last executing test programs: 26.452206504s ago: executing program 2 (id=2001): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x5d4c, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) r1 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000000600)={{0xa, 0x0, 0x8, @local}, {0xa, 0x1, 0x0, @empty}}, 0x5c) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, 0x0, 0x20) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001080)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0xd44263be89ee4aba}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DISASSOCIATE(r2, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x2c, r3, 0x0, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x9}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4001}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000012c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000007d000000"], &(0x7f0000000100)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r7}, 0x10) sendmsg$inet(r5, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000a80)="d080", 0x2}, {&(0x7f0000000400)="1d5038548dd42d45b11bae43ffe8791ea8fdff1c27e6682a9b6faeb6d877f4586c81bd86b85a6637751b76d4e526ecf9b4ff198e0f9260137d184da26a72a42abe9a7ce43fb9747387ea665311be4ff24a626efc75c2fefce5317f3dfcba55f0193162ea1f6144ae5ebc2a6c99df7dee128e84e1d78ed7757738cf50cd57025a492be1e183e56c62874a176834cafecc55304402cbd0c14cc84cb9a0cbd3335bd041f1b25f097773add295ff6866679f93a14f47a098a6db68b2c54eefd406c41418f065fce5005216e9e18c293af876f0b580c7852b", 0xd6}, {&(0x7f0000000500)="498972fbe5004e1e236a", 0xa}, {&(0x7f0000000580)="e15b0b4ec35bd551a4ad9f1837f21a5ca895ecbc45b94e624ed27636049d1a66dcc8b8c1bb60af5f88e31bc801c9de56bc0dc478485b289c5aa1310734cb5ca0f8b46ba552ff858d2c5829b42d543a6beee96ae7c9116a53393f59d7a1fc9b98d91e52e9cd2178a14963017de54dc8265053dd33fe7cf4c355c2", 0x7a}, {&(0x7f0000000680)="45f6895e5333bd648a138c1a6a24afb838a48c10232be6bebeb2f6222971a86300afc46a1f0933d9ae099ad2c90d8f7559f98d3cc4180c18cd44ca43737ab9d21e80883b2bbeb67ca6e4b138dd5c4333d9c1f7c35e6b2df403f636b99417d5f1e5dc331e65a20e4d930faa7e3aa9401afd57e95d09bc8c2afa696468b20300000092af6e69da7dcc95393f9e91b09fdcb6204e9d96b108065ac85f9d4198b8afbcbc6d092d09de2503e6838b8399c914bc385c13c238f1e628a5baed828490", 0xbf}], 0x5, 0x0, 0x0, 0x800300}, 0x20000801) recvmsg(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x40002002) setsockopt$MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @local}, {0xa, 0x4e22, 0x7, @empty, 0xfffffffc}, 0xffffffffffffffff, {[0x0, 0x0, 0x5c, 0x3, 0x3, 0x5, 0x0, 0x3]}}, 0x66) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000780)=@raw={'raw\x00', 0x8, 0x3, 0x208, 0x98, 0x8, 0xfa04, 0x98, 0x6c02, 0x170, 0x194, 0x194, 0x170, 0x194, 0x3, 0x0, {[{{@ip={@dev={0xac, 0x14, 0x14, 0x24}, @broadcast, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98, 0x0, {0x0, 0x74020000}}, @common=@inet=@TCPMSS={0x28}}, {{@ip={@multicast2, @dev, 0x0, 0x0, '\x00', 'batadv_slave_0\x00', {}, {}, 0x2f}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0xe, 0x0, 0x0, 0x0, 'syz0\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x268) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) 25.552070245s ago: executing program 2 (id=2012): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)=ANY=[@ANYBLOB="30000000180001002abd7000fcdbdf250a800000fe20fe05001000001400050000000000000000000000000000000001"], 0x30}, 0x1, 0x0, 0x0, 0xcdb281c6bf69a511}, 0x4000) r1 = accept4$rose(0xffffffffffffffff, &(0x7f0000000040)=@full={0xb, @dev, @netrom, 0x0, [@bcast, @netrom, @remote, @rose, @null, @rose]}, &(0x7f0000000080)=0x40, 0x0) ioctl$sock_rose_SIOCDELRT(r1, 0x890c, &(0x7f0000000140)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @bcast, @netrom={'nr', 0x0}, 0x7, [@bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}) splice(r1, &(0x7f00000000c0)=0x3ff, r1, &(0x7f00000001c0)=0x1, 0x3c, 0x1) 25.362171515s ago: executing program 2 (id=2014): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000180)={0x0, 0x2, 0x0, 0xd8e0}) (async) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000140)={0x67, @broadcast, 0x4e20, 0x2, 'sed\x00', 0x24, 0x3, 0x64}, 0x2c) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) (async) r2 = accept4(r1, 0x0, 0x0, 0x80800) sendmmsg$alg(r2, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f7", 0x1}], 0x1}], 0x1, 0x8040010) (async) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1, 0x0, 0x0, 0xf5000000}, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r3, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f00000003c0)={0x24, r4, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}, @ETHTOOL_A_BITSET_MASK={0x4}]}, @ETHTOOL_A_FEATURES_WANTED={0x4}]}, 0x24}}, 0x80) syz_emit_ethernet(0x4e, &(0x7f00000001c0)={@local, @local, @val={@void}, {@ipv6={0x86dd, @tcp={0x0, 0x6, "080108", 0x14, 0x2f, 0x0, @mcast1, @mcast2, {[], {{0x0, 0x8906, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xfffe}}}}}}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x3, 0x2, &(0x7f0000000000)=@raw=[@ldst={0x1, 0x2, 0x5, 0x0, 0x1, 0x4d}, @jmp={0x5, 0x0, 0x1, 0x0, 0x9}], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) 25.239172341s ago: executing program 2 (id=2015): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000004cc0), r3) sendmsg$NLBL_UNLABEL_C_STATICADD(r3, &(0x7f0000004e40)={0x0, 0x0, &(0x7f0000004e00)={&(0x7f0000004d00)={0x84, r4, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast1}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'vlan0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast2}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @local}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:memory_device_t:s0\x00'}]}, 0x84}, 0x1, 0x0, 0x0, 0x8004}, 0x40000) sendmsg$BATADV_CMD_GET_NEIGHBORS(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0x1c, r2, 0x331, 0x1, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000095}, 0x200480c4) r5 = socket$netlink(0x10, 0x3, 0x400000000000004) setsockopt$inet_sctp_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, 0x0, 0x0) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r6, 0x11b, 0x3, &(0x7f00000001c0)=0x100000, 0x4) writev(r5, &(0x7f0000000000)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80fae0090f000000000000a2bc5603ca00000f7f89000000200000004a2471083ec6811778581acb6c0101ff0000000309", 0x48}], 0x1) recvmmsg(r0, &(0x7f0000001d40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/121, 0x79}, 0x9}], 0x1, 0x2, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) r9 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=ANY=[@ANYBLOB="2400000002140100030000000400000008000100000000000900020073797a3277"], 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0xc014) sendmsg$MPTCP_PM_CMD_REMOVE(r7, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x48, r8, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x1b}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x200}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x47}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x40080}, 0x8001) setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f0000000180)=0x80000001, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x4e, &(0x7f0000000280)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb88a8301d6fc43168a74f0e0000380000000000119078000000000000000044185e0000000004000000ff00007fff000000030000000700014e20000c907801000000"], 0x0) 24.030069216s ago: executing program 2 (id=2028): r0 = socket$kcm(0x10, 0x2, 0x4) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) (async) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000001c0)="39000000140081ae0000dc676f97daf01e2357f9ffffffffffffff0521018701546fabca1b4e8a06a6580e88370200c54c19", 0x32}], 0x1}, 0x0) (async) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) (async) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x5, &(0x7f00000000c0)=0x7a, 0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000002b40), r6) sendmsg$IEEE802154_LLSEC_DEL_DEV(r6, &(0x7f0000002c00)={0x0, 0x0, &(0x7f0000002bc0)={&(0x7f0000000440)={0x14, r7, 0x1, 0x70bd2b, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x40000c4) (async) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0xffffffffffffffb0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000002b0009ef"], 0x14}}, 0x84) (async) recvmmsg(r5, &(0x7f0000003bc0)=[{{0x0, 0x0, 0x0}, 0x8}], 0x1, 0x10000, 0x0) (async) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) (async) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000001080)='dctcp\x00', 0x6) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) (async) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0xc, 0x0, &(0x7f0000000080)) (async) sendto$inet(r3, 0x0, 0x0, 0x24040ffd, &(0x7f0000000440)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r3, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x182, 0x0, 0x27) (async) r8 = socket$nl_rdma(0x10, 0x3, 0x14) (async) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r10 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000300)={'syzkaller1\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0xd}}) (async) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000006c000000160a01020000000000000000010000000900010073797a30000000000900020073797a3000000000400003802c00038004000100766c616e31000000000000000000000014000100776c616e3100000000000000000000000800014000000000080002"], 0xfc}}, 0x0) (async) write$tun(r9, &(0x7f0000000100)={@val, @void, @eth={@random="8c5d673ef776", @local, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x1, 0x6, 0x1c, 0xe4, 0x0, 0x8, 0x11, 0x0, @dev={0xac, 0x14, 0x14, 0x29}, @loopback}, "c72975ea5f954511"}}}}}, 0x2e) (async) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x30, 0x1410, 0x10, 0x70bd2c, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x24044836}, 0xc094) (async) ioctl$AUTOFS_IOC_PROTOVER(r1, 0x80049363, &(0x7f0000000340)) 19.592290029s ago: executing program 1 (id=2079): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, 0x0, 0x0) syz_emit_ethernet(0x83, 0x0, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe3}]}, 0x10) ioctl$sock_TIOCINQ(r1, 0x541b, &(0x7f0000000540)) 19.411540559s ago: executing program 1 (id=2081): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x5, &(0x7f0000000300)=ANY=[@ANYBLOB="180500000000000000000000000000001836000005000000000000000600000095"], &(0x7f0000000540)='GPL\x00', 0x8, 0xdb, &(0x7f0000003e40)=""/219, 0x41100, 0x54, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r0 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000000)={'wg0\x00'}) 19.17991389s ago: executing program 4 (id=2085): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000280)={@loopback, 0x800, 0x0, 0x103, 0x1, 0x0, 0x3}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f00000006c0)=ANY=[], 0x8) sendmsg$inet6(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0xa, 0x4e22, 0x80000, @mcast2}, 0x1c, 0x0}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000ffff00ff71122d000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000480)='cgroup.controllers\x00', 0x275a, 0x0) write$tun(r1, &(0x7f0000000000)=ANY=[], 0x38) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x103002, 0x0) ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r2, 0x40047452, &(0x7f0000001200)) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000080)=@req={0x6, 0x6, 0xd88, 0x6}, 0x10) 19.010253397s ago: executing program 1 (id=2086): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = getpid() sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x1ac, 0x2a, 0x1, 0x0, 0x25dfdbff, {0x1, 0x0, 0x2c00}, [@nested={0x188, 0x141, 0x0, 0x1, [@generic="961692059e572f208d65cf838a6ac73f2f1e72930c010a075b095cb0d1d510b1c908786730a319a5064f133bb95f1598f8bd281088c7bc21932149548abd32e1514ca37210c0f6b77a22880bba74cb564102c043a5c6f1dbe690502e4154cb130ce30e42517c4d135df35e0d6d90594d8228b21753dd6a7bccb77c2d8eed8241886530a333b08319fbb96897964269dbed3d1d78b4c6e7de25be917a7e4f2ad0fb6b71c3ec1691355683c107a52be61917c9bad238f0f4ff0c0317e39ae28abd6a1d265b38c32b12edf393ce41a7776fbf", @generic="46fb91f74572bb09ef33b63bcc96ea57dd35b38dc031f5b30bde0f06d5d8512ef3a943c0ad58e1c446570a48088afb7cd1129b5832790d64fd3892c649fc8883164bb8bea86c7b9b7dc47372507f6f843b2635f2804339bf9328470d1e9ff637db42a729e8ca5f5f514ce8af91d2ad82a72064bb9e9105c463f405ee579352af69722fbcc731069bda8a7eae62ce7e32b7be7a425f960740d6484eb927ccf56e518d53731fb6324609d5013671ec2a060395fa"]}, @typed={0x8, 0x47, 0x0, 0x0, @pid=r1}]}, 0x1a4}, 0x1, 0x3000000, 0x0, 0x800}, 0x8080) 18.99694026s ago: executing program 4 (id=2087): r0 = socket$kcm(0x10, 0x2, 0x10) recvmsg(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000040)=""/81, 0x51}, {&(0x7f00000004c0)=""/158, 0x9e}, {&(0x7f0000001fc0)=""/4096, 0x1000}, {&(0x7f0000000100)=""/194, 0xc2}, {&(0x7f0000000780)=""/195, 0xc3}], 0x5}, 0x40002102) sendmsg$kcm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="a37cc156dabca28b99f10f521a247a588f"}], 0x2}, 0x0) 18.944728254s ago: executing program 1 (id=2088): ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) r0 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$AUTOFS_IOC_PROTOVER(r0, 0x80049363, &(0x7f0000000040)) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r0, 0x6628) r1 = socket$pppl2tp(0x18, 0x1, 0x1) getsockopt$IP_SET_OP_GET_FNAME(r1, 0x1, 0x53, &(0x7f0000000080)={0x8, 0x7, 0x0, 'syz0\x00'}, &(0x7f00000000c0)=0x2c) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) read$nci(r2, &(0x7f0000000140)=""/62, 0x3e) sendmsg$RDMA_NLDEV_CMD_DELLINK(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x18, 0x1404, 0x8, 0x70bd28, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000011}, 0x4000800) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000280)={r1, 0x10001, 0x7, 0xfffffffffffffe00}) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000300), r2) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000000f40)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000f00)={&(0x7f0000000340)={0xb98, r4, 0x8, 0x70bd28, 0x25dfdbfe, {}, [@WGDEVICE_A_PEERS={0x208, 0x8, 0x0, 0x1, [{0x2c, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @rand_addr=0x64010101}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @multicast1}}]}, {0x4c, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}]}, {0x50, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0xa, @loopback, 0x6}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x7}]}, {0x1c, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x4}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0x120, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @multicast1}}, @WGPEER_A_ALLOWEDIPS={0xe0, 0x9, 0x0, 0x1, [{0xdc, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0xffffffff, @rand_addr=' \x01\x00', 0x8d7310}}]}]}, @WGDEVICE_A_PEERS={0x93c, 0x8, 0x0, 0x1, [{0x4f0, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "e22738ae972a9259961ab64d5152cc314aa698d8c3a20ed1ac5f20955e7f429c"}, @WGPEER_A_ALLOWEDIPS={0x250, 0x9, 0x0, 0x1, [{0x118, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0xf}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x17}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @multicast2}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x2}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x30}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}]}, {0xc4, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x3}}]}]}, @WGPEER_A_ALLOWEDIPS={0x278, 0x9, 0x0, 0x1, [{0xac, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x1}}]}, {0x100, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5, 0x3, 0x2}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x2}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x37}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @multicast2}}, {0x5, 0x3, 0x3}}]}]}]}, {0x160, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x138, 0x9, 0x0, 0x1, [{0xac, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2d}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x21}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}]}, {0x88, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0xc}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}]}, {0x28, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}]}, {0x18, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e24, @rand_addr=0x64010101}}]}, {0x1f4, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "51ce2293f76258eb61590877de78a9118198c2097b85d1e3ef635e2f10db95a6"}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "90fd60c5df93424cce4d3415b047f6b0068df8433e7827294b0b8822044537c5"}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x7, @private0}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @multicast2}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0xf98, @loopback, 