last executing test programs: 2.470931684s ago: executing program 0 (id=1440): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000280)='contention_end\x00', r1, 0x0, 0x4}, 0x18) r2 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r2, 0x0) accept4(r2, 0x0, 0x0, 0x0) setsockopt$sock_int(r2, 0x1, 0x7, 0x0, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000003040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r4, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003140)={&(0x7f0000003080)={0x28, r3, 0xe6e964277ae08d57, 0x70bd2a, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x8040000}, 0x90) 1.986644372s ago: executing program 2 (id=1448): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={0x1, 0x58, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x102000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x50, r1, 0x300, 0x70bd2c, 0x25dfdbfc, {}, [@ETHTOOL_A_FEATURES_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}]}, @ETHTOOL_A_FEATURES_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x24004000) sendmsg$sock(r0, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001440)=[{&(0x7f0000000240)="59c68cf21b1b00910f9789dffe67933ac99b9bc1b2c240e3dac0da749066f20f512399911416f761a080771f41ebf8ce585e2c2f8993801d53ff8a95e08c76185e142f453309ee5403810e8b8b57d2fd69a9a92fe22a7e67f3774c070fa71fcba61fc6c64eaea9168fb9e0b4837de3feabf0b0fbd18259dba7ac1c2c4ad3bea2b6953fac6faae82273c5240f7a979f1ccd214529c0a940c093f3fe713f2e4c6877c7145f9c1b57cd1fd2076d24a87b8bd2bae6b80686bced67335620a6b9d761fba99cf6e1902d60d82bfdd21f", 0xcd}, {&(0x7f0000000340)="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", 0x1000}, {&(0x7f0000001340)="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", 0xfc}], 0x3, &(0x7f0000001480)=[@mark={{0x14, 0x1, 0x24, 0x5}}], 0x18}, 0x840) sendmsg$nl_generic(r0, &(0x7f0000001680)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001640)={&(0x7f0000001540)={0xec, 0x20, 0x300, 0x70bd2d, 0x25dfdbfb, {0xa}, [@nested={0xd3, 0xa0, 0x0, 0x1, [@generic="cb59e74329c30c21e60936e24c006baa102fe3355ad4e52aa55170ac5732c0d171e0e63e877137", @nested={0x4, 0xc1}, @typed={0x8, 0x36, 0x0, 0x0, @str='wg0\x00'}, @generic="5af48f1d0995fa7c23f9d79301fb560da673334f372da43640ae89042b823d7004b6cfec5575f80a15a9d77cd4ebeda4803e0b7f5f402f5a0537f3e389f475e6106aa5d08964ac3b536c2bca274c20aab7546501ae1bfbb2427b73dc3596b400fcb70ec78f214c52c43b5abe60138ea18511e6ac596fddbc9fd9d389c2fb4a5acef19311383a48f427f0286adbe434ac6dcb907827b317e5041cb84b"]}, @typed={0x4, 0x9e}]}, 0xec}, 0x1, 0x0, 0x0, 0x40}, 0x4040000) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000001700), r0) sendmsg$GTP_CMD_ECHOREQ(r0, &(0x7f00000017c0)={&(0x7f00000016c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001780)={&(0x7f0000001740)={0x24, r3, 0x28, 0x70bd29, 0x25dfdbfe, {}, [@GTPA_FAMILY={0x5, 0xd, 0x8}, @GTPA_O_TEI={0x8, 0x9, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x24008850) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_DEV(r4, &(0x7f0000001900)={&(0x7f0000001800)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000018c0)={&(0x7f0000001840)={0x50, 0x0, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x3}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xffff}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x24004080}, 0x20000000) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_SET(r5, &(0x7f0000001b00)={&(0x7f0000001940), 0xc, &(0x7f0000001ac0)={&(0x7f0000001980)={0x104, 0x0, 0x10, 0x70bd28, 0x25dfdbfe, {}, [@DEVLINK_ATTR_RATE_TX_MAX={0xc}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x2}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x1}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x9}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xbf, 0xa9, @random="33a75cb0125892096960fea2a7923a6f6267db1d7e7c324065e3a89238d365e48ec0294c84efdecfac479feedfe8a2dcc940e987e2d6446f1990cc9d835d7080e03faf58eba58c0a4cad91590278fa8e2fc2b77045d0c4b041501a63247ecda9c6094bd61a9863851968ece33fb5ee50a196bb279704876fcdeed051d3f4bc6229be00a4cdb74eb68e91abe7e2b87dc897b8a9c10f7b647cefbf2e0684f38ceabf2fbbf1cece2526c4d84b6ab8ce3dab10417e5225006c83ededf4"}]}, 0x104}, 0x1, 0x0, 0x0, 0x85}, 0x805) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001b40)=@bloom_filter={0x1e, 0x4350, 0x1, 0x8, 0xc60c, 0x1, 0x3, '\x00', r2, 0xffffffffffffffff, 0x1, 0x5, 0x5, 0x5}, 0x50) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000001bc0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$INCFS_IOC_PERMIT_FILL(r6, 0x40046721, &(0x7f0000001c00)={r7}) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001c80), r0) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000001cc0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r5, &(0x7f0000001e80)={&(0x7f0000001c40)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001e40)={&(0x7f0000001d00)={0x120, r9, 0x100, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_QOS_MAP={0x24, 0xc7, {[{0x75, 0x2}, {0x9, 0x3}, {0x2, 0x5}, {0x6, 0x4}, {0x0, 0x6}, {0x5, 0x2}, {0x1e}, {0x0, 0x3}, {0x0, 0x2}, {0x5, 0x2}, {0x8, 0x1}, {0xfb, 0x5}], "239bc69326760171"}}, @NL80211_ATTR_QOS_MAP={0x16, 0xc7, {[{0x5, 0x6}, {0x3}, {0x9d, 0x7}, {0xfd}, {0x78, 0x7}], "c44ae3ed6991db92"}}, @NL80211_ATTR_QOS_MAP={0x16, 0xc7, {[{0x6, 0x6}, {0x5, 0x6}, {0xdb, 0x4}, {0x0, 0x5}, {0xcc, 0x4}], "6210266caf0e26a7"}}, @NL80211_ATTR_QOS_MAP={0x30, 0xc7, {[{0x81, 0x5}, {0xf, 0x5}, {0xff, 0x1}, {0x2, 0x3}, {0x1b, 0x7}, {0x9, 0x5}, {0xe4, 0x3}, {0xcd, 0x1}, {0x4, 0x1}, {0xd4, 0x1}, {0x4, 0x4}, {0x9, 0x5}, {0xcb, 0x6}, {0x9, 0x7}, {0x7, 0x2}, {0x24, 0x6}, {0x20, 0x1}, {0xbc, 0x2}], "84e0c9332d2eefdc"}}, @NL80211_ATTR_QOS_MAP={0x34, 0xc7, {[{0x65, 0x5}, {0x5, 0x3}, {0x92, 0x1}, {0xf, 0x4}, {0x6, 0x6}, {0x7, 0x3}, {0x1d, 0x2}, {0x7}, {0xeb, 0x3}, {0x6, 0x3}, {0x5, 0x7}, {0x9, 0x6}, {0x25, 0x7}, {0x9, 0x5}, {0x9, 0x5}, {0xef, 0x2}, {0x7f, 0x4}, {0x5, 0x1}, {0x5, 0x2}, {0x0, 0x1}], "ad5e4acf863d353e"}}, @NL80211_ATTR_QOS_MAP={0x16, 0xc7, {[{0x10, 0x6}, {0xc}, {0x8, 0x6}, {0x63, 0x2}, {0x96, 0x1}], "57a97a3c5f322826"}}, @NL80211_ATTR_QOS_MAP={0x32, 0xc7, {[{0x5, 0x7}, {0x7, 0x2}, {0x2e, 0x6}, {0x83, 0x4}, {0x3, 0x7}, {0x8, 0x1}, {0x6, 0x1}, {0xfc, 0x6}, {0x7, 0x2}, {0x0, 0x2}, {0x10, 0x5}, {0x8, 0x1}, {0x0, 0x1}, {0x7, 0x7}, {0x4, 0x5}, {0x0, 0x5}, {0x8, 0x7}, {0x5e, 0x3}, {0x4, 0x3}], "1066c1d4f13c6081"}}]}, 0x120}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f0000001f00)={'team0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000002000)={'syztnl0\x00', &(0x7f0000001f40)={'gretap0\x00', r2, 0x700, 0x700, 0x4, 0x27e, {{0x1e, 0x4, 0x2, 0xe, 0x78, 0x67, 0x0, 0xba, 0x29, 0x0, @multicast1, @empty, {[@ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x7, 0xfd, [@local]}, @ssrr={0x89, 0x7, 0x7, [@broadcast]}, @ra={0x94, 0x4, 0x1}, @rr={0x7, 0x1f, 0xe2, [@private=0xa010101, @local, @broadcast, @local, @broadcast, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @noop, @noop, @rr={0x7, 0x17, 0x4d, [@loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010101, @broadcast, @remote]}, @timestamp_prespec={0x44, 0x14, 0x5c, 0x3, 0x5, [{@broadcast, 0x8}, {@dev={0xac, 0x14, 0x14, 0x18}, 0x8001}]}]}}}}}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000002700)={&(0x7f0000001ec0)={0x10, 0x0, 0x0, 0x90a84001}, 0xc, &(0x7f00000026c0)={&(0x7f0000002040)={0x648, 0x0, 0x200, 0x70bd27, 0x25dfdbfd, {}, [{{0x8}, {0xb0, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x400}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}]}}, {{0x8, 0x1, r11}, {0x48, 0x2, 0x0, 0x1, [{0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x232, 0x7, 0x10, 0x6}, {0x0, 0x1, 0x6, 0x1}]}}}]}}, {{0x8, 0x1, r2}, {0xc4, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r2}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xea6}}, {0x8, 0x6, r2}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r2}}, {0x8}}}]}}, {{0x8, 0x1, r2}, {0x16c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x4000000}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}]}}, {{0x8, 0x1, r2}, {0x4}}, {{0x8, 0x1, r2}, {0xe8, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}]}}, {{0x8, 0x1, r2}, {0x1e8, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r12}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffffa}}, {0x8, 0x6, r2}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r2}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r2}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}]}}]}, 0x648}, 0x1, 0x0, 0x0, 0x4800}, 0x4000) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000002840)={&(0x7f0000002740)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000002800)={&(0x7f0000002780)={0x58, 0x0, 0x200, 0x4, 0x25dfdbfb, {}, [@L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x3}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e23}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e22}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xe3}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x2}, @L2TP_ATTR_MRU={0x6, 0x1d, 0xa}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x80000001}]}, 0x58}, 0x1, 0x0, 0x0, 0x80}, 0x1) syz_genetlink_get_family_id$nl80211(&(0x7f0000002880), r0) socketpair(0x1d, 0xc, 0x4, &(0x7f00000028c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r13, 0x6, 0x1d, &(0x7f0000002900)={0x8, 0x800, 0xffff, 0x2, 0x7f}, 0x14) close(r13) setsockopt$SO_J1939_PROMISC(r6, 0x6b, 0x2, &(0x7f0000002940)=0x1, 0x4) getsockopt$SO_TIMESTAMPING(r14, 0x1, 0x64, &(0x7f0000002980), &(0x7f00000029c0)=0x4) r15 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000002a40), r4) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r4, &(0x7f0000002b00)={&(0x7f0000002a00)={0x10, 0x0, 0x0, 0x1000040}, 0xc, &(0x7f0000002ac0)={&(0x7f0000002a80)={0x28, r15, 0x300, 0x70bd2d, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'xfrm0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000043}, 0x884) 1.721557649s ago: executing program 2 (id=1451): bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) r0 = socket(0x10, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x8, &(0x7f0000000080)=[{0x0}], 0x1, 0x0, 0x0, 0x5}, 0x2004c000) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f00000000000000000a000000000000000800010001000000040004"], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000080)='H', 0x1}], 0x1}, 0x0) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000080)='H', 0x1}], 0x1}, 0x0) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r2, &(0x7f0000000080)=ANY=[], 0x6) write$cgroup_int(r1, &(0x7f0000000200), 0x12) sendmmsg(r0, &(0x7f0000000000), 0x0, 0x4000014) (async) sendmmsg(r0, &(0x7f0000000000), 0x0, 0x4000014) close(r0) (async) close(r0) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x2c, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x9, 0x2, 0x7, 0x0, 0xfff, 0x7fffffff}, {0x96, 0x2, 0x9, 0x7f, 0x80d8, 0x7}, 0x8, 0x9, 0x17eb}}]}}]}, 0x58}}, 0x50) r5 = socket$packet(0x11, 0x3, 0x300) socket$rds(0x15, 0x5, 0x0) (async) r6 = socket$rds(0x15, 0x5, 0x0) bind$rds(r6, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r6, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000340)=[@mask_fadd={0x58, 0x114, 0x8, {{0x9ab1, 0x3}, &(0x7f0000000080)=0x1, 0x0, 0x4, 0xd75, 0x0, 0x8, 0x37, 0x3}}], 0x58}, 0x0) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000100)=[{0x80000006}]}, 0x10) socket$netlink(0x10, 0x3, 0x4) r7 = socket$kcm(0x10, 0x2, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x3}}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x50084) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3800000054000100010000000000000007000000", @ANYRES32=0x0, @ANYBLOB="20000100", @ANYRES32=0x0, @ANYBLOB="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"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3800000054000100010000000000000007000000", @ANYRES32=0x0, @ANYBLOB="20000100", @ANYRES32=0x0, @ANYBLOB="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"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) write(0xffffffffffffffff, &(0x7f00000000c0)="842a0a65bd8c2b", 0x7) (async) write(0xffffffffffffffff, &(0x7f00000000c0)="842a0a65bd8c2b", 0x7) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0380000000000000300012800b0001006765b5c32245b5fb2f0be431da566e657665000020000280060005004e2200000500080001000000"], 0x50}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0) (async) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0) 1.554543411s ago: executing program 0 (id=1455): socket(0x2a, 0x2, 0x0) (async) r0 = socket(0x2a, 0x2, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$bt_hci(r1, 0x84, 0x7c, &(0x7f00000010c0)=""/4111, &(0x7f0000000200)=0x100f) (async) getsockopt$bt_hci(r1, 0x84, 0x7c, &(0x7f00000010c0)=""/4111, &(0x7f0000000200)=0x100f) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x41240, 0x0) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x41240, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNGETFILTER(r2, 0x801054db, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) (async) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x8, 0xfff2}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x4, 0x5}}]}}]}, 0x3c}}, 0x2004c840) socket$netlink(0x10, 0x3, 0x0) (async) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) bind$unix(r5, &(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@newlink={0x44, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0xe403}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x5}, @IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x44}}, 0x0) 1.442601366s ago: executing program 1 (id=1457): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x7, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x9, 0x0, 0x0, 0x0, 0x69, 0x10, 0xae}, [@ldst={0x4, 0x0, 0x6, 0x9}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x49) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0x1}, 0x48) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r2, 0x29, 0x4c, &(0x7f0000000000)=0xc000000, 0x4) syz_emit_ethernet(0x7e, &(0x7f0000000240)=ANY=[@ANYRES64=r0], 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r1}, 0x38) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000080)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000000c0)={r3, @in={{0x2, 0x4e21, @empty}}, 0x0, 0x0, 0x0, 0xba, 0xce02cd}, 0x9c) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000280)={0x0, @in6={{0xa, 0x4e21, 0x2, @loopback}}, 0x9, 0x81, 0x6, 0x1, 0x91, 0xd, 0x77}, &(0x7f0000000940)=0x9c) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000000, 0x3032, r0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@ipv6_delroute={0x38, 0x19, 0x1, 0x0, 0x0, {}, [@RTA_PRIORITY={0x8, 0x1e}, @RTA_GATEWAY={0x14, 0x5, @loopback}]}, 0x38}}, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010000000900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a320000000084000000060a010400000000000000000100000008000b40000000005c000480340001800b000100657874686472000024000280080001400000000b080003400000000008000440000000300500020007000000240001800a0001007265646972000000140002800800014000000012080002400002000e0900010073797a30"], 0xf8}}, 0x0) getsockopt$bt_hci(r5, 0x84, 0x76, &(0x7f0000001f00)=""/4062, &(0x7f00000004c0)=0x744) 1.38753119s ago: executing program 2 (id=1458): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x18, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000001000000bfa30000000000000703000030feffff720af0fff8ffffff61a4f0ff000000002d040000000000003d400300000000006504000001ed000079130000000000006c440000000000007a0ab0fe000000007b13000000000000b50000000000000095"], 0x0}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$packet(r1, &(0x7f0000000040)={0x10, 0x6}, 0x14) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000000010104000000000000000002000005240001801400018008000100e000000108000200000000000c0002800500010000000000240002801400018008000100e000000108000200ac1e00010c00028005000100000000000800074000000000100016"], 0x74}}, 0x0) (async) r3 = socket(0x1d, 0x2, 0x6) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000040)={'wlan1\x00', &(0x7f0000000080)=@ethtool_ringparam={0x11}}) ioctl$sock_bt_hci(r3, 0x400448e4, 0x0) (async) r4 = socket$netlink(0x10, 0x3, 0x0) (async) socket$inet_udplite(0x2, 0x2, 0x88) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup/syz0\x00', 0x200002, 0x0) (async) r5 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'veth1_to_bridge\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3400000013000500010000000000000007000000", @ANYRES32=r6, @ANYBLOB="505204070000000014001a80100004800c000280"], 0x34}, 0x1, 0x0, 0x0, 0x24000000}, 0x60040140) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r4) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) 1.33912506s ago: executing program 3 (id=1459): sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="01001fff00000000000801000100"], 0x14}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x26004808) (async) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="01001fff00000000000801000100"], 0x14}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x26004808) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x38}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=@newtaction={0x5c, 0x30, 0x301, 0x0, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xffffffff}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x5c}}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xf, &(0x7f0000000780)=ANY=[@ANYBLOB="180000008f000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000004b702000014000000b7030000fc2e0c000000000000000000bf0900000000000055090100000020009500000000000000bf91000000000000b70200008f640e00850000002a000000b700000000000000950000000000000007ae16ad9c1dea55d9da31392fd49da1021ca9a0be58942e83847cea3e7ca812"], 0x0, 0xb, 0x0, 0x0, 0x41100, 0x2f}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xf, &(0x7f0000000780)=ANY=[@ANYBLOB="180000008f000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000004b702000014000000b7030000fc2e0c000000000000000000bf0900000000000055090100000020009500000000000000bf91000000000000b70200008f640e00850000002a000000b700000000000000950000000000000007ae16ad9c1dea55d9da31392fd49da1021ca9a0be58942e83847cea3e7ca812"], 0x0, 0xb, 0x0, 0x0, 0x41100, 0x2f}, 0x94) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) (async) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) r2 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000340), 0x8) ioctl$FS_IOC_FSGETXATTR(r2, 0x801c581f, &(0x7f0000000740)={0xffff1e9d, 0x8e, 0xf, 0x2, 0x2}) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000540)=""/81, 0x51}, {&(0x7f00000006c0)=""/95, 0x5f}], 0x2}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000640)=@newtaction={0x5c, 0x30, 0x7, 0x0, 0x0, {}, [{0x48, 0x1, [@m_bpf={0x44, 0x1, 0x0, 0x0, {{0x8}, {0x1c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x5c}}, 0x0) (async) sendmsg$nl_route_sched(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000640)=@newtaction={0x5c, 0x30, 0x7, 0x0, 0x0, {}, [{0x48, 0x1, [@m_bpf={0x44, 0x1, 0x0, 0x0, {{0x8}, {0x1c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x5c}}, 0x0) 1.28684132s ago: executing program 1 (id=1460): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) (async) r1 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) (async) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r5], 0x1c}}, 0x0) (async) recvmmsg(r1, &(0x7f00000009c0)=[{{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000380)=""/185, 0xb9}], 0x1}, 0xb}], 0x1, 0x40012163, 0x0) (async) recvfrom$phonet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 1.286324286s ago: executing program 0 (id=1461): syz_emit_ethernet(0x7e, &(0x7f0000000300)={@local, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x48, 0x11, 0x0, @remote, @local, {[], {0x4e20, 0xe22, 0x48, 0x0, @wg=@cookie={0x3, 0x2, "88c73b21f267636d01dbe5712c1c941e1cdafbbb43f09c28", "e13808ca72381f41e5fff9620915b6f78670dfaf9a2038083179cf6b7931c9b4"}}}}}}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001cc0)=ANY=[], 0x0}, 0x94) r0 = socket$tipc(0x1e, 0x4, 0x0) connect$tipc(r0, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x5}}, 0x10) (async) connect$tipc(r0, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x5}}, 0x10) sendmmsg$inet(r0, &(0x7f0000006740)=[{{0x0, 0x0, &(0x7f00000056c0)=[{&(0x7f0000001240)="80349c0d9e8fcc9f44658138dc4a3c4ad42f918348474a5bc38ff0e0571fc22c8eb5cb22fdf30ced1a4c1ccb5e5b35fed7db48c1a8a7132adc5623d146ddfe2254dd2579b4284b53d1cea6206864473d31bdb00c9d1462458b678827e80c94d88099e7471a58b1463086f9cdd1ccc19fa2fc4a9dd5a56fe782d15e66648c7630f1aaa7e9820460c46e292dbb8fa6f6701048ff17f46097b1ee0750ed038f18b81b2ba014bf866062c9a6f88b5d07e13b7eddd968ba9c7a53609c7b61471a51fd85bceebc0a92b2cd7c45a7f4571e693abebc3c5ff16c8128d92476", 0xdb}, {&(0x7f0000000280)="5b4ea50f20d7212327afde5e7a457cde2dff791c69fbc3", 0x17}, {&(0x7f00000002c0)="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", 0xeb}, {&(0x7f0000001440)="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", 0xb82}, {&(0x7f0000002440)="253c10cd0a56ebbb9e8b465670109c340c95f1d27d36cbeb7fa948545e9b18da346b70b5dc6ea12ad1a30e4f7038336f1af1d61b04de988f1755e9b3ba9919b2a4952ceda920a7f0e22dd239d4a74f2d1c854bc64f09f979aa3e9f5c25ff8ec189e5d809483583f648cd8870291200e428", 0x71}, {&(0x7f00000024c0)="2ba671ae8107530b978dd82841597ed8f4275ed9e6b9f7b73ee6324ddf688ad9d88125b82afd2e28aef7183086ce0dd4ee880fc56a2ca8b52ef8f5b5f3e475f49b0bcd201fe612703d680fdd1151dd32535b04d4697d472c7750d6c4c197162e9f872253b611b1ca20e79dcf40d1faf58a453f8db9a03fdd351b54ad4e77fa0fda7990bb281079ae7ba3994aef7380e1d6342305e2d12c57379fd12e784f48e4e832171df4576c8724e3bfd70ebc92fc11914cd4", 