last executing test programs: 1.816331962s ago: executing program 4 (id=842): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$netlink(0x10, 0x3, 0x0) (async) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r3, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) (async) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x60000, 0x10c04}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8, 0x9, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40e95}, 0x20048040) (async) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x4) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r5, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c00000010001fff000000008000000000000000", @ANYRES32=0x0, @ANYBLOB="64c800000007000008000a00", @ANYRES32=r6, @ANYBLOB="140012800b000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0x20004081}, 0x40000) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a300000000058000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d140012801000013084959000727400000400028008000340000001"], 0xa0}}, 0x0) (async) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f0000000200)={r0, &(0x7f0000000100)='\'-]-%\x00', 0x7e44c990d2053e06, &(0x7f0000000140)={@align=0xe310, {0x8, 0x2, 0x1, 0x9}}, 0xd, &(0x7f0000000180), &(0x7f00000001c0)=0xffffffff}) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0x16, &(0x7f0000001140)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x8, &(0x7f0000000080), 0x8}, 0x94) 1.813511254s ago: executing program 1 (id=843): socket(0x27, 0x5, 0x0) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) close(0x4) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/pid\x00') (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$kcm(0x2a, 0x2, 0x0) (async) r2 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000004c0)='ns/uts\x00') (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) (async) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) (async) recvmsg$unix(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r10, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r9, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) (async) r11 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r11, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@ipv6_getaddrlabel={0x30, 0x1a, 0x1, 0x0, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, 0x30}}, 0x0) (async) ioctl$NS_GET_USERNS(r2, 0xb701, 0x0) (async) sendmsg$kcm(r1, &(0x7f0000001540)={&(0x7f0000000040)=@qipcrtr={0x2a, 0x1, 0x4000}, 0x80, 0x0}, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000002060101000000000000000000f90003050005000a0000000900020073797a3000000000050001009f"], 0x30}}, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040), 0x4) 1.55264488s ago: executing program 4 (id=845): ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={0x0, 0x0, 0x5a}, 0x28) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="3000000041000701fefeffff00000000017c0000040042801400018006000600800a000008001c00", @ANYRES32=r0, @ANYBLOB="040002"], 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x6d, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) 1.410039531s ago: executing program 4 (id=848): ioctl$XFS_IOC_PATH_TO_HANDLE(0xffffffffffffffff, 0xc0385869, &(0x7f00000001c0)={0xffffffffffffffff, &(0x7f0000000080)='\\!/\\$-:-@(@^}****\x00', 0x101, &(0x7f00000000c0)={@_ha_fsid={[0x7, 0x6]}, {0x5, 0x1, 0x4, 0x5f0}}, 0x200, &(0x7f0000000140)={@_ha_fsid}, &(0x7f0000000180)=0x8}) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000240), 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000040000000160a01000900000000000000010000000900010073797a30000000000900020073797a3000000000140003800800014000000000080002400000000048000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000001c00038018000380140002"], 0xd0}, 0x1, 0x0, 0x0, 0x24040841}, 0x0) (async) syz_emit_ethernet(0x3e, &(0x7f0000000080)={@link_local, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x6, 0x1, 0x0, @private=0xa010101, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x3, 0x0, 0x6, {0x5, 0x4, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @multicast2}}}}}}, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) socketpair(0x1a, 0x80000, 0x282b, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r2, &(0x7f0000000b40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x50, 0x1411, 0x1b53921fbd93639f, 0x70bd28, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x13}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x2}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0xae747260c81baaac}]}, 0x50}}, 0x90) (async) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYRES8=0x0], 0x14}}, 0xc000) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r5, 0x10c, 0x3, &(0x7f0000000040), 0x4) connect$llc(r5, &(0x7f0000000000)={0x1a, 0x0, 0x1, 0x1, 0x0, 0x0, @remote}, 0x10) (async) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000004001b0000000c00228059fe0080040000800600210030", @ANYRESOCT], 0x28}, 0x1, 0x0, 0x0, 0x20000810}, 0x24000000) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000440)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r0, &(0x7f0000000900)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000480)={0x404, r6, 0x1, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FRAME={0x98, 0x33, @ctrl_frame=@ba={{}, {0xd}, @device_a, @broadcast, @basic={{0x1}, {0x7, 0xd3d}, "4c010f96d72ee5deeed201ab8c4e5b98f9310907160d50b21d061d8bb661b6ed73f43794b47ca3be716e88a1d7bace4bf08da4b99a0de40cb5799350649af54d842de7044d3179d8a4461eef9126776138ad5d0cb1be0642c78a3c3984a408922d5126a39db6cd373441534ad6c891df45d26c83d0d2b8435544fffb9a02e349"}}}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_FRAME={0x316, 0x33, @data_frame={@msdu=@type11={{0x0, 0x2, 0x6, 0x1, 0x1, 0x0, 0x1}, {0x2}, @device_b, @device_a, @device_b, {}, @broadcast}, @a_msdu=[{@broadcast, @device_b, 0xed, "f694821a0f5a42fb586321ce367eafa00543af1cd7daf96f61c91f8ab64ef2c7bcdb27c297f3a00395baa88fe719cab46d12c5faa73cc01b29e67a5ee8a6499a44b37dd00bb44f7e018b7aa9c41f9a4c87a7e860f6e489dc26bac3727e26fce5b9b8631a09cb7fe8211102055ff353e1e4feee033341715e4f00efb8d51811425e0d85a5ba4d32abb9d1587b7d4091d3bfc24e078074516976ab4fcd44869e138768367364053f84aed7e64670c7041cb54a5b91dfb437fa188ea12467d763364960f02d71c829d1bf56e099bcfde63148371c9baf0595a120108fa7771bdc7ad51b17f7204fb9bbdc5a0fc26e"}, {@device_a, @device_b, 0xb1, "1d8006d0ec86b5306bb8d3b147c0a2593acb9f8dde716d65271a6ee696a2fb48c711736908ebd0b9983f38c27e13fd9c2fb297ed07e7e80c20943f90929cc08fe0232b7fa5e368daab6bf34e6f2f66fcb38a30de98d570c8cd1c62c581e16fd57cfcdec06053d28c0eae94d92be23adb808ca3cb84ed0e752d17836768c761fdd5a3cb9b9ede5ffbf313ea8c6dc7addbaa35855c72b34e491813826213c32d5b3dafd2671d1ac81f7cf408c77e5027aaed"}, {@broadcast, @broadcast, 0xfc, "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"}, {@device_a, @device_b, 0x1b, "539925b92761cad7ce934e9d11802f9bb6b937850ec35b495e8daf"}]}}, @NL80211_ATTR_FRAME={0x20, 0x33, @ctrl_frame=@ba={{}, {0x7864}, @device_a, @device_b, @compressed={{0x0, 0x0, 0x1, 0x0, 0xb}, {0x7, 0x3}, "bca3accd81316991"}}}]}, 0x404}, 0x1, 0x0, 0x0, 0xc015}, 0x546534f90db70785) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000002c0)={'vxcan0\x00', 0x0}) sendmsg$can_raw(r3, &(0x7f00000003c0)={&(0x7f0000000300)={0x1d, r8}, 0x10, &(0x7f0000000380)={&(0x7f0000000340)=@can={{0x1, 0x0, 0x0, 0x1}, 0x0, 0x3, 0x0, 0x0, "1020f91d351004a3"}, 0x10}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) ioctl$NILFS_IOCTL_GET_CPSTAT(r0, 0x80186e83, &(0x7f0000000280)) 1.283452748s ago: executing program 3 (id=849): bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x5, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="85000000ae00000066000000000000002f000000000000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x1e}, 0x23) (async) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x5, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="85000000ae00000066000000000000002f000000000000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x1e}, 0x23) r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)={@empty, @loopback, 0x0}, &(0x7f00000000c0)=0xc) sendmsg$nl_route_sched_retired(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=@deltfilter={0x50, 0x2d, 0x800, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0xffff, 0x6}, {0x5, 0xa}, {0x8, 0x1f111650c8c372c9}}, [@f_rsvp6={{0xa}, {0x20, 0x2, [@TCA_RSVP_DST={0x14, 0x2, @ipv4={'\x00', '\xff\xff', @local}}, @TCA_RSVP_CLASSID={0x8, 0x1, {0x5, 0x6}}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000084}, 0x48004) 1.204837451s ago: executing program 0 (id=850): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r0}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000514262520267ceed00000000000000000000007110420000000000950000070021d19ced63387d77adb2092f99be6728556316"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000000}, 0x94) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000041000501010000000000000001010000000000001c0001000600060008000000100007007f0000017f000001910040001400020010000c00090006"], 0x48}, 0x1, 0x0, 0x0, 0x4044850}, 0xc040) socket$nl_generic(0x10, 0x3, 0x10) (async) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r0}, 0x8) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000514262520267ceed00000000000000000000007110420000000000950000070021d19ced63387d77adb2092f99be6728556316"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000000}, 0x94) (async) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000041000501010000000000000001010000000000001c0001000600060008000000100007007f0000017f000001910040001400020010000c00090006"], 0x48}, 0x1, 0x0, 0x0, 0x4044850}, 0xc040) (async) 1.204626234s ago: executing program 1 (id=851): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000240)='illinois', 0x8) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x4) getsockopt$IP_SET_OP_GET_BYINDEX(r1, 0x1, 0x53, &(0x7f0000000080)={0x7, 0x7, 0x1}, &(0x7f0000000100)=0x28) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000280)="89000000183a1b258372b97982c806af120081ae08060cdc030000fe7f03446b000000000001ffca1b1f0000000024c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00150c00014003080c00bdad446b31007a46e3988285dcdf12f21308f868fe3e72eda80a5a1cd1dc77558a50a52613ac9d8011ba35b32c0f404ec2827c22d508bc6c3feff3ae56d8513e53e169c26cdacd255a983104e827bdaa174f32f4a0d395dbb7f29440cb4004be3c8f707086077f31205b66485404818e42272b0a4ea5b821add777a942e9f0a7bd35c403ecfd64b1a909b66a8774402c513f8de1c404978319361c109d6babe0de3804c774b9ce7d85eb98a68fa95baa5b7c02eca98e4c1e87576b71005772210421f3c2f85f3aabe5a2b75c4fc0e09b1c58ab294977c0428cff9416274d5d423a1160f3407de67bb7a497e9ed9ffa8e784a953d056cb7080a938950f94440", 0x15f}, {&(0x7f0000000400)="11d6cb557c8496a2fe7a81f38210bfa9b70ee09ce85961", 0x17}, {&(0x7f0000000440)="3e715ab8b16439e8dfe2d0372199cddf0357f773a2797a71b11bb708154a5b4f0cb1976b14469c0830d81cf6ec5e8bef77e37b3261fd36ae67ac93ca4b1092d4c85e33000e91d919ef8bc77b4e124d3522d09ab2aa21d03dfd307495b7bd7dfa43c8851b751ff638de30802c63bee582c396475c053dfd4eb78e742614a0a6af2ceb31ead6f01d57557577c77590fab0e76bb611063b728688de", 0x9a}, {&(0x7f0000000500)="59deb85f5784de28c738798e1b5c6716dfda8f63a92a7b3575481730a5771aced926bc909c3b998e8ee9aa3ea9436828289bf1", 0x33}], 0x4}, 0x4000000) r2 = accept4$x25(0xffffffffffffffff, &(0x7f00000001c0)={0x9, @remote}, &(0x7f0000000200)=0x12, 0x80000) ioctl$SIOCX25CALLACCPTAPPRV(r2, 0x89e8) 1.166124323s ago: executing program 2 (id=852): socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=@bridge_getvlan={0x40, 0x72, 0x313, 0x70bd2d, 0x25dfdbff, {0x7, 0x0, 0x0, r3}, [@BRIDGE_VLANDB_DUMP_FLAGS={0x8}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x400c000}, 0x44) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) (async) r4 = socket$l2tp(0x2, 0x2, 0x73) getsockopt$IPT_SO_GET_INFO(r4, 0x0, 0x40, 0x0, &(0x7f0000000300)=0x54) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f00000002c0)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x2, 0x79, 0x10, 0x28}, [@ldst={0x6, 0x3, 0x6, 0x0, 0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x41100, 0x10, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x7}, 0x10}, 0x94) (async, rerun: 32) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000071127f000000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) (async, rerun: 32) getsockopt$TIPC_NODE_RECVQ_DEPTH(r1, 0x10f, 0x83, &(0x7f0000000380), &(0x7f00000003c0)=0x4) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x34) (async) r5 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r5, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) (async, rerun: 32) listen(r5, 0x0) (async, rerun: 32) r6 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r6, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) (async) r7 = accept(r5, 0x0, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="120000000400000004000000a4"], 0x48) (async, rerun: 64) shutdown(r7, 0x0) (rerun: 64) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r8, &(0x7f0000000300), &(0x7f00000002c0)=@tcp6=r7}, 0x47) (async) recvmmsg(r7, &(0x7f0000000480)=[{{0x0, 0x0, 0x0}, 0x7}], 0x1, 0x10042, 0x0) (async, rerun: 64) r9 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r10 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0x4}, {0xffff, 0xfff3}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0xfffffffc, 0x2344edab, 0x8000, 0x4, 0x6, 0xe8}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0xfffffffffffffff7}]}}}]}, 0x58}}, 0x20000040) (async) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.idle_time\x00', 0x275a, 0x0) write$tun(r12, &(0x7f0000000600)=ANY=[], 0x342) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r12, 0x89f3, &(0x7f0000000200)={'gretap0\x00', 0x0}) (async) write$cgroup_subtree(r12, &(0x7f0000000080)=ANY=[], 0x104a8) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r12, 0x0) 1.121954402s ago: executing program 3 (id=853): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x1000}) r1 = socket$kcm(0x2, 0x8, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@ipv4_newroute={0x2c, 0x1a, 0x1, 0x0, 0x25dfdbfc, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_IP_PROTO={0x5, 0x1b, 0x6}, @RTA_SPORT={0x6, 0x1c, 0x4e21}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000040}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000026040a0000040900010073797a31000000000800054000"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500", @ANYRES32=0x0], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x14, 0x27, 0x9, 0x78bd25, 0x25dfdbfd, {0xf}}, 0x14}}, 0x4000880) write$tun(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYRES16=r3], 0xfdef) 1.06861773s ago: executing program 1 (id=854): socket$packet(0x11, 0x2, 0x300) syz_emit_ethernet(0x66, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaa00080000000086dd60a24b9f00302b00fe8000000000000000000000000000bbfe8000000000000000000000000000aa3a020201"], 0x0) (async) syz_emit_ethernet(0x66, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaa00080000000086dd60a24b9f00302b00fe8000000000000000000000000000bbfe8000000000000000000000000000aa3a020201"], 0x0) socketpair(0x28, 0x5, 0x6, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x15, 0x1f, &(0x7f0000000080)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x32e8}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@exit, @exit, @alu={0x0, 0x1, 0xa, 0x0, 0x2, 0x12f, 0x8}, @map_idx={0x18, 0xa, 0x5, 0x0, 0x3}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @generic={0x7, 0x2, 0xb, 0xda1, 0x401}, @func={0x85, 0x0, 0x1, 0x0, 0x2}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='syzkaller\x00', 0x9, 0x9, &(0x7f00000001c0)=""/9, 0x41000, 0x64, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000240)={0x1, 0x3, 0x3bd, 0x8}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x5, &(0x7f0000000280)=[0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f00000002c0)=[{0x2, 0x1, 0xb, 0x9}, {0x0, 0x5, 0xb, 0xb81c9694b2be7a56}, {0x4, 0x5, 0x2, 0x5}, {0x3, 0x4, 0x2, 0xb}, {0x5, 0x1, 0x3, 0x5}], 0x10, 0xffffff81}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610420000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610420000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0}, 0x94) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) 1.049601145s ago: executing program 4 (id=855): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = socket(0x1e, 0x1, 0x0) listen(r0, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000454ff0)={0x0, 