0x3}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "2f96851b5fd15dacd5272cced686ed22de49e9e318a5acc8e978a657eda7f0a9"}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0xbf7, @ipv4={'\x00', '\xff\xff', @empty}, 0xec7e}}, @WGPEER_A_ALLOWEDIPS={0xc8, 0x9, 0x0, 0x1, [{0xc4, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x28}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}]}]}]}, {0x6c, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_FLAGS={0x8, 0x3, 0x6}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_FLAGS={0x8, 0x3, 0x7}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x8, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x1}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x10000, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x1}]}, {0x48, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x10000, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xb}}]}]}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x400}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}]}, 0xb98}, 0x1, 0x0, 0x0, 0x44011}, 0x404) sendto$inet6(r3, &(0x7f0000000f80)="d559f5546abd2208803a444ab639a7f143cfb94929c7d5fcd89ee392d9883aafeca1d21cf4dda61cde01e950fa98dc031f3c17a865525784a6da1d585718dce7fc815026e6b0073825889cf88280187a696d4485f2e096cf824237be2173efc52b0baeba04032b50", 0x68, 0x200000d4, &(0x7f0000001000)={0xa, 0x4e22, 0xd3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4}, 0x1c) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001300)={r3, 0x0, 0x6b, 0xec, &(0x7f0000001040)="2300ea0f66c3b84af9bbe8ed3d16fd0f7eabbde2f8fdb82f5ff1a97307ebd619e09181b40b07d87e8a007df863090e8d3e5d350c0ccc265052f41726486c367655dad341aa7b4fe0a509c9c7170310d6827f538b6c927df2cda71fb4e0e50c02881e6454c942254fb4c22f", &(0x7f00000010c0)=""/236, 0x9, 0x0, 0x50, 0x9d, &(0x7f00000011c0)="aebd2ea52b36f29cb67d1008ee68c22cb8e9803ad0213c382fe08311edd4db4bbe218019f77d1ae8704498d13694a93b6a7e226d99a86a13537732a772acc28f453d395bc1d25a28ba65f0588118ee36", &(0x7f0000001240)="1866a667a3611dc3907cb7aca6741375db45b18e4caa63f3f69070f9eaf1e780210179b81ab2a8ed2978b7b055a8d73e28896ee95418e58aefb6cdb213412fc9e32206d95729bafe21eca506cbdf7917184f7776a9d351773228772fe2a74401e8ce5d37868b52b98a3cbc61796aac274a6066410d81a5d1a2409641b09393abba4de1db8b98306503b86b6fcc269e85db706896db426917e79c8ed89e", 0x2, 0x0, 0x4}, 0x50) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000013c0), r3) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000001400)={'wlan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000001440)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000015c0)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001580)={&(0x7f0000001480)={0x100, r5, 0x1, 0x70bd27, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_MESH_CONFIG={0x4c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_MAX_PEER_LINKS={0x6, 0x4, 0x3e}, @NL80211_MESHCONF_HWMP_CONFIRMATION_INTERVAL={0x6, 0x19, 0x10}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x8}, @NL80211_MESHCONF_HWMP_CONFIRMATION_INTERVAL={0x6, 0x19, 0x4}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x4}, @NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0x9}, @NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6, 0x2, 0x36}, @NL80211_MESHCONF_FORWARDING={0x5, 0x13, 0x1}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5, 0x7, 0x8}]}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r6}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x2}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x5a}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r7}, @NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_PLINK_TIMEOUT={0x8}]}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x2, 0x4}}, @NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_POWER_MODE={0x8, 0x1a, 0x3}]}, @NL80211_ATTR_MESH_CONFIG={0x54, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x7f}, @NL80211_MESHCONF_RETRY_TIMEOUT={0x6, 0x1, 0x11}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x1ff}, @NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0x6}, @NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x8}, @NL80211_MESHCONF_HWMP_MAX_PREQ_RETRIES={0x5, 0x8, 0x2}, @NL80211_MESHCONF_HWMP_CONFIRMATION_INTERVAL={0x6}, @NL80211_MESHCONF_POWER_MODE={0x8, 0x1a, 0x1}, @NL80211_MESHCONF_TTL={0x5, 0x6, 0xc}, @NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x2}]}]}, 0x100}, 0x1, 0x0, 0x0, 0x48000}, 0x508d0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001640)={&(0x7f0000001600)='f2fs_iostat_latency\x00', r3, 0x0, 0x3}, 0x18) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000016c0), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_LISTALL(r8, &(0x7f0000001780)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001740)={&(0x7f0000001700)={0x14, r9, 0x800, 0x70bd2c, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x90}, 0x48010) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_inet_SIOCGIFNETMASK(r3, 0x891b, &(0x7f00000017c0)={'veth1_to_batadv\x00'}) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001800), r11) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r10, &(0x7f0000001ac0)={&(0x7f0000001840)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001a80)={&(0x7f0000001880)={0x1d0, r12, 0x401, 0x70bd2b, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x60, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xfff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x101}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xffffffffffffffff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}]}, @TIPC_NLA_MEDIA={0x28, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6e4d}, @TIPC_NLA_PROP_TOL={0x8}]}]}, @TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x10}]}, @TIPC_NLA_SOCK={0x7c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xffffffff}, @TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xc0}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xe2a7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7d}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xc}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7ff}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_PUBL={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x10000}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x81}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xfab}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x101}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xd}]}, @TIPC_NLA_NET={0x60, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x401}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x68}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xfffffff7}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xea}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7f}]}]}, 0x1d0}, 0x1, 0x0, 0x0, 0x40020}, 0x0) r13 = accept$inet(r3, &(0x7f0000001b00)={0x2, 0x0, @loopback}, &(0x7f0000001b40)=0x10) setsockopt$inet_opts(r13, 0x0, 0x9, &(0x7f0000001b80)="01773d9b0c072c614b2708b6ca2ed63547499ae1eeded4a9", 0x18) sendmsg$NLBL_CIPSOV4_C_ADD(r8, &(0x7f0000001dc0)={&(0x7f0000001bc0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001d80)={&(0x7f0000001c00)={0x174, r9, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_TAGLST={0x54, 0x4, 0x0, 0x1, [{0x5}, {0x5, 0x3, 0x1d0886f108c45089}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x6}, {0x5}, {0x5, 0x3, 0x7}, {0x5}, {0x5}, {0x5}]}, @NLBL_CIPSOV4_A_MLSCATLST={0xf4, 0xc, 0x0, 0x1, [{0x54, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xab18}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x57d959c}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x50c5861b}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x311b6708}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6d15265}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6c35976}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7a919e52}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xfffffffc}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1c890b03}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x77033918}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7a242be9}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x484dd3d2}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4f9f6876}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1ab1734f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xe}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7364a77d}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3d645125}]}, {0x54, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf73b}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x431f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x54d6}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3811}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf423}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x236f524b}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2570d326}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x493bcb09}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2b14}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3b44ee3f}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}]}, 0x174}, 0x1, 0x0, 0x0, 0x20000040}, 0x40) 18.684963015s ago: executing program 0 (id=2092): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xb) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b0000000500000008040000cd00000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000180)={@remote, 0x8000000, 0x0, 0xff, 0x1, 0x66}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000180)={@loopback={0xfec0ffff00000000}, 0x8000000, 0x2, 0xff, 0x0, 0x0, 0x9}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r2}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x12, &(0x7f00000004c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="4c00000010004b0422000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800b00010062726964676500001c00028008000400000000000800150000000000050016"], 0x4c}, 0x1, 0x0, 0x0, 0x200400a0}, 0x0) 18.58636528s ago: executing program 0 (id=2093): setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f00000002c0)={@private2}, 0x14) 18.585707012s ago: executing program 0 (id=2094): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x90, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x60, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x12, [0xc, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfd], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x4}]}}]}, 0x90}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000300)={@in={{0x2, 0x4e22, @multicast2}}, 0x0, 0x0, 0xb, 0x0, "f6a7346a1ca3caf66200f0e70b995efa20d5ddc09c0bc0c88e00bdea5e6998967d569964c8b68dae57dea91c0e3ef03a96483bcaaa5ab222d1993083e8e3619fbbff30da0288a8b78a3f921c40fdc06a"}, 0xd8) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000400)={@in={{0x2, 0x4e20, @multicast2}}, 0x0, 0x0, 0x0, 0x0, "698e86252c563a2eb894ac1de863c527984bfa5ff139aeeef086eed112e6f0ffba88c7d0888990f99dc2416c1cbccf99d18464a65c3587c97aee9217b992893cebfc606ada5e14e782e63da22a6fe97d"}, 0xd8) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f00000001c0)={@in={{0x2, 0x4e20, @multicast2}}, 0x0, 0x0, 0x0, 0x0, "f6458f5dce812b9bef6dfd6a024e48c070287c1a02ff37122221178c5eb9fefc9712655b257de87936d391a75e740d2875bd0814b73c57aaf87eb5a05188b46a2f53f1a865528508f3585c3857199fa4"}, 0xd8) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0xf, &(0x7f0000001200)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x4, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x5a}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x7}}, [], {{0x6, 0x1, 0x3, 0x8}, {0x6, 0x0, 0x2, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6_udplite(0xa, 0x2, 0x88) 18.529097025s ago: executing program 0 (id=2095): r0 = socket(0x1d, 0x2, 0x6) r1 = epoll_create(0x9660) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000011c0)={'ip_vti0\x00', &(0x7f00000010c0)={'gretap0\x00', 0x0, 0x1, 0x700, 0x9, 0x0, {{0x5, 0x4, 0x2, 0x2, 0x14, 0x74, 0x0, 0x24, 0x29, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}) r3 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0300"], 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xb, 0x8, 0xc, 0x80000000, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r5}, 0x38) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}]}, &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r6}, 0x10) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x18, 0x1}, 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1000000}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r8}, {}, {0x85, 0x0, 0x0, 0x1b}}, @call={0x85, 0x0, 0x0, 0x2a}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000300)={0x0, @l2={0x1f, 0x375b, @any, 0x1}, @isdn={0x22, 0x7, 0x5, 0x5, 0xb}, @rc={0x1f, @any, 0x2}, 0x5, 0x0, 0x0, 0x0, 0x3, 0x0, 0x600000000000, 0x2}) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r9}, 0xc) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="300000003e000701fcfffffffddbdf25017c0000100036800c00020004000000000000000c00018006000600803500"], 0x30}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) ioctl$sock_ax25_SIOCADDRT(r0, 0x890b, &(0x7f0000000380)={@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, 0x8, [@bcast, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r11 = accept4(r7, 0x0, 0x0, 0x800) sendmsg$NL80211_CMD_SET_WOWLAN(r11, &(0x7f0000006cc0)={0x0, 0x0, &(0x7f0000006c80)={&(0x7f0000006d00)={0x150, 0x0, 0x300, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x17}, @val={0x8}, @void}}, [@NL80211_ATTR_WOWLAN_TRIGGERS={0x12c, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_RFKILL_RELEASE={0x4}, @NL80211_WOWLAN_TRIG_MAGIC_PKT={0x4}, @NL80211_WOWLAN_TRIG_PKT_PATTERN={0x120, 0x4, 0x0, 0x1, [{0x118, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_PATTERN={0x4}, @NL80211_PKTPAT_PATTERN={0x29, 0x2, "e3eabb0f1407ba2e575eba7420d06b6373deba128c621dbf95ea214ecf9fcb38d7d9062b81"}, @NL80211_PKTPAT_MASK={0xd9, 0x1, "f8c8acbe9cf8f43bdef4ad1951f563a2e231f66a94d52c4da9374a3c69f09e5e23f65fd11d6da80a9793a209e49e67d9875ff5f2b3c30a36710ccd06d5cfdcbb698b70877f37003454e3ce9f3f0c8c2cece3c77b2a29f327059523b1c3043c21ccff85a0513e77f89f2de03c952402fe5538ab8918a8fbfeb0733cd76f905b3da5c3ec8141fdb72c70d1b73d7024f816ee9393deb3748a5c6e8442bb207a8bdb1d20fdf1bbbb242cf3ee0349c6c4eeb40b69fb6d439bda2ea2d5a329bf9cafe58fe1f8c7a6212b66eb5039c1beb78b2a12344e2dae"}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x3}]}, {0x4}]}]}]}, 0x150}, 0x1, 0x0, 0x0, 0x14068800}, 0x1) recvmsg(r11, &(0x7f00000005c0)={0x0, 0x10, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) sendmsg$IPCTNL_MSG_EXP_GET(r11, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000040)={&(0x7f0000000140)={0x118, 0x1, 0x2, 0x201, 0x0, 0x0, {0x6, 0x0, 0x1}, [@CTA_EXPECT_CLASS={0x8}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x7}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x1}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x1}, @CTA_EXPECT_MASTER={0xbc, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x18}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @broadcast}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @multicast1}}}]}, @CTA_EXPECT_TUPLE={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @CTA_EXPECT_FN={0x8, 0xb, 'sip\x00'}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x8}]}, 0x118}, 0x1, 0x0, 0x0, 0x20040844}, 0x800) close(r3) 18.460419103s ago: executing program 0 (id=2096): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = getpid() sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c0000001500010000000000000008000100000000000000", @ANYRES32=r1, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c0000000b0a01080000000000000000020000040900020073797a30000000000900010073797a3000000000140000001100010000000000180000000100000a"], 0x54}}, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r5 = socket$can_raw(0x1d, 0x3, 