0xb4}, {&(0x7f00000025c0)="96cb9dfd0c61d5ed863c5a35109d427201da53416c37631f95451a170fdb734214157996b04630903a7ad20aca669b5120871c47c6ef4e5975222b9676223895144ae5c2898ba0e94642e43e374bf9515c7e840e62021f25181401bda4c4d2d77867390c0a05af019adabfe896d7824f0dcb1724c64da40478808059ea83fa60145e108809ca25edf6ab820f23a5ce2b1779aa8c037a26d99df56f39ff5beca1c1e0cbfd69e415971a02f5115f6da0ba6da9be9772efa870aa6b62774ce009e7bcca4b4a7a910aab97e7f3da899eaaf573ac8a926a7be9b5875b3bb707ae9124ead39e70948bcf654b6b4342043f756323494e4ec559866c5a480c3b156c0427f1cc1d373b77424ea38e3697e36dcefd261575e5516bfcedc7baa8cbebed0ce49dd27e6291dd6f968eaf37f13313ba0bd22b6a63496be04a42df10fef87386434103b5ef819a969e8792a7765dc52c310fbe89851eaf8b2eabcf27bd487f817d48a54b0c7e8b151f0941a6f4adcf6a4486f96f8d18a2928829db333ec08bffe029f4840fdc0433d75157e80b33c3041f193e5c3fb1b7c13d1d7d7a8fe3122ddef181a6534232731c8f91dae42d9a66b9c2e0c6de6da74c24752b53d344b3c9a48ed62705c3e93f7e346c0379a6ec672b3a73dcfc159a79a77bd7b9edd013e3e9832d4dca6f9f973d63d5d235c7e22822e012e4181e102e68b03bdec323db739968061a7ba6fcf9589bd2975520fe9f1b44e52489bf5f5b0125b14bc894f4ff1ad2ba817dad6ab1654a2cacce1cc5160ea4bf3d7011cbf16ad0389b6511448c4186da0a7a55be54031a6d2773ac33aab5d533e7bb213309193f2ca3970e8fffc2fdacbc96e6f49c116b0505385a8bf282589be6b844e2aaaa652459b5d021127f59009020d34932cd03fbe5fea45bdc1f68463c4afe2b5ea8f97dee5e2e6b58196aff00e5ca51a0087f02bcb1dbdd638a5c7590095561578c30904f7ea80072de21fcedd0e41da8e7fe3514eaabc603d770a6fbed5367edb7feb5c5edfda04c7b8a4bfce5c73b876f52fde7dc929f3ffa632eb9514596793533d20fd191b484e902ab104dfc34a8486ba64d3e31c495e043279d8d6b4e6ca3c3fd4ae43529e55be690309e1bc90af2e9188cd5673eea73c75d4decf8972039c086e4b47caee900e1422fd2fbe0303dd5147a9fa487a7b08ad529d0d3db2bae4b26a83de0b15b9b82f26b23336481aca875c48605dc8d25d872920d01e2e163cc13d1f026666f8f54d6fe7895b47939599d168dc98a2de4aac463d98cb39375ac13fadd722b9f1e221d35bde594c9e53aa0f34b235a9d68d8f4841f9455804cd8a7bf05315c5bab2fa8820e956a8161cdd685fc4e1344f9d89189057376a5d1c23273d475aaa72ccbf4b5d8f2863f3f0fe7c0f8b001c065bae68aad9d8878a5edcd8dcbeec07d317c0a81fc84b8b208c60db73c6cf86d46cac98a7df449581d74be7991f1fa6924b76a2d6077aacca10fc777f0d09c5420cfc38c4638957086c9a2065ce94a286da01527bd8b8fd5830f93bcab97a4d0ca13c55b4ee32a49e078b4d79e7b17200fb6a550cfcccd33c681e37bc83c7fcda081a67c2a828e65a75df33e587a05f75fe05aef4078b3482c9078e2edb63c74134f92461044871e4a71f40228d156cbb3beb53eb898e0b6ade2d486a7111ce074510ad957f0eeae0812dd3802db231d9a15948a6b133167eb51dde0199023dfb3471661c7f13f14e786278c551d60929ef969b15d4ea544a9cda830183052ca1072083fb304502f38bcfd46ef64091a2a64bacc55ff3e91f8a7a97f69a9524bdaa60c14d75ddb44e399158c603cded78f42b79a6e9b9c30575289a92558f4d1d9cbb35780c86462cb56d5b474901c17df6ccba95481c004c384b17f99fb29458c9c59666c5305c508561e654d5f1b8ed375231358828b73b487c5f3096211f863375333bb1d3970f7c4cbc7b0f122dbb330b24498f38d804ec0e9c8a5976578bfbc2e46e8d898ec08b3742d5f9ba03d56567f6541f075c4f45eec94a6af78065689e8851294c48f02d48b1266586db86266bd2d0cbb729b567ed7643edf6849f50ca7a28b4ef59433ff22ce0680ffb3348a458ff77b6a796e849cb456df4b443d625d423d10e21bf0bcc785a243cf70ed2ea7c52548cd366ad9af486a4a0171f21ee9d961aa808a69a066aeb0c605fe7a83291ba942df3d11ba1e12da7381d7af20ccbd0de5416ef389c65d1fd0ff209dce808c490707a371b317ce65765082d1c5f67846ddfa65f291117d6e5a795ac2961d56eb24060d8b160d5bd146cd61589c00a108a1dba9e8730157e403cc35b0cd64b3aa66eada80be3bbb974d4642aa76bdf87c2d63134af1c646b1f0bfd218d4e4ebd277ad1cfc9b6f20c4036c6a511cb1ce486c3a563ca9368b10bed088bcfcdab752e0c78a10e550544ee6250d3908e3e7b09b2119f94abc2fdf43d7c82a4ffce81a3f962124ace1108443f41202c6d055d37e99b4eb6287c485acabff03f3a115db1ec790fdc5436e97bf2443c2f707ffb513f6d6494812b2238d679c8787a854ec92126bdc4681803ed4a5b84590e4f00ce956c6c3394773303b0620d118d2290cb229ea3b9bb9de8d719a0f92a50d34909a363f5f6ff906326f917be78c914c78846ef30c9b107b26c0a55401ceabf5b3c669eaa7a1a36d97b01d5da410366e3da5d232fb711d26afd9d4a5016425e47c0ec9b6305673af4cb46526af752011793c322797fb706042da364b6e723b513fd73db6721b00bd80e0923fe075300951d4dfefdd029c3fed21b734bf102f96d58b50bf4edcad014670c2d93eeb4d7bda3d1b70d9e21262c644bb96855895e4c0b32c9ed599d940ac24814b69812c124648428e13d7f72d74feb30288eb78b4a99fadc96589d8a9c7047787aa802514ba28af4d5520ac50928cd75ca92e2934a2e126456bfe1587003e87d9428b1fdb6b7662c44a5fee9d537b7f43822e5b103aeece1aa603215c215de2873e3a6b327c5ed0a0190fb7645034e1839ad165f3f7f80fd793734ac1412bbe20d82aea543792047ba5c5b37ee11988cd7e71cd43547e13c6bbc1ce3cf6aff9727381f06feb83b23b694724d9259d3736eba6ee66ee73a224b8a978debbbc35f8e28cc8267646e5c8cd8076d2044d41eadce01738ab2c7dc763de5a8042b957680223c4d9fdbf65d17e8998444e8db36c50fbe3c9a83e506661a029c4538617d46b6a43675c6dcf283a45b99e44188fd2681a50747e819e7f37496207ec448670fe62a3cb94712abeafb5dd2690ec12b18f8d67d5b0db41a897124f8b94695501aba517447338034bf14d0f99cbf5518aa013e1f35a052b4d27d1247349ff7a83362444372f017fcbdfe972b91c46a0a57f4639204673341ae92bc2dbf2b8d1680b432552850964eb1e14f38995e7e404b1bd1bf63d8d58c7b4ec38e3b9e73959e6509ad9f67d684f62759f5cae90bf8c1781b5800922c312aa634e5748b6181fc37df267eb5c66afc0c9249f9f601136c78d817beddf308c6970ee0e8221abe6fa124f55de7e5e78398004095a175f58cc270840e8c6759627f139e4f9b3b362e2700c5d06da66e862d1016c9f89d18646a6bb823f992342433b03397ed7586f489824a1495d707c81d3885029a47845802ef97856e530789a5cb7239752c6509cdd094212cb4b1b8baa7416cf5000db59418ad7f7a0d7d8e4cb8ebbbe4c40ba0ccc25283b9c933e251fff9871fc01026fafd8eed7ddcbe454b79339be93cd4b25a55af449f5c0893a957c5468c9147a973478c834ac4ecfea339cf3", 0xa9b}], 0x7}}], 0x300, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x6, &(0x7f0000000680)=ANY=[@ANYBLOB="b40900000000000061111000000000008510000002000000850000005000000095000000000000009500000000000000752791631222a4b4dbffcb3e429313c626d8575b733278661f13493d24a9e56d000045361df4f2d2d4f8c2f01b4ebc5e56040b1134ecdb1e1f38ce94b48a6e6325a3c0fa265afb4cfef8a901af313b77f13a966aeb27ccb654fac79ae10600000075fa8341a6875728e9a45938c338b7a958249211eb70d5d978eff738aa6be2d07fedb69c65b63dd665e66a92dec0189df1c319c72478e432b17c45bec66c923fb483a6d4e050bfaa8f8f85364f849802fa2c3b80975e8753560000f0c313d9c19ebc37219f14fbcdd539b9b96af3000000000000a5ba432868c94d89a587a608d4a2775463f6ac50a87677ff52cdc32c5ca6b15a0f7dd116bf074bdf18f78df0a7ea01bf1b70dc492fb776d382e53f33275334ab9055204cf808192fe7965d545adc3025140be6c4ce9c53a78654d285020c3ed1802e4905bdaf45b00ca255fc9720af279d003823d909e0028d0e54b3bbab4040064c8075fb861c0957378d1aa25363fe4e6ee692dbc22d130f06b86ea597aa9147723879c8f36b42109343d97e02186e240d1c455ab6e5bdd818e196a93467649726cd2c134ede56f61c9b8da92eee2a520a1de4078d326bb41cf0e5e83f9354fabeb8f726aa631253e5cb18e2268a4c530df35d2e40646363b84d6e3cc37809dc3dc91b1747d982b00d04f69400"/542], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0xe}, 0x70) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x4c) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x4c) 1.233190387s ago: executing program 2 (id=1462): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}, [@ldst={0x3, 0x2, 0x3, 0x1c10a1, 0x0, 0x3e}]}, &(0x7f0000003ff6)='GPL\x00', 0xa, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7}, 0x48) r0 = socket$kcm(0x2, 0xa, 0x2) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r4], 0x1c}}, 0x0) write$nci(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="6103064b0602818101ce43"], 0xb) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000240)={'ipvlan0\x00', @broadcast}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}, [@ldst={0x3, 0x2, 0x3, 0x1c10a1, 0x0, 0x3e}]}, &(0x7f0000003ff6)='GPL\x00', 0xa, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7}, 0x48) (async) socket$kcm(0x2, 0xa, 0x2) (async) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)) (async) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r4], 0x1c}}, 0x0) (async) write$nci(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="6103064b0602818101ce43"], 0xb) (async) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000240)={'ipvlan0\x00', @broadcast}) (async) 1.174607958s ago: executing program 3 (id=1463): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@mcast1, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x4e20, 0x4, 0x1, 0x0, 0x2}, {0x10002, 0x65ad, 0x1, 0x0, 0xfffffffffffffff8, 0x802b, 0x8000000000000000, 0xfffffffffffffff7}, {0x2, 0x8, 0xfffffffffffffffc, 0x8}, 0x0, 0x0, 0x1, 0x0, 0x1}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x2, 0x6c}, 0x2, @in=@empty, 0x40000, 0x5, 0x0, 0xb7, 0x10000000}}, 0xe8) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000001f0900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0104000000000000000002000080400004803c0001800e000100696d6d6564696174650000002800028008000140000000001c00028018a064b93b1932cb000280f4ff010073797a3200000000df23fd2afffffffd0900010073717a000014007ea7380000110001000000000000c300000000000a00000000000000000000000000000038ebaa2c4e77cf7aefdbd4fabc1c3780fb9fc6ebdc2e4165d41da680507712da5d657b2664f1ea9f89eeed9ba0ec00599797f01441dbccfe562610e4ac2c3e5ed3f944a5c48eca96a976694ea37fb033"], 0x94}}, 0x0) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000100), 0x8) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r4) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f00000001c0)={'syztnl1\x00', &(0x7f0000000600)={'erspan0\x00', 0x0, 0x90676c5955f41219, 0x7800, 0x0, 0x200, {{0x2e, 0x4, 0x1, 0x3f, 0xb8, 0x65, 0x0, 0xe9, 0x2f, 0x0, @multicast1, @broadcast, {[@ssrr={0x89, 0xb, 0x60, [@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback]}, @generic={0x83, 0x12, "a70377b8248e282598c1c559757ad8ec"}, @end, @lsrr={0x83, 0x23, 0xbb, [@empty, @multicast1, @empty, @multicast2, @rand_addr=0x64010100, @local, @private=0xa010100, @broadcast]}, @cipso={0x86, 0x60, 0x1, [{0x5, 0x11, "bc34ff25475403d362286cde76f37d"}, {0x5, 0xd, "37d082c0e3f6fc744462fe"}, {0x1, 0xa, "7fcc961fb88f2af2"}, {0x5, 0xb, "f70e668eb4f418edfc"}, {0x0, 0xd, "e84112944907f904eb9b6a"}, {0x2, 0x5, "790c02"}, {0x2, 0x3, "7f"}, {0x7636d2b197869ff1, 0x12, "438d59050985c331fe57ee43c6ee4939"}]}]}}}}}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000300)={r4, r5, 0x25, 0x10, @void}, 0x10) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r6, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x2, &(0x7f0000000180)=@gcm_256={{0x304}, "5d4b42fac245ae74", "21cb70af1a8d3978b3ad1a2c6ede97acca25f6a9000bab0d716e9ebdee04ab7e", "b65dab43", "9a2c4361134d8abe"}, 0x38) shutdown(r6, 0x0) close(r6) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r4, 0x84, 0x20, &(0x7f0000000240)=0x20, 0x4) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="380000003e0007012fbd7000fcdbdf25047c0000040000002000018006000600800a000014001900fe"], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="60000000100001040100"/20, @ANYRESOCT=r0, @ANYBLOB="7b1300000000e0084341efb01888e9a48b9a4200003800128008963a", @ANYBLOB="e280ef8ca39aff491de9b40e144f13c5c3dad2602c8d058253", @ANYRESDEC=r1, @ANYBLOB="9b1e4afbff782c895815939a8545e3b7e4f788c52312ecbb9bfd315bcceae58b5c8e3b31463bd2a5c250bbe421f6b408ea941bb66d9a39f1b8489d0a37b3a2902c2acf772a2c8c7b0195cb12a3517b6a50", @ANYBLOB="a5920716f2f49e9148e626774838bdf6170fe9c177b98e7fe03bf34711d4cc9d23977708cb7b7b86216149644859aaa6cdb929fb8b78bfa1ba7ebb39322d0e2300c9c17479a91dbd9dbefcd691db0480e3f470f980ed58b53739a0136f10e6e33c356784c44e0d46556a65918003fb61b1d2d5ec4ac63bc9ddebe5fc2965d4b73147a473937f2e33cec7a5a6baaad4a27ab3c392a97d007063703c6282a059c9d6c04b7621263578ee1b0bf3a8b73ccbceded70e67db909bebb756229f4177db74"], 0x60}}, 0x0) 1.024086682s ago: executing program 1 (id=1464): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000002140)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(michael_mic-generic,xchacha20-generic)\x00'}, 0x58) r1 = socket(0xa, 0x3, 0x3a) setsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000040)={0xf000, 0x939, 0x6000, 0x4c2b}, 0x8) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000000)={'ip_vti0\x00', &(0x7f0000000180)={'syztnl0\x00', 0x0, 0x80, 0x80, 0x3, 0x5, {{0x1c, 0x4, 0x0, 0x3, 0x70, 0x64, 0x0, 0x2, 0x2f, 0x0, @private=0xa010102, @multicast1, {[@timestamp={0x44, 0xc, 0x72, 0x0, 0x2, [0x5, 0x2]}, @ra={0x94, 0x4, 0x1}, @ra={0x94, 0x4}, @timestamp_addr={0x44, 0x2c, 0xed, 0x1, 0xf, [{@multicast2, 0x1ff}, {@multicast2, 0x6}, {@private=0xa010102, 0x3}, {@rand_addr=0x64010100, 0x88}, {@multicast2, 0xfffffff9}]}, @timestamp_addr={0x44, 0xc, 0x16, 0x1, 0xb, [{@multicast2, 0x9}]}, @generic={0x82, 0x10, "7059661c964ea3f668a7ca26b191"}]}}}}}) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=@ipv6_newroute={0x48, 0x18, 0x200, 0x70bd2d, 0x25dfdbfb, {0xa, 0x0, 0x0, 0x3, 0x82}, [@RTA_PRIORITY={0x8, 0x6, 0xe}, @RTA_PRIORITY={0x8, 0x6, 0x6}, @RTA_MULTIPATH={0xc, 0x9, {0x2, 0x5, 0x4, r3}}, @RTA_MARK={0x8, 0x10, 0x2}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x8}]}, 0x48}}, 0x0) setsockopt$MRT6_TABLE(r1, 0x29, 0xc8, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x7, &(0x7f00000000c0)="fbffffff", 0x4) 1.012366143s ago: executing program 4 (id=1465): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c00028005002100000000080500010004"], 0x4c}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'batadv_slave_0\x00', 0x0}) r2 = socket(0x11, 0x800000002, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) ioctl(r2, 0x8b2c, &(0x7f0000000040)) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000840)=@delchain={0x5f8, 0x65, 0x2, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0x8, 0xe}, {0xa, 0xffe2}, {0x4, 0xf}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x5b8, 0x2, [@TCA_CGROUP_EMATCHES={0xf8, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0xe4, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x5, 0x7, 0xa10b}, {{0x1, 0x0, 0x0, 0x1}, {0x1, 0x0, 0x0, 0x1}}}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x4, 0x7, 0xdd}, {{0x0, 0x1, 0x0, 0x1}, {0x1, 0x0, 0x1, 0x1}}}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0xfff, 0x3, 0x3}, {0x1, 0x8, 0xfffffffc, 0x8f2}}}, @TCF_EM_NBYTE={0x14, 0x3, 0x0, 0x0, {{0x2, 0x2, 0x8}, {0xad8, 0x1, 0x1, "7f"}}}, @TCF_EM_IPT={0x2c, 0x3, 0x0, 0x0, {{0x9}, [@TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x15}, @TCA_EM_IPT_MATCH_NAME={0xb}]}}, @TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0x1, 0x8, 0x8cc6}, {0x3, 0x2, 0x1}}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0xf73, 0x1, 0x7}, {0x7fffffff, 0x3, 0x1001, 0x1, 0x4}}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x7, 0x3, 0x9}, {0x2, 0x3, 0x466, 0xffff}}}, @TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x4, 0x1, 0x8}, {0x9, 0x9, 0x1ff, 0x3, 0x4, 0x3}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x3cb}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x8}}]}, @TCA_CGROUP_POLICE={0x30, 0x2, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x3}, @TCA_POLICE_RESULT={0x8, 0x5, 0x10000}, @TCA_POLICE_RATE64={0xc, 0x8, 0x7}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x6}]}, @TCA_CGROUP_ACT={0x48c, 0x1, [@m_skbmod={0x80, 0x12, 0x0, 0x0, {{0xb}, {0x14, 0x2, 0x0, 0x1, [@TCA_SKBMOD_ETYPE={0x6, 0x5, 0x4144}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x8000}]}, {0x42, 0x6, "d091a79a82f66fd9a6da32bf02f4f4e4b8486881f52939f1d7a5f68bdb5d8169d64b0493075e9b7f1045d8957f798359d0c6d2de5c4ec6fc363478233f1f"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_gact={0xf4, 0x1c, 0x0, 0x0, {{0x9}, {0x7c, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x2, 0x1316, 0x8}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x579, 0x20000000}}, @TCA_GACT_PARMS={0x18, 0x2, {0x730, 0x6, 0x0, 0x10000, 0x3}}, @TCA_GACT_PARMS={0x18, 0x2, {0x81, 0x4, 0x20000000, 0xbd, 0x9}}, @TCA_GACT_PARMS={0x18, 0x2, {0x8001, 0x5, 0x8, 0x0, 0xfffff207}}, @TCA_GACT_PARMS={0x18, 0x2, {0x6c357273, 0x4, 0x4, 0xfffff166, 0x80000000}}]}, {0x4d, 0x6, "1c4699811f346ea3503a2e07d193e5025ffd8441ad33f1ce08c489f51961b293cbba29befd74b7d9e5ff3d144ae3ee83d7167e539f445aece7ece6c7ea5c4f2f7f43167b04b52eb7f0"}, {0xc}, {0xc, 0x8, {0x0, 0x2bc015127ed51a18}}}}, @m_xt={0xffffff4b, 0x10, 0x0, 0x0, {{0x7}, {0x15c, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x1}, @TCA_IPT_TABLE={0x24, 0x1, 'filter\x00'}, @TCA_IPT_TARG={0x129, 0x6, {0x3, 'raw\x00', 0x2, 0x58, "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"}}]}, {0x31, 0x6, "91e9bea2f611d1973a0364931dd9530b9b3c24e97a857e799103de5234334f29368872c04756eb3ac7be09e238"}, {0xc, 0x7, {0x1}}, {0xc}}}, @m_simple={0x68, 0x9, 0x0, 0x0, {{0xb}, {0x18, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x9, 0x3, ':#\'$\x00'}, @TCA_DEF_DATA={0x7, 0x3, 'xt\x00'}]}, {0x25, 0x6, "fc4765ed21b947d7d1fe38d37bf1768978ae4931be33e81a891fc1071595e2de5f"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}, @m_simple={0xf8, 0x8, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x7, 0x3, 0x1, 0x1, 0x4}}]}, {0xb3, 0x6, "f472b52b896378e2259f3a8dfc9af267969b0652b47aabd2419d8cde535dc47dec802ddba92ab11b10f81d4077a32055e7d11b1c262a0a87d681e33613f03d77ee48bb3856fb8e0729b89647515609367752408d87125718f4682be5fbbc0f11c495254e3ec9129853b9e06e7e17d799a1ad2f85d70999c1ac37e4f017dc59b7afa4a840b3cf737dc46e7649a9b633d951d9c5cb5149ad0ce7cc0777fea03d698aaf0093dac946dded856c8592449e"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}]}}, @TCA_CHAIN={0x8, 0xb, 0x32ef}, @TCA_RATE={0x6, 0x5, {0x7, 0x2}}]}, 0x5f8}, 0x1, 0x0, 0x0, 0x20000080}, 0x41) 973.585618ms ago: executing program 1 (id=1466): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r0, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000007c0)={r0, &(0x7f0000000740)="8a0d", &(0x7f00000006c0)=""/46}, 0x20) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x211000, 0x1000}, 0x20) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0xba0c29e690d41d4b, 0x20000000ec071, 0xffffffffffffffff, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x4) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$nl_route_sched_retired(r2, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)=@deltclass={0x88, 0x29, 0x300, 0x70bd2d, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0xb, 0xfff2}, {0xd, 0xffff}, {0x0, 0xd}}, [@c_dsmark={{0xb}, {0xc, 0x2, @TCA_DSMARK_MASK={0x5, 0x4, 0xc}}}, @c_dsmark={{0xb}, {0xc, 0x2, @TCA_DSMARK_VALUE={0x5, 0x5, 0xa}}}, @c_atm={{0x8}, {0x14, 0x2, [@TCA_ATM_FD={0x8, 0x1, r4}, @TCA_ATM_FD={0x8}]}}, @c_dsmark={{0xb}, {0xc, 0x2, @TCA_DSMARK_VALUE={0x5, 0x5, 0x70}}}]}, 0x88}, 0x1, 0x0, 0x0, 0x4000010}, 0x20000004) 818.826982ms ago: executing program 3 (id=1467): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000004c0)={0x14, 0x2, 0x6, 0x5}, 0x14}}, 0x820) r2 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000080)=0x0) connect$nfc_raw(r2, &(0x7f0000000100)={0x27, r3, 0x0, 0x6}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xd}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x68, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x2c, 0x11, 0x0, 0x1, @exthdr={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_SREG={0x8}, @NFTA_EXTHDR_OP={0x8}, @NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xe}]}}}]}], {0x14, 0x10}}, 0xb0}}, 0x0) 799.364393ms ago: executing program 1 (id=1468): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r1 = socket$l2tp(0x2, 0x2, 0x73) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400000022000100f366d047f7c408ca3a9f472cbd70effcdbdf0100000000"], 0x14}, 0x1, 0x0, 0x0, 0x4000005}, 0x800) bind$l2tp(r1, &(0x7f0000000000), 0x10) bind$l2tp(r1, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) sendto$inet(r0, &(0x7f0000001040)="8932ed209b230927", 0x8, 0x6000c804, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, 0x0, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = accept4(r5, 0x0, 0x0, 0x400) r7 = accept$alg(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, 0x0}], 0x1, 0x48094) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)={0x5c, r9, 0x1, 0xfffffffd, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_SEC_DEVKEY={0x40, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8}, @NL802154_DEVKEY_ATTR_ID={0x28, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x1c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}]}, @NL802154_KEY_ID_ATTR_MODE={0x8}]}]}]}, 0x5c}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r3}, 0x10) r11 = socket$packet(0x11, 0x3, 0x300) r12 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r12, 0x107, 0xa, 0x0, 0x0) setsockopt$packet_fanout(r11, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb007}, 0x4) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r6) sendmsg$NL80211_CMD_START_SCHED_SCAN(r6, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000340)={&(0x7f0000001080)={0x6e4, r13, 0x2, 0x7fffffff, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x0, 0x6}}}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x8, 0x8}}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0xff}, @NL80211_ATTR_IE={0x367, 0x2a, [@sec_chan_ofs={0x3e, 0x1, 0x1}, @mesh_chsw={0x76, 0x6, {0x8, 0x1, 0x1d, 0x3}}, @chsw_timing={0x68, 0x4, {0x0, 0x81}}, @preq={0x82, 0x4c, {{0x1, 0x1, 0x0, 0x0, 0x1}, 0x47, 0x1f, 0x8, @broadcast, 0x9, @value=@device_b, 0xa, 0x2, 0x4, [{{0x1}, @device_a, 0x1}, {{0x0, 0x0, 0x1}, @device_b, 0x2}, {{0x0, 0x0, 0x1}, @broadcast, 0x9}, {{}, @broadcast, 0xa}]}}, @fast_bss_trans={0x37, 0x9d, {0x7, 0x3, "2d1d7e3a23384368f8450ddc5360dab3", "1668f120fa7d03241c3da33d1aebb366c11d1155d983ff81c3e0e2dec788ab60", "6ab3339ee10ae14db1d1cb8f0ce3e469f327b8ea430cd6f67df01702b3793317", [{0x3, 0x17, "1e50767e94823a0c21630928e5db2b9fa114ced44edfca"}, {0x2, 0x13, "188051c0a4e8dd57dde7f31b2f1bb601a7240f"}, {0x1, 0x1b, "46722d54517b13064e63437e8119dc2532c708a695c7a4eda39487"}]}}, @tim={0x5, 0x5e, {0x3, 0x82, 0xc, "ec404b55312010057bc602626d85916c30509b67417c47873223789559389118574ba044fc710d6596e74dae9a381a7038d17e11472b7addc71cda9957dfe69e10d972fdf6f4d11b8e3d4f8f8798d91e19789530634d218d847b66"}}, @fast_bss_trans={0x37, 0x5b, {0x0, 0x1, "45a381e61760eb714ffbf014f04962be", "caf85f4185aeaa3cb24a5d499a873cd42ff6362fbe01b56a515ba5127cf76453", "342e3ea6ffdc8d9207e642abcdc2f4fb79554755437a0496c81885a502cb476e", [{0x4, 0x7, "b3a8fdf4a761a3"}]}}, @perr={0x84, 0xc9, {0x10, 0xd, [{{}, @broadcast, 0x5, @void, 0xb}, {{}, @broadcast, 0x6, @void, 0x30}, {{}, @device_b, 0x2, @void, 0x30}, {{0x0, 0x1}, @device_a, 0x0, @value=@broadcast, 0x11}, {{}, @broadcast, 0x10000, @void, 0x1}, {{0x0, 0x1}, @broadcast, 0x5, @value=@device_b, 0x2}, {{}, @broadcast, 0x0, @void, 0x18}, {{}, @broadcast, 0x800, @void, 0x1f}, {{}, @device_b, 0x80000001, @void, 0x3d}, {{0x0, 0x1}, @device_a, 0x9, @value=@broadcast, 0x27}, {{0x0, 0x1}, @device_a, 0x59, @value=@broadcast, 0x3}, {{}, @broadcast, 0x200, @void, 0x29}, {{0x0, 0x1}, @device_b, 0x8, @value=@device_b, 0x3f}]}}, @perr={0x84, 0xdb, {0x80, 0xd, [{{0x0, 0x1}, @device_a, 0x4, @value=@broadcast, 0x17}, {{0x0, 0x1}, @broadcast, 0xf66e, @value=@device_b, 0x1}, {{}, @broadcast, 0x1, @void, 0x2a}, {{}, @broadcast, 0x8f, @void, 0x1e}, {{0x0, 0x1}, @broadcast, 0x8, @value=@device_b, 0x25}, {{0x0, 0x1}, @device_b, 0x0, @value, 0x2f}, {{0x0, 0x1}, @broadcast, 0xd, @value=@device_b, 0x16}, {{}, @device_b, 0x4, @void, 0x22}, {{0x0, 0x1}, @device_b, 0x7fffffff, @value, 0x3}, {{}, @device_a, 0x4, @void, 0x19}, {{0x0, 0x1}, @broadcast, 0xf, @value=@broadcast, 0xf}, {{0x0, 0x1}, @device_b, 0xffff, @value, 0x1d}, {{}, @device_b, 0x6, @void, 0x14}]}}]}, @NL80211_ATTR_SCHED_SCAN_MATCH={0x22c, 0x84, 0x0, 0x1, [{0x90, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @random="4317af6ba5b9"}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x4c, 0x6, 0x0, 0x1, [@NL80211_BAND_LC={0x8, 0x5, 0x3}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x1}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x4d}, @NL80211_BAND_LC={0x8, 0x5, 0x88}, @NL80211_BAND_5GHZ={0x8, 0x1, 0xda6}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x10001}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x6ce}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x946}, @NL80211_BAND_LC={0x8}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ibss_ssid}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @from_mac}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x4}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x7f}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ibss_ssid}]}, {0x64, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0xb1}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x5}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @from_mac}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ibss_ssid}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0x15, 0x1, @random="74605911ec4a7b0cdfa3050512598281e3"}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ap_ssid}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ibss_ssid}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x24, 0x6, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x8, 0x2, 