last executing test programs: 31.599920361s ago: executing program 3 (id=6434): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="20000000400007070000000000000000037c000004009c80060001"], 0x20}, 0x1, 0x0, 0x0, 0x4048090}, 0xc000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xb, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="620ac4ff0000000071104b000000000095"], &(0x7f0000000480)='GPL\x00'}, 0x90) 31.311771084s ago: executing program 3 (id=6435): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448e0, &(0x7f00000000c0)) (async, rerun: 64) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64) sendmsg$IPSET_CMD_DEL(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, 0xa, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x40010}, 0x10) 30.866708168s ago: executing program 3 (id=6438): r0 = socket$nl_route(0x10, 0x3, 0x0) connect$pppoe(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x0, {0x1, @local, 'ip6gre0\x00'}}, 0x1e) socket$pppl2tp(0x18, 0x1, 0x1) syz_emit_ethernet(0xd2, &(0x7f0000000500)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb88a83d008100390008004a2d00bc006500000501907800000000ac1e0101443ce931e000000100000009ac1414aa00000001e00000020000000400000000000000057f000001000000b8000000000000000464010100000003a4071bb3e0000002ac1014bbac1e0001ac141434000000007f00000144148d0000001b0d000001ff000000030000000683177dac1414bb64010102ac1414aae00000017f000001018811cb2d078e7e55269499548b631668850e009078000a057600000831fffffff90000000b"], 0x0) syz_extract_tcp_res$synack(&(0x7f0000000200), 0x1, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0xa}, 0x94) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$packet(0x11, 0x2, 0x300) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r1, &(0x7f0000000880)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000840)={&(0x7f00000006c0)=ANY=[@ANYBLOB="cb000000", @ANYRES16=r2, @ANYBLOB="00002abd7000fddbdf250700000008000400ffffffff4400068008000300e00000011400040000000000000000000000ffffe000000114000400fc01000000000000000000000000000008000600170000000800060005000000050005001b00000038000180060005004e21000014000400fc0200000000000000000000000000000600010002000000060001000a0000000500020006000000080003000600000004000680"], 0xac}, 0x1, 0x0, 0x0, 0x4811}, 0x10) socket$xdp(0x2c, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f0000000440)={@val={0x70}, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x452c, 0x0, 0x4000, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x0, 0xffffdd86}}}}}}}, 0xfdef) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd"], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x44, 0x2c, 0xf3f, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xb, 0xfff3}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x14, 0x2, [@TCA_BASIC_EMATCHES={0x10, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_LIST={0x4}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000001100000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000008000c40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="300000001800090000000000000000001c140000fe00000100000000040012000000f1b9a81697008d96aab68e5ee7f882be613668a0328c49d2ee"], 0x30}}, 0x0) ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) ioctl$TUNSETIFINDEX(r6, 0x400454da, &(0x7f0000000180)=r7) 29.614871533s ago: executing program 3 (id=6443): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=ANY=[@ANYBLOB="0300000004000000040000000100010f00000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NODES(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r2, 0x1, 0x70bd2c, 0x25dfdbfb}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x840) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$pppoe(0x18, 0x1, 0x0) tee(r5, r6, 0x1ff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x5, 0xa, &(0x7f0000000680)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018100000", @ANYRES32=r0, @ANYBLOB="00000000000000004e800000000000001800000000000000000000000000000095000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x4, 0xfe, &(0x7f00000004c0)=""/254}, 0x80) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40000000010800034000000014480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c0003801800008008000340000000020c0004400000000000000c7f14000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) r10 = socket$inet_udp(0x2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) setsockopt$inet_int(r10, 0x0, 0x22, &(0x7f0000000000)=0x1, 0x4) syz_emit_ethernet(0x7e, &(0x7f0000000440)={@broadcast, @remote, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "fec000", 0x44, 0x3a, 0x0, @private0, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "18b088", 0x0, 0x0, 0x0, @empty, @private1={0xfc, 0x1, '\x00', 0x1}, [@hopopts={0x11}], "bf0c7de8ed8f6ec5402a1859"}}}}}}}, 0x0) sendmsg$NFT_MSG_GETSETELEM(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={0x40, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "1e1c"}]}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x630, 0x1b8, 0x0, 0x428, 0x0, 0x0, 0x560, 0x560, 0x560, 0x560, 0x560, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x8}}}, {{@ipv6={@mcast1, @local, [], [], 'xfrm0\x00', 'ip6tnl0\x00', {}, {}, 0x6, 0x0, 0x6, 0x72}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00', {}, {0xff}}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@frag={{0x30}, {[0x4, 0x2280], 0x4, 0x2}}, @common=@inet=@socket1={{0x28, 'socket\x00', 0x3}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0x120, 0x148, 0x0, {}, [@common=@frag={{0x30}}, @common=@hbh={{0x48}, {0x0, 0x0, 0x0, [0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}}]}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0xf8, 0x138, 0x0, {}, [@common=@eui64={{0x28}}, @inet=@rpfilter={{0x28}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x690) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000740)={0x0, 0x38, &(0x7f0000000700)=[@in6={0xa, 0x4e20, 0x8, @mcast2, 0x7fffffff}, @in6={0xa, 0x4, 0x8, @remote, 0x81}]}, &(0x7f0000000780)=0x10) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f00000007c0)={r11, 0x25a}, 0x8) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r0}, &(0x7f0000000180), &(0x7f00000001c0)=r3}, 0x20) 22.127072489s ago: executing program 3 (id=6470): sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x26, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x2000000, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) sendto$inet6(r0, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x604ab000) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f00000022c0)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000f0ffffff7a0af0ff0200000079a4f0ff00000000b706000000000081ad64020000000000450404000100ff0f1704000001130a00b7050000030000006a0af2fe000000008500000009000000b700000000000000950000000000000000e154cd8445974b26c933f7ffffffffe4fbffffff55bb2007ee51050512b5b42128aa090a79507df79f298129daa7a6b2f91af50342115e17392ac627c87881c000006146001e04aeacea799a22a2fa798b5adc43eb27d53319d0ad229e5752548300000000dbc2777df150b7cdd77b85b941092314fd085f028f2ed1a4535550614e09d6378198a6097a670838337af2abd55a87ac0394b2f92ffab7d153d62058d0a413b2173619ccf55520f22c9ca8b6712f3024b7041b1df65b3e1b9bf115646d14ce53d13d0ccacda1ef0900094fa737c28b99938512c816fdcceaede3faedc51d29a47fc813a2ec00f4c7a53ac271d6d7f4ea6bf97f2f33e2ea2e534300bcb3fdc4b4861004eefbda7f54f82a804da4f85db47a4a69bf9bc5fa96ee293fbd165a5a68488e40b030166565a097b1b44b451de736bb6d43db8db03d4b7745fef1d04ec633dee254a6d491b849a5a787e814c4fd21a18986252a70f8f92eb6f0e8c7db4bf23242a1f2c28159f09943b1b0452d1b72183aacf4a84f9130b775dd4e9e3070756f97ad791fa99dac06b57479321a0574fb30ff0000001989425f5d0b79f6584d0416d7c4bb9f547b328c8ddc20ea011bf5742e0e0d4334db8b20ce3f9f16cb7fc20fb4791ec85821d0c48fb657c29b309c73f0977e7cde65a82b94c461d7962b0d2277a84af326f37f3e2c25a61ec45c3af97a8f17da954aff3fc8c108755f01000000010000006e7dac1aba4b20dc7de058a4dfa7e85a8bdf1d41a2d8bda74d66f47cc180f82c5f573c6d294d3665016ac59dda0fde4745db06753a7ac74a2d32f7528751313694bf5700b20ef0c248ddd3da32396a614cacad4aff2066bb5d4045c958559b7dcb98a6273b8c651e24d9f679e4fbe948dfb4cc4a389469608241730459f0123fd39206000000000000eb55dad46de56ef907b059b90b8aa49afb9a79ae5498f6589880ed6eea7f9c670012be05e7de0940313c5870786554df26236ebced9390cb6941b8375d936a7d2120eca291963eb2d537d8ee4de5c183c960119451c31539b22809e1d7f0cda06a9fa87d64cb77872a2cd8a104e16bb1a2bacf13464ca03aff14a9aa4bd9539f5096412b92012e095b84c20243ff98df3347f0e399d1b9f27e3c33269c0e153b28b2d4410572bc45b98d2de10c21d3ea02208d304d455c36300000000022320178b00cc6ed7966130b547dbf8b497af002000000cd1d000000200008000000000000001abc11c800000000000000000000000928ee53595a779d243a48cea769470424d20a04c04b2c4324ab7f4a5c81921f0128dfd70b438af60b060000000000000056642b49b745f3bf2c4af38ffb7d748308eea09fc361b4735efbf3411718d6ee7aebf9ef679dbfae9fb4a79f8a836804ed3a1079b0282a12043408cd60b687dcff91af19010000000000000000456f7d2a42bd13da202274f20675eb781925441578e93046aaddea8ec4ca37f71c2710a7ea8ae0dc214e1cc275b26adfa892e6de92000000000000000000ddff004cff9ec7ffff35e62f4eeee50e5bafecea4d4134f9d006c8d6883eca5c9c58c9e93311ab5009c68c73de2f04f15d005387577f480000ea65559eb00e76e9d0ada201bcbb5c252b28a60ca770663da451790cc36000906d5a9fad98c308e39bd5ffb6151d79c1cee1cd102e3c8e63e9fba05e3633be3f00000015762e5f5a3a0bc33fdbe28a5ffc83f2b485185cc92fe7f791e8f6429309d6adab4b7e508e5bf024ed8f8a005f2bbf96c89739f5cf1e750d50517a59a3ad09e8802e8f4f535447cc0fc9d5f99a73145dfcedad69da9cd4375c624600e78f4458542b14f29611f95d4a31838eeb20c20bb82aa31771cd379ec83554cea5e6539db7384e1f58d81f2f2653c4d9818708e27c89b552d7fcd116bce9c764c714c9402c21d181aac59efb28d4f91652f6750b6ec962802c0320f8059195729d60c534ee8e8ff0755b67fe4c25edb85bcff24c757aa8090000000000008c420eb4304f66e3a37aaf000000c42a570f0e9dd5fd545470f862f8c3c14fa9ecd1e877b0d8ca84c044859e85e6158f9184bc61a9a284db80e4636c25b96174327d82761c26e329555f9290af4100000000000000749efd3763655500344bae34137f5ab0d534b8d63e4ca3b671f2de1cdf519192c6b59a601fd419adc16e2055b85058f793484305d7a1759782e4c571ee855a47bc00edf5e9020c09ab004321610b857e8717764b633b21cb32f0eb3280e09758bd445ab91d20baca005472b79d7b574a247f1d2fe45b3c4e93da3d51de647c10dd49944dc87c92fe8bad99ca332af00f191b66b6a6f732a91f0e2e9190e4b448da7de018c58e950767f9b320be61e58c79d497247d278888901d442ad7f8536605a644e9e3d769db497c3960dfde12182334caee994adc38a436367a54b9e182b78e9a0ceb9a2c4f63902c1ad1a7c5a08d0920a23c2a86abbdf357849a651733e57f31019876026888c8ccb85c86b4f8ffffff7f000000002c331fca0e541b7ca211c28ed61c52573d9308a13d115b43f8b1894c8fa8a14dc4810f61ae96bf704526a8919bc700002100000000000000000001000027c9a46157a3609b6fd9843ee19ec647249a9375de5858818f3c4a4fa6ce46f4d42b07199de8b99231ace58c77819ee214e49666c464d35ca9b5143ed3b3dc8c17a23692759ccf5a205311b7ab22532697b861dfb54609fd88e6043bd52ae84c1bb0c8a6c769f952283a1f4e3842edb3d42c68a27ef6a1296dfff4a979369b0e8ebc62887aa46e820a74f91381ccc198e353047db70686d147357024eb3cb94f1e89cb5ba0a56aa046b4dc521a3d9356b4b8b5917c4c860495b240e80063bde261fd00000000007271e28ef6806bc8e139c49b91c76bea3858f78fbd8d31330d89069f9648a2ff93060ff073b3a113e47edf76f7d116d2b0976cf2ec447c030931651dd315003b7a6a5433a2bb3c035fc6846abe389b25c988f0bbb889560ae99ec4b227eda2e63a1c31a2c2bd48a822cbe92b6524e0cd8020ecaa34e19e7141d5e221509342bfe7d294d1eb3de6a50ca0301f89c2ee627e949c68b3a4a426a9b7d503a26e9a714ee5f72d8805dd1bfbd081f6a5d1f1289dfe14cb9194e26a44fac273461fc5c0e0a33db7f2d43ea8086cf059f40fa2640b6bfb74dd35f5a31059c01517cf4b6641fce9a24b96767b837ca037a1199735c375c705c798e0e208e4a5259d0bfa526b462af45a6eab34000000000000000000000000c4426344ec1a3366515dee221e747f55d7dd02534bc503b9b28277c253e410986bef2111a99cc448d652929f8a67a6a1d3f00dcad91aff428aade3f85714a1d3ef29acd4d49b62339c10c2ec0dac4728288e78980c1184d8223edbccbf9258b7374e79a1f8bf3fb73cfd1e76982f3d899f71e495f0ba8c6dbb7bbdfc399847a11921f97eba0ea14c4fed9a71eedb97c02461792e4a48dac16c60c3fcaab222025d78963c3ac899fa8b63f58a30212c9b2d7fe751e2046b78f86e22861b6504c667350244dd6d9189a8b9c45f8aaff9db694811ca86ed978f23eed7459c0382074170cf1e25b0e9ba3d1cc309353eea4cd8ab96bafda393276bdd8d32ead8db9e1b54d2d3d50e2815268fc1a6ec566981bc8ca2a4583f3d40e817433d0f4f25cfe6cc1897449ba5f26a9d66ac73e6f5c401376f23a314e0b9ff997d22f3e34b7524642c248aa813edaa626f00000021f8547d393dabe616fbbde21c90be00b5a22671395c7a69c6dd4d022ffc97ddb6aa025131652d409da1d8cfc3d219d4b1c1b7b8170d7c33d91db2b73f7ae02485a209a2474b5d0790d05c01bec623056e4d3f4d3149373a28b26a15a1fcce73d57e6eaf7e6f315fe275ebc9ef7aeca277dde01dde724f419803a2172a7833ceab38d21ca4f1dea5e1f4d8824167b21dd289dd4e6ecfba9e163bdbc48e1e758ecde05c10809c9edfa6d77c652fd742e6dad13d2a397bebe3ea8bc087d3720e2202f36c7719ae34f042e19dc08a3323a3d94098a7ec171469352bab1662c3e4d4803c565cfcce32dad628fade43a4844abb230ce608726fd87e93c405a96cf638c41510f26e9da5f316"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x40000000, {}, [{0x54, 0x1, [@m_mpls={0x1b, 0x1, 0x0, 0x0, {{0x9}, {0x24, 0x2, 0x0, 0x1, [@TCA_MPLS_BOS={0x5}, @TCA_MPLS_LABEL={0x8}, @TCA_MPLS_PROTO={0x6, 0x4, 0x8847}, @TCA_MPLS_LABEL={0x8, 0x5, 0xf47eb}]}, {0x4, 0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x68}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r1, 0x0, 0x62, 0xfe, &(0x7f0000000140)="cb74445b7d4c0b24676c6c71ae37efcedaf40242309766deb4e793f90000000000000000dbc856cbc664650634231454ca2d8034c4ca29e0d99c3b6615e91835a600c08f989af45438a54981be310aad92ae545b1c961e5f3762a51fe4c736edec6f", &(0x7f0000000440)=""/254, 0x2f00, 0x0, 0xff, 0x194, &(0x7f0000000980)="ffc4438e5c3081d0e133e812196ec0ed923733aa8b5aba32c8650e7a66d6136853773dfbc6226be13039e230d511f1ac50cc7811aac0400e4c833fedf842ae2918e6fddb550729246fcf4c0a01bc64989ea3985fb362751a83991bd56e761379caa64f6148893ff25f38d5cd6dd695bbf9ca709a9960e0e6b054d5e2239bcb7c0fb2ac66dc4c8f534e439ff20ccaf0d48a98c19c92a3b437a699350f49606d21a403f8c112c46fea5486bf367a854b0f6c1e563b656e4794f6793a08bb3656c391643f6df71d0255054368a938d38503d064da82d5dbf395ad47ed3932669168d324ed0f6de8360d499042ddc7d02b6c0772128257702bfe6d0971f00fea85da062cdc", &(0x7f00000007c0)="4c87fe555ceb79157b1e507ff4d3cc053321e42ae89f596427188b4877ab8f1776c0685784f1174c6401ecc1dd6e2a77bc79238f87ad9215a92ff203a30099e77c543e702b4a4438d358616381745f24f74e585498af129c4b173b242f445b08135f7fa40eb7ba78160ff4f0c80e1b324d0c234cb7f43a3ff9e9535dc16000c797113a039f4508a09144090000009f38a90a24f173b3e68377e4272950a80cfcd3aa6850e917bc7e57370060f5e6db941d67fc98a1e98103830b821657438325578d2af822dd4fc13ea7a7eef8d9be4e715aec8fd6cadc41c8da5ce9da2b9e1559d92a1936fc2b3a00000000000000000072200e10ba6269b634f10f7098c65ba67ba65c0e2687637e131fb8d5ba6c12c09c8356853c434a44ff0878e496dcf9a4f5ca02c293279948f37ebb28843f92c87c057a3b410e04418557d5deda7ddd3bd1d384d64ec980187e8b64a0696571a49e847db79349c9b3c3fab5f1f977bde4d802d9026ae0c11744eb1525c5195fd215d7a432497f35c2f2cfcd2b6336b26dfef0cb968c910ea2af5cdd4d58cc08535d5514", 0x2, 0x0, 0x10000}, 0x24) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000001380)=""/4080, 0xfffffffffffffdcc, 0x0, 0x0, 0xffffffffffffff87}, &(0x7f0000000000)=0x40) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000740)={&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000002c0)=0x40) r3 = socket(0x10, 0x80002, 0x0) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) getsockopt$X25_QBITINCL(r4, 0x106, 0x1, 0x0, &(0x7f0000000040)=0xffffffffffffff5f) r5 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r5) getsockname$packet(r5, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x56) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, 0x49811, 0x49841}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0x4}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000884}, 0x0) r7 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r7, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x8, r6, 0x17}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000540)="f6185f2a8e4125", 0x7}], 0x1}, 0x4) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000380)={0x0, @loopback, @empty}, &(0x7f00000005c0)=0xc) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000cc0)={'gre0\x00', &(0x7f0000000bc0)={'gre0\x00', 0x0, 0x1, 0x80, 0x7, 0x80000001, {{0x29, 0x4, 0x3, 0x9, 0xa4, 0x66, 0x0, 0x7c, 0x29, 0x0, @private=0xa010101, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@generic={0x89, 0x12, "74a99d51c003ece83a9bf4b6670593cd"}, @timestamp_prespec={0x44, 0x1c, 0xe0, 0x3, 0x6, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x81}, {@remote, 0x100}, {@multicast1, 0x6}]}, @timestamp_prespec={0x44, 0x34, 0x34, 0x3, 0xa, [{@empty, 0xea}, {@multicast1, 0x10000}, {@loopback, 0x7fff}, {@multicast1, 0x2b}, {@broadcast}, {@loopback, 0x3}]}, @lsrr={0x83, 0x1b, 0x4b, [@broadcast, @remote, @empty, @broadcast, @multicast2, @loopback]}, @generic={0x89, 0x11, "82a0ad2b02c5cf4549b2d289689deb"}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000e00)={'gre0\x00', &(0x7f0000000d00)={'gretap0\x00', 0x0, 0x8000, 0x80, 0xfffffffe, 0x6fe, {{0x2a, 0x4, 0x0, 0x1, 0xa8, 0x64, 0x0, 0x1, 0x2f, 0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp_prespec={0x44, 0x44, 0x71, 0x3, 0x7, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3}, {@empty, 0xffffffff}, {@local, 0x7}, {@dev={0xac, 0x14, 0x14, 0x2d}, 0x7fffffff}, {@loopback, 0x5}, {@empty, 0x2}, {@loopback, 0x80000001}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x7c4}]}, @timestamp={0x44, 0x18, 0x57, 0x0, 0x9, [0x2, 0x3, 0xc, 0x3ff, 0x81]}, @rr={0x7, 0x17, 0xb, [@loopback, @multicast1, @loopback, @local, @private=0xa010101]}, @generic={0x83, 0x7, "70691a59f6"}, @ra={0x94, 0x4}, @noop, @timestamp_addr={0x44, 0x14, 0x94, 0x1, 0x1, [{@remote, 0xd7800000}, {@multicast1, 0x1ff}]}]}}}}}) sendmsg$nl_route_sched(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000e40)=@newtaction={0x1dc, 0x30, 0x10, 0x0, 0x0, {0x9}, [{0x1c8, 0x1, [@m_mirred={0x1c4, 0x2, 0x0, 0x0, {{0xb}, {0xa4, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0xe53, 0xfffff65b, 0x20000000, 0xdceb, 0x8}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x3, 0x1, 0x3, 0xfffff93b, 0x4}, 0x1, r6}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0x7, 0x6, 0x7, 0x80000001}, 0x4, r8}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xbc, 0x8, 0x2, 0x4, 0x4}, 0x1, r9}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x9d, 0x81, 0x8, 0x7f, 0x4}, 0x2, r10}}]}, {0xf6, 0x6, "4589ec662860b6ebd43975c98634cdfdc9ae19373605e140f42eb00840a8f0fcbec551c8500c00f7101acc732edffbec4108723e8a5928c3c149019781da31d73ad8654966b15434e37b3c5a2c03e5e5abc221c4be05e821de5c6e1a6829eb52367bbd5749628ce1158a1efbf00fb83c5d3ddd2b258317c31f1bf15f583a1196a6bc37bfea76bbf7eed65aeb6a7d93b2bfe601af03c07441afe4bef8843feda67fbc9e51682d0ed4159e6c4d2808c1b2bf0f800675065850e3033cb530800221df775b34bd814dc609a0f63a7969142105e7359598ded19c373ae0d12c5096b7403cee5588dfa9cf6aeb5e1f2f6c2c62b9c3"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x1dc}}, 0x0) 21.323342973s ago: executing program 3 (id=6477): r0 = socket(0x10, 0x803, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socket$kcm(0x21, 0x2, 0x2) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000280)={0x0, 0x1, 0x584}, &(0x7f00000002c0)=0x8) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={r1, @in6={{0xa, 0x4e24, 0xf66, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x6}}, 0x1, 0xaf, 0x572, 0x101, 0xc3, 0x400, 0x2}, 0x9c) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1900000004000000040000000200000400000000", @ANYRES32=0x1, @ANYBLOB="fcffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002500)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) socket$kcm(0xa, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001cc0)={{r2}, &(0x7f0000001c40), &(0x7f0000001c80)=r3}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="0d0000000000000071118400000000008510000002000000850000000500000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r3, 0x2000012, 0xe, 0x0, &(0x7f0000000080)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000400)={{r5, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f00000003c0)='%pI4 \x00'}, 0x20) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$F2FS_IOC_COMPRESS_FILE(r4, 0xf518, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_SPLIT_GSO={0x8}, @TCA_CAKE_ATM={0x8, 0x4, 0x2}]}}]}, 0x44}}, 0x4000010) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r6, 0xffffffffffffffff}, 0x4) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x10, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000ffff0b867b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r9, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r10, 0x0, 0xe, 0x48000000, &(0x7f0000000300)="40f0538ef047b21fb60068305500", 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@ipv6_newaddr={0x54, 0x14, 0x9535393fea6295b5, 0x40, 0xfffffffc, {0xa, 0x3f, 0x9, 0x0, r11}, [@IFA_LOCAL={0x14, 0x2, @local}, @IFA_CACHEINFO={0x14, 0x6, {0x0, 0xfffff001, 0x6}}, @IFA_ADDRESS={0x14, 0x1, @dev={0xfe, 0x80, '\x00', 0x3f}}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) 3.763415507s ago: executing program 0 (id=6586): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000cc0)=ANY=[@ANYBLOB="000086dd0203050009000a004000683739ed002829fffe8000000000000000000000000000aaff020000000000000000000000000001"], 0xfdef) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x3, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_CE_THRESHOLD={0x8, 0xc, 0x5}, @TCA_FQ_FLOW_MAX_RATE={0x8}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r5, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8792}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x2e}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x2b, r5, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r6, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newqdisc={0x74, 0x24, 0x4ee4e6a52ff56541, 0x70bd23, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff9, 0xa}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x44, 0x2, {{0xfffff92d, 0x2, 0x2, 0x7, 0xffffffff, 0x3}, [@TCA_NETEM_CORR={0x10, 0x1, {0x16ee568d, 0x0, 0x8000}}, @TCA_NETEM_LOSS={0x18, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0xfffffffe, 0xfffffffe, 0xfffffff7, 0xf8}}]}]}}}]}, 0x74}, 0x1, 0x0, 0x0, 0x200008c2}, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r9, &(0x7f00000005c0)="bad330fbc9b55400040000ea0756", 0xe, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r8, 0x1, 0xd8, 0x6, @random="000863ee0a3d"}, 0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)=@mpls_newroute={0xd8, 0x18, 0x4, 0x70bd25, 0x25dfdbfe, {0x1c, 0xe61a97877ffd03c8, 0x0, 0xa, 0xff, 0x1, 0xfd, 0x7, 0x1300}, [@RTA_MULTIPATH={0xc, 0x9, {0x0, 0x8, 0x8, r8}}, @RTA_NEWDST={0x84, 0x13, [{0x9, 0x0, 0x1}, {0x7, 0x0, 0x1}, {0x4, 0x0, 0x1}, {0x37}, {0xc9b2c}, {0x29, 0x0, 0x1}, {0x6}, {0x4, 0x0, 0x1}, {0xfcb8, 0x0, 0x1}, {0x1}, {0x9}, {0x2719, 0x0, 0x1}, {0x3, 0x0, 0x1}, {0x9}, {0x7, 0x0, 0x1}, {0xc, 0x0, 0x1}, {0x1, 0x0, 0x1}, {0x3}, {0x9a74, 0x0, 0x1}, {0xff799}, {0x40}, {0x6, 0x0, 0x1}, {0x3}, {0x7}, {}, {0x120, 0x0, 0x1}, {0x1, 0x0, 0x1}, {0x14ec, 0x0, 0x1}, {0x7}, {0x2, 0x0, 0x1}, {0x1, 0x0, 0x1}, {0x3}]}, @RTA_VIA={0x14, 0x12, {0xf, "f5f300983463230d4cc4f94fdddf"}}, @RTA_OIF={0x8, 0x4, r10}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0x9}, @RTA_DST={0x8}]}, 0xd8}, 0x1, 0x0, 0x0, 0xc0}, 0x4002010) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000280)={0x0, 0x99, 0xb, 0x4, 0x2, 0x5392, 0xfb9d, 0x8, {0x0, @in={{0x2, 0x4e22, @multicast1}}, 0x81, 0x0, 0xc, 0x4b, 0x9}}, 0x0) r11 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c000280080001400000000014000180090001006cdbf80789f3f947dd000280080003"], 0xe4}}, 0x20050840) sendmsg$kcm(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d00)=[{&(0x7f0000000040)="e03f030041000b04d25a806c8c6394f90324fc60100000010a000200053582c137153e3704020180fc5409000c00", 0x2e}, {&(0x7f0000000d00)="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", 0x1000}], 0x2}, 0x0) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x30, 0x40, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x14, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @typed={0x8, 0x11, 0x0, 0x0, @uid}]}, @nested={0x4, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) 2.949883045s ago: executing program 0 (id=6596): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x100, 0x2e, 0x9, 0x70bd27, 0x25dfdbff, {0x7}, [@generic="376f1c06352cbf8c376a09e29686d285911e72b25dbf58abd604cf074ab61eeccff3f5e188cd6fad3920c4a6796c1525761da4047bc5077a567b03645b157e3d5c85f86b1a8e5e39583cfb91b332ec2de3faa4ec31257c38f565c388a67afd664256e543a49acb02df07f13ee523b0c321063e9fc7f4d4e21e0072bf9e990208dab6b3e88e11df8158fae1bbda46a9a3104280311922c8d52378d47c8a822ffc3ac0f0b0b91e7666162130ab8f604f1880f8da9aaddb9f8263bc58e3433a88192d82ae876e253a8787d441b6c2245fc36f970cd94e544f4a92648d86eca9ec697c1c416d962fd5530036"]}, 