0x1) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x8528c000) getsockopt$CAN_RAW_FILTER(r5, 0x65, 0x1, &(0x7f0000001040)=[{}], &(0x7f0000000100)=0x41) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000480)={0x8, 0x0, 0x0, 0x8}) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r3, &(0x7f0000000100)={0x20000002}) r6 = socket$unix(0x1, 0x1, 0x0) writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}, {0x0}, {&(0x7f0000000100)}], 0x3) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0x40305839, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000800000000000000000000000000000002"]) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_timeval(r7, 0x1, 0x2, 0x0, 0x48) getsockopt$inet6_mptcp_buf(r7, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000000c0)=0x98) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000380)={'bond0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=@newtclass={0x24, 0x28, 0x1, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r8, {0xd, 0xb}, {0xc}, {0x1, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x20000020) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r10, 0x8946, &(0x7f0000000000)={'macvtap0\x00', &(0x7f0000000240)=@ethtool_per_queue_op={0x4b, 0x21, [0x8, 0x1, 0x2, 0xc, 0x9, 0xf94, 0x4000f1, 0x37, 0x409, 0x6, 0x1, 0x6, 0x1, 0x5, 0x7f, 0x2, 0x80000000, 0x2, 0x0, 0x10001, 0x8, 0x5, 0x7, 0x2, 0x6, 0x1675, 0x1, 0xff, 0x4, 0x200, 0x3, 0x4107a2b1, 0x358827d1, 0x6, 0x2, 0x1, 0x80000001, 0xc0010, 0x9c, 0x4, 0x2, 0x7, 0x3, 0xfffffffc, 0x200, 0x5, 0x2, 0x5, 0x0, 0xffffffff, 0x1, 0x0, 0x4928, 0xffffffff, 0xffffffff, 0x7, 0x4, 0x5, 0x80000004, 0x0, 0x9733, 0x6, 0x80000001, 0x8, 0x9fd8, 0x5, 0x9, 0x8, 0x8, 0x4, 0x101, 0x9, 0x71, 0x0, 0x6, 0x0, 0x3, 0x5, 0x165, 0x9, 0x22, 0x4, 0x9, 0x8, 0x40, 0x6, 0x5, 0x7, 0x0, 0x3, 0x2, 0x2, 0x0, 0xa, 0xffffffff, 0x471, 0x1, 0x0, 0x7, 0x3, 0x6, 0x1000, 0x3, 0x2, 0xb, 0xffff, 0x80, 0x4, 0x4, 0x2, 0x40, 0xb, 0xfffffffd, 0x5, 0x7, 0x4, 0x2, 0x2, 0x0, 0x7, 0x5, 0x8000, 0x1, 0xa, 0x200ffff, 0xa5, 0x2, 0x9]}}) sendmsg$nl_route(r10, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)={&(0x7f0000000300)=ANY=[@ANYBLOB="540000001e000126bd7000fedbdf250700000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\r\x00\x00\x00'], 0x54}, 0x1, 0x0, 0x0, 0x4040840}, 0x20000800) ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a1, &(0x7f0000000080)='wg1\x00') r11 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), r9) sendmsg$L2TP_CMD_TUNNEL_CREATE(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="17090010000000000000010000000500070000000000080009000000000008000a000000ce8721eb02000100000014001f000000000000000000000000000000000014002000fe8800000000e4000000000000000001"], 0x5c}, 0x1, 0x0, 0x0, 0x44}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x8, 0x3000000000002}, 0x0) 18.348305981s ago: executing program 0 (id=2098): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_buf(r4, 0x6, 0x1a, &(0x7f0000000100)="4dc44b0ca59e3f37ff2cdcc6a1e9140dcf0c9c17471847e04a2e20ea60c217eb76a0bb33ee934ceb32c9e4d86d80ede35da8257115aa055ba161635719b8ccb232b6dd0c0b279aadc66f10e87ff2f59a6c94b355de8f", 0x56) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000000c0)={0x38, r3, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r5}}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x38}}, 0x20000000) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040090}, 0xc0) 18.311235598s ago: executing program 3 (id=2099): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x41, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000006800)={0x0, 0x3c}, 0x5}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="351a0000100001"], 0x28}}, 0x20040881) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="1c0000f5"], 0xfd1) r2 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x24004004) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a54000000060a09040000000000000000020000000900020073797a32000000000900010073797a3000000000200004801c0001800a00010071756575650000000c000280080004400000000c050007"], 0x7c}}, 0x0) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}], 0xc0}, 0x2160) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r9, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r8, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r11, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r10, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) close(r10) syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0xf0b, 0x70bd29, 0x25dfdc00, {0x60, 0x0, 0x0, 0x0, {0x7, 0x3}, {0xfff3, 0x5}, {0x8, 0xfff2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_AUTORATE={0x8, 0x9, 0xb6a}, @TCA_CAKE_WASH={0x8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x44045}, 0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) 18.156373017s ago: executing program 3 (id=2100): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000900)=ANY=[@ANYBLOB="b7020000f7ffffffbfa70000000000002402000020fe29817a0af0fff8ffffff69a4f0ff00000000b70600000018d1fe2d6405000000000075040000000000400704000000000000b7040000100000206a0700fe000000008500000005000000b70000000a00000095000000000000000000c2c62f6004ad13aa957e2af5e49a53c2868f0399d909a63796c113a80c19aab9d607000000b6c9483be3f0d3253730e714c46cc4f79fd2b316da4f0de8163f6242fa7323f1740637c48468766af540439fce41f144631ac262dcae18c3d1a1fbe96dc86035b44174f7c0620254ab6d285e6b343185089a0f119e31975e551558050800000000000000125d67857f290870093f38153608561a2128a79cce912d1f05de330800a9f5422bee8ca49166f6a587f2f593775afcd071efc5a972f757521b7b38ec273c2ad3e406f8c124f7dc1c4553229a69df4b2780e6da4420d71489fe383e0b5ce08b750502f2b8add8d2dddde19ac050537e973782b4053150580035fb2c579e1b2100000033d1ee8cab6d236f05b1f7b9f78fd5abfe033eb79f7a0b498366f5edfe311258016fbf47d9c85bf5325bf61419372be377022433e20900a262b20bb8b36de7b0e6c5ebfc5baec1ebe58d4af587d33e2935ad68da6e0fea5c21301f5d002b51a5b60fc741cb2c5d4cd5e896774f9293a6435558795043404ac6eafc8310fbcacca7f971b260fd06d4590ded8429fcd1c9a8dbbdedb32675388df363c0bc536e00448208b72405ebf27ddb402e5a2d675aaad92e183cef1eadc1661140fb567b55c72907a1aca75277a5f0022b1e957ba737f10f1161c5ae6e2cc64072ff3b4e76084922242e63d4b7806e30f786cff147e4bc819060678319a0e5534f5a0db52526c30000000000000000000000a63705b1a60525620acca06d57c055059df7651768310c9085c5f86be6ab819506961ad51f18b35fdc3fd4d0a0dbbdcd494ef168931f27748787bee95d739fef7ee67dd21c34647de82707e41d7db6d981a4fcf0bbd3d38ebb7a2489e28c6b28c0f70092ffb016b7766399555f3e6b538c2c862d17e53eaeb2036f9f0ab6e95e71bda4b5bbf53344264ad93bac1207b31d6e9c78181c7fe204c0b7582d1c762857f2a2e0c60f4a4855591a4f70f94df9629e470701103c40c8f6d3a3068091d62b58999e0a046f9509cb8ddc2a9ad4e0f1f85e5f076218b4b931acdff0c34fc5bdbad17ec481f1c9b17727c14e053e315d0d8d03c24ddaba65c5ce5b1aa04d1f767e25662b155d49460ec720d54044ac2856c11407835f341e2614bcae270000000001000000df7f736aab5d713240b2f40ec7be8251eba969686b2670ddc1a84df6ab12ab3e0cf8747837062233935704ebbd943ef0c5fef29513c7c1d6d2611796dccb45bdfd9e6533ad3574be5b9ea70e0c3b41a32067c03f5f8ed147cd0655c90d656f66eaed18a3c284c4f19417b5d91431759356db5d45ea40c9866957105b6252b0c028c672049ce163126f143f5758faf2a43f4c4f45a69b4e9113f85ae531085c11c75edbdee5af454757cdaff396c15ab9b210c202ffaea96d1bac60c6d6c56a4babc659858789bd479334e13e1c7876f95429431e61400815788c1397b260600d78e7513c58d9ac9474d392cc06f789753e1e7ebf5f1b55e2a64b9150c6580bf48e7bff763034801cccf403108d127b959ffc425a563ea2b90fbe779fd7d2ebfe94"], &(0x7f0000000280)='GPL\x00'}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000800)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000002000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r3}, &(0x7f0000000240), &(0x7f00000003c0)=r0}, 0x20) socket$packet(0x11, 0x2, 0x300) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) syz_emit_ethernet(0x82, &(0x7f0000001bc0)={@broadcast, @random="1704b45adbde", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x16, 0x4, 0x0, 0x3d, 0x0, 0x0, 0xfffc, 0x0, 0x11, 0x0, @multicast1, @rand_addr, {[@lsrr={0x83, 0x3}, @rr={0x7, 0x3, 0xfc}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@private=0xa010188, 0x10000}, {@empty}, {@local}, {@remote}, {@local}, {@dev}, {@private}]}]}}}}}}}, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x1b}, 0x20) setsockopt$inet6_int(r5, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r5, &(0x7f00000000c0)={&(0x7f00000001c0)={0xa, 0x4e21, 0x80000, @dev={0xfe, 0x80, '\x00', 0x19}, 0xfffffffd}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=[@dstopts_2292={{0x18, 0x29, 0x4, {0x5e}}}, @rthdrdstopts={{0x18, 0x29, 0x37, {0x3a}}}], 0x30}, 0xc4) sendmsg$inet(r2, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) 18.066053949s ago: executing program 3 (id=2101): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x16, 0x13, &(0x7f0000000740)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x51, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 18.064953746s ago: executing program 4 (id=2102): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, 0x0, 0x0) syz_emit_ethernet(0x83, 0x0, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe3}]}, 0x10) ioctl$sock_TIOCINQ(r1, 0x541b, &(0x7f0000000540)) 18.030724885s ago: executing program 4 (id=2103): r0 = socket$inet6(0x10, 0x3, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000a40)=ANY=[@ANYBLOB="5002000010000700fcfffffffbdbdf25fe880000000000000000000000000101e00000020000000000000000000000004e200000fffc00000000000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ff010000000000000000000000000001000000002b000000ac1414bb00000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000001000000000ad0000000000000000000000000000000000000000000000010000000000000000002000000000000700000000000000000000000000000000020400fdffffffe80a000000000000000000000a000200740000000000000020001700010000002bbd700028bd700025bd700028bd700004000000020000001d0114"], 0x250}}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x9c, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv4={{0x0, 0x1, @loopback}, {0x0, 0x2, @private=0xa010100}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x44, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv4={{0x0, 0x1, @broadcast}, {0x0, 0x2, @multicast1}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4041}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r2}, &(0x7f0000000380), &(0x7f00000003c0)=r4}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r5}, 0x10) sendto$inet6(r0, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) 17.999345567s ago: executing program 1 (id=2104): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a01080000000000000000030000000900010073797a3100000000080002400000000614000000110001"], 0x50}}, 0x20044084) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000400)=ANY=[@ANYRES16=r0, @ANYRES16=r0, @ANYRESDEC], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000180)={r1, 0x0, 0xfffffffffffffffe}, 0x10) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0900000005000000fd09000084"], 0x48) (async) r3 = socket$packet(0x11, 0x2, 0x300) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1f00000000000000000000000010000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) poll(&(0x7f0000000000)=[{r3, 0xa404}, {r4, 0x21}], 0x2, 0xfffffffe) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, r2}, 0x38) (async) r5 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$F2FS_IOC_DEFRAGMENT(r5, 0xc010f508, &(0x7f0000000040)={0xffffffffffffffff, 0x9}) (async) r6 = socket(0x840000000002, 0x3, 0x100) connect$inet(r6, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) (async) sendmmsg$inet(r6, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) (async) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="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"], 0x114}], 0x1}, 0x0) (async) unshare(0x24020400) (async) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000240), r9) (async) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="24000000180001000000005955ee0e662d576c0008000000040000000800", @ANYRES64=r7], 0x24}}, 0x0) (async) r10 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r10, 0x89f9, &(0x7f0000000280)={'sit0\x00', &(0x7f0000000240)={@loopback, @rand_addr=0x64010101, 0x8, 0x5}}) sendmmsg(0xffffffffffffffff, &(0x7f000000d600)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="82", 0x1}], 0x1}}], 0x1, 0x114027d77c4637a9) (async) r11 = socket(0x840000000002, 0x3, 0xff) connect$inet(r11, &(0x7f0000000540)={0x2, 0x4e22, @remote}, 0x10) (async) sendmmsg$inet(r11, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x300, 0x401eb94) r12 = socket$alg(0x26, 0x5, 0x0) syz_emit_ethernet(0x86, &(0x7f0000000580)=ANY=[@ANYBLOB="ffffffffffffbbbbbbbbbbbb08004500007800000000000190780a010102ac1414aa0c0090780100000047000000000000000011000000000000e0000002440c0001ac1414bb4e210000443c0001e000000100000000ac1414bb00000000ac1414000000000000000000000000000000000000000000ac1e00010000000000000000000000004f48631a23cf7f2922a2a0f6af8e7d235614a4c01c09f29ab78119a3d6da6dba9eec76c0"], 0x0) (async) ioctl$sock_bt_hidp_HIDPCONNADD(r6, 0x400448c8, &(0x7f0000000140)={r7, r12, 0x7, 0x4d, &(0x7f00000000c0)="fa7f0d8aa1edca834d602ed42c7e5cd04f62a4695ddb8ebc37f1f652aafc772b81d8950a93ffedf8ba54996ce8acdf8bf4e43a081d30ff2ce6381a01d6816a2d5bc7507996494df23625c1276a", 0x7, 0x1, 0x1, 0xffff, 0x4, 0x1, 0x9, 'syz0\x00'}) 17.829752473s ago: executing program 1 (id=2105): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x8, 0x70bd26, 0x25dfdbff, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x200080c1}, 0x4000000) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000240)={'syztnl2\x00', 0x0, 0x4, 0xa, 0x7f, 0x8, 0x14, @mcast2, @mcast2, 0x80, 0x40, 0x1, 0x1ff}}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'macvtap0\x00', 0x0}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={0xffffffffffffffff, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000340)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, &(0x7f0000000380)=[0x0], &(0x7f00000003c0)=[0x0, 0x0], 0x0, 0x33, &(0x7f0000000400)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000440), &(0x7f0000000480), 0x8, 0xc3, 0x8, 0x8, &(0x7f00000004c0)}}, 0x10) getsockname$packet(0xffffffffffffffff, &(0x7f0000000640)={0x11, 0x0, 0x0}, &(0x7f0000000680)=0x14) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000006c0)={'wg0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000007c0)={'gretap0\x00', &(0x7f0000000700)={'gre0\x00', 0x0, 0x20, 0x7, 0x8, 0x0, {{0x21, 0x4, 0x0, 0x9, 0x84, 0x66, 0x0, 0x1, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010101, {[@lsrr={0x83, 0x1f, 0x8b, [@empty, @dev={0xac, 0x14, 0x14, 0x23}, @local, @local, @multicast2, @dev={0xac, 0x14, 0x14, 0x14}, @multicast2]}, @rr={0x7, 0x13, 0xd5, [@loopback, @local, @broadcast, @broadcast]}, @rr={0x7, 0x13, 0xcf, [@private=0xa010102, @broadcast, @dev={0xac, 0x14, 0x14, 0x3a}, @local]}, @timestamp_addr={0x44, 0x24, 0xee, 0x1, 0x7, [{@remote, 0x4}, {@dev={0xac, 0x14, 0x14, 0xd}}, {@rand_addr=0x64010102, 0x8}, {@private=0xa010100, 0x6}]}, @ra={0x94, 0x4, 0x1}]}}}}}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000800)={@remote, @private, 0x0}, &(0x7f0000000840)=0xc) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000900)={'syztnl2\x00', &(0x7f0000000880)={'ip6_vti0\x00', 0x0, 0x29, 0x3, 0x5, 0x7f, 0x4, @private0, @empty, 0x40, 0x8000, 0x5, 0x80000001}}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000b80)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000b40)={&(0x7f0000000940)={0x1d8, r2, 0x300, 0x70bd26, 0x25dfdbff, {}, [@HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}]}]}, 0x1d8}, 0x1, 0x0, 0x0, 0x64000}, 0x8040) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000bc0)={0x1, 0xffffffffffffffff}, 0x4) r15 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000c00)=r8, 0x4) r16 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000dc0)={&(0x7f0000000cc0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x6, [@var={0x1, 0x0, 0x0, 0xe, 0x2}, @float={0xb, 0x0, 0x0, 0x10, 0x2}, @union={0x10, 0x1, 0x0, 0x5, 0x1, 0x0, [{0xb, 0x4, 0x7ff}]}, @restrict={0x4, 0x0, 0x0, 0xb, 0x1}]}, {0x0, [0x61, 0x0, 0x30, 0x61]}}, &(0x7f0000000d40)=""/109, 0x5e, 0x6d, 0x0, 0x6}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000c40)=@bloom_filter={0x1e, 0x5, 0x544, 0x1, 0x2e004, r14, 0x0, '\x00', 0x0, r15, 0x3, 0x4, 0x5, 0x9, @value=r16}, 0x50) syz_init_net_socket$rose(0xb, 0x5, 0x0) r17 