0x2710}, 0x10) accept4$nfc_llcp(r0, 0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001e80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@private1, 0x200000, 0x1, 0xff, 0x8, 0xfffd, 0x97}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe80, 0x6000, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e088641100050000210283ac141440e0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, 0x0, 0x0) getsockopt$inet6_tcp_buf(r3, 0x6, 0xb, 0x0, &(0x7f0000000140)) r4 = socket$packet(0x11, 0x0, 0x300) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_udp_encap(r5, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x5001}) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', 0x1}) ioctl$sock_inet_SIOCSIFADDR(r7, 0x8916, &(0x7f0000000200)={'syzkaller1\x00', {0x2, 0x0, @dev={0xac, 0x14, 0x0, 0x1}}}) write$tun(r6, &(0x7f0000000380)=ANY=[@ANYBLOB="01051c001000140006004500002d0000000040119078ac140002ac14000112344e20001990780000800000a497aaf51b06323a78cb2ff6221b22999bff852a91cc4d7e67381a0b53bacaa325e6a6c5e2affc396d588affc375259323bb5697d5a231f14b804acf700010f6e6c099a5ff7942e357511cd46f4b18067a80d9d0ea5ae13d35dd22cef24b1d1e0f016977254b971a2045e8da4a9d3b7a9c97f0923ce3365210575b61ce374db9c030a9385d56e852f624ba527d973ddec4376b0d1aa194c686c095bbe4f79f1d4ebc260cfb4591de361fb143f056cea33c7b4e6dff7ade94db646087286cac30ebba3ea51c2164d832d6865da29dde8f6d0810c0"], 0x37) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="180000001600010a"], 0x78}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0e00000004000000040000000200000000000000", @ANYRES32=0x1, @ANYRES64=r3, @ANYRES32=0x0, @ANYRESHEX=r1, @ANYBLOB="00000000000000000000000000000000000000000000000000bf0000"], 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r9, 0x0, 0x0, 0x9cb73b83a8d87629}, 0x20) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) recvmmsg(0xffffffffffffffff, &(0x7f0000000b00)=[{{0x0, 0x0, 0x0}, 0x8}], 0x1, 0x20, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8b04, &(0x7f0000000040)={'wlan0\x00'}) socket(0x9, 0x3, 0x3a) 1.048688091s ago: executing program 0 (id=856): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37, 0x0, 0x1}, 0x20) bpf$MAP_CREATE(0xe4ffffff00000000, &(0x7f0000000180)=ANY=[@ANYRES32=r0, @ANYRES16=r0, @ANYRES16=r0, @ANYRES16=r0, @ANYRES16=r0], 0x48) (async) r1 = bpf$MAP_CREATE(0xe4ffffff00000000, &(0x7f0000000180)=ANY=[@ANYRES32=r0, @ANYRES16=r0, @ANYRES16=r0, @ANYRES16=r0, @ANYRES16=r0], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7fffffff}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r3) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r3, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000002f010000100001800a000200626f6e643000000014000580"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r3, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000002f010000100001800a000200626f6e643000000014000580"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) r6 = socket(0xf, 0x1, 0x401) connect$rds(r6, &(0x7f0000000140)={0x2, 0x4e24, @empty}, 0x10) sendmsg$nl_xfrm(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001000000000000000000dc020078000000000000000000000000ff02000000000000e26ea7250000000100000000000000000a"], 0xb8}, 0x1, 0x0, 0x0, 0x20000080}, 0x2000004) r7 = socket$inet(0xa, 0x801, 0x84) connect$inet(r7, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) (async) connect$inet(r7, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r7, 0xffffffff) accept4(r7, 0x0, 0x0, 0x0) (async) r8 = accept4(r7, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r8, 0x84, 0x71, &(0x7f0000000300)={0x0, 0xa}, &(0x7f0000000380)=0x8) setsockopt$inet6_icmp_ICMP_FILTER(r8, 0x1, 0x1, &(0x7f0000000280), 0x4) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0xfffffffffffffcbe, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[], 0x188}, 0x1, 0x0, 0x0, 0xa0400b9e508cf3ed}, 0x48090) (async) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0xfffffffffffffcbe, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[], 0x188}, 0x1, 0x0, 0x0, 0xa0400b9e508cf3ed}, 0x48090) ioctl$VFAT_IOCTL_READDIR_BOTH(r2, 0x82307201, &(0x7f00000007c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xf, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000181100"/20, @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000340)='syzkaller\x00', 0x9}, 0x90) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xf, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000181100"/20, @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000340)='syzkaller\x00', 0x9}, 0x90) socket$nl_xfrm(0x10, 0x3, 0x6) 988.629508ms ago: executing program 1 (id=857): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x2, 0x3, 0x0, 0x2, 0xc, 0x0, 0x0, 0x0, [@sadb_key={0x2, 0x8, 0x20, 0x0, "45ce2da3"}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x6, 0x2}, @sadb_address={0x3, 0x1b, 0x0, 0x0, 0x0, @in={0x2, 0x0, @empty}}]}, 0x60}, 0x1, 0x7}, 0x0) 820.264226ms ago: executing program 2 (id=858): ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={0x0, 0x0, 0x5a}, 0x28) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="3000000041000701fefeffff00000000017c0000040042801400018006000600800a000008001c00", @ANYRES32=r0, @ANYBLOB="040002"], 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x6d, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) 809.746117ms ago: executing program 1 (id=859): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000800)=ANY=[@ANYBLOB="bf16000000000000b7070000010000004070000000000000400000004000e1ff95000000000000002ba76bb33123751c4e3409e62751ee00ba19ce670d25010000020000040000009fc404000000c788b277beee1cbf9b0a4def23d410f6accd3641110bec4e90a6341965dac03d046837d907b09ec39e9ef8f6e396ad200e011ea665c45a3449abe802f5ab3e89cf40b8580218ce740068720000074e3e8eea3fd8cf49827ca315f5b87e1ca6433a8acd715f5888b2007f0000000000000000010089937090c34410000000000000090000000000414027efc842b6d6f800005335001db43a5c000000000000000024000000000000000000e75a89faff01210cce39bf405f1e846c1242000000000000cad326ad7add65873d9f87463ad6f7c2e8ee1a39244960b318778f2a047f6d5bc24fef5d7d617da7fb5e2a431ab9142f3a06d55740a43088696daaed74b9c5c29647d2f950a959cf9938d6df8600a62e96b7cb8e52cbdce57a79d6fce424c22001f6c3784a1975fa657d05003a32a4fd67ce446ac5430207db79240acaf091231b986e77d05d988d6edc71df48dca02113a38300c2bd2b5543ffc16695572361629d1022f722ec23812b70d72cd0010000007881bfa35b9fd6864e90ddb31f75f6324989cdc7044f563a1f74d4efe895fdbc463f747c08f40105869035000000000003000000000000000000000000000000000000080000003ddf4aa4b1c8b8a0ae6feb6737c275dc2740f742b5425f1d5819610608bbab35471cdb0500000000000000d4123f955267fe4a75c114f874e086287547d4099aeec9f15b8ee25a2a5ccf4a9b603c88e12ff25184d4e3c2f7f623559435b2c505fb7113400000f0bc440550ee91302f5a00000000000000000000000000000000e67ccc00148ac4c43021cce9f24f4b2f9492c32e7a92a557ac2b44b8f7a49789906d922b3e4916f390ab7edcd3f5b9fe14446dd446a52131c464f2c08efb46d934615c8631b7c42efd0294bea179b0433f5c899119ec0c0acef5383b5a2720caeb68f1e9c05b05d89467ded84da092dea262e51811e2d7fa515722516bd5ef6c8c4966e5937562a5648a696abaa042a7097ddefe0671f977fb145890f5bf41ba92b8c4c8b14f0d4a880ef4518bb328790700000021e041254f06bd7f000000000000000000000000000000282ffe000000000000000431e8e3204a7d95938c5334a0dd177f1a7389ee570d95e543a27546d3770740f354df6dfdb3d1179b4b9fccd0cd5b7578802c66f5dbf22ad0bd03cbe0fecd096bcf419d35988948d1cd4c51c406040000000090a3bc3cbc08255975f3cee08dab765d8a4ef870aaae3f81ed6364837171ce5564f3cf6feba1b6745409000000000000003459263499fae97e7dcb30e4cff009e0f4f78c155c4ab19b878fcb4cc14b8d2823643a17120418f42b42ed879cb23e6d4e0d11db988d0bc46de02702d29243b72215d5563bdae8c2ccda4498687cd50f3a9058f61d52d70aabccb18d41d75788faf60ce9be97c13e4252d9d112d9ac47368829f8a29eca17de807c840293dd387eee13fdecf3d5a334350f045a22b9adb0539d44d58a00fb9e83ebf4fea36b87e2afdf63f7abf5caf2b01317a5f65f22c8bcf36b390dece1e98541ae932ec3486f74c1eea673c1647568acb17efcef24a9c3504dfa7c7eefe3dcb8d570a730a0837839f54527ce334b8173e7bf73bcd8d80ef294fde6549a0f1a23b78b41f79ea543d2b38b80d3d28c6c93901b763fc8b88794aa74facc345e28f0ad79de4df5afd52e7dfc387e4d2ca4d5caca74754987dbbd4d64e233b4a1d81a9aeb981734ca5416cacf516ca8384d85310f24d393fd48c668465546117377547d11a61bd2bd9e35fa0da5118554a1d93147b103a51baf94aeb1b6292038300423344e6add2226ba5f6724a08567ef515898f0f7dfd3fc198092af3265c5df377a66bbde4fa4a049692e06ee5022c58290bdc37eeb16f4e099e33679044ba21898f76c982c8203663f1adb7bbb42ed8d9b0bb8bd9255e342959b822fa8b3d08b29f2201dfe3a3c5c8bf8bc82f249e7eb9f8571823d730fdc78c6b3122a3fd9209dcae70c10c7b17e83dd759a52fe5c362358dbb780a52f540000000000000000000011230e1d6f9fd3315ada8ecee55fc0ec6ec0ec950c0ad006a06a162035d5729795c4a58b59f9a252723480b08ae9bd52c176380a42b972a3400b5d28b273e60000007cac9d35a991c27e23ce5217fec9ce89ea2dea8ddb383e53cdd077e7c2d73404b7450664f70225897307d8a140ba97bfc2232dccdb1dd0496c219315c02f2ef46f30add1aa13e52d67116328c3a5ee3356eadea07abe8506767771d68e760f8c623fb64865a942acc4912dcd1fa5d729cb45c15577bbb8b08a705efeaf09dd6aadeb8d61501e4fd9c9b1ac845a2138cbde58a04589888c0e528a5134e1dfa8b3f6d8a76517df589cae1019a3bc280e99fb661271357dbbd7e9c42d3fe45efaaa00"/1810], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x35}, 0x48) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000200)=r3, 0x4) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x41071, 0xffffffffffffffff, 0x0) sendto$unix(r2, &(0x7f00000004c0)="ebb567fa9b", 0x5, 0x4c010, 0x0, 0x0) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=@newchain={0x24, 0x64, 0x800, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x4, 0xfff1}, {0x3, 0xc}, {0x1b, 0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000845}, 0x2000c8c1) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_emit_ethernet(0xda, &(0x7f0000000180)={@local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xcc, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x2c, 0x0, {0x2b, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x89, 0x0, @private=0xa010101, @local, {[@cipso={0x86, 0x2a, 0x2, [{0x6, 0xd, "5e000000ff000000f58700"}, {0x0, 0x5, "0404a6"}, {0x0, 0x12, "960605390006fff5800000b61af93a93"}]}, @rr={0x7, 0x1b, 0x57, [@rand_addr=0x64010101, @private=0xa010100, @multicast2, @private=0xa010102, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010102]}, @cipso={0x86, 0x50, 0x0, [{0x0, 0x12, "08051a5f89f58e0820f284210200b7c8"}, {0x0, 0xc, "df61168c24ac88ad078c"}, {0x0, 0x12, "2189ea43e2149b8444a30300505c09a0"}, {0x7, 0x12, "ffd11634eea26b0faffa0dea2e903528"}, {0x0, 0x8, "02a20948fd74"}]}]}}, "a815a23d"}}}}}, 0x0) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="68000000260001000000000004000000550000800c0001000200000000000000971ed308218750518325cac8c266a8c6efe4fbf992916db05a05ae089f966b16abb07a8f70b234f5fec1d34930936f49dfdd8557c4137d225914bb402fb719c9ab65dae93b00000093ee2278f4487c2966a4c46e6fdf17516313a5c4fc13a2dd45dabd58b48316006f69bfc745d11a68409f86ee53547c9362ed6c12f9427be137473f38707cf54fefffdd568e02a0f96b6bf2e0ecb685566774bf351cb39e68578b66a05c58228a7b62c05e8ccb91b10a0a40012a8e3c910dfcb910cc43ab35a05f5a8a3d78face56ac704f9ca48885031a4f54af26dd2378fc5bf63d4f063f37e48ba8d4eb9572f2e70b91d36cc219b35d8b2a3c36f95736c977ead1be6d35a0111b0fae954bf84d19ba8b5a3dbceec8ad2cdf02885253b608a0b7ee614988afaafa39febf571dc235d8303bee4ddf"], 0x68}], 0x1}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r7) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f00000000c0)=0x0) unshare(0x8000400) sendmsg$NFC_CMD_DEV_UP(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r9], 0x1c}}, 0x4008054) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r11 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r11, 0x114, 0x3f, &(0x7f0000000780)={0x3, "4cff3f"}, 0x4) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000003c0)=@o_path={&(0x7f0000000300)='./file0\x00', r10, 0x4000, r11}, 0x18) ioctl$XFS_IOC_FSGROWFSRT(r3, 0x40105870, &(0x7f00000002c0)={0xd, 0x2f18476e}) write$nci(r5, &(0x7f0000000240)=ANY=[@ANYBLOB='p\x00\t'], 0xc) write$nci(r5, &(0x7f0000000280)=ANY=[@ANYBLOB="400109"], 0x87) write$tun(r0, &(0x7f0000000200)={@val={0xa, 0x7}, @void, @eth={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x10}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}, @val={@void, {0x8100, 0x5, 0x1, 0x6}}, {@ipv6={0x86dd, @tcp={0x7, 0x6, '\x00', 0x14, 0x6, 0xff, @private2, @mcast1, {[], {{0x4e1e, 0x4e64, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x100, 0x0, 0x9}}}}}}}}, 0x52) 704.203601ms ago: executing program 3 (id=860): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x20000000ec071, 0xffffffffffffffff, 0x4000) mmap(&(0x7f0000724000/0x1000)=nil, 0x1000, 0x0, 0x4000932, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xe, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x35}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 652.718489ms ago: executing program 0 (id=861): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0xe, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000f0cd00000000000004000000850000000500000095"], &(0x7f0000000000)='GPL\x00'}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000001780)=ANY=[@ANYRES32=r4, @ANYRES32=r5, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r4, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000400)=r2}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r6}, &(0x7f00000006c0), &(0x7f0000000700)=r3}, 0x20) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newtaction={0xb4, 0x30, 0x1, 0x70bd2b, 0x25dfdbde, {}, [{0xa0, 0x1, [@m_bpf={0x58, 0x1, 0x0, 0x0, {{0x8}, {0x30, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x2}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x3, 0xef, 0x10000000, 0x8000, 0x2}}, @TCA_ACT_BPF_OPS={0xc, 0x4, [{0x16, 0xf2, 0x3, 0x7}]}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_bpf={0x44, 0x2, 0x0, 0x0, {{0x8}, {0x1c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x3, 0x4, 0x0, 0x6, 0x80}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0xc044}, 0x4000814) r7 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=@ipv4_getnexthop={0x20, 0x6a, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NHA_ID={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) getsockopt$packet_buf(r7, 0x107, 0x2, &(0x7f00000001c0)=""/200, &(0x7f00000002c0)=0xc8) 651.693422ms ago: executing program 2 (id=862): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000002980)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="210128bd7000000000002b00000008000300", @ANYRES32=r2, @ANYBLOB="04002a000a0034000202020202020000dd1f67"], 0x2c}, 0x1, 0x0, 0x0, 0xf040}, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) r3 = socket$nl_generic(0x10, 0x3, 0x10) write(r0, &(0x7f0000000400)="13367f86232f8bb19d8e8b828ae243c8", 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="560a0000000000007b118800000000001800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x94) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(r5, &(0x7f00000006c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000580)=ANY=[@ANYBLOB="00010000", @ANYRES16=r1, @ANYBLOB="040227bd7000fbdbdf251a000000bc0022804c0000800800060001000000080002000000010008000300dc0f000008000600000000e0080006000700000008000600ff0000000800070000020000080004000900000008000700090000003400008008000300120000000800030008000000080007000000d01d0800010008000000080004000600000008000100030000002c0000800800050005000000080007000080fb0008000400589600000800050000020000080007000f0000000c000080080002001000000008009a00000000000600210061000000080001005c0000000500920006000000070021006161000008009a0000000000"], 0x100}, 0x1, 0x0, 0x0, 0x4044802}, 0x20008044) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010000000000ffdbdf2505000000080002000570"], 0x1c}, 0x1, 0x0, 0x0, 0x20040011}, 0x20004080) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r8, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r8, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r8, 0x6, 0x1f, &(0x7f00000002c0), 0xffb2) setsockopt$inet6_tcp_TLS_TX(r8, 0x11a, 0x2, &(0x7f0000000280)=@gcm_256={{0x304}, "00e1ffffff00", "5985e81ad0d9585bc175cbecd3f55eb699e3ee0bc206f3ba527c85bde06fbf19", '\x00', '\x00\x00\x00\f\x00'}, 0x38) setsockopt$inet6_tcp_TLS_TX(r8, 0x11a, 0x4, &(0x7f00000000c0)=@gcm_128={{0x304}, "cdbef90c18b633a0", "fa07b3a2d40586d364f360be6df53598", "7eb00b44", "e598980949a58c71"}, 0x28) sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000001000ffff2bbd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="000000002238030008000a00", @ANYRES32=r4, @ANYBLOB="2400128009000100626f6e64"], 