0x100}, 0x1, 0x0, 0x0, 0x44040091}, 0x84) sendmsg$FOU_CMD_GET(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@FOU_ATTR_LOCAL_V4={0x8, 0x6, @multicast2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2000880}, 0x4010) 2.743771154s ago: executing program 2 (id=6597): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=@getchain={0x34, 0x66, 0xfcd66a900070b359, 0x3, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xf}}, [{0x7, 0xb, 0x8}, {0x8, 0xb, 0x7f8902f8}]}, 0x34}, 0x1, 0x0, 0x0, 0x8800}, 0x0) r1 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000440), 0x8) splice(r0, &(0x7f0000000140)=0x2, r1, &(0x7f0000000480)=0x2, 0x40000, 0x9) r2 = epoll_create1(0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r3) close(0xffffffffffffffff) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_XFRM_DIR={0x5}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xcc}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r7 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r7, &(0x7f0000000180)=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e24, 0x5, @private2}}, 0x24) sendmmsg(r7, &(0x7f00000057c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x1}]}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0xe, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffa3}, 0x48) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), 0xffffffffffffffff) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r8, &(0x7f0000000080)={0x10000000}) ioctl$XFS_IOC_START_COMMIT(r6, 0x80585882, &(0x7f00000003c0)={0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r10, 0x1, r9, &(0x7f0000000100)={0x20000016}) close(r9) ioctl$XFS_IOC_COMMIT_RANGE(r8, 0x40585883, &(0x7f0000000000)={r2, 0x0, 0xfffffffffffffffb, 0x9, 0x2, 0x8, [0xfffffffffffffff8, 0xffffffff, 0x6, 0x6, 0x0, 0xba2]}) 2.743448432s ago: executing program 1 (id=6598): r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000200)={'vxcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000001c0)={0x1d, r1, 0x2, {0x0, 0x1, 0x1}, 0xff}, 0x18) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x1500, &(0x7f0000000140)=[{&(0x7f0000000180)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe55a10a000600014002020a600e41b0000900ac00060211000000120012000a00ff110048035c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000008af26c8b7b55f4d2a6823a45f28fcb1d", 0xd8}], 0x1}, 0x0) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f00000006c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000680)={&(0x7f00000005c0)={0x14, 0x0, 0x100, 0x70bd25, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x80c0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371400000069bd6efb2502eaf60d000300020400bf050005001206", 0x2e}], 0x1}, 0x0) ioctl$sock_ifreq(r0, 0x8913, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 2.739755002s ago: executing program 0 (id=6600): r0 = socket$inet6(0xa, 0x3, 0x84) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000280)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@empty, 0x0, 0x56, 0x4e23, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x100000002, 0xfffffffffffffff6, 0x2000000, 0x1, 0x8}, {0x7, 0x0, 0x4}, 0x932, 0x0, 0x1, 0x0, 0x3}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4d4, 0x6c}, 0xa, @in=@empty, 0x2, 0x4, 0x0, 0x0, 0xfffffffc, 0x8, 0x4}}, 0xe8) (async) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x8, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r3, r4, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r3}, &(0x7f00000006c0), &(0x7f0000000700)=r2}, 0x20) sendmsg$inet(r1, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) sendmmsg(r5, &(0x7f0000002080)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="7334ca", 0x3}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000dc0)=ANY=[], 0x12a0}}], 0x2, 0x4000041) 2.396952948s ago: executing program 2 (id=6602): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000040)={'wg1\x00', 0x0}) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x4) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="540000006a0008002abd7000fddbdf25020000000000000008000a0000000000080001000100000004000900080001000100000008000500", @ANYRES32=r1, @ANYBLOB="0400090004000be38400090004000b0008000500", @ANYRES32=r2, @ANYBLOB], 0x54}}, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, &(0x7f0000000000)=0xa, 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, r5, 0x1, 0x70bd2a, 0x25dfdbfd}, 0x14}}, 0x80) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r3, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x4c, r5, 0x20, 0x70bd26, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0xf}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x1}, @MPTCP_PM_ATTR_LOC_ID={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000850}, 0x80) 2.28764144s ago: executing program 1 (id=6603): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000000)={r0, 0xb, 0x2, 0xfffffffffffffe00}) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000000040), &(0x7f0000000100)=0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r4, &(0x7f00000003c0)='V', 0x1, 0x0, &(0x7f00000001c0)={0xa, 0x0, 0x1, @dev={0xfe, 0x80, '\x00', 0x17}}, 0x1c) shutdown(r4, 0x1) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000000)={0x0, 0xae46}, &(0x7f0000000040)=0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_MODE={0x8}]}}}]}, 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r0, @ANYBLOB="08000100", @ANYRES32=r2], 0x90}}, 0x0) 2.207297449s ago: executing program 2 (id=6604): r0 = socket$inet6(0xa, 0x802, 0x0) (async) r1 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r1, &(0x7f0000000040), 0x10) (async) listen(r1, 0x0) (async, rerun: 32) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x12, 0xffffffffffffffff, 0x76fd8000) (async, rerun: 32) r2 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r2, &(0x7f0000000080), 0x10) sendmmsg$alg(r2, &(0x7f0000004ec0)=[{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000500)='\b', 0x1}], 0x1, 0x0, 0x0, 0x4000004}], 0x1, 0x20) (async) setsockopt$sock_linger(r2, 0x1, 0x3c, &(0x7f0000000180)={0x1, 0x5}, 0x8) (async) sendmmsg(r2, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094) r3 = accept4$unix(r1, 0x0, 0x0, 0x0) recvfrom$unix(r3, &(0x7f0000000140)=""/263, 0x107, 0x0, 0x0, 0x0) (async) recvmsg(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/58, 0x3a}], 0x1}, 0x0) (async) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000040)="ff0204000000000100000000000000000000000000000205", 0x18) getsockopt$inet6_opts(r0, 0x29, 0x39, 0x0, &(0x7f0000000240)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x15, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000004000000000000001154d1ff85100000010000009500000000000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000005000000850000002300000018010000646c6c2500000000002020200600000000000000bf0600000000000007010000f8ffffffb702000008000000b703000059e70000a50000000600000095"], &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) 2.19189629s ago: executing program 4 (id=6605): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b40500000000000069106b0000000000bc001000000000009500000000000000ef4f7c81f5427c16bd2aacf32cdbb47063fd9a7bb1f3ad622c3261f324e081c0ea39bd16d9869302cc08fbd94867708cb208e22cc0ad536525e3b39869285c126353f6a49bc5abc6b9a4eab313655286ee33a56f03b665dd5f1739bda6accc3b9b0d26450d3161263aed01194269a5fba4553bb18fa1f37e2f68a8ef81f090829d0ee04b52611a41642b31a6fe2653171379cc327fc11e38418b589777f8c8ddcbf88df947a05937ea"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6364, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r4, {0x0, 0xd}, {0x1, 0xb}, {0xffff, 0xfff2}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x4, 0x10, 0x6, 0x8, 0xfbee}, 0x1, 0x0, 0x3, 0x5, 0xe, 0x4, 0xd, 0x18, 0x5, 0x2, {0x6, 0x8, 0xfffffffc, 0x0, 0xffffffff, 0x5}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x240048e4}, 0x4890) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r7, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, 0x0, 0x800, 0x55007}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER={0x5, 0x19, 0x2}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 2.019861606s ago: executing program 0 (id=6606): mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x71, 0xffffffffffffffff, 0x46e4c000) (async) r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000002600), 0xffffffffffffffff) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) (async, rerun: 64) ioctl$sock_inet_SIOCSARP(r2, 0x8955, &(0x7f0000000180)={{0x2, 0x4e23, @remote}, {0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1a}}, 0x4, {0x2, 0x4e20, @broadcast}}) (rerun: 64) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB="240000001900010000000000000000001c140000fe0000010000000005001a0004"], 0x24}}, 0x0) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002680)={&(0x7f0000000140)={0x14, r0, 0xf21, 0x70bd27, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x40085}, 0x24008840) (async, rerun: 64) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) (rerun: 64) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r4, 0x84, 0x7c, 0x0, &(0x7f0000000200)) 1.962140326s ago: executing program 1 (id=6607): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_FLUSH(r0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000940), r0) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000980)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01003bbd7000ffdbdf25fc23f6a2d3ad5256", @ANYRES32=r1, @ANYBLOB='\f\x00X\x00,\x00\x00\x00\x00\x00\x00\x00\f\x00X\x00Z\x00\x00\x00\x00\x00\x00\x00\f\x00X\x00\b\x00\x00\x00\x00\x00\x00\x00'], 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 1.945614853s ago: executing program 2 (id=6608): r0 = socket(0x400000000010, 0x3, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000001300000030c985becdff080c000000"], 0x48) (async) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000001300000030c985becdff080c000000"], 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000140)={&(0x7f0000000000)="9e", &(0x7f0000000940)=""/4096, &(0x7f0000000100), &(0x7f00000001c0), 0x1, r1}, 0x38) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r2, 0x6, 0x3, &(0x7f0000000340)=0x15, 0x4) connect$bt_l2cap(r2, &(0x7f0000000080)={0x1f, 0x1, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) (async) connect$bt_l2cap(r2, &(0x7f0000000080)={0x1f, 0x1, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x0, 0x4, 0xc52d}}}}]}, 0x44}}, 0x4c850) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newtfilter={0x48, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xfff3, 0xfff3}, {0x0, 0xfff3}, {0xd, 0x8}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_INDEV={0x14, 0x2, 'vxcan1\x00'}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20041004}, 0x0) preadv(r0, &(0x7f0000001240), 0x0, 0xe, 0xfffffffc) syz_emit_ethernet(0x82, &(0x7f0000001a80)=ANY=[@ANYBLOB="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"], 0x0) socket$kcm(0x29, 0x5, 0x0) (async) r4 = socket$kcm(0x29, 0x5, 0x0) write$cgroup_pressure(r4, &(0x7f0000000140)={'full'}, 0xfffffdef) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2000002, 0x42073, 0xffffffffffffffff, 0xaba00000) (async) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2000002, 0x42073, 0xffffffffffffffff, 0xaba00000) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r5, &(0x7f0000001a40)={&(0x7f0000001940), 0xc, &(0x7f0000001a00)={&(0x7f0000001bc0)=ANY=[@ANYBLOB="64000000010801010000000000000000030000080600024086f70000050003008800000000240004800800094000000001080004400000040008000140000000060800084000000005060002400a140000050003000600000078ba6baaca569a285e644273c31c963125005b520dfe236484bd50650769ccef2aba8cb5ed1d6433f1102f0eb4b4cd069ef88baaaca236e67131ade35ae5b0408a989ae5dc4b3612670b93aad9e74fac2d22881a31aebdc76a680bca4cd256caa2e83dbbaba9bd081bcdb57bb3ac5f80d850c27d72674e0a334647ed7f377f9e5d2cd641f0dbebe412fbb6c3a70754aa694287c0cabb1f4c04991de6"], 0x64}, 0x1, 0x0, 0x0, 0x1}, 0x8041) socket$unix(0x1, 0x5, 0x0) 1.663807713s ago: executing program 1 (id=6609): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd23, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff9, 0xa}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0xfffff92d, 0x2, 0x2, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x200008c2}, 0x0) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000480), r2) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r4], 0x1c}}, 0x840) unshare(0x2c020400) write$nci(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="400404"], 0x7) write$nci(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="000501"], 0x4) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWCHAIN={0x58, 0x3, 0xa, 0x76a9bba1a690db0f, 0x0, 0x0, {0xa, 0x0, 0x2005}, [@NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3cb140bb}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}]}, @NFTA_CHAIN_COUNTERS={0x1c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x7}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xfffffffffffffff9}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x80}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) 1.663364835s ago: executing program 4 (id=6610): r0 = socket$l2tp(0x2, 0x2, 0x73) connect$inet(r0, &(0x7f0000000200)={0x2, 0xce20, @remote}, 0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r1, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r2) sendmsg$IEEE802154_LLSEC_ADD_DEV(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)={0x20, r3, 0x852dd6c070cd7e4d, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x20}, 0x4, 0x700000000000000}, 0x2400409c) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @rand_addr=0x64010102}]}, &(0x7f0000000180)=0x10) r5 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000240)) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f00000002c0)={r4, 0x3}, &(0x7f0000000300)=0x8) r6 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r6, 0x84, 0x21, &(0x7f0000000040), &(0x7f0000000080)=0x4) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r7, 0x29, 0x2, 0x0, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x5, 0x0, 0x0, 0x4}, 0x94) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)=ANY=[@ANYRES32=r12, @ANYRES32=r11, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r12}, &(0x7f0000000000), &(0x7f0000000080)=r8}, 0x20) recvmsg$unix(r9, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000001780)=""/4071, 0xfe7}, {&(0x7f0000000300)=""/78, 0x4e}, {&(0x7f0000000400)=""/133}], 0x9}, 0x40020000) sendmsg$inet(r10, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0xfffe}], 0x1}, 0x0) r13 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) setsockopt$bt_BT_FLUSHABLE(r13, 0x112, 0x8, &(0x7f0000000000)=0x4, 0x4) sendto$inet6(r6, &(0x7f0000000000)="c5", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x15}, 0x1c) setsockopt$inet6_mreq(r6, 0x29, 0x2d, 0x0, 0x0) ioctl$FS_IOC_GETFSLABEL(r13, 0x81009431, &(0x7f0000000100)) 1.641629878s ago: executing program 2 (id=6611): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) r1 = socket(0x14, 0x2, 0x4) socket$phonet(0x23, 0x2, 0x1) (async) r2 = socket$phonet(0x23, 0x2, 0x1) ioctl$SIOCPNDELRESOURCE(r2, 0x89ee, &(0x7f0000000300)) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f0000000480)={{r1, &(0x7f0000000080)='ns/cgroup\x00', 0x40, &(0x7f00000000c0)={@align=0x2, {0x0, 0xd, 0x5, 0x80}}, 0x3, &(0x7f0000000100), &(0x7f0000000140)=0x4}, {[0x10001, 0x0, 0xf, 0x1]}, 0x5, 0xf7, &(0x7f0000000380)=""/247}) (async) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f0000000480)={{r1, &(0x7f0000000080)='ns/cgroup\x00', 0x40, &(0x7f00000000c0)={@align=0x2, {0x0, 0xd, 0x5, 0x80}}, 0x3, &(0x7f0000000100), &(0x7f0000000140)=0x4}, {[0x10001, 0x0, 0xf, 0x1]}, 0x5, 0xf7, &(0x7f0000000380)=""/247}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x60, 0x60, 0x2, [@fwd={0xb}, @enum64={0xd, 0x5, 0x0, 0x13, 0x1, 0xa, [{0xc, 0x4, 0x2}, {0xa, 0x1ff, 0x81}, {0x5, 0xfffffff7, 0x4}, {0xf, 0x4, 0xe}, {0x9, 0x0, 0x3}]}, @volatile]}}, 0x0, 0x7a}, 0x28) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) (async) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x34, r4, 0x1, 0x0, 0x0, {0x10}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_USE_ADAPTIVE_RX={0x5, 0xb, 0x2}]}, 0x34}}, 0x4044890) (async) sendmsg$ETHTOOL_MSG_COALESCE_SET(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x34, r4, 0x1, 0x0, 0x0, {0x10}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_USE_ADAPTIVE_RX={0x5, 0xb, 0x2}]}, 0x34}}, 0x4044890) 1.054410449s ago: executing program 4 (id=6612): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) (async) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x200002, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x19, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r5 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r5, 0x114, 0x6, &(0x7f00000001c0)=0x1, 0x4) (async) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)={0x40, 0x3, 0x8, 0x201, 0x0, 0x0, {}, [@CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_PARTOPEN={0x8}, @CTA_TIMEOUT_DCCP_CLOSEREQ={0x8}, @CTA_TIMEOUT_DCCP_OPEN={0x8}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}]}, 0x40}}, 0x0) (async) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000005c0)={r3, r2, 0x15, 0x0, @val=@kprobe_multi=@syms={0x0, 0x0, 0x0}}, 0x30) (async) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000140)='veth1_to_bridge\x00', 0x10) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000001200)={'lo\x00', &(0x7f00000011c0)=@ethtool_cmd={0x4a, 0x9, 0xe21, 0x2, 0x9, 0x2, 0xa5, 0x0, 0x7, 0xfc, 0x2, 0xc, 0x5, 0x2, 0xf9, 0x2, [0xffffffff, 0x42]}}) (async) getsockopt$sock_buf(r6, 0x1, 0x19, 0x0, &(0x7f0000000280)) (async) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x14, r1, 0x305, 0x0, 0x0, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x4004018}, 0x20000000) 643.787515ms ago: executing program 0 (id=6613): socket$netlink(0x10, 0x3, 0x5) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x558}}, 0x40) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000240)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="480000000d0a0103000000000000000005000000090602007379df5c1d2cae12e9b2b14edd265b56527a320000feff0800020073797a320000000008000440000000000900010073"], 0x48}, 0x1, 0x0, 0x0, 0x4000010}, 0x4000000) 626.785522ms ago: executing program 1 (id=6614): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x3, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2000000}, 0x48) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x9, &(0x7f0000000040)=@framed={{}, [@ldst={0x3, 0x0, 0x6, 0xa, 0x0, 0xfe00, 0x41}, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 621.619826ms ago: executing program 4 (id=6615): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000009b80)={0x30, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) socket$key(0xf, 0x3, 0x2) (async) r1 = socket$key(0xf, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000540)={'netdevsim0\x00', 0x0}) sendmsg$nl_xfrm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="5c0100001000130700000000ffdbdf25fc010000000000000000000000000000ff0200000000000000000000000000010004fffe4e2100020000000021000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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", @ANYRES32=r4, @ANYRES16=r2], 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x2014) (async) sendmsg$nl_xfrm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="5c0100001000130700000000ffdbdf25fc010000000000000000000000000000ff0200000000000000000000000000010004fffe4e2100020000000021000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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", @ANYRES32=r4, @ANYRES16=r2], 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x2014) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000740)={'ip_vti0\x00', &(0x7f00000005c0)={'sit0\x00', 0x0, 0x8, 0x10, 0x1, 0x0, {{0x4c, 0x4, 0x2, 0x3, 0x130, 0x67, 0x0, 0xf, 0x29, 0x0, @multicast1, @empty, {[@timestamp_addr={0x44, 0x1c, 0x69, 0x1, 0x5, [{@rand_addr=0x64010102, 0xac4}, {@local, 0x346}, {@multicast1, 0x2}]}, @ssrr={0x89, 0x17, 0x48, [@remote, @private=0xa010101, @multicast2, @broadcast, @rand_addr=0x64010102]}, @timestamp_addr={0x44, 0x1c, 0x5b, 0x1, 0xa, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3}, {@local}, {@multicast2, 0x7}]}, @cipso={0x86, 0x5a, 0x1, [{0x5, 0xa, "4744fd1d671a03df"}, {0x0, 0x10, "a68c87007a425ef0a7f979d404fe"}, {0x1, 0x5, "156c68"}, {0x0, 0x9, "ff50896ada17b1"}, {0x0, 0x10, "5646b2039a2ced9c6ccb42ca8e2b"}, {0xb3da4f1a9e708aa1, 0xa, "cb0ea57df9d3a680"}, {0x2, 0x2}, {0x2, 0x10, "8bd8d237675ee20c6f71c579c10e"}]}, @ssrr={0x89, 0x7, 0x47, [@private=0xa010100]}, @generic={0x44, 0xe, "3374d6142c185ec5b2f879a2"}, @timestamp_prespec={0x44, 0x2c, 0xd1, 0x3, 0x7, [{@private=0xa010100, 0x8}, {@rand_addr=0x64010101, 0x2}, {@multicast2, 0xffff}, {@rand_addr=0x64010100, 0x8}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}]}, @ssrr={0x89, 0x1b, 0x9, [@dev={0xac, 0x14, 0x14, 0x20}, @broadcast, @dev={0xac, 0x14, 0x14, 0x27}, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010101]}, @timestamp={0x44, 0x8, 0x4b, 0x0, 0x8, [0x1]}, @timestamp_prespec={0x44, 0xc, 0xf1, 0x3, 0x3, [{@local, 0x2}]}]}}}}}) sendmmsg$inet(r1, &(0x7f0000000a00)=[{{&(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10, &(0x7f0000000580)=[{&(0x7f0000000140)="533a7d63616f998db1d5879922f0fcce0ff3379cf178d054c2936e0e555a971a4cda0a14f05b4079f8a62e70371d3b403b7668af5b98f504c8ce5158dfa509599867a9da49c35c7ae063e166cee475029b0e8726f3a70646f516cf60cdf6234ddd2b18b89f663be63b4c7aa6", 0x6c}, {&(0x7f00000001c0)}, {&(0x7f0000000380)="b74b6c86ba4d361e2aeb2081620f11958adb5107b2cb11816c7f5514e363b85297b4312273c66fba802b83b285be9e9883c6d7724a6404901d41464374d863d2fe62efcaecce3e9b1591fd88ed09b66b6bab203422b8c979524f2a584f2a682313eddd7b4bef4f6f4f640cda37eeeaacfb5e0ad6e6bd04a5fc7252b34e954e4ca2acc229d8265b17b5954821aa93bc0c818c49996b1fa49d3f5ef0a22d1fd2668a6f219c65c5c551423de8d87633cdf33c01bcfe95e082ddfcdbd1cf9457d46c008272ae5effdee55635197cb5c8c5cf73b4ed5bafc3c7928b9b83aed35733d095657f0addb8d5b96c11cb725490d53d4834eed743", 0xf5}, {&(0x7f0000000480)="4995c52376b4e65c8cf58da866b05f8ab45bd3bc20ea83a0b71d1c390f040fae75954acfdc9d6620e906fcd9a530448a522f7838005fc6b03197e47312ccdea840af3d7171c091c142987069b95370bac4420e5d5da9bfa8fc4882247f1f1c921a418dd22e862c175772677fdf908610811cecb2bb39213efe46a77143b8f4ab4051bf3b2eee47f82f8f2c7ebd15a28177f4ca650b2a1c549bd165f78f13731c9fc557185b39dd423dd4de68afc2d528dc3bb5a8720924dd0407cff7c8148b68bfad", 0xc2}], 0x4, &(0x7f0000000780)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @private=0xa010101, @multicast1}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x6}}, @ip_retopts={{0xd8, 0x0, 0x7, {[@ra={0x94, 0x4, 0x1}, @rr={0x7, 0x2b, 0xa8, [@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @private=0xa010101, @local, @multicast1, @multicast2, @rand_addr=0x64010102, @remote, @dev={0xac, 0x14, 0x14, 0x3c}, @multicast1]}, @ssrr={0x89, 0x1b, 0x2b, [@rand_addr=0x64010102, @broadcast, @rand_addr=0x64010100, @private=0xa010101, @multicast1, @loopback]}, @noop, @timestamp={0x44, 0x28, 0xbc, 0x0, 0x8, [0x5, 0x7, 0x1, 0x3, 0x0, 0x5, 0x4, 0x3, 0x59]}, @timestamp_prespec={0x44, 0x24, 0x5d, 0x3, 0x3, [{@empty, 0x6}, {@dev={0xac, 0x14, 0x14, 0x1a}, 0xade5}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x61b}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x9}]}, @ra={0x94, 0x4, 0x1}, @rr={0x7, 0x2b, 0x7a, [@empty, @rand_addr=0x64010100, @broadcast, @loopback, @multicast1, @dev={0xac, 0x14, 0x14, 0xa}, @empty, @local, @dev={0xac, 0x14, 0x14, 0x1b}, @broadcast]}]}}}, @ip_retopts={{0x60, 0x0, 0x7, {[@noop, @lsrr={0x83, 0xb, 0xb9, [@dev={0xac, 0x14, 0x14, 0x28}, @local]}, @timestamp_prespec={0x44, 0x44, 0x99, 0x3, 0x4, [{@multicast1, 0xcfe}, {@loopback, 0xbc}, {@multicast2, 0xfffffffe}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x80000000}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xfffff15d}, {@multicast2, 0x3}, {@rand_addr=0x64010102, 0x2}, {@remote, 0xe72}]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @multicast1, @remote}}}, @ip_retopts={{0xcc, 0x0, 0x7, {[@noop, @lsrr={0x83, 0xb, 0x6f, [@dev={0xac, 0x14, 0x14, 0x39}, @empty]}, @timestamp_addr={0x44, 0xc, 0xbc, 0x1, 0x8, [{@multicast2, 0xd4f}]}, @timestamp={0x44, 0x18, 0xc0, 0x0, 0x0, [0xa05, 0x4, 0x9, 0x3, 0x8]}, @rr={0x7, 0x13, 0x1f, [@broadcast, @multicast2, @rand_addr=0x64010100, @private=0xa010100]}, @noop, @cipso={0x86, 