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_RENAME(r17, &(0x7f0000000ec0)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x30, 0x5, 0x6, 0x201, 0x0, 0x0, {0x3, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}]}, 0x30}}, 0x94) sendmsg$NFT_MSG_GETSET(r17, &(0x7f0000001100)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000010c0)={&(0x7f0000000f40)={0x170, 0xa, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_USERDATA={0xcf, 0xd, 0x1, 0x0, "09656ea35dfe04471954d39bd4db5585d0a6691b33fa2820c0c64adbc33837b60c6d6eea4a07de1cd9eb89235020b180cdffd2582c7d22e93c4f3f012f482e85ca47b8d626b92b5caadbdb7b985feef5ecb7571b40049bc06b9d53e4a106847e596ab7bc385b9e9fe28ff639183a365b19ae8700f9a3617380a9dc54040db10d3347585e4a2ceb98900679d36dcccc39fed36b2f3f3d8397a061fa00199b56ddc4ce702c4cecdb19483ce511eaed3d0490b3d7ed2580bf6f8119fed4cd21d00b950849edb023b3dfb8c5bb"}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x12}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0x7fffff80}, @NFTA_SET_USERDATA={0x4e, 0xd, 0x1, 0x0, "8d93866bd7de7d5f729c185e0ff3c2dc3bb444bcb2502bfb14e4ad065dfcbf23f759569756460a8c84e8b05efad4bb3f88351ef4e9cbd7de11bbc8ea23f9cb9825deb289510b86917381"}, @NFTA_SET_EXPRESSIONS={0x14, 0x12, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @target={{0xb}, @void}}]}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2d}]}, 0x170}, 0x1, 0x0, 0x0, 0x4}, 0x4004) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xc, 0x80010, r15, 0xce5cc000) r18 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001140)={0x1b, 0x0, 0x0, 0x0, 0x0, r14, 0x0, '\x00', r5, r15, 0x5, 0x3, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001440)={0x6, 0x11, &(0x7f00000011c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x7ff}, {{0x18, 0x1, 0x1, 0x0, r18}}, {}, [@generic={0xc, 0x2, 0x9, 0x6, 0xddc3}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001280)='GPL\x00', 0x9, 0x86, &(0x7f00000012c0)=""/134, 0x41000, 0x51, '\x00', r13, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000001380)={0x0, 0x4}, 0x8, 0x10, &(0x7f00000013c0)={0x2, 0x4, 0x8, 0x70}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001400)=[r14, 0xffffffffffffffff], 0x0, 0x10, 0xfc3}, 0x94) setsockopt$MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, &(0x7f0000001500)={{0xa, 0x4e21, 0x1, @local, 0x5}, {0xa, 0x4e24, 0x6, @loopback}, 0xffffffffffffffff, {[0x9, 0x9, 0x6, 0x6, 0x314bc4aa, 0x9, 0x3, 0x6]}}, 0x5c) epoll_ctl$EPOLL_CTL_MOD(r15, 0x3, r15, &(0x7f0000001580)={0x4}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000001600)={'batadv0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r0, &(0x7f0000001880)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001840)={&(0x7f0000001680)={0x190, r2, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r19}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x190}, 0x1, 0x0, 0x0, 0x8000}, 0x4000001) 17.829158411s ago: executing program 4 (id=2106): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r0}, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) socket$netlink(0x10, 0x3, 0x14) (async) r2 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)=ANY=[@ANYBLOB="38000000031401000000000000000000090002002f797a2f000000000800410072786500140033007465616d5f736c6176655f30"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x8844) (async) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)=ANY=[@ANYBLOB="38000000031401000000000000000000090002002f797a2f000000000800410072786500140033007465616d5f736c6176655f30"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x8844) 17.774905612s ago: executing program 4 (id=2107): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c00000042000b0023ad7000fedbdf25050000000800020005f0"], 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x40094) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000049c0)={0x3, 0x5, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x87}, @call={0x85, 0x0, 0x0, 0xe}]}, &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0x7, 0x8, 0x2022, 0x0, 0xffffffffffffffff, 0x10001}, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000400)={r3, &(0x7f0000000280), 0x0}, 0x20) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="58000000100001002abd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="802100000000000014000300776c616e300000000000000000000000080004000e0400001c0016801800018014000b00070000ce"], 0x58}}, 0x0) 17.735248111s ago: executing program 3 (id=2108): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) setsockopt$TIPC_GROUP_LEAVE(r1, 0x10f, 0x88) sendmmsg$inet6(r0, &(0x7f0000000580)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @remote, 0x9}, 0x1c, 0x0, 0x0, &(0x7f00000020c0)=ANY=[@ANYBLOB="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"], 0x590}}, {{0x0, 0x0, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000040)="3a6f5eb1524a5da97bcc34c128c6ac729d74c9f0d8a4c284de70326fd9249b11c661cf0cb7a67dc3318a8b6369e180b556fd7a0d5d5c193e5ba3bd860703aa2dafe29ff896666df2af8ba59093fc6e15fb207024581138957a0a40249df2769c3c885c63df43c90be4a09b08033c5d21401b9a9d22f8eb76e028c1b1d963ec6dfb32a7bc6ca50871309753d6790515257013ea00c03ff938a0c2f58a7fe223619e0a679c59f06dd899a2618aef", 0xad}], 0x2}}], 0x2, 0x8008801) sendmmsg$inet6(r0, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 16.726249912s ago: executing program 3 (id=2109): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)={0xfffffffffffffd48, 0x14, 0x1, 0x0, 0x0, {0x11}, [@INET_DIAG_REQ_BYTECODE={0xd, 0x1, "6d13a20d015dc921e4"}]}, 0x24}}, 0x0) syz_genetlink_get_family_id$nl80211(0xfffffffffffffffc, 0xffffffffffffffff) 16.725333687s ago: executing program 3 (id=2110): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000000041}, 0xc) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000480)={{{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in=@private=0xa010100, 0x0, 0x0, 0x4e21, 0x0, 0x2, 0x0, 0x20}, {0x0, 0x0, 0x4, 0x0, 0x6, 0x0, 0x0, 0x3}, {0xffffbffffffffffc, 0x0, 0x0, 0x1000000000}, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1}, {{@in6=@ipv4={'\x00', '\xff\xff', @empty}, 0x4d3, 0x2b}, 0x2, @in=@dev={0xac, 0x14, 0x14, 0x1b}, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0xfffffffffffffeb0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @mcast2, 0x3}, 0x1c) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000240)={'veth0_vlan\x00', 0x20}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$packet(0x11, 0x3, 0x300) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x33) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@deltclass={0x0, 0x29, 0x400, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0x2, 0xe}, {0xf, 0x8}, {0x9, 0xfff2}}, [@tclass_kind_options=@c_hfsc={{}, {0x0, 0x2, [@TCA_HFSC_USC={0x0, 0x3, {0x6, 0x3, 0x269}}]}}, @tclass_kind_options=@c_drr={{}, {0x0, 0x2, @TCA_DRR_QUANTUM={0x0, 0x1, 0x105}}}]}, 0x6c}}, 0x0) sendto$packet(r6, &(0x7f0000000200)="44c33b69ebc9e05e9bdec0c288a8", 0xe, 0x830, &(0x7f0000000440)={0x11, 0x0, r7, 0x1, 0x2, 0x6, @random="648868c5c62d"}, 0x14) r8 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r3) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) ioctl$BTRFS_IOC_WAIT_SYNC(r9, 0x40089416, &(0x7f0000000300)) close(r9) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x5, 0x4, &(0x7f00000001c0)=ANY=[@ANYRES32, @ANYRES8=r8, @ANYRES32=r9], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) connect$ax25(r10, &(0x7f0000000000)={{0x3, @null}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x10) r11 = socket$unix(0x1, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=@getchain={0x5c, 0x66, 0x0, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0xe, 0xfff1}, {0xd, 0x5}, {0x0, 0x8}}, [{0x8, 0xb, 0x4}, {0x8, 0xb, 0x61}, {0x8, 0xb, 0x8}, {0x8, 0xb, 0x4}, {0x8, 0xb, 0x718}, {0x8, 0xb, 0x1}, {0x8, 0xb, 0x12000000}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000001}, 0x8840) 15.601548485s ago: executing program 2 (id=2111): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8a00fe00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ff8effb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000c500000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@ipv6_newaddr={0x48, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {}, [@IFA_LOCAL={0x14, 0xb, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @IFA_ADDRESS={0x14, 0x1, @mcast2}, @IFA_FLAGS={0x8, 0x8, 0x442}]}, 0x48}}, 0x0) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r3) pipe(&(0x7f0000000000)={0xffffffffffffffff}) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x34, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {{}, {}, {0x18, 0x17, {0x18, 0xd, @l2={'ib', 0x3a, 'pim6reg1\x00'}}}}, ["", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0xc040}, 0x800) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x48, r4, 0x1, 0x70bd2d, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x24, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5}, {0x5, 0x3, 0x80}, {0x5, 0x3, 0x5}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}]}, 0x48}}, 0x4000) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'macvlan0\x00', 0x0}) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000d40)=ANY=[@ANYBLOB="8400000010000305000000040000000000000000", @ANYRES32=0x0, @ANYBLOB="1546010000000000540012800c0001006d6163766c616e0044000280060002000100000008000100010000000800030003000000080007000500000008000100100000000600020001000000100005800a000400aaaaaaaaaa2e000008000500", @ANYRES32=r6, @ANYBLOB="08000a00fb"], 0x84}, 0x1, 0x0, 0x0, 0x8040}, 0x20008040) 3.194948748s ago: executing program 32 (id=2098): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_buf(r4, 0x6, 0x1a, &(0x7f0000000100)="4dc44b0ca59e3f37ff2cdcc6a1e9140dcf0c9c17471847e04a2e20ea60c217eb76a0bb33ee934ceb32c9e4d86d80ede35da8257115aa055ba161635719b8ccb232b6dd0c0b279aadc66f10e87ff2f59a6c94b355de8f", 0x56) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000000c0)={0x38, r3, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r5}}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x38}}, 0x20000000) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040090}, 0xc0) 2.152747821s ago: executing program 33 (id=2105): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x8, 0x70bd26, 0x25dfdbff, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x200080c1}, 0x4000000) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000240)={'syztnl2\x00', 0x0, 0x4, 0xa, 0x7f, 0x8, 0x14, @mcast2, @mcast2, 0x80, 0x40, 0x1, 0x1ff}}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'macvtap0\x00', 0x0}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={0xffffffffffffffff, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000340)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, &(0x7f0000000380)=[0x0], &(0x7f00000003c0)=[0x0, 0x0], 0x0, 0x33, &(0x7f0000000400)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000440), &(0x7f0000000480), 0x8, 0xc3, 0x8, 0x8, &(0x7f00000004c0)}}, 0x10) getsockname$packet(0xffffffffffffffff, &(0x7f0000000640)={0x11, 0x0, 0x0}, &(0x7f0000000680)=0x14) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000006c0)={'wg0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000007c0)={'gretap0\x00', &(0x7f0000000700)={'gre0\x00', 0x0, 0x20, 0x7, 0x8, 0x0, {{0x21, 0x4, 0x0, 0x9, 0x84, 0x66, 0x0, 0x1, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010101, {[@lsrr={0x83, 0x1f, 0x8b, [@empty, @dev={0xac, 0x14, 0x14, 0x23}, @local, @local, @multicast2, @dev={0xac, 0x14, 0x14, 0x14}, @multicast2]}, @rr={0x7, 0x13, 0xd5, [@loopback, @local, @broadcast, @broadcast]}, @rr={0x7, 0x13, 0xcf, [@private=0xa010102, @broadcast, @dev={0xac, 0x14, 0x14, 0x3a}, @local]}, @timestamp_addr={0x44, 0x24, 0xee, 0x1, 0x7, [{@remote, 0x4}, {@dev={0xac, 0x14, 0x14, 0xd}}, {@rand_addr=0x64010102, 0x8}, {@private=0xa010100, 0x6}]}, @ra={0x94, 0x4, 0x1}]}}}}}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000800)={@remote, @private, 0x0}, &(0x7f0000000840)=0xc) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000900)={'syztnl2\x00', &(0x7f0000000880)={'ip6_vti0\x00', 0x0, 0x29, 0x3, 0x5, 0x7f, 0x4, @private0, @empty, 0x40, 0x8000, 0x5, 0x80000001}}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000b80)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000b40)={&(0x7f0000000940)={0x1d8, r2, 0x300, 0x70bd26, 0x25dfdbff, {}, [@HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}]}]}, 0x1d8}, 0x1, 0x0, 0x0, 0x64000}, 0x8040) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000bc0)={0x1, 0xffffffffffffffff}, 0x4) r15 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000c00)=r8, 0x4) r16 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000dc0)={&(0x7f0000000cc0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x6, [@var={0x1, 0x0, 0x0, 0xe, 0x2}, @float={0xb, 0x0, 0x0, 0x10, 0x2}, @union={0x10, 0x1, 0x0, 0x5, 0x1, 0x0, [{0xb, 0x4, 0x7ff}]}, @restrict={0x4, 0x0, 0x0, 0xb, 0x1}]}, {0x0, [0x61, 0x0, 0x30, 0x61]}}, &(0x7f0000000d40)=""/109, 0x5e, 0x6d, 0x0, 0x6}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000c40)=@bloom_filter={0x1e, 0x5, 0x544, 0x1, 0x2e004, r14, 0x0, '\x00', 0x0, r15, 0x3, 0x4, 0x5, 0x9, @value=r16}, 0x50) syz_init_net_socket$rose(0xb, 0x5, 0x0) r17 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_RENAME(r17, &(0x7f0000000ec0)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x30, 0x5, 0x6, 0x201, 0x0, 0x0, {0x3, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}]}, 0x30}}, 0x94) sendmsg$NFT_MSG_GETSET(r17, &(0x7f0000001100)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000010c0)={&(0x7f0000000f40)={0x170, 0xa, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_USERDATA={0xcf, 0xd, 0x1, 0x0, "09656ea35dfe04471954d39bd4db5585d0a6691b33fa2820c0c64adbc33837b60c6d6eea4a07de1cd9eb89235020b180cdffd2582c7d22e93c4f3f012f482e85ca47b8d626b92b5caadbdb7b985feef5ecb7571b40049bc06b9d53e4a106847e596ab7bc385b9e9fe28ff639183a365b19ae8700f9a3617380a9dc54040db10d3347585e4a2ceb98900679d36dcccc39fed36b2f3f3d8397a061fa00199b56ddc4ce702c4cecdb19483ce511eaed3d0490b3d7ed2580bf6f8119fed4cd21d00b950849edb023b3dfb8c5bb"}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x12}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0x7fffff80}, @NFTA_SET_USERDATA={0x4e, 0xd, 0x1, 0x0, "8d93866bd7de7d5f729c185e0ff3c2dc3bb444bcb2502bfb14e4ad065dfcbf23f759569756460a8c84e8b05efad4bb3f88351ef4e9cbd7de11bbc8ea23f9cb9825deb289510b86917381"}, @NFTA_SET_EXPRESSIONS={0x14, 0x12, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @target={{0xb}, @void}}]}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2d}]}, 0x170}, 0x1, 0x0, 0x0, 0x4}, 0x4004) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xc, 0x80010, r15, 0xce5cc000) r18 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001140)={0x1b, 0x0, 0x0, 0x0, 0x0, r14, 0x0, '\x00', r5, r15, 0x5, 0x3, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001440)={0x6, 0x11, &(0x7f00000011c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x7ff}, {{0x18, 0x1, 0x1, 0x0, r18}}, {}, [@generic={0xc, 0x2, 0x9, 0x6, 0xddc3}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001280)='GPL\x00', 0x9, 0x86, &(0x7f00000012c0)=""/134, 0x41000, 0x51, '\x00', r13, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000001380)={0x0, 0x4}, 0x8, 0x10, &(0x7f00000013c0)={0x2, 0x4, 0x8, 0x70}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001400)=[r14, 0xffffffffffffffff], 0x0, 0x10, 0xfc3}, 0x94) setsockopt$MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, &(0x7f0000001500)={{0xa, 0x4e21, 0x1, @local, 0x5}, {0xa, 0x4e24, 0x6, @loopback}, 0xffffffffffffffff, {[0x9, 0x9, 0x6, 0x6, 0x314bc4aa, 0x9, 0x3, 0x6]}}, 0x5c) epoll_ctl$EPOLL_CTL_MOD(r15, 0x3, r15, &(0x7f0000001580)={0x4}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000001600)={'batadv0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r0, &(0x7f0000001880)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001840)={&(0x7f0000001680)={0x190, r2, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r19}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x190}, 0x1, 0x0, 0x0, 0x8000}, 0x4000001) 2.087238829s ago: executing program 34 (id=2107): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c00000042000b0023ad7000fedbdf25050000000800020005f0"], 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x40094) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000049c0)={0x3, 