0xa1}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x1ff}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x4}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x8}]}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @random="4f42bf466d73"}]}, {0xcc, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ap_ssid}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x5}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x6}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ibss_ssid}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ibss_ssid}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x1c, 0x6, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0x8}, @NL80211_BAND_60GHZ={0x8, 0x2, 0xa61d}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x9}]}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x14, 0x6, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x8, 0x0, 0x6}, @NL80211_BAND_LC={0x8, 0x5, 0x2}]}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x4c, 0x6, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0x8}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x8001}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x7f}, @NL80211_BAND_60GHZ={0x8, 0x2, 0xe598}, @NL80211_BAND_2GHZ={0x8, 0x0, 0xe0a}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x3}, @NL80211_BAND_LC={0x8, 0x5, 0x10}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x632}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x400}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xc, 0x1, @random="5c5c6a4650606403"}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ap_ssid}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0x1d, 0x1, @random="a85f4358249c484a6b5cb603990654a8b02cbcc4a3819d67a9"}]}]}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_SCHED_SCAN_MATCH={0x8c, 0x84, 0x0, 0x1, [{0x38, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ibss_ssid}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x1c, 0x6, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0xfffffff7}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x4}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x5a9}]}]}, {0x50, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x8}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x7}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x7}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x7}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x14, 0x6, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x8, 0x0, 0x5}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x6}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @random="9bc31f58d8f2"}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ap_ssid}]}]}, @NL80211_ATTR_BSSID={0xa, 0xf5, @random="6b16d9a8fcd1"}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x7}, @NL80211_ATTR_SCHED_SCAN_MATCH={0x70, 0x84, 0x0, 0x1, [{0x5c, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0xfffffff8}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x3c, 0x6, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x8, 0x0, 0xfc4}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x4}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x6e}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x8000}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x81}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x8}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x7ce}]}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x14, 0x6, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x8, 0x2, 0x7}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x8000}]}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa}]}]}]}, 0x6e4}, 0x1, 0x0, 0x0, 0x20040800}, 0x4000) r14 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r14, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) 797.679758ms ago: executing program 0 (id=1469): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b703000000000000850000001b000000bf0900000000000056090100000000002700000000000002180100002020782500000000002020207b1af8ff00000000bda100000000000037010000f8ffffffb702000008000000b70300000000000025000000060000009c2300a400000000b5030000000000008500000076000000b70000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$AUTOFS_IOC_SETTIMEOUT(r1, 0x80049367, &(0x7f0000000240)=0x200) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) (async) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async, rerun: 64) r6 = socket$kcm(0x2, 0x3, 0x2) (rerun: 64) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f00000000c0)=0x800, 0x4) (async) setsockopt$packet_rx_ring(r7, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x770, 0x0, 0xbabd}, 0x1c) (async) write$tun(r5, &(0x7f00000012c0)=ANY=[@ANYBLOB="0800080007030300020014"], 0x36) (async) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x7c}}, 0x0) (async) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc0000000}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x5, 0x0, 0x7, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xf1}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x9, 0x2, 0x0, r2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe5}, 0x94) (async) r9 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_CONFIG(r8, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x118, r9, 0x300, 0x70bd27, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3274}, @IPVS_CMD_ATTR_DAEMON={0x58, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_1\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vlan1\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'macvlan1\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x10}, @IPVS_CMD_ATTR_DEST={0x54, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@local}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@dev={0xac, 0x14, 0x14, 0xf}}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x401}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xc64}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xfffffff7}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}]}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x4}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}]}, 0x118}, 0x1, 0x0, 0x0, 0x40000}, 0x4045) 769.553428ms ago: executing program 4 (id=1470): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x69, 0x10, 0x9c}, [@ldst={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}]}, &(0x7f0000000080)='GPL\x00', 0x3, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) 698.896221ms ago: executing program 2 (id=1471): r0 = socket(0x10, 0x3, 0x0) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000000)={0x0, 0xb}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f00000001c0)={r1, 0x6}, 0x8) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x80800) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r4, 0x89f1, &(0x7f00000002c0)={'ip6_vti0\x00', &(0x7f0000000140)=@ethtool_cmd={0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffff7fc, 0x0, 0x0, 0x0, 0x47, [0xfffffffc, 0x80]}}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000002c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001000010000000000300000000100000a300000000b0a010800000000000000000100000808000f40000608000f40000000050900010073797a310000000020000000020a01040000000000000000050000050c00044000744c0000000001140000001100010000000000000000000100000ace5a1d1d2482870c2266df6bdbd45f47feb2d2df703f55805471b7b9dc55249e4aa1d01533b129dc6ba36f0b842a3c74b9dcce"], 0x78}, 0x1, 0x0, 0x0, 0x40000}, 0x8050) sendmsg$NFT_MSG_GETSETELEM(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[], 0x280}, 0x1, 0x0, 0x0, 0xc04}, 0x8080) recvmmsg$unix(r3, &(0x7f0000000840)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000440)=""/243, 0xf3}, {&(0x7f0000000540)=""/135, 0x87}, {&(0x7f0000000600)=""/165, 0xa5}], 0x3}}], 0x1, 0x40, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0xfea3) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0xb0}, 0x1, 0x0, 0x0, 0x8004}, 0x10) sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, 0x0, 0x10, 0x70bd26, 0x25dfdbff, {}, [@ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x8cd}, @ETHTOOL_A_RINGS_TX={0x8, 0x9, 0x80000000}]}, 0x24}}, 0x80) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000005e"], 0x1c}}, 0x0) 693.184221ms ago: executing program 3 (id=1472): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @none, 0x701, 0x1}, 0xe) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0) writev(r1, &(0x7f0000000400)=[{&(0x7f00000002c0)="a609a89c9edd34187123b5adceb3968557f4e107445a53c0815c9636d00f896d1e8cd8de77a79f1e3e2c53ddf1bb9f8ac5cb5257ff4e8b960026bc4244c4b09179a97dffdf02563e23546d3e78f944e7e2fee2a00b6313048fe354223318badb21d8c086669c5f7772f4a6d90d0997babdf79f7d557e055b3e6f2e4f41ec06a39a57b9ccc00bbca22395e41f9e9652af665f0e1603fb85d4799d54d44c706ff8df9bb805b182a1260b5936ae44f649b5e2fdca240984dcd0033ec28aeaaa686608", 0xc1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) setsockopt$MRT_TABLE(r1, 0x0, 0xcf, &(0x7f0000000000)=0xff, 0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x4, [@datasec={0x2, 0x1, 0x0, 0xf, 0x3, [{}], "00ba00"}, @datasec={0x0, 0x0, 0x0, 0xf, 0x1, [], 'k'}]}, {0x0, [0x0, 0x5f]}}, &(0x7f0000000400)=""/188, 0x44, 0xbc, 0x1}, 0x28) r2 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r2, 0x84, 0x1e, 0x0, &(0x7f00000000c0)) 602.145805ms ago: executing program 4 (id=1473): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000004010000000900010073797a30000000003c000000000a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a30"], 0xfc}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r3) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r5) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r9 = socket$unix(0x1, 0x1, 0x0) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) r10 = socket(0x2, 0x80805, 0x0) connect$vsock_stream(r10, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r3, 0x0, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r13 = socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r13, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r13, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="94000000", @ANYRES16=r14, @ANYBLOB="05002abd001c5bea54e67d285cdb00000800030000000000000000", @ANYRES32=r15, @ANYBLOB="70000e008024ff00080211000001080211000001080211000000340002000000000000000000868000000100030104040600020c0056ff0602460025030000f52a01012d1a00101f0180000000000000ff0055000f00000008000300000004720603030303030371070101ffff02040008000c0001010000"], 0x94}, 0x1, 0x0, 0x0, 0x20004090}, 0x0) sendmsg$NL80211_CMD_SET_CHANNEL(r3, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r14, @ANYBLOB="f7ffffff0f0e60000075000000050019010e000000080022017f0200e2050118010700000005001901070000000000b8"], 0x50}, 0x1, 0x0, 0x0, 0xc1}, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newqdisc={0x7c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {0x0, 0xb}, {0xffff, 0x6}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x4c, 0x2, {{0x100, 0x7ff, 0x6361, 0x5, 0xffffffed, 0x6}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0x3, 0x9}}, @TCA_NETEM_CORRUPT={0xc, 0x4, {0x8, 0x9}}, @TCA_NETEM_CORRUPT={0xc, 0x4, {0x3ff, 0x8977}}, @TCA_NETEM_JITTER64={0xc, 0xb, 0xfffffffffffffffa}]}}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f00000003c0)={0x0, r6}, 0x10) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=@newqdisc={0x78, 0x24, 0x1, 0x70bd6a, 0x80000, {0x0, 0x0, 0x0, r8, {0x0, 0xffff}, {0x2, 0xb}, {0x0, 0xb}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x7f, 0x0, 0x5, 0x1, 0x9}, 0xb, 0xfffffffd, 0x80008, 0x5, 0x6, 0x1, 0x7, 0xf, 0x8, 0x9, {0xffff1c72, 0x7, 0x1000, 0x102, 0x2, 0x5}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x24008820}, 0x4008000) 466.196823ms ago: executing program 3 (id=1474): syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000000c0)='ns/ipc\x00') r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x88802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCGNPMODE(r0, 0xc008744c, &(0x7f0000000000)={0x283, 0x2}) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(0xffffffffffffffff, &(0x7f0000000100), 0x10) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'team0\x00', 0x0}) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000003c0)={0x0, @empty, @initdev}, &(0x7f0000000400)=0xc) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'gretap0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x4}, @qdisc_kind_options=@q_ingress={0xc}]}, 0x38}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'nr0\x00', 0x0}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000004c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000500)={'batadv_slave_1\x00', 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@bridge_newvlan={0x28, 0x70, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r10}, [@BRIDGE_VLANDB_ENTRY={0x10, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_TUNNEL_INFO={0x4, 0x4, 0x0, 0x1, @BRIDGE_VLANDB_TINFO_ID={0x8, 0x1, 0x34000}}}]}, 0x28}}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={0xffffffffffffffff, 0xe0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, &(0x7f0000000580)=[0x0, 0x0, 0x0], &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0], 0x0, 0xa3, &(0x7f0000000600)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000680), &(0x7f00000006c0), 0x8, 0x5c, 0x8, 0x8, &(0x7f0000000700)}}, 0x10) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000880)=0x0, &(0x7f00000008c0)=0x4) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000980)={'gre0\x00', &(0x7f0000000900)={'sit0\x00', 0x0, 0x40, 0x700, 0x6, 0x0, {{0xe, 0x4, 0x0, 0x21, 0x38, 0x68, 0x0, 0xc2, 0x29, 0x0, @remote, @rand_addr=0x64010102, {[@lsrr={0x83, 0x1f, 0x8f, [@broadcast, @dev={0xac, 0x14, 0x14, 0x23}, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, @loopback, @broadcast]}, @ra={0x94, 0x4}]}}}}}) r14 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r14, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r14, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r14, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="4c000000100039042abd70000000000000000000", @ANYRES32=r15, @ANYBLOB="01180200031100002c0012800e00010069703665727370616e0000001800028008001500a8bc0d00040012"], 0x4c}}, 0x0) r16 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r16, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newlink={0x60, 0x10, 0x401, 0x0, 0x3, {0x0, 0x0, 0x0, r15, 0x0, 0x1c05}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_TTL={0x5, 0x8, 0x2}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}, @IFLA_GRE_REMOTE={0x14, 0x7, @mcast2}]}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x10}, 0x12) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000009c0)={'vxcan0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000a00)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f00000012c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001280)={&(0x7f0000000a40)={0x804, 0x0, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [{{0x8}, {0xc0, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}]}}, {{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0xb8, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x80}}, {0x8}}}]}}, {{0x8, 0x1, r1}, {0x178, 0x2, 0x0, 0x1, [{0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0xa, 0x7, 0x2e, 0x9}, {0x6, 0x1, 0x6, 0x9}, {0x6, 0x4, 0x8, 0x1}]}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xffffffff}}}]}}, {{0x8, 0x1, r4}, {0xf0, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r7}}}]}}, {{0x8, 0x1, r10}, {0x160, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r11}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r12}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x6c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x3c, 0x4, [{0x6, 0xba, 0xfd, 0x6}, {0x4, 0x8, 0x0, 0x5}, {0x9, 0xfd, 0xd1, 0xcb0b}, {0xfff0, 0x6, 0x7, 0x9}, {0x81, 0x8, 0x5, 0x7}, {0x8, 0x0, 0xf8, 0x5}, {0x8, 0xb, 0x2, 0x1}]}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}]}}, {{0x8, 0x1, r13}, {0x1f0, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xaccb}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r15}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x81}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r17}}}]}}, {{0x8, 0x1, r18}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}]}, 0x804}, 0x1, 0x0, 0x0, 0x80}, 0x20000001) 346.581488ms ago: executing program 1 (id=1475): socket$inet6_tcp(0xa, 0x1, 0x0) (async, rerun: 32) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) (rerun: 32) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x28, r2, 0x1, 0x200, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)={0x54, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60000}]}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x54}}, 0x0) (async) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0x28, r5, 0x1, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1a}]}]}, 0x28}}, 0x8000) 329.953058ms ago: executing program 0 (id=1476): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async) r1 = accept4(0xffffffffffffffff, &(0x7f0000000140)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, &(0x7f0000000000)=0x80, 0x180000) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000001c0)='reno\x00', 0x5) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xd, 0xf, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0x6, 0x9, 0x0, 0x1, 0xe7030000}, {0x16, 0x0, 0x0, 0x6}}, [], {{0x4, 0x1, 0x3, 0x2, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 198.866965ms ago: executing program 2 (id=1477): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x34, 0x3e, 0x107, 0x70bd2d, 0x25dfdbfc, {0x4, 0x7c}, [@typed={0x4, 0x6e}, @nested={0x1c, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @typed={0x10, 0x15, 0x0, 0x0, @str=',.{((&@\'-$#\x00'}]}]}, 0x34}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000300)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01634a046cfe0000000001000000100007800c00018008000100", @ANYRES32, @ANYBLOB="0c000200ffff000000000000"], 0x30}}, 0x20000000) 198.351615ms ago: executing program 0 (id=1478): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) listen(r2, 0x0) getsockopt$inet6_tcp_int(r1, 0x6, 0x22, 0x0, &(0x7f0000000040)) r3 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r6, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000200)={0x54, r7, 0x1, 0xfffffffe, 0x0, {}, [@NBD_ATTR_SOCKETS={0x28, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r8}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r8}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r9}}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0xfb2e77a8993c191f}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffff}]}, 0x54}}, 0x20000000) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdc00, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000ac0)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd21, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0xc, 0x8}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x5, 0x3}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) r10 = socket(0x400000000010, 0x3, 0x0) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r12, {0xc, 0xc}, {0x0, 0xfff1}, {0xfff2, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x4041080) 161.618364ms ago: executing program 4 (id=1479): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0xd4}, [@ldst={0x6}]}, &(0x7f0000000080)='GPL\x00', 0xf, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76}, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x15, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffc}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000180)={r0, &(0x7f00000000c0), 0x0}, 0x20) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r1, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='syzkaller\x00', 0x8, 0x101c, &(0x7f0000000500)=""/4124, 0xc3100}, 0x94) 88.060149ms ago: executing program 3 (id=1480): pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) syz_emit_ethernet(0x3e, &(0x7f0000000380)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, @rand_addr=0x64010101, @multicast1}}}}}}, 0x0) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{}, 0x0, 0x0}, 0x20) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$CAN_RAW_JOIN_FILTERS(0xffffffffffffffff, 0x65, 0x6, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bond_slave_0\x00', 0x0}) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f00000000c0)) ioctl$sock_inet6_tcp_SIOCATMARK(r4, 0x40047440, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r3, @ANYBLOB="000024000000000024001200140001006272696467655f736c617665800000000c000500080005"], 0x3}, 0x1, 0x0, 0x0, 0x8001}, 0x0) splice(r0, 0x0, r2, 0x0, 0x10d00, 0x0) 30.866693ms ago: executing program 4 (id=1481): r0 = socket$kcm(0x10, 0x2, 0x10) (async) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newsa={0xec, 0x10, 0x200, 0x70bd28, 0x0, {{@in=@initdev={0xac, 0x1e, 0x9, 0x0}, @in=@local, 0x4e23, 0x1, 0x0, 0x2000, 0xa, 0x0, 0x0, 0x33}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x32}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', {0x0, 0x0, 0x8, 0x100000001, 0x6}, {0x0, 0x0, 0x2, 0xfffffffffffffffc}, {0xc, 0xfffffffc}, 0x70bd27, 0x0, 0x2, 0x0, 0x2}}, 0xec}, 0x1, 0x0, 0x0, 0xc0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x3}}}}]}]}, 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)=@RTM_NEWMDB={0x38, 0x54, 0x1, 0x1, 0x0, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x0, 0x3, {@ip4=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x86dd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0x5, &(0x7f0000002500)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) 0s ago: executing program 4 (id=1482): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x22, &(0x7f0000000040), 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r5) sendmsg$NLBL_CIPSOV4_C_ADD(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000480)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000000100000004000480080002000100000008000100000100000400088010000c8006000b"], 0x3c}}, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(r4, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="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", @ANYRES16=r6, @ANYBLOB="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"], 0x204}, 0x1, 0x0, 0x0, 0x48000}, 0x8880) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=ANY=[@ANYRESHEX=r3, @ANYRES32=0x0, @ANYBLOB="662700000000000024001280090001007866726d0000000014000280040003"], 0x44}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[], 0xe8}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.62' (ED25519) to the list of known hosts. [ 86.867919][ T5851] cgroup: Unknown subsys name 'net' [ 87.000290][ T5851] cgroup: Unknown subsys name 'cpuset' [ 87.010949][ T5851] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 88.778523][ T5851] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 91.439651][ T5865] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 91.448968][ T5865] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 91.467605][ T5865] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 91.475733][ T5865] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 91.508746][ T5875] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 91.517897][ T5871] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 91.519360][ T5875] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 91.536841][ T5871] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 91.542270][ T5875] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 91.546211][ T5871] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 91.554416][ T5875] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 91.560598][ T5871] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 91.571523][ T5875] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 91.577338][ T5871] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 91.583003][ T5875] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 91.589876][ T5871] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 91.599145][ T5875] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 91.611932][ T5875] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 91.621450][ T5865] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 91.646092][ T5865] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 91.686222][ T5865] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 91.698242][ T5875] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 91.707118][ T5875] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 91.716620][ T5875] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 91.724624][ T5875] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 92.290708][ T5861] chnl_net:caif_netlink_parms(): no params data found [ 92.595939][ T5862] chnl_net:caif_netlink_parms(): no params data found [ 92.670131][ T5873] chnl_net:caif_netlink_parms(): no params data found [ 92.754446][ T5870] chnl_net:caif_netlink_parms(): no params data found [ 92.972284][ T5861] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.981415][ T5861] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.989645][ T5861] bridge_slave_0: entered allmulticast mode [ 92.999968][ T5861] bridge_slave_0: entered promiscuous mode [ 93.010510][ T5877] chnl_net:caif_netlink_parms(): no params data found [ 93.053242][ T5861] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.061210][ T5861] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.069076][ T5861] bridge_slave_1: entered allmulticast mode [ 93.076809][ T5861] bridge_slave_1: entered promiscuous mode [ 93.248141][ T5861] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.257922][ T5862] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.265885][ T5862] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.273900][ T5862] bridge_slave_0: entered allmulticast mode [ 93.281756][ T5862] bridge_slave_0: entered promiscuous mode [ 93.290019][ T5873] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.298995][ T5873] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.306997][ T5873] bridge_slave_0: entered allmulticast mode [ 93.317368][ T5873] bridge_slave_0: entered promiscuous mode [ 93.358500][ T5861] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.370435][ T5862] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.378970][ T5862] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.386782][ T5862] bridge_slave_1: entered allmulticast mode [ 93.394953][ T5862] bridge_slave_1: entered promiscuous mode [ 93.402607][ T5873] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.410446][ T5873] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.418964][ T5873] bridge_slave_1: entered allmulticast mode [ 93.429368][ T5873] bridge_slave_1: entered promiscuous mode [ 93.452437][ T5870] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.460112][ T5870] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.468983][ T5870] bridge_slave_0: entered allmulticast mode [ 93.476819][ T5870] bridge_slave_0: entered promiscuous mode [ 93.486610][ T5870] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.495875][ T5870] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.503841][ T5870] bridge_slave_1: entered allmulticast mode [ 93.512492][ T5870] bridge_slave_1: entered promiscuous mode [ 93.650010][ T5862] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.664849][ T5862] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.675876][ T5868] Bluetooth: hci3: command tx timeout [ 93.687564][ T5873] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.712755][ T5877] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.721285][ T5877] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.729495][ T5877] bridge_slave_0: entered allmulticast mode [ 93.737568][ T5877] bridge_slave_0: entered promiscuous mode [ 93.745712][ T5868] Bluetooth: hci0: command tx timeout [ 93.745721][ T5875] Bluetooth: hci1: command tx timeout [ 93.748492][ T5877] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.757460][ T5868] Bluetooth: hci4: command tx timeout [ 93.772815][ T5877] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.781040][ T5877] bridge_slave_1: entered allmulticast mode [ 93.791261][ T5877] bridge_slave_1: entered promiscuous mode [ 93.802889][ T5861] team0: Port device team_slave_0 added [ 93.813135][ T5861] team0: Port device team_slave_1 added [ 93.825337][ T5868] Bluetooth: hci2: command tx timeout [ 93.841641][ T5873] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.854637][ T5870] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.963452][ T5870] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.989867][ T5861] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.997917][ T5861] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.026456][ T5861] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.042270][ T5862] team0: Port device team_slave_0 added [ 94.052585][ T5862] team0: Port device team_slave_1 added [ 94.064810][ T5873] team0: Port device team_slave_0 added [ 94.110871][ T5877] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.124330][ T5861] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.132558][ T5861] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.161121][ T5861] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.191162][ T5873] team0: Port device team_slave_1 added [ 94.215643][ T5870] team0: Port device team_slave_0 added [ 94.225962][ T5877] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.276140][ T5870] team0: Port device team_slave_1 added [ 94.283073][ T5873] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.290306][ T5873] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.316388][ T5873] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.346059][ T5862] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.353071][ T5862] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.380208][ T5862] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.415630][ T5873] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.422647][ T5873] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.449607][ T5873] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.498671][ T5862] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.506190][ T5862] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.535446][ T5862] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.569660][ T5870] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.578534][ T5870] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.608677][ T5870] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.624885][ T5870] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.632806][ T5870] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.660241][ T5870] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.675794][ T5877] team0: Port device team_slave_0 added [ 94.718615][ T5861] hsr_slave_0: entered promiscuous mode [ 94.728352][ T5861] hsr_slave_1: entered promiscuous mode [ 94.752201][ T5877] team0: Port device team_slave_1 added [ 94.796270][ T5877] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.803666][ T5877] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.832807][ T5877] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.941991][ T5873] hsr_slave_0: entered promiscuous mode [ 94.949255][ T5873] hsr_slave_1: entered promiscuous mode [ 94.956465][ T5873] debugfs: 'hsr0' already exists in 'hsr' [ 94.962437][ T5873] Cannot create hsr debugfs directory [ 94.969901][ T5877] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.978108][ T5877] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.005666][ T5877] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.131625][ T5870] hsr_slave_0: entered promiscuous mode [ 95.138423][ T5870] hsr_slave_1: entered promiscuous mode [ 95.144859][ T5870] debugfs: 'hsr0' already exists in 'hsr' [ 95.151518][ T5870] Cannot create hsr debugfs directory [ 95.163322][ T5862] hsr_slave_0: entered promiscuous mode [ 95.171337][ T5862] hsr_slave_1: entered promiscuous mode [ 95.177862][ T5862] debugfs: 'hsr0' already exists in 'hsr' [ 95.183823][ T5862] Cannot create hsr debugfs directory [ 95.400115][ T5877] hsr_slave_0: entered promiscuous mode [ 95.407216][ T5877] hsr_slave_1: entered promiscuous mode [ 95.413765][ T5877] debugfs: 'hsr0' already exists in 'hsr' [ 95.419962][ T5877] Cannot create hsr debugfs directory [ 95.745985][ T5868] Bluetooth: hci3: command tx timeout [ 95.829295][ T5868] Bluetooth: hci4: command tx timeout [ 95.829318][ T5875] Bluetooth: hci0: command tx timeout [ 95.835646][ T5868] Bluetooth: hci1: command tx timeout [ 95.905298][ T5868] Bluetooth: hci2: command tx timeout [ 95.928557][ T5861] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 95.942526][ T5861] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 95.975393][ T5861] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 95.994952][ T5861] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 96.072076][ T5862] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 96.093817][ T5862] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 96.107387][ T5862] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 96.130475][ T5862] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 96.229521][ T5873] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 96.242877][ T5873] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 96.259911][ T5873] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 96.291471][ T5873] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 96.420044][ T5870] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 96.452655][ T5870] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 96.468263][ T5870] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 96.482633][ T5870] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 96.602106][ T5861] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.621990][ T5877] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 96.634098][ T5877] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 96.649855][ T5877] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 96.673186][ T5877] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 96.727164][ T5861] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.744029][ T1331] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.751926][ T1331] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.781857][ T5862] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.805153][ T1331] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.812369][ T1331] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.892176][ T5862] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.927649][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.934857][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.981000][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.988254][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.010654][ T5873] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.099751][ T5873] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.144313][ T1331] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.151727][ T1331] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.181922][ T1331] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.189276][ T1331] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.304590][ T5877] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.347038][ T5870] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.441814][ T5877] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.484429][ T5870] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.525061][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.532931][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.570397][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.577753][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.660048][ T30] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.667817][ T30] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.680618][ T9] cfg80211: failed to load regulatory.db [ 97.746770][ T74] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.753993][ T74] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.827578][ T5868] Bluetooth: hci3: command tx timeout [ 97.906430][ T5875] Bluetooth: hci4: command tx timeout [ 97.911932][ T5875] Bluetooth: hci1: command tx timeout [ 97.917584][ T5868] Bluetooth: hci0: command tx timeout [ 97.964482][ T5861] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.983651][ T5862] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.991003][ T5875] Bluetooth: hci2: command tx timeout [ 98.039682][ T5873] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.163467][ T5861] veth0_vlan: entered promiscuous mode [ 98.250055][ T5861] veth1_vlan: entered promiscuous mode [ 98.269850][ T5862] veth0_vlan: entered promiscuous mode [ 98.330570][ T5862] veth1_vlan: entered promiscuous mode [ 98.416961][ T5877] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.444015][ T5861] veth0_macvtap: entered promiscuous mode [ 98.471768][ T5861] veth1_macvtap: entered promiscuous mode [ 98.541242][ T5862] veth0_macvtap: entered promiscuous mode [ 98.597029][ T5862] veth1_macvtap: entered promiscuous mode [ 98.632825][ T5861] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.668858][ T5870] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.689048][ T5877] veth0_vlan: entered promiscuous mode [ 98.700572][ T5861] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.719294][ T5862] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.773556][ T5862] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.798980][ T5963] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.812900][ T5963] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.830807][ T5877] veth1_vlan: entered promiscuous mode [ 98.838960][ T5963] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.848909][ T5963] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.878524][ T74] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.912301][ T74] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.922721][ T74] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.943165][ T74] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.021493][ T5870] veth0_vlan: entered promiscuous mode [ 99.047814][ T5870] veth1_vlan: entered promiscuous mode [ 99.064108][ T5877] veth0_macvtap: entered promiscuous mode [ 99.092563][ T5873] veth0_vlan: entered promiscuous mode [ 99.140517][ T5877] veth1_macvtap: entered promiscuous mode [ 99.158704][ T1000] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.159128][ T5873] veth1_vlan: entered promiscuous mode [ 99.175521][ T1000] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.241325][ T74] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.253205][ T74] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.324125][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.334312][ T5870] veth0_macvtap: entered promiscuous mode [ 99.340310][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.361560][ T5877] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.384010][ T30] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.392683][ T30] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.397365][ T5877] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.412852][ T5870] veth1_macvtap: entered promiscuous mode [ 99.444586][ T5873] veth0_macvtap: entered promiscuous mode [ 99.458117][ T74] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.489281][ T5861] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 99.497558][ T5873] veth1_macvtap: entered promiscuous mode [ 99.522568][ T74] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.536931][ T74] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.550411][ T5870] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.571820][ T74] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.604372][ T5870] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.689416][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.702667][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.775959][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.807768][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.864329][ T5873] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.905705][ T5875] Bluetooth: hci3: command tx timeout [ 99.957271][ T5873] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.985511][ T5875] Bluetooth: hci1: command tx timeout [ 99.987097][ T5868] Bluetooth: hci0: command tx timeout [ 99.991167][ T5869] Bluetooth: hci4: command tx timeout [ 99.999280][ T5988] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6'. [ 100.012216][ T5993] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 100.055687][ T5990] pim6reg: entered allmulticast mode [ 100.062912][ T5988] netlink: 808 bytes leftover after parsing attributes in process `syz.0.6'. [ 100.073564][ T5875] Bluetooth: hci2: command tx timeout [ 100.102306][ T5993] dvmrp0: entered allmulticast mode [ 100.117279][ T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.160536][ T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.171096][ T5988] syz.0.6 uses obsolete (PF_INET,SOCK_PACKET) [ 100.196972][ T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.226856][ T74] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.245746][ T74] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.258439][ T30] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.353129][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.362295][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.404596][ T74] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.413889][ T74] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.658329][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.668013][ T5963] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.684428][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.691944][ T5963] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.890999][ T74] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.922801][ T74] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.962851][ T6012] tipc: Started in network mode [ 100.976925][ T6012] tipc: Node identity 4e4521f86bc, cluster identity 4711 [ 100.985649][ T6012] tipc: Enabled bearer , priority 0 [ 101.016625][ T6012] syzkaller0: entered promiscuous mode [ 101.024749][ T6012] syzkaller0: entered allmulticast mode [ 101.113122][ T6012] tipc: Resetting bearer [ 101.175902][ T6016] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3'. [ 101.193392][ T6008] tipc: Resetting bearer [ 101.275422][ T6020] Zero length message leads to an empty skb [ 101.275985][ T6008] tipc: Disabling bearer [ 101.381312][ T6022] tipc: Started in network mode [ 101.393101][ T6024] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 101.405427][ T6022] tipc: Node identity aa0c1a5f8683, cluster identity 4711 [ 101.405730][ T6022] tipc: Enabled bearer , priority 0 [ 101.406959][ T6022] syzkaller0: entered promiscuous mode [ 101.467324][ T6022] syzkaller0: entered allmulticast mode [ 101.636180][ T6022] tipc: Resetting bearer [ 101.714638][ T6036] warning: `syz.1.17' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 101.766255][ T6033] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 101.861011][ T6033] netlink: 'syz.1.17': attribute type 5 has an invalid length. [ 101.894735][ T6033] netlink: 140 bytes leftover after parsing attributes in process `syz.1.17'. [ 102.104690][ T6019] tipc: Resetting bearer [ 102.173471][ T6019] tipc: Disabling bearer [ 102.192135][ T6057] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 102.357971][ T6053] can: request_module (can-proto-0) failed. [ 102.643841][ T5942] IPVS: starting estimator thread 0... [ 102.652505][ T6068] netlink: 4 bytes leftover after parsing attributes in process `syz.4.25'. [ 102.659135][ T6069] netlink: 24 bytes leftover after parsing attributes in process `syz.0.27'. [ 102.664392][ T6063] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 102.690617][ T6066] tipc: Started in network mode [ 102.699510][ T6066] tipc: Node identity ba0c10804ede, cluster identity 4711 [ 102.708167][ T6068] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 102.718415][ T6066] tipc: Enabled bearer , priority 0 [ 102.751557][ T6071] IPVS: using max 24 ests per chain, 57600 per kthread [ 102.780656][ T6066] syzkaller0: entered promiscuous mode [ 102.821253][ T6066] syzkaller0: entered allmulticast mode [ 102.881954][ T6080] netlink: 8 bytes leftover after parsing attributes in process `syz.1.30'. [ 102.919109][ T6066] tipc: Resetting bearer [ 102.934978][ T6065] tipc: Resetting bearer [ 102.961530][ T6065] tipc: Disabling bearer [ 103.322085][ T6095] netlink: 'syz.0.37': attribute type 1 has an invalid length. [ 103.360704][ T6095] netlink: 224 bytes leftover after parsing attributes in process `syz.0.37'. [ 103.371602][ T6098] netlink: 4 bytes leftover after parsing attributes in process `syz.1.36'. [ 103.445522][ T6095] netlink: 'syz.0.37': attribute type 1 has an invalid length. [ 103.509713][ T6098] veth0_macvtap: left promiscuous mode [ 103.889884][ T6004] IPVS: starting estimator thread 0... [ 104.005975][ T6121] IPVS: using max 27 ests per chain, 64800 per kthread [ 104.131523][ T6131] netlink: 12 bytes leftover after parsing attributes in process `syz.1.45'. [ 104.171539][ T6128] tipc: Enabled bearer , priority 0 [ 104.180415][ T6128] syzkaller0: entered promiscuous mode [ 104.199981][ T6128] syzkaller0: entered allmulticast mode [ 104.241800][ T6128] tipc: Resetting bearer [ 104.266904][ T6127] tipc: Resetting bearer [ 104.423907][ T6127] tipc: Disabling bearer [ 105.089450][ T6169] __nla_validate_parse: 1 callbacks suppressed [ 105.089471][ T6169] netlink: 16 bytes leftover after parsing attributes in process `syz.1.57'. [ 105.176943][ T6170] netlink: 'syz.1.57': attribute type 8 has an invalid length. [ 105.330641][ T6163] netlink: 8 bytes leftover after parsing attributes in process `syz.0.55'. [ 105.582975][ T6179] tipc: Enabled bearer , priority 12 [ 105.833401][ T6198] netlink: 8 bytes leftover after parsing attributes in process `syz.4.63'. [ 105.856234][ T6198] netlink: 12 bytes leftover after parsing attributes in process `syz.4.63'. [ 105.885306][ T6198] netlink: 'syz.4.63': attribute type 20 has an invalid length. [ 105.960661][ T49] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 105.972360][ T6198] netlink: 8 bytes leftover after parsing attributes in process `syz.4.63'. [ 105.989307][ T49] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 106.000584][ T6198] netlink: 12 bytes leftover after parsing attributes in process `syz.4.63'. [ 106.027240][ T6198] netlink: 'syz.4.63': attribute