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x20040040) r9 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r5}, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb0100180000000200000000000a4b117cd200001c0000000300000000000000000000050000000001000000000000110100000000000008005f00"], 0x0, 0x37, 0x0, 0x0, 0x0, 0x10000, @value=r9}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a00fe0000000087080000000000007ba8f0ff00000000bda100000000000007000000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a300000095"], &(0x7f0000000040)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 526.073859ms ago: executing program 4 (id=863): r0 = socket(0xa, 0x3, 0x3a) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r1, 0x0, 0x12, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f00000000c0)={0x1, 0x0, 0x1, r2}, 0xc) (async) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f00000000c0)={0x1, 0x0, 0x1, r2}, 0xc) ioctl$SIOCGETLINKNAME(r0, 0x89e0, &(0x7f0000000100)={0x0, 0x1}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = accept$inet6(r0, &(0x7f0000000300)={0xa, 0x0, 0x0, @private1}, &(0x7f00000003c0)=0x1c) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000400)={0x1, 0x0, 0xc, r2, 0x401}, 0xc) (async) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000400)={0x1, 0x0, 0xc, r2, 0x401}, 0xc) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)={0x20, 0x41, 0x107, 0xfffffffe, 0xfffffffe, {0x1, 0x7c}, [@nested={0x8, 0x142, 0x0, 0x1, [@typed={0x4, 0x8}]}, @nested={0x4, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x4048011}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) socket$inet6_udp(0xa, 0x2, 0x0) (async) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000c80)={'lo\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)={0x20, r6, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKINFO_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) (async) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)={0x20, r6, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKINFO_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x66, &(0x7f0000000440)={0x0}, &(0x7f0000000480)=0x8) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f00000004c0)={r9, @in={{0x2, 0x4e23, @multicast1}}, [0x3, 0x7fff, 0xd, 0x42, 0xc4b, 0x5ddf, 0x5950, 0x1a5, 0x80000000, 0x100000001, 0x3, 0x6, 0xf82a, 0x1000, 0x1]}, &(0x7f00000005c0)=0x100) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000007110aa00004960009500000000008000"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000007110aa00004960009500000000008000"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="010000000000000000003f00000008000300", @ANYRES32=r12, @ANYBLOB="10005e80010000000000000004000100"], 0x2c}}, 0x0) (async) sendmsg$NL80211_CMD_SET_CQM(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="010000000000000000003f00000008000300", @ANYRES32=r12, @ANYBLOB="10005e80010000000000000004000100"], 0x2c}}, 0x0) r14 = socket$nl_generic(0x10, 0x3, 0x10) r15 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r14, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r14, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x50, r15, 0x1, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r16}, @void}}, [@NL80211_ATTR_BSS_BASIC_RATES={0x6, 0x24, [{0x3}, {0x9, 0x1}]}, @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_BSS_BASIC_RATES={0x4}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x40}, @NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0x8}]}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x3bc}]}, 0x50}, 0x1, 0x0, 0x0, 0x200048c1}, 0x4c040) sendmsg$NL80211_CMD_SET_BSS(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="e3020000", @ANYRES16=r10, @ANYBLOB="020026bd7000fddbdf251900000005001c000000000005001c000000000004006d00080000000500a3000000000005001e00010000000500a3000000000005006000070000000500600007000000"], 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x20040) (async) sendmsg$NL80211_CMD_SET_BSS(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="e3020000", @ANYRES16=r10, @ANYBLOB="020026bd7000fddbdf251900000005001c000000000005001c000000000004006d00080000000500a3000000000005001e00010000000500a3000000000005006000070000000500600007000000"], 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x20040) 484.098324ms ago: executing program 3 (id=864): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="18000000240001"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) recvmmsg(r0, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/4077, 0xfed}], 0x1}, 0x9}], 0x1, 0x2000, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000004c0)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @dev}, {0x2, 0x0, @empty}}) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="1801"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x40004) 478.216708ms ago: executing program 0 (id=865): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r0, 0x6, 0x10, 0x0, 0x0) ioctl$AUTOFS_IOC_CATATONIC(r0, 0x9362, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xb, 0xe, &(0x7f0000003fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x171}, 0x48) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="5c00000030000504000000000000000000000000480001804400018009000100676174650000000034000280180002000000000000000000000000000000000000000000100005800c000180080003000100000008000a0007", @ANYRESOCT=r1], 0x5c}}, 0x0) 332.124371ms ago: executing program 3 (id=866): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={0x30, 0x41, 0x107, 0xfffffffe, 0xfffffff6, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0xc, 0x2, 0x0, 0x1, [@nested={0x4, 0x14}, @nested={0x4, 0x14}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$nfc(&(0x7f00000000c0), 0xffffffffffffffff) (async) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r4) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000005c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000001500)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r6], 0x1c}}, 0x4008054) (async) r7 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) (async) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) write$nci(r7, &(0x7f00000002c0)=@NCI_OP_CORE_INIT_RSP_V2={0x0, 0x1, 0x2, 0x1, 0x40, {0x1, 0x7, 0x10, 0x4, 0x6, 0x4, 0x0, 0x9, 0xb, "7a67aa99420aed0511c374"}}, 0x1c) (async) r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r8) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r7, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRESOCT=r9, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r10], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x840) (async, rerun: 32) sendmsg$NFC_CMD_SE_IO(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x44, r2, 0x4, 0x70bd2c, 0x25dfdbfd, {}, [@NFC_ATTR_SE_INDEX={0x8, 0x15, 0xc0}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0xc0}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0xc0}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r10}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000890}, 0x4004000) (rerun: 32) 298.108572ms ago: executing program 2 (id=867): r0 = socket(0x10, 0x803, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$inet6_udp(0xa, 0x2, 0x0) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0x17, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000000000000850000001d00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7020000000000008500000017000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xfff2}, {0xffff, 0xffff}, {0x10, 0x3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x204, 0x3, 0x0, 0x1}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x51}, 0x50) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r6 = socket$nl_route(0x10, 0x3, 0x0) (async) socket$inet(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000003c0)={'erspan0\x00', &(0x7f00000002c0)={'sit0\x00', r5, 0x20, 0x80, 0x10, 0x80000000, {{0x38, 0x4, 0x3, 0x33, 0xe0, 0x64, 0x0, 0x3, 0x4, 0x0, @broadcast, @dev={0xac, 0x14, 0x14, 0x1d}, {[@noop, @end, @timestamp_prespec={0x44, 0x24, 0xb2, 0x3, 0x4, [{@broadcast, 0x7ff}, {@private=0xa010101, 0x5}, {@rand_addr=0x64010102, 0x4}, {@dev={0xac, 0x14, 0x14, 0x3e}, 0x10}]}, @cipso={0x86, 0x1e, 0x3, [{0x1, 0x11, "30d2b0a31c2b2146aed1a1c3180bad"}, {0x6, 0x3, "ac"}, {0x1, 0x4, "24bf"}]}, @generic={0x94, 0x4, "0617"}, @ra={0x94, 0x4, 0x1}, @cipso={0x86, 0x3d, 0x0, [{0x1, 0x2}, {0x2, 0x10, "09fa1534cf5d1e039a494249bdad"}, {0x2, 0x12, "40623caf1406130d017bba1cf74e9eb4"}, {0x0, 0x6, "22946bf5"}, {0x6, 0x8, "e9accd795993"}, {0x6, 0x5, "8806f0"}]}, @cipso={0x86, 0xc, 0xfffffffffffffffd, [{0x6, 0x6, "1351d039"}]}, @cipso={0x86, 0x1a, 0xffffffffffffffff, [{0x2, 0x2}, {0x2, 0x8, "b8684679babd"}, {0x6, 0xa, "3e78eb12f7031eb7"}]}, @ssrr={0x89, 0x1b, 0x97, [@rand_addr=0x64010100, @private=0xa010101, @private=0xa010100, @local, @multicast1, @private=0xa010102]}]}}}}}) (async) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000400)={0x0, @initdev, @remote}, &(0x7f0000000440)=0xc) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=@RTM_DELMDB={0xf8, 0x55, 0x300, 0x70bd28, 0x25dfdbfe, {0x7, r5}, [@MDBA_SET_ENTRY={0x20, 0x1, {r5, 0x0, 0x3, 0x1, {@in6_addr=@private2={0xfc, 0x2, '\x00', 0x1}, 0x86dd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r5, 0x1, 0x1, 0x0, {@ip4=@multicast2, 0x86dd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r5, 0x1, 0x2, 0x4, {@ip4=@initdev={0xac, 0x1e, 0x0, 0x0}}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r5, 0x1, 0x2, 0x3, {@ip4=@rand_addr=0x64010102, 0x86dd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r5, 0x0, 0x0, 0x2, {@in6_addr=@private1, 0x8edd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r7, 0x1, 0x1, 0x2, {@in6_addr=@empty, 0x86dd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r8, 0x0, 0x1, 0x0, {@in6_addr=@private1}}}]}, 0xf8}}, 0x8000) 274.866803ms ago: executing program 1 (id=868): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0xb8, 0x10, 0xc09, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x50081}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc}, @IFLA_BR_MCAST_STATS_ENABLED={0x5, 0x2a, 0x1}]}}}, @IFLA_PORT_SELF={0x70, 0x19, 0x0, 0x1, [@IFLA_PORT_REQUEST={0x5, 0x6, 0x4}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "04596e548146fc4cca30df0799c14e98"}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x16}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x8}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x7}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x5}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "02b7b2eb41fe40bcb234fad996e5a377"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "bc4557bfb3b1d46d9a45dc33f55e2ece"}]}]}, 0xb8}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x14, r2, 0x1}, 0x14}}, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)={0x78, r2, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6a0}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8f24}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffffff9}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xbf}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}]}, 0x78}, 0x1, 0x0, 0x0, 0x8000}, 0x40000040) 192.87367ms ago: executing program 0 (id=869): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x2, 0x3, 0x0, 0x2, 0xc, 0x0, 0x0, 0x0, [@sadb_key={0x2, 0x8, 0x20, 0x0, "45ce2da3"}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x6, 0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x1a, @in={0x2, 0x0, @empty}}]}, 0x60}, 0x1, 0x7}, 0x0) 192.503934ms ago: executing program 2 (id=870): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$kcm(0xa, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x1c, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000000000a00000000000000000018"], 0x0, 0x4}, 0x94) sendmsg$inet(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e21, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000007000000890704e068000000110000000000000000dbc790ad000000fc000000000000001400000000000000000000000100000004000000000000001c000000000000000000000008"], 0x68}, 0x40400c4) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f00000000c0)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000500)={'gre0\x00', 0x0}) sendto$packet(r2, &(0x7f00000002c0)="05031600d3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000001d80)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000c0], 0x11, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="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"]}, 0x1c4) 126.471063ms ago: executing program 3 (id=871): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@gettaction={0x14, 0x5a, 0xc6b747b6bf1c6f95}, 0x14}}, 0x0) (async) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000000), 0x4) (async) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl(r1, 0x8914, &(0x7f0000000040)="6574683000000000000000000000000001000000") ioctl(r1, 0x8914, &(0x7f00000000c0)="6c61706230000000000000000000000001000000") ioctl(r1, 0x890b, &(0x7f0000000140)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00lapb0\x00\x00\x00\x00\x00\x00\x00') (async, rerun: 64) bind$x25(r1, &(0x7f0000000080), 0x12) (async, rerun: 64) connect$x25(r1, &(0x7f0000000100)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0}}, 0x12) close(r1) 78.082009ms ago: executing program 4 (id=872): ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={0x0, 0x0, 0x5a}, 0x28) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="3000000041000701fefeffff00000000017c0000040042801400018006000600800a000008001c00", @ANYRES32=r0, @ANYBLOB="040002"], 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x6d, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) 716.458µs ago: executing program 0 (id=873): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000001800dd8d000000000000000002000004fe00000600"], 0x1c}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1c}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2c}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x94}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000004c0)=@ipv4_newroute={0x1c, 0x18, 0x35f32a6dfa748ddd, 0x70bd26, 0x0, {0x2, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2900}}, 0x1c}}, 0x8c0) 0s ago: executing program 2 (id=874): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f0000000440)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000400)={&(0x7f0000000240)={0x1b0, r1, 0x400, 0x70bd29, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x815, 0x57}}}}, [@NL80211_ATTR_REKEY_DATA={0x3c, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "bab76c1c9eddd9bf"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "722d432c3f32845b"}, @NL80211_REKEY_DATA_AKM={0x8}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x3}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x9}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x6340}]}, @NL80211_ATTR_REKEY_DATA={0x58, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "7ead85bb7892af7a"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="4814cdfea4dcb416dcf976e44d6eaf3c"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x5}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="0a98fc8a0c2e7254167b0c2f9d6e2d63"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x4}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x3}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0xfb7}]}, @NL80211_ATTR_REKEY_DATA={0x34, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "93b1be6e3e63f4dc"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="e726f193973ca4bc401fafd9df4968bcc014219f22d2a3e9a9f54962f7f2fa57"}]}, @NL80211_ATTR_REKEY_DATA={0x14, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0xffffffff}]}, @NL80211_ATTR_REKEY_DATA={0x74, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="8bf23757b03fb77e5e12376c35800d3b"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x6}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "6d6675b32c1826b6"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x80000000}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x800}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="db566faf6c8d93e700a917a09114612948d64fc7a612fe499a7eb967664ffd01"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="e1f8892c16b090b71e6d70b43176dc78"}]}, @NL80211_ATTR_REKEY_DATA={0x40, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "a1dfb3cde7345ba3"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="7ac7a321484f00bb384a0e5a9c64538e"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="92a05064fcd3505eb785c534ea723fc0"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x4d4}]}]}, 