0x5, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x87}, @call={0x85, 0x0, 0x0, 0xe}]}, &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0x7, 0x8, 0x2022, 0x0, 0xffffffffffffffff, 0x10001}, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000400)={r3, &(0x7f0000000280), 0x0}, 0x20) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="58000000100001002abd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="802100000000000014000300776c616e300000000000000000000000080004000e0400001c0016801800018014000b00070000ce"], 0x58}}, 0x0) 1.036465737s ago: executing program 35 (id=2110): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000000041}, 0xc) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000480)={{{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in=@private=0xa010100, 0x0, 0x0, 0x4e21, 0x0, 0x2, 0x0, 0x20}, {0x0, 0x0, 0x4, 0x0, 0x6, 0x0, 0x0, 0x3}, {0xffffbffffffffffc, 0x0, 0x0, 0x1000000000}, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1}, {{@in6=@ipv4={'\x00', '\xff\xff', @empty}, 0x4d3, 0x2b}, 0x2, @in=@dev={0xac, 0x14, 0x14, 0x1b}, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0xfffffffffffffeb0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @mcast2, 0x3}, 0x1c) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000240)={'veth0_vlan\x00', 0x20}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$packet(0x11, 0x3, 0x300) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x33) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@deltclass={0x0, 0x29, 0x400, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0x2, 0xe}, {0xf, 0x8}, {0x9, 0xfff2}}, [@tclass_kind_options=@c_hfsc={{}, {0x0, 0x2, [@TCA_HFSC_USC={0x0, 0x3, {0x6, 0x3, 0x269}}]}}, @tclass_kind_options=@c_drr={{}, {0x0, 0x2, @TCA_DRR_QUANTUM={0x0, 0x1, 0x105}}}]}, 0x6c}}, 0x0) sendto$packet(r6, &(0x7f0000000200)="44c33b69ebc9e05e9bdec0c288a8", 0xe, 0x830, &(0x7f0000000440)={0x11, 0x0, r7, 0x1, 0x2, 0x6, @random="648868c5c62d"}, 0x14) r8 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r3) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) ioctl$BTRFS_IOC_WAIT_SYNC(r9, 0x40089416, &(0x7f0000000300)) close(r9) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x5, 0x4, &(0x7f00000001c0)=ANY=[@ANYRES32, @ANYRES8=r8, @ANYRES32=r9], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) connect$ax25(r10, &(0x7f0000000000)={{0x3, @null}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x10) r11 = socket$unix(0x1, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=@getchain={0x5c, 0x66, 0x0, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0xe, 0xfff1}, {0xd, 0x5}, {0x0, 0x8}}, [{0x8, 0xb, 0x4}, {0x8, 0xb, 0x61}, {0x8, 0xb, 0x8}, {0x8, 0xb, 0x4}, {0x8, 0xb, 0x718}, {0x8, 0xb, 0x1}, {0x8, 0xb, 0x12000000}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000001}, 0x8840) 0s ago: executing program 36 (id=2111): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8a00fe00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ff8effb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000c500000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@ipv6_newaddr={0x48, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {}, [@IFA_LOCAL={0x14, 0xb, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @IFA_ADDRESS={0x14, 0x1, @mcast2}, @IFA_FLAGS={0x8, 0x8, 0x442}]}, 0x48}}, 0x0) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r3) pipe(&(0x7f0000000000)={0xffffffffffffffff}) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x34, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {{}, {}, {0x18, 0x17, {0x18, 0xd, @l2={'ib', 0x3a, 'pim6reg1\x00'}}}}, ["", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0xc040}, 0x800) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x48, r4, 0x1, 0x70bd2d, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x24, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5}, {0x5, 0x3, 0x80}, {0x5, 0x3, 0x5}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}]}, 0x48}}, 0x4000) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'macvlan0\x00', 0x0}) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000d40)=ANY=[@ANYBLOB="8400000010000305000000040000000000000000", @ANYRES32=0x0, @ANYBLOB="1546010000000000540012800c0001006d6163766c616e0044000280060002000100000008000100010000000800030003000000080007000500000008000100100000000600020001000000100005800a000400aaaaaaaaaa2e000008000500", @ANYRES32=r6, @ANYBLOB="08000a00fb"], 0x84}, 0x1, 0x0, 0x0, 0x8040}, 0x20008040) kernel console output (not intermixed with test programs): 84] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1076'. [ 272.217369][T10192] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1078'. [ 272.289120][T10192] batman_adv: batadv0: Adding interface: ipvlan2 [ 272.329914][T10192] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 272.383316][T10192] batman_adv: batadv0: Not using interface ipvlan2 (retrying later): interface not active [ 272.801298][T10228] netlink: 'syz.0.1088': attribute type 3 has an invalid length. [ 272.853675][T10228] team0: Device vlan0 failed to register rx_handler [ 272.908700][T10234] (unnamed net_device) (uninitialized): option packets_per_slave: mode dependency failed, not supported in mode 802.3ad(4) [ 273.071349][T10243] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 273.151631][T10247] openvswitch: netlink: nsh attribute has 65520 unknown bytes. [ 273.166231][T10248] openvswitch: netlink: nsh attribute has 65520 unknown bytes. [ 273.167205][T10250] netlink: 'syz.1.1095': attribute type 24 has an invalid length. [ 273.177967][T10247] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 273.190418][T10250] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: invalid value (0) [ 273.200678][T10248] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 273.210621][T10252] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 273.223658][T10250] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: allowed values 1 - 65535 [ 273.738646][T10282] nbd: must specify at least one socket [ 273.992905][T10300] syz_tun: entered allmulticast mode [ 274.152055][T10296] syz_tun: left allmulticast mode [ 274.176097][T10309] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 274.336134][T10311] batadv_slave_1: entered promiscuous mode [ 274.536593][T10310] batadv_slave_1: left promiscuous mode [ 274.640850][T10321] syz_tun: entered allmulticast mode [ 274.657197][T10321] dvmrp8: entered allmulticast mode [ 274.848465][T10320] syz_tun: left allmulticast mode [ 274.862747][T10320] dvmrp8: left allmulticast mode [ 275.045547][T10335] netlink: 'syz.4.1118': attribute type 14 has an invalid length. [ 275.291855][ T5868] IPVS: starting estimator thread 0... [ 275.345887][T10347] netlink: 'syz.4.1122': attribute type 4 has an invalid length. [ 275.379317][T10356] sctp: [Deprecated]: syz.2.1123 (pid 10356) Use of int in maxseg socket option. [ 275.379317][T10356] Use struct sctp_assoc_value instead [ 275.423475][T10350] IPVS: using max 27 ests per chain, 64800 per kthread [ 275.434855][T10360] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 275.625601][T10372] __nla_validate_parse: 17 callbacks suppressed [ 275.625623][T10372] netlink: 23 bytes leftover after parsing attributes in process `syz.0.1126'. [ 275.703671][ T43] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 275.739927][T10372] netlink: 'syz.0.1126': attribute type 1 has an invalid length. [ 275.839517][T10372] 8021q: adding VLAN 0 to HW filter on device bond3 [ 275.899843][T10386] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1130'. [ 275.953467][ T5868] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 276.184473][T10406] raw_sendmsg: syz.2.1135 forgot to set AF_INET. Fix it! [ 276.209558][T10399] macsec2: entered promiscuous mode [ 276.216739][T10399] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 276.227325][T10399] macsec2: entered allmulticast mode [ 276.245178][T10409] tipc: Enabled bearer , priority 0 [ 276.271179][T10399] syzkaller0: entered promiscuous mode [ 276.278327][T10399] syzkaller0: entered allmulticast mode [ 276.339014][T10399] tipc: Resetting bearer [ 276.347605][T10397] tipc: Resetting bearer [ 276.370143][T10397] tipc: Disabling bearer [ 276.514151][T10419] IPVS: set_ctl: invalid protocol: 115 127.0.0.1:20000 [ 276.522371][T10419] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1137'. [ 276.536128][T10419] IPVS: Unknown mcast interface: vetN1_macvtap [ 276.662304][T10425] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 276.949174][T10439] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1142'. [ 277.085599][T10446] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1146'. [ 277.252126][T10462] bridge0: port 1(erspan0) entered blocking state [ 277.260999][T10462] bridge0: port 1(erspan0) entered disabled state [ 277.268573][T10462] erspan0: entered allmulticast mode [ 277.276137][T10462] erspan0: entered promiscuous mode [ 277.346396][T10466] erspan0: left allmulticast mode [ 277.351494][T10466] erspan0: left promiscuous mode [ 277.404721][T10466] bridge0: port 1(erspan0) entered disabled state [ 277.444140][T10471] syzkaller0: entered allmulticast mode [ 277.581553][T10477] bridge3: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 277.691560][T10483] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1158'. [ 277.735615][T10486] netlink: 'syz.3.1155': attribute type 11 has an invalid length. [ 277.822177][T10494] (unnamed net_device) (uninitialized): Unable to set up delay as MII monitoring is disabled [ 277.970206][T10503] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1162'. [ 277.980628][T10503] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1162'. [ 278.555893][T10524] netlink: 4208 bytes leftover after parsing attributes in process `syz.1.1166'. [ 278.571066][T10524] ieee802154 phy0 wpan0: encryption failed: -22 [ 278.769573][T10534] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1168'. [ 279.838473][T10587] netlink: 'syz.1.1180': attribute type 13 has an invalid length. [ 280.027265][T10594] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 280.034893][T10594] IPv6: NLM_F_CREATE should be set when creating new route [ 280.042160][T10594] IPv6: NLM_F_CREATE should be set when creating new route [ 280.265206][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 280.364279][T10605] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 280.441356][T10603] veth1: entered promiscuous mode [ 280.452429][T10603] netlink: 'syz.4.1188': attribute type 8 has an invalid length. [ 280.460403][T10603] A link change request failed with some changes committed already. Interface veth1 may have been left with an inconsistent configuration, please check. [ 280.483530][T10609] bond0: entered promiscuous mode [ 280.488689][T10609] bond0: entered allmulticast mode [ 280.498481][T10609] 8021q: adding VLAN 0 to HW filter on device bond0 [ 280.933238][T10634] netlink: 'syz.2.1198': attribute type 1 has an invalid length. [ 280.991283][T10634] bond6: (slave vxcan3): The slave device specified does not support setting the MAC address [ 281.010870][T10634] bond6: (slave vxcan3): Error -95 calling set_mac_address [ 281.446273][T10651] __nla_validate_parse: 8 callbacks suppressed [ 281.446295][T10651] netlink: 112 bytes leftover after parsing attributes in process `syz.3.1201'. [ 281.487813][T10651] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1201'. [ 281.550683][T10655] netlink: 844 bytes leftover after parsing attributes in process `syz.2.1203'. [ 281.663927][T10655] netlink: 10 bytes leftover after parsing attributes in process `syz.2.1203'. [ 281.690765][T10655] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1203'. [ 281.762399][T10659] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1204'. [ 281.865111][T10661] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1206'. [ 282.251126][T10689] netlink: 'syz.4.1215': attribute type 1 has an invalid length. [ 282.386784][T10691] 8021q: VLANs not supported on nlmon0 [ 282.456688][T10689] (unnamed net_device) (uninitialized): option ad_select: invalid value (34) [ 282.486177][T10710] netlink: 112 bytes leftover after parsing attributes in process `syz.0.1220'. [ 283.028957][T10731] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1228'. [ 283.059921][T10731] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1228'. [ 283.703612][T10761] netlink: 'syz.3.1237': attribute type 1 has an invalid length. [ 283.714122][T10762] netlink: 'syz.0.1235': attribute type 1 has an invalid length. [ 283.725727][T10761] netlink: 'syz.3.1237': attribute type 1 has an invalid length. [ 283.740108][T10761] block nbd1: shutting down sockets [ 283.798961][T10762] 8021q: adding VLAN 0 to HW filter on device bond4 [ 283.809947][T10769] vcan0: tx drop: invalid sa for name 0x0000000000000003 [ 284.016622][T10784] openvswitch: netlink: IP tunnel dst address not specified [ 284.091022][T10792] netlink: zone id is out of range [ 284.131464][T10791] ieee802154 phy0 wpan0: encryption failed: -90 [ 284.141769][T10792] netlink: zone id is out of range [ 284.148345][T10792] netlink: zone id is out of range [ 284.160769][T10792] netlink: zone id is out of range [ 284.179053][T10792] netlink: zone id is out of range [ 284.191459][T10792] netlink: zone id is out of range [ 284.210325][T10792] netlink: zone id is out of range [ 284.220710][T10792] netlink: zone id is out of range [ 284.226969][T10792] netlink: zone id is out of range [ 284.778410][T10781] delete_channel: no stack [ 285.122162][T10816] syzkaller0: entered promiscuous mode [ 285.129419][T10816] syzkaller0: entered allmulticast mode [ 285.274352][T10838] netlink: 'syz.3.1258': attribute type 1 has an invalid length. [ 286.714588][T10839] tipc: Enabling of bearer rejected, failed to enable media [ 286.760611][T10841] bond9: (slave vxcan1): The slave device specified does not support setting the MAC address [ 286.789519][T10841] bond9: (slave vxcan1): Error -95 calling set_mac_address [ 286.820700][T10851] __nla_validate_parse: 4 callbacks suppressed [ 286.820723][T10851] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1254'. [ 287.032826][T10871] ieee802154 phy0 wpan0: encryption failed: -22 [ 287.717823][T10899] tipc: Enabling of bearer rejected, failed to enable media [ 287.786756][T10905] netlink: 'syz.3.1274': attribute type 1 has an invalid length. [ 287.949824][T10912] bond10: (slave vxcan1): The slave device specified does not support setting the MAC address [ 287.971086][T10912] bond10: (slave vxcan1): Error -95 calling set_mac_address [ 288.026914][T10919] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1276'. [ 288.510477][T10935] netlink: 596 bytes leftover after parsing attributes in process `syz.0.1279'. [ 288.527377][T10936] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1280'. [ 288.548966][T10935] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1279'. [ 288.558296][T10931] netlink: 'syz.0.1279': attribute type 29 has an invalid length. [ 288.569751][T10936] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1280'. [ 288.593414][T10932] netlink: 'syz.0.1279': attribute type 29 has an invalid length. [ 288.803389][T10946] netlink: 788 bytes leftover after parsing attributes in process `syz.0.1285'. [ 288.813181][T10944] bridge6: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 288.940606][T10957] (unnamed net_device) (uninitialized): option all_slaves_active: invalid value (9) [ 289.091493][T10964] net_ratelimit: 11 callbacks suppressed [ 289.091516][T10964] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 289.205593][T10970] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1283'. [ 289.271471][T10966] batadv_slave_0: entered promiscuous mode [ 289.302216][T10966] netlink: 428 bytes leftover after parsing attributes in process `syz.1.1283'. [ 289.659974][T10985] syzkaller1: entered promiscuous mode [ 289.679858][T10985] syzkaller1: entered allmulticast mode [ 290.217165][T11025] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1304'. [ 290.258167][T11025] dummy0: entered promiscuous mode [ 290.264679][T11025] macvtap1: entered promiscuous mode [ 290.270397][T11025] macvtap1: entered allmulticast mode [ 290.276089][T11025] dummy0: entered allmulticast mode [ 291.435931][T11083] netlink: 'syz.1.1318': attribute type 1 has an invalid length. [ 