0x43, 0xffffffffffffffff, [{0x0, 0xf, "f4da831287812be8999adf3c52"}, {0x1, 0x8, "97d52baad578"}, {0x6, 0xf, "9fd6e774f291125b2a37113c03"}, {0x2, 0x9, "2bd3e611130303"}, {0x6, 0xe, "a42ce50d3b869354e82d835c"}]}, @rr={0x7, 0x7, 0x46, [@multicast1]}, @timestamp_prespec={0x44, 0x2c, 0xa4, 0x3, 0x4, [{@local, 0x80000001}, {@multicast2, 0xffff}, {@rand_addr=0x64010102, 0x3}, {@loopback}, {@empty, 0x8}]}]}}}], 0x260}}], 0x1, 0x20000) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)={0x2, 0x1, 0x0, 0x3, 0x8, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @broadcast}}]}, 0x40}, 0x1, 0x7}, 0x0) 323.799516ms ago: executing program 4 (id=6616): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$TIPC_CONN_TIMEOUT(r1, 0x10f, 0x82, &(0x7f0000000040), &(0x7f0000000080)=0x4) sendmsg$NFT_BATCH(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000280)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_DELOBJ={0x48, 0x14, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_USERDATA={0x4}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_OBJ_USERDATA={0x4}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}]}, @NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x401, 0x0, 0x0, {0x0, 0x0, 0x6}}, @NFT_MSG_NEWOBJ={0x18, 0x12, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0x9}, @NFT_OBJECT_SECMARK=@NFTA_OBJ_DATA={0x4}}, @NFT_MSG_DELSET={0x124, 0xb, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x1}, [@NFTA_SET_EXPRESSIONS={0xec, 0x12, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x8}]}}}, {0x14, 0x1, 0x0, 0x1, @connlimit={{0xe}, @void}}, {0x10, 0x1, 0x0, 0x1, @synproxy={{}, @void}}, {0x64, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0x54, 0x2, 0x0, 0x1, [@NFTA_REDIR_FLAGS={0x8, 0x3, 0x1, 0x0, 0x40}, @NFTA_REDIR_FLAGS={0x8, 0x3, 0x1, 0x0, 0x45}, @NFTA_REDIR_REG_PROTO_MAX={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_REDIR_REG_PROTO_MAX={0x8, 0x2, 0x1, 0x0, 0x8}, @NFTA_REDIR_FLAGS={0x8}, @NFTA_REDIR_REG_PROTO_MAX={0x0, 0x2, 0x1, 0x0, 0x10}, @NFTA_REDIR_REG_PROTO_MAX={0x8, 0x2, 0x1, 0x0, 0xe}, @NFTA_REDIR_REG_PROTO_MIN={0x8, 0x1, 0x1, 0x0, 0xf}, @NFTA_REDIR_REG_PROTO_MAX={0x5, 0x2, 0x1, 0x0, 0xe}, @NFTA_REDIR_REG_PROTO_MAX={0x8, 0x2, 0x1, 0x0, 0x10}]}}}, {0x10, 0x1, 0x0, 0x1, @socket={{0xb}, @void}}, {0x1c, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_LOG_PREFIX={0x9, 0x2, 0x1, 0x0, 'syz1\x00'}]}}}, {0x14, 0x1, 0x0, 0x1, @notrack={{0xc}, @val={0x4, 0x2, 0x0, 0x1, ["", "", "", "", "", ""]}}}]}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x8}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x1}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x800}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x2}]}], {0x14}}, 0x1c0}, 0x1, 0x0, 0x0, 0x4050}, 0x40) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) 322.838896ms ago: executing program 1 (id=6617): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="010000ef", @ANYRES16=r2, @ANYBLOB="010002000000fbdbdf2536000000080073000000000008000300000000000e0001006e657464657673696d0000000f0002006e657464657673696d300000"], 0x44}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[@ANYBLOB="140400001000010000000000000000000000000a340000001b0a01080000000000000000020000000900010077797a30deff00000c000240000000000000001108000b4000000003140000001100010000000000000000080000000a"], 0x5c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCX25SENDCALLACCPT(0xffffffffffffffff, 0x89e9) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=@getqdisc={0x40, 0x26, 0x100, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xfff2, 0x6}, {0xe, 0xc}, {0xf, 0xe}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x40}}, 0x0) sendmsg$TIPC_NL_LINK_RESET_STATS(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[], 0x2c}}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x400}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000140)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff2}, {0xffff, 0xfff2}, {0x0, 0x3}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0xffff2153, 0x2, 0xa, 0xd, 0x1c4, 0x7, 0x2, 0x6}}}}]}, 0x58}}, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a80200003e000701feffffff00000000017c0000040042808802018006000600800a00007b02018020ef82972c4a888fa13836e811c4cd03b722b4ceca8be06b765000fcffffffffffff7eb6b5009a881fd61885956a03d9a9dc8452516454a3d167abf84c778c4df8237c0c0860693c5060dfea16df72653289de5ae7f1f3a2746c7e0900000011b9b91ed5687f850c00c8007d25212b2b4a2d000800a500", @ANYRES32, @ANYBLOB="590123809542d4912acea6c2a67d2baa4aa8043fe21dae7c2c095655b2fa25"], 0x2a8}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r8 = socket$unix(0x1, 0x1, 0x0) r9 = socket(0xa, 0x3, 0xffffffff) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000001300)=@newtfilter={0xec4, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r10, {0x4, 0x5}, {}, {0x7, 0x5}}, [@filter_kind_options=@f_cgroup={{0xb}, {0xe94, 0x2, [@TCA_CGROUP_ACT={0x4a0, 0x1, [@m_connmark={0x120, 0x1b, 0x0, 0x0, {{0xd}, {0x90, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7, 0x3ff, 0x8, 0xcf87, 0x2}, 0x7fff}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x6, 0x9, 0x3, 0x4, 0x6}, 0x2ca}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3fad, 0x400, 0x20000000, 0x1, 0x3}}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x10, 0x3, 0x7, 0x5, 0x8}, 0x2}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xcea0, 0x6, 0x1, 0x9, 0xde9}, 0x7a36}}]}, {0x61, 0x6, "5b7abb5a295fbabd822c5f7c912d0906fd03047ac65361fad66b9d9f785ec6f766e4a32f627ce41ac0f72debf25097492024ed57959a0d03f73fd86a6fefad0cb1508093b258682fac429dcae96ba7814b63e182697d3cede6422eb24f"}, {0xc}, {0xc, 0x8, {0x3, 0x2}}}}, @m_xt={0x28c, 0x1c, 0x0, 0x0, {{0x7}, {0x17c, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0x3e, 0x6, {0x6, 'mangle\x00', 0x3, 0x4, "8fd27564499908f030ec3f2355f0339140e15373"}}, @TCA_IPT_TARG={0x81, 0x6, {0x7fff, 'nat\x00', 0x2, 0xac4, "525d1372273b220fab1ed104e7c2d589f3becf516cb16100737baff032a181548f088363df90bc5e5b58c265f1d45cc48e6feabcc5e8a2e0229c9d78e3bb0ada87a6ad550bca8378c1d2dccffa10aa9039a84d162cda91"}}, @TCA_IPT_TARG={0x2d, 0x6, {0x8000, 'raw\x00', 0x2, 0x1, "fcb4d5"}}, @TCA_IPT_HOOK={0x8, 0x2, 0x2}, @TCA_IPT_TABLE={0x24, 0x1, 'security\x00'}, @TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}, @TCA_IPT_INDEX={0x8, 0x3, 0x8}, @TCA_IPT_TABLE={0x24, 0x1, 'nat\x00'}, @TCA_IPT_INDEX={0x8, 0x3, 0x1000}]}, {0xec, 0x6, "4b6069d044c03df37f657a8ea3f9a20e431da97723391b7c9feba87de0d90c34f3a12eb0bb8d2953a29b859d5f28f892f331387d4a907397bf612ead778fb52f67b19e684c33482de546999e7877ecc2a94df431950a2d0656cb65022b81a47e1dc93e937b20faf2b40dfc14e0b74229e0b9a03a048b68faed54d8be0ce9bdbfc78276358f8fc498c1f00b8a56a1021847343517c626bdc0210f9f0927a3726e9d187a8648732fd5ef38bbca443355ded8a9f927c89a0430689780ee0495cbe3cae7567068aa0e3be6412bd0925887ee68ad03479413dda2d6fc1a980519dd58f226dd4ba076ac5c"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x4, 0x1}}}}, @m_ife={0xac, 0x1d, 0x0, 0x0, {{0x8}, {0x10, 0x2, 0x0, 0x1, [@TCA_IFE_DMAC={0xa, 0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}}]}, {0x77, 0x6, "113af8ac7520b276a4e34e3a620b0ebc05fa03b54aa1c5c27c5fd8b9c8ae71f5003c9e1b93b9bd687ef7624e87354c771c3f52aa7d1579202f272c3326ba491ad5a6b778b955426c25358e50ef9da975945a2e62b833ec3449eeb9ce285aab21c8efd589039d925a6adb1149aaf3d95ea1b121"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_vlan={0x44, 0xc, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}]}, {0xe, 0x6, "844407695d386d24df45"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}, @TCA_CGROUP_EMATCHES={0x104, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x40, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x100, 0x7, 0x4dd8}, {{0x0, 0x0, 0x1, 0x1}, {0x0, 0x0, 0x1}}}}, @TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0x9, 0x8, 0xbe}, {0x0, 0x3, 0x4}}}, @TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x2, 0x1, 0x67c5}, {0x19, 0x10000, 0x7, 0x2, 0xa, 0x1, 0x2}}}]}, @TCA_EMATCH_TREE_LIST={0x64, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x401, 0x1, 0x5}, {0x662a, 0xbc4, 0xf10, 0x2, 0xa, 0x2, 0x2}}}, @TCF_EM_META={0x2c, 0x2, 0x0, 0x0, {{0xffff, 0x4, 0x8}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x8, 0x38, 0x1}, {0x5, 0x4c, 0x1}}}, @TCA_EM_META_RVALUE={0x8, 0x3, [@TCF_META_TYPE_INT=0x2]}, @TCA_EM_META_RVALUE={0xb, 0x3, [@TCF_META_TYPE_VAR, @TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_VAR="8e4755"]}]}}, @TCF_EM_NBYTE={0x1c, 0x2, 0x0, 0x0, {{0x0, 0x2, 0x39f}, {0x0, 0xa, 0x2, "b21653045049c6431ca9"}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x4}}, @TCA_EMATCH_TREE_LIST={0x4c, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x18, 0x1, 0x0, 0x0, {{0x6, 0x2, 0x3}, {0x5, 0x8, 0x1, "bf436d115e168421"}}}, @TCF_EM_IPT={0x1c, 0x1, 0x0, 0x0, {{0x1, 0x9, 0x8}, [@TCA_EM_IPT_HOOK={0x8}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x5a}]}}, @TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x5, 0x7, 0x5}, {{0x0, 0x1, 0x1}, {0x3, 0x1, 0x1}}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x80}}]}, @TCA_CGROUP_ACT={0x8ec, 0x1, [@m_ctinfo={0xf8, 0x19, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x7f}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x200}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x5}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0xa}]}, {0xac, 0x6, "e0eb32bb156690bc9448d5cced89edd2a6134768bde172fc54b894779ca30f507a2afd89261325016fdd1a06f9d3a5231bd043c61e0bea6cc371a52526cab511ded40d05b0dd6eddebea3e6e2d2b9f4199a9b8d7ca6405510b645cb1ff1a5e1470b05b21ef131410c9cfe6ab7b997efbc94aa465ef4c9aa04417df08ff185322c83609040bc9fc0931255f5cfebc3d1cb449d1a1daf38009a4596775c3394336b91687c48d9fe5ac"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_mpls={0x8c, 0xb, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_MPLS_TTL={0x5, 0x7, 0x1}]}, {0x57, 0x6, "519eccbe42ac237190669ee844597646e2b57f55d5749b7c8535f8ed9db200504274f3b0535c787b65cfd4ac93db7abbe5d9c23b5d6e02ea7f559af7f60614a05476284479b7be1054a74b7f93868bd17bfffb"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_skbedit={0x100, 0xe, 0x0, 0x0, {{0xc}, {0x14, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8, 0x5, 0x1}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x1}]}, {0xc1, 0x6, "246450b469a5884eccf2910445fb1b268a896a7fc7f6420d4fb91a4602b4a6948109140feb52978dc5e78024523aa7adbe93218232b577ad77e7efb93cac98f728ed93620ad7404a127b29113f3e9aa8f994b9024f9104c308a4040061e8f279b735bad262292ad23c5d993a350930030a0225f6e8132cbdd6c526931625cf1410c580416f0e1e824fdf0c07e3ae7e89e868632391675fde91ea6f85a4cb109d7d5855bcec1626551a26da792ba378501ef8edf4738825fae2f22ec6bd"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_simple={0x108, 0xe, 0x0, 0x0, {{0xb}, {0x5c, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0xfffffffb, 0x120f6814, 0x3, 0x6, 0x7}}, @TCA_DEF_DATA={0x8, 0x3, 'sfb\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x80000000, 0x3, 0x10000000, 0x5, 0xd}}, @TCA_DEF_DATA={0x8, 0x3, '{(,\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x5, 0x9, 0x10000000, 0x8, 0x4}}]}, {0x82, 0x6, "9d3b4b590fae536bcd833ab220d27d6bc3478acf8fc5db951dc262467e7443460eed08a415aa6f021042e47c9667ac9a72d0ccd5102f75b8338e26ca5b96797ae4436d64c26fd5f1804a66eff4a518ea4c18ed934c3f93404667a70664bf2c5b41b73ffe2f8db1ae72487a2db2a52e068b083c65672d7d28d536dea3f643"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_vlan={0x98, 0x20, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x5}]}, {0x64, 0x6, "7eedc6bfcd106ffac45b5bf2b0677a626349cea5bc659772acf9ff24c0e4990d836b78525683c4c33a5c21f59a47ed42458585f9e94abb1fc03d8088905a1b7d677a426612e33daba674e4131f455f68fb01ebf9936bbbd6730d241981daac51"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ife={0xdc, 0x1f, 0x0, 0x0, {{0x8}, {0x78, 0x2, 0x0, 0x1, [@TCA_IFE_DMAC={0xa, 0x3, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @TCA_IFE_TYPE={0x6, 0x5, 0x9}, @TCA_IFE_METALST={0x18, 0x6, [@IFE_META_PRIO={0x8}, @IFE_META_TCINDEX={0x6, 0x5, @val=0xf4ab}, @IFE_META_TCINDEX={0x4, 0x5, @void}]}, @TCA_IFE_DMAC={0xa, 0x3, @multicast}, @TCA_IFE_SMAC={0xa, 0x4, @random="3354cc7957bd"}, @TCA_IFE_METALST={0x24, 0x6, [@IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_SKBMARK={0x8, 0x1, @val=0xfffffffc}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x145}, @IFE_META_TCINDEX={0x4, 0x5, @void}]}, @TCA_IFE_SMAC={0xa, 0x4, @broadcast}]}, {0x3f, 0x6, "88ddef6d3fa1916be77dc2d2a4df5e963d618511387d35b8c709374cd9f685cb49e11bee7fecdb6317d9161770bd2094636a0c5d70b2d1cb8492e9"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_gact={0x184, 0x1f, 0x0, 0x0, {{0x9}, {0x70, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x1, 0x1105, 0x1}}, @TCA_GACT_PARMS={0x18, 0x2, {0x5, 0x80000001, 0x10000000, 0x7}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x292, 0x10000000}}, @TCA_GACT_PARMS={0x18, 0x2, {0x4, 0x4, 0x3, 0xfffffff9, 0x62}}, @TCA_GACT_PARMS={0x18, 0x2, {0x6, 0x6, 0x2, 0x55c, 0x2}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x976, 0x20000000}}]}, {0xea, 0x6, "1bc974f3e7640d81c00b685c77c5e0d4573fd026cec5e1b07f6dea925d16ee689997a1756b1f81fb50c10c9723aa166bc9c1a35781135031cc2a8022cb90dfeedc729bdadb7c224cdd1b4d7a7dfe5059fe7860bb6ee14d62564f1e9c7b463658e83006c808fc038ac48953335cf98d73c03c7110e76d841a1f9688dd4c7c60ed4f3ded9e5e83d77589faeeb9463adeccaef36b25786c52ba0d052db2626662b8ff2bc416feb2ed5feecfd122cc9493277431e2e222e08f782c049e57fc39640e0890256c9956fd9be992bede71dbbecda697ae15e42c0f521e154013536ffba96f47a03d5c24"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x4}}}}, @m_mpls={0x150, 0x10, 0x0, 0x0, {{0x9}, {0x68, 0x2, 0x0, 0x1, [@TCA_MPLS_PROTO={0x6, 0x4, 0x9}, @TCA_MPLS_BOS={0x5, 0x8, 0x1}, @TCA_MPLS_TC={0x5, 0x6, 0x1}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x0, 0x3a0b47b6, 0x6, 0x8, 0x7}, 0x4}}, @TCA_MPLS_PROTO={0x6, 0x4, 0x9}, @TCA_MPLS_TTL={0x5, 0x7, 0xac}, @TCA_MPLS_TC={0x5, 0x6, 0x1}, @TCA_MPLS_TTL={0x5, 0x7, 0x1}, @TCA_MPLS_LABEL={0x8, 0x5, 0xa083}, @TCA_MPLS_TTL={0x5, 0x7, 0xff}]}, {0xbf, 0x6, "365d6d044010a0159749d054c80762714c56e5bd398d9a59f877daf17b93037d8d68650d0b72bfcc3f3e699be7ebfb99131ccba57543057581b64785ad4223e7641ee80286b01970305e1fbe59ed4af67fd57f78ec553030ee93e83f32a80bc6acd991bf4543d00b906628468b93b3713f4c76e8edadcdf2b0a301ff394eadd5f3ef3f5d2df293ab622efd3a6cad85e60dcb652e8fd58a196e6e8e901a0a60b8cf58d4c54233ddd09a1b768ec23401cae9ec13b252255bb76230b6"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_mirred={0x114, 0x10, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x1001, 0xb6, 0x3, 0x2d, 0x8}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x80000001, 0x7ff, 0x2, 0x33, 0x5}, 0x4}}]}, {0xa6, 0x6, "48c18fe51f24c94536c6400503840232db53b7e9301a58ff3ee4966bb47caab48bdad6f87fc2480b686b232b9e43eacee52711dbfb40c86d998f4b49be86ad1ecf08b06151f9dc121e98bcd705220b7981ffd03488b60fcbed3f0a263550df29b41dfdc79d96253b4483aae213a15ddcdc30e15275ff38a06a2417a18968b2752ec7b4fad1013638ad9c52295aa036b2b83ff88ee08df7757012ced385f2cb400776"}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0xec4}, 0x1, 0x0, 0x0, 0x48001}, 0x0) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x149540, 0x0) close(r11) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @link_local}) r12 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r12, &(0x7f00000001c0)={&(0x7f0000000840)=@xdp={0x2c, 0x7, r13, 0x31}, 0x80, &(0x7f00000000c0)=[{&(0x7f00000002c0)='\x00', 0x5dc}], 0x1}, 0x4) 255.789572ms ago: executing program 0 (id=6618): r0 = socket$inet_udp(0x2, 0x2, 0x0) writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000340)="8a226ff432407a7f5fd09590d734f795e12e57ce9fed3f0300eb6368ed559a85603b0080", 0x24}], 0x2) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b36, &(0x7f0000000000)={'wlan0\x00'}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000001200)={0x60000010}) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000100)={0xa000000d}) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, r3) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r4 = socket(0x23, 0x2, 0x0) r5 = socket$pppoe(0x18, 0x1, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r6, 0x84, 0x78, 0x0, 0x0) ioctl$PPPOEIOCDFWD(r5, 0xb101, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000240)={'syztnl1\x00', 0x0, 0x0, 0xa5, 0x4, 0x30, 0x46, @private0, @private1={0xfc, 0x1, '\x00', 0x8}, 0x1, 0x80, 0xfffffffc, 0x1}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000000040)={'syztnl1\x00', 0x0}) 144.118927ms ago: executing program 4 (id=6619): r0 = bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000900)=ANY=[@ANYBLOB="2c0000003f00070dfeffffff00000000017c0000040077000c00038006000600801a0000080002"], 0x2c}, 0x1, 0x0, 0x0, 0x4048011}, 0x4044000) ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f0000000300)={r0, &(0x7f0000000140)='(@\x00', 0x60001, &(0x7f0000000240)={@_ha_fsid={[0x9, 0xae5a]}, {0x1ff, 0x7, 0xa, 0x6}}, 0xffff, &(0x7f0000000280)={@_ha_fsid}, &(0x7f00000002c0)}) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000200)={0x0, 0x63, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r5], 0x1c}}, 0x4008054) write$nci(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="410301"], 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000c40)=ANY=[@ANYBLOB="d40000001000ffff26bd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="20ba0100380a0400ac00128009000100766c616e000000009c000280060001000400000004000380400004800c000100080000002b4a00000c000100fc0fabb2400000000c00010003001400040000000c00010066000000800000000c000100080000000e0000004c0003800c00010000000000530a00000c00010006000000ff0f00000c00010000000080ff0f00000c00010000000000050000000c00010006000000000000000c000100fbffffff2103000008000500", @ANYRES32=r6], 0xd4}}, 0x8000002) 0s ago: executing program 2 (id=6620): syz_emit_ethernet(0x2a, &(0x7f0000000440)=ANY=[@ANYBLOB="7567c20000000180c220b00008004500001c000000000011907880000000431d0b821ecb288cf5ac1414aa000037c100089078793de831f25720925fb49862a11b840bd23e1aa32170b972713aba107bc57575994e084a558a6cfdcc159f96a518f1bec13687797454ee4f4ca8569c34818392b795ed0d2e18078d834790c7528e2026604f57b72d2956da5df5"], 0x0) r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000080)='syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000000)='blkio.bfq.io_serviced_recursive\x00', 0x26e1, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000040)={0x84, @private=0x9, 0x2008, 0x3, 'none\x00', 0x1, 0x4, 0x72}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000000)={{0x84, @local, 0x4e1f, 0x3, 'lc\x00', 0x34, 0x83, 0x5}, {@rand_addr=0x64010102, 0x4e23, 0x2, 0xcf, 0x12d5c, 0x12d5c}}, 0x44) setsockopt$IP_VS_SO_SET_EDITDEST(r2, 0x0, 0x489, &(0x7f0000000380)={{0x84, @multicast1, 0x4e20, 0x3, 'sed\x00', 0x0, 0x60000000, 0x10}, {@rand_addr=0x64010102, 0x4e23, 0x2000, 0x8, 0x7}}, 0x44) ioctl$FS_IOC_GETFLAGS(r1, 0x80086601, &(0x7f0000000340)) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r3, 0x400448cb, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r5, 0x117, 0x20000, 0x0, 0x0) r6 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r6, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) getsockopt$IP_SET_OP_VERSION(r3, 0x1, 0x53, &(0x7f0000000500), &(0x7f0000000540)=0x8) listen(r6, 0xfff) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x5}, 0x8) ioctl$sock_bt_hci(r4, 0x400448cc, 0x0) ioctl(r1, 0x6, &(0x7f0000000100)="cceb91a30e059e373c0b54be67192882e77397313eedf8d0ac91647091ca9786fd727f017e299381ada8c57458ea50588f07c37d020cca84fa49ae3134169b2f75a2294a46750c6410576a87bc17812cde0931b6e89f99d3e0e91809ae70897c188790627d4a37b32f82da0014ece7880e7617d245f47df56bf732e12ede05b5485c20b8660f1526f99125bd8d5c07fceeb9a5d75c95e653dadf199383dd05b3794273f5f347e75fae36f0f8069b0b8291aeaadf974efa92662ed934") r7 = socket(0x29, 0x80000, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_SET(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="200000008cedea88d0019737d71c466834", @ANYRES16=r8, @ANYBLOB="450400000000000000000a0000000c00018008000b0000000000"], 0x20}}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a74000000060a010400000000000000000200000048000480440001800a0001006d61746368000000340002800900010074696d65000000001c00030007682c020b7b37f27f5101007f51010049f4e34e86f469eb08000240000000000900010073f97a3000000000090b020073797a3200000000140000001100010000000000000000000000000a"], 0x9c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) bind$bt_hci(r4, &(0x7f00000000c0)={0x1f, 0x0, 0x1}, 0x6) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x13e, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x0) kernel console output (not intermixed with test programs): has an invalid length. [ 648.414744][T24873] netlink: 'syz.4.5179': attribute type 4 has an invalid length. [ 648.430950][T24874] __nla_validate_parse: 138 callbacks suppressed [ 648.430970][T24874] netlink: 128 bytes leftover after parsing attributes in process `syz.0.5180'. [ 648.448562][T24874] netlink: 'syz.0.5180': attribute type 5 has an invalid length. [ 648.456675][T24874] netlink: 3 bytes leftover after parsing attributes in process `syz.0.5180'. [ 648.652220][T24880] netlink: 212344 bytes leftover after parsing attributes in process `syz.4.5182'. [ 648.671280][T24881] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5181'. [ 648.965657][T24896] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5186'. [ 649.154207][T24906] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5190'. [ 649.164142][T24907] netlink: 76 bytes leftover after parsing attributes in process `syz.4.5188'. [ 649.223276][T24914] netlink: 'syz.1.5192': attribute type 1 has an invalid length. [ 649.284563][T24906] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5190'. [ 649.302296][T24914] 8021q: adding VLAN 0 to HW filter on device bond11 [ 649.361981][T24923] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5193'. [ 649.468732][T24914] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5192'. [ 650.084669][T24968] openvswitch: netlink: Message has 3 unknown bytes. [ 650.130822][T24968] openvswitch: netlink: Message has 3 unknown bytes. [ 650.177048][T24972] IPv6: NLM_F_CREATE should be specified when creating new route [ 650.920200][T25015] netdevsim netdevsim1 : renamed from netdevsim0 [ 651.324239][T25045] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 651.801693][T25071] 8021q: adding VLAN 0 to HW filter on device team0 [ 651.822050][T25071] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 651.909781][T25071] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 651.923105][T25071] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 651.936043][T25071] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 651.956751][T25071] veth1_vlan: left promiscuous mode [ 651.968740][T25071] veth0_vlan: left promiscuous mode [ 651.975238][T25071] veth0_vlan: entered promiscuous mode [ 651.985303][T25071] veth1_vlan: entered promiscuous mode [ 651.997120][T25071] veth1_macvtap: left promiscuous mode [ 652.007829][T25071] veth0_macvtap: left promiscuous mode [ 652.017126][T25071] veth0_macvtap: entered promiscuous mode [ 652.034388][T25071] veth1_macvtap: entered promiscuous mode [ 652.065521][T25071] 8021q: adding VLAN 0 to HW filter on device bond1 [ 652.089580][T25071] 8021q: adding VLAN 0 to HW filter on device eth0 [ 652.099958][T25071] 8021q: adding VLAN 0 to HW filter on device eth1 [ 652.109261][T25071] 8021q: adding VLAN 0 to HW filter on device eth2 [ 652.118492][T25071] 8021q: adding VLAN 0 to HW filter on device eth3 [ 652.127029][T25071] 8021q: adding VLAN 0 to HW filter on device bond2 [ 652.144326][T25071] 8021q: adding VLAN 0 to HW filter on device bond3 [ 652.214522][T25071] 8021q: adding VLAN 0 to HW filter on device bond0 [ 652.227346][T25071] 8021q: adding VLAN 0 to HW filter on device bond4 [ 652.237948][T25071] batadv_slave_1: entered promiscuous mode [ 652.247277][T25071] 8021q: adding VLAN 0 to HW filter on device bond5 [ 652.309275][T23636] bridge0: port 1(bridge_slave_0) entered blocking state [ 652.316503][T23636] bridge0: port 1(bridge_slave_0) entered forwarding state [ 652.350066][T23636] bridge0: port 2(bridge_slave_1) entered blocking state [ 652.357449][T23636] bridge0: port 2(bridge_slave_1) entered forwarding state [ 652.428453][ T1355] bond1: (slave veth5): link status definitely up, 10000 Mbps full duplex [ 652.457343][ T1355] bond1: (slave veth0_to_bond): link status definitely up, 10000 Mbps full duplex [ 652.493844][ T1355] bond1: (slave veth5): making interface the new active one [ 652.502950][T25104] netlink: 'syz.3.5241': attribute type 23 has an invalid length. [ 652.534701][ T1355] bond1: active interface up! [ 