type 20 has an invalid length. [ 106.038447][ T49] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 106.061019][ T49] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 106.113564][ T6208] netlink: 176 bytes leftover after parsing attributes in process `syz.1.67'. [ 106.150134][ T6208] netlink: 32 bytes leftover after parsing attributes in process `syz.1.67'. [ 106.458524][ T6218] Driver unsupported XDP return value 0 on prog (id 14) dev N/A, expect packet loss! [ 106.560830][ T6226] netlink: 8 bytes leftover after parsing attributes in process `syz.2.73'. [ 106.688920][ T6219] netlink: 4 bytes leftover after parsing attributes in process `syz.1.71'. [ 106.700939][ T5874] tipc: Node number set to 629481976 [ 106.729654][ T6219] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 106.952397][ T6219] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 107.123888][ T6236] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 107.155680][ T6236] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 107.164907][ T6236] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 107.279698][ T6252] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 107.287491][ T6252] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 107.390653][ T6254] tipc: Started in network mode [ 107.415032][ T6254] tipc: Node identity bab92d73a67a, cluster identity 4711 [ 107.431708][ T6254] tipc: Enabled bearer , priority 0 [ 108.037273][ T6258] syzkaller0: entered promiscuous mode [ 108.043583][ T6258] syzkaller0: entered allmulticast mode [ 108.063497][ T6272] tipc: Resetting bearer [ 108.123814][ T6253] tipc: Resetting bearer [ 108.191285][ T6253] tipc: Disabling bearer [ 109.160586][ T6316] pim6reg527: entered allmulticast mode [ 109.789178][ T6332] tipc: Enabled bearer , priority 0 [ 109.822600][ T6332] syzkaller0: entered promiscuous mode [ 109.865266][ T6332] syzkaller0: entered allmulticast mode [ 109.960529][ T6335] tipc: Resetting bearer [ 110.129309][ T6331] tipc: Resetting bearer [ 110.200340][ T6331] tipc: Disabling bearer [ 110.880355][ T6353] __nla_validate_parse: 6 callbacks suppressed [ 110.880378][ T6353] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.111'. [ 111.522342][ T6375] netlink: 4 bytes leftover after parsing attributes in process `syz.0.114'. [ 111.578777][ T6375] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 111.741361][ T6375] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 111.886074][ C0] vcan0: j1939_tp_rxtimer: 0xffff88803044f800: rx timeout, send abort [ 112.366200][ T6412] netlink: 'syz.4.125': attribute type 2 has an invalid length. [ 112.395476][ C0] vcan0: j1939_tp_rxtimer: 0xffff88803044f800: abort rx timeout. Force session deactivation [ 112.571274][ T6412] netlink: 'syz.4.125': attribute type 2 has an invalid length. [ 112.677197][ T6424] netlink: 4 bytes leftover after parsing attributes in process `syz.1.128'. [ 112.753748][ T6427] netlink: 12 bytes leftover after parsing attributes in process `syz.2.129'. [ 135.710799][ T6454] netlink: 12 bytes leftover after parsing attributes in process `syz.2.137'. [ 135.725449][ T6455] netlink: 4 bytes leftover after parsing attributes in process `syz.4.136'. [ 135.931004][ T6467] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 136.202749][ T6482] sctp: [Deprecated]: syz.2.145 (pid 6482) Use of int in maxseg socket option. [ 136.202749][ T6482] Use struct sctp_assoc_value instead [ 136.360451][ T6489] trusted_key: syz.1.146 sent an empty control message without MSG_MORE. [ 136.449351][ T6499] netlink: 'syz.3.149': attribute type 1 has an invalid length. [ 136.778420][ T6514] netlink: 28 bytes leftover after parsing attributes in process `syz.3.154'. [ 136.963726][ T6525] netlink: 36 bytes leftover after parsing attributes in process `syz.2.158'. [ 137.077777][ T6534] netlink: 104 bytes leftover after parsing attributes in process `syz.1.161'. [ 137.958005][ T6575] netlink: 36 bytes leftover after parsing attributes in process `syz.1.171'. [ 138.250892][ T6583] netlink: 8 bytes leftover after parsing attributes in process `syz.1.174'. [ 138.308414][ T6592] netlink: 44 bytes leftover after parsing attributes in process `syz.4.176'. [ 138.338185][ T6592] netlink: 21 bytes leftover after parsing attributes in process `syz.4.176'. [ 138.354511][ T6592] netlink: 21 bytes leftover after parsing attributes in process `syz.4.176'. [ 138.426992][ T6591] tipc: Started in network mode [ 138.434450][ T6591] tipc: Node identity 4a58a07c4b02, cluster identity 4711 [ 138.451788][ T6591] tipc: Enabled bearer , priority 0 [ 138.499474][ T6591] syzkaller0: entered promiscuous mode [ 138.534858][ T6591] syzkaller0: entered allmulticast mode [ 138.587445][ T6591] tipc: Resetting bearer [ 138.632074][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.640552][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.651959][ T6589] tipc: Resetting bearer [ 138.678357][ T6589] tipc: Disabling bearer [ 138.942984][ T6623] openvswitch: netlink: Message has 4 unknown bytes. [ 139.010679][ T13] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 139.052917][ T13] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 139.116655][ T13] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 139.185447][ T13] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 139.425970][ T6646] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 139.474639][ T6637] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 139.794219][ T6662] netlink: 'syz.2.193': attribute type 1 has an invalid length. [ 140.132670][ T6674] netlink: zone id is out of range [ 140.140085][ T6674] netlink: zone id is out of range [ 140.177667][ T6674] netlink: get zone limit has 8 unknown bytes [ 140.440495][ T6698] netlink: 'syz.3.203': attribute type 1 has an invalid length. [ 141.078805][ T6739] netlink: 'syz.1.210': attribute type 1 has an invalid length. [ 141.086010][ T6733] __nla_validate_parse: 10 callbacks suppressed [ 141.086036][ T6733] netlink: 36 bytes leftover after parsing attributes in process `syz.3.211'. [ 141.303795][ T6739] netlink: 28 bytes leftover after parsing attributes in process `syz.1.210'. [ 141.430115][ T6743] 8021q: adding VLAN 0 to HW filter on device bond2 [ 141.439116][ T6743] bond1: (slave bond2): making interface the new active one [ 141.454591][ T6743] bond1: (slave bond2): Enslaving as an active interface with an up link [ 141.512350][ T6730] bond1: (slave gretap1): Enslaving as a backup interface with an up link [ 141.547546][ T6739] 8021q: adding VLAN 0 to HW filter on device bond1 [ 141.699487][ T6766] (unnamed net_device) (uninitialized): option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 142.538260][ T6797] netlink: 40 bytes leftover after parsing attributes in process `syz.1.218'. [ 142.737150][ T6827] netlink: 12 bytes leftover after parsing attributes in process `syz.0.230'. [ 142.867490][ T6827] netlink: 16 bytes leftover after parsing attributes in process `syz.0.230'. [ 142.905849][ T6835] netlink: 12 bytes leftover after parsing attributes in process `syz.3.232'. [ 142.940041][ T6835] tipc: Enabled bearer , priority 0 [ 142.948406][ T6835] syzkaller0: entered promiscuous mode [ 142.954092][ T6835] syzkaller0: entered allmulticast mode [ 142.982525][ T6835] tipc: Resetting bearer [ 143.002232][ T6834] tipc: Resetting bearer [ 143.024509][ T6834] tipc: Disabling bearer [ 143.310087][ T6856] netlink: 24 bytes leftover after parsing attributes in process `syz.2.238'. [ 143.359156][ T6852] tipc: New replicast peer: 0.0.0.0 [ 143.367260][ T6852] tipc: Enabled bearer , priority 10 [ 143.374148][ T6859] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00aa [ 143.384071][ T6858] netlink: 'syz.3.241': attribute type 1 has an invalid length. [ 143.387743][ T6852] netlink: 12 bytes leftover after parsing attributes in process `syz.0.239'. [ 143.402174][ T6858] netlink: 224 bytes leftover after parsing attributes in process `syz.3.241'. [ 143.437067][ T6858] netlink: 8 bytes leftover after parsing attributes in process `syz.3.241'. [ 143.583439][ T6871] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 143.613951][ T6852] vlan0: entered allmulticast mode [ 143.632849][ T6852] veth0_to_bond: entered allmulticast mode [ 143.656680][ T6852] bridge1: port 1(vlan0) entered blocking state [ 143.663925][ T6852] bridge1: port 1(vlan0) entered disabled state [ 143.701954][ T6852] vlan0: entered promiscuous mode [ 143.709013][ T6852] veth0_to_bond: entered promiscuous mode [ 144.475983][ T5921] tipc: Node number set to 22716540 [ 144.903327][ T31] audit: type=1800 audit(1757577601.951:2): pid=6915 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.257" name="memory.events" dev="tmpfs" ino=305 res=0 errno=0 [ 145.177910][ T6954] netlink: 'syz.1.269': attribute type 83 has an invalid length. [ 145.257921][ T6956] netlink: 'syz.0.270': attribute type 3 has an invalid length. [ 145.744796][ T6987] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 146.191457][ T7006] __nla_validate_parse: 9 callbacks suppressed [ 146.191479][ T7006] netlink: 16 bytes leftover after parsing attributes in process `syz.4.287'. [ 146.216901][ T7010] netlink: 'syz.0.288': attribute type 1 has an invalid length. [ 146.274776][ T7010] 8021q: adding VLAN 0 to HW filter on device bond1 [ 146.303217][ T7017] netlink: 60 bytes leftover after parsing attributes in process `syz.2.291'. [ 146.338329][ T7010] bond1: (slave veth3): Enslaving as an active interface with a down link [ 146.368685][ T7018] bridge1: port 1(vlan0) entered blocking state [ 146.375291][ T7018] bridge1: port 1(vlan0) entered forwarding state [ 146.388393][ T7018] bond1: (slave veth0_to_bond): making interface the new active one [ 146.400559][ T7018] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 146.408326][ T7014] openvswitch: netlink: Multiple metadata blocks provided [ 146.430583][ T7010] netlink: 4 bytes leftover after parsing attributes in process `syz.0.288'. [ 146.606732][ T7010] bond1: (slave veth5): Enslaving as an active interface with a down link [ 146.678435][ T7034] netlink: 36 bytes leftover after parsing attributes in process `syz.1.293'. [ 146.893687][ T7044] lo: entered allmulticast mode [ 147.003415][ T7045] syzkaller0: entered promiscuous mode [ 147.009517][ T7045] syzkaller0: entered allmulticast mode [ 148.490919][ T7062] lo: entered allmulticast mode [ 148.997783][ T7093] netlink: 20 bytes leftover after parsing attributes in process `syz.3.310'. [ 149.225297][ T7091] syzkaller1: entered promiscuous mode [ 149.237864][ T7091] syzkaller1: entered allmulticast mode [ 149.367212][ T7104] tipc: Enabled bearer , priority 0 [ 149.395526][ T7104] syzkaller0: entered promiscuous mode [ 149.403343][ T7104] syzkaller0: entered allmulticast mode [ 149.537933][ T7104] tipc: Resetting bearer [ 149.582614][ T7103] tipc: Resetting bearer [ 149.664342][ T7103] tipc: Disabling bearer [ 149.882999][ T7132] x_tables: ip6_tables: IDLETIMER.1 target: invalid size 48 (kernel) != (user) 152 [ 149.893153][ T7129] netlink: 8 bytes leftover after parsing attributes in process `syz.1.320'. [ 149.944526][ T7129] openvswitch: netlink: nsh attribute has unmatched MD type 0. [ 149.972129][ T7129] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 150.033444][ T7144] netlink: 8 bytes leftover after parsing attributes in process `syz.3.322'. [ 150.471688][ T7166] netlink: 68 bytes leftover after parsing attributes in process `syz.1.329'. [ 150.568657][ T7162] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 150.596620][ T7162] netlink: 'syz.1.329': attribute type 21 has an invalid length. [ 150.628713][ T7162] netlink: 152 bytes leftover after parsing attributes in process `syz.1.329'. [ 150.687668][ T7162] IPv6: sit1: Disabled Multicast RS [ 150.943186][ T7186] openvswitch: netlink: Multiple metadata blocks provided [ 150.951181][ T7185] netlink: 8 bytes leftover after parsing attributes in process `syz.4.335'. [ 150.998612][ T7189] tipc: Enabling of bearer rejected, failed to enable media [ 151.072610][ T7193] netlink: 'syz.0.338': attribute type 2 has an invalid length. [ 151.358770][ T7205] netlink: 8 bytes leftover after parsing attributes in process `syz.0.340'. [ 151.408626][ T7208] netlink: 8 bytes leftover after parsing attributes in process `syz.3.341'. [ 151.472501][ T7210] netlink: 'syz.0.342': attribute type 21 has an invalid length. [ 151.484883][ T7210] netlink: 4 bytes leftover after parsing attributes in process `syz.0.342'. [ 151.500894][ T7210] netlink: 6040 bytes leftover after parsing attributes in process `syz.0.342'. [ 151.512230][ T7210] netlink: 36 bytes leftover after parsing attributes in process `syz.0.342'. [ 151.779896][ T7222] netlink: 28 bytes leftover after parsing attributes in process `syz.0.348'. [ 151.790972][ T5921] IPVS: starting estimator thread 0... [ 151.807446][ T7222] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 151.819685][ C0] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 151.888331][ T7224] IPVS: using max 28 ests per chain, 67200 per kthread [ 152.444613][ T7266] netlink: 116 bytes leftover after parsing attributes in process `syz.0.357'. [ 152.796627][ T7289] tipc: Enabled bearer , priority 0 [ 152.830951][ T7289] syzkaller0: entered promiscuous mode [ 152.858586][ T7289] syzkaller0: entered allmulticast mode [ 152.911287][ T7289] tipc: Resetting bearer [ 152.929825][ T7288] tipc: Resetting bearer [ 153.006028][ T7288] tipc: Disabling bearer [ 153.021864][ T7305] netlink: 4 bytes leftover after parsing attributes in process `syz.0.367'. [ 153.057281][ T7305] netlink: 8 bytes leftover after parsing attributes in process `syz.0.367'. [ 153.135754][ T7305] bond2 (unregistering): Released all slaves [ 153.253632][ T7317] netlink: 16 bytes leftover after parsing attributes in process `syz.3.372'. [ 153.323455][ T7320] openvswitch: netlink: IP tunnel dst address not specified [ 153.343234][ T7318] ip6tnl0: entered promiscuous mode [ 153.614178][ T7339] sctp: [Deprecated]: syz.2.378 (pid 7339) Use of struct sctp_assoc_value in delayed_ack socket option. [ 153.614178][ T7339] Use struct sctp_sack_info instead [ 153.652141][ T7337] netem: invalid attributes len -24 [ 153.669489][ T7337] netem: change failed [ 153.756495][ T7341] syzkaller1: entered promiscuous mode [ 153.764576][ T7341] syzkaller1: entered allmulticast mode [ 154.482458][ T7379] netlink: 'syz.4.392': attribute type 1 has an invalid length. [ 154.502474][ T7379] netlink: 'syz.4.392': attribute type 2 has an invalid length. [ 155.192507][ T7404] gtp0: entered promiscuous mode [ 155.210311][ T7404] gtp0: entered allmulticast mode [ 155.489102][ T7416] tipc: Enabled bearer , priority 0 [ 155.501834][ T7416] syzkaller0: entered promiscuous mode [ 155.510116][ T7416] syzkaller0: entered allmulticast mode [ 155.542319][ T7416] tipc: Resetting bearer [ 155.562147][ T7415] tipc: Resetting bearer [ 155.609412][ T7415] tipc: Disabling bearer [ 155.635594][ T7421] netlink: 'syz.1.406': attribute type 83 has an invalid length. [ 155.811724][ T7426] netlink: 'syz.2.407': attribute type 10 has an invalid length. [ 156.530259][ T7461] tipc: Enabled bearer , priority 0 [ 156.568708][ T7461] syzkaller0: entered promiscuous mode [ 156.574477][ T7461] syzkaller0: entered allmulticast mode [ 156.643883][ T7461] tipc: Resetting bearer [ 156.688887][ T7459] tipc: Resetting bearer [ 156.712402][ T7459] tipc: Disabling bearer [ 156.907525][ T7474] __nla_validate_parse: 12 callbacks suppressed [ 156.907547][ T7474] netlink: 10 bytes leftover after parsing attributes in process `syz.1.422'. [ 156.990880][ T7474] batadv_slave_0: entered promiscuous mode [ 157.018250][ T7472] batadv_slave_0: left promiscuous mode [ 157.111933][ T7480] netlink: 52 bytes leftover after parsing attributes in process `syz.0.425'. [ 157.147787][ T7482] netlink: 64 bytes leftover after parsing attributes in process `syz.4.426'. [ 157.212206][ T7482] netlink: 64 bytes leftover after parsing attributes in process `syz.4.426'. [ 157.298499][ T7492] netlink: 'syz.2.427': attribute type 1 has an invalid length. [ 157.325950][ T7492] netlink: 144 bytes leftover after parsing attributes in process `syz.2.427'. [ 157.361474][ T7492] netlink: 'syz.2.427': attribute type 1 has an invalid length. [ 157.415537][ T7492] netlink: 'syz.2.427': attribute type 2 has an invalid length. [ 157.438602][ T7492] netlink: 64 bytes leftover after parsing attributes in process `syz.2.427'. [ 157.777155][ T7511] tipc: Enabled bearer , priority 0 [ 157.804617][ T7511] syzkaller0: entered promiscuous mode [ 157.817566][ T7512] netlink: 12 bytes leftover after parsing attributes in process `syz.4.431'. [ 157.822852][ T7511] syzkaller0: entered allmulticast mode [ 158.061433][ T7517] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 158.099659][ T7518] tipc: Resetting bearer [ 158.146221][ T7510] tipc: Resetting bearer [ 158.181098][ T7510] tipc: Disabling bearer [ 158.209206][ T13] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 158.219113][ T13] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 158.235420][ T13] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 158.267733][ T13] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 158.428511][ T7528] tipc: Enabling of bearer rejected, media not registered [ 158.486055][ T7527] netlink: 56 bytes leftover after parsing attributes in process `syz.2.439'. [ 158.520336][ T7527] (unnamed net_device) (uninitialized): (slave ip6_vti0): Device is not bonding slave [ 158.547003][ T7527] (unnamed net_device) (uninitialized): option active_slave: invalid value (ip6_vti0) [ 158.571505][ T7531] netlink: 'syz.0.440': attribute type 1 has an invalid length. [ 158.596872][ T7533] netlink: 'syz.4.441': attribute type 5 has an invalid length. [ 158.613402][ T7533] netlink: 20 bytes leftover after parsing attributes in process `syz.4.441'. [ 158.724297][ T7527] netlink: 4 bytes leftover after parsing attributes in process `syz.2.439'. [ 158.762811][ T7527] netlink: 'syz.2.439': attribute type 5 has an invalid length. [ 159.481458][ T7556] tipc: Enabled bearer , priority 0 [ 159.490279][ T7562] syzkaller0: entered promiscuous mode [ 159.511374][ T7562] syzkaller0: entered allmulticast mode [ 159.607468][ T7562] tipc: Resetting bearer [ 159.635375][ T7555] tipc: Resetting bearer [ 159.702801][ T7555] tipc: Disabling bearer [ 160.110959][ T7590] netlink: 'syz.4.459': attribute type 4 has an invalid length. [ 160.695496][ T7615] netlink: 'syz.4.467': attribute type 83 has an invalid length. [ 160.697191][ T7616] netlink: 'syz.4.467': attribute type 83 has an invalid length. [ 160.723471][ T7614] netlink: 'syz.2.468': attribute type 58 has an invalid length. [ 161.446633][ T7642] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 161.815982][ T7652] netlink: 'syz.0.478': attribute type 30 has an invalid length. [ 161.890699][ T7652] netlink: 'syz.0.478': attribute type 30 has an invalid length. [ 161.946341][ T7381] Set syz1 is full, maxelem 65536 reached [ 161.976105][ T7652] netlink: 'syz.0.478': attribute type 30 has an invalid length. [ 161.989631][ T7658] syzkaller1: entered promiscuous mode [ 162.002320][ T7658] syzkaller1: entered allmulticast mode [ 162.064927][ T7652] netlink: 'syz.0.478': attribute type 30 has an invalid length. [ 162.130559][ T7652] netlink: 'syz.0.478': attribute type 30 has an invalid length. [ 162.198068][ T7652] netlink: 'syz.0.478': attribute type 30 has an invalid length. [ 162.230670][ T7680] __nla_validate_parse: 8 callbacks suppressed [ 162.230691][ T7680] netlink: 380 bytes leftover after parsing attributes in process `syz.2.485'. [ 162.232335][ T7652] netlink: 'syz.0.478': attribute type 30 has an invalid length. [ 162.314499][ T7680] team0: Device dummy0 failed to register rx_handler [ 162.379892][ T7678] netlink: 8 bytes leftover after parsing attributes in process `syz.4.484'. [ 162.537780][ T7685] netlink: 8 bytes leftover after parsing attributes in process `syz.3.486'. [ 163.329686][ T7716] netlink: 8 bytes leftover after parsing attributes in process `syz.0.495'. [ 163.400646][ T7716] bond15: (slave geneve2): making interface the new active one [ 163.426998][ T7716] bond15: (slave geneve2): Enslaving as an active interface with an up link [ 163.451500][ T59] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 163.525364][ T59] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 163.550811][ T7744] netlink: 4 bytes leftover after parsing attributes in process `syz.3.503'. [ 163.565187][ T59] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 163.612886][ T7751] tipc: Enabled bearer , priority 0 [ 163.649015][ T5963] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 163.691974][ T7742] syzkaller0: entered promiscuous mode [ 163.699832][ T7742] syzkaller0: entered allmulticast mode [ 163.742439][ T7755] mac80211_hwsim hwsim9 wlan1: entered promiscuous mode [ 163.758951][ T7766] netlink: 4 bytes leftover after parsing attributes in process `syz.4.507'. [ 163.776641][ T7755] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode [ 163.809014][ T7751] tipc: Resetting bearer [ 163.843747][ T7739] tipc: Resetting bearer [ 163.903293][ T7739] tipc: Disabling bearer [ 164.000057][ T7770] team0: Device dummy0 failed to register rx_handler [ 164.273593][ T7785] netlink: 20 bytes leftover after parsing attributes in process `syz.4.513'. [ 164.752788][ T7805] netlink: 8 bytes leftover after parsing attributes in process `syz.3.521'. [ 164.824349][ T7805] netlink: 8 bytes leftover after parsing attributes in process `syz.3.521'. [ 164.850474][ T7805] netlink: 8 bytes leftover after parsing attributes in process `syz.3.521'. [ 164.952618][ T7805] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.961449][ T7805] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.099411][ T7805] bridge_slave_0: left allmulticast mode [ 165.106379][ T7805] bridge_slave_0: left promiscuous mode [ 165.112609][ T7805] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.141164][ T7805] bridge_slave_1: left allmulticast mode [ 165.147386][ T7805] bridge_slave_1: left promiscuous mode [ 165.154161][ T7805] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.178551][ T7805] bond0: (slave bond_slave_0): Releasing backup interface [ 165.194821][ T7805] bond0: (slave bond_slave_1): Releasing backup interface [ 165.217516][ T7805] team0: Port device team_slave_0 removed [ 165.236179][ T7805] team0: Port device team_slave_1 removed [ 165.249495][ T7805] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 165.265273][ T7805] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 165.280945][ T7805] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 165.298827][ T7805] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 165.379222][ T7805] tipc: Resetting bearer [ 165.582276][ T7818] C: renamed from lo (while UP) [ 165.611642][ T59] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.665614][ T59] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.695908][ T59] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.739096][ T59] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.225670][ T7841] tipc: Enabled bearer , priority 0 [ 166.244219][ T7841] syzkaller0: entered promiscuous mode [ 166.250280][ T7841] syzkaller0: entered allmulticast mode [ 