291.708467][T11099] tipc: Enabling of bearer rejected, failed to enable media [ 291.868428][ T30] audit: type=1800 audit(1757276918.448:4): pid=11097 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1321" name="memory.events" dev="tmpfs" ino=1431 res=0 errno=0 [ 291.892342][T11104] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.981437][T11104] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.118469][T11104] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.195873][T11104] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.286761][T11119] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 292.316963][T11119] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 292.491972][T11095] __nla_validate_parse: 7 callbacks suppressed [ 292.491993][T11095] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1322'. [ 292.528058][ T1335] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.594488][T11095] workqueue: name exceeds WQ_NAME_LEN. Truncating to: žÀ^–>º>ùMv^µâ侦¸ÑKc'A¥»– [ 292.604492][T11127] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1330'. [ 292.622087][T11127] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1330'. [ 292.667977][ T1335] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.739300][ T1335] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.824010][ T6106] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.872742][T11140] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1333'. [ 292.961277][T11144] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1334'. [ 292.979349][T11146] !: renamed from dummy0 (while UP) [ 293.034307][T11151] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1336'. [ 293.193832][T11159] netlink: 'syz.3.1337': attribute type 1 has an invalid length. [ 293.312799][T11161] bond11: (slave vxcan1): The slave device specified does not support setting the MAC address [ 293.326428][T11161] bond11: (slave vxcan1): Error -95 calling set_mac_address [ 293.422940][T11168] macvlan0: entered promiscuous mode [ 293.429608][T11168] macvlan0: entered allmulticast mode [ 293.436044][T11168] bond11: entered promiscuous mode [ 293.448314][T11168] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 293.458556][T11168] bond11: left promiscuous mode [ 293.487287][T11171] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1341'. [ 293.592442][T11171] veth0_macvtap (unregistering): left allmulticast mode [ 293.613987][T11175] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1343'. [ 293.632974][T11175] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1343'. [ 293.942533][T11191] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1350'. [ 293.968508][T11191] netlink: 'syz.4.1350': attribute type 19 has an invalid length. [ 293.994724][ T6106] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 294.007208][T11191] netlink: 'syz.4.1350': attribute type 19 has an invalid length. [ 294.015568][ T6106] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 294.029922][ T6106] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 294.055544][ T6106] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 294.121727][T11195] 8021q: adding VLAN 0 to HW filter on device bond7 [ 294.233276][T11209] netlink: 'syz.4.1354': attribute type 1 has an invalid length. [ 294.261268][T11207] sit0: entered promiscuous mode [ 294.273836][T11207] netlink: 'syz.0.1353': attribute type 1 has an invalid length. [ 294.547312][T11213] bond8: (slave vxcan3): The slave device specified does not support setting the MAC address [ 294.605506][T11213] bond8: (slave vxcan3): Error -95 calling set_mac_address [ 294.667665][T11209] macvlan0: entered promiscuous mode [ 294.681712][T11209] macvlan0: entered allmulticast mode [ 294.690556][T11209] bond8: entered promiscuous mode [ 294.702106][T11209] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 294.720400][T11209] bond8: left promiscuous mode [ 294.813883][T11218] batman_adv: batadv0: Removing interface: ipvlan2 [ 295.128508][T11226] netlink: 'syz.4.1356': attribute type 1 has an invalid length. [ 295.455539][T11243] IPv6: Can't replace route, no match found [ 295.602634][T11254] IPv6: sit1: Disabled Multicast RS [ 295.610276][T11258] openvswitch: netlink: IPv4 tun info is not correct [ 295.660215][T11254] sit1: entered allmulticast mode [ 295.768400][T11259] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 296.508738][ T1158] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 296.526565][ T1158] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.551822][ T1158] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 296.567039][ T1158] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.580099][ T1158] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 296.613499][ T1158] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.622239][ T1158] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 296.640233][ T1158] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.087180][T11328] tipc: Enabling of bearer rejected, failed to enable media [ 297.688145][T11373] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 298.111636][T11396] __nla_validate_parse: 10 callbacks suppressed [ 298.111658][T11396] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1402'. [ 298.132887][T11397] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1402'. [ 298.148888][T11397] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1402'. [ 298.166049][T11397] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1402'. [ 298.180333][T11397] netlink: 540 bytes leftover after parsing attributes in process `syz.3.1402'. [ 298.192243][T11400] netlink: 'syz.3.1402': attribute type 10 has an invalid length. [ 298.520525][T11420] netlink: 176 bytes leftover after parsing attributes in process `syz.3.1407'. [ 298.647903][T11425] netlink: 'syz.2.1410': attribute type 1 has an invalid length. [ 298.789417][T11429] bond8: (slave vxcan3): The slave device specified does not support setting the MAC address [ 298.805156][T11429] bond8: (slave vxcan3): Error -95 calling set_mac_address [ 298.871362][T11431] macvlan3: entered promiscuous mode [ 298.880182][T11431] macvlan3: entered allmulticast mode [ 298.888005][T11431] bond8: entered promiscuous mode [ 298.894020][T11431] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 298.908665][T11431] bond8: left promiscuous mode [ 298.940925][T11432] veth1_macvtap: left promiscuous mode [ 298.947043][T11432] macsec0: entered promiscuous mode [ 298.952404][T11432] macsec0: entered allmulticast mode [ 298.995292][T11437] veth1_macvtap: entered promiscuous mode [ 299.001187][T11437] veth1_macvtap: entered allmulticast mode [ 299.009449][T11437] macsec0: left promiscuous mode [ 299.014989][T11437] macsec0: left allmulticast mode [ 299.034418][T11437] veth1_macvtap: left allmulticast mode [ 299.071522][T11443] tipc: Enabling of bearer rejected, failed to enable media [ 299.128667][T11448] (unnamed net_device) (uninitialized): option ad_select: invalid value (34) [ 299.254699][T11452] netlink: 'syz.2.1417': attribute type 1 has an invalid length. [ 299.471494][T11443] syzkaller0: entered promiscuous mode [ 299.477869][T11443] syzkaller0: entered allmulticast mode [ 299.518923][T11467] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1420'. [ 299.777655][T11481] netlink: 'syz.2.1425': attribute type 1 has an invalid length. [ 300.009313][T11490] bond9: (slave vxcan3): The slave device specified does not support setting the MAC address [ 300.021860][T11490] bond9: (slave vxcan3): Error -95 calling set_mac_address [ 300.154406][T11493] veth5: entered promiscuous mode [ 300.222866][T11488] veth7: entered promiscuous mode [ 300.238780][T11481] macvlan3: entered promiscuous mode [ 300.245525][T11505] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1431'. [ 300.259983][T11481] macvlan3: entered allmulticast mode [ 300.267010][T11481] bond9: entered promiscuous mode [ 300.274768][T11481] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 300.291336][T11481] bond9: left promiscuous mode [ 300.391909][T11509] bridge7: entered allmulticast mode [ 300.439083][T11517] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1432'. [ 300.456965][T11517] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1432'. [ 300.701149][T11531] tap0: tun_chr_ioctl cmd 1074025677 [ 300.706941][T11531] tap0: linktype set to 516 [ 300.737016][T11531] tap0: tun_chr_ioctl cmd 1074025677 [ 300.744554][T11531] tap0: linktype set to 540 [ 300.799997][T11537] bridge_slave_1: left allmulticast mode [ 300.806082][T11537] bridge_slave_1: left promiscuous mode [ 300.812048][T11537] bridge0: port 2(bridge_slave_1) entered disabled state [ 300.845299][T11537] bridge_slave_0: left allmulticast mode [ 300.866972][T11537] bridge_slave_0: left promiscuous mode [ 300.884897][T11537] bridge0: port 1(bridge_slave_0) entered disabled state [ 300.931962][T11537] vlan3 (unregistering): left promiscuous mode [ 300.950983][T11537] bridge1: port 1(vlan3) entered disabled state [ 302.014096][T11583] tipc: Enabled bearer , priority 0 [ 302.025298][T11584] netlink: 'syz.1.1450': attribute type 74 has an invalid length. [ 302.042061][T11583] syzkaller0: entered promiscuous mode [ 302.049544][T11584] netlink: 'syz.1.1450': attribute type 1 has an invalid length. [ 302.053279][T11583] syzkaller0: entered allmulticast mode [ 302.134953][T11584] bond0: entered promiscuous mode [ 302.140953][T11584] 8021q: adding VLAN 0 to HW filter on device bond0 [ 302.187688][T11587] batadv1: entered promiscuous mode [ 302.206199][T11587] batadv1: entered allmulticast mode [ 302.215704][T11587] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 302.225108][T11587] bond0: (slave batadv1): making interface the new active one [ 302.235864][T11587] bond0: (slave batadv1): Enslaving as an active interface with an up link [ 302.412362][T11579] tipc: Resetting bearer [ 302.487170][T11579] tipc: Disabling bearer [ 302.726489][T11615] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 302.754247][T11600] bond0 (unregistering): Released all slaves [ 302.830713][T11603] macsec3: entered promiscuous mode [ 302.837891][T11603] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode [ 302.867264][T11618] netlink: 'syz.1.1459': attribute type 9 has an invalid length. [ 302.894083][T11603] mac80211_hwsim hwsim7 wlan1: left promiscuous mode [ 302.903871][ T51] Bluetooth: hci4: command 0x0401 tx timeout [ 302.944717][T11619] netlink: 'syz.3.1456': attribute type 10 has an invalid length. [ 302.996576][T11610] netlink: 'syz.3.1456': attribute type 10 has an invalid length. [ 303.093699][T11619] team0: Device 0! failed to register rx_handler [ 303.157404][T11621] _ÐZ`Ô€@: entered promiscuous mode [ 303.173670][T11628] __nla_validate_parse: 13 callbacks suppressed [ 303.173690][T11628] netlink: 27 bytes leftover after parsing attributes in process `syz.0.1461'. [ 303.344352][T11636] netlink: 'syz.1.1464': attribute type 13 has an invalid length. [ 303.362775][T11636] netlink: 'syz.1.1464': attribute type 17 has an invalid length. [ 303.407990][T11628] netlink: 248 bytes leftover after parsing attributes in process `syz.0.1461'. [ 303.511238][T11634] syzkaller0: entered promiscuous mode [ 303.520903][T11634] syzkaller0: entered allmulticast mode [ 303.575107][T11636] gretap0: refused to change device tx_queue_len [ 303.596094][T11636] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 305.612317][T11659] tipc: Enabling of bearer rejected, failed to enable media [ 305.828120][T11679] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1471'. [ 306.084091][T11701] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1477'. [ 306.093464][T11701] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 306.241686][T11704] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1478'. [ 306.252758][T11706] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1480'. [ 306.298156][T11707] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1478'. [ 306.439437][T11720] netlink: 644 bytes leftover after parsing attributes in process `syz.4.1482'. [ 306.468182][T11718] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1483'. [ 306.500128][T11720] netlink: 644 bytes leftover after parsing attributes in process `syz.4.1482'. [ 307.080642][T11725] infiniband syz0: set active [ 307.104843][T11725] infiniband syz0: added veth0_vlan [ 307.128240][T11741] sctp: [Deprecated]: syz.4.1489 (pid 11741) Use of struct sctp_assoc_value in delayed_ack socket option. [ 307.128240][T11741] Use struct sctp_sack_info instead [ 307.184236][T11741] netlink: 'syz.4.1489': attribute type 23 has an invalid length. [ 307.234903][T11725] RDS/IB: syz0: added [ 307.240326][T11725] smc: adding ib device syz0 with port count 1 [ 307.247296][T11725] smc: ib device syz0 port 1 has no pnetid [ 308.460707][T11771] __nla_validate_parse: 3 callbacks suppressed [ 308.460730][T11771] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1497'. [ 308.899043][T11783] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1499'. [ 309.085516][T11792] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1501'. [ 309.119694][T11792] netlink: 'syz.3.1501': attribute type 21 has an invalid length. [ 309.132021][T11792] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1501'. [ 309.151639][T11792] netlink: 'syz.3.1501': attribute type 21 has an invalid length. [ 309.171772][T11792] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1501'. [ 309.703282][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 310.270921][T11822] IPv6: addrconf: prefix option has invalid lifetime [ 310.393405][T11828] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1512'. [ 310.646941][T11835] tipc: Enabled bearer , priority 0 [ 310.654729][T11835] syzkaller0: entered promiscuous mode [ 310.660239][T11835] syzkaller0: entered allmulticast mode [ 310.685408][T11841] lo speed is unknown, defaulting to 1000 [ 310.718777][T11841] lo speed is unknown, defaulting to 1000 [ 310.784938][T11841] lo speed is unknown, defaulting to 1000 [ 310.832574][T11845] tipc: Resetting bearer [ 310.896006][T11843] netlink: 'syz.2.1515': attribute type 4 has an invalid length. [ 310.959251][T11833] tipc: Resetting bearer [ 310.959962][T11841] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 311.062793][T11833] tipc: Disabling bearer [ 311.142530][T11841] lo speed is unknown, defaulting to 1000 [ 311.277315][T11841] lo speed is unknown, defaulting to 1000 [ 311.300384][T11841] lo speed is unknown, defaulting to 1000 [ 311.344696][T11841] lo speed is unknown, defaulting to 1000 [ 311.365171][T11841] lo speed is unknown, defaulting to 1000 [ 311.657634][T11880] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1526'. [ 311.706296][ T1335] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 311.734109][ T1335] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 311.762886][ T1335] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 311.793958][ T1335] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 311.857273][T11890] netlink: 'syz.1.1528': attribute type 6 has an invalid length. [ 312.055160][T11901] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.1529'. [ 312.166055][ T30] audit: type=1800 audit(1757276938.758:5): pid=11895 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1527" name="memory.events" dev="tmpfs" ino=1443 res=0 errno=0 [ 312.625881][T11923] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1534'. [ 314.166195][T11928] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1536'. [ 314.214082][T11928] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1536'. [ 314.548142][T11890] lo speed is unknown, defaulting to 1000 [ 314.612880][T11954] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1544'. [ 314.988354][T11965] netlink: 'syz.4.1543': attribute type 1 has an invalid length. [ 315.020455][T11965] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 315.202421][T11968] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1546'. [ 315.223727][T11968] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1546'. [ 315.351032][T11970] smc: net device bond0 applied user defined pnetid SYZ2 [ 315.528469][T11981] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1549'. [ 315.637975][T11986] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1552'. [ 315.652372][T11986] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1552'. [ 