652.551924][T25109] Cannot find del_set index 2 as target [ 652.558189][ T7551] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 652.581844][ T7551] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 652.614673][ T7551] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 652.649044][ T7551] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 652.771512][ T7551] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 652.789479][ T7551] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 652.805930][ T7551] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 652.814936][ T7551] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 653.187548][T25133] netlink: 'syz.4.5251': attribute type 1 has an invalid length. [ 653.266961][T25136] netlink: 'syz.3.5250': attribute type 12 has an invalid length. [ 653.279618][T25136] netlink: 'syz.3.5250': attribute type 1 has an invalid length. [ 653.287625][T25136] netlink: 'syz.3.5250': attribute type 2 has an invalid length. [ 653.297283][T25136] netlink: 'syz.3.5250': attribute type 3 has an invalid length. [ 653.513364][T25112] infiniband syz2: set down [ 653.528209][T25112] infiniband syz2: added ipvlan0 [ 653.551677][T25112] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 653.575180][T25112] infiniband syz2: Couldn't open port 1 [ 653.610761][T25112] smbdirect: ib_dev[syz2]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 653.642934][T25112] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 653.666802][T25112] smbdirect: ib_dev[syz2]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 653.737445][T25112] RDS/IB: syz2: added [ 653.752521][T25112] smc: adding ib device syz2 with port count 1 [ 653.771028][T25112] smc: ib device syz2 port 1 has pnetid SYZ2 (user defined) [ 654.235188][T25164] netlink: 'syz.1.5263': attribute type 10 has an invalid length. [ 654.285475][T25166] __nla_validate_parse: 30 callbacks suppressed [ 654.285501][T25166] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5264'. [ 654.394480][T25164] Set syz1 is full, maxelem 0 reached [ 654.402930][T25166] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5264'. [ 654.444186][T25177] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5267'. [ 654.670957][T25185] netlink: 44 bytes leftover after parsing attributes in process `syz.4.5269'. [ 654.836126][T25194] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5273'. [ 654.864295][T25194] netlink: 'syz.3.5273': attribute type 7 has an invalid length. [ 654.878162][T25194] netlink: 'syz.3.5273': attribute type 8 has an invalid length. [ 654.886140][T25194] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5273'. [ 654.904007][T25194] gretap0: entered promiscuous mode [ 654.926256][T25194] gretap0: left promiscuous mode [ 655.117291][T25199] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5275'. [ 655.401741][T25216] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5282'. [ 655.451427][T25216] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5282'. [ 655.477329][T25221] block nbd3: not configured, cannot reconfigure [ 655.515511][T25229] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5283'. [ 655.755907][T25235] syzkaller0: entered promiscuous mode [ 655.772978][T25235] syzkaller0: entered allmulticast mode [ 656.315411][T25258] block nbd0: Unsupported socket: should be TCP or UNIX. [ 656.589495][T25272] netlink: 'syz.4.5296': attribute type 1 has an invalid length. [ 656.646661][T25272] 8021q: adding VLAN 0 to HW filter on device bond6 [ 656.897049][T25282] bond6: Unable to set down delay as MII monitoring is disabled [ 656.933664][T25282] bond6 (unregistering): Released all slaves [ 657.185404][T25299] sctp: [Deprecated]: syz.3.5301 (pid 25299) Use of int in max_burst socket option deprecated. [ 657.185404][T25299] Use struct sctp_assoc_value instead [ 657.264668][T25298] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 657.303695][T25298] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 657.324238][T25298] bond0 (unregistering): Released all slaves [ 657.443323][T25310] syzkaller1: entered promiscuous mode [ 657.461057][T25310] syzkaller1: entered allmulticast mode [ 657.573290][T25313] xt_TCPMSS: Only works on TCP SYN packets [ 657.692864][T25315] sock: sock_set_timeout: `syz.2.5308' (pid 25315) tries to set negative timeout [ 657.927171][T25327] tipc: Invalid UDP bearer configuration [ 657.927226][T25327] tipc: Enabling of bearer rejected, failed to enable media [ 657.961458][T25335] mac80211_hwsim hwsim40 syzkaller0: entered promiscuous mode [ 658.102813][ T30] audit: type=1804 audit(1780994032.824:14): pid=25338 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.5314" name="/newroot/445/cgroup.controllers" dev="tmpfs" ino=2281 res=1 errno=0 [ 658.186031][ T30] audit: type=1800 audit(1780994032.824:15): pid=25338 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.5314" name="cgroup.controllers" dev="tmpfs" ino=2281 res=0 errno=0 [ 658.233887][T25340] bond0: option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 658.255170][T25340] bond0 (unregistering): Released all slaves [ 658.392957][T25352] netlink: 'syz.3.5319': attribute type 2 has an invalid length. [ 658.430792][T25353] netlink: 'syz.3.5319': attribute type 2 has an invalid length. [ 658.537048][T25359] netlink: 'syz.1.5320': attribute type 1 has an invalid length. [ 658.583229][T25359] netlink: 'syz.1.5320': attribute type 1 has an invalid length. [ 658.852783][T25378] netlink: 'syz.2.5325': attribute type 1 has an invalid length. [ 658.881811][T25375] pim6reg1: entered promiscuous mode [ 658.891123][T25375] pim6reg1: entered allmulticast mode [ 659.061610][T25378] bond7: (slave bridge2): Enslaving as a backup interface with an up link [ 659.100141][T25391] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 659.152111][T25387] macvlan2: entered promiscuous mode [ 659.163871][T25394] netlink: 'syz.0.5331': attribute type 2 has an invalid length. [ 659.174103][T25387] macvlan2: entered allmulticast mode [ 659.193448][T25387] bond7: entered promiscuous mode [ 659.208618][T25387] bridge2: entered promiscuous mode [ 659.229924][T25387] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 659.243624][T25387] bond7: left promiscuous mode [ 659.250346][T25387] bridge2: left promiscuous mode [ 659.588948][T25417] netlink: 'syz.4.5337': attribute type 1 has an invalid length. [ 659.614884][T25417] __nla_validate_parse: 12 callbacks suppressed [ 659.614906][T25417] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5337'. [ 659.634079][T25417] netlink: 'syz.4.5337': attribute type 1 has an invalid length. [ 659.635865][T25425] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5340'. [ 659.668057][T25425] netlink: 76 bytes leftover after parsing attributes in process `syz.2.5340'. [ 660.362666][T25469] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 660.395617][T25469] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 660.685959][T25481] tunl0: left promiscuous mode [ 660.693086][T25481] : left allmulticast mode [ 660.841116][T25481] vlan5: left allmulticast mode [ 660.854843][T25481] bridge3: left allmulticast mode [ 660.882648][T25487] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5358'. [ 660.896967][T25481] bond8: left promiscuous mode [ 660.905023][T25481] ipip0: left promiscuous mode [ 660.914357][T25481] gtp0: left promiscuous mode [ 660.919831][T25487] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5358'. [ 660.929923][T25481] gtp0: left allmulticast mode [ 660.946067][T25481] veth7: left allmulticast mode [ 661.481585][T25504] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5364'. [ 661.592858][ T5638] Bluetooth: hci4: link tx timeout [ 661.605185][ T5638] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 661.986511][T25510] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5366'. [ 662.058425][T25510] netem: invalid attributes len -5 [ 662.093197][T25510] netem: change failed [ 662.163224][T25509] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5366'. [ 662.224652][T25509] netem: invalid attributes len -5 [ 662.259643][T25509] netem: change failed [ 662.418230][T25523] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5370'. [ 662.468883][T25522] netlink: 'syz.1.5369': attribute type 10 has an invalid length. [ 662.519945][T25522] veth1_virt_wifi: entered promiscuous mode [ 662.786781][T25531] netlink: 'syz.1.5374': attribute type 1 has an invalid length. [ 662.805578][T25531] netlink: 224 bytes leftover after parsing attributes in process `syz.1.5374'. [ 662.889209][T25542] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 662.891469][T25541] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 663.152275][T25547] syzkaller0: entered allmulticast mode [ 663.173887][T25546] syzkaller0: entered promiscuous mode [ 663.187859][T25546] syzkaller0: entered allmulticast mode [ 663.658184][ T5638] Bluetooth: hci4: command 0x0406 tx timeout [ 729.602428][T25563] netlink: 14 bytes leftover after parsing attributes in process `syz.1.5381'. [ 729.734275][T25563] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 729.786150][T25563] bond0 (unregistering): Released all slaves [ 729.871276][T25587] openvswitch: netlink: Flow actions attr not present in new flow. [ 729.905584][T25579] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5387'. [ 730.183514][T25598] openvswitch: netlink: Multiple metadata blocks provided [ 730.230247][T25598] netlink: 124 bytes leftover after parsing attributes in process `syz.1.5390'. [ 731.014276][T25636] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5402'. [ 731.124400][T25636] bond8: option xmit_hash_policy: invalid value (64) [ 731.152598][T25636] bond8 (unregistering): Released all slaves [ 731.242848][T25639] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5400'. [ 731.304197][T25647] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5400'. [ 731.322441][T25647] IPv6: NLM_F_CREATE should be specified when creating new route [ 731.379869][T25650] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5405'. [ 731.461300][T25633] bond6: option lacp_active: mode dependency failed, not supported in mode active-backup(1) [ 731.474106][T25633] bond6 (unregistering): Released all slaves [ 731.513517][T25650] validate_nla: 1 callbacks suppressed [ 731.513539][T25650] netlink: 'syz.0.5405': attribute type 1 has an invalid length. [ 731.782580][T25666] syzkaller0: entered promiscuous mode [ 731.798448][T25666] syzkaller0: entered allmulticast mode [ 731.940652][T25673] veth1_to_bond: entered allmulticast mode [ 731.954576][T25673] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5411'. [ 732.095178][T25673] veth1_to_bond (unregistering): left allmulticast mode [ 732.122627][T25682] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5411'. [ 732.262902][T25691] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5418'. [ 732.277524][T25691] openvswitch: netlink: Unknown nsh attribute 0 [ 732.310806][T25691] mac80211_hwsim hwsim35 wlan0: entered promiscuous mode [ 732.321442][T25691] batman_adv: batadv0: Adding interface: wlan0 [ 732.328632][T25691] batman_adv: batadv0: The MTU of interface wlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 732.356565][T25691] batman_adv: batadv0: Interface activated: wlan0 [ 733.066995][T25728] netlink: 'syz.0.5429': attribute type 24 has an invalid length. [ 733.096941][T25728] openvswitch: netlink: Flow key attribute not present in set flow. [ 733.158425][T25726] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 733.633058][T25747] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 733.673271][T25747] team0: Failed to send port change of device batadv1 via netlink (err -105) [ 733.688368][T25747] team0: Failed to send options change via netlink (err -105) [ 733.710434][T25747] team0: Port device batadv1 added [ 734.506952][T25791] netlink: 'syz.4.5448': attribute type 1 has an invalid length. [ 734.564501][T25791] 8021q: adding VLAN 0 to HW filter on device bond0 [ 734.657387][T25801] __nla_validate_parse: 7 callbacks suppressed [ 734.657411][T25801] netlink: 27 bytes leftover after parsing attributes in process `syz.2.5450'. [ 734.982399][T25810] netlink: 'syz.1.5454': attribute type 21 has an invalid length. [ 735.091487][T25812] tunl0: entered promiscuous mode [ 735.102832][T25812] netlink: 'syz.4.5456': attribute type 4 has an invalid length. [ 735.112152][T25812] netlink: 9 bytes leftover after parsing attributes in process `syz.4.5456'. [ 735.255229][T25822] netlink: 'syz.4.5458': attribute type 1 has an invalid length. [ 735.686022][T25839] xt_hashlimit: size too large, truncated to 1048576 [ 736.165594][T25864] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.5467'. [ 736.544990][T25880] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5472'. [ 736.569270][T25874] netlink: 'syz.3.5471': attribute type 1 has an invalid length. [ 736.588527][T25874] netlink: 476 bytes leftover after parsing attributes in process `syz.3.5471'. [ 736.608806][T25874] netlink: 1041 bytes leftover after parsing attributes in process `syz.3.5471'. [ 736.892370][T25894] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5476'. [ 737.137480][T25901] IPVS: set_ctl: invalid protocol: 50 224.0.0.2:20003 [ 737.157096][T25901] syzkaller0: entered promiscuous mode [ 737.168855][T25901] syzkaller0: entered allmulticast mode [ 737.205483][T25901] tipc: Enabled bearer , priority 0 [ 737.255180][T25906] netlink: 84 bytes leftover after parsing attributes in process `syz.0.5481'. [ 737.291273][T25910] netlink: 52 bytes leftover after parsing attributes in process `syz.4.5480'. [ 737.303691][T25906] netlink: 'syz.0.5481': attribute type 2 has an invalid length. [ 737.331935][T25901] tipc: Resetting bearer [ 737.408623][T25901] tipc: Disabling bearer [ 737.526302][T25922] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5483'. [ 738.174530][T25967] netlink: 'syz.4.5497': attribute type 1 has an invalid length. [ 738.206792][T25965] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 738.674977][T25986] netlink: 'syz.1.5505': attribute type 2 has an invalid length. [ 738.695697][T25986] netlink: 'syz.1.5505': attribute type 2 has an invalid length. [ 738.997638][T26008] x_tables: duplicate entry at hook 3 [ 739.080960][T26013] sock: sock_timestamping_bind_phc: sock not bind to device [ 739.272215][T26022] bond8: option lacp_active: mode dependency failed, not supported in mode active-backup(1) [ 739.295664][T26022] bond8 (unregistering): Released all slaves [ 739.384216][T26033] netlink: 'syz.4.5517': attribute type 11 has an invalid length. [ 739.612555][T26041] geneve1: entered promiscuous mode [ 739.657236][T26044] netlink: 'syz.4.5520': attribute type 3 has an invalid length. [ 739.860154][T26056] netlink: 'syz.2.5524': attribute type 30 has an invalid length. [ 739.868951][T26055] netlink: 'syz.2.5524': attribute type 30 has an invalid length. [ 740.033201][T26063] netlink: 'syz.3.5525': attribute type 12 has an invalid length. [ 740.064678][T26061] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 740.095644][T26063] __nla_validate_parse: 6 callbacks suppressed [ 740.095665][T26063] netlink: 148 bytes leftover after parsing attributes in process `syz.3.5525'. [ 740.136602][T26063] netlink: 47 bytes leftover after parsing attributes in process `syz.3.5525'. [ 740.174926][T26068] netlink: 148 bytes leftover after parsing attributes in process `syz.3.5525'. [ 740.218720][T26068] netlink: 47 bytes leftover after parsing attributes in process `syz.3.5525'. [ 740.265100][T26069] team0: entered promiscuous mode [ 740.277213][T26069] team_slave_0: entered promiscuous mode [ 740.290036][T26069] team_slave_1: entered promiscuous mode [ 740.342156][T26072] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5528'. [ 740.396596][T26073] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5528'. [ 740.450328][T26072] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5528'. [ 740.473042][T26072] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5528'. [ 740.533385][T26072] gretap2: entered promiscuous mode [ 740.555309][T26072] gretap2: entered allmulticast mode [ 741.176356][T26104] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5535'. [ 741.561668][T26112] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 741.584218][T26112] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 742.094242][T26112] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 742.115802][T26112] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 742.331695][T26112] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 742.351431][T26112] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 742.363152][T26151] netlink: 348 bytes leftover after parsing attributes in process `syz.2.5545'. [ 742.466754][T26154] openvswitch: netlink: Actions may not be safe on all matching packets [ 742.501579][T26112] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 742.533842][T26112] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 742.716870][T26163] nbd: socks must be embedded in a SOCK_ITEM attr [ 742.755500][ T7547] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 742.780969][ T7547] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 742.831721][ T7540] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 742.851685][ T7540] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 742.899472][T20802] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 742.918466][T20802] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 742.971146][T20802] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 742.981703][T20802] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 743.062318][T26176] tipc: Enabled bearer , priority 0 [ 743.213534][T26175] syzkaller0: entered promiscuous mode [ 743.241030][T26175] syzkaller0: entered allmulticast mode [ 743.275338][T26175] tipc: Resetting bearer [ 743.389056][T26175] tipc: Resetting bearer [ 743.627617][T26208] validate_nla: 5 callbacks suppressed [ 743.627649][T26208] netlink: 'syz.1.5562': attribute type 1 has an invalid length. [ 747.191540][T26175] tipc: Disabling bearer [ 747.253905][T26226] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 747.481565][T26239] __nla_validate_parse: 3 callbacks suppressed [ 747.481588][T26239] netlink: 3648 bytes leftover after parsing attributes in process `syz.3.5568'. [ 747.526758][T26239] netlink: 3648 bytes leftover after parsing attributes in process `syz.3.5568'. [ 747.560858][T26239] netlink: 3648 bytes leftover after parsing attributes in process `syz.3.5568'. [ 747.597478][T26239] netlink: 3648 bytes leftover after parsing attributes in process `syz.3.5568'. [ 747.626887][T26247] netlink: 'syz.2.5566': attribute type 24 has an invalid length. [ 748.038774][T26259] syzkaller0: entered promiscuous mode [ 748.060838][T26259] syzkaller0: entered allmulticast mode [ 748.097983][T26259] tipc: Enabled bearer , priority 0 [ 748.156573][T26266] only policy match revision 0 supported [ 748.156596][T26266] unable to load match [ 748.181568][T26263] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5574'. [ 748.207319][T26268] netlink: 980 bytes leftover after parsing attributes in process `syz.4.5576'. [ 748.243199][T26263] 8021q: adding VLAN 0 to HW filter on device bond8 [ 748.252645][T26265] only policy match revision 0 supported [ 748.252668][T26265] unable to load match [ 748.392793][T26263] 8021q: adding VLAN 0 to HW filter on device bond9 [ 748.403512][T26263] bond8: (slave bond9): Enslaving as an active interface with an up link [ 748.413429][T26273] mac80211_hwsim hwsim40 syzkaller0: left promiscuous mode [ 748.442319][T26273] mac80211_hwsim hwsim40 syzkaller0: left allmulticast mode [ 748.465271][T26273] tipc: Resetting bearer [ 748.477565][T26258] tipc: Resetting bearer [ 748.512955][T26258] tipc: Disabling bearer [ 748.558892][T26279] : entered promiscuous mode [ 748.903905][T26304] netlink: 'syz.1.5585': attribute type 1 has an invalid length. [ 748.948649][T26304] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5585'. [ 748.991281][T26305] netlink: 'syz.1.5585': attribute type 1 has an invalid length. [ 749.021940][T26305] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5585'. [ 749.121834][T26304] bond0: invalid ARP target 0.0.0.0 specified for addition [ 749.181446][T26304] bond0: option arp_ip_target: invalid value (0) [ 749.239596][T26304] bond0 (unregistering): Released all slaves [ 749.542959][ T7548] tipc: Resetting bearer [ 750.085748][T26354] syzkaller0: entered promiscuous mode [ 750.092198][T26354] syzkaller0: entered allmulticast mode [ 750.106214][T26354] netlink: 'syz.0.5596': attribute type 8 has an invalid length. [ 750.119087][T26354] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5596'. [ 750.262829][T26360] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5599'. [ 750.408596][T26361] IPVS: sh: FWM 3 0x00000003 - no destination available [ 753.234180][T26385] pim6reg: entered allmulticast mode [ 753.458829][T26397] netlink: 'syz.2.5606': attribute type 1 has an invalid length. [ 753.470596][T26396] __nla_validate_parse: 1 callbacks suppressed [ 753.470616][T26396] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5606'. [ 753.483473][T26397] netlink: 224 bytes leftover after parsing attributes in process `syz.2.5606'. [ 753.502525][T26396] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5606'. [ 753.519294][T26397] workqueue: Failed to create a rescuer kthread for wq "phy5-mac-cmds": -EINTR [ 753.627266][T26400] netlink: 'syz.4.5608': attribute type 12 has an invalid length. [ 753.657280][T26400] netlink: 'syz.4.5608': attribute type 29 has an invalid length. [ 753.668809][T26400] netlink: 148 bytes leftover after parsing attributes in process `syz.4.5608'. [ 753.683579][T26400] netlink: 59 bytes leftover after parsing attributes in process `syz.4.5608'. [ 753.733847][T26414] tipc: Enabling of bearer rejected, failed to enable media [ 754.156255][T26437] sctp: [Deprecated]: syz.1.5618 (pid 26437) Use of int in max_burst socket option. [ 754.156255][T26437] Use struct sctp_assoc_value instead [ 754.259323][T26437] netlink: 56 bytes leftover after parsing attributes in process `syz.1.5618'. [ 754.454825][T26453] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 754.590167][T26460] netlink: 'syz.4.5624': attribute type 61 has an invalid length. [ 754.779351][T26472] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5627'. [ 756.015135][T26475] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5628'. [ 756.059503][T20476] Bluetooth: hci4: command 0x0406 tx timeout [ 756.655990][T26493] syzkaller0: entered promiscuous mode [ 756.666415][T26493] syzkaller0: entered allmulticast mode [ 756.742163][T26503] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5635'. [ 759.045032][T26479] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 759.395236][T26513] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5638'. [ 759.747602][T26540] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 759.804138][T26547] netlink: 'syz.2.5648': attribute type 1 has an invalid length. [ 759.857164][T26550] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.5650'. [ 759.876452][T26547] 8021q: adding VLAN 0 to HW filter on device bond10 [ 759.876577][T26550] netlink: Conntrack attr has 4 unknown bytes [ 760.285552][T26569] netlink: 108 bytes leftover after parsing attributes in process `syz.3.5657'. [ 760.432522][T26577] bridge0: port 2(bridge_slave_1) entered disabled state [ 760.523401][T26583] netlink: 64 bytes leftover after parsing attributes in process `syz.4.5661'. [ 760.621804][T26588] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5662'. [ 761.082642][ T48] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 763.846895][T26613] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 824.912509][T26638] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5674'. [ 824.964674][T26637] netlink: 80 bytes leftover after parsing attributes in process `syz.0.5670'. [ 825.316055][T26673] openvswitch: netlink: ct_state flags 010000e0 unsupported [ 825.437357][T26676] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5681'. [ 825.476653][T26676] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5681'. [ 826.015462][T26704] netlink: 'syz.4.5692': attribute type 10 has an invalid length. [ 826.024572][T26704] netlink: 228 bytes leftover after parsing attributes in process `syz.4.5692'. [ 826.329803][T26719] tipc: Enabling of bearer rejected, failed to enable media [ 826.371862][T26721] tipc: Enabling of bearer rejected, failed to enable media [ 