166.316438][ T7841] tipc: Resetting bearer [ 166.329469][ T7841] netdevsim netdevsim3: Firmware load for '..' refused, path contains '..' component [ 166.385557][ T7839] tipc: Resetting bearer [ 166.459987][ T7839] tipc: Disabling bearer [ 166.611955][ T7863] ip6erspan0: entered promiscuous mode [ 166.641978][ T7863] ip6erspan0: entered allmulticast mode [ 166.759752][ T7868] validate_nla: 11 callbacks suppressed [ 166.759776][ T7868] netlink: 'syz.0.536': attribute type 7 has an invalid length. [ 166.779826][ T7868] netlink: 'syz.0.536': attribute type 8 has an invalid length. [ 166.903304][ T7871] tipc: Enabled bearer , priority 0 [ 166.935664][ T7871] syzkaller0: entered promiscuous mode [ 166.950686][ T7871] syzkaller0: entered allmulticast mode [ 166.986191][ T7871] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 167.067425][ T7883] netlink: 'syz.0.541': attribute type 3 has an invalid length. [ 167.076042][ T7892] netlink: 'syz.0.541': attribute type 3 has an invalid length. [ 167.091188][ T7871] tipc: Resetting bearer [ 167.197812][ T7867] tipc: Resetting bearer [ 167.221998][ T7867] tipc: Disabling bearer [ 167.764853][ T7929] tipc: Enabled bearer , priority 0 [ 167.892105][ T7929] syzkaller0: entered promiscuous mode [ 167.897983][ T7929] syzkaller0: entered allmulticast mode [ 167.909308][ T7934] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 167.979939][ T7929] tipc: Resetting bearer [ 168.009135][ T7928] tipc: Resetting bearer [ 168.059953][ T7928] tipc: Disabling bearer [ 168.077109][ T7940] __nla_validate_parse: 90 callbacks suppressed [ 168.077128][ T7940] netlink: 11 bytes leftover after parsing attributes in process `syz.1.556'. [ 168.093362][ T7940] netlink: 11 bytes leftover after parsing attributes in process `syz.1.556'. [ 168.321934][ T7947] netlink: 'syz.2.560': attribute type 10 has an invalid length. [ 168.359322][ T7948] netlink: 96 bytes leftover after parsing attributes in process `syz.0.559'. [ 168.385796][ T7947] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.427452][ T7947] bridge_slave_1: left allmulticast mode [ 168.441092][ T7947] bridge_slave_1: left promiscuous mode [ 168.450163][ T7947] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.484246][ T7947] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 168.524028][ T7948] 8021q: VLANs not supported on ip_vti0 [ 168.837912][ T7969] netlink: 'syz.4.565': attribute type 12 has an invalid length. [ 168.951097][ T7971] netlink: 'syz.4.565': attribute type 12 has an invalid length. [ 168.963964][ T7973] gre1: entered promiscuous mode [ 168.974801][ T7973] gre1: entered allmulticast mode [ 169.086102][ T7981] ve: renamed from veth0_vlan (while UP) [ 169.140850][ T7984] netlink: 192 bytes leftover after parsing attributes in process `syz.1.569'. [ 169.422832][ T7990] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 169.492917][ T7984] IPVS: dh: SCTP 172.20.20.187:0 - no destination available [ 169.773705][ T8018] IPVS: set_ctl: invalid protocol: 50 224.0.0.2:20004 [ 169.838658][ T8021] netlink: 'syz.4.576': attribute type 1 has an invalid length. [ 169.852576][ T8021] netlink: 144 bytes leftover after parsing attributes in process `syz.4.576'. [ 169.883710][ T8021] netlink: 'syz.4.576': attribute type 1 has an invalid length. [ 169.905627][ T8021] netlink: 'syz.4.576': attribute type 2 has an invalid length. [ 169.920115][ T8033] netlink: 24 bytes leftover after parsing attributes in process `syz.1.580'. [ 169.929993][ T8021] netlink: 64 bytes leftover after parsing attributes in process `syz.4.576'. [ 170.139546][ T8044] netlink: 4 bytes leftover after parsing attributes in process `syz.2.581'. [ 170.302593][ T8054] IPVS: set_ctl: invalid protocol: 108 127.0.0.1:20001 [ 170.420082][ T8064] netlink: 152 bytes leftover after parsing attributes in process `syz.1.587'. [ 171.155291][ T8096] syzkaller1: entered promiscuous mode [ 171.160940][ T8096] syzkaller1: entered allmulticast mode [ 171.551228][ T8120] netlink: 28 bytes leftover after parsing attributes in process `syz.3.603'. [ 171.703914][ T8126] erspan0: entered promiscuous mode [ 171.741602][ T8126] macvtap1: entered promiscuous mode [ 171.761011][ T8126] macvtap1: entered allmulticast mode [ 171.787716][ T8126] erspan0: entered allmulticast mode [ 171.847936][ T8136] erspan0: left allmulticast mode [ 171.853239][ T8136] erspan0: left promiscuous mode [ 172.195965][ T8155] validate_nla: 2 callbacks suppressed [ 172.195997][ T8155] netlink: 'syz.3.613': attribute type 1 has an invalid length. [ 172.856221][ T8185] vlan2: entered allmulticast mode [ 172.861454][ T8185] veth1: entered allmulticast mode [ 173.193811][ T8209] __nla_validate_parse: 4 callbacks suppressed [ 173.193832][ T8209] netlink: 4 bytes leftover after parsing attributes in process `syz.1.633'. [ 173.311168][ T8218] netlink: 68 bytes leftover after parsing attributes in process `syz.4.635'. [ 174.376477][ T8238] IPVS: set_ctl: invalid protocol: 44 172.20.20.170:20004 [ 174.420729][ T8247] netlink: 'syz.1.644': attribute type 11 has an invalid length. [ 174.436969][ T8247] netlink: 224 bytes leftover after parsing attributes in process `syz.1.644'. [ 174.766371][ T8271] netlink: 'syz.1.648': attribute type 1 has an invalid length. [ 174.808827][ T8271] netlink: 'syz.1.648': attribute type 1 has an invalid length. [ 175.023572][ T8292] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.654'. [ 175.621291][ T8324] netlink: 8 bytes leftover after parsing attributes in process `syz.1.662'. [ 175.631301][ T8324] netlink: 24 bytes leftover after parsing attributes in process `syz.1.662'. [ 175.641014][ T8324] netlink: 8 bytes leftover after parsing attributes in process `syz.1.662'. [ 175.655212][ T8324] netlink: 24 bytes leftover after parsing attributes in process `syz.1.662'. [ 176.106606][ T8350] netlink: 8 bytes leftover after parsing attributes in process `syz.0.671'. [ 176.139486][ T8347] tipc: Enabling of bearer rejected, failed to enable media [ 176.174930][ T8350] sctp: [Deprecated]: syz.0.671 (pid 8350) Use of int in maxseg socket option. [ 176.174930][ T8350] Use struct sctp_assoc_value instead [ 176.200171][ T8355] netlink: 64138 bytes leftover after parsing attributes in process `syz.3.673'. [ 176.304131][ T8354] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 176.852374][ T8389] syzkaller1: entered promiscuous mode [ 176.859689][ T8389] syzkaller1: entered allmulticast mode [ 176.951489][ T8400] syzkaller1: entered promiscuous mode [ 176.971446][ T8400] syzkaller1: entered allmulticast mode [ 177.090050][ T8403] tipc: Enabled bearer , priority 0 [ 177.131179][ T8403] syzkaller0: entered promiscuous mode [ 177.164193][ T8403] syzkaller0: entered allmulticast mode [ 177.200220][ T8403] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 177.290928][ T8403] tipc: Resetting bearer [ 177.461665][ T8422] netlink: 'syz.0.691': attribute type 29 has an invalid length. [ 177.490051][ T8402] tipc: Resetting bearer [ 177.577953][ T8402] tipc: Disabling bearer [ 177.656602][ T8437] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 177.664186][ T8437] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 177.893891][ T8448] C: left allmulticast mode [ 177.941390][ T8445] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 178.400976][ T8486] __nla_validate_parse: 7 callbacks suppressed [ 178.400999][ T8486] netlink: 666 bytes leftover after parsing attributes in process `syz.4.709'. [ 178.462213][ T8488] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 178.579178][ T8492] pim6reg1: entered promiscuous mode [ 178.584655][ T8492] pim6reg1: entered allmulticast mode [ 178.651887][ T8497] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 178.791648][ T8503] netem: incorrect gi model size [ 178.793515][ T8501] netlink: 40 bytes leftover after parsing attributes in process `syz.3.716'. [ 178.797763][ T8503] netem: change failed [ 178.953127][ T8511] netlink: 4 bytes leftover after parsing attributes in process `syz.1.718'. [ 178.983931][ T8511] team_slave_0: entered promiscuous mode [ 178.989911][ T8511] team_slave_1: entered promiscuous mode [ 179.124808][ T8522] netlink: 64 bytes leftover after parsing attributes in process `syz.4.723'. [ 179.330673][ T31] audit: type=1107 audit(1757577636.381:3): pid=8535 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='JX)ŴԄzZJkt-ë[d,s_D83cF4 [ 179.330673][ T31] Cdk^yz= "G(ݯ[Tq()Sݺ"3W,\KCy' [ 179.380004][ T8538] netlink: 12 bytes leftover after parsing attributes in process `syz.1.728'. [ 179.391138][ T8539] netlink: 12 bytes leftover after parsing attributes in process `syz.1.728'. [ 179.806594][ T8558] openvswitch: netlink: Missing key (keys=40, expected=100) [ 179.946763][ T8574] netlink: 12 bytes leftover after parsing attributes in process `syz.1.736'. [ 179.984432][ T8577] openvswitch: netlink: IPv4 frag type 255 is out of range max 2 [ 180.013569][ T8580] vlan3: entered allmulticast mode [ 180.019900][ T8580] bridge0: entered allmulticast mode [ 180.028604][ T8580] bridge4: port 1(vlan3) entered blocking state [ 180.041249][ T8580] bridge4: port 1(vlan3) entered disabled state [ 180.055940][ T8580] vlan3: entered promiscuous mode [ 180.065390][ T8580] bridge0: entered promiscuous mode [ 180.072756][ T8582] netlink: 44 bytes leftover after parsing attributes in process `syz.0.735'. [ 180.133879][ T8584] netlink: 8 bytes leftover after parsing attributes in process `syz.4.739'. [ 180.157904][ T8584] erspan0: entered promiscuous mode [ 180.202876][ T8586] netlink: 4 bytes leftover after parsing attributes in process `syz.3.740'. [ 180.231198][ T5875] Bluetooth: hci4: command tx timeout [ 182.696344][ T8689] netlink: 'syz.0.772': attribute type 11 has an invalid length. [ 182.783743][ T59] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 182.805241][ T5963] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 182.821110][ T5963] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 182.852706][ T5963] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 183.349305][ T8723] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 183.644165][ T8745] __nla_validate_parse: 9 callbacks suppressed [ 183.644185][ T8745] netlink: 12 bytes leftover after parsing attributes in process `syz.1.791'. [ 183.664705][ T8745] netlink: 28 bytes leftover after parsing attributes in process `syz.1.791'. [ 184.024753][ T8759] netlink: 36 bytes leftover after parsing attributes in process `syz.2.795'. [ 184.429332][ T8774] netlink: 104 bytes leftover after parsing attributes in process `syz.1.798'. [ 184.442240][ T8776] IPVS: Error connecting to the multicast addr [ 184.445870][ T8780] netlink: 20 bytes leftover after parsing attributes in process `syz.2.800'. [ 184.451584][ T8776] IPVS: set_ctl: invalid protocol: 0 172.20.20.23:20003 [ 184.619021][ T8784] netlink: 56 bytes leftover after parsing attributes in process `syz.4.802'. [ 184.628173][ T8784] netlink: 12 bytes leftover after parsing attributes in process `syz.4.802'. [ 184.637571][ T8784] netlink: 31 bytes leftover after parsing attributes in process `syz.4.802'. [ 184.647206][ T8784] netlink: 'syz.4.802': attribute type 2 has an invalid length. [ 184.655876][ T8784] netlink: 31 bytes leftover after parsing attributes in process `syz.4.802'. [ 184.667498][ T8784] netlink: 12 bytes leftover after parsing attributes in process `syz.4.802'. [ 185.865839][ T8828] team0: Device ip6gre1 is of different type [ 185.931220][ T8834] unknown channel width for channel at 909000KHz? [ 186.173887][ T8844] netlink: 'syz.2.819': attribute type 11 has an invalid length. [ 186.275998][ T8844] netlink: 'syz.2.819': attribute type 11 has an invalid length. [ 186.452454][ T8844] netlink: 'syz.2.819': attribute type 11 has an invalid length. [ 186.555136][ T8844] netlink: 'syz.2.819': attribute type 11 has an invalid length. [ 186.652181][ T8844] netlink: 'syz.2.819': attribute type 11 has an invalid length. [ 186.765399][ T8844] netlink: 'syz.2.819': attribute type 11 has an invalid length. [ 186.823100][ T8844] netlink: 'syz.2.819': attribute type 11 has an invalid length. [ 186.936339][ T8844] netlink: 'syz.2.819': attribute type 11 has an invalid length. [ 187.143179][ T8886] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 187.225611][ T8886] syzkaller1: entered promiscuous mode [ 187.231922][ T8886] syzkaller1: entered allmulticast mode [ 187.602818][ T8910] openvswitch: netlink: IPv4 frag type 255 is out of range max 2 [ 187.701673][ T8909] tipc: Enabling of bearer rejected, failed to enable media [ 188.096708][ T8933] sctp: [Deprecated]: syz.3.849 (pid 8933) Use of struct sctp_assoc_value in delayed_ack socket option. [ 188.096708][ T8933] Use struct sctp_sack_info instead [ 188.175649][ T8935] netlink: 'syz.0.850': attribute type 30 has an invalid length. [ 188.524677][ T8960] netdevsim netdevsim1 : renamed from netdevsim0 (while UP) [ 188.821373][ T8976] netlink: 'syz.2.866': attribute type 32 has an invalid length. [ 188.837251][ T8976] __nla_validate_parse: 21 callbacks suppressed [ 188.837271][ T8976] netlink: 8 bytes leftover after parsing attributes in process `syz.2.866'. [ 188.848735][ T8981] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 188.860562][ T8976] (unnamed net_device) (uninitialized): option coupled_control: invalid value (128) [ 188.951263][ T8985] netlink: 60 bytes leftover after parsing attributes in process `syz.4.862'. [ 188.977830][ T8985] unsupported nlmsg_type 40 [ 189.061684][ T8992] netlink: 188 bytes leftover after parsing attributes in process `syz.3.869'. [ 189.382846][ T9011] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 189.441130][ T9011] netlink: 8 bytes leftover after parsing attributes in process `syz.0.874'. [ 189.456216][ T5942] IPVS: starting estimator thread 0... [ 189.481383][ T9011] netlink: 8 bytes leftover after parsing attributes in process `syz.0.874'. [ 189.494880][ T9014] netlink: 4 bytes leftover after parsing attributes in process `syz.4.875'. [ 189.545269][ T9017] IPVS: using max 27 ests per chain, 64800 per kthread [ 189.893568][ T1000] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 189.950074][ T9038] tipc: Enabling of bearer rejected, failed to enable media [ 189.950265][ T1000] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 190.019788][ T9048] netlink: 4 bytes leftover after parsing attributes in process `syz.2.884'. [ 190.069035][ T9050] netlink: 4 bytes leftover after parsing attributes in process `syz.2.884'. [ 190.093057][ T9048] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 190.103128][ T9054] netlink: 8 bytes leftover after parsing attributes in process `syz.1.886'. [ 190.104908][ T9052] netlink: 12 bytes leftover after parsing attributes in process `syz.0.883'. [ 190.125008][ T9048] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 190.139153][ T9048] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 190.149798][ T9048] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 190.306096][ T9054] geneve2: entered promiscuous mode [ 190.322936][ T9054] geneve2: entered allmulticast mode [ 190.498924][ T9071] tipc: Enabling of bearer rejected, failed to enable media [ 190.691166][ T9049] delete_channel: no stack [ 190.745648][ T9080] syzkaller1: entered promiscuous mode [ 190.751196][ T9080] syzkaller1: entered allmulticast mode [ 190.850935][ T1000] tipc: Subscription rejected, illegal request [ 191.404114][ T9122] mac80211_hwsim hwsim9 wlan1: left promiscuous mode [ 191.424163][ T9122] mac80211_hwsim hwsim9 wlan1: left allmulticast mode [ 191.462378][ T9129] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 191.582494][ T9137] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 191.812247][ T9145] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 191.896353][ T9149] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 192.054110][ T5950] IPVS: starting estimator thread 0... [ 192.155181][ T9156] IPVS: using max 28 ests per chain, 67200 per kthread [ 192.201338][ T9159] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 192.289988][ T9160] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 192.490685][ T9182] lo: entered promiscuous mode [ 192.505909][ T9180] netlink: 'syz.1.921': attribute type 2 has an invalid length. [ 192.506658][ T9182] tunl0: entered promiscuous mode [ 192.594825][ T9182] gre0: entered promiscuous mode [ 192.660430][ T9182] gretap0: entered promiscuous mode [ 192.915189][ T9182] ip_vti0: entered promiscuous mode [ 193.124453][ T9207] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 193.192973][ T9212] netlink: 'syz.1.928': attribute type 1 has an invalid length. [ 193.277414][ T9204] hsr_slave_0 (unregistering): left promiscuous mode [ 193.329288][ T9210] vlan4: entered allmulticast mode [ 193.343333][ T9210] gretap0: entered allmulticast mode [ 193.559666][ T9232] macvlan0: entered promiscuous mode [ 193.567975][ T9232] macvlan0: entered allmulticast mode [ 193.639594][ T9227] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 193.794634][ T9235] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 193.841699][ T9250] netlink: 'syz.1.941': attribute type 1 has an invalid length. [ 193.850490][ T9235] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.870812][ T9235] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 193.933424][ T9247] tipc: Enabled bearer , priority 0 [ 193.959386][ T9239] syzkaller0: entered promiscuous mode [ 193.965503][ T9239] syzkaller0: entered allmulticast mode [ 194.030503][ T9235] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 194.058190][ T9235] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.092016][ T9235] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 194.199430][ T9247] tipc: Resetting bearer [ 194.268085][ T9269] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 194.288900][ T9269] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 194.302361][ T9269] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 194.317626][ T9267] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 194.383462][ T9235] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 194.400152][ T9235] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.412526][ T9235] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 194.431231][ T9233] tipc: Resetting bearer [ 194.453147][ T9233] tipc: Disabling bearer [ 194.536013][ T9235] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 194.549924][ T9235] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.561058][ T9235] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 194.584941][ T9274] veth1_to_bond: entered allmulticast mode [ 194.620935][ T9274] veth1_to_bond: left allmulticast mode [ 194.798228][ T30] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 194.820714][ T30] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 194.839479][ T30] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 194.848984][ T30] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 194.863782][ T30] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 194.882868][ T30] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 194.949175][ T9289] __nla_validate_parse: 17 callbacks suppressed [ 194.949195][ T9289] netlink: 256 bytes leftover after parsing attributes in process `syz.2.948'. [ 194.993170][ T59] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 195.043784][ T59] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 195.063162][ T59] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 195.136214][ T1331] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 195.169813][ T1331] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 195.199067][ T1331] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 195.364973][ T9317] netlink: 'syz.3.958': attribute type 2 has an invalid length. [ 195.489625][ T9323] netlink: 8 bytes leftover after parsing attributes in process `syz.3.961'. [ 195.998155][ T9356] netlink: 64138 bytes leftover after parsing attributes in process `syz.1.971'. [ 196.021949][ T9356] netlink: 8 bytes leftover after parsing attributes in process `syz.1.971'. [ 196.037460][ T9356] netlink: 8 bytes leftover after parsing attributes in process `syz.1.971'. [ 196.410497][ T9375] tipc: Enabled bearer , priority 0 [ 196.468136][ T9375] syzkaller0: entered promiscuous mode [ 196.473697][ T9375] syzkaller0: entered allmulticast mode [ 196.522351][ T9388] netlink: 24 bytes leftover after parsing attributes in process `syz.3.980'. [ 196.604561][ T9375] tipc: Resetting bearer [ 196.645355][ T9374] tipc: Resetting bearer [ 196.714303][ T9374] tipc: Disabling bearer [ 196.771539][ T9396] netlink: 4 bytes leftover after parsing attributes in process `syz.3.982'. [ 196.857895][ T9403] netlink: 'syz.2.985': attribute type 23 has an invalid length. [ 196.923017][ T9403] netlink: 'syz.2.985': attribute type 23 has an invalid length. [ 197.290227][ T9430] tipc: Enabled bearer , priority 0 [ 197.338776][ T9430] syzkaller0: entered promiscuous mode [ 197.352642][ T9430] syzkaller0: entered allmulticast mode [ 197.399973][ T9437] xt_limit: Overflow, try lower: 271964/0 [ 197.412303][ T9430] tipc: Resetting bearer [ 197.433514][ T9427] tipc: Resetting bearer [ 197.507457][ T9427] tipc: Disabling bearer [ 197.618810][ T9452] netlink: 'syz.0.997': attribute type 4 has an invalid length. [ 197.699895][ T9458] netlink: 'syz.0.997': attribute type 4 has an invalid length. [ 197.729179][ T9460] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1000'. [ 197.962386][ T9473] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1003'. [ 198.039381][ T9477] netlink: 'syz.4.1004': attribute type 1 has an invalid length. [ 198.065702][ T9477] netlink: 'syz.4.1004': attribute type 1 has an invalid length. [ 198.309862][ T9501] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1012'. [ 198.799391][ T9527] netlink: 'syz.4.1019': attribute type 1 has an invalid length. [ 198.837541][ T9529] syzkaller1: entered promiscuous mode [ 198.876124][ T9529] syzkaller1: entered allmulticast mode [ 198.987588][ T9537] tipc: Enabled bearer , priority 0 [ 199.005589][ T9537] syzkaller0: entered promiscuous mode [ 199.011123][ T9537] syzkaller0: entered allmulticast mode [ 199.084452][ T9537] tipc: Resetting bearer [ 199.105610][ T9543] netlink: 'syz.2.1024': attribute type 10 has an invalid length. [ 199.117997][ T9534] tipc: Resetting bearer [ 199.142951][ T9534] tipc: Disabling bearer [ 199.164148][ T9543] bridge0: port 1(bridge_slave_0) entered disabled state [ 199.190358][ T9543] bridge0: port 1(bridge_slave_0) entered blocking state [ 199.197782][ T9543] bridge0: port 1(bridge_slave_0) entered forwarding state [ 199.258231][ T9543] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 199.287271][ T9547] bridge_slave_0: left allmulticast mode [ 199.303885][ T9547] bridge_slave_0: left promiscuous mode [ 199.313327][ T9547] bridge0: port 1(bridge_slave_0) entered disabled state [ 199.350946][ T9547] bond0: (slave bridge0): Releasing backup interface [ 199.474358][ T9558] tipc: Enabled bearer , priority 0 [ 199.483360][ T9558] syzkaller0: entered promiscuous mode [ 199.489310][ T9558] syzkaller0: entered allmulticast mode [ 199.595824][ T9564] syzkaller0: MTU too low for tipc bearer [ 199.601634][ T9564] tipc: Disabling bearer [ 199.765610][ T9577] netlink: 'syz.3.1035': attribute