315.662841][T11986] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1552'. [ 315.769830][T11993] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1555'. [ 315.812235][T11995] netlink: 'syz.3.1556': attribute type 1 has an invalid length. [ 315.868857][T11995] bond12: (slave vxcan1): The slave device specified does not support setting the MAC address [ 315.880190][T11998] netlink: zone id is out of range [ 315.881556][T11995] bond12: (slave vxcan1): Error -95 calling set_mac_address [ 315.887584][T11998] netlink: zone id is out of range [ 315.902634][T11998] netlink: zone id is out of range [ 315.908069][T11998] netlink: get zone limit has 8 unknown bytes [ 315.962103][T11999] macvlan0: entered promiscuous mode [ 315.968229][T11999] macvlan0: entered allmulticast mode [ 315.975818][T11999] bond12: entered promiscuous mode [ 315.982654][T11999] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 315.992634][T12002] sctp: [Deprecated]: syz.0.1557 (pid 12002) Use of struct sctp_assoc_value in delayed_ack socket option. [ 315.992634][T12002] Use struct sctp_sack_info instead [ 316.012109][T11999] bond12: left promiscuous mode [ 316.052375][T12002] bridge0: entered promiscuous mode [ 316.058081][T12002] bridge0: entered allmulticast mode [ 316.768211][T12035] netlink: 'syz.1.1566': attribute type 101 has an invalid length. [ 316.798809][T12035] netlink: 'syz.1.1566': attribute type 7 has an invalid length. [ 316.860144][T12029] bridge0: failed insert local address into bridge forwarding table [ 316.997914][T12050] FAULT_INJECTION: forcing a failure. [ 316.997914][T12050] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 317.019123][T12050] CPU: 1 UID: 0 PID: 12050 Comm: syz.4.1572 Not tainted syzkaller #0 PREEMPT(full) [ 317.019167][T12050] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 317.019197][T12050] Call Trace: [ 317.019206][T12050] [ 317.019216][T12050] dump_stack_lvl+0x189/0x250 [ 317.019247][T12050] ? __pfx____ratelimit+0x10/0x10 [ 317.019270][T12050] ? __pfx_dump_stack_lvl+0x10/0x10 [ 317.019295][T12050] ? __pfx__printk+0x10/0x10 [ 317.019337][T12050] should_fail_ex+0x414/0x560 [ 317.019372][T12050] _copy_to_user+0x31/0xb0 [ 317.019400][T12050] simple_read_from_buffer+0xe1/0x170 [ 317.019436][T12050] proc_fail_nth_read+0x1b3/0x220 [ 317.019464][T12050] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 317.019492][T12050] ? rw_verify_area+0x2a6/0x4d0 [ 317.019517][T12050] ? __lock_acquire+0xab9/0xd20 [ 317.019546][T12050] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 317.019578][T12050] vfs_read+0x200/0xa30 [ 317.019603][T12050] ? fdget_pos+0x247/0x320 [ 317.019626][T12050] ? __pfx___mutex_lock+0x10/0x10 [ 317.019650][T12050] ? __pfx_vfs_read+0x10/0x10 [ 317.019679][T12050] ? __fget_files+0x2a/0x420 [ 317.019702][T12050] ? __fget_files+0x3a0/0x420 [ 317.019719][T12050] ? __fget_files+0x2a/0x420 [ 317.019748][T12050] ksys_read+0x145/0x250 [ 317.019779][T12050] ? __pfx_ksys_read+0x10/0x10 [ 317.019802][T12050] ? fput+0xa0/0xd0 [ 317.019828][T12050] ? do_syscall_64+0xbe/0x3b0 [ 317.019855][T12050] do_syscall_64+0xfa/0x3b0 [ 317.019876][T12050] ? lockdep_hardirqs_on+0x9c/0x150 [ 317.019897][T12050] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 317.019918][T12050] ? clear_bhb_loop+0x60/0xb0 [ 317.019944][T12050] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 317.019963][T12050] RIP: 0033:0x7f7c0158d5fc [ 317.019982][T12050] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 317.020000][T12050] RSP: 002b:00007f7c0241f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 317.020022][T12050] RAX: ffffffffffffffda RBX: 00007f7c017c5fa0 RCX: 00007f7c0158d5fc [ 317.020037][T12050] RDX: 000000000000000f RSI: 00007f7c0241f0a0 RDI: 0000000000000004 [ 317.020050][T12050] RBP: 00007f7c0241f090 R08: 0000000000000000 R09: 0000000000000000 [ 317.020063][T12050] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 317.020075][T12050] R13: 00007f7c017c6038 R14: 00007f7c017c5fa0 R15: 00007ffe5df84b78 [ 317.020109][T12050] [ 317.345983][T12054] block nbd0: NBD_DISCONNECT [ 317.351675][T12054] block nbd0: Send disconnect failed -32 [ 317.365554][T12054] block nbd0: shutting down sockets [ 317.851677][T12090] FAULT_INJECTION: forcing a failure. [ 317.851677][T12090] name failslab, interval 1, probability 0, space 0, times 0 [ 317.865189][T12090] CPU: 1 UID: 0 PID: 12090 Comm: syz.4.1581 Not tainted syzkaller #0 PREEMPT(full) [ 317.865218][T12090] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 317.865232][T12090] Call Trace: [ 317.865240][T12090] [ 317.865249][T12090] dump_stack_lvl+0x189/0x250 [ 317.865279][T12090] ? __pfx____ratelimit+0x10/0x10 [ 317.865302][T12090] ? __pfx_dump_stack_lvl+0x10/0x10 [ 317.865327][T12090] ? __pfx__printk+0x10/0x10 [ 317.865362][T12090] ? __pfx___might_resched+0x10/0x10 [ 317.865387][T12090] should_fail_ex+0x414/0x560 [ 317.865420][T12090] should_failslab+0xa8/0x100 [ 317.865461][T12090] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 317.865490][T12090] ? __alloc_skb+0x112/0x2d0 [ 317.865516][T12090] __alloc_skb+0x112/0x2d0 [ 317.865542][T12090] netlink_sendmsg+0x5c6/0xb30 [ 317.865574][T12090] ? __pfx_netlink_sendmsg+0x10/0x10 [ 317.865600][T12090] ? aa_sock_msg_perm+0xf1/0x1d0 [ 317.865622][T12090] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 317.865645][T12090] ? __pfx_netlink_sendmsg+0x10/0x10 [ 317.865668][T12090] __sock_sendmsg+0x21c/0x270 [ 317.865701][T12090] ____sys_sendmsg+0x505/0x830 [ 317.865732][T12090] ? __pfx_____sys_sendmsg+0x10/0x10 [ 317.865767][T12090] ? import_iovec+0x74/0xa0 [ 317.865796][T12090] ___sys_sendmsg+0x21f/0x2a0 [ 317.865823][T12090] ? __pfx____sys_sendmsg+0x10/0x10 [ 317.865886][T12090] ? __fget_files+0x2a/0x420 [ 317.865904][T12090] ? __fget_files+0x3a0/0x420 [ 317.865934][T12090] __x64_sys_sendmsg+0x19b/0x260 [ 317.865962][T12090] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 317.865997][T12090] ? __pfx_ksys_write+0x10/0x10 [ 317.866021][T12090] ? rcu_is_watching+0x15/0xb0 [ 317.866049][T12090] ? do_syscall_64+0xbe/0x3b0 [ 317.866075][T12090] do_syscall_64+0xfa/0x3b0 [ 317.866097][T12090] ? lockdep_hardirqs_on+0x9c/0x150 [ 317.866118][T12090] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 317.866139][T12090] ? clear_bhb_loop+0x60/0xb0 [ 317.866164][T12090] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 317.866184][T12090] RIP: 0033:0x7f7c0158ebe9 [ 317.866203][T12090] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 317.866221][T12090] RSP: 002b:00007f7c0241f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 317.866243][T12090] RAX: ffffffffffffffda RBX: 00007f7c017c5fa0 RCX: 00007f7c0158ebe9 [ 317.866258][T12090] RDX: 0000000000000880 RSI: 0000200000001ac0 RDI: 0000000000000004 [ 317.866272][T12090] RBP: 00007f7c0241f090 R08: 0000000000000000 R09: 0000000000000000 [ 317.866285][T12090] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 317.866297][T12090] R13: 00007f7c017c6038 R14: 00007f7c017c5fa0 R15: 00007ffe5df84b78 [ 317.866330][T12090] [ 318.246753][T12093] sctp: [Deprecated]: syz.1.1582 (pid 12093) Use of struct sctp_assoc_value in delayed_ack socket option. [ 318.246753][T12093] Use struct sctp_sack_info instead [ 318.423941][T12113] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 318.747274][T12122] bond10: entered promiscuous mode [ 318.823783][T12122] 8021q: adding VLAN 0 to HW filter on device bond10 [ 319.630567][T12159] lo speed is unknown, defaulting to 1000 [ 319.691217][T12173] netlink: 'syz.4.1603': attribute type 1 has an invalid length. [ 319.717440][T12173] __nla_validate_parse: 8 callbacks suppressed [ 319.717461][T12173] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1603'. [ 320.029807][T12189] tipc: Enabled bearer , priority 0 [ 320.127541][T12189] syzkaller0: entered promiscuous mode [ 320.138780][T12189] syzkaller0: entered allmulticast mode [ 320.330838][T12189] tipc: Resetting bearer [ 320.365124][T12204] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1607'. [ 320.416696][T12188] tipc: Resetting bearer [ 320.509734][T12217] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1615'. [ 320.524309][T12188] tipc: Disabling bearer [ 320.638102][T12222] (unnamed net_device) (uninitialized): option ad_user_port_key: mode dependency failed, not supported in mode active-backup(1) [ 321.222614][T12244] netlink: 88 bytes leftover after parsing attributes in process `syz.1.1623'. [ 321.232307][T12247] netlink: 'syz.2.1624': attribute type 21 has an invalid length. [ 321.240354][T12247] netlink: 'syz.2.1624': attribute type 1 has an invalid length. [ 321.273822][T12247] netlink: 144 bytes leftover after parsing attributes in process `syz.2.1624'. [ 321.304705][T12244] syzkaller0: entered promiscuous mode [ 321.310239][T12244] syzkaller0: entered allmulticast mode [ 321.936878][T12269] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 321.993961][T12238] lo speed is unknown, defaulting to 1000 [ 322.092007][T12273] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1631'. [ 322.509045][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.518213][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 322.589081][T12285] netlink: 'syz.2.1633': attribute type 4 has an invalid length. [ 322.696440][T12252] lo speed is unknown, defaulting to 1000 [ 323.664335][T12315] netlink: 'syz.2.1640': attribute type 27 has an invalid length. [ 323.749190][T12321] netlink: 'syz.2.1640': attribute type 27 has an invalid length. [ 323.763694][T12323] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1641'. [ 323.882186][T12327] IPVS: set_ctl: invalid protocol: 94 255.255.255.255:20001 [ 324.008388][T12332] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1644'. [ 324.230928][T12343] tipc: New replicast peer: 255.255.255.255 [ 324.253224][T12343] tipc: Enabled bearer , priority 10 [ 324.400149][T12348] netlink: 240 bytes leftover after parsing attributes in process `syz.2.1643'. [ 324.482206][T12352] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1649'. [ 324.496895][T12352] netlink: 'syz.4.1649': attribute type 1 has an invalid length. [ 324.855057][T12369] __nla_validate_parse: 2 callbacks suppressed [ 324.855078][T12369] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1654'. [ 324.892430][T12367] dvmrp1: tun_chr_ioctl cmd 1074025677 [ 324.899266][T12371] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1651'. [ 324.910428][T12367] dvmrp1: linktype set to 768 [ 325.012925][T12378] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1657'. [ 325.023614][T12378] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1657'. [ 325.032821][T12378] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1657'. [ 325.044274][T12378] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1657'. [ 325.053700][T12378] netlink: 5 bytes leftover after parsing attributes in process `syz.2.1657'. [ 325.363358][ T5934] tipc: Node number set to 414630015 [ 325.419704][T12396] ip6tnl2: entered allmulticast mode [ 325.497414][T12400] C: renamed from team_slave_0 (while UP) [ 325.525952][T12400] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1661'. [ 325.572174][T12399] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1662'. [ 325.583658][T12399] nbd: must specify an index to disconnect [ 325.591418][T12399] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1662'. [ 326.394822][T12441] netlink: 'syz.4.1674': attribute type 21 has an invalid length. [ 326.410634][T12441] ipvlan0: entered promiscuous mode [ 326.417315][T12441] bridge0: port 1(ipvlan0) entered blocking state [ 326.424182][T12441] bridge0: port 1(ipvlan0) entered disabled state [ 326.431000][T12441] ipvlan0: entered allmulticast mode [ 326.436507][T12441] gretap0: entered allmulticast mode [ 326.444691][T12441] ipvlan0: left allmulticast mode [ 326.449786][T12441] gretap0: left allmulticast mode [ 326.995090][T12462] netlink: 'syz.1.1682': attribute type 9 has an invalid length. [ 327.628415][T12503] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 327.858566][T12512] netlink: 'syz.3.1696': attribute type 4 has an invalid length. [ 327.912922][T12516] netlink: 'syz.3.1696': attribute type 4 has an invalid length. [ 328.228342][T12510] lo speed is unknown, defaulting to 1000 [ 328.951290][T12557] netlink: 'syz.1.1710': attribute type 1 has an invalid length. [ 329.170527][T12566] tipc: Invalid UDP bearer configuration [ 329.170658][T12566] tipc: Enabling of bearer rejected, failed to enable media [ 329.265296][T12557] bond5: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 329.284608][T12570] dummy0: entered allmulticast mode [ 329.329488][T12564] veth9: entered promiscuous mode [ 329.359398][T12564] bond5: (slave veth9): Enslaving as a backup interface with a down link [ 329.686864][T12594] netlink: 'syz.4.1722': attribute type 23 has an invalid length. [ 329.807350][T12601] netlink: 'syz.3.1725': attribute type 12 has an invalid length. [ 330.238968][T12614] netlink: 'syz.4.1729': attribute type 1 has an invalid length. [ 330.505994][T12624] nbd3: detected capacity change from 0 to 63 [ 330.520289][T12628] nbd: nbd3 already in use [ 330.566675][T12633] block nbd3: NBD_DISCONNECT [ 330.582254][T12633] block nbd3: Disconnected due to user request. [ 330.623296][T12633] block nbd3: shutting down sockets [ 330.713337][T12592] lo speed is unknown, defaulting to 1000 [ 330.871777][T12645] netlink: 'syz.0.1736': attribute type 1 has an invalid length. [ 330.885340][T12650] __nla_validate_parse: 16 callbacks suppressed [ 330.885362][T12650] netlink: 176 bytes leftover after parsing attributes in process `syz.4.1737'. [ 331.108328][T12658] openvswitch: netlink: Duplicate or invalid key (type 0). [ 331.141373][T12658] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 331.180734][T12660] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 331.272812][T12666] IPVS: Scheduler module ip_vs_sip not found [ 331.505838][T12667] tipc: New replicast peer: 255.255.255.255 [ 331.512229][T12667] tipc: Enabled bearer , priority 10 [ 331.679889][T12681] tipc: Enabled bearer , priority 0 [ 331.705655][T12681] syzkaller0: entered promiscuous mode [ 331.711187][T12681] syzkaller0: entered allmulticast mode [ 331.754425][T12681] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 331.754927][T12685] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1749'. [ 331.839255][T12681] tipc: Resetting bearer [ 331.881286][T12680] tipc: Resetting bearer [ 331.948615][T12680] tipc: Disabling bearer [ 331.983567][T12696] netlink: 'syz.1.1753': attribute type 2 has an invalid length. [ 332.017134][T12700] block nbd1: Unsupported socket: shutdown callout must be supported. [ 332.055029][T12696] þ: entered promiscuous mode [ 332.113961][T12703] (unnamed net_device) (uninitialized): option min_links: invalid value (18446744073709551612) [ 332.144499][T12707] netlink: 84 bytes leftover after parsing attributes in process `syz.2.1757'. [ 332.157928][T12703] (unnamed net_device) (uninitialized): option min_links: allowed values 0 - 2147483647 [ 332.229593][T12713] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1760'. [ 332.418609][T12726] netlink: 'syz.4.1762': attribute type 3 has an invalid length. [ 332.478150][T12733] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1763'. [ 332.497326][T12733] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1763'. [ 332.789154][ T5868] tipc: Node number set to 3872791908 [ 332.860990][T12749] openvswitch: netlink: Missing key (keys=44, expected=200000) [ 332.962466][T12753] netlink: 'syz.4.1767': attribute type 1 has an invalid length. [ 333.029546][T12753] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1767'. [ 333.613833][T12773] bridge0: port 1(bridge_slave_0) entered disabled state [ 333.780673][T12773] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 333.797708][T12773] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 333.852112][T12773] macsec0: left promiscuous mode [ 333.857986][T12773] macsec0: left allmulticast mode [ 333.888004][T12773] mac80211_hwsim hwsim5 wlan0: left promiscuous mode [ 333.897948][T12773] gretap1: left promiscuous mode [ 333.905089][T12773] macsec1: left promiscuous mode [ 333.910111][T12773] macsec1: left allmulticast mode [ 333.915851][T12773] vxcan2: left promiscuous mode [ 333.920739][T12773] vxcan2: left allmulticast mode [ 333.952238][T12773] bond8: left promiscuous