826.506007][T26726] SET target dimension over the limit! [ 826.641075][T26724] syzkaller0: entered promiscuous mode [ 826.646837][T26724] syzkaller0: entered allmulticast mode [ 826.792661][T26741] xt_TCPMSS: Only works on TCP SYN packets [ 830.260315][T26739] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5702'. [ 830.295638][T26743] tipc: Resetting bearer [ 830.422480][T26743] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 830.450934][T26743] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 830.520048][T26759] netlink: 'syz.0.5707': attribute type 1 has an invalid length. [ 830.600070][T26763] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5708'. [ 830.620279][T26743] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 830.634745][T26743] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 830.724154][T26762] bond9: (slave geneve3): making interface the new active one [ 830.735224][T26762] bond9: (slave geneve3): Enslaving as an active interface with an up link [ 830.747607][T26743] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 830.754379][ T57] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 20004 - 0 [ 830.774047][T26743] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 830.842472][ T57] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 20004 - 0 [ 830.923773][T26774] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 831.010935][T26743] batman_adv: batadv0: Interface deactivated: wlan0 [ 831.054067][ T57] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 20004 - 0 [ 831.070901][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 20004 - 0 [ 831.244986][T26743] batman_adv: batadv0: Interface deactivated: wlan0 [ 831.356709][T26743] tipc: Resetting bearer [ 831.419733][T26743] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 831.443123][T26743] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 831.752828][T26811] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 831.786356][T26811] team0: Failed to send port change of device batadv1 via netlink (err -105) [ 831.809612][T26811] team0: Failed to send options change via netlink (err -105) [ 831.851960][T26811] team0: Port device batadv1 added [ 831.919318][T26820] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5721'. [ 831.960980][T26820] bridge_slave_1: Device is already in use. [ 832.161897][T26827] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.5723'. [ 832.268250][T26840] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5724'. [ 832.488754][T26844] netlink: 'syz.0.5728': attribute type 1 has an invalid length. [ 832.545537][T26844] veth0: entered promiscuous mode [ 832.671791][T26843] veth0: left promiscuous mode [ 832.861393][T26858] netlink: 'syz.2.5733': attribute type 1 has an invalid length. [ 832.873751][T26862] : renamed from virt_wifi0 [ 832.892786][T26858] netlink: 224 bytes leftover after parsing attributes in process `syz.2.5733'. [ 832.926672][T26866] netlink: 'syz.4.5735': attribute type 1 has an invalid length. [ 832.953387][T26866] netlink: 96 bytes leftover after parsing attributes in process `syz.4.5735'. [ 832.984540][T26866] netlink: 1 bytes leftover after parsing attributes in process `syz.4.5735'. [ 833.031042][T26866] netlink: 658 bytes leftover after parsing attributes in process `syz.4.5735'. [ 833.272372][T26886] mac80211_hwsim hwsim40 syzkaller0: entered promiscuous mode [ 833.320809][T26886] mac80211_hwsim hwsim40 syzkaller0: entered allmulticast mode [ 833.556230][T26895] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5740'. [ 834.228635][T26910] geneve1: left promiscuous mode [ 834.280542][T26910] mac80211_hwsim hwsim39 wlan0: left promiscuous mode [ 834.319270][T26910] mac80211_hwsim hwsim40 syzkaller0: left promiscuous mode [ 834.348740][T26910] veth3: left promiscuous mode [ 834.376606][T26910] gretap2: left promiscuous mode [ 834.515506][T26941] netlink: 'syz.3.5751': attribute type 23 has an invalid length. [ 835.396637][T26978] __nla_validate_parse: 6 callbacks suppressed [ 835.396658][T26978] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5760'. [ 835.600509][T26990] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5764'. [ 835.631425][T26990] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5764'. [ 835.678284][T26999] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5765'. [ 835.712613][T26999] batman_adv: batadv0: Removing interface: wlan0 [ 835.752367][T26999] bridge0: port 3(wlan0) entered blocking state [ 835.809173][T26999] bridge0: port 3(wlan0) entered disabled state [ 835.834776][T26999] mac80211_hwsim hwsim39 wlan0: entered allmulticast mode [ 835.885079][T26999] mac80211_hwsim hwsim39 wlan0: entered promiscuous mode [ 835.992830][T27009] netlink: 44 bytes leftover after parsing attributes in process `syz.3.5768'. [ 836.437369][T27036] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5776'. [ 836.464307][T27035] syzkaller0: entered promiscuous mode [ 836.509849][T27035] syzkaller0: entered allmulticast mode [ 836.915603][T27053] lo speed is unknown, defaulting to 1000 [ 836.971463][T27053] lo speed is unknown, defaulting to 1000 [ 837.080195][T27053] lo speed is unknown, defaulting to 1000 [ 837.429445][T27085] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5790'. [ 837.510805][T27087] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5791'. [ 837.772386][T27100] netlink: 'syz.0.5795': attribute type 1 has an invalid length. [ 838.080336][T27053] infiniband sz1: set down [ 838.085232][T16501] lo speed is unknown, defaulting to 1000 [ 838.101974][T27053] infiniband sz1: added lo [ 838.109963][T27053] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 838.116025][T27053] infiniband sz1: Couldn't open port 1 [ 838.156358][T27053] smbdirect: ib_dev[sz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 838.207341][T27053] smbdirect: ib_dev[sz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 838.282265][T27053] smbdirect: ib_dev[sz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 838.313960][T27124] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5801'. [ 838.445802][T27131] tipc: Enabled bearer , priority 0 [ 838.453068][T27053] RDS/IB: sz1: added [ 838.473285][T27053] smc: adding ib device sz1 with port count 1 [ 838.484195][T27132] tipc: Enabling of bearer rejected, already enabled [ 838.506033][T27053] smc: ib device sz1 port 1 has no pnetid [ 838.552928][T16501] lo speed is unknown, defaulting to 1000 [ 838.579569][T27053] lo speed is unknown, defaulting to 1000 [ 839.100292][T27161] xt_hashlimit: size too large, truncated to 1048576 [ 839.356193][T27167] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5811'. [ 839.654857][T27053] lo speed is unknown, defaulting to 1000 [ 840.026083][T27191] sctp: [Deprecated]: syz.3.5815 (pid 27191) Use of struct sctp_assoc_value in delayed_ack socket option. [ 840.026083][T27191] Use struct sctp_sack_info instead [ 840.086277][T27191] netlink: 'syz.3.5815': attribute type 64 has an invalid length. [ 840.492198][T27210] xt_l2tp: wrong L2TP version: 0 [ 840.640694][T27053] lo speed is unknown, defaulting to 1000 [ 840.978737][T27223] openvswitch: netlink: Multiple metadata blocks provided [ 841.240423][T27239] __nla_validate_parse: 2 callbacks suppressed [ 841.240446][T27239] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5832'. [ 841.532593][T27239] bond7: Invalid ad_actor_system MAC address. [ 841.538934][T27239] bond7: option ad_actor_system: invalid value (1) [ 841.549923][T27239] bond7 (unregistering): Released all slaves [ 841.610566][T27053] lo speed is unknown, defaulting to 1000 [ 842.024633][T27260] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5834'. [ 842.465101][T27272] tipc: Enabled bearer , priority 10 [ 842.474934][T27053] lo speed is unknown, defaulting to 1000 [ 842.693000][T27283] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5840'. [ 842.709840][T27283] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5840'. [ 842.731640][T27286] bond10: (slave gre0): Device is not bonding slave [ 842.738699][T27286] bond10: option active_slave: invalid value (gre0) [ 842.747336][T27286] bond10 (unregistering): Released all slaves [ 843.225107][ T5638] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 843.241316][ T5638] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 843.253148][ T5638] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 843.261614][ T5638] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 843.271085][ T5638] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 843.352175][T20476] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 843.370301][T20476] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 843.425973][T20476] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 843.442597][T20476] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 843.459284][T20476] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 843.619878][T27053] lo speed is unknown, defaulting to 1000 [ 844.515753][T27332] sctp: [Deprecated]: syz.0.5851 (pid 27332) Use of int in max_burst socket option. [ 844.515753][T27332] Use struct sctp_assoc_value instead [ 844.660236][T27339] sctp: [Deprecated]: syz.3.5853 (pid 27339) Use of int in max_burst socket option deprecated. [ 844.660236][T27339] Use struct sctp_assoc_value instead [ 844.742779][T27341] netlink: 'syz.0.5854': attribute type 1 has an invalid length. [ 844.847498][T27341] 8021q: adding VLAN 0 to HW filter on device bond10 [ 844.882563][T27345] bond10: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 844.903961][T27344] netlink: 'syz.1.5855': attribute type 105 has an invalid length. [ 844.934175][T27341] macvlan2: entered promiscuous mode [ 844.954036][T27341] macvlan2: entered allmulticast mode [ 844.968644][T27341] bond10: entered promiscuous mode [ 844.988952][T27341] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 845.000456][T27341] bond10: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 845.047890][T27341] bond10: left promiscuous mode [ 845.349958][T27353] netlink: 'syz.1.5858': attribute type 29 has an invalid length. [ 845.377496][T27353] netlink: 'syz.1.5858': attribute type 62 has an invalid length. [ 845.436040][T27355] syzkaller0: entered promiscuous mode [ 845.456602][T27355] syzkaller0: entered allmulticast mode [ 845.498406][T20476] Bluetooth: hci3: command tx timeout [ 845.627122][T27296] lo speed is unknown, defaulting to 1000 [ 845.750958][T27368] netlink: 'syz.0.5863': attribute type 58 has an invalid length. [ 845.783866][T27368] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5863'. [ 846.167494][T27390] netlink: 52 bytes leftover after parsing attributes in process `syz.3.5869'. [ 846.195317][T27387] netlink: 52 bytes leftover after parsing attributes in process `syz.3.5869'. [ 846.418136][T27400] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5873'. [ 846.445105][T27404] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5874'. [ 846.813452][T27417] netlink: 144 bytes leftover after parsing attributes in process `syz.2.5878'. [ 847.115509][T27296] bridge0: port 1(bridge_slave_0) entered blocking state [ 847.123690][T27296] bridge0: port 1(bridge_slave_0) entered disabled state [ 847.133214][T27296] bridge_slave_0: entered allmulticast mode [ 847.142230][T27296] bridge_slave_0: entered promiscuous mode [ 847.152546][T27296] bridge0: port 2(bridge_slave_1) entered blocking state [ 847.161789][T27296] bridge0: port 2(bridge_slave_1) entered disabled state [ 847.170128][T27296] bridge_slave_1: entered allmulticast mode [ 847.179213][T27296] bridge_slave_1: entered promiscuous mode [ 847.185060][T27431] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5880'. [ 847.250740][T27296] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 847.265306][T27296] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 847.370451][T27296] team0: Port device team_slave_0 added [ 847.387472][T27296] team0: Port device team_slave_1 added [ 847.475865][T27445] netlink: 212348 bytes leftover after parsing attributes in process `syz.3.5882'. [ 847.500768][T27296] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 847.509173][T27296] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 847.538738][T27296] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 847.562169][T27296] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 847.578113][T27296] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 847.604430][T20476] Bluetooth: hci3: command tx timeout [ 847.624941][T27296] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 847.749418][T27296] hsr_slave_0: entered promiscuous mode [ 847.766236][T27296] hsr_slave_1: entered promiscuous mode [ 847.785044][T27296] debugfs: 'hsr0' already exists in 'hsr' [ 847.811032][T27296] Cannot create hsr debugfs directory [ 847.882975][T27450] netlink: 284 bytes leftover after parsing attributes in process `syz.3.5886'. [ 847.932681][T27453] netlink: 284 bytes leftover after parsing attributes in process `syz.3.5886'. [ 847.946933][T27455] IPVS: ovf: SCTP 172.20.20.187:0 - no destination available [ 848.152806][T27461] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5888'. [ 848.185784][T27461] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5888'. [ 848.700903][T27486] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5896'. [ 848.756115][T27296] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 848.798726][T27296] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 848.818021][T27296] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20003 - 0 [ 848.962115][T27501] netlink: 'syz.0.5902': attribute type 1 has an invalid length. [ 849.040235][T27504] ipt_ECN: cannot use operation on non-tcp rule [ 849.054743][T27296] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 849.067059][T27296] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 849.078555][T27296] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20003 - 0 [ 849.286777][T27296] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 849.323772][T27296] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 849.326776][T27513] Bluetooth: MGMT ver 1.23 [ 849.364030][T27296] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20003 - 0 [ 849.633556][T27296] netdevsim netdevsim4  (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 849.653835][T27296] netdevsim netdevsim4  (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 849.664964][T20476] Bluetooth: hci3: command tx timeout [ 849.680073][T27296] netdevsim netdevsim4  (unregistering): unset [1, 1] type 2 family 0 port 20003 - 0 [ 850.236273][T27296] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 850.259170][T27296] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 850.282837][T27296] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 850.323685][T27296] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 850.351033][T27296] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 850.426208][T27296] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 850.447383][T27296] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 850.476571][T27296] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 850.767240][T27580] openvswitch: netlink: nsh attribute has unmatched MD type 0. [ 850.799732][T27580] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 850.949927][T27296] 8021q: adding VLAN 0 to HW filter on device bond0 [ 851.018445][T27296] 8021q: adding VLAN 0 to HW filter on device team0 [ 851.049554][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 851.056834][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 851.166690][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 851.174030][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 851.535105][T27610] veth11: entered allmulticast mode [ 851.738460][T20476] Bluetooth: hci3: command tx timeout [ 852.315592][T27642] __nla_validate_parse: 6 callbacks suppressed [ 852.315616][T27642] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5944'. [ 852.751456][T27653] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5947'. [ 852.812349][T27653] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5947'. [ 852.895350][T27296] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 852.910218][ T7547] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 852.936887][T27658] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 852.950731][ T7547] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 852.981349][T27659] netlink: 'syz.0.5947': attribute type 4 has an invalid length. [ 853.011721][T27659] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5947'. [ 853.206437][T27665] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5949'. [ 853.384604][T27668] netlink: 576 bytes leftover after parsing attributes in process `syz.0.5950'. [ 853.415734][T27670] netlink: 'syz.1.5951': attribute type 11 has an invalid length. [ 853.423908][T27670] netlink: 224 bytes leftover after parsing attributes in process `syz.1.5951'. [ 853.488871][T27670] syzkaller0: entered promiscuous mode [ 853.498517][T27670] syzkaller0: entered allmulticast mode [ 853.927389][T27296] veth0_vlan: entered promiscuous mode [ 853.973761][T27296] veth1_vlan: entered promiscuous mode [ 854.084050][T27702] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5960'. [ 854.109716][T27706] x_tables: duplicate underflow at hook 2 [ 854.116159][T27296] veth0_macvtap: entered promiscuous mode [ 854.160528][T27296] veth1_macvtap: entered promiscuous mode [ 854.214839][T27714] x_tables: duplicate underflow at hook 1 [ 854.275549][T27296] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 854.345369][T27296] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 854.385802][ T7547] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 854.416368][ T7547] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 854.451372][ T7547] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 854.490719][ T7547] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 854.726926][T27732] openvswitch: netlink: Missing key (keys=40, expected=100) [ 854.897858][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 854.917460][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 855.015571][T20802] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 855.051114][T20802] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 855.223491][T27748] openvswitch: netlink: Invalid MD length 0 for MD type 0 [ 855.235185][T27748] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 856.555256][T27802] macsec1: entered promiscuous mode [ 856.586196][T27802] batadv0: entered promiscuous mode [ 856.607361][T27802] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 856.661226][T27802] batadv0: left promiscuous mode [ 856.728566][T27815] Cannot find add_set index 0 as target [ 856.740217][T27815] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5992'. [ 856.833363][T27818] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 856.880068][T27818] geneve3: entered promiscuous mode [ 856.887506][T27818] geneve3: entered allmulticast mode [ 856.895708][ T7540] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 19999 - 0 [ 856.909262][T27819] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5991'. [ 856.933823][ T7540] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 19999 - 0 [ 856.959570][T27821] netlink: 'syz.2.5995': attribute type 11 has an invalid length. [ 856.963372][ T7540] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 19999 - 0 [ 856.981706][T27821] netlink: 'syz.2.5995': attribute type 11 has an invalid length. [ 857.051614][ T7540] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 19999 - 0 [ 857.068520][ C0] af_packet: tpacket_rcv: packet too big, clamped from 40 to 4294967272. macoff=96 [ 857.195290][T27831] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 857.411342][T27845] __nla_validate_parse: 3 callbacks suppressed [ 857.411382][T27845] netlink: 216 bytes leftover after parsing attributes in process `syz.1.6002'. [ 857.455759][T27845] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6002'. [ 857.732787][T27858] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6005'. [ 858.052039][ T5638] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 858.070151][ T5638] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 858.088297][ T5638] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 858.104153][ T5638] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 858.112887][ T5638] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 858.393218][T27884] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6012'. [ 858.423462][T27884] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6012'. [ 858.465281][T27888] sctp: [Deprecated]: syz.4.6015 (pid 27888) Use of struct sctp_assoc_value in delayed_ack socket option. [ 858.465281][T27888] Use struct sctp_sack_info instead [ 858.566936][T27888] sctp: [Deprecated]: syz.4.6015 (pid 27888) Use of struct sctp_assoc_value in delayed_ack socket option. [ 858.566936][T27888] Use struct sctp_sack_info instead [ 858.872321][T27901] syzkaller0: entered promiscuous mode [ 858.878806][T27901] syzkaller0: entered allmulticast mode [ 858.923831][T27907] bond1 (unregistering): Released all slaves [ 859.099287][ T5638] Bluetooth: hci3: command 0x0405 tx timeout [ 859.166141][T27918] openvswitch: netlink: Actions may not be safe on all matching packets [ 860.225704][ T5638] Bluetooth: hci5: command tx timeout [ 862.311601][ T5638] Bluetooth: hci5: command tx timeout [ 863.309818][T27925] bond1: entered allmulticast mode [ 863.436617][T27936] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.6026'. [ 863.471979][T27936] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.6026'. [ 863.603233][T27924] bond1: left allmulticast mode [ 864.075615][T27963] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6034'. [ 864.379384][ T5638] Bluetooth: hci5: command tx timeout [ 864.406800][T27866] lo speed is unknown, defaulting to 1000 [ 864.418404][T27973] netlink: 'syz.1.6037': attribute type 1 has an invalid length. [ 864.436375][T27973] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6037'. [ 864.774544][T27986] netlink: 'syz.3.6042': attribute type 1 has an invalid length. [ 864.794992][T27988] netlink: 'syz.2.6043': attribute type 12 has an invalid length. [ 864.795740][T27986] netlink: 54 bytes leftover after parsing attributes in process `syz.3.6042'. [ 864.843459][T27986] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6042'. [ 865.033546][T28000] x_tables: ip_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 865.224656][T28002] tipc: Enabling of bearer rejected, already enabled [ 865.255242][T28002] mac80211_hwsim hwsim40 syzkaller0: entered promiscuous mode [ 865.276389][T28002] tipc: Resetting bearer [ 865.330898][T28002] sch_tbf: burst 255 is lower than device syzkaller0 mtu (313) ! [ 865.366980][T28008] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6048'. [ 865.968618][T28036] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 866.123241][T28048] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.6058'. [ 866.201353][T28053] netlink: 'syz.1.6062': attribute type 1 has an invalid length. [ 866.365431][T28053] 8021q: adding VLAN 0 to HW filter on device bond12 [ 866.396346][T27866] bridge0: port 1(bridge_slave_0) entered blocking state [ 866.408922][T27866] bridge0: port 1(bridge_slave_0) entered disabled state [ 866.416368][T27866] bridge_slave_0: entered allmulticast mode [ 866.425138][T27866] bridge_slave_0: entered promiscuous mode [ 866.435716][T27866] bridge0: port 2(bridge_slave_1) entered blocking state [ 866.443873][T27866] bridge0: port 2(bridge_slave_1) entered disabled state [ 866.451782][T27866] bridge_slave_1: entered allmulticast mode [ 866.459776][ T5638] Bluetooth: hci5: command tx timeout [ 866.474365][T27866] bridge_slave_1: entered promiscuous mode [ 866.543066][T27866] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 866.575926][T27866] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 866.650841][T27866] team0: Port device team_slave_0 added [ 866.665255][T27866] team0: Port device team_slave_1 added [ 866.673718][T28067] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6066'. [ 866.684967][T28067] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6066'. [ 866.732522][T27866] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 866.739899][T27866] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 866.768124][T27866] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 866.865725][T27866] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 