T35] ? pcpu_alloc_noprof+0x231/0x1900 [ 565.771141][ T35] ? trace_contention_end+0x3d/0x140 [ 565.771162][ T35] ? __pfx___mutex_lock+0x10/0x10 [ 565.771176][ T35] ? __mutex_lock+0x30d/0x1550 [ 565.771197][ T35] ? __pfx___mutex_lock+0x10/0x10 [ 565.771213][ T35] pcpu_alloc_noprof+0x231/0x1900 [ 565.771238][ T35] ? __kmalloc_cache_node_noprof+0x3ce/0x630 [ 565.771271][ T35] __alloc_workqueue+0xb2c/0x2060 [ 565.771297][ T35] alloc_workqueue_noprof+0xe3/0x210 [ 565.771317][ T35] ? __pfx_alloc_workqueue_noprof+0x10/0x10 [ 565.771339][ T35] ? mutex_init_lockdep+0xdf/0x110 [ 565.771360][ T35] __rds_conn_create+0x130d/0x2250 [ 565.771379][ T35] ? __rds_conn_create+0x2d2/0x2250 [ 565.771404][ T35] ? __pfx___rds_conn_create+0x10/0x10 [ 565.771424][ T35] ? __ipv6_chk_addr_and_flags+0x688/0x7e0 [ 565.771517][ T35] ? __ipv6_chk_addr_and_flags+0x184/0x7e0 [ 565.771540][ T35] rds_conn_create+0x43/0x60 [ 565.771579][ T35] rds_tcp_accept_one+0x44f/0xd40 [ 565.771604][ T35] ? __pfx_rds_tcp_accept_one+0x10/0x10 [ 565.771628][ T35] ? rcu_is_watching+0x15/0xb0 [ 565.771648][ T35] ? process_scheduled_works+0xa20/0x14e0 [ 565.771672][ T35] rds_tcp_accept_worker+0x1d/0x70 [ 565.771693][ T35] process_scheduled_works+0xa8e/0x14e0 [ 565.771730][ T35] ? __pfx_process_scheduled_works+0x10/0x10 [ 565.771757][ T35] ? assign_work+0x3cf/0x5d0 [ 565.771794][ T35] worker_thread+0xa47/0xfb0 [ 565.771830][ T35] kthread+0x388/0x470 [ 565.771848][ T35] ? __pfx_worker_thread+0x10/0x10 [ 565.771871][ T35] ? __pfx_kthread+0x10/0x10 [ 565.771888][ T35] ret_from_fork+0x514/0xb70 [ 565.771907][ T35] ? __pfx_ret_from_fork+0x10/0x10 [ 565.771925][ T35] ? __switch_to+0xc89/0x1420 [ 565.771951][ T35] ? __pfx_kthread+0x10/0x10 [ 565.771968][ T35] ret_from_fork_asm+0x1a/0x30 [ 565.771995][ T35] [ 565.790333][ T5637] Bluetooth: hci0: command 0x0406 tx timeout