0x1b0}, 0x1, 0x0, 0x0, 0x400080c}, 0x801) (async) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r0) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r3) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r5, 0x0, 0x33, &(0x7f0000000000)=0x8000a4ff, 0x4) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x3}}}}}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40000c0) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r6, &(0x7f0000000980)={&(0x7f00000008c0), 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x1c, r2, 0x4, 0x70bd29, 0x25dfdbfe, {}, [@ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x4) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x28, 0x2e, 0xa01, 0x0, 0x0, {0x1f}, [@typed={0xc, 0x0, 0x0, 0x0, @u64=0x1}, @typed={0x8, 0xb, 0x0, 0x0, @ipv4}]}, 0x28}}, 0x8000) (async) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000004c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) r8 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000004c0)={'syz_tun\x00', 0x0}) r10 = socket$nl_generic(0x10, 0x3, 0x10) (async) r11 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ADD(r10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000d00)={0x14, r11, 0x4c1dad3e3d6a7499, 0x70bd2b, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20000880}, 0x20000000) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) sendmsg$TIPC_NL_KEY_FLUSH(r3, &(0x7f0000000880)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000840)={&(0x7f0000000540)={0x2fc, r11, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@TIPC_NLA_NODE={0x170, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x56, 0x3, "348726b0839ab09cc662a1d01af15a9559b7977c37b2644b215ec61f2964612c96ff1edb624a40aed4b98ef51aac5c8626944cb40983faead16f4e0a99fbd3e055598de6728eb6278f5bae95bc46b2f5648a"}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x68e}, @TIPC_NLA_NODE_ID={0xb0, 0x3, "0954f5d0bf461169b590c3e0724fad1a2edf27bb5ce19de3af3364b6ff03c7a47d4c4d6a0575cc65fc6d1f9bab47f5c430b13b398d961767b8696bb3cac1dbd3bdb64a14e9538dabf733dc3a724399bf325b97676c17b0a4db3c8094771db61ec22ad4cb091daf0a7e90d37d723f237b8b45cbcd4db30091ded790b3539a63d878f36902dff4d46bc316de7c062b723c9eb4a57edebfb1c508cc7107d0a072da4e1dc09f9ea4b7783488d2af"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x7f}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8000}, @TIPC_NLA_NODE_KEY={0x46, 0x4, {'gcm(aes)\x00', 0x1e, "1bda7ab5bb73275164c4fdf07b5d586506944a8d0c151c04e36970845882"}}]}, @TIPC_NLA_NODE={0x100, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xf9, 0x3, "a16b1fb202ef0831622ca5fa7cc645e9ada57c802fef8f7ce5b5033f400011a04d8cff2dedb7d1f85d2b1a90b3f41dbd790cbeba3649109d144bf97c50c6f879307df4386ba8ae1e00d060bcf00079d0b9c0203ff064bb9abf1542d3211caa0866320243e6128647fe8636aefe6a8ee437c5f6692cfebfe3feff8ec3c6dcf95b4aef6824772946066890893cc8cbed567e8c14e7398589200dee23608501b1218d3d0f17082ccf48daf48163e2576ec3308222e656593f4a0da083e996365adb1574429ad6aaf9179e59d2f062cc92a55239aae05e8b63d9af237ccaa2760d0d7ccda377b0e75a2245e9e36b2a19414be1fabbc799"}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xf}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xffff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8000}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x400}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}]}, @TIPC_NLA_NET={0x28, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3e}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x58d}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xe827}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}]}]}, 0x2fc}, 0x1, 0x0, 0x0, 0x20000000}, 0x4008020) (async) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)={0x28, r2, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0x5, 0x7, 0x2}, @ETHTOOL_A_LINKMODES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x2000c041}, 0x4044094) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.22' (ED25519) to the list of known hosts. [ 77.005108][ T5604] cgroup: Unknown subsys name 'net' [ 77.119899][ T5604] cgroup: Unknown subsys name 'cpuset' [ 77.123061][ T5604] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 78.747533][ T5604] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 80.848891][ T5615] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 80.853611][ T5615] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 80.854294][ T5615] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 80.870138][ T5615] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 80.885231][ T5615] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 80.961990][ T4931] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 80.964828][ T4931] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 80.969151][ T4931] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 80.987796][ T4931] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 80.988512][ T4931] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 81.034120][ T4931] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 81.035022][ T4931] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 81.053497][ T4931] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 81.055100][ T4931] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 81.071488][ T4931] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 81.197433][ T52] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 81.201673][ T52] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 81.203396][ T52] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 81.203869][ T5636] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 81.207098][ T5636] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 81.208142][ T5636] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 81.208750][ T5636] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 81.223220][ T52] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 81.277877][ T52] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 81.278936][ T52] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 82.974265][ T52] Bluetooth: hci0: command tx timeout [ 83.045573][ T52] Bluetooth: hci1: command tx timeout [ 83.136287][ T52] Bluetooth: hci2: command tx timeout [ 83.176587][ T5622] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.176783][ T5622] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.176935][ T5622] bridge_slave_0: entered allmulticast mode [ 83.179618][ T5622] bridge_slave_0: entered promiscuous mode [ 83.222319][ T5622] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.222468][ T5622] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.222552][ T5622] bridge_slave_1: entered allmulticast mode [ 83.223737][ T5622] bridge_slave_1: entered promiscuous mode [ 83.285607][ T52] Bluetooth: hci3: command tx timeout [ 83.359148][ T5622] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.365543][ T5618] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.365618][ T52] Bluetooth: hci4: command tx timeout [ 83.365662][ T5618] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.366094][ T5618] bridge_slave_0: entered allmulticast mode [ 83.368606][ T5618] bridge_slave_0: entered promiscuous mode [ 83.405856][ T5622] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.406228][ T5618] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.406331][ T5618] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.406453][ T5618] bridge_slave_1: entered allmulticast mode [ 83.408763][ T5618] bridge_slave_1: entered promiscuous mode [ 83.426696][ T5614] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.426838][ T5614] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.427253][ T5614] bridge_slave_0: entered allmulticast mode [ 83.430063][ T5614] bridge_slave_0: entered promiscuous mode [ 83.463686][ T5629] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.464084][ T5629] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.464488][ T5629] bridge_slave_0: entered allmulticast mode [ 83.467572][ T5629] bridge_slave_0: entered promiscuous mode [ 83.469745][ T5614] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.469857][ T5614] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.469973][ T5614] bridge_slave_1: entered allmulticast mode [ 83.478752][ T5614] bridge_slave_1: entered promiscuous mode [ 83.554702][ T5629] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.554888][ T5629] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.556613][ T5629] bridge_slave_1: entered allmulticast mode [ 83.558508][ T5629] bridge_slave_1: entered promiscuous mode [ 83.587864][ T5622] team0: Port device team_slave_0 added [ 83.591202][ T5618] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.620759][ T5614] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.622951][ T5622] team0: Port device team_slave_1 added [ 83.625136][ T5618] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.656090][ T5614] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.692880][ T5629] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.693144][ T5630] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.693256][ T5630] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.693389][ T5630] bridge_slave_0: entered allmulticast mode [ 83.694935][ T5630] bridge_slave_0: entered promiscuous mode [ 83.714736][ T5622] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.714752][ T5622] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.714774][ T5622] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.718254][ T5622] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.718268][ T5622] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.718290][ T5622] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.837913][ T5629] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.838212][ T5630] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.838324][ T5630] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.838412][ T5630] bridge_slave_1: entered allmulticast mode [ 83.839532][ T5630] bridge_slave_1: entered promiscuous mode [ 83.881739][ T5618] team0: Port device team_slave_0 added [ 83.906185][ T5614] team0: Port device team_slave_0 added [ 83.920708][ T5618] team0: Port device team_slave_1 added [ 83.954774][ T5614] team0: Port device team_slave_1 added [ 83.962666][ T5622] hsr_slave_0: entered promiscuous mode [ 83.963461][ T5622] hsr_slave_1: entered promiscuous mode [ 83.980463][ T5629] team0: Port device team_slave_0 added [ 83.983069][ T5630] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.000881][ T5618] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.000897][ T5618] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.000915][ T5618] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.003902][ T5629] team0: Port device team_slave_1 added [ 84.006545][ T5630] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.037799][ T5618] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.037823][ T5618] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.037845][ T5618] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.080093][ T5614] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.080109][ T5614] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.080130][ T5614] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.159912][ T5614] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.159932][ T5614] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.159956][ T5614] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.190591][ T5629] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.190608][ T5629] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.190630][ T5629] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.194463][ T5629] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.194478][ T5629] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.194500][ T5629] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.197789][ T5630] team0: Port device team_slave_0 added [ 84.249256][ T5630] team0: Port device team_slave_1 added [ 84.296984][ T5618] hsr_slave_0: entered promiscuous mode [ 84.306213][ T5618] hsr_slave_1: entered promiscuous mode [ 84.307052][ T5618] debugfs: 'hsr0' already exists in 'hsr' [ 84.307134][ T5618] Cannot create hsr debugfs directory [ 84.369292][ T5630] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.369311][ T5630] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.369333][ T5630] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.424198][ T5630] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.424215][ T5630] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.424236][ T5630] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.477733][ T5629] hsr_slave_0: entered promiscuous mode [ 84.478501][ T5629] hsr_slave_1: entered promiscuous mode [ 84.478963][ T5629] debugfs: 'hsr0' already exists in 'hsr' [ 84.478984][ T5629] Cannot create hsr debugfs directory [ 84.512698][ T5614] hsr_slave_0: entered promiscuous mode [ 84.513375][ T5614] hsr_slave_1: entered promiscuous mode [ 84.513821][ T5614] debugfs: 'hsr0' already exists in 'hsr' [ 84.513841][ T5614] Cannot create hsr debugfs directory [ 84.629538][ T5630] hsr_slave_0: entered promiscuous mode [ 84.630246][ T5630] hsr_slave_1: entered promiscuous mode [ 84.630707][ T5630] debugfs: 'hsr0' already exists in 'hsr' [ 84.630727][ T5630] Cannot create hsr debugfs directory [ 85.036289][ T5622] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 85.042595][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 85.046067][ T52] Bluetooth: hci0: command tx timeout [ 85.068411][ T5622] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 85.071911][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 85.073120][ T5622] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 85.099658][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 85.122240][ T5622] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 85.125105][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 85.125635][ T52] Bluetooth: hci1: command tx timeout [ 85.199286][ T5618] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 85.204546][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 85.211113][ T52] Bluetooth: hci2: command tx timeout [ 85.226989][ T5618] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 85.231525][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 85.233049][ T5618] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 85.246409][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 85.268743][ T5618] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 85.271704][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 85.363403][ T5629] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 85.366180][ T52] Bluetooth: hci3: command tx timeout [ 85.375218][ T5629] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 85.376160][ T5629] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 85.396756][ T5629] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 85.397626][ T5629] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 85.402839][ T5629] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 85.428055][ T5629] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 85.430589][ T5629] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 85.455951][ T52] Bluetooth: hci4: command tx timeout [ 85.492172][ T5622] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.578759][ T5614] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 85.582510][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 85.583356][ T5614] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 85.587302][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 85.619353][ T5614] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 85.623600][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 85.644507][ T5622] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.656592][ T5614] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 85.659613][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 85.696924][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.697035][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.757643][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.757708][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.804732][ T5630] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 