866.873503][T27866] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 866.901221][T27866] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 866.991549][T27866] hsr_slave_0: entered promiscuous mode [ 867.007307][T27866] hsr_slave_1: entered promiscuous mode [ 867.015080][T27866] debugfs: 'hsr0' already exists in 'hsr' [ 867.022386][T27866] Cannot create hsr debugfs directory [ 867.223715][T27866] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 867.333003][T27866] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 867.427193][T27866] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 867.527916][T27866] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 868.891543][T28034] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 868.911680][T27866] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 868.974917][T27866] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 869.004998][T27866] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 869.086648][T27866] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 869.119061][T28081] vlan5: entered promiscuous mode [ 869.144404][T27866] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 869.160120][T27866] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 869.181900][T27866] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 869.225879][T27866] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 869.440913][T28101] __nla_validate_parse: 2 callbacks suppressed [ 869.440937][T28101] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6075'. [ 869.605975][T27866] 8021q: adding VLAN 0 to HW filter on device bond0 [ 869.635748][T28105] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6075'. [ 869.666799][T27866] 8021q: adding VLAN 0 to HW filter on device team0 [ 869.706182][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 869.713610][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 869.744202][ T7551] bridge0: port 2(bridge_slave_1) entered blocking state [ 869.751528][ T7551] bridge0: port 2(bridge_slave_1) entered forwarding state [ 870.402564][T28121] pimreg3: entered allmulticast mode [ 870.656045][T28135] netlink: 'syz.2.6083': attribute type 49 has an invalid length. [ 870.886640][T28151] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6088'. [ 870.957474][T28135] ip6gretap0: entered promiscuous mode [ 870.976667][T28135] ip6gretap0: entered allmulticast mode [ 871.033625][T27866] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 871.086121][T28157] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6090'. [ 871.107299][T28157] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6090'. [ 871.224989][T16489] IPVS: starting estimator thread 0... [ 871.231033][T28162] IPVS: ip_vs_add_dest(): server weight less than zero [ 871.242705][T28162] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 871.304521][T28163] syzkaller1: entered promiscuous mode [ 871.319019][T28163] syzkaller1: entered allmulticast mode [ 871.329833][T28164] IPVS: using max 28 ests per chain, 67200 per kthread [ 871.398329][T27866] veth0_vlan: entered promiscuous mode [ 871.445976][T27866] veth1_vlan: entered promiscuous mode [ 871.560917][T27866] veth0_macvtap: entered promiscuous mode [ 871.649907][T27866] veth1_macvtap: entered promiscuous mode [ 871.744967][T27866] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 871.806160][T27866] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 871.875731][ T7530] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 871.908892][ T7530] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 871.944201][ T7530] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 871.968260][ T7530] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 872.331442][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 872.370812][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 872.510221][T28199] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6098'. [ 872.523590][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 872.560169][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 872.661881][T28202] netlink: 'syz.2.6100': attribute type 1 has an invalid length. [ 872.702360][T28202] netlink: 'syz.2.6100': attribute type 1 has an invalid length. [ 873.366568][T28232] netlink: 65047 bytes leftover after parsing attributes in process `syz.4.6107'. [ 873.404327][T28235] netlink: 'syz.3.6108': attribute type 5 has an invalid length. [ 873.454641][T28232] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6107'. [ 873.662129][T20476] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 873.690010][T20476] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 873.701271][T20476] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 873.715452][T20476] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 873.725533][T20476] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 873.910511][T28252] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.6112'. [ 874.147355][T28260] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6114'. [ 874.587264][ T7551] bridge_slave_1: left allmulticast mode [ 874.622045][ T7551] bridge_slave_1: left promiscuous mode [ 874.649703][ T7551] bridge0: port 2(bridge_slave_1) entered disabled state [ 874.691852][T28279] xt_limit: Overflow, try lower: 271964/0 [ 874.720649][ T7551] bridge_slave_0: left allmulticast mode [ 874.739648][ T7551] bridge_slave_0: left promiscuous mode [ 874.755121][ T7551] bridge0: port 1(bridge_slave_0) entered disabled state [ 875.034800][T28300] netlink: 'syz.0.6121': attribute type 1 has an invalid length. [ 875.066469][T28300] netlink: 'syz.0.6121': attribute type 11 has an invalid length. [ 875.086824][T28300] __nla_validate_parse: 1 callbacks suppressed [ 875.087123][T28300] netlink: 224 bytes leftover after parsing attributes in process `syz.0.6121'. [ 875.383914][ T7551] bond2 (unregistering): (slave geneve2): Releasing active interface [ 875.677297][ T7551] bond1 (unregistering): Released all slaves [ 875.699712][ T7551] bond2 (unregistering): Released all slaves [ 875.716092][ T7551] bond3 (unregistering): Released all slaves [ 875.735310][ T7551] bond4 (unregistering): (slave lo): Releasing backup interface [ 875.758540][ T7551] bond4 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 875.771119][ T7551] bond4 (unregistering): Released all slaves [ 875.786797][ T7551] bond5 (unregistering): Released all slaves [ 875.804642][ T7551] bond6 (unregistering): Released all slaves [ 875.818182][ T5638] Bluetooth: hci1: command tx timeout [ 875.826219][ T7551] bond7 (unregistering): Released all slaves [ 875.853219][ T7551] bond8 (unregistering): Released all slaves [ 875.869957][ T7551] bond9 (unregistering): Released all slaves [ 875.888466][ T7551] bond10 (unregistering): Released all slaves [ 875.913741][ T7551] bond11 (unregistering): Released all slaves [ 875.932861][ T7551] bond0 (unregistering): Released all slaves [ 875.952130][ T7551] bond12 (unregistering): Released all slaves [ 875.968306][T28279] geneve1: entered promiscuous mode [ 876.033194][T28296] netlink: 284 bytes leftover after parsing attributes in process `syz.0.6121'. [ 876.085325][T28298] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 876.195191][ T7551] : left promiscuous mode [ 876.296428][T28319] netlink: 'syz.4.6129': attribute type 1 has an invalid length. [ 876.375332][T28321] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6130'. [ 876.427861][T28326] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6130'. [ 876.478577][T28319] 8021q: adding VLAN 0 to HW filter on device bond1 [ 876.486450][T28323] bond1: option ad_user_port_key: mode dependency failed, not supported in mode balance-alb(6) [ 876.498376][ T7551] tipc: Disabling bearer [ 876.504080][ T7551] tipc: Left network mode [ 876.515131][T28321] netlink: 'syz.0.6130': attribute type 1 has an invalid length. [ 876.534524][T28321] netlink: 228 bytes leftover after parsing attributes in process `syz.0.6130'. [ 876.546091][T28321] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6130'. [ 876.562107][T28319] netlink: 'syz.4.6129': attribute type 1 has an invalid length. [ 876.578165][T28319] netlink: 'syz.4.6129': attribute type 2 has an invalid length. [ 876.591980][T28319] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6129'. [ 876.695199][ T7551] IPVS: stopping backup sync thread 20312 ... [ 877.584838][T28368] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6138'. [ 877.668337][T28372] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6141'. [ 877.690746][T28360] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 877.697472][T28360] syzkaller1: linktype set to 823 [ 877.709958][ T7551] batman_adv: batadv0: Removing interface: wlan0 [ 877.901980][ T5638] Bluetooth: hci1: command tx timeout [ 878.221566][T28400] netlink: 244 bytes leftover after parsing attributes in process `syz.0.6149'. [ 878.308409][T28400] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 878.436643][T28244] lo speed is unknown, defaulting to 1000 [ 879.978709][ T5638] Bluetooth: hci1: command tx timeout [ 880.471126][T28481] netlink: 'syz.0.6169': attribute type 1 has an invalid length. [ 880.786730][ T7551] hsr_slave_0: left promiscuous mode [ 880.807166][ T7551] hsr_slave_1: left promiscuous mode [ 880.829958][ T7551] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 880.853431][ T7551] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 880.891492][T28496] netlink: 'syz.3.6171': attribute type 49 has an invalid length. [ 881.255140][ T7551] team_slave_1 (unregistering): left promiscuous mode [ 881.263120][ T7551] team0 (unregistering): Port device team_slave_1 removed [ 881.294806][ T7551] team_slave_0 (unregistering): left promiscuous mode [ 881.303778][ T7551] team0 (unregistering): Port device team_slave_0 removed [ 881.922173][T28526] xt_hl: Unknown TTL match mode: 255 [ 881.965649][T28244] bridge0: port 1(bridge_slave_0) entered blocking state [ 881.980250][T28244] bridge0: port 1(bridge_slave_0) entered disabled state [ 881.992334][T28244] bridge_slave_0: entered allmulticast mode [ 882.019818][T28244] bridge_slave_0: entered promiscuous mode [ 882.059037][ T5638] Bluetooth: hci1: command tx timeout [ 882.077121][T28244] bridge0: port 2(bridge_slave_1) entered blocking state [ 882.102927][T28244] bridge0: port 2(bridge_slave_1) entered disabled state [ 882.136972][T28244] bridge_slave_1: entered allmulticast mode [ 882.166804][T28244] bridge_slave_1: entered promiscuous mode [ 882.176131][T28527] syzkaller0: entered promiscuous mode [ 882.184065][T28527] syzkaller0: entered allmulticast mode [ 882.195124][T28536] veth0: entered promiscuous mode [ 882.354744][T28543] __nla_validate_parse: 5 callbacks suppressed [ 882.354767][T28543] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6184'. [ 882.375629][ T7551] IPVS: stop unused estimator thread 0... [ 882.377015][T28244] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 882.407160][T28544] netlink: 'syz.2.6184': attribute type 1 has an invalid length. [ 882.443342][T28244] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 882.493040][T28535] veth0: left promiscuous mode [ 882.536525][T28543] macvlan3: entered allmulticast mode [ 882.554901][T28543] dummy0: entered allmulticast mode [ 882.578008][T28543] dummy0: entered promiscuous mode [ 882.735225][T28544] bond11: entered promiscuous mode [ 882.764449][T28544] 8021q: adding VLAN 0 to HW filter on device bond11 [ 882.849726][T28547] 8021q: adding VLAN 0 to HW filter on device bond11 [ 882.884920][T28547] bond11: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 882.912438][T28547] bond11: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 882.935342][T28547] bond11: (slave ip6gre1): making interface the new active one [ 882.946333][T28547] ip6gre1: entered promiscuous mode [ 882.970560][T28567] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6185'. [ 882.982053][T28547] bond11: (slave ip6gre1): Enslaving as an active interface with an up link [ 883.067067][T28572] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6189'. [ 883.162684][T28560] syzkaller0: entered promiscuous mode [ 883.170225][T28560] syzkaller0: entered allmulticast mode [ 883.189688][T28244] team0: Port device team_slave_0 added [ 883.256031][T28244] team0: Port device team_slave_1 added [ 883.364142][T28582] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6192'. [ 883.378972][T28582] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6192'. [ 883.490969][T28584] IPv6: addrconf: prefix option has invalid lifetime [ 883.561996][T28586] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.6196'. [ 887.572172][T28244] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 887.606117][T28244] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 887.673479][T28244] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 887.700244][T28244] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 887.721873][T28244] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 887.751004][T28244] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 887.825767][T28607] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6202'. [ 887.984276][T28244] hsr_slave_0: entered promiscuous mode [ 888.005702][T28244] hsr_slave_1: entered promiscuous mode [ 888.031856][T28244] debugfs: 'hsr0' already exists in 'hsr' [ 888.053823][T28244] Cannot create hsr debugfs directory [ 888.084372][T28613] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6204'. [ 888.818224][T28647] bond0: entered promiscuous mode [ 888.838980][T28647] bond_slave_0: entered promiscuous mode [ 888.872524][T28647] bond_slave_1: entered promiscuous mode [ 888.930882][T28647] batadv0: entered promiscuous mode [ 888.956235][T28647] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 889.004432][T28647] bond0: left promiscuous mode [ 889.013954][T28647] bond_slave_0: left promiscuous mode [ 889.030757][T28647] bond_slave_1: left promiscuous mode [ 889.052516][T28647] batadv0: left promiscuous mode [ 889.341564][T28664] netlink: 'syz.0.6216': attribute type 9 has an invalid length. [ 889.389608][T28664] netlink: 'syz.0.6216': attribute type 10 has an invalid length. [ 889.457156][T28664] veth1_macvtap: left promiscuous mode [ 889.483014][T28664] bond0: (slave macsec0): Error -34 calling dev_set_mtu [ 889.775087][T28682] veth0: entered promiscuous mode [ 889.886090][T28682] veth0: left promiscuous mode [ 890.014520][T28244] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 890.014926][ C0] vcan0: j1939_tp_rxtimer: 0xffff888055e76400: rx timeout, send abort [ 890.054418][T28244] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 890.105819][T28244] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 890.140557][T28244] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 890.185205][T28244] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 890.243674][T28244] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 890.279454][T28244] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 890.332935][T28244] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 890.515033][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805853c400: rx timeout, send abort [ 890.529625][ C0] vcan0: j1939_tp_rxtimer: 0xffff888055e76400: abort rx timeout. Force session deactivation [ 890.565196][T28705] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6223'. [ 890.632611][T28705] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6223'. [ 890.782681][T28723] netlink: 14 bytes leftover after parsing attributes in process `syz.0.6223'. [ 891.023473][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805853c400: abort rx timeout. Force session deactivation [ 891.133681][ C1] vcan0: j1939_tp_rxtimer: 0xffff88803647b000: rx timeout, send abort [ 891.142140][T28244] 8021q: adding VLAN 0 to HW filter on device bond0 [ 891.276463][T28244] 8021q: adding VLAN 0 to HW filter on device team0 [ 891.336633][ T7548] bridge0: port 1(bridge_slave_0) entered blocking state [ 891.343902][ T7548] bridge0: port 1(bridge_slave_0) entered forwarding state [ 891.480715][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 891.488029][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 891.642006][ C1] vcan0: j1939_tp_rxtimer: 0xffff88803647b000: abort rx timeout. Force session deactivation [ 891.941918][T28750] netlink: 96 bytes leftover after parsing attributes in process `syz.2.6229'. [ 891.988394][T28750] 8021q: VLANs not supported on sit0 [ 892.468965][T28772] openvswitch: netlink: IP tunnel dst address not specified [ 892.644338][T28783] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6235'. [ 892.744456][T28783] bridge_slave_1: left allmulticast mode [ 892.785405][T28783] bridge_slave_1: left promiscuous mode [ 892.826553][T28783] bridge0: port 2(bridge_slave_1) entered disabled state [ 892.861307][T28783] bridge_slave_0: left allmulticast mode [ 892.881615][T28783] bridge_slave_0: left promiscuous mode [ 892.912019][T28783] bridge0: port 1(bridge_slave_0) entered disabled state [ 893.495248][T28804] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 893.682714][T28244] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 893.744419][T28813] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6244'. [ 893.924118][T28244] veth0_vlan: entered promiscuous mode [ 893.983772][T28244] veth1_vlan: entered promiscuous mode [ 894.213897][T28244] veth0_macvtap: entered promiscuous mode [ 894.264558][T28244] veth1_macvtap: entered promiscuous mode [ 894.573427][T28244] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 894.657198][T28244] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 894.726287][T20798] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 894.761892][T20798] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 894.791263][T20798] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 894.810951][T28843] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6251'. [ 894.827058][T20798] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 895.153055][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 895.170164][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 895.295666][ T7547] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 895.336070][ T7547] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 895.652678][T28827] lo speed is unknown, defaulting to 1000 [ 895.717745][T28872] netlink: 'syz.2.6261': attribute type 1 has an invalid length. [ 895.725768][T28870] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6105'. [ 895.748102][T28872] netlink: 'syz.2.6261': attribute type 2 has an invalid length. [ 895.776553][T28877] netlink: 'syz.2.6261': attribute type 1 has an invalid length. [ 895.786922][T28877] netlink: 'syz.2.6261': attribute type 2 has an invalid length. [ 895.831361][T28878] tipc: Enabling of bearer rejected, failed to enable media [ 896.253609][T28896] sctp: [Deprecated]: syz.1.6267 (pid 28896) Use of struct sctp_assoc_value in delayed_ack socket option. [ 896.253609][T28896] Use struct sctp_sack_info instead [ 896.401874][T28901] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6270'. [ 896.847244][T28914] netlink: 65047 bytes leftover after parsing attributes in process `syz.4.6274'. [ 897.290029][T28925] netlink: 'syz.2.6278': attribute type 83 has an invalid length. [ 897.361521][T28929] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6280'. [ 897.540974][T28936] : entered promiscuous mode [ 897.589824][T28938] netlink: 'syz.2.6282': attribute type 1 has an invalid length. [ 897.621830][T28938] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6282'. [ 897.814189][T28943] mac80211_hwsim hwsim40 syzkaller0: left promiscuous mode [ 897.903470][T28943] mac80211_hwsim hwsim40 syzkaller0: left allmulticast mode [ 897.948979][T28943] tipc: Resetting bearer [ 898.039054][T28938] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6282'. [ 898.213887][T28955] netlink: 830 bytes leftover after parsing attributes in process `syz.1.6287'. [ 898.326379][T28963] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6289'. [ 898.704646][T28987] sctp: [Deprecated]: syz.0.6298 (pid 28987) Use of int in maxseg socket option. [ 898.704646][T28987] Use struct sctp_assoc_value instead [ 898.785536][T28987] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6298'. [ 898.797538][T28993] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6298'. [ 898.995002][T29000] netlink: 'syz.3.6301': attribute type 4 has an invalid length. [ 899.297134][T29008] bond1: (slave ip6gretap1): making interface the new active one [ 899.331575][T29008] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 899.759715][T29040] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6312'. [ 899.911320][T29042] netlink: 72 bytes leftover after parsing attributes in process `syz.3.6312'. [ 899.954527][T29042] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 900.256909][T29041] bond7: (slave bridge6): Enslaving as an active interface with an up link [ 900.284906][T29047] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 900.292287][T29047] IPv6: NLM_F_CREATE should be set when creating new route [ 900.299638][T29047] IPv6: NLM_F_CREATE should be set when creating new route [ 900.306924][T29047] IPv6: NLM_F_CREATE should be set when creating new route [ 900.317544][T29048] sctp: [Deprecated]: syz.1.6314 (pid 29048) Use of int in max_burst socket option. [ 900.317544][T29048] Use struct sctp_assoc_value instead [ 900.353065][T29042] macvlan3: entered promiscuous mode [ 900.360164][T29042] macvlan3: entered allmulticast mode [ 900.366188][T29042] bond7: (slave macvlan3): Error -98 calling set_mac_address [ 900.473031][T29053] Cannot find del_set index 4 as target [ 900.635864][T29056] tipc: Started in network mode [ 900.650095][T29056] tipc: Node identity 265d03b65326, cluster identity 4711 [ 900.659590][T29056] tipc: Enabled bearer , priority 0 [ 900.667504][T29056] syzkaller0: entered promiscuous mode [ 900.675185][T29056] syzkaller0: entered allmulticast mode [ 900.714655][T29056] sch_tbf: peakrate 7 is lower than or equals to rate 994622507201582345 ! [ 900.761348][T29056] tipc: Resetting bearer [ 900.771980][T29063] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6319'. [ 900.782225][T29061] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6320'. [ 900.794646][T29055] tipc: Resetting bearer [ 900.821400][T29055] tipc: Disabling bearer [ 900.880627][T29061] mac80211_hwsim hwsim40 syzkaller0: entered promiscuous mode [ 900.889782][T29061] mac80211_hwsim hwsim40 syzkaller0: entered allmulticast mode [ 900.899648][T29061] tipc: Resetting bearer [ 900.912298][T29061] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 900.940952][T29065] openvswitch: netlink: VXLAN extension 1 has unexpected len 8 expected 4 [ 901.360445][T29078] xt_ecn: cannot match TCP bits for non-tcp packets [ 901.724665][ T5638] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 901.741063][ T5638] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 901.753830][ T5638] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 901.771691][ T5638] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 901.780059][ T5638] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 902.006282][T29102] netlink: 'syz.1.6329': attribute type 1 has an invalid length. [ 902.152982][T29108] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6333'. [ 902.219309][T29113] netlink: 'syz.4.6334': attribute type 49 has an invalid length. [ 902.624814][T29105] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 902.655010][T29105] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 902.861583][T29115] syzkaller0: entered promiscuous mode [ 902.862449][T29133] sctp: [Deprecated]: syz.3.6335 (pid 29133) Use of int in maxseg socket option. [ 902.862449][T29133] Use struct sctp_assoc_value instead [ 902.871576][T29115] syzkaller0: entered allmulticast mode [ 902.911287][T29128] bond2: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 902.924783][T29128] bond2 (unregistering): Released all slaves [ 903.175504][T29144] netlink: 80 bytes leftover after parsing attributes in process `syz.4.6339'. [ 903.840766][ T5638] Bluetooth: hci2: command tx timeout [ 905.909265][ T5638] Bluetooth: hci2: command tx timeout [ 907.468889][T29152] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6342'. [ 907.978905][ T5638] Bluetooth: hci2: command tx timeout [ 908.009647][T29185] tipc: Started in network mode [ 908.071296][T29185] tipc: Node identity 2a8a8ce25d5b, cluster identity 4711 [ 908.112824][T29185] tipc: Enabled bearer , priority 0 [ 908.204190][T29185] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6351'. [ 