type 1 has an invalid length. [ 199.939307][ T9577] 8021q: adding VLAN 0 to HW filter on device bond3 [ 199.969063][ T9587] tipc: Enabling of bearer rejected, failed to enable media [ 199.984458][ T9580] can: request_module (can-proto-0) failed. [ 200.206964][ T9601] __nla_validate_parse: 9 callbacks suppressed [ 200.206989][ T9601] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1041'. [ 200.220306][ T9600] netlink: 'syz.4.1040': attribute type 3 has an invalid length. [ 200.271282][ T9600] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1040'. [ 200.521801][ T9614] netlink: 'syz.2.1044': attribute type 1 has an invalid length. [ 200.561590][ T9614] netlink: 232 bytes leftover after parsing attributes in process `syz.2.1044'. [ 200.573076][ T9616] netlink: 'syz.0.1046': attribute type 1 has an invalid length. [ 200.587506][ T9614] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1044'. [ 200.628226][ T9616] 8021q: adding VLAN 0 to HW filter on device bond17 [ 200.649590][ T9616] vlan1: entered promiscuous mode [ 200.654842][ T9616] bond17: entered promiscuous mode [ 200.661152][ T9616] vlan1: entered allmulticast mode [ 200.666916][ T9616] bond17: entered allmulticast mode [ 200.726909][ T9616] bond17: (slave gretap1): making interface the new active one [ 200.744290][ T9616] gretap1: entered promiscuous mode [ 200.753218][ T9616] gretap1: entered allmulticast mode [ 200.762711][ T9616] bond17: (slave gretap1): Enslaving as an active interface with an up link [ 200.779452][ T9628] tipc: Enabled bearer , priority 0 [ 200.802028][ T9628] syzkaller0: entered promiscuous mode [ 200.821314][ T9628] syzkaller0: entered allmulticast mode [ 200.834005][ T9638] netlink: 'syz.2.1051': attribute type 1 has an invalid length. [ 200.944418][ T9638] 8021q: adding VLAN 0 to HW filter on device bond2 [ 200.961955][ T9628] tipc: Resetting bearer [ 201.006128][ T9640] 8021q: adding VLAN 0 to HW filter on device bond2 [ 201.013364][ T9640] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 201.027919][ T9649] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1051'. [ 201.030401][ T9640] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 201.078874][ T9638] veth3: entered promiscuous mode [ 201.090230][ T9638] bond2: (slave veth3): Enslaving as an active interface with a down link [ 201.100878][ T9627] tipc: Resetting bearer [ 201.114177][ T9652] netlink: 596 bytes leftover after parsing attributes in process `syz.0.1052'. [ 201.149510][ T9627] tipc: Disabling bearer [ 201.160850][ T9648] netlink: 'syz.0.1052': attribute type 29 has an invalid length. [ 201.172637][ T9649] 8021q: adding VLAN 0 to HW filter on device bond2 [ 201.189866][ T9654] openvswitch: netlink: IPv4 tunnel dst address is zero [ 201.203266][ T9652] netlink: 284 bytes leftover after parsing attributes in process `syz.0.1052'. [ 201.258120][ T9650] netlink: 'syz.0.1052': attribute type 29 has an invalid length. [ 201.574345][ T9675] Bluetooth: MGMT ver 1.23 [ 201.607957][ T9677] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1063'. [ 201.632897][ T9677] xfrm1: entered promiscuous mode [ 201.642159][ T9677] xfrm1: entered allmulticast mode [ 201.650094][ T9677] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1063'. [ 201.826752][ T9688] macsec0: entered promiscuous mode [ 201.837537][ T9688] macsec0: entered allmulticast mode [ 201.842939][ T9688] veth1_macvtap: entered allmulticast mode [ 201.892286][ T9690] tipc: Enabled bearer , priority 0 [ 201.931567][ T9690] syzkaller0: entered promiscuous mode [ 201.948012][ T9690] syzkaller0: entered allmulticast mode [ 201.975906][ T9690] tipc: Resetting bearer [ 201.987456][ T9689] tipc: Resetting bearer [ 202.048056][ T9689] tipc: Disabling bearer [ 202.104239][ T9700] sctp: [Deprecated]: syz.3.1072 (pid 9700) Use of struct sctp_assoc_value in delayed_ack socket option. [ 202.104239][ T9700] Use struct sctp_sack_info instead [ 202.330054][ T9717] netlink: 808 bytes leftover after parsing attributes in process `syz.1.1075'. [ 202.570288][ T9728] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x5 [ 202.580537][ T9729] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x5 [ 202.832250][ T9738] tipc: Enabled bearer , priority 0 [ 202.840891][ T9738] syzkaller0: entered promiscuous mode [ 202.846995][ T9738] syzkaller0: entered allmulticast mode [ 202.889281][ T9738] tipc: Resetting bearer [ 202.907213][ T9737] tipc: Resetting bearer [ 202.939633][ T9737] tipc: Disabling bearer [ 203.405271][ T9771] netlink: 'syz.3.1086': attribute type 2 has an invalid length. [ 203.861104][ T9786] bond3: (slave vcan1): The slave device specified does not support setting the MAC address [ 203.876286][ T9786] bond3: (slave vcan1): Error -95 calling set_mac_address [ 203.990171][ T9799] tipc: Enabled bearer , priority 0 [ 204.020108][ T9795] syzkaller0: entered promiscuous mode [ 204.028246][ T9795] syzkaller0: entered allmulticast mode [ 204.047768][ T9803] tipc: Enabled bearer , priority 0 [ 204.113501][ T9795] syzkaller0: mtu greater than device maximum [ 204.123646][ T9803] syzkaller0: entered promiscuous mode [ 204.142246][ T9803] syzkaller0: entered allmulticast mode [ 204.155791][ T9794] tipc: Resetting bearer [ 204.197100][ T9809] sctp: [Deprecated]: syz.1.1101 (pid 9809) Use of int in maxseg socket option. [ 204.197100][ T9809] Use struct sctp_assoc_value instead [ 204.234143][ T9794] tipc: Disabling bearer [ 204.294138][ T9814] tipc: Resetting bearer [ 204.341067][ T9801] tipc: Resetting bearer [ 204.383357][ T9817] IPVS: set_ctl: invalid protocol: 34 224.0.0.2:20001 [ 204.423060][ T9801] tipc: Disabling bearer [ 204.889286][ T9854] FAULT_INJECTION: forcing a failure. [ 204.889286][ T9854] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 204.905320][ T9854] CPU: 0 UID: 0 PID: 9854 Comm: syz.4.1111 Not tainted syzkaller #0 PREEMPT(full) [ 204.905354][ T9854] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 204.905374][ T9854] Call Trace: [ 204.905383][ T9854] [ 204.905392][ T9854] dump_stack_lvl+0x189/0x250 [ 204.905432][ T9854] ? __pfx____ratelimit+0x10/0x10 [ 204.905463][ T9854] ? __pfx_dump_stack_lvl+0x10/0x10 [ 204.905487][ T9854] ? __pfx__printk+0x10/0x10 [ 204.905515][ T9854] ? __might_fault+0xb0/0x130 [ 204.905556][ T9854] should_fail_ex+0x414/0x560 [ 204.905588][ T9854] _copy_from_iter+0x1de/0x1790 [ 204.905618][ T9854] ? rcu_is_watching+0x15/0xb0 [ 204.905639][ T9854] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 204.905668][ T9854] ? __pfx__copy_from_iter+0x10/0x10 [ 204.905690][ T9854] ? __build_skb_around+0x257/0x3e0 [ 204.905714][ T9854] ? netlink_sendmsg+0x642/0xb30 [ 204.905732][ T9854] ? skb_put+0x11b/0x210 [ 204.905756][ T9854] netlink_sendmsg+0x6b2/0xb30 [ 204.905786][ T9854] ? __pfx_netlink_sendmsg+0x10/0x10 [ 204.905808][ T9854] ? aa_sock_msg_perm+0xf1/0x1d0 [ 204.905829][ T9854] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 204.905851][ T9854] ? __pfx_netlink_sendmsg+0x10/0x10 [ 204.905872][ T9854] __sock_sendmsg+0x21c/0x270 [ 204.905904][ T9854] ____sys_sendmsg+0x505/0x830 [ 204.905933][ T9854] ? __pfx_____sys_sendmsg+0x10/0x10 [ 204.905966][ T9854] ? import_iovec+0x74/0xa0 [ 204.905994][ T9854] ___sys_sendmsg+0x21f/0x2a0 [ 204.906019][ T9854] ? __pfx____sys_sendmsg+0x10/0x10 [ 204.906088][ T9854] ? __fget_files+0x2a/0x420 [ 204.906104][ T9854] ? __fget_files+0x3a0/0x420 [ 204.906133][ T9854] __x64_sys_sendmsg+0x19b/0x260 [ 204.906159][ T9854] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 204.906193][ T9854] ? __pfx_ksys_write+0x10/0x10 [ 204.906218][ T9854] ? rcu_is_watching+0x15/0xb0 [ 204.906244][ T9854] ? do_syscall_64+0xbe/0x3b0 [ 204.906267][ T9854] do_syscall_64+0xfa/0x3b0 [ 204.906284][ T9854] ? lockdep_hardirqs_on+0x9c/0x150 [ 204.906314][ T9854] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 204.906334][ T9854] ? clear_bhb_loop+0x60/0xb0 [ 204.906359][ T9854] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 204.906378][ T9854] RIP: 0033:0x7f7f7518eba9 [ 204.906397][ T9854] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 204.906421][ T9854] RSP: 002b:00007f7f76048038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 204.906446][ T9854] RAX: ffffffffffffffda RBX: 00007f7f753d5fa0 RCX: 00007f7f7518eba9 [ 204.906461][ T9854] RDX: 0000000000040000 RSI: 0000200000000080 RDI: 0000000000000004 [ 204.906474][ T9854] RBP: 00007f7f76048090 R08: 0000000000000000 R09: 0000000000000000 [ 204.906486][ T9854] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 204.906497][ T9854] R13: 00007f7f753d6038 R14: 00007f7f753d5fa0 R15: 00007fff7e223d78 [ 204.906530][ T9854] [ 205.252788][ T9861] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 205.326856][ T9859] __nla_validate_parse: 13 callbacks suppressed [ 205.326877][ T9859] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1113'. [ 205.342728][ T9859] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1113'. [ 205.352135][ T9859] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1113'. [ 205.377894][ T9859] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1113'. [ 205.523702][ T9870] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 205.546664][ T9873] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1116'. [ 205.601363][ T9876] netlink: 10 bytes leftover after parsing attributes in process `syz.3.1118'. [ 205.718865][ T9869] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1117'. [ 205.838230][ T9887] validate_nla: 2 callbacks suppressed [ 205.838252][ T9887] netlink: 'syz.1.1122': attribute type 1 has an invalid length. [ 205.862518][ T9887] netlink: 232 bytes leftover after parsing attributes in process `syz.1.1122'. [ 205.873285][ T9887] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1122'. [ 205.924164][ T9891] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1123'. [ 208.025830][ T9944] netlink: 'syz.1.1140': attribute type 2 has an invalid length. [ 208.203277][ T9946] tap0: tun_chr_ioctl cmd 1074025672 [ 208.216855][ T9946] tap0: ignored: set checksum disabled [ 208.506003][ T9967] netlink: 'syz.1.1147': attribute type 1 has an invalid length. [ 208.634062][ T9981] nftables ruleset with unbound set [ 208.657025][ T9974] ip6tnl1: entered promiscuous mode [ 208.672699][ T9974] ip6tnl1: entered allmulticast mode [ 208.702640][ T13] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 208.713231][ T9981] netlink: 'syz.4.1148': attribute type 11 has an invalid length. [ 209.300191][T10007] lo: entered allmulticast mode [ 209.347193][T10009] IPVS: set_ctl: invalid protocol: 22 127.0.0.1:20001 [ 209.365878][T10003] lo: left allmulticast mode [ 209.647749][T10035] Bluetooth: MGMT ver 1.23 [ 209.675353][T10035] IPv6: NLM_F_CREATE should be specified when creating new route [ 209.961942][T10048] mac80211_hwsim hwsim11 wlan1: entered promiscuous mode [ 209.969600][T10048] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode [ 210.026224][T10048] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 210.057979][T10048] netlink: 'syz.4.1171': attribute type 10 has an invalid length. [ 210.090724][T10048] mac80211_hwsim hwsim11 wlan1: left promiscuous mode [ 210.091105][T10054] FAULT_INJECTION: forcing a failure. [ 210.091105][T10054] name failslab, interval 1, probability 0, space 0, times 0 [ 210.114432][T10054] CPU: 0 UID: 0 PID: 10054 Comm: syz.2.1173 Not tainted syzkaller #0 PREEMPT(full) [ 210.114460][T10054] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 210.114473][T10054] Call Trace: [ 210.114481][T10054] [ 210.114490][T10054] dump_stack_lvl+0x189/0x250 [ 210.114519][T10054] ? __pfx____ratelimit+0x10/0x10 [ 210.114550][T10054] ? __pfx_dump_stack_lvl+0x10/0x10 [ 210.114574][T10054] ? __pfx__printk+0x10/0x10 [ 210.114617][T10054] should_fail_ex+0x414/0x560 [ 210.114650][T10054] should_failslab+0xa8/0x100 [ 210.114690][T10054] kmem_cache_alloc_noprof+0x73/0x3c0 [ 210.114717][T10054] ? skb_clone+0x212/0x3a0 [ 210.114746][T10054] skb_clone+0x212/0x3a0 [ 210.114773][T10054] __netlink_deliver_tap+0x404/0x850 [ 210.114819][T10054] ? netlink_deliver_tap+0x2e/0x1b0 [ 210.114852][T10054] netlink_deliver_tap+0x19c/0x1b0 [ 210.114884][T10054] netlink_dump+0x92b/0xe90 [ 210.114927][T10054] ? __pfx_netlink_dump+0x10/0x10 [ 210.114975][T10054] ? __inet_diag_dump_start+0x89a/0xa10 [ 210.114998][T10054] ? netlink_lookup+0x30/0x200 [ 210.115038][T10054] __netlink_dump_start+0x5cb/0x7e0 [ 210.115076][T10054] inet_diag_rcv_msg_compat+0x1ea/0x3b0 [ 210.115101][T10054] ? __pfx_inet_diag_rcv_msg_compat+0x10/0x10 [ 210.115132][T10054] ? __pfx_inet_diag_dump_start_compat+0x10/0x10 [ 210.115151][T10054] ? __pfx_inet_diag_dump_compat+0x10/0x10 [ 210.115170][T10054] ? __pfx_inet_diag_dump_done+0x10/0x10 [ 210.115198][T10054] ? sock_diag_rcv_msg+0x188/0x600 [ 210.115232][T10054] sock_diag_rcv_msg+0x4cc/0x600 [ 210.115266][T10054] netlink_rcv_skb+0x205/0x470 [ 210.115298][T10054] ? __pfx_sock_diag_rcv_msg+0x10/0x10 [ 210.115329][T10054] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 210.115373][T10054] ? netlink_deliver_tap+0x2e/0x1b0 [ 210.115412][T10054] netlink_unicast+0x82f/0x9e0 [ 210.115449][T10054] ? __pfx_netlink_unicast+0x10/0x10 [ 210.115480][T10054] ? netlink_sendmsg+0x642/0xb30 [ 210.115496][T10054] ? skb_put+0x11b/0x210 [ 210.115520][T10054] netlink_sendmsg+0x805/0xb30 [ 210.115549][T10054] ? __pfx_netlink_sendmsg+0x10/0x10 [ 210.115572][T10054] ? aa_sock_msg_perm+0xf1/0x1d0 [ 210.115593][T10054] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 210.115615][T10054] ? __pfx_netlink_sendmsg+0x10/0x10 [ 210.115635][T10054] __sock_sendmsg+0x21c/0x270 [ 210.115665][T10054] ____sys_sendmsg+0x505/0x830 [ 210.115701][T10054] ? __pfx_____sys_sendmsg+0x10/0x10 [ 210.115734][T10054] ? import_iovec+0x74/0xa0 [ 210.115762][T10054] ___sys_sendmsg+0x21f/0x2a0 [ 210.115786][T10054] ? __pfx____sys_sendmsg+0x10/0x10 [ 210.115849][T10054] ? __fget_files+0x2a/0x420 [ 210.115866][T10054] ? __fget_files+0x3a0/0x420 [ 210.115895][T10054] __x64_sys_sendmsg+0x19b/0x260 [ 210.115921][T10054] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 210.115955][T10054] ? __pfx_ksys_write+0x10/0x10 [ 210.115989][T10054] ? do_syscall_64+0xbe/0x3b0 [ 210.116013][T10054] do_syscall_64+0xfa/0x3b0 [ 210.116031][T10054] ? lockdep_hardirqs_on+0x9c/0x150 [ 210.116060][T10054] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 210.116080][T10054] ? clear_bhb_loop+0x60/0xb0 [ 210.116105][T10054] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 210.116124][T10054] RIP: 0033:0x7effdf78eba9 [ 210.116143][T10054] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 210.116158][T10054] RSP: 002b:00007effe0671038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 210.116180][T10054] RAX: ffffffffffffffda RBX: 00007effdf9d5fa0 RCX: 00007effdf78eba9 [ 210.116194][T10054] RDX: 0000000000040000 RSI: 0000200000000080 RDI: 0000000000000004 [ 210.116206][T10054] RBP: 00007effe0671090 R08: 0000000000000000 R09: 0000000000000000 [ 210.116218][T10054] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 210.116230][T10054] R13: 00007effdf9d6038 R14: 00007effdf9d5fa0 R15: 00007ffe91645d38 [ 210.116262][T10054] [ 210.503501][T10048] mac80211_hwsim hwsim11 wlan1: left allmulticast mode [ 210.520748][T10048] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 210.559499][T10055] bridge_slave_0: left allmulticast mode [ 210.565533][T10055] bridge_slave_0: left promiscuous mode [ 210.573949][T10055] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.604465][T10055] bridge_slave_1: left allmulticast mode [ 210.634017][T10055] bridge_slave_1: left promiscuous mode [ 210.648015][T10055] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.669445][T10055] bond0: (slave bond_slave_0): Releasing backup interface [ 210.677729][T10062] __nla_validate_parse: 19 callbacks suppressed [ 210.677750][T10062] netlink: 45 bytes leftover after parsing attributes in process `syz.3.1176'. [ 210.702744][T10055] bond0: (slave bond_slave_1): Releasing backup interface [ 210.734618][T10055] team0: Port device team_slave_0 removed [ 210.777118][T10055] team0: Port device team_slave_1 removed [ 210.794711][T10055] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 210.814093][T10055] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 210.832922][T10055] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 210.834080][T10071] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1179'. [ 210.849721][T10055] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 210.864010][T10055] bond0: (slave wlan1): Releasing backup interface [ 210.890889][T10055] bond1: (slave geneve2): Releasing backup interface [ 210.984983][ T13] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 210.996191][ T13] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 211.012497][T10071] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !寿$ULvyآDUDw}z [ 211.055157][ T13] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 211.084984][ T13] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 211.108127][T10075] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1180'. [ 211.409028][T10099] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1188'. [ 211.452861][T10100] netlink: 'syz.2.1187': attribute type 21 has an invalid length. [ 211.477124][T10100] IPv6: NLM_F_CREATE should be specified when creating new route [ 211.495259][T10100] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 211.502863][T10100] IPv6: NLM_F_CREATE should be set when creating new route [ 211.510231][T10100] IPv6: NLM_F_CREATE should be set when creating new route [ 211.517525][T10100] IPv6: NLM_F_CREATE should be set when creating new route [ 212.293244][T10149] netlink: 13 bytes leftover after parsing attributes in process `syz.0.1202'. [ 212.577966][T10153] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 212.775838][T10174] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 213.014404][T10189] 8021q: VLANs not supported on ip_vti0 [ 213.025281][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 213.238723][T10200] netlink: 'syz.1.1216': attribute type 1 has an invalid length. [ 213.268866][T10200] netlink: 15 bytes leftover after parsing attributes in process `syz.1.1216'. [ 213.340462][T10206] netlink: 'syz.4.1218': attribute type 1 has an invalid length. [ 213.354893][T10205] syzkaller1: entered promiscuous mode [ 213.363626][T10205] syzkaller1: entered allmulticast mode [ 213.370207][T10206] netlink: 'syz.4.1218': attribute type 11 has an invalid length. [ 213.385899][T10206] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1218'. [ 213.616034][T10225] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1224'. [ 213.630682][T10225] Bluetooth: MGMT ver 1.23 [ 213.656472][T10232] syzkaller1: entered promiscuous mode [ 213.669331][T10232] syzkaller1: entered allmulticast mode [ 213.690701][T10227] syzkaller0: entered promiscuous mode [ 213.696834][T10227] syzkaller0: entered allmulticast mode [ 213.717328][T10232] netlink: 364 bytes leftover after parsing attributes in process `syz.2.1226'. [ 213.868313][T10243] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 213.899360][T10240] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 213.947471][T10249] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1230'. [ 214.070063][T10254] openvswitch: netlink: Flow key attribute not present in set flow. [ 214.793818][T10297] netlink: 'syz.3.1246': attribute type 11 has an invalid length. [ 215.526527][T10340] bridge0: entered promiscuous mode [ 215.547517][T10340] bridge0: entered allmulticast mode [ 215.753136][T10353] __nla_validate_parse: 5 callbacks suppressed [ 215.753159][T10353] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1260'. [ 216.216739][T10366] (unnamed net_device) (uninitialized): option mode: invalid value (133) [ 216.370177][T10380] netlink: zone id is out of range [ 216.376536][T10380] netlink: zone id is out of range [ 216.382205][T10380] netlink: zone id is out of range [ 216.390768][T10380] netlink: zone id is out of range [ 216.414789][T10380] netlink: zone id is out of range [ 216.455380][T10380] netlink: zone id is out of range [ 216.506415][T10380] netlink: zone id is out of range [ 216.512680][T10380] netlink: zone id is out of range [ 216.596749][T10380] netlink: zone id is out of range [ 216.602054][T10380] netlink: zone id is out of range [ 216.886281][T10404] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1273'. [ 217.513211][ T5875] Bluetooth: hci3: command 0x0406 tx timeout [ 217.515337][ T51] Bluetooth: hci1: command 0x0406 tx timeout [ 217.520619][ T5878] Bluetooth: hci2: command 0x0406 tx timeout [ 217.528191][ T51] Bluetooth: hci0: command 0x0406 tx timeout [ 217.714170][T10414] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1278'. [ 217.729777][T10417] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1277'. [ 217.785241][T10417] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1277'. [ 218.003395][T10433] team0: Device wireguard0 is of different type [ 218.413174][T10465] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1295'. [ 218.527370][T10473] syzkaller0: entered promiscuous mode [ 218.542783][T10473] syzkaller0: entered allmulticast mode [ 218.607041][T10473] netlink: 'syz.2.1296': attribute type 10 has an invalid length. [ 218.615001][T10466] bond2: (slave vcan1): The slave device specified does not support setting the MAC address [ 218.630512][T10466] bond2: (slave vcan1): Error -95 calling set_mac_address [ 218.668850][T10484] IPVS: length: 157 != 24 [ 218.781467][T10473] veth1_macvtap: left allmulticast mode [ 218.809432][T10473] veth1_macvtap: left promiscuous mode [ 218.835195][T10473] macsec0: left promiscuous mode [ 218.849526][T10473] macsec0: left allmulticast mode [ 219.063435][T10509] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1304'. [ 219.587878][T10535] netlink: 'syz.0.1311': attribute type 58 has an invalid length. [ 219.599511][T10535] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1311'. [ 219.702836][T10539] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1314'. [ 219.778245][T10547] netlink: 'syz.3.1316': attribute type 9 has an invalid length. [ 219.793673][T10542] veth1_macvtap: entered promiscuous mode [ 219.794427][T10550] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.1315'. [ 219.803909][T10542] veth1_macvtap: left promiscuous mode [ 219.951412][T10556] bond0: entered promiscuous mode [ 219.959917][T10556] bond_slave_1: entered promiscuous mode [ 219.971305][T10556] hsr1: entered promiscuous mode [ 220.155538][T10567] netlink: 'syz.2.1320': attribute type 10 has an invalid length. [ 220.223021][T10560] syz.2.1320 (10560) used greatest stack depth: 15608 bytes left [ 220.263706][T10571] netlink: 'syz.4.1321': attribute type 4 has an invalid length. [ 220.275301][T10570] netlink: 'syz.4.1321': attribute type 4 has an invalid length. [ 221.332984][T10640] __nla_validate_parse: 10 callbacks suppressed [ 221.333006][T10640] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1336'. [ 221.350527][T10638] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1336'. [ 221.351150][T10639] netlink: 'syz.2.1337': attribute type 3 has an invalid length. [ 221.482298][T10646] IPv6: sit2: Disabled Multicast RS [ 221.508275][T10646] sit2: entered allmulticast mode [ 