85.810069][ T5630] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 85.810935][ T5630] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 85.830844][ T5630] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 85.831776][ T5630] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 85.834963][ T5630] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 85.868548][ T5630] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 85.872556][ T5630] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 85.915237][ T5618] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.973877][ T5618] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.008366][ T5629] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.041012][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.041518][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.070996][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.071231][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.117735][ T5629] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.164862][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.164926][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.202310][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.202429][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.243824][ T5614] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.330656][ T5614] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.380892][ T5630] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.396223][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.396354][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.447114][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.447234][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.545835][ T5630] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.614953][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.615075][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.689419][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.689539][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.968963][ T190] cfg80211: failed to load regulatory.db [ 86.974072][ T5622] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.126762][ T52] Bluetooth: hci0: command tx timeout [ 87.206227][ T52] Bluetooth: hci1: command tx timeout [ 87.282742][ T5622] veth0_vlan: entered promiscuous mode [ 87.286434][ T52] Bluetooth: hci2: command tx timeout [ 87.362210][ T5622] veth1_vlan: entered promiscuous mode [ 87.458752][ T52] Bluetooth: hci3: command tx timeout [ 87.525607][ T52] Bluetooth: hci4: command tx timeout [ 87.558030][ T5622] veth0_macvtap: entered promiscuous mode [ 87.600745][ T5622] veth1_macvtap: entered promiscuous mode [ 87.614135][ T5618] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.690099][ T5622] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.727656][ T5622] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.797446][ T1153] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.798730][ T43] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.798987][ T43] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.799156][ T43] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.898855][ T5618] veth0_vlan: entered promiscuous mode [ 87.963990][ T5618] veth1_vlan: entered promiscuous mode [ 87.998075][ T5629] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.028207][ T5614] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.134316][ T79] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.134341][ T79] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.187395][ T5618] veth0_macvtap: entered promiscuous mode [ 88.238972][ T5618] veth1_macvtap: entered promiscuous mode [ 88.265555][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.265577][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.310205][ T5630] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.349680][ T5629] veth0_vlan: entered promiscuous mode [ 88.387598][ T5614] veth0_vlan: entered promiscuous mode [ 88.393695][ T5618] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.398637][ T5629] veth1_vlan: entered promiscuous mode [ 88.437796][ T5618] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.467236][ T5614] veth1_vlan: entered promiscuous mode [ 88.468175][ T5622] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 88.479504][ T5629] veth0_macvtap: entered promiscuous mode [ 88.552014][ T5629] veth1_macvtap: entered promiscuous mode [ 88.572537][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.572611][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.578644][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.587693][ T50] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.654386][ T5629] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.721592][ T5805] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3'. [ 88.724221][ T5629] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.827564][ T5809] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3'. [ 88.831102][ T5614] veth0_macvtap: entered promiscuous mode [ 88.854820][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.854870][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.859230][ T5614] veth1_macvtap: entered promiscuous mode [ 88.920390][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.920413][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.006929][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.007985][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.024664][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.024685][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.076427][ T5614] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.142875][ T5614] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.146633][ T5630] veth0_vlan: entered promiscuous mode [ 89.159788][ T43] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.159809][ T43] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.178066][ T5630] veth1_vlan: entered promiscuous mode [ 89.206752][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.212891][ T52] Bluetooth: hci0: command tx timeout [ 89.215327][ T50] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.216172][ T50] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.285648][ T52] Bluetooth: hci1: command tx timeout [ 89.366760][ T52] Bluetooth: hci2: command tx timeout [ 89.377490][ T5630] veth0_macvtap: entered promiscuous mode [ 89.418791][ T5815] Zero length message leads to an empty skb [ 89.421185][ T5630] veth1_macvtap: entered promiscuous mode [ 89.474043][ T5816] netlink: 4912 bytes leftover after parsing attributes in process `syz.1.2'. [ 89.498939][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.498961][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.527518][ T52] Bluetooth: hci3: command tx timeout [ 89.565787][ T50] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.567310][ T50] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.567361][ T50] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.601192][ T5630] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.616904][ T52] Bluetooth: hci4: command tx timeout [ 89.621160][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.621181][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.623879][ T5818] netlink: 52 bytes leftover after parsing attributes in process `syz.3.7'. [ 89.670813][ T5630] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.728527][ T50] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.730534][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.756621][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.794974][ T5825] netlink: 62 bytes leftover after parsing attributes in process `syz.2.10'. [ 89.814686][ T5826] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9'. [ 89.871606][ T5828] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9'. [ 89.885788][ T79] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.021701][ T5832] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9'. [ 90.040113][ T5836] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11'. [ 90.042309][ T5838] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9'. [ 90.061482][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.061504][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.243165][ T1013] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.243188][ T1013] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.503631][ T5857] ip_tables: iptables: counters copy to user failed while replacing table [ 90.516003][ T5857] ip_tables: iptables: counters copy to user failed while replacing table [ 90.516449][ T5857] ip_tables: iptables: counters copy to user failed while replacing table [ 90.519226][ T5857] ip_tables: iptables: counters copy to user failed while replacing table [ 90.521532][ T5857] ip_tables: iptables: counters copy to user failed while replacing table [ 90.522186][ T5857] ip_tables: iptables: counters copy to user failed while replacing table [ 90.522578][ T5857] ip_tables: iptables: counters copy to user failed while replacing table [ 90.522953][ T5857] ip_tables: iptables: counters copy to user failed while replacing table [ 90.592353][ T5857] ip_tables: iptables: counters copy to user failed while replacing table [ 90.592825][ T5857] ip_tables: iptables: counters copy to user failed while replacing table [ 90.604830][ T5859] syz.3.16 uses obsolete (PF_INET,SOCK_PACKET) [ 90.624131][ T5859] x_tables: duplicate underflow at hook 3 [ 91.244368][ T5889] tunl0: entered promiscuous mode [ 91.261727][ T5889] netlink: 'syz.1.24': attribute type 4 has an invalid length. [ 91.532916][ T5902] warning: `syz.2.27' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 91.557023][ T5909] netlink: 'syz.0.30': attribute type 2 has an invalid length. [ 91.678251][ T43] IPVS: starting estimator thread 0... [ 91.768652][ T5917] IPVS: using max 24 ests per chain, 57600 per kthread [ 91.773486][ T5920] veth0: entered promiscuous mode [ 91.993853][ T5930] netlink: 'syz.0.36': attribute type 1 has an invalid length. [ 92.068165][ T5936] netlink: 'syz.0.36': attribute type 1 has an invalid length. [ 92.122177][ T5944] netlink: 'syz.2.38': attribute type 1 has an invalid length. [ 92.246068][ T5952] netlink: 'syz.1.39': attribute type 2 has an invalid length. [ 92.697993][ T5963] xt_hashlimit: size too large, truncated to 1048576 [ 92.733425][ T5919] veth0: left promiscuous mode [ 92.949918][ T5968] netlink: 'syz.0.44': attribute type 1 has an invalid length. [ 92.949944][ T5968] netlink: 'syz.0.44': attribute type 3 has an invalid length. [ 92.949960][ T5968] NCSI netlink: No device for ifindex 813332851 [ 93.628497][ T6005] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.649733][ T6005] ipt_ah: unknown flags FF [ 94.039430][ T6034] __nla_validate_parse: 12 callbacks suppressed [ 94.039476][ T6034] netlink: 12 bytes leftover after parsing attributes in process `syz.0.56'. [ 94.104976][ T6020] netlink: 16 bytes leftover after parsing attributes in process `syz.1.55'. [ 94.397192][ T6044] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 94.397406][ T6044] gretap1: entered promiscuous mode [ 94.397423][ T6044] gretap1: entered allmulticast mode [ 94.769446][ T6060] netlink: 8 bytes leftover after parsing attributes in process `syz.4.60'. [ 94.880585][ T6064] netlink: 'syz.4.65': attribute type 2 has an invalid length. [ 94.912020][ T6074] netlink: 104 bytes leftover after parsing attributes in process `syz.2.64'. [ 94.979409][ T6078] netlink: 4 bytes leftover after parsing attributes in process `syz.0.66'. [ 94.979435][ T6078] netlink: 50 bytes leftover after parsing attributes in process `syz.0.66'. [ 94.979534][ T6078] netlink: 50 bytes leftover after parsing attributes in process `syz.0.66'. [ 95.134422][ T6090] netlink: 28 bytes leftover after parsing attributes in process `syz.2.71'. [ 95.134587][ T6090] netlink: 28 bytes leftover after parsing attributes in process `syz.2.71'. [ 95.162588][ T6090] erspan0: entered promiscuous mode [ 95.164680][ T6090] erspan0: left promiscuous mode [ 95.682474][ T6116] netlink: 4 bytes leftover after parsing attributes in process `syz.0.77'. [ 95.733207][ T6118] netlink: 'syz.2.78': attribute type 1 has an invalid length. [ 95.851897][ T6127] net_ratelimit: 29 callbacks suppressed [ 95.851920][ T6127] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 95.857267][ T6130] openvswitch: netlink: Flow actions attr not present in new flow. [ 96.321598][ T6158] x_tables: duplicate underflow at hook 2 [ 96.323271][ T6158] block nbd0: Unsupported socket: should be TCP or UNIX. [ 96.447637][ T6160] validate_nla: 3 callbacks suppressed [ 96.447658][ T6160] netlink: 'syz.3.90': attribute type 32 has an invalid length. [ 96.654482][ T6171] netlink: 'syz.0.92': attribute type 2 has an invalid length. [ 96.678626][ T6173] tipc: Enabling of bearer rejected, failed to enable media [ 96.766701][ T6176] syzkaller0: entered promiscuous mode [ 96.766726][ T6176] syzkaller0: entered allmulticast mode [ 96.896719][ T6178] tipc: Started in network mode [ 96.896750][ T6178] tipc: Node identity , cluster identity 4711 [ 96.896765][ T6178] tipc: Failed to set node id, please configure manually [ 96.896813][ T6178] tipc: Enabling of bearer rejected, failed to enable media [ 97.080771][ T6194] xfrm1: entered promiscuous mode [ 97.080795][ T6194] xfrm1: entered allmulticast mode [ 97.396851][ T6213] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 98.372858][ T6261] netlink: 'syz.1.116': attribute type 2 has an invalid length. [ 98.441693][ T6263] netlink: 'syz.4.117': attribute type 23 has an invalid length. [ 98.751571][ T6274] syz_tun: entered allmulticast mode [ 98.762483][ T6250] syz_tun: left allmulticast mode [ 99.100809][ T6295] tipc: MTU too low for tipc bearer [ 99.105973][ T6292] netlink: 'syz.0.122': attribute type 10 has an invalid length. [ 99.148652][ T6297] __nla_validate_parse: 17 callbacks suppressed [ 99.148674][ T6297] netlink: 44 bytes leftover after parsing attributes in process `syz.4.124'. [ 99.238897][ T6308] netlink: 'syz.3.127': attribute type 83 has an invalid length. [ 99.416857][ T6312] netlink: 92 bytes leftover after parsing attributes in process `syz.4.128'. [ 99.514816][ T6316] netlink: 4 bytes leftover after parsing attributes in process `syz.1.129'. [ 99.598205][ T6316] netlink: 4 bytes leftover after parsing attributes in process `syz.1.129'. [ 99.598423][ T6316] netlink: 4 bytes leftover after parsing attributes in process `syz.1.129'. [ 99.598615][ T6316] netlink: 4 bytes leftover after parsing attributes in process `syz.1.129'. [ 99.598823][ T6316] netlink: 4 bytes leftover after parsing attributes in process `syz.1.129'. [ 99.599018][ T6316] netlink: 4 bytes leftover after parsing attributes in process `syz.1.129'. [ 99.654163][ T6316] netlink: 4 bytes leftover after parsing attributes in process `syz.1.129'. [ 99.654302][ T6316] netlink: 4 bytes leftover after parsing attributes in process `syz.1.129'. [ 99.917481][ T6329] bond1: option min_links: invalid value (18446744073709551614) [ 99.917511][ T6329] bond1: option min_links: allowed values 0 - 2147483647 [ 99.923822][ T6329] bond1 (unregistering): Released all slaves [ 100.241620][ T6354] 0XD: renamed from gretap0 (while UP) [ 100.266111][ T6354] 0XD: entered allmulticast mode [ 100.412730][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 101.806145][ T52] block nbd0: Receive control failed (result -107) [ 102.072122][ T6428] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 102.202348][ T6443] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.398655][ T6448] openvswitch: netlink: Message has 512 unknown bytes. [ 102.835229][ T64] IPVS: starting estimator thread 0... [ 102.916117][ T6480] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 102.926160][ T6477] IPVS: using max 27 ests per chain, 64800 per kthread [ 104.384750][ T6535] xt_hashlimit: size too large, truncated to 1048576 [ 104.409300][ T6535] Bluetooth: MGMT ver 1.23 [ 104.609558][ T6542] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 104.679664][ T6542] bridge_slave_0: left allmulticast mode [ 104.679690][ T6542] bridge_slave_0: left promiscuous mode [ 104.680048][ T6542] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.728803][ T6542] bridge_slave_1: left allmulticast mode [ 104.728832][ T6542] bridge_slave_1: left promiscuous mode [ 104.730159][ T6542] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.773092][ T6557] __nla_validate_parse: 68 callbacks suppressed [ 104.773117][ T6557] netlink: 12 bytes leftover after parsing attributes in process `syz.0.174'. [ 104.773250][ T6557] openvswitch: netlink: Message has 4 unknown bytes. [ 104.776185][ T6557] netlink: 8 bytes leftover after parsing attributes in process `syz.0.174'. [ 104.776875][ T6557] netlink: 'syz.0.174': attribute type 30 has an invalid length. [ 104.781658][ T6559] raw_sendmsg: syz.4.171 forgot to set AF_INET. Fix it! [ 104.826274][ T6542] bond0: (slave bond_slave_0): Releasing backup interface [ 104.852933][ T6542] bond0: (slave bond_slave_1): Releasing backup interface [ 104.899306][ T6542] team0: Port device team_slave_0 removed [ 104.934925][ T6542] team0: Port device team_slave_1 removed [ 104.936854][ T6542] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 104.936876][ T6542] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 104.949559][ T6542] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 104.949580][ T6542] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 104.957071][ T6542] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 104.957332][ T6538] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.958482][ T6538] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.958632][ T6538] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.035274][ T6558] tipc: Started in network mode [ 105.038270][ T6558] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 105.038471][ T6558] tipc: Enabled bearer , priority 0 [ 105.238531][ T64] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 105.239013][ T64] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 105.239052][ T64] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 105.239084][ T64] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 105.282179][ T6566] netlink: Setting conntrack mark requires 'commit' flag. [ 105.282211][ T6566] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 105.623762][ T6593] IPVS: sync thread started: state = MASTER, mcast_ifn = macvlan0, syncid = 0, id = 0 [ 105.760826][ T6592] bond3: option lp_interval: invalid value (0) [ 105.760851][ T6592] bond3: option lp_interval: allowed values 1 - 2147483647 [ 105.779433][ T6592] bond3 (unregistering): Released all slaves [ 105.837730][ T6601] netlink: 4 bytes leftover after parsing attributes in process `syz.1.184'. [ 106.158916][ T5732] tipc: Node number set to 11578026 [ 106.216690][ T6612] Illegal XDP return value 909508641 on prog (id 25) dev N/A, expect packet loss! [ 106.498940][ T6627] lo: entered promiscuous mode [ 106.499721][ T6627] lo: left promiscuous mode [ 106.527613][ T6627] netlink: 8 bytes leftover after parsing attributes in process `syz.2.193'. [ 106.721589][ T6634] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 106.724031][ T6634] netlink: 40 bytes leftover after parsing attributes in process `syz.3.196'. [ 106.787759][ T6642] veth3: entered allmulticast mode [ 107.065735][ T6657] netlink: 'syz.4.202': attribute type 23 has an invalid length. [ 107.174340][ T6663] gretap0: entered promiscuous mode [ 107.185113][ T6663] netlink: 8 bytes leftover after parsing attributes in process `syz.3.203'. [ 107.185142][ T6663] gretap0: left promiscuous mode [ 107.452962][ T6269] IPVS: starting estimator thread 0... [ 107.537062][ T6676] IPVS: using max 27 ests per chain, 64800 per kthread [ 107.614953][ T6684] netlink: 4 bytes leftover after parsing attributes in process `syz.4.211'. [ 108.279082][ T6717] netlink: 28 bytes leftover after parsing attributes in process `syz.0.221'. [ 108.279112][ T6717] netlink: 28 bytes leftover after parsing attributes in process `syz.0.221'. [ 108.279127][ T6717] netlink: 8 bytes leftover after parsing attributes in process `syz.0.221'. [ 109.810525][ T6792] batadv_slave_0: entered promiscuous mode [ 109.813736][ T6269] IPVS: starting estimator thread 0... [ 109.834141][ T6790] batadv_slave_0: left promiscuous mode [ 109.896781][ T6802] IPVS: using max 29 ests per chain, 69600 per kthread [ 109.913269][ T6805] __nla_validate_parse: 3 callbacks suppressed [ 109.913289][ T6805] netlink: 36 bytes leftover after parsing attributes in process `syz.0.237'. [ 109.936705][ T6807] netlink: 36 bytes leftover after parsing attributes in process `syz.0.237'. [ 110.037530][ T6813] netlink: 4 bytes leftover after parsing attributes in process `syz.3.238'. [ 110.043513][ T6813] netlink: 4 bytes leftover after parsing attributes in process `syz.3.238'. [ 110.051185][ T6811] netlink: 28 bytes leftover after parsing attributes in process `syz.0.240'. [ 110.051422][ T6811] netlink: 28 bytes leftover after parsing attributes in process `syz.0.240'. [ 110.051637][ T6811] netlink: 28 bytes leftover after parsing attributes in process `syz.0.240'. [ 110.051848][ T6811] netlink: 28 bytes leftover after parsing attributes in process `syz.0.240'. [ 110.062061][ T6811] netlink: 28 bytes leftover after parsing attributes in process `syz.0.240'. [ 110.062288][ T6811] netlink: 28 bytes leftover after parsing attributes in process `syz.0.240'. [ 110.778570][ T6862] ip_tables: iptables: counters copy to user failed while replacing table [ 111.199845][ T6877] tipc: Started in network mode [ 111.199879][ T6877] tipc: Node identity aaaaaaaaaa33, cluster identity 4711 [ 111.200398][ T6877] tipc: Enabled bearer , priority 10 [ 111.241501][ T6883] netlink: 'syz.1.255': attribute type 1 has an invalid length. [ 111.241526][ T6883] netlink: 'syz.1.255': attribute type 268 has an invalid length. [ 111.297708][ T6877] block nbd3: not configured, cannot reconfigure [ 111.714686][ T6899] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 111.980329][ T6918] netlink: 'syz.2.266': attribute type 2 has an invalid length. [ 112.040295][ T6918] : entered promiscuous mode [ 112.310629][ T6939] netlink: 'syz.1.274': attribute type 11 has an invalid length. [ 112.310670][ T6939] netlink: 'syz.1.274': attribute type 11 has an invalid length. [ 112.314301][ T6942] netlink: 'syz.1.274': attribute type 11 has an invalid length. [ 112.314321][ T6942] netlink: 'syz.1.274': attribute type 11 has an invalid length. [ 112.316724][ T25] tipc: Node number set to 10070698 [ 112.473835][ T6953] netlink: 'syz.4.275': attribute type 2 has an invalid length. [ 113.260243][ T6993] sctp: [Deprecated]: syz.1.291 (pid 6993) Use of int in max_burst socket option deprecated. [ 113.260243][ T6993] Use struct sctp_assoc_value instead [ 113.381617][ T7007] ip6gre1: entered allmulticast mode [ 113.394272][ T6269] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 113.516692][ T7016] netlink: 'syz.0.296': attribute type 3 has an invalid length. [ 114.198573][ T7046] xt_MASQUERADE: bad MAP_IPS. [ 114.272793][ T7051] netlink: 'syz.1.306': attribute type 9 has an invalid length. [ 114.284490][ T7051] netlink: 'syz.1.306': attribute type 9 has an invalid length. [ 114.292293][ T7051] netlink: 'syz.1.306': attribute type 9 has an invalid length. [ 114.305655][ T6269] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 114.305811][ T6269] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 114.305847][ T6269] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 114.305880][ T6269] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 114.388363][ T52] Bluetooth: hci4: unexpected event 0x05 length: 5 > 4 [ 114.390910][ T7059] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 114.790049][ T7074] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 114.896132][ T153] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 114.896182][ T153] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 114.896216][ T153] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 114.896247][ T153] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 115.078410][ T31] audit: type=1107 audit(1791234371.471:2): pid=7087 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='UG+mZBKowKH%ʏSf~4 ,>n2oZ+Zra.4_gl\KJ'' [ 115.332365][ T7103] 8021q: adding VLAN 0 to HW filter on device bond3 [ 115.511646][ T7104] 8021q: adding VLAN 0 to HW filter on device bond4 [ 115.708657][ T7124] netlink: 'syz.0.325': attribute type 1 has an invalid length. [ 115.785938][ T7124] 8021q: adding VLAN 0 to HW filter on device bond5 [ 115.822040][ T7124] __nla_validate_parse: 81 callbacks suppressed [ 115.822063][ T7124] netlink: 8 bytes leftover after parsing attributes in process `syz.0.325'. [ 115.920141][ T7124] bond5: (slave bridge2): making interface the new active one [ 115.940863][ T7124] bond5: (slave bridge2): Enslaving as an active interface with an up link [ 116.218486][ T7144] netlink: 24 bytes leftover after parsing attributes in process `syz.2.331'. [ 116.218511][ T7144] netlink: 80 bytes leftover after parsing attributes in process `syz.2.331'. [ 116.218526][ T7144] netlink: 24 bytes leftover after parsing attributes in process `syz.2.331'. [ 116.277775][ T7144] netlink: 12 bytes leftover after parsing attributes in process `syz.2.331'. [ 116.277931][ T7149] netlink: 72 bytes leftover after parsing attributes in process `syz.4.332'. [ 116.353661][ T7155] Cannot find set identified by id 0 to match [ 116.532995][ T7168] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 116.542560][ T7166] x_tables: duplicate underflow at hook 4 [ 116.663614][ T7174] xt_TPROXY: Can be used only with -p tcp or -p udp [ 116.739338][ T7179] netlink: 8 bytes leftover after parsing attributes in process `syz.4.340'. [ 116.753047][ T7163] netlink: 'syz.3.335': attribute type 5 has an invalid length. [ 117.094234][ T7188] netlink: 32 bytes leftover after parsing attributes in process `syz.1.342'. [ 117.094263][ T7188] netlink: 32 bytes leftover after parsing attributes in process `syz.1.342'. [ 117.162295][ T7192] syzkaller0: entered promiscuous mode [ 117.162319][ T7192] syzkaller0: entered allmulticast mode [ 117.200244][ T7194] netlink: 16 bytes leftover after parsing attributes in process `syz.2.346'. [ 117.201239][ T7194] openvswitch: netlink: IPv4 tunnel dst address is zero [ 117.201270][ T7194] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 117.228968][ T7198] openvswitch: netlink: IPv4 tunnel dst address is zero [ 117.229001][ T7198] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 117.525632][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 117.676574][ T7217] netlink: 'syz.1.352': attribute type 2 has an invalid length. [ 117.788736][ T7225] syzkaller0: entered promiscuous mode [ 117.788761][ T7225] syzkaller0: entered allmulticast mode [ 118.346758][ T7254] xt_hashlimit: size too large, truncated to 1048576 [ 118.414155][ T7255] netlink: 'syz.4.361': attribute type 6 has an invalid length. [ 118.786547][ T7290] mac80211_hwsim hwsim10 wlan0: entered promiscuous mode [ 119.049738][ T7301] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 119.634784][ T7329] bridge1: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 119.724897][ T7333] netlink: 'syz.4.384': attribute type 21 has an invalid length. [ 119.923582][ T7339] can: request_module (can-proto-3) failed. [ 119.959483][ T7345] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 120.213918][ T7358] bond1: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 120.345592][ T7370] netlink: 'syz.1.396': attribute type 1 has an invalid length. [ 120.382399][ T7370] bond2: entered promiscuous mode [ 120.382928][ T7370] 8021q: adding VLAN 0 to HW filter on device bond2 [ 120.436753][ T7375] sctp: [Deprecated]: syz.3.397 (pid 7375) Use of int in maxseg socket option. [ 120.436753][ T7375] Use struct sctp_assoc_value instead [ 120.563170][ T7372] Bluetooth: MGMT ver 1.23 [ 120.639774][ T7380] 8021q: adding VLAN 0 to HW filter on device bond2 [ 120.640102][ T7380] bond2: (slave xfrm1): The slave device specified does not support setting the MAC address [ 120.640125][ T7380] bond2: (slave xfrm1): Setting fail_over_mac to active for active-backup mode [ 120.652291][ T7380] bond2: (slave xfrm1): making interface the new active one [ 120.653404][ T7380] xfrm1: entered promiscuous mode [ 120.687634][ T7380] xfrm1: left promiscuous mode [ 120.838625][ T7386] netlink: 'syz.0.399': attribute type 1 has an invalid length. [ 120.881371][ T7386] 8021q: adding VLAN 0 to HW filter on device bond6 [ 121.191071][ T7406] __nla_validate_parse: 21 callbacks suppressed [ 121.191093][ T7406] netlink: 36 bytes leftover after parsing attributes in process `syz.2.405'. [ 121.332224][ T7408] netlink: 'syz.4.406': attribute type 4 has an invalid length. [ 121.344946][ T7410] netlink: 8 bytes leftover after parsing attributes in process `syz.2.408'. [ 121.344969][ T7410] netlink: 24 bytes leftover after parsing attributes in process `syz.2.408'. [ 121.567637][ T7432] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.412'. [ 121.567665][ T7432] veth0_to_bond: default FDB implementation only supports local addresses [ 121.728884][ T7438] netlink: 236 bytes leftover after parsing attributes in process `syz.3.415'. [ 121.728913][ T7438] netlink: 236 bytes leftover after parsing attributes in process `syz.3.415'. [ 121.940071][ T7446] netlink: Setting conntrack mark requires 'commit' flag. [ 121.940106][ T7446] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 122.001716][ T7452] netlink: 28 bytes leftover after parsing attributes in process `syz.0.422'. [ 122.170354][ T7463] netlink: 12 bytes leftover after parsing attributes in process `syz.0.428'. [ 122.170385][ T7463] netlink: 12 bytes leftover after parsing attributes in process `syz.0.428'. [ 122.170452][ T7463] netlink: 12 bytes leftover after parsing attributes in process `syz.0.428'. [ 122.277729][ T7468] ip_tables: iptables: counters copy to user failed while replacing table [ 122.504783][ T7479] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 8 [ 123.059840][ T7507] tipc: Resetting bearer [ 123.453135][ T7525] netlink: 'syz.0.441': attribute type 4 has an invalid length. [ 123.453162][ T7525] netlink: 'syz.0.441': attribute type 3 has an invalid length. [ 123.453174][ T7525] netlink: 'syz.0.441': attribute type 4 has an invalid length. [ 123.644998][ T7533] syzkaller0: entered promiscuous mode [ 123.645023][ T7533] syzkaller0: entered allmulticast mode [ 123.906369][ T7554] syzkaller1: entered promiscuous mode [ 123.906393][ T7554] syzkaller1: entered allmulticast mode [ 124.150053][ T7560] netlink: 'syz.0.452': attribute type 32 has an invalid length. [ 124.196353][ T7560] bond7: Setting coupled_control to off (0) [ 124.322091][ T7556] ip_tables: iptables: counters copy to user failed while replacing table [ 124.355487][ T7569] tipc: Enabling of bearer rejected, media not registered [ 124.475657][ T7575] Cannot find del_set index 4 as target [ 124.530944][ T7575] bond8: Unable to set up delay as MII monitoring is disabled [ 124.534423][ T7575] bond8 (unregistering): Released all slaves [ 124.903395][ T7593] sctp: [Deprecated]: syz.1.461 (pid 7593) Use of struct sctp_assoc_value in delayed_ack socket option. [ 124.903395][ T7593] Use struct sctp_sack_info instead [ 124.949369][ T7593] tipc: Enabled bearer , priority 10 [ 124.988775][ T7605] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 125.113704][ T7607] x_tables: duplicate underflow at hook 1 [ 125.134809][ T52] Bluetooth: hci3: unexpected event 0x04 length: 17 > 10 [ 125.134837][ T52] Bluetooth: unknown link type 128 [ 125.178930][ T7620] netlink: 'syz.1.469': attribute type 3 has an invalid length. [ 125.227917][ T7620] syzkaller1: entered promiscuous mode [ 125.227942][ T7620] syzkaller1: entered allmulticast mode [ 125.717950][ T7645] bond1: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 125.721562][ T7645] bond1 (unregistering): Released all slaves [ 125.756538][ T7650] bridge0: port 3(syz_tun) entered blocking state [ 125.756849][ T7650] bridge0: port 3(syz_tun) entered disabled state [ 125.757095][ T7650] syz_tun: entered allmulticast mode [ 125.759898][ T7650] syz_tun: entered promiscuous mode [ 125.760755][ T7650] bridge0: port 3(syz_tun) entered blocking state [ 125.760929][ T7650] bridge0: port 3(syz_tun) entered forwarding state [ 125.793349][ T7653] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 125.905252][ T7656] netlink: 'syz.3.480': attribute type 49 has an invalid length. [ 125.978995][ T7659] netlink: 'syz.2.481': attribute type 5 has an invalid length. [ 125.979020][ T7659] netlink: 'syz.2.481': attribute type 6 has an invalid length. [ 126.005928][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 