908.363903][T29191] syzkaller0: entered promiscuous mode [ 908.380289][T29191] syzkaller0: entered allmulticast mode [ 908.400738][T29191] tipc: Resetting bearer [ 908.646218][ T48] tipc: Resetting bearer [ 908.652804][T29193] C: renamed from lo (while UP) [ 908.662615][T29193] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 908.694580][T29089] lo speed is unknown, defaulting to 1000 [ 908.741166][T29184] tipc: Resetting bearer [ 908.945201][T24245] IPVS: starting estimator thread 0... [ 909.071182][T29208] IPVS: using max 24 ests per chain, 57600 per kthread [ 910.064858][ T5638] Bluetooth: hci2: command tx timeout [ 912.601736][T29184] tipc: Disabling bearer [ 912.654319][T20802] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 912.667380][T20802] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 912.716722][T24245] tipc: Node number set to 2010221794 [ 913.024262][T29237] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 913.074282][T29241] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 913.212051][T20802] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 913.250613][T20802] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 913.430666][T29256] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6369'. [ 913.452124][T20802] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 913.475582][T20802] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 913.532830][T29253] netlink: 14544 bytes leftover after parsing attributes in process `syz.1.6369'. [ 913.837311][T20802] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 913.866937][T20802] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 913.955612][T29268] netlink: 64 bytes leftover after parsing attributes in process `syz.0.6371'. [ 914.089952][T29280] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6375'. [ 914.188593][T29280] netlink: 'syz.4.6375': attribute type 10 has an invalid length. [ 914.347029][T29280] ipvlan0: entered allmulticast mode [ 914.370174][T29280] veth0_vlan: entered allmulticast mode [ 914.410455][T29280] team0: Device ipvlan0 failed to register rx_handler [ 914.865287][T29089] bridge0: port 1(bridge_slave_0) entered blocking state [ 914.876042][T29089] bridge0: port 1(bridge_slave_0) entered disabled state [ 914.884937][T29089] bridge_slave_0: entered allmulticast mode [ 914.898456][T29089] bridge_slave_0: entered promiscuous mode [ 914.915936][T29089] bridge0: port 2(bridge_slave_1) entered blocking state [ 914.966414][T29089] bridge0: port 2(bridge_slave_1) entered disabled state [ 914.974597][T29089] bridge_slave_1: entered allmulticast mode [ 914.985586][T29089] bridge_slave_1: entered promiscuous mode [ 915.004926][T20802] mac80211_hwsim hwsim39 wlan0: left allmulticast mode [ 915.014886][T20802] mac80211_hwsim hwsim39 wlan0: left promiscuous mode [ 915.023383][T20802] bridge0: port 3(wlan0) entered disabled state [ 915.038084][T29315] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 915.059807][T20802] bridge_slave_1: left allmulticast mode [ 915.075852][T20802] bridge_slave_1: left promiscuous mode [ 915.093174][T20802] bridge0: port 2(bridge_slave_1) entered disabled state [ 915.145371][T20802] bridge_slave_0: left allmulticast mode [ 915.151592][T20802] bridge_slave_0: left promiscuous mode [ 915.157487][T20802] bridge0: port 1(bridge_slave_0) entered disabled state [ 915.404144][T20802] bond11 (unregistering): (slave ip6gre1): Releasing backup interface [ 915.428745][T20802] ip6gre1 (unregistering): left promiscuous mode [ 915.711664][T20802] erspan0 (unregistering): left promiscuous mode [ 915.889001][T20802] bond6 (unregistering): (slave geneve2): Releasing active interface [ 916.025590][T20802] bond7 (unregistering): (slave bridge2): Releasing backup interface [ 916.164676][T20802] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 916.176587][T20802] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 916.191348][T20802] bond0 (unregistering): (slave team0): Releasing backup interface [ 916.204731][T20802] bond0 (unregistering): Released all slaves [ 916.218333][T20802] bond1 (unregistering): Released all slaves [ 916.234374][T20802] bond2 (unregistering): Released all slaves [ 916.251712][T20802] bond3 (unregistering): Released all slaves [ 916.272364][T20802] bond4 (unregistering): Released all slaves [ 916.296646][T20802] bond5 (unregistering): Released all slaves [ 916.320846][T20802] bond6 (unregistering): Released all slaves [ 916.344432][T20802] bond7 (unregistering): Released all slaves [ 916.367936][T20802] bond8 (unregistering): (slave bond9): Releasing backup interface [ 916.376731][T20802] bond8 (unregistering): Released all slaves [ 916.405056][T20802] bond9 (unregistering): Released all slaves [ 916.433067][T20802] bond10 (unregistering): Released all slaves [ 916.450452][T20802] bond11 (unregistering): Released all slaves [ 916.685265][T29089] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 916.835819][T29089] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 916.851257][T29352] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6386'. [ 916.878103][T29352] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6386'. [ 916.954972][T20802] : left promiscuous mode [ 917.043448][T29352] erspan0: entered promiscuous mode [ 917.111514][T29352] erspan0: left promiscuous mode [ 917.130505][T29355] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6387'. [ 917.235673][T29089] team0: Port device team_slave_0 added [ 917.266694][T20802] tipc: Disabling bearer [ 917.276385][T29357] netlink: 'syz.1.6388': attribute type 1 has an invalid length. [ 917.291618][T20802] tipc: Disabling bearer [ 917.312780][T20802] tipc: Left network mode [ 917.410187][T29355] veth0: entered promiscuous mode [ 917.470069][T29089] team0: Port device team_slave_1 added [ 917.783960][T29354] veth0: left promiscuous mode [ 917.793109][T29089] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 917.800860][T29089] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 917.854334][T29391] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6392'. [ 917.856558][T29089] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 917.973941][T29089] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 918.019954][T29089] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 918.121882][T29089] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 918.301830][ T5294] 8021q: adding VLAN 0 to HW filter on device eth1 [ 918.433592][T29089] hsr_slave_0: entered promiscuous mode [ 918.453394][T29089] hsr_slave_1: entered promiscuous mode [ 918.465939][T29089] debugfs: 'hsr0' already exists in 'hsr' [ 918.490433][T29089] Cannot create hsr debugfs directory [ 918.869889][T29434] netlink: 'syz.1.6400': attribute type 10 has an invalid length. [ 918.886290][T29427] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6401'. [ 918.976146][T29438] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6401'. [ 918.991504][T29434] team0: Port device dummy0 added [ 919.045869][T29438] macsec1: entered promiscuous mode [ 919.068885][T29438] bridge0: entered promiscuous mode [ 919.086479][T29438] macsec1: entered allmulticast mode [ 919.100619][T29438] bridge0: entered allmulticast mode [ 919.127177][T29438] bridge0: port 3(macsec1) entered blocking state [ 919.151709][T29438] bridge0: port 3(macsec1) entered disabled state [ 919.186556][T29438] bridge0: left allmulticast mode [ 919.257372][T29436] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6399'. [ 919.305082][T29427] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 919.328362][T16492] bridge0: left promiscuous mode [ 919.390112][T29424] netlink: 72 bytes leftover after parsing attributes in process `syz.0.6399'. [ 919.402878][T29424] netlink: 72 bytes leftover after parsing attributes in process `syz.0.6399'. [ 919.434507][T29458] tipc: Started in network mode [ 919.441943][T29458] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 919.454424][T29458] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 919.466082][T29458] tipc: Enabled bearer , priority 10 [ 920.231465][T29491] netlink: 284 bytes leftover after parsing attributes in process `syz.4.6414'. [ 920.283023][ T5294] 8021q: adding VLAN 0 to HW filter on device eth2 [ 920.909247][T16489] tipc: Node number set to 1 [ 920.995098][T29514] pim6reg: entered allmulticast mode [ 921.019025][T29518] pim6reg: left allmulticast mode [ 921.153942][T29523] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6421'. [ 921.211520][T29523] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6421'. [ 921.323778][T29537] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.6423'. [ 921.760889][T29545] netlink: 'syz.4.6424': attribute type 11 has an invalid length. [ 921.775610][T29545] netlink: 199828 bytes leftover after parsing attributes in process `syz.4.6424'. [ 921.866277][T20802] hsr_slave_0: left promiscuous mode [ 921.930117][T20802] hsr_slave_1: left promiscuous mode [ 921.938540][T20802] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 921.971939][T20802] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 922.013744][T20802] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 922.031640][T20802] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 922.093072][T29554] netlink: 'syz.4.6427': attribute type 1 has an invalid length. [ 922.185388][T20802] dummy0: left allmulticast mode [ 922.196295][T20802] veth1_vlan: left promiscuous mode [ 922.202022][T20802] veth0_vlan: left promiscuous mode [ 922.412923][T29564] netlink: 'syz.1.6426': attribute type 11 has an invalid length. [ 922.652902][T20798] smc: removing ib device syz2 [ 922.935218][T20802] team0 (unregistering): Port device team_slave_1 removed [ 922.962245][T20802] team0 (unregistering): Port device team_slave_0 removed [ 923.132646][ T48] smc: removing ib device sz1 [ 923.173512][T29554] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 923.188552][T29555] ip6gretap1: entered promiscuous mode [ 923.203511][T29555] ip6gretap1: entered allmulticast mode [ 923.226649][ T48] smbdirect: ib_dev[sz1] removed [ 923.401936][T20798] smbdirect: ib_dev[syz2] removed [ 924.257868][T29607] __nla_validate_parse: 1 callbacks suppressed [ 924.257889][T29607] netlink: 5 bytes leftover after parsing attributes in process `syz.4.6437'. [ 924.531705][T29616] netlink: 'syz.0.6439': attribute type 61 has an invalid length. [ 924.577524][T29619] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6441'. [ 924.604044][T29619] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6441'. [ 924.687096][T29628] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6438'. [ 925.312075][ T7530] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 925.347818][ T7530] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 925.360328][ T7530] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 925.763394][T29657] syz.1.6444: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 925.806883][T29657] CPU: 1 UID: 0 PID: 29657 Comm: syz.1.6444 Not tainted syzkaller #0 PREEMPT(full) [ 925.806913][T29657] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 925.806933][T29657] Call Trace: [ 925.806942][T29657] [ 925.806956][T29657] dump_stack_lvl+0xe8/0x150 [ 925.806987][T29657] warn_alloc+0x249/0x340 [ 925.807026][T29657] ? stack_trace_save+0xa9/0x100 [ 925.807063][T29657] ? __pfx_warn_alloc+0x10/0x10 [ 925.807103][T29657] ? kasan_save_track+0x4f/0x80 [ 925.807132][T29657] ? kasan_save_track+0x3e/0x80 [ 925.807159][T29657] ? __kasan_kmalloc+0x93/0xb0 [ 925.807189][T29657] ? __kmalloc_cache_noprof+0x31c/0x660 [ 925.807219][T29657] ? xskq_create+0x56/0x170 [ 925.807313][T29657] ? xsk_setsockopt+0x54c/0x990 [ 925.807341][T29657] ? do_sock_setsockopt+0x17c/0x1b0 [ 925.807402][T29657] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 925.807434][T29657] ? do_syscall_64+0x174/0x580 [ 925.807460][T29657] __vmalloc_node_range_noprof+0x132/0x1750 [ 925.807538][T29657] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 925.807577][T29657] ? __kasan_kmalloc+0x93/0xb0 [ 925.807614][T29657] vmalloc_user_noprof+0xad/0xe0 [ 925.807643][T29657] ? xskq_create+0xbf/0x170 [ 925.807674][T29657] xskq_create+0xbf/0x170 [ 925.807708][T29657] xsk_init_queue+0x8a/0xe0 [ 925.807750][T29657] xsk_setsockopt+0x54c/0x990 [ 925.807784][T29657] ? __pfx_xsk_setsockopt+0x10/0x10 [ 925.807814][T29657] ? __pfx_aa_sk_perm+0x10/0x10 [ 925.807914][T29657] ? aa_sock_opt_perm+0xff/0x1a0 [ 925.807974][T29657] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 925.808003][T29657] ? __pfx_xsk_setsockopt+0x10/0x10 [ 925.808035][T29657] do_sock_setsockopt+0x17c/0x1b0 [ 925.808074][T29657] __x64_sys_setsockopt+0x13d/0x1b0 [ 925.808110][T29657] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 925.808135][T29657] do_syscall_64+0x174/0x580 [ 925.808156][T29657] ? trace_irq_disable+0x3b/0x140 [ 925.808189][T29657] ? clear_bhb_loop+0x40/0x90 [ 925.808216][T29657] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 925.808237][T29657] RIP: 0033:0x7f1c6059ce59 [ 925.808259][T29657] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 925.808277][T29657] RSP: 002b:00007f1c614d1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 925.808300][T29657] RAX: ffffffffffffffda RBX: 00007f1c60815fa0 RCX: 00007f1c6059ce59 [ 925.808316][T29657] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 925.808328][T29657] RBP: 00007f1c60632d6f R08: 0000000000000004 R09: 0000000000000000 [ 925.808342][T29657] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 925.808355][T29657] R13: 00007f1c60816038 R14: 00007f1c60815fa0 R15: 00007ffc82fe1458 [ 925.808391][T29657] [ 926.118824][ T7530] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 926.131130][T29657] Mem-Info: [ 926.136954][T29657] active_anon:5949 inactive_anon:6 isolated_anon:0 [ 926.136954][T29657] active_file:2700 inactive_file:40912 isolated_file:0 [ 926.136954][T29657] unevictable:768 dirty:35 writeback:0 [ 926.136954][T29657] slab_reclaimable:12301 slab_unreclaimable:120163 [ 926.136954][T29657] mapped:31806 shmem:1494 pagetables:1265 [ 926.136954][T29657] sec_pagetables:0 bounce:0 [ 926.136954][T29657] kernel_misc_reclaimable:0 [ 926.136954][T29657] free:1284436 free_pcp:19491 free_cma:0 [ 926.337779][T29657] Node 0 active_anon:24148kB inactive_anon:24kB active_file:10800kB inactive_file:163436kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:127584kB dirty:136kB writeback:0kB shmem:4736kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14876kB pagetables:5044kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 926.414882][T29657] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:212kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:124kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 926.530889][T29657] Node 0 DMA free:15352kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 926.670925][T29657] lowmem_reserve[]: 0 2492 2493 2493 2493 [ 926.697122][T29657] Node 0 DMA32 free:1176008kB boost:0kB min:34188kB low:42732kB high:51276kB reserved_highatomic:0KB free_highatomic:0KB active_anon:25848kB inactive_anon:24kB active_file:10800kB inactive_file:163436kB unevictable:1536kB writepending:92kB zspages:0kB present:3129332kB managed:2552788kB mlocked:0kB bounce:0kB free_pcp:37044kB local_pcp:18960kB free_cma:0kB [ 926.784445][T29657] lowmem_reserve[]: 0 0 0 0 0 [ 926.812782][T29089] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 926.826833][T29657] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:680kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB [ 926.903124][T29089] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 926.913495][T29657] lowmem_reserve[]: 0 0 0 0 0 [ 926.929778][T29657] Node 1 Normal free:3914448kB boost:0kB min:55704kB low:69628kB high:83552kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:212kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:31396kB local_pcp:31396kB free_cma:0kB [ 926.964055][T29089] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 927.012368][T29657] lowmem_reserve[]: 0 0 0 0 0 [ 927.019991][T29089] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 927.033376][T29657] Node 0 DMA: 0*4kB 1*8kB (U) 1*16kB (U) 1*32kB (U) 1*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 2*1024kB (U) 2*2048kB (UM) 2*4096kB (M) = 15352kB [ 927.099663][T29657] Node 0 DMA32: 221*4kB (ME) 4460*8kB (UME) 3460*16kB (UME) 1007*32kB (UME) 704*64kB (UME) 1259*128kB (UM) 782*256kB (UME) 388*512kB (U) 204*1024kB (UME) 93*2048kB (UM) 9*4096kB (U) = 1165428kB [ 927.164744][T29657] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 927.196282][T29089] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 927.228592][T29657] Node 1 Normal: 1*4kB (U) 5*8kB (UM) 14*16kB (UM) 6*32kB (UM) 10*64kB (UM) 5*128kB (UM) 5*256kB (UM) 8*512kB (UM) 4*1024kB (UM) 2*2048kB (U) 952*4096kB (UM) = 3914700kB [ 927.303974][T29657] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 927.317164][T29089] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 927.350318][T29657] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 927.365247][T29089] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 927.392738][T29657] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 927.436942][T29089] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 927.440581][T29657] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 927.466219][T29657] 46605 total pagecache pages [ 927.474649][T29657] 0 pages in swap cache [ 927.493046][T29657] Free swap = 124996kB [ 927.519523][T29657] Total swap = 124996kB [ 927.536743][T29657] 2097051 pages RAM [ 927.562702][T29657] 0 pages HighMem/MovableOnly [ 927.600835][T29657] 427069 pages reserved [ 927.613651][T29657] 0 pages cma reserved [ 927.818135][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 927.900870][T24245] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 928.011859][T29701] netlink: 108 bytes leftover after parsing attributes in process `syz.1.6451'. [ 928.058032][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 928.097875][T29703] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6452'. [ 928.112127][T29089] 8021q: adding VLAN 0 to HW filter on device bond0 [ 928.200880][T29710] netlink: 72 bytes leftover after parsing attributes in process `syz.4.6452'. [ 928.248063][T29708] netlink: 232 bytes leftover after parsing attributes in process `syz.0.6453'. [ 928.321331][T29716] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6454'. [ 928.605566][T29089] 8021q: adding VLAN 0 to HW filter on device team0 [ 928.620927][T24245] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 928.676267][ T7547] bridge0: port 1(bridge_slave_0) entered blocking state [ 928.683549][ T7547] bridge0: port 1(bridge_slave_0) entered forwarding state [ 928.737201][T29727] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6456'. [ 928.855137][T29733] netlink: 'syz.1.6457': attribute type 1 has an invalid length. [ 929.028611][T29725] bond2: option arp_all_targets: invalid value (18446744073709551613) [ 929.061692][T29725] bond2 (unregistering): Released all slaves [ 929.099669][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 929.149720][T29745] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 929.346993][ T7551] bridge0: port 2(bridge_slave_1) entered blocking state [ 929.354412][ T7551] bridge0: port 2(bridge_slave_1) entered forwarding state [ 929.549893][T29734] netlink: 52 bytes leftover after parsing attributes in process `syz.0.6455'. [ 929.661961][T16487] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 930.137849][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 930.705976][T16487] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 930.939695][T16490] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 931.177883][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 931.396269][T29764] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6460'. [ 931.956725][T29089] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 932.205890][T29089] veth0_vlan: entered promiscuous mode [ 932.286400][T29089] veth1_vlan: entered promiscuous mode [ 932.655980][T29089] veth0_macvtap: entered promiscuous mode [ 932.726079][T29089] veth1_macvtap: entered promiscuous mode [ 932.771328][T29813] syzkaller1: entered promiscuous mode [ 932.787430][T29813] syzkaller1: entered allmulticast mode [ 932.951702][T29821] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6468'. [ 933.100739][T29089] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 933.166242][T29089] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 933.224268][ T48] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 933.259814][ C0] net_ratelimit: 5 callbacks suppressed [ 933.259837][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 933.262706][ T48] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 933.302629][T20802] IPVS: stop unused estimator thread 0... [ 933.346237][T29830] netlink: 11 bytes leftover after parsing attributes in process `syz.3.6470'. [ 933.419058][T29830] netlink: 11 bytes leftover after parsing attributes in process `syz.3.6470'. [ 933.470896][ T48] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 933.506570][T29842] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6471'. [ 933.507394][ T48] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 933.823405][ T5698] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 933.915010][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 933.953135][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 933.978809][T16489] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 934.103577][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 934.112826][T29851] atomic_op ffff88804e711998 conn xmit_atomic 0000000000000000 [ 934.125979][T29857] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6478'. [ 934.143360][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 934.161192][T29851] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6475'. [ 934.298188][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 934.872507][ T5698] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 934.943425][T29898] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6486'. [ 935.337909][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 935.803194][T29928] netlink: 'syz.1.6490': attribute type 1 has an invalid length. [ 935.898887][T24245] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 936.229490][T16490] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 936.234829][T29928] 8021q: adding VLAN 0 to HW filter on device bond1 [ 936.268145][T29952] netlink: 'syz.2.6495': attribute type 1 has an invalid length. [ 936.286718][T29952] netlink: 280 bytes leftover after parsing attributes in process `syz.2.6495'. [ 936.377860][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 936.938711][T16501] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 937.517787][T29978] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6501'. [ 937.531242][T29978] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6501'. [ 937.639885][T29978] gretap0: entered promiscuous mode [ 937.701595][T29978] gretap0: left promiscuous mode [ 938.101653][T29991] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6504'. [ 938.293079][T20476] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 938.312492][T20476] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 938.325683][T20476] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 938.372432][T20476] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 938.386068][T20476] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 938.457875][ C0] net_ratelimit: 3 callbacks suppressed [ 938.457897][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 939.022559][ T808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 939.056052][T29946] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 939.497891][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 939.702415][ T7548] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 939.788273][ T7548] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 939.811517][ T7548] netdevsim netdevsim3 eth3 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 940.000251][T30031] netlink: 'syz.0.6510': attribute type 1 has an invalid length. [ 940.050978][T30032] netlink: 'syz.0.6510': attribute type 1 has an invalid length. [ 940.061927][ T808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 940.090635][T15857] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 940.192393][T30031] 8021q: adding VLAN 0 to HW filter on device bond2 [ 940.443956][ T7548] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 940.479410][T20476] Bluetooth: hci0: command tx timeout [ 940.488771][ T7548] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 940.500043][ T7548] netdevsim netdevsim3 eth2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 940.537885][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 940.685330][ T7548] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 940.745762][ T7548] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 940.796146][ T7548] netdevsim netdevsim3 eth1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 941.108714][ T5698] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 941.221238][T30069] netlink: 'syz.2.6518': attribute type 1 has an invalid length. [ 941.577872][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 941.630393][T30069] rdma_rxe: rxe_newlink: failed to add bridge_slave_1 [ 941.665656][ T7548] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 941.721109][ T7548] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 941.786007][ T7548] netdevsim netdevsim3 eth0 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 941.942385][T30073] gtp1: entered promiscuous mode [ 941.947426][T30073] gtp1: entered allmulticast mode [ 942.138683][ T5698] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 942.256871][T30083] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 942.538052][T20476] Bluetooth: hci0: command tx timeout [ 942.598843][T30099] netlink: 56 bytes leftover after parsing attributes in process `syz.4.6523'. [ 942.618148][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 942.767453][T30104] netlink: 84 bytes leftover after parsing attributes in process `syz.0.6526'. [ 942.789027][T30105] Cannot find set identified by id 1 to match [ 942.951695][T30099] bond2: Removing last arp target with arp_interval on [ 943.086517][T30115] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6527'. [ 943.249848][ T7548] bridge_slave_1: left promiscuous mode [ 943.256052][ T7548] bridge0: port 2(bridge_slave_1) entered disabled state [ 943.298948][ T7548] bridge_slave_0: left allmulticast mode [ 943.327744][ T7548] bridge_slave_0: left promiscuous mode [ 943.342428][ T7548] bridge0: port 1(bridge_slave_0) entered disabled state [ 943.454228][ T7548] pimreg3: left allmulticast mode [ 943.646510][T30123] net_ratelimit: 2 callbacks suppressed [ 943.646534][T30123] netlink: zone id is out of range [ 943.658004][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 943.700976][T30123] netlink: del zone limit has 4 unknown bytes [ 944.229461][T16487] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 944.315972][ T7548] bond0 (unregistering): (slave gretap3): Releasing active interface [ 944.625403][T20476] Bluetooth: hci0: command tx timeout [ 944.682317][ T7548] bond7 (unregistering): (slave bridge6): Releasing backup interface [ 944.697938][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 944.814382][ T7548] bond1 (unregistering): (slave veth5): Releasing active interface [ 944.829311][ T7548] bond1 (unregistering): (slave veth0_to_bond): Releasing active interface [ 944.840467][ T7548] bond1 (unregistering): Released all slaves [ 944.856927][ T7548] bond2 (unregistering): Released all slaves [ 944.874342][ T7548] bond3 (unregistering): Released all slaves [ 944.890921][ T7548] bond0 (unregistering): Released all slaves [ 944.913864][ T7548] bond4 (unregistering): Released all slaves [ 944.934170][ T7548] bond5 (unregistering): (slave lo): Releasing backup interface [ 944.943781][ T7548] bond5 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 944.957696][ T7548] bond5 (unregistering): Released all slaves [ 944.975019][ T7548] bond6 (unregistering): Released all slaves [ 944.991959][ T7548] bond7 (unregistering): Released all slaves [ 945.229399][ T7548] tipc: Left network mode [ 945.261394][T16487] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 945.312096][T30143] netlink: 156 bytes leftover after parsing attributes in process `syz.4.6534'. [ 945.485480][ T7548] IPVS: stopping master sync thread 21834 ... [ 945.553803][T30146] netlink: 'syz.0.6535': attribute type 12 has an invalid length. [ 945.722166][T30159] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6537'. [ 945.737899][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 945.820883][ T5741] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 946.097399][T29994] bridge0: port 1(bridge_slave_0) entered blocking state [ 946.122944][T29994] bridge0: port 1(bridge_slave_0) entered disabled state [ 946.140188][T15857] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 946.152905][T29994] bridge_slave_0: entered allmulticast mode [ 946.204945][T29994] bridge_slave_0: entered promiscuous mode [ 946.292111][T29994] bridge0: port 2(bridge_slave_1) entered blocking state [ 946.308446][T16487] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 946.325168][T29994] bridge0: port 2(bridge_slave_1) entered disabled state [ 946.344826][T29994] bridge_slave_1: entered allmulticast mode [ 946.365440][T29994] bridge_slave_1: entered promiscuous mode [ 946.666250][T29994] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 946.698391][T20476] Bluetooth: hci0: command tx timeout [ 946.717148][T30207] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6548'. [ 946.787076][T29994] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 946.918242][ T5294] 8021q: adding VLAN 0 to HW filter on device eth1 [ 947.039635][T29994] team0: Port device team_slave_0 added [ 947.046055][T30209] netlink: 'syz.2.6549': attribute type 4 has an invalid length. [ 947.096826][T30211] netlink: 'syz.2.6549': attribute type 4 has an invalid length. [ 947.107295][T29994] team0: Port device team_slave_1 added [ 947.149066][T30221] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6551'. [ 947.313347][T30229] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6552'. [ 947.342258][ T30] audit: type=1107 audit(1780994322.064:16): pid=30208 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='ً5%UA٠0ltݕ/ 6򊨊pi' [ 947.370469][T30229] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6552'. [ 947.446378][T29994] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 947.474651][T29994] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 947.542017][T29994] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 947.615985][T29994] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 947.658321][T29994] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 947.731708][T29994] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 948.311655][T30256] netlink: 52 bytes leftover after parsing attributes in process `syz.4.6559'. [ 948.456443][ T7548] hsr_slave_0: left promiscuous mode [ 948.468434][ T7548] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 948.497055][ T7548] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 948.520264][ T7548] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 948.536227][ T7548] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 948.592158][ T7548] batadv_slave_1: left promiscuous mode [ 948.612167][ T7548] veth1_macvtap: left promiscuous mode [ 948.636011][ T7548] veth0_macvtap: left promiscuous mode [ 948.857911][ C0] net_ratelimit: 6 callbacks suppressed [ 948.857933][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 948.989266][ T7548] team0 (unregistering): Port device batadv1 removed [ 949.159698][T30282] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 949.178113][T16489] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 949.385983][T30291] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6565'. [ 949.419034][T16487] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 949.471788][ T7548] team0 (unregistering): Port device team_slave_1 removed [ 949.494639][ T7548] team0 (unregistering): Port device team_slave_0 removed [ 949.667153][T29994] hsr_slave_0: entered promiscuous mode [ 949.674006][T29994] hsr_slave_1: entered promiscuous mode [ 949.681133][T29994] debugfs: 'hsr0' already exists in 'hsr' [ 949.686950][T29994] Cannot create hsr debugfs directory [ 949.726532][ T5294] 8021q: adding VLAN 0 to HW filter on device eth2 [ 949.897930][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 950.319041][T30325] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 950.328520][T30325] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 950.379238][T30326] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 950.385856][T30326] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 950.404812][ T7548] IPVS: stop unused estimator thread 0... [ 950.469549][T16501] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 950.482739][T30335] netlink: 'syz.2.6575': attribute type 1 has an invalid length. [ 951.244050][T30366] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6581'. [ 951.274122][T30374] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6585'. [ 951.291580][T30379] netlink: 388 bytes leftover after parsing attributes in process `syz.0.6585'. [ 951.310888][T30366] tc action pedit 'at' offset 6 out of bounds [ 951.975257][T29994] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 952.029293][T29994] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 952.136882][T29994] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 952.194123][T29994] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 952.241728][T29994] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 952.289366][T29994] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 952.309375][T29994] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 952.323547][T30423] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6595'. [ 952.342788][T29994] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 952.570238][T30437] netlink: 'syz.2.6597': attribute type 11 has an invalid length. [ 952.608894][T30445] netlink: 'syz.1.6598': attribute type 6 has an invalid length. [ 952.650025][T30437] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6597'. [ 952.689748][T29994] 8021q: adding VLAN 0 to HW filter on device bond0 [ 952.784656][T29994] 8021q: adding VLAN 0 to HW filter on device team0 [ 952.823417][T30450] veth0: entered promiscuous mode [ 952.836011][ T7551] bridge0: port 1(bridge_slave_0) entered blocking state [ 952.843285][ T7551] bridge0: port 1(bridge_slave_0) entered forwarding state [ 952.893355][T30450] veth0: left promiscuous mode [ 952.961896][ T7551] bridge0: port 2(bridge_slave_1) entered blocking state [ 952.969198][ T7551] bridge0: port 2(bridge_slave_1) entered forwarding state [ 953.061416][T30455] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6603'. [ 953.093051][T30455] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6603'. [ 953.229577][T30457] syzkaller0: entered promiscuous mode [ 953.239572][T30457] syzkaller0: entered allmulticast mode [ 954.057975][ C0] net_ratelimit: 10 callbacks suppressed [ 954.057997][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 954.451305][T30488] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 954.622772][T16487] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 954.722859][T30530] netlink: 68 bytes leftover after parsing attributes in process `syz.0.6613'. [ 954.733187][T29994] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 954.771918][T30530] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6613'. [ 954.782915][T16487] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 954.832996][T30532] netlink: 52 bytes leftover after parsing attributes in process `syz.0.6613'. [ 954.984571][T30537] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6616'. [ 954.986689][T29994] veth0_vlan: entered promiscuous mode [ 955.060969][T29994] veth1_vlan: entered promiscuous mode [ 955.097906][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 955.258290][T15857] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 955.319425][T29994] veth0_macvtap: entered promiscuous mode [ 955.324764][T15857] IPVS: starting estimator thread 0... [ 955.355802][T29994] veth1_macvtap: entered promiscuous mode [ 955.385057][T29994] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 955.399999][T29994] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 955.418208][ C1] ------------[ cut here ]------------ [ 955.424396][ C1] workqueue: cannot queue hci_cmd_timeout on wq hci0 [ 955.431248][ C1] WARNING: kernel/workqueue.c:2298 at __queue_work+0xd3f/0x1040, CPU#1: dhcpcd-run-hook/30541 [ 955.441569][ C1] Modules linked in: [ 955.446306][ C1] CPU: 1 UID: 0 PID: 30541 Comm: dhcpcd-run-hook Not tainted syzkaller #0 PREEMPT(full) [ 955.446350][ T5741] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 955.456158][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 955.456182][ C1] RIP: 0010:__queue_work+0xd67/0x1040 [ 955.456213][ C1] Code: a6 0e 49 8d 7d 18 48 89 f8 48 c1 e8 03 42 80 3c 20 00 74 05 e8 0a de a3 00 49 8b 75 18 49 81 c7 70 01 00 00 4c 89 f7 4c 89 fa <67> 48 0f b9 3a 4c 89 e8 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 ef [ 955.456233][ C1] RSP: 0018:ffffc90000a08bd8 EFLAGS: 00010082 [ 955.456254][ C1] RAX: 1ffff1100eb4c14e RBX: 0000000000000008 RCX: ffff8880457d8000 [ 955.456271][ C1] RDX: ffff88802a5f3970 RSI: ffffffff8a9a7a90 RDI: ffffffff903333b0 [ 955.456290][ C1] RBP: 0000000000000100 R08: ffffffff903034f7 R09: 1ffffffff206069e [ 955.529580][ C1] R10: dffffc0000000000 R11: ffffffff818d37e0 R12: dffffc0000000000 [ 955.537606][ C1] R13: ffff888075a60a58 R14: ffffffff903333b0 R15: ffff88802a5f3970 [ 955.545642][ C1] FS: 0000000000000000(0000) GS:ffff8881253a0000(0000) knlGS:0000000000000000 [ 955.554711][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 955.561341][ C1] CR2: 00007f1c605ea540 CR3: 0000000033b26000 CR4: 00000000003526f0 [ 955.569352][ C1] Call Trace: [ 955.572658][ C1] [ 955.575534][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 955.580617][ C1] call_timer_fn+0x192/0x5e0 [ 955.585258][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 955.591097][ C1] ? call_timer_fn+0xd4/0x5e0 [ 955.595811][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 955.600964][ C1] ? do_raw_spin_unlock+0xf5/0x210 [ 955.606109][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 955.611951][ C1] __run_timer_base+0x67e/0x8b0 [ 955.616838][ C1] ? ktime_get+0x45/0x220 [ 955.621218][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 955.626637][ C1] run_timer_softirq+0xb7/0x170 [ 955.631527][ C1] handle_softirqs+0x22a/0x840 [ 955.636321][ C1] ? __irq_exit_rcu+0xca/0x220 [ 955.641126][ C1] __irq_exit_rcu+0xca/0x220 [ 955.645750][ C1] irq_exit_rcu+0x9/0x30 [ 955.650040][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 955.655804][ C1] [ 955.658760][ C1] [ 955.661743][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 955.667850][ C1] RIP: 0010:lock_acquire+0x221/0x350 [ 955.673178][ C1] Code: ff ff ff e8 31 bf 05 0a f7 44 24 08 00 02 00 00 0f 84 3a ff ff ff 65 48 8b 05 0b 5a 96 11 48 3b 44 24 58 75 33 fb 48 83 c4 60 <5b> 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc 48 8d 3d 18 ed 91 [ 955.692903][ C1] RSP: 0018:ffffc900036674b8 EFLAGS: 00000286 [ 955.699002][ C1] RAX: 3256ae4bdf44b000 RBX: 0000000000000000 RCX: 0000000000000046 [ 955.707088][ C1] RDX: 00000000a69b4a9e RSI: ffffffff8e2172fd RDI: ffffffff8c28b8e0 [ 955.715184][ C1] RBP: ffffffff823c8442 R08: ffffffff823c8442 R09: ffffffff8e95cc20 [ 955.723181][ C1] R10: dffffc0000000000 R11: fffff940003c0f7f R12: 0000000000000002 [ 955.731182][ C1] R13: ffffffff8e95cc20 R14: 0000000000000000 R15: 0000000000000246 [ 955.739184][ C1] ? page_ext_get+0x22/0x2e0 [ 955.743815][ C1] ? page_ext_get+0x22/0x2e0 [ 955.748441][ C1] ? page_ext_get+0x22/0x2e0 [ 955.753074][ C1] page_ext_get+0x3e/0x2e0 [ 955.757527][ C1] ? page_ext_get+0x22/0x2e0 [ 955.762160][ C1] __reset_page_owner+0x28/0x1f0 [ 955.767144][ C1] free_unref_folios+0xd9f/0x14c0 [ 955.772232][ C1] folios_put_refs+0x9ff/0xb40 [ 955.777109][ C1] ? x64_sys_call+0x221a/0x2240 [ 955.782016][ C1] ? __pfx_folios_put_refs+0x10/0x10 [ 955.787380][ C1] ? free_swap_cache+0x109/0x300 [ 955.792367][ C1] free_pages_and_swap_cache+0x2b9/0x490 [ 955.798040][ C1] ? __pfx_free_pages_and_swap_cache+0x10/0x10 [ 955.804253][ C1] ? __virt_addr_valid+0x13c/0x390 [ 955.809435][ C1] tlb_flush_mmu+0x6d3/0xa30 [ 955.814081][ C1] ? __pfx_down_write+0x10/0x10 [ 955.819042][ C1] tlb_finish_mmu+0xf9/0x230 [ 955.823675][ C1] exit_mmap+0x498/0x9e0 [ 955.827966][ C1] ? __pfx_exit_mmap+0x10/0x10 [ 955.832778][ C1] ? uprobe_clear_state+0x53/0x3f0 [ 955.837946][ C1] ? __pfx_exit_aio+0x10/0x10 [ 955.842670][ C1] ? uprobe_clear_state+0x2bc/0x3f0 [ 955.847906][ C1] __mmput+0x118/0x430 [ 955.852005][ C1] exit_mm+0x1f6/0x2d0 [ 955.856112][ C1] do_exit+0x6a2/0x22c0 [ 955.860311][ C1] ? __pfx_do_exit+0x10/0x10 [ 955.864933][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 955.870002][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 955.875248][ C1] do_group_exit+0x21b/0x2d0 [ 955.879876][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 955.885970][ C1] __x64_sys_exit_group+0x3f/0x40 [ 955.891033][ C1] x64_sys_call+0x221a/0x2240 [ 955.895749][ C1] do_syscall_64+0x174/0x580 [ 955.900373][ C1] ? trace_irq_disable+0x3b/0x140 [ 955.905439][ C1] ? clear_bhb_loop+0x40/0x90 [ 955.910153][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 955.916082][ C1] RIP: 0033:0x7f2487bed6c5 [ 955.920528][ C1] Code: Unable to access opcode bytes at 0x7f2487bed69b. [ 955.927568][ C1] RSP: 002b:00007ffd3cc49038 EFLAGS: 00000202 ORIG_RAX: 00000000000000e7 [ 955.936028][ C1] RAX: ffffffffffffffda RBX: 00007ffd3cc49304 RCX: 00007f2487bed6c5 [ 955.944044][ C1] RDX: 00000000000000e7 RSI: ffffffffffffff88 RDI: 0000000000000000 [ 955.952061][ C1] RBP: 0000000000000003 R08: 00007ffd3cc49130 R09: 0000000000000002 [ 955.960068][ C1] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 955.968071][ C1] R13: 00007ffd3cc49370 R14: 00007f2487dfd000 R15: 0000561f61079d98 [ 955.976119][ C1] [ 955.979190][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 955.986500][ C1] CPU: 1 UID: 0 PID: 30541 Comm: dhcpcd-run-hook Not tainted syzkaller #0 PREEMPT(full) [ 955.996353][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 956.006539][ C1] Call Trace: [ 956.009860][ C1] [ 956.012736][ C1] vpanic+0x56c/0xa60 [ 956.016751][ C1] ? __pfx__printk+0x10/0x10 [ 956.021459][ C1] ? __pfx_vpanic+0x10/0x10 [ 956.025989][ C1] ? is_bpf_text_address+0x292/0x2b0 [ 956.031304][ C1] ? is_bpf_text_address+0x26/0x2b0 [ 956.036539][ C1] panic+0xc5/0xd0 [ 956.040294][ C1] ? __pfx_panic+0x10/0x10 [ 956.044747][ C1] __warn+0x315/0x4c0 [ 956.048757][ C1] ? __queue_work+0xd3f/0x1040 [ 956.053556][ C1] ? __queue_work+0xd3f/0x1040 [ 956.058350][ C1] __report_bug+0x29a/0x540 [ 956.062968][ C1] ? call_timer_fn+0x192/0x5e0 [ 956.067767][ C1] ? __run_timer_base+0x67e/0x8b0 [ 956.072831][ C1] ? run_timer_softirq+0xb7/0x170 [ 956.077891][ C1] ? __queue_work+0xd3f/0x1040 [ 956.082685][ C1] ? __pfx___report_bug+0x10/0x10 [ 956.087742][ C1] ? tlb_finish_mmu+0xf9/0x230 [ 956.092632][ C1] ? __pfx_hci_cmd_timeout+0x10/0x10 [ 956.097955][ C1] ? look_up_lock_class+0x57/0x110 [ 956.103106][ C1] ? register_lock_class+0x31/0x2e0 [ 956.108336][ C1] report_bug_entry+0x19a/0x290 [ 956.113308][ C1] ? __queue_work+0xd67/0x1040 [ 956.118358][ C1] ? __queue_work+0xd6c/0x1040 [ 956.123152][ C1] handle_bug+0xce/0x200 [ 956.127422][ C1] exc_invalid_op+0x1a/0x50 [ 956.131953][ C1] asm_exc_invalid_op+0x1a/0x20 [ 956.136828][ C1] RIP: 0010:__queue_work+0xd67/0x1040 [ 956.142239][ C1] Code: a6 0e 49 8d 7d 18 48 89 f8 48 c1 e8 03 42 80 3c 20 00 74 05 e8 0a de a3 00 49 8b 75 18 49 81 c7 70 01 00 00 4c 89 f7 4c 89 fa <67> 48 0f b9 3a 4c 89 e8 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 ef [ 956.161883][ C1] RSP: 0018:ffffc90000a08bd8 EFLAGS: 00010082 [ 956.168081][ C1] RAX: 1ffff1100eb4c14e RBX: 0000000000000008 RCX: ffff8880457d8000 [ 956.176082][ C1] RDX: ffff88802a5f3970 RSI: ffffffff8a9a7a90 RDI: ffffffff903333b0 [ 956.184116][ C1] RBP: 0000000000000100 R08: ffffffff903034f7 R09: 1ffffffff206069e [ 956.192112][ C1] R10: dffffc0000000000 R11: ffffffff818d37e0 R12: dffffc0000000000 [ 956.200115][ C1] R13: ffff888075a60a58 R14: ffffffff903333b0 R15: ffff88802a5f3970 [ 956.208120][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 956.213978][ C1] ? __pfx_hci_cmd_timeout+0x10/0x10 [ 956.219300][ C1] ? __queue_work+0xd25/0x1040 [ 956.224185][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 956.229305][ C1] call_timer_fn+0x192/0x5e0 [ 956.233932][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 956.239765][ C1] ? call_timer_fn+0xd4/0x5e0 [ 956.244508][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 956.249658][ C1] ? do_raw_spin_unlock+0xf5/0x210 [ 956.254812][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 956.260659][ C1] __run_timer_base+0x67e/0x8b0 [ 956.265538][ C1] ? ktime_get+0x45/0x220 [ 956.269911][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 956.275336][ C1] run_timer_softirq+0xb7/0x170 [ 956.280222][ C1] handle_softirqs+0x22a/0x840 [ 956.285013][ C1] ? __irq_exit_rcu+0xca/0x220 [ 956.289810][ C1] __irq_exit_rcu+0xca/0x220 [ 956.294440][ C1] irq_exit_rcu+0x9/0x30 [ 956.298724][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 956.304438][ C1] [ 956.307393][ C1] [ 956.310358][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 956.316365][ C1] RIP: 0010:lock_acquire+0x221/0x350 [ 956.321678][ C1] Code: ff ff ff e8 31 bf 05 0a f7 44 24 08 00 02 00 00 0f 84 3a ff ff ff 65 48 8b 05 0b 5a 96 11 48 3b 44 24 58 75 33 fb 48 83 c4 60 <5b> 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc 48 8d 3d 18 ed 91 [ 956.341310][ C1] RSP: 0018:ffffc900036674b8 EFLAGS: 00000286 [ 956.347408][ C1] RAX: 3256ae4bdf44b000 RBX: 0000000000000000 RCX: 0000000000000046 [ 956.355412][ C1] RDX: 00000000a69b4a9e RSI: ffffffff8e2172fd RDI: ffffffff8c28b8e0 [ 956.363426][ C1] RBP: ffffffff823c8442 R08: ffffffff823c8442 R09: ffffffff8e95cc20 [ 956.371442][ C1] R10: dffffc0000000000 R11: fffff940003c0f7f R12: 0000000000000002 [ 956.379445][ C1] R13: ffffffff8e95cc20 R14: 0000000000000000 R15: 0000000000000246 [ 956.387535][ C1] ? page_ext_get+0x22/0x2e0 [ 956.392170][ C1] ? page_ext_get+0x22/0x2e0 [ 956.396800][ C1] ? page_ext_get+0x22/0x2e0 [ 956.401438][ C1] page_ext_get+0x3e/0x2e0 [ 956.405888][ C1] ? page_ext_get+0x22/0x2e0 [ 956.410528][ C1] __reset_page_owner+0x28/0x1f0 [ 956.415509][ C1] free_unref_folios+0xd9f/0x14c0 [ 956.420591][ C1] folios_put_refs+0x9ff/0xb40 [ 956.425385][ C1] ? x64_sys_call+0x221a/0x2240 [ 956.430277][ C1] ? __pfx_folios_put_refs+0x10/0x10 [ 956.435593][ C1] ? free_swap_cache+0x109/0x300 [ 956.440562][ C1] free_pages_and_swap_cache+0x2b9/0x490 [ 956.446244][ C1] ? __pfx_free_pages_and_swap_cache+0x10/0x10 [ 956.452451][ C1] ? __virt_addr_valid+0x13c/0x390 [ 956.457659][ C1] tlb_flush_mmu+0x6d3/0xa30 [ 956.462305][ C1] ? __pfx_down_write+0x10/0x10 [ 956.467192][ C1] tlb_finish_mmu+0xf9/0x230 [ 956.471824][ C1] exit_mmap+0x498/0x9e0 [ 956.476104][ C1] ? __pfx_exit_mmap+0x10/0x10 [ 956.480910][ C1] ? uprobe_clear_state+0x53/0x3f0 [ 956.486066][ C1] ? __pfx_exit_aio+0x10/0x10 [ 956.490782][ C1] ? uprobe_clear_state+0x2bc/0x3f0 [ 956.496016][ C1] __mmput+0x118/0x430 [ 956.500117][ C1] exit_mm+0x1f6/0x2d0 [ 956.504226][ C1] do_exit+0x6a2/0x22c0 [ 956.508430][ C1] ? __pfx_do_exit+0x10/0x10 [ 956.513059][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 956.518128][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 956.523367][ C1] do_group_exit+0x21b/0x2d0 [ 956.527989][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 956.534175][ C1] __x64_sys_exit_group+0x3f/0x40 [ 956.539239][ C1] x64_sys_call+0x221a/0x2240 [ 956.543947][ C1] do_syscall_64+0x174/0x580 [ 956.548563][ C1] ? trace_irq_disable+0x3b/0x140 [ 956.553627][ C1] ? clear_bhb_loop+0x40/0x90 [ 956.558371][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 956.564296][ C1] RIP: 0033:0x7f2487bed6c5 [ 956.568762][ C1] Code: Unable to access opcode bytes at 0x7f2487bed69b. [ 956.575822][ C1] RSP: 002b:00007ffd3cc49038 EFLAGS: 00000202 ORIG_RAX: 00000000000000e7 [ 956.584280][ C1] RAX: ffffffffffffffda RBX: 00007ffd3cc49304 RCX: 00007f2487bed6c5 [ 956.592294][ C1] RDX: 00000000000000e7 RSI: ffffffffffffff88 RDI: 0000000000000000 [ 956.600297][ C1] RBP: 0000000000000003 R08: 00007ffd3cc49130 R09: 0000000000000002 [ 956.608314][ C1] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 956.616329][ C1] R13: 00007ffd3cc49370 R14: 00007f2487dfd000 R15: 0000561f61079d98 [ 956.624358][ C1] [ 956.628082][ C1] Kernel Offset: disabled [ 956.632428][ C1] Rebooting in 86400 seconds..