221.551893][T10651] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1340'. [ 221.825287][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 221.844557][T10667] team0: Device ip6gre2 is of different type [ 221.934068][T10675] mac80211_hwsim hwsim9 : renamed from wlan1 [ 222.240109][T10697] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1355'. [ 222.406275][T10707] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1356'. [ 222.481910][T10711] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1358'. [ 222.584406][T10716] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1361'. [ 222.615952][T10720] netlink: 108 bytes leftover after parsing attributes in process `syz.1.1360'. [ 222.645311][T10720] netlink: 108 bytes leftover after parsing attributes in process `syz.1.1360'. [ 222.663411][T10720] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1360'. [ 223.059849][T10742] netlink: 'syz.0.1371': attribute type 4 has an invalid length. [ 223.066683][T10748] syz.1.1372: vmalloc error: size 6291456, failed to allocated page array size 12288, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 223.119450][T10748] CPU: 0 UID: 0 PID: 10748 Comm: syz.1.1372 Not tainted syzkaller #0 PREEMPT(full) [ 223.119481][T10748] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 223.119494][T10748] Call Trace: [ 223.119502][T10748] [ 223.119512][T10748] dump_stack_lvl+0x189/0x250 [ 223.119543][T10748] ? __pfx_rcu_read_unlock_special+0x10/0x10 [ 223.119574][T10748] ? __pfx_dump_stack_lvl+0x10/0x10 [ 223.119606][T10748] ? __pfx__printk+0x10/0x10 [ 223.119635][T10748] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 223.119660][T10748] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 223.119692][T10748] warn_alloc+0x214/0x310 [ 223.119729][T10748] ? __pfx_warn_alloc+0x10/0x10 [ 223.119770][T10748] ? __get_vm_area_node+0x28f/0x300 [ 223.119799][T10748] ? hash_ipport_create+0x741/0x1410 [ 223.119834][T10748] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 223.119893][T10748] ? alloc_pages_mpol+0x3cd/0x4a0 [ 223.119924][T10748] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 223.119959][T10748] ? rcu_is_watching+0x15/0xb0 [ 223.119980][T10748] ? hash_ipport_create+0x741/0x1410 [ 223.120008][T10748] ? hash_ipport_create+0x741/0x1410 [ 223.120036][T10748] __kvmalloc_node_noprof+0x3b8/0x5f0 [ 223.120064][T10748] ? hash_ipport_create+0x741/0x1410 [ 223.120094][T10748] ? hash_ipport_create+0x6d5/0x1410 [ 223.120128][T10748] hash_ipport_create+0x741/0x1410 [ 223.120159][T10748] ? __lock_acquire+0xab9/0xd20 [ 223.120205][T10748] ? __pfx_hash_ipport_create+0x10/0x10 [ 223.120238][T10748] ? __nla_parse+0x40/0x60 [ 223.120269][T10748] ? __pfx_hash_ipport_create+0x10/0x10 [ 223.120302][T10748] ip_set_create+0xa94/0x1940 [ 223.120329][T10748] ? ip_set_create+0x4a2/0x1940 [ 223.120368][T10748] ? __pfx_ip_set_create+0x10/0x10 [ 223.120436][T10748] nfnetlink_rcv_msg+0xb4d/0x1130 [ 223.120466][T10748] ? nfnetlink_rcv_msg+0x20d/0x1130 [ 223.120516][T10748] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 223.120540][T10748] ? kasan_save_free_info+0x46/0x50 [ 223.120625][T10748] netlink_rcv_skb+0x205/0x470 [ 223.120658][T10748] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 223.120688][T10748] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 223.120733][T10748] ? bpf_lsm_capable+0x9/0x20 [ 223.120761][T10748] ? security_capable+0x7e/0x2e0 [ 223.120801][T10748] nfnetlink_rcv+0x26a/0x2520 [ 223.120833][T10748] ? __dev_queue_xmit+0x1d79/0x3b50 [ 223.120872][T10748] ? __dev_queue_xmit+0x27b/0x3b50 [ 223.120911][T10748] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 223.120939][T10748] ? __pfx___dev_queue_xmit+0x10/0x10 [ 223.120981][T10748] ? ref_tracker_free+0x63a/0x7d0 [ 223.121010][T10748] ? __asan_memcpy+0x40/0x70 [ 223.121033][T10748] ? __pfx_ref_tracker_free+0x10/0x10 [ 223.121081][T10748] ? skb_clone+0x246/0x3a0 [ 223.121109][T10748] ? __netlink_deliver_tap+0x807/0x850 [ 223.121140][T10748] ? netlink_deliver_tap+0x2e/0x1b0 [ 223.121179][T10748] ? netlink_deliver_tap+0x2e/0x1b0 [ 223.121219][T10748] netlink_unicast+0x82f/0x9e0 [ 223.121263][T10748] ? __pfx_netlink_unicast+0x10/0x10 [ 223.121295][T10748] ? netlink_sendmsg+0x642/0xb30 [ 223.121311][T10748] ? skb_put+0x11b/0x210 [ 223.121336][T10748] netlink_sendmsg+0x805/0xb30 [ 223.121366][T10748] ? __pfx_netlink_sendmsg+0x10/0x10 [ 223.121390][T10748] ? aa_sock_msg_perm+0xf1/0x1d0 [ 223.121412][T10748] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 223.121433][T10748] ? __pfx_netlink_sendmsg+0x10/0x10 [ 223.121454][T10748] __sock_sendmsg+0x21c/0x270 [ 223.121486][T10748] ____sys_sendmsg+0x505/0x830 [ 223.121516][T10748] ? __pfx_____sys_sendmsg+0x10/0x10 [ 223.121551][T10748] ? import_iovec+0x74/0xa0 [ 223.121578][T10748] ___sys_sendmsg+0x21f/0x2a0 [ 223.121610][T10748] ? __pfx____sys_sendmsg+0x10/0x10 [ 223.121676][T10748] ? __fget_files+0x2a/0x420 [ 223.121693][T10748] ? __fget_files+0x3a0/0x420 [ 223.121724][T10748] __x64_sys_sendmsg+0x19b/0x260 [ 223.121751][T10748] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 223.121786][T10748] ? rcu_is_watching+0x15/0xb0 [ 223.121812][T10748] ? do_syscall_64+0xbe/0x3b0 [ 223.121837][T10748] do_syscall_64+0xfa/0x3b0 [ 223.121855][T10748] ? lockdep_hardirqs_on+0x9c/0x150 [ 223.121886][T10748] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 223.121906][T10748] ? clear_bhb_loop+0x60/0xb0 [ 223.121931][T10748] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 223.121951][T10748] RIP: 0033:0x7f018b78eba9 [ 223.121970][T10748] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 223.121987][T10748] RSP: 002b:00007f018c680038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 223.122009][T10748] RAX: ffffffffffffffda RBX: 00007f018b9d6090 RCX: 00007f018b78eba9 [ 223.122024][T10748] RDX: 0000000000004020 RSI: 0000200000000280 RDI: 0000000000000004 [ 223.122036][T10748] RBP: 00007f018b811e19 R08: 0000000000000000 R09: 0000000000000000 [ 223.122049][T10748] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 223.122060][T10748] R13: 00007f018b9d6128 R14: 00007f018b9d6090 R15: 00007fff7d0b85c8 [ 223.122094][T10748] [ 223.122117][T10748] Mem-Info: [ 223.636431][T10748] active_anon:4647 inactive_anon:0 isolated_anon:0 [ 223.636431][T10748] active_file:2697 inactive_file:39907 isolated_file:0 [ 223.636431][T10748] unevictable:768 dirty:85 writeback:0 [ 223.636431][T10748] slab_reclaimable:12185 slab_unreclaimable:103443 [ 223.636431][T10748] mapped:29185 shmem:1356 pagetables:1262 [ 223.636431][T10748] sec_pagetables:0 bounce:0 [ 223.636431][T10748] kernel_misc_reclaimable:0 [ 223.636431][T10748] free:1322140 free_pcp:14793 free_cma:0 [ 223.684941][T10748] Node 0 active_anon:18672kB inactive_anon:0kB active_file:10788kB inactive_file:159424kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:116704kB dirty:336kB writeback:0kB shmem:3892kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13000kB pagetables:4896kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 223.729363][ C0] vcan0: j1939_tp_rxtimer: 0xffff888029729800: rx timeout, send abort [ 223.758178][T10748] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:80kB pagetables:152kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 223.794612][T10748] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 223.826371][T10748] lowmem_reserve[]: 0 2497 2499 2499 2499 [ 223.833273][T10748] Node 0 DMA32 free:1382232kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:18624kB inactive_anon:0kB active_file:10788kB inactive_file:157848kB unevictable:1536kB writepending:336kB present:3129332kB managed:2557428kB mlocked:0kB bounce:0kB free_pcp:41348kB local_pcp:20712kB free_cma:0kB [ 223.869586][T10748] lowmem_reserve[]: 0 0 1 1 1 [ 223.874470][T10748] Node 0 Normal free:12kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1576kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 223.907580][T10748] lowmem_reserve[]: 0 0 0 0 0 [ 223.916905][T10748] Node 1 Normal free:3890888kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:18380kB local_pcp:8320kB free_cma:0kB [ 223.959600][T10748] lowmem_reserve[]: 0 0 0 0 0 [ 223.972790][T10748] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 224.002288][T10748] Node 0 DMA32: 2*4kB (UE) 292*8kB (UM) 154*16kB (UME) 309*32kB (UM) 79*64kB (UM) 46*128kB (UME) 40*256kB (UM) 17*512kB (UME) 12*1024kB (UM) 11*2048kB (UME) 318*4096kB (UM) = 1381928kB [ 224.024100][T10748] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 224.043296][T10748] Node 1 Normal: 188*4kB (U) 57*8kB (UME) 43*16kB (UME) 73*32kB (UME) 29*64kB (UME) 6*128kB (UME) 4*256kB (ME) 6*512kB (UME) 5*1024kB (UME) 0*2048kB 946*4096kB (M) = 3890888kB [ 224.064098][T10748] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 224.074606][T10748] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 224.085002][T10748] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 224.102541][T10776] dvmrp0: entered allmulticast mode [ 224.125543][T10748] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 224.139995][T10776] dvmrp0: left allmulticast mode [ 224.145874][T10748] 43957 total pagecache pages [ 224.145904][T10748] 0 pages in swap cache [ 224.145914][T10748] Free swap = 124996kB [ 224.145924][T10748] Total swap = 124996kB [ 224.171901][T10748] 2097051 pages RAM [ 224.177018][T10748] 0 pages HighMem/MovableOnly [ 224.181736][T10748] 425668 pages reserved [ 224.187625][T10748] 0 pages cma reserved [ 224.237922][ C0] vcan0: j1939_tp_rxtimer: 0xffff888029729800: abort rx timeout. Force session deactivation [ 224.797092][T10808] 8021q: VLANs not supported on ip6tnl0 [ 224.846693][T10808] netlink: 'syz.2.1389': attribute type 24 has an invalid length. [ 225.407409][T10842] netlink: 'syz.0.1401': attribute type 9 has an invalid length. [ 225.564767][T10855] netlink: 'syz.1.1404': attribute type 6 has an invalid length. [ 225.601984][T10855] netlink: 'syz.1.1404': attribute type 5 has an invalid length. [ 225.732109][T10859] syzkaller0: entered promiscuous mode [ 225.739699][T10859] syzkaller0: entered allmulticast mode [ 225.957446][T10870] IPv6: NLM_F_CREATE should be specified when creating new route [ 226.081803][ T5921] hid-generic 0005:0007:5505.0001: unknown main item tag 0x0 [ 226.144359][ T5921] hid-generic 0005:0007:5505.0001: hidraw0: BLUETOOTH HID v0.08 Device [syz0] on aa:aa:aa:aa:aa:aa [ 226.336501][T10894] __nla_validate_parse: 13 callbacks suppressed [ 226.336533][T10894] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1417'. [ 226.422505][T10900] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1416'. [ 226.433452][T10900] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1416'. [ 226.465625][T10899] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1418'. [ 226.907284][T10935] bond0: option ad_select: unable to set because the bond device is up [ 226.952866][T10935] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1428'. [ 228.339150][T11018] sch_tbf: peakrate 7 is lower than or equals to rate 2147483647 ! [ 228.352152][T11018] atomic_op ffff8880327f4198 conn xmit_atomic 0000000000000000 [ 228.369444][T11018] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1451'. [ 228.420807][T11019] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.1451'. [ 228.490524][T11020] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.1451'. [ 228.589789][T11030] (unnamed net_device) (uninitialized): option arp_validate: mode dependency failed, not supported in mode balance-tlb(5) [ 228.927159][T11068] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1463'. [ 228.974144][T10221] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 229.012066][T11074] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1463'. [ 229.040507][T11062] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 229.376752][T11092] syzkaller1: entered promiscuous mode [ 229.395204][T11092] syzkaller1: entered allmulticast mode [ 229.538644][T11104] netlink: 'syz.4.1473': attribute type 2 has an invalid length. [ 229.558971][T11104] tipc: Enabled bearer , priority 0 [ 229.650587][T11104] syzkaller0: entered promiscuous mode [ 229.660906][T11104] syzkaller0: entered allmulticast mode [ 229.715344][T11103] tipc: Resetting bearer [ 229.747538][T11103] tipc: Disabling bearer [ 229.881453][T11120] net_ratelimit: 51 callbacks suppressed [ 229.881477][T11120] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 230.066601][T11122] [ 230.069177][T11122] ====================================================== [ 230.076401][T11122] WARNING: possible circular locking dependency detected [ 230.083537][T11122] syzkaller #0 Not tainted [ 230.087958][T11122] ------------------------------------------------------ [ 230.094974][T11122] syz.0.1478/11122 is trying to acquire lock: [ 230.101043][T11122] ffffffff8e21e628 (pcpu_alloc_mutex){+.+.}-{4:4}, at: pcpu_alloc_noprof+0x286/0x16b0 [ 230.110729][T11122] [ 230.110729][T11122] but task is already holding lock: [ 230.118097][T11122] ffff888024da3b88 (&q->q_usage_counter(io)#49){++++}-{0:0}, at: nbd_start_device+0x17f/0xb10 [ 230.128400][T11122] [ 230.128400][T11122] which lock already depends on the new lock. [ 230.128400][T11122] [ 230.138920][T11122] [ 230.138920][T11122] the existing dependency chain (in reverse order) is: [ 230.148090][T11122] [ 230.148090][T11122] -> #2 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 230.156823][T11122] lock_acquire+0x120/0x360 [ 230.161880][T11122] blk_alloc_queue+0x538/0x620 [ 230.167192][T11122] __blk_mq_alloc_disk+0x15c/0x340 [ 230.172836][T11122] nbd_dev_add+0x46c/0xae0 [ 230.177888][T11122] nbd_init+0x168/0x1f0 [ 230.182591][T11122] do_one_initcall+0x233/0x820 [ 230.187917][T11122] do_initcall_level+0x104/0x190 [ 230.193592][T11122] do_initcalls+0x59/0xa0 [ 230.198490][T11122] kernel_init_freeable+0x334/0x4b0 [ 230.204251][T11122] kernel_init+0x1d/0x1d0 [ 230.209124][T11122] ret_from_fork+0x3fc/0x770 [ 230.214248][T11122] ret_from_fork_asm+0x1a/0x30 [ 230.219554][T11122] [ 230.219554][T11122] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 230.226781][T11122] lock_acquire+0x120/0x360 [ 230.231835][T11122] fs_reclaim_acquire+0x72/0x100 [ 230.237400][T11122] prepare_alloc_pages+0x153/0x610 [ 230.243040][T11122] __alloc_frozen_pages_noprof+0x123/0x370 [ 230.249396][T11122] __alloc_pages_noprof+0xa/0x30 [ 230.254887][T11122] pcpu_populate_chunk+0x182/0xb30 [ 230.260548][T11122] pcpu_alloc_noprof+0xcbf/0x16b0 [ 230.266368][T11122] bpf_map_alloc_percpu+0xbc/0x1b0 [ 230.272031][T11122] prealloc_init+0x225/0x630 [ 230.277790][T11122] htab_map_alloc+0x6ce/0xc70 [ 230.283014][T11122] map_create+0xaa0/0x14d0 [ 230.288150][T11122] __sys_bpf+0x60f/0x870 [ 230.293278][T11122] __x64_sys_bpf+0x7c/0x90 [ 230.298235][T11122] do_syscall_64+0xfa/0x3b0 [ 230.303275][T11122] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 230.309695][T11122] [ 230.309695][T11122] -> #0 (pcpu_alloc_mutex){+.+.}-{4:4}: [ 230.317472][T11122] validate_chain+0xb9b/0x2140 [ 230.322766][T11122] __lock_acquire+0xab9/0xd20 [ 230.328064][T11122] lock_acquire+0x120/0x360 [ 230.333104][T11122] __mutex_lock+0x187/0x1350 [ 230.338222][T11122] pcpu_alloc_noprof+0x286/0x16b0 [ 230.343867][T11122] sbitmap_init_node+0x1e1/0x630 [ 230.349356][T11122] sbitmap_queue_init_node+0x3e/0x4d0 [ 230.355253][T11122] blk_mq_init_tags+0x110/0x280 [ 230.360643][T11122] blk_mq_alloc_map_and_rqs+0xbd/0x9f0 [ 230.366642][T11122] blk_mq_update_nr_hw_queues+0xa26/0x1aa0 [ 230.373084][T11122] nbd_start_device+0x17f/0xb10 [ 230.378474][T11122] nbd_genl_connect+0x135b/0x18f0 [ 230.384041][T11122] genl_family_rcv_msg_doit+0x215/0x300 [ 230.390143][T11122] genl_rcv_msg+0x60e/0x790 [ 230.395182][T11122] netlink_rcv_skb+0x205/0x470 [ 230.400482][T11122] genl_rcv+0x28/0x40 [ 230.404993][T11122] netlink_unicast+0x82f/0x9e0 [ 230.410298][T11122] netlink_sendmsg+0x805/0xb30 [ 230.415588][T11122] __sock_sendmsg+0x21c/0x270 [ 230.420900][T11122] ____sys_sendmsg+0x505/0x830 [ 230.426382][T11122] ___sys_sendmsg+0x21f/0x2a0 [ 230.431609][T11122] __x64_sys_sendmsg+0x19b/0x260 [ 230.437264][T11122] do_syscall_64+0xfa/0x3b0 [ 230.442305][T11122] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 230.449088][T11122] [ 230.449088][T11122] other info that might help us debug this: [ 230.449088][T11122] [ 230.459339][T11122] Chain exists of: [ 230.459339][T11122] pcpu_alloc_mutex --> fs_reclaim --> &q->q_usage_counter(io)#49 [ 230.459339][T11122] [ 230.473024][T11122] Possible unsafe locking scenario: [ 230.473024][T11122] [ 230.480504][T11122] CPU0 CPU1 [ 230.485881][T11122] ---- ---- [ 230.491256][T11122] lock(&q->q_usage_counter(io)#49); [ 230.496675][T11122] lock(fs_reclaim); [ 230.503187][T11122] lock(&q->q_usage_counter(io)#49); [ 230.511185][T11122] lock(pcpu_alloc_mutex); [ 230.515786][T11122] [ 230.515786][T11122] *** DEADLOCK *** [ 230.515786][T11122] [ 230.523942][T11122] 6 locks held by syz.0.1478/11122: [ 230.529149][T11122] #0: ffffffff8f59e930 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 230.537362][T11122] #1: ffffffff8f59e748 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 230.546348][T11122] #2: ffff888143f20988 (&set->update_nr_hwq_lock){++++}-{4:4}, at: blk_mq_update_nr_hw_queues+0xa7/0x1aa0 [ 230.557842][T11122] #3: ffff888143f208d8 (&set->tag_list_lock){+.+.}-{4:4}, at: blk_mq_update_nr_hw_queues+0xba/0x1aa0 [ 230.568879][T11122] #4: ffff888024da3b88 (&q->q_usage_counter(io)#49){++++}-{0:0}, at: nbd_start_device+0x17f/0xb10 [ 230.579634][T11122] #5: ffff888024da3bc0 (&q->q_usage_counter(queue)#33){+.+.}-{0:0}, at: nbd_start_device+0x17f/0xb10 [ 230.590645][T11122] [ 230.590645][T11122] stack backtrace: [ 230.596545][T11122] CPU: 1 UID: 0 PID: 11122 Comm: syz.0.1478 Not tainted syzkaller #0 PREEMPT(full) [ 230.596567][T11122] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 230.596579][T11122] Call Trace: [ 230.596586][T11122] [ 230.596593][T11122] dump_stack_lvl+0x189/0x250 [ 230.596618][T11122] ? __pfx_dump_stack_lvl+0x10/0x10 [ 230.596638][T11122] ? __pfx__printk+0x10/0x10 [ 230.596663][T11122] ? print_lock_name+0xde/0x100 [ 230.596687][T11122] print_circular_bug+0x2ee/0x310 [ 230.596708][T11122] check_noncircular+0x134/0x160 [ 230.596729][T11122] validate_chain+0xb9b/0x2140 [ 230.596756][T11122] __lock_acquire+0xab9/0xd20 [ 230.596783][T11122] ? pcpu_alloc_noprof+0x286/0x16b0 [ 230.596808][T11122] lock_acquire+0x120/0x360 [ 230.596832][T11122] ? pcpu_alloc_noprof+0x286/0x16b0 [ 230.596862][T11122] __mutex_lock+0x187/0x1350 [ 230.596878][T11122] ? pcpu_alloc_noprof+0x286/0x16b0 [ 230.596909][T11122] ? kasan_save_track+0x4f/0x80 [ 230.596930][T11122] ? kasan_save_track+0x3e/0x80 [ 230.596949][T11122] ? __kasan_kmalloc+0x93/0xb0 [ 230.596970][T11122] ? blk_mq_init_tags+0x85/0x280 [ 230.596989][T11122] ? blk_mq_alloc_map_and_rqs+0xbd/0x9f0 [ 230.597015][T11122] ? blk_mq_update_nr_hw_queues+0xa26/0x1aa0 [ 230.597031][T11122] ? pcpu_alloc_noprof+0x286/0x16b0 [ 230.597054][T11122] ? nbd_genl_connect+0x135b/0x18f0 [ 230.597079][T11122] ? genl_family_rcv_msg_doit+0x215/0x300 [ 230.597100][T11122] ? genl_rcv_msg+0x60e/0x790 [ 230.597119][T11122] ? __pfx___mutex_lock+0x10/0x10 [ 230.597133][T11122] ? ____sys_sendmsg+0x505/0x830 [ 230.597169][T11122] ? do_syscall_64+0xfa/0x3b0 [ 230.597184][T11122] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 230.597208][T11122] pcpu_alloc_noprof+0x286/0x16b0 [ 230.597239][T11122] sbitmap_init_node+0x1e1/0x630 [ 230.597257][T11122] ? __kasan_kmalloc+0x93/0xb0 [ 230.597280][T11122] sbitmap_queue_init_node+0x3e/0x4d0 [ 230.597299][T11122] blk_mq_init_tags+0x110/0x280 [ 230.597320][T11122] blk_mq_alloc_map_and_rqs+0xbd/0x9f0 [ 230.597350][T11122] ? blk_mq_update_nr_hw_queues+0x928/0x1aa0 [ 230.597366][T11122] ? kfree+0x18e/0x440 [ 230.597389][T11122] blk_mq_update_nr_hw_queues+0xa26/0x1aa0 [ 230.597414][T11122] ? __pfx_blk_mq_update_nr_hw_queues+0x10/0x10 [ 230.597440][T11122] ? sysfs_add_file_mode_ns+0x259/0x300 [ 230.597470][T11122] nbd_start_device+0x17f/0xb10 [ 230.597498][T11122] ? device_create_file+0xf4/0x1c0 [ 230.597516][T11122] nbd_genl_connect+0x135b/0x18f0 [ 230.597545][T11122] ? __pfx_nbd_genl_connect+0x10/0x10 [ 230.597575][T11122] ? __nla_parse+0x40/0x60 [ 230.597602][T11122] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 230.597626][T11122] genl_family_rcv_msg_doit+0x215/0x300 [ 230.597651][T11122] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 230.597677][T11122] ? stack_trace_save+0x9c/0xe0 [ 230.597699][T11122] genl_rcv_msg+0x60e/0x790 [ 230.597721][T11122] ? __pfx_genl_rcv_msg+0x10/0x10 [ 230.597740][T11122] ? __pfx_nbd_genl_connect+0x10/0x10 [ 230.597771][T11122] netlink_rcv_skb+0x205/0x470 [ 230.597795][T11122] ? __lock_acquire+0xab9/0xd20 [ 230.597819][T11122] ? __pfx_genl_rcv_msg+0x10/0x10 [ 230.597839][T11122] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 230.597872][T11122] ? down_read+0x1ad/0x2e0 [ 230.597889][T11122] genl_rcv+0x28/0x40 [ 230.597914][T11122] netlink_unicast+0x82f/0x9e0 [ 230.597940][T11122] ? __pfx_netlink_unicast+0x10/0x10 [ 230.597964][T11122] ? netlink_sendmsg+0x642/0xb30 [ 230.597978][T11122] ? skb_put+0x11b/0x210 [ 230.597995][T11122] netlink_sendmsg+0x805/0xb30 [ 230.598014][T11122] ? __pfx_netlink_sendmsg+0x10/0x10 [ 230.598029][T11122] ? aa_sock_msg_perm+0xf1/0x1d0 [ 230.598046][T11122] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 230.598064][T11122] ? __pfx_netlink_sendmsg+0x10/0x10 [ 230.598080][T11122] __sock_sendmsg+0x21c/0x270 [ 230.598103][T11122] ____sys_sendmsg+0x505/0x830 [ 230.598123][T11122] ? __pfx_____sys_sendmsg+0x10/0x10 [ 230.598146][T11122] ? import_iovec+0x74/0xa0 [ 230.598167][T11122] ___sys_sendmsg+0x21f/0x2a0 [ 230.598186][T11122] ? __pfx____sys_sendmsg+0x10/0x10 [ 230.598219][T11122] ? __fget_files+0x2a/0x420 [ 230.598232][T11122] ? __fget_files+0x3a0/0x420 [ 230.598250][T11122] __x64_sys_sendmsg+0x19b/0x260 [ 230.598269][T11122] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 230.598292][T11122] ? rcu_is_watching+0x15/0xb0 [ 230.598310][T11122] ? do_syscall_64+0xbe/0x3b0 [ 230.598327][T11122] do_syscall_64+0xfa/0x3b0 [ 230.598342][T11122] ? lockdep_hardirqs_on+0x9c/0x150 [ 230.598366][T11122] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 230.598382][T11122] ? clear_bhb_loop+0x60/0xb0 [ 230.598400][T11122] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 230.598416][T11122] RIP: 0033:0x7febb558eba9 [ 230.598432][T11122] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 230.598447][T11122] RSP: 002b:00007febb6418038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 230.598466][T11122] RAX: ffffffffffffffda RBX: 00007febb57d5fa0 RCX: 00007febb558eba9 [ 230.598479][T11122] RDX: 0000000020000000 RSI: 0000200000001ac0 RDI: 0000000000000009 [ 230.598490][T11122] RBP: 00007febb5611e19 R08: 0000000000000000 R09: 0000000000000000 [ 230.598500][T11122] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 230.598510][T11122] R13: 00007febb57d6038 R14: 00007febb57d5fa0 R15: 00007ffdada0e3e8 [ 230.598529][T11122] [ 231.161856][ T51] block nbd0: Receive control failed (result -32) [ 231.167866][ T5869] block nbd0: Receive control failed (result -32) [ 231.168695][ T5865] block nbd0: Receive control failed (result -32) [ 231.185163][T11122] nbd0: detected capacity change from 0 to 127 [ 238.465280][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!