126.043915][ T7656] ip6gretap0: entered promiscuous mode [ 126.043941][ T7656] ip6gretap0: entered allmulticast mode [ 126.070449][ T7657] tipc: Started in network mode [ 126.070468][ T7657] tipc: Node identity , cluster identity 4711 [ 126.070482][ T7657] tipc: Failed to obtain node identity [ 126.070510][ T7657] tipc: Enabling of bearer rejected, failed to enable media [ 126.287249][ T7672] __nla_validate_parse: 17 callbacks suppressed [ 126.287273][ T7672] netlink: 312 bytes leftover after parsing attributes in process `syz.0.484'. [ 126.478672][ T7677] netlink: 40 bytes leftover after parsing attributes in process `syz.2.488'. [ 126.492382][ T7680] gretap0: entered promiscuous mode [ 126.495720][ T7680] vlan2: entered promiscuous mode [ 126.504738][ T7685] netlink: 'syz.1.487': attribute type 21 has an invalid length. [ 126.580049][ T7688] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 126.583669][ T7691] netlink: 'syz.1.487': attribute type 21 has an invalid length. [ 126.613992][ T7685] netlink: 156 bytes leftover after parsing attributes in process `syz.1.487'. [ 126.624199][ T7691] netlink: 156 bytes leftover after parsing attributes in process `syz.1.487'. [ 126.992754][ T7716] netlink: 12 bytes leftover after parsing attributes in process `syz.0.496'. [ 127.076109][ T7716] netlink: 12 bytes leftover after parsing attributes in process `syz.0.496'. [ 127.076358][ T7716] netlink: 12 bytes leftover after parsing attributes in process `syz.0.496'. [ 127.076597][ T7716] netlink: 12 bytes leftover after parsing attributes in process `syz.0.496'. [ 127.076872][ T7716] netlink: 12 bytes leftover after parsing attributes in process `syz.0.496'. [ 127.077102][ T7716] netlink: 12 bytes leftover after parsing attributes in process `syz.0.496'. [ 127.206632][ T52] Bluetooth: hci3: command tx timeout [ 128.196995][ T7779] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 129.822465][ T7704] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 130.486556][ T7842] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 130.655018][ T7852] netlink: 'syz.1.524': attribute type 4 has an invalid length. [ 130.761850][ T7852] netlink: 'syz.1.524': attribute type 4 has an invalid length. [ 130.791367][ T7856] netlink: 'syz.4.525': attribute type 10 has an invalid length. [ 130.854756][ T7856] team0: Device veth0_macvtap failed to register rx_handler [ 131.329680][ T7889] __nla_validate_parse: 69 callbacks suppressed [ 131.329703][ T7889] netlink: 8 bytes leftover after parsing attributes in process `syz.0.533'. [ 131.473771][ T7899] xt_nat: multiple ranges no longer supported [ 131.548764][ T7903] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 131.646794][ T7910] netlink: 4 bytes leftover after parsing attributes in process `syz.1.539'. [ 132.389788][ T7907] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 132.389826][ T7907] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 132.389866][ T7907] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 132.471167][ T7914] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 132.499339][ T7907] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 132.531234][ T7907] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 132.636817][ T7939] netlink: 36 bytes leftover after parsing attributes in process `syz.0.544'. [ 132.936519][ T7956] netlink: 8 bytes leftover after parsing attributes in process `syz.0.547'. [ 133.048328][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.048414][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.615934][ T7986] netlink: 52 bytes leftover after parsing attributes in process `syz.2.557'. [ 133.646979][ T7986] bridge0: port 2(bridge_slave_1) entered disabled state [ 133.648308][ T7986] bridge0: port 1(bridge_slave_0) entered disabled state [ 133.691575][ T7991] netlink: 52 bytes leftover after parsing attributes in process `syz.2.557'. [ 133.724979][ T7994] netlink: 'syz.1.559': attribute type 21 has an invalid length. [ 133.725003][ T7994] netlink: 128 bytes leftover after parsing attributes in process `syz.1.559'. [ 133.725054][ T7994] netlink: 3 bytes leftover after parsing attributes in process `syz.1.559'. [ 133.738926][ T7994] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 133.828307][ T7998] veth1_macvtap: left promiscuous mode [ 133.828335][ T7998] macsec0: entered promiscuous mode [ 133.836604][ T7995] netlink: 8 bytes leftover after parsing attributes in process `syz.0.558'. [ 133.841120][ T7995] netlink: 64871 bytes leftover after parsing attributes in process `syz.0.558'. [ 134.246193][ T8021] ip6t_srh: unknown srh match flags 5F28 [ 134.268037][ T8023] sctp: [Deprecated]: syz.2.568 (pid 8023) Use of int in max_burst socket option deprecated. [ 134.268037][ T8023] Use struct sctp_assoc_value instead [ 134.421255][ T8027] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 64 [ 134.422008][ T8027] netlink: 'syz.4.572': attribute type 2 has an invalid length. [ 134.483138][ T8029] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 134.501853][ T8029] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 134.553897][ T8029] geneve2: entered promiscuous mode [ 134.553922][ T8029] geneve2: entered allmulticast mode [ 134.610123][ T8029] bridge1: entered promiscuous mode [ 134.610169][ T8029] bridge1: entered allmulticast mode [ 134.612383][ T8034] openvswitch: netlink: Flow actions attr not present in new flow. [ 134.693256][ T8036] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 135.881152][ T8102] wg1 speed is unknown, defaulting to 1000 [ 135.883658][ T8102] wg1 speed is unknown, defaulting to 1000 [ 135.891041][ T8102] wg1 speed is unknown, defaulting to 1000 [ 136.234611][ T8102] infiniband syz2: set active [ 136.237292][ T5740] wg1 speed is unknown, defaulting to 1000 [ 136.237407][ T8102] infiniband syz2: added wg1 [ 136.285616][ T8102] smbdirect: ib_dev[syz2]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 136.285660][ T8102] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 136.285699][ T8102] smbdirect: ib_dev[syz2]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 136.368536][ T8102] RDS/IB: syz2: added [ 136.369083][ T8102] smc: adding ib device syz2 with port count 1 [ 136.369198][ T8102] smc: ib device syz2 port 1 has no pnetid [ 136.372530][ T5740] wg1 speed is unknown, defaulting to 1000 [ 136.398974][ T8102] wg1 speed is unknown, defaulting to 1000 [ 136.980390][ T8136] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 137.042748][ T8102] wg1 speed is unknown, defaulting to 1000 [ 137.044553][ T8140] __nla_validate_parse: 7 callbacks suppressed [ 137.044571][ T8140] netlink: 24 bytes leftover after parsing attributes in process `syz.3.603'. [ 137.326804][ T8153] netlink: 8 bytes leftover after parsing attributes in process `syz.1.609'. [ 137.334491][ T8154] netlink: 'syz.3.608': attribute type 1 has an invalid length. [ 137.334513][ T8154] netlink: 'syz.3.608': attribute type 4 has an invalid length. [ 137.334526][ T8154] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.608'. [ 137.431265][ T8156] netlink: 20 bytes leftover after parsing attributes in process `syz.3.610'. [ 137.871746][ T8102] wg1 speed is unknown, defaulting to 1000 [ 138.099822][ T8181] : renamed from bond_slave_0 (while UP) [ 138.771714][ T8102] wg1 speed is unknown, defaulting to 1000 [ 138.938326][ T8209] C: renamed from lo (while UP) [ 138.970029][ T8209] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 139.400468][ T8102] wg1 speed is unknown, defaulting to 1000 [ 139.557554][ T8231] Bluetooth: MGMT ver 1.23 [ 140.082000][ T8249] netlink: 'syz.2.625': attribute type 9 has an invalid length. [ 140.246095][ T8258] netlink: 12 bytes leftover after parsing attributes in process `syz.0.627'. [ 140.246145][ T8258] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 140.383140][ T8268] IPVS: set_ctl: invalid protocol: 22 224.0.0.2:20003 [ 140.936822][ T8298] netlink: 24 bytes leftover after parsing attributes in process `syz.2.634'. [ 141.470255][ T8325] netlink: 'syz.4.639': attribute type 6 has an invalid length. [ 141.590646][ T8337] netlink: 28 bytes leftover after parsing attributes in process `syz.0.640'. [ 141.871470][ T8342] netlink: 84 bytes leftover after parsing attributes in process `syz.2.644'. [ 142.005594][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 142.041068][ T8364] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 142.059557][ T8362] xt_hashlimit: size too large, truncated to 1048576 [ 142.153184][ T8363] xt_hashlimit: size too large, truncated to 1048576 [ 142.611106][ T8394] IPVS: set_ctl: invalid protocol: 47 100.1.1.2:20001 [ 142.768498][ T8401] netlink: 64 bytes leftover after parsing attributes in process `syz.3.659'. [ 142.843294][ T52] Bluetooth: hci2: connection err: -111 [ 142.843388][ T52] Bluetooth: hci2: connection err: -111 [ 142.843464][ T52] Bluetooth: hci2: connection err: -111 [ 142.843547][ T52] Bluetooth: hci2: connection err: -111 [ 142.843621][ T52] Bluetooth: hci2: connection err: -111 [ 142.843697][ T52] Bluetooth: hci2: connection err: -111 [ 142.843773][ T52] Bluetooth: hci2: connection err: -111 [ 142.843848][ T52] Bluetooth: hci2: connection err: -111 [ 142.843922][ T52] Bluetooth: hci2: connection err: -111 [ 142.843996][ T52] Bluetooth: hci2: connection err: -111 [ 142.844071][ T52] Bluetooth: hci2: connection err: -111 [ 142.844146][ T52] Bluetooth: hci2: connection err: -111 [ 142.844220][ T52] Bluetooth: hci2: connection err: -111 [ 142.844295][ T52] Bluetooth: hci2: connection err: -111 [ 142.844367][ T52] Bluetooth: hci2: connection err: -111 [ 142.844443][ T52] Bluetooth: hci2: connection err: -111 [ 142.844525][ T52] Bluetooth: hci2: connection err: -111 [ 142.844600][ T52] Bluetooth: hci2: connection err: -111 [ 142.844675][ T52] Bluetooth: hci2: connection err: -111 [ 142.846554][ T52] Bluetooth: hci2: connection err: -111 [ 142.846636][ T52] Bluetooth: hci2: connection err: -111 [ 142.846711][ T52] Bluetooth: hci2: connection err: -111 [ 142.846785][ T52] Bluetooth: hci2: connection err: -111 [ 142.846860][ T52] Bluetooth: hci2: connection err: -111 [ 142.846934][ T52] Bluetooth: hci2: connection err: -111 [ 142.847007][ T52] Bluetooth: hci2: connection err: -111 [ 142.847082][ T52] Bluetooth: hci2: connection err: -111 [ 142.847157][ T52] Bluetooth: hci2: connection err: -111 [ 142.847233][ T52] Bluetooth: hci2: connection err: -111 [ 142.847308][ T52] Bluetooth: hci2: connection err: -111 [ 142.847378][ T52] Bluetooth: hci2: connection err: -111 [ 142.847461][ T52] Bluetooth: hci2: connection err: -111 [ 142.847535][ T52] Bluetooth: hci2: connection err: -111 [ 142.847601][ T52] Bluetooth: hci2: connection err: -111 [ 142.847667][ T52] Bluetooth: hci2: connection err: -111 [ 142.847731][ T52] Bluetooth: hci2: connection err: -111 [ 142.847795][ T52] Bluetooth: hci2: connection err: -111 [ 142.847860][ T52] Bluetooth: hci2: connection err: -111 [ 142.847925][ T52] Bluetooth: hci2: connection err: -111 [ 142.849268][ T52] Bluetooth: hci2: connection err: -111 [ 142.849348][ T52] Bluetooth: hci2: connection err: -111 [ 142.849414][ T52] Bluetooth: hci2: connection err: -111 [ 142.849479][ T52] Bluetooth: hci2: connection err: -111 [ 142.849553][ T52] Bluetooth: hci2: connection err: -111 [ 142.849617][ T52] Bluetooth: hci2: connection err: -111 [ 142.849681][ T52] Bluetooth: hci2: connection err: -111 [ 142.858972][ T52] Bluetooth: hci2: connection err: -111 [ 142.859047][ T52] Bluetooth: hci2: connection err: -111 [ 142.859113][ T52] Bluetooth: hci2: connection err: -111 [ 142.859178][ T52] Bluetooth: hci2: connection err: -111 [ 142.859249][ T52] Bluetooth: hci2: connection err: -111 [ 142.859315][ T52] Bluetooth: hci2: connection err: -111 [ 142.859408][ T52] Bluetooth: hci2: connection err: -111 [ 142.859474][ T52] Bluetooth: hci2: connection err: -111 [ 142.859546][ T52] Bluetooth: hci2: connection err: -111 [ 142.859611][ T52] Bluetooth: hci2: connection err: -111 [ 142.859675][ T52] Bluetooth: hci2: connection err: -111 [ 142.859739][ T52] Bluetooth: hci2: connection err: -111 [ 142.859803][ T52] Bluetooth: hci2: connection err: -111 [ 142.859905][ T52] Bluetooth: hci2: connection err: -111 [ 142.859975][ T52] Bluetooth: hci2: connection err: -111 [ 142.860041][ T52] Bluetooth: hci2: connection err: -111 [ 142.860106][ T52] Bluetooth: hci2: connection err: -111 [ 142.860171][ T52] Bluetooth: hci2: connection err: -111 [ 142.860235][ T52] Bluetooth: hci2: connection err: -111 [ 142.968094][ T8411] netlink: 'syz.3.663': attribute type 2 has an invalid length. [ 143.281092][ T8421] netlink: 'syz.2.665': attribute type 3 has an invalid length. [ 143.281115][ T8421] netlink: 'syz.2.665': attribute type 1 has an invalid length. [ 143.296783][ T8422] netlink: 'syz.2.665': attribute type 3 has an invalid length. [ 143.296806][ T8422] netlink: 'syz.2.665': attribute type 1 has an invalid length. [ 143.359536][ T8429] openvswitch: netlink: IP tunnel attribute has 5393 unknown bytes. [ 143.388541][ T8425] netlink: 'syz.3.666': attribute type 1 has an invalid length. [ 143.424698][ T8428] netlink: 4 bytes leftover after parsing attributes in process `syz.0.667'. [ 143.430428][ T8428] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 143.510340][ T8436] openvswitch: netlink: Unexpected mask (mask=810, allowed=10058) [ 143.636847][ T8446] netlink: 9 bytes leftover after parsing attributes in process `syz.2.671'. [ 143.651614][ T8446] netlink: 9 bytes leftover after parsing attributes in process `syz.2.671'. [ 143.990232][ T8464] netlink: 16 bytes leftover after parsing attributes in process `syz.4.676'. [ 144.269426][ T8474] netlink: 'syz.4.679': attribute type 1 has an invalid length. [ 144.870849][ T8481] netlink: 'syz.2.680': attribute type 4 has an invalid length. [ 145.204089][ T8512] netlink: 'syz.3.689': attribute type 1 has an invalid length. [ 145.204114][ T8512] netlink: 228 bytes leftover after parsing attributes in process `syz.3.689'. [ 145.271960][ T8514] gretap0: entered promiscuous mode [ 145.272425][ T8514] vlan2: entered promiscuous mode [ 145.511871][ T8528] netlink: 16 bytes leftover after parsing attributes in process `syz.2.695'. [ 145.617819][ T8535] netlink: 'syz.2.697': attribute type 1 has an invalid length. [ 145.687504][ T8535] veth5: entered allmulticast mode [ 145.693438][ T8535] bond2: (slave veth5): Enslaving as an active interface with a down link [ 145.715060][ T8535] bond2: (slave veth0_to_bond): making interface the new active one [ 145.726172][ T8535] bond2: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 145.756200][ T8535] macvlan2: entered promiscuous mode [ 145.756227][ T8535] macvlan2: entered allmulticast mode [ 145.756930][ T8535] bond2: entered promiscuous mode [ 145.756956][ T8535] veth0_to_bond: entered promiscuous mode [ 145.764408][ T8535] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 145.767526][ T8535] bond2: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 145.767699][ T8535] bond2: left promiscuous mode [ 145.767715][ T8535] veth0_to_bond: left promiscuous mode [ 145.862675][ T8541] netlink: 8 bytes leftover after parsing attributes in process `syz.4.700'. [ 145.863385][ T8541] netlink: 8 bytes leftover after parsing attributes in process `syz.4.700'. [ 146.153552][ T8551] bond3: option lacp_active: mode dependency failed, not supported in mode active-backup(1) [ 146.171970][ T8551] bond3 (unregistering): Released all slaves [ 146.645025][ T8579] netlink: 16 bytes leftover after parsing attributes in process `syz.3.709'. [ 146.865633][ T8598] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 146.917137][ T8587] wg1 speed is unknown, defaulting to 1000 [ 146.980621][ T8599] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 147.169970][ T8604] netlink: Unknown nat attribute (0) [ 147.170010][ T8604] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 147.684726][ T8626] xt_nfacct: accounting object `syz0' does not exist [ 147.888464][ T8631] bridge5: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 147.909448][ T8632] __nla_validate_parse: 4 callbacks suppressed [ 147.909466][ T8632] netlink: 4 bytes leftover after parsing attributes in process `syz.4.723'. [ 147.998155][ T8637] validate_nla: 1 callbacks suppressed [ 147.998176][ T8637] netlink: 'syz.3.724': attribute type 2 has an invalid length. [ 148.045762][ T8637] bridge_slave_0: left allmulticast mode [ 148.045793][ T8637] bridge_slave_0: left promiscuous mode [ 148.046037][ T8637] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.082763][ T8637] bridge_slave_1: left promiscuous mode [ 148.083049][ T8637] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.134258][ T8637] bond0: (slave bond_slave_0): Releasing backup interface [ 148.204493][ T8637] bond0: (slave bond_slave_1): Releasing backup interface [ 148.212235][ T8654] netlink: 104 bytes leftover after parsing attributes in process `syz.4.723'. [ 148.300705][ T8637] team0: Port device team_slave_0 removed [ 148.341267][ T8637] team0: Port device team_slave_1 removed [ 148.344069][ T8656] openvswitch: netlink: VLAN attribute unexpected. [ 148.347363][ T8637] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 148.347402][ T8637] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 148.390606][ T8637] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 148.390633][ T8637] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 148.394052][ T8637] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 148.571245][ T8636] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 148.583599][ T8653] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 148.824496][ T8684] netlink: 32 bytes leftover after parsing attributes in process `syz.4.732'. [ 148.864435][ T8683] netlink: 64 bytes leftover after parsing attributes in process `syz.1.733'. [ 148.865070][ T8683] netlink: 64 bytes leftover after parsing attributes in process `syz.1.733'. [ 148.865284][ T8683] netlink: 64 bytes leftover after parsing attributes in process `syz.1.733'. [ 148.883481][ T8683] netlink: 64 bytes leftover after parsing attributes in process `syz.1.733'. [ 148.883686][ T8683] netlink: 64 bytes leftover after parsing attributes in process `syz.1.733'. [ 148.883888][ T8683] netlink: 64 bytes leftover after parsing attributes in process `syz.1.733'. [ 148.884077][ T8683] netlink: 64 bytes leftover after parsing attributes in process `syz.1.733'. [ 149.124340][ T8695] netlink: 'syz.3.737': attribute type 1 has an invalid length. [ 149.202412][ T8695] 8021q: adding VLAN 0 to HW filter on device bond1 [ 149.273640][ T8701] bond1: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 149.290649][ T8695] bond1: entered promiscuous mode [ 149.290675][ T8695] bond1: entered allmulticast mode [ 150.339876][ T8766] x_tables: duplicate underflow at hook 3 [ 150.398948][ T8742] netlink: Invalid conntrack timeout [ 150.398985][ T8742] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 150.550286][ T8775] bond8: Removing last ns target with arp_interval on [ 151.199070][ T8806] nftables ruleset with unbound chain [ 151.377136][ T8816] nbd3: detected capacity change from 0 to 63 [ 151.381160][ T8816] block nbd3: NBD_DISCONNECT [ 151.381873][ T8816] block nbd3: Disconnected due to user request. [ 151.381894][ T8816] block nbd3: shutting down sockets [ 151.384198][ T11] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 151.384282][ T11] Buffer I/O error on dev nbd3, logical block 1, async page read [ 151.384850][ T11] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 151.384890][ T11] Buffer I/O error on dev nbd3, logical block 2, async page read [ 151.385011][ T11] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 151.385037][ T11] Buffer I/O error on dev nbd3, logical block 3, async page read [ 151.392820][ C1] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 151.392966][ C1] Buffer I/O error on dev nbd3, logical block 0, async page read [ 151.395708][ T1957] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 151.395737][ T1957] Buffer I/O error on dev nbd3, logical block 0, async page read [ 151.395858][ T1957] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 151.395881][ T1957] Buffer I/O error on dev nbd3, logical block 1, async page read [ 151.398307][ T1957] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 151.398334][ T1957] Buffer I/O error on dev nbd3, logical block 2, async page read [ 151.398445][ T1957] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 151.398468][ T1957] Buffer I/O error on dev nbd3, logical block 3, async page read [ 151.399333][ T1957] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 151.399358][ T1957] Buffer I/O error on dev nbd3, logical block 0, async page read [ 151.399465][ T1957] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 151.399488][ T1957] Buffer I/O error on dev nbd3, logical block 1, async page read [ 151.404690][ T8569] ldm_validate_partition_table(): Disk read failed. [ 151.409449][ T8569] Dev nbd3: unable to read RDB block 0 [ 151.414609][ T8569] nbd3: unable to read partition table [ 151.464724][ T8569] ldm_validate_partition_table(): Disk read failed. [ 151.465500][ T8569] Dev nbd3: unable to read RDB block 0 [ 151.478403][ T8569] nbd3: unable to read partition table [ 151.643005][ T8824] netlink: 'syz.4.776': attribute type 1 has an invalid length. [ 151.742791][ T8824] bond1: entered promiscuous mode [ 151.744841][ T8824] 8021q: adding VLAN 0 to HW filter on device bond1 [ 151.770928][ T8829] ipvlan2: entered allmulticast mode [ 151.770951][ T8829] bond1: entered allmulticast mode [ 151.900745][ T8824] bond1: (slave bridge4): making interface the new active one [ 151.900772][ T8824] bridge4: entered promiscuous mode [ 151.901150][ T8824] bridge4: entered allmulticast mode [ 151.903717][ T8824] bond1: (slave bridge4): Enslaving as an active interface with an up link [ 151.913174][ T8831] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 152.937156][ T8868] syzkaller0: entered promiscuous mode [ 152.937181][ T8868] syzkaller0: entered allmulticast mode [ 152.993157][ T8866] tipc: Enabled bearer , priority 0 [ 153.072188][ T8864] tipc: Resetting bearer [ 153.111525][ T8864] tipc: Disabling bearer [ 153.199234][ T8881] __nla_validate_parse: 52 callbacks suppressed [ 153.199257][ T8881] netlink: 24 bytes leftover after parsing attributes in process `syz.4.795'. [ 153.283821][ T8883] netlink: 8 bytes leftover after parsing attributes in process `syz.1.796'. [ 153.473041][ T8891] netlink: 27 bytes leftover after parsing attributes in process `syz.3.798'. [ 153.576699][ T8898] netlink: 'syz.4.799': attribute type 5 has an invalid length. [ 153.576721][ T8898] netlink: 'syz.4.799': attribute type 9 has an invalid length. [ 153.576735][ T8898] netlink: 4 bytes leftover after parsing attributes in process `syz.4.799'. [ 153.589324][ T8898] netlink: 20 bytes leftover after parsing attributes in process `syz.4.799'. [ 153.772148][ T8911] Cannot find set identified by id 0 to match [ 153.772280][ T8911] Cannot find set identified by id 0 to match [ 153.772402][ T8911] Cannot find set identified by id 0 to match [ 153.772515][ T8911] Cannot find set identified by id 0 to match [ 153.772626][ T8911] Cannot find set identified by id 0 to match [ 153.774773][ T8911] Cannot find set identified by id 0 to match [ 153.774901][ T8911] Cannot find set identified by id 0 to match [ 153.775011][ T8911] Cannot find set identified by id 0 to match [ 153.775127][ T8911] Cannot find set identified by id 0 to match [ 153.775236][ T8911] Cannot find set identified by id 0 to match [ 153.801132][ T8908] netlink: 256 bytes leftover after parsing attributes in process `syz.1.803'. [ 154.453164][ T8932] syzkaller1: entered promiscuous mode [ 154.453188][ T8932] syzkaller1: entered allmulticast mode [ 154.989355][ T8980] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 155.115046][ T8986] netlink: 'syz.4.820': attribute type 2 has an invalid length. [ 155.137827][ T8995] net_ratelimit: 4 callbacks suppressed [ 155.137849][ T8995] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 155.165762][ T8995] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 155.223217][ T8998] openvswitch: netlink: IP tunnel attribute has 5393 unknown bytes. [ 155.236547][ T8998] netlink: 8 bytes leftover after parsing attributes in process `syz.4.824'. [ 155.236574][ T8998] netlink: 8 bytes leftover after parsing attributes in process `syz.4.824'. [ 155.258335][ T8993] trusted_key: syz.2.821 sent an empty control message without MSG_MORE. [ 155.821806][ T9022] ip_tables: iptables: counters copy to user failed while replacing table [ 155.943755][ T9024] ip_tables: iptables: counters copy to user failed while replacing table [ 155.965149][ T9029] netlink: 'syz.2.833': attribute type 1 has an invalid length. [ 155.971617][ T9024] netlink: 56 bytes leftover after parsing attributes in process `syz.0.831'. [ 156.004119][ T9036] netlink: 'syz.4.835': attribute type 25 has an invalid length. [ 156.043402][ T9024] bond9 (unregistering): Released all slaves [ 156.075150][ T9029] netlink: 8 bytes leftover after parsing attributes in process `syz.2.833'. [ 156.334308][ T9049] netlink: 'syz.2.839': attribute type 21 has an invalid length. [ 156.635717][ T10] syzkaller1: tun_net_xmit 76 [ 156.668578][ T9076] openvswitch: netlink: Unknown nsh attribute 0 [ 156.959758][ T9093] netlink: NAT attribute has 5 unknown bytes [ 156.959797][ T9093] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 156.963923][ T9093] netlink: NAT attribute has 5 unknown bytes [ 156.963959][ T9093] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 157.710925][ T9141] netlink: 'syz.3.864': attribute type 21 has an invalid length. [ 157.710950][ T9141] netlink: 'syz.3.864': attribute type 22 has an invalid length. [ 157.710963][ T9141] netlink: 'syz.3.864': attribute type 23 has an invalid length. [ 157.710976][ T9141] netlink: 'syz.3.864': attribute type 25 has an invalid length. [ 157.756759][ T9134] 8021q: adding VLAN 0 to HW filter on device bond3 [ 157.761822][ T9134] bond0: (slave bond3): Enslaving as an active interface with an up link [ 157.796165][ T9138] syz_tun: entered allmulticast mode [ 158.062051][ T9169] bridge2: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 158.166030][ C1] [ 158.168431][ C1] ================================ [ 158.173562][ C1] WARNING: inconsistent lock state [ 158.178686][ C1] syzkaller #0 Not tainted [ 158.183103][ C1] -------------------------------- [ 158.188226][ C1] inconsistent {SOFTIRQ-ON-W} -> {IN-SOFTIRQ-W} usage. [ 158.195091][ C1] ksoftirqd/1/24 [HC0[0]:SC1[1]:HE1:SE0] takes: [ 158.201345][ C1] ffff88807dbe6260 (sk_lock-AF_X25){+.?.}-{0:0}, at: x25_kill_by_neigh+0x10d/0x250 [ 158.210672][ C1] {SOFTIRQ-ON-W} state was registered at: [ 158.216414][ C1] lock_acquire+0x115/0x350 [ 158.221013][ C1] lock_sock_nested+0x41/0x100 [ 158.225877][ C1] x25_release+0xa0/0x3d0 [ 158.230309][ C1] __sock_release+0xa0/0x1f0 [ 158.234993][ C1] sock_close+0x1c/0x30 [ 158.239240][ C1] __fput+0x418/0xa50 [ 158.243346][ C1] task_work_run+0x1d9/0x270 [ 158.248029][ C1] exit_to_user_mode_loop+0x204/0x770 [ 158.253491][ C1] do_syscall_64+0x328/0x520 [ 158.258174][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.264160][ C1] irq event stamp: 1529614 [ 158.268568][ C1] hardirqs last enabled at (1529614): [] __local_bh_enable_ip+0xd6/0x140 [ 158.278642][ C1] hardirqs last disabled at (1529613): [] __local_bh_enable_ip+0x72/0x140 [ 158.288799][ C1] softirqs last enabled at (1529574): [] run_ksoftirqd+0x36/0x60 [ 158.298228][ C1] softirqs last disabled at (1529579): [] run_ksoftirqd+0x36/0x60 [ 158.307629][ C1] [ 158.307629][ C1] other info that might help us debug this: [ 158.315694][ C1] Possible unsafe locking scenario: [ 158.315694][ C1] [ 158.323172][ C1] CPU0 [ 158.326455][ C1] ---- [ 158.329743][ C1] lock(sk_lock-AF_X25); [ 158.334082][ C1] [ 158.337544][ C1] lock(sk_lock-AF_X25); [ 158.342059][ C1] [ 158.342059][ C1] *** DEADLOCK *** [ 158.342059][ C1] [ 158.350205][ C1] locks held by ksoftirqd/1/24: 1, last CPU#1: [ 158.356360][ C1] #0: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: netif_receive_skb_core+0x33/0x2b0 [ 158.366392][ C1] [ 158.366392][ C1] stack backtrace: [ 158.372294][ C1] CPU: 1 UID: 0 PID: 24 Comm: ksoftirqd/1 Not tainted syzkaller #0 PREEMPT(full) [ 158.381499][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 158.391559][ C1] Call Trace: [ 158.394852][ C1] [ 158.397788][ C1] dump_stack_lvl+0xe8/0x150 [ 158.402396][ C1] print_usage_bug+0x28c/0x2e0 [ 158.407178][ C1] valid_state+0xbe/0xf0 [ 158.411430][ C1] mark_lock_irq+0x36/0x380 [ 158.415952][ C1] mark_lock+0x117/0x190 [ 158.420200][ C1] __lock_acquire+0x71e/0x2de0 [ 158.424974][ C1] ? kasan_quarantine_put+0xbb/0x1f0 [ 158.430266][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 158.435299][ C1] ? lock_acquire+0x115/0x350 [ 158.439984][ C1] lock_acquire+0x115/0x350 [ 158.444488][ C1] ? x25_kill_by_neigh+0x10d/0x250 [ 158.449612][ C1] ? x25_kill_by_neigh+0x103/0x250 [ 158.454732][ C1] lock_sock_nested+0x41/0x100 [ 158.459502][ C1] ? x25_kill_by_neigh+0x10d/0x250 [ 158.464620][ C1] x25_kill_by_neigh+0x10d/0x250 [ 158.469563][ C1] x25_lapb_receive_frame+0x1b0/0xfb0 [ 158.474951][ C1] ? netif_receive_skb_core+0x33/0x2b0 [ 158.480414][ C1] ? netif_receive_skb_core+0x33/0x2b0 [ 158.485881][ C1] ? __pfx_x25_lapb_receive_frame+0x10/0x10 [ 158.491782][ C1] netif_receive_skb_core+0x2a6/0x2b0 [ 158.497158][ C1] lapbeth_napi_poll+0x42/0x90 [ 158.501929][ C1] __napi_poll+0xaa/0x330 [ 158.506265][ C1] net_rx_action+0x61d/0xf50 [ 158.510870][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 158.515985][ C1] ? kvm_sched_clock_read+0x11/0x20 [ 158.521195][ C1] ? __pfx_sched_clock_cpu+0x10/0x10 [ 158.526486][ C1] handle_softirqs+0x226/0x860 [ 158.531258][ C1] ? schedule+0x90/0x2b0 [ 158.535504][ C1] ? run_ksoftirqd+0x36/0x60 [ 158.540104][ C1] ? smpboot_thread_fn+0x4e/0xa70 [ 158.545138][ C1] run_ksoftirqd+0x36/0x60 [ 158.549562][ C1] smpboot_thread_fn+0x565/0xa70 [ 158.554510][ C1] ? smpboot_thread_fn+0x4e/0xa70 [ 158.559543][ C1] kthread+0x38b/0x480 [ 158.563614][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 158.569078][ C1] ? __pfx_kthread+0x10/0x10 [ 158.573670][ C1] ret_from_fork+0x514/0xb70 [ 158.578264][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 158.583378][ C1] ? __switch_to+0xc89/0x1420 [ 158.588064][ C1] ? __pfx_kthread+0x10/0x10 [ 158.592658][ C1] ret_from_fork_asm+0x1a/0x30 [ 158.597435][ C1] [ 158.600576][ C1] BUG: sleeping function called from invalid context at net/core/sock.c:3839 [ 158.600593][ C1] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 24, name: ksoftirqd/1 [ 158.600611][ C1] preempt_count: 100, expected: 0 [ 158.600620][ C1] RCU nest depth: 1, expected: 0 [ 158.600631][ C1] INFO: lockdep is turned off. [ 158.600638][ C1] Preemption disabled at: [ 158.600644][ C1] [] handle_softirqs+0xab/0x860 [ 158.600681][ C1] CPU: 1 UID: 0 PID: 24 Comm: ksoftirqd/1 Not tainted syzkaller #0 PREEMPT(full) [ 158.600705][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 158.600718][ C1] Call Trace: [ 158.600726][ C1] [ 158.600735][ C1] dump_stack_lvl+0xe8/0x150 [ 158.600764][ C1] __might_resched+0x36a/0x4c0 [ 158.600795][ C1] ? handle_softirqs+0xab/0x860 [ 158.600822][ C1] lock_sock_nested+0x56/0x100 [ 158.600847][ C1] x25_kill_by_neigh+0x10d/0x250 [ 158.600878][ C1] x25_lapb_receive_frame+0x1b0/0xfb0 [ 158.600911][ C1] ? netif_receive_skb_core+0x33/0x2b0 [ 158.600933][ C1] ? netif_receive_skb_core+0x33/0x2b0 [ 158.600954][ C1] ? __pfx_x25_lapb_receive_frame+0x10/0x10 [ 158.600985][ C1] netif_receive_skb_core+0x2a6/0x2b0 [ 158.601010][ C1] lapbeth_napi_poll+0x42/0x90 [ 158.601041][ C1] __napi_poll+0xaa/0x330 [ 158.601066][ C1] net_rx_action+0x61d/0xf50 [ 158.601097][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 158.601122][ C1] ? kvm_sched_clock_read+0x11/0x20 [ 158.601154][ C1] ? __pfx_sched_clock_cpu+0x10/0x10 [ 158.601183][ C1] handle_softirqs+0x226/0x860 [ 158.601209][ C1] ? schedule+0x90/0x2b0 [ 158.601233][ C1] ? run_ksoftirqd+0x36/0x60 [ 158.601264][ C1] ? smpboot_thread_fn+0x4e/0xa70 [ 158.601290][ C1] run_ksoftirqd+0x36/0x60 [ 158.601315][ C1] smpboot_thread_fn+0x565/0xa70 [ 158.601341][ C1] ? smpboot_thread_fn+0x4e/0xa70 [ 158.601370][ C1] kthread+0x38b/0x480 [ 158.601388][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 158.601413][ C1] ? __pfx_kthread+0x10/0x10 [ 158.601433][ C1] ret_from_fork+0x514/0xb70 [ 158.601460][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 158.601477][ C1] ? __switch_to+0xc89/0x1420 [ 158.601504][ C1] ? __pfx_kthread+0x10/0x10 [ 158.601523][ C1] ret_from_fork_asm+0x1a/0x30 [ 158.601553][ C1] [ 158.631488][ T9183] __nla_validate_parse: 10 callbacks suppressed [ 158.631505][ T9183] netlink: 4 bytes leftover after parsing attributes in process `syz.2.874'.