mode [ 333.960563][T12773] bond8: left allmulticast mode [ 333.983489][T12773] !: left allmulticast mode [ 333.989229][T12773] macvtap1: left promiscuous mode [ 333.994816][T12773] macvtap1: left allmulticast mode [ 334.013791][T12773] sit1: left allmulticast mode [ 334.043694][ T36] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 334.052338][ T36] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.075289][ T36] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 334.111887][ T36] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.120575][ T36] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 334.129171][ T36] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.143198][ T36] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 334.167990][ T36] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.702966][T12830] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1787'. [ 334.970915][T12830] bridge_slave_1: left allmulticast mode [ 335.000250][T12830] bridge_slave_1: left promiscuous mode [ 335.018137][T12830] bridge0: port 2(bridge_slave_1) entered disabled state [ 335.058051][T12830] bridge_slave_0: left allmulticast mode [ 335.085526][T12830] bridge_slave_0: left promiscuous mode [ 335.102272][T12830] bridge0: port 1(bridge_slave_0) entered disabled state [ 335.216248][T12799] lo speed is unknown, defaulting to 1000 [ 335.706575][T12850] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1793'. [ 335.856978][T12858] tipc: Enabled bearer , priority 0 [ 335.867569][T12858] syzkaller0: entered promiscuous mode [ 335.875950][T12858] syzkaller0: entered allmulticast mode [ 335.965781][T12858] tipc: Resetting bearer [ 335.991449][T12857] tipc: Resetting bearer [ 336.030988][T12857] tipc: Disabling bearer [ 336.097614][T12843] lo speed is unknown, defaulting to 1000 [ 336.119850][T12841] lo speed is unknown, defaulting to 1000 [ 336.221284][T12864] FAULT_INJECTION: forcing a failure. [ 336.221284][T12864] name failslab, interval 1, probability 0, space 0, times 0 [ 336.245987][T12864] CPU: 1 UID: 0 PID: 12864 Comm: syz.3.1796 Not tainted syzkaller #0 PREEMPT(full) [ 336.246024][T12864] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 336.246037][T12864] Call Trace: [ 336.246045][T12864] [ 336.246054][T12864] dump_stack_lvl+0x189/0x250 [ 336.246086][T12864] ? __pfx____ratelimit+0x10/0x10 [ 336.246108][T12864] ? __pfx_dump_stack_lvl+0x10/0x10 [ 336.246133][T12864] ? __pfx__printk+0x10/0x10 [ 336.246168][T12864] ? __pfx___might_resched+0x10/0x10 [ 336.246193][T12864] should_fail_ex+0x414/0x560 [ 336.246227][T12864] should_failslab+0xa8/0x100 [ 336.246259][T12864] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 336.246288][T12864] ? __alloc_skb+0x112/0x2d0 [ 336.246315][T12864] __alloc_skb+0x112/0x2d0 [ 336.246341][T12864] netlink_sendmsg+0x5c6/0xb30 [ 336.246375][T12864] ? __pfx_netlink_sendmsg+0x10/0x10 [ 336.246401][T12864] ? aa_sock_msg_perm+0xf1/0x1d0 [ 336.246423][T12864] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 336.246446][T12864] ? __pfx_netlink_sendmsg+0x10/0x10 [ 336.246469][T12864] __sock_sendmsg+0x21c/0x270 [ 336.246503][T12864] ____sys_sendmsg+0x505/0x830 [ 336.246535][T12864] ? __pfx_____sys_sendmsg+0x10/0x10 [ 336.246570][T12864] ? import_iovec+0x74/0xa0 [ 336.246598][T12864] ___sys_sendmsg+0x21f/0x2a0 [ 336.246626][T12864] ? __pfx____sys_sendmsg+0x10/0x10 [ 336.246692][T12864] ? __fget_files+0x2a/0x420 [ 336.246709][T12864] ? __fget_files+0x3a0/0x420 [ 336.246739][T12864] __x64_sys_sendmsg+0x19b/0x260 [ 336.246768][T12864] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 336.246804][T12864] ? __pfx_ksys_write+0x10/0x10 [ 336.246829][T12864] ? rcu_is_watching+0x15/0xb0 [ 336.246856][T12864] ? do_syscall_64+0xbe/0x3b0 [ 336.246883][T12864] do_syscall_64+0xfa/0x3b0 [ 336.246905][T12864] ? lockdep_hardirqs_on+0x9c/0x150 [ 336.246925][T12864] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 336.246945][T12864] ? clear_bhb_loop+0x60/0xb0 [ 336.246971][T12864] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 336.246995][T12864] RIP: 0033:0x7f007b78ebe9 [ 336.247014][T12864] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 336.247037][T12864] RSP: 002b:00007f007c603038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 336.247059][T12864] RAX: ffffffffffffffda RBX: 00007f007b9c5fa0 RCX: 00007f007b78ebe9 [ 336.247074][T12864] RDX: 0000000000004000 RSI: 0000200000000000 RDI: 0000000000000003 [ 336.247087][T12864] RBP: 00007f007c603090 R08: 0000000000000000 R09: 0000000000000000 [ 336.247100][T12864] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 336.247111][T12864] R13: 00007f007b9c6038 R14: 00007f007b9c5fa0 R15: 00007ffdc245e5a8 [ 336.247145][T12864] [ 336.672971][T12867] tipc: Enabled bearer , priority 0 [ 336.687992][T12867] syzkaller0: entered promiscuous mode [ 336.694108][T12867] syzkaller0: entered allmulticast mode [ 336.732177][T12867] tipc: Resetting bearer [ 336.763393][T12866] tipc: Resetting bearer [ 336.819987][T12869] netlink: 248 bytes leftover after parsing attributes in process `syz.0.1798'. [ 336.820176][T12866] tipc: Disabling bearer [ 337.246975][T12887] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1802'. [ 337.281032][T12888] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1802'. [ 337.356815][T12892] geneve2: entered promiscuous mode [ 337.371235][T12892] geneve2: entered allmulticast mode [ 337.384939][ T49] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 19999 - 0 [ 337.404518][ T49] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 19999 - 0 [ 337.459938][ T49] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 19999 - 0 [ 337.549222][ T49] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 19999 - 0 [ 337.733841][T12900] netlink: 'syz.3.1805': attribute type 1 has an invalid length. [ 337.759224][T12900] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1805'. [ 337.856203][T12900] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1805'. [ 337.933418][T12908] netlink: 'syz.2.1807': attribute type 12 has an invalid length. [ 337.962495][T12911] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1809'. [ 338.055916][T12914] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1809'. [ 338.287346][T12906] lo speed is unknown, defaulting to 1000 [ 338.794527][T12942] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1819'. [ 338.911326][T12944] netlink: 312 bytes leftover after parsing attributes in process `syz.4.1818'. [ 339.299035][T12959] !: renamed from dummy0 (while UP) [ 339.715752][T12971] netlink: 'syz.0.1827': attribute type 13 has an invalid length. [ 339.727809][T12971] netlink: 'syz.0.1827': attribute type 17 has an invalid length. [ 339.801029][T12968] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1828'. [ 339.807174][T12971] sit0: left promiscuous mode [ 339.817939][T12968] Couldn't find request waiting for DGID: 0000:0000:0000:0000:0000:0000:0000:0000 [ 339.875514][T12971] 8021q: adding VLAN 0 to HW filter on device team0 [ 339.888237][T12971] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 339.905227][T12921] lo speed is unknown, defaulting to 1000 [ 339.975198][T12930] lo speed is unknown, defaulting to 1000 [ 340.038838][T12918] lo speed is unknown, defaulting to 1000 [ 340.838654][T12972] lo speed is unknown, defaulting to 1000 [ 340.893527][T12959] lo speed is unknown, defaulting to 1000 [ 340.923769][T12984] FAULT_INJECTION: forcing a failure. [ 340.923769][T12984] name failslab, interval 1, probability 0, space 0, times 0 [ 340.942862][T12984] CPU: 0 UID: 0 PID: 12984 Comm: syz.0.1831 Not tainted syzkaller #0 PREEMPT(full) [ 340.942900][T12984] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 340.942914][T12984] Call Trace: [ 340.942923][T12984] [ 340.942932][T12984] dump_stack_lvl+0x189/0x250 [ 340.942963][T12984] ? __pfx____ratelimit+0x10/0x10 [ 340.942986][T12984] ? __pfx_dump_stack_lvl+0x10/0x10 [ 340.943015][T12984] ? __pfx__printk+0x10/0x10 [ 340.943045][T12984] ? __lock_acquire+0xab9/0xd20 [ 340.943085][T12984] should_fail_ex+0x414/0x560 [ 340.943117][T12984] should_failslab+0xa8/0x100 [ 340.943149][T12984] kmem_cache_alloc_noprof+0x73/0x3c0 [ 340.943176][T12984] ? skb_clone+0x212/0x3a0 [ 340.943206][T12984] skb_clone+0x212/0x3a0 [ 340.943236][T12984] __netlink_deliver_tap+0x404/0x850 [ 340.943271][T12984] ? netlink_deliver_tap+0x2e/0x1b0 [ 340.943294][T12984] netlink_deliver_tap+0x19c/0x1b0 [ 340.943317][T12984] netlink_unicast+0x7fa/0x9e0 [ 340.943358][T12984] ? __pfx_netlink_unicast+0x10/0x10 [ 340.943391][T12984] ? netlink_sendmsg+0x642/0xb30 [ 340.943410][T12984] ? skb_put+0x11b/0x210 [ 340.943436][T12984] netlink_sendmsg+0x805/0xb30 [ 340.943470][T12984] ? __pfx_netlink_sendmsg+0x10/0x10 [ 340.943496][T12984] ? aa_sock_msg_perm+0xf1/0x1d0 [ 340.943518][T12984] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 340.943541][T12984] ? __pfx_netlink_sendmsg+0x10/0x10 [ 340.943565][T12984] __sock_sendmsg+0x21c/0x270 [ 340.943598][T12984] ____sys_sendmsg+0x505/0x830 [ 340.943630][T12984] ? __pfx_____sys_sendmsg+0x10/0x10 [ 340.943665][T12984] ? import_iovec+0x74/0xa0 [ 340.943694][T12984] ___sys_sendmsg+0x21f/0x2a0 [ 340.943730][T12984] ? __pfx____sys_sendmsg+0x10/0x10 [ 340.943796][T12984] ? __fget_files+0x2a/0x420 [ 340.943813][T12984] ? __fget_files+0x3a0/0x420 [ 340.943843][T12984] __x64_sys_sendmsg+0x19b/0x260 [ 340.943872][T12984] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 340.943909][T12984] ? __pfx_ksys_write+0x10/0x10 [ 340.943934][T12984] ? rcu_is_watching+0x15/0xb0 [ 340.943960][T12984] ? do_syscall_64+0xbe/0x3b0 [ 340.943988][T12984] do_syscall_64+0xfa/0x3b0 [ 340.944010][T12984] ? lockdep_hardirqs_on+0x9c/0x150 [ 340.944031][T12984] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 340.944051][T12984] ? clear_bhb_loop+0x60/0xb0 [ 340.944077][T12984] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 340.944096][T12984] RIP: 0033:0x7f532cf8ebe9 [ 340.944115][T12984] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 340.944133][T12984] RSP: 002b:00007f532de4c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 340.944154][T12984] RAX: ffffffffffffffda RBX: 00007f532d1c5fa0 RCX: 00007f532cf8ebe9 [ 340.944170][T12984] RDX: 0000000000004000 RSI: 0000200000000000 RDI: 0000000000000003 [ 340.944183][T12984] RBP: 00007f532de4c090 R08: 0000000000000000 R09: 0000000000000000 [ 340.944196][T12984] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 340.944208][T12984] R13: 00007f532d1c6038 R14: 00007f532d1c5fa0 R15: 00007ffd0696a588 [ 340.944242][T12984] [ 341.926135][ T49] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 19999 - 0 [ 341.968056][ T49] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 19999 - 0 [ 341.984395][ T49] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 19999 - 0 [ 342.003351][ T1335] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 19999 - 0 [ 342.251682][T12999] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1835'. [ 342.371045][T13005] netlink: 'syz.1.1837': attribute type 5 has an invalid length. [ 342.389133][T13005] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.1837'. [ 342.948538][T13043] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1845'. [ 343.086372][T12996] lo speed is unknown, defaulting to 1000 [ 343.150311][T13046] tipc: New replicast peer: 10.1.1.1 [ 343.161940][T13046] tipc: Enabled bearer , priority 10 [ 343.667288][T13025] lo speed is unknown, defaulting to 1000 [ 344.359818][T13063] lo speed is unknown, defaulting to 1000 [ 344.385188][T13061] lo speed is unknown, defaulting to 1000 [ 344.853682][T13098] netlink: 'syz.4.1859': attribute type 11 has an invalid length. [ 345.883741][T13137] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1870'. [ 346.686621][ T1335] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x7 [ 346.724242][T13159] netlink: 'syz.2.1874': attribute type 5 has an invalid length. [ 346.864840][T13168] syzkaller1: entered promiscuous mode [ 346.870379][T13168] syzkaller1: entered allmulticast mode [ 347.131966][T13187] netlink: 'syz.2.1882': attribute type 16 has an invalid length. [ 347.142436][T13187] netlink: 'syz.2.1882': attribute type 3 has an invalid length. [ 347.158982][T13187] netlink: 64066 bytes leftover after parsing attributes in process `syz.2.1882'. [ 347.365345][T13193] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1884'. [ 347.552898][T13206] netlink: 'syz.1.1887': attribute type 7 has an invalid length. [ 347.563229][T13206] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1887'. [ 347.668098][T13209] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1889'. [ 347.779320][T13221] syz_tun: entered allmulticast mode [ 347.946997][T13231] netlink: 'syz.1.1895': attribute type 39 has an invalid length. [ 348.028428][T13235] netlink: 'syz.3.1896': attribute type 4 has an invalid length. [ 348.048463][T13235] netlink: 'syz.3.1896': attribute type 4 has an invalid length. [ 348.330376][T13246] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 348.344030][T13245] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1900'. [ 348.438318][T13246] bond11: entered promiscuous mode [ 348.457972][T13246] bond11: entered allmulticast mode [ 348.478289][T13246] 8021q: adding VLAN 0 to HW filter on device bond11 [ 348.682226][T13274] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1906'. [ 348.927030][T13289] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1910'. [ 348.939359][T13284] tipc: Enabled bearer , priority 0 [ 348.980997][T13284] syzkaller0: entered promiscuous mode [ 348.988635][T13284] syzkaller0: entered allmulticast mode [ 349.007368][T13289] netlink: 112 bytes leftover after parsing attributes in process `syz.0.1910'. [ 349.017536][T13289] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1910'. [ 349.067226][T13297] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 349.137330][T13300] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1914'. [ 349.190079][T13301] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1914'. [ 349.241844][T13280] tipc: Resetting bearer [ 349.272391][T13280] tipc: Disabling bearer [ 349.336063][T13310] vlan2: entered promiscuous mode [ 349.341273][T13310] bond0: entered promiscuous mode [ 350.178922][T13346] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 350.465458][T13334] lo speed is unknown, defaulting to 1000 [ 350.531369][T13366] sctp: [Deprecated]: syz.1.1933 (pid 13366) Use of struct sctp_assoc_value in delayed_ack socket option. [ 350.531369][T13366] Use struct sctp_sack_info instead [ 350.821609][T13373] tipc: Enabled bearer , priority 0 [ 350.869988][T13373] syzkaller0: entered promiscuous mode [ 350.913158][T13373] syzkaller0: entered allmulticast mode [ 350.976994][T13373] tipc: Resetting bearer [ 350.987819][T13372] tipc: Resetting bearer [ 351.090777][T13372] tipc: Disabling bearer [ 351.358893][T13395] netlink: 'syz.2.1941': attribute type 5 has an invalid length. [ 351.372022][T13396] netlink: 'syz.2.1941': attribute type 5 has an invalid length. [ 351.600198][T13405] FAULT_INJECTION: forcing a failure. [ 351.600198][T13405] name failslab, interval 1, probability 0, space 0, times 0 [ 351.619828][T13410] openvswitch: netlink: Flow actions attr not present in new flow. [ 351.628867][T13405] CPU: 1 UID: 0 PID: 13405 Comm: syz.2.1944 Not tainted syzkaller #0 PREEMPT(full) [ 351.628895][T13405] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 351.628908][T13405] Call Trace: [ 351.628916][T13405] [ 351.628925][T13405] dump_stack_lvl+0x189/0x250 [ 351.628955][T13405] ? __pfx____ratelimit+0x10/0x10 [ 351.628978][T13405] ? __pfx_dump_stack_lvl+0x10/0x10 [ 351.629002][T13405] ? __pfx__printk+0x10/0x10 [ 351.629028][T13405] ? genl_rcv+0x28/0x40 [ 351.629054][T13405] ? ____sys_sendmsg+0x505/0x830 [ 351.629077][T13405] ? __x64_sys_sendmsg+0x19b/0x260 [ 351.629122][T13405] should_fail_ex+0x414/0x560 [ 351.629156][T13405] should_failslab+0xa8/0x100 [ 351.629189][T13405] kmem_cache_alloc_noprof+0x73/0x3c0 [ 351.629217][T13405] ? skb_clone+0x212/0x3a0 [ 351.629247][T13405] skb_clone+0x212/0x3a0 [ 351.629277][T13405] __netlink_deliver_tap+0x404/0x850 [ 351.629313][T13405] ? netlink_deliver_tap+0x2e/0x1b0 [ 351.629336][T13405] netlink_deliver_tap+0x19c/0x1b0 [ 351.629359][T13405] netlink_sendskb+0x68/0x140 [ 351.629394][T13405] netlink_unicast+0x397/0x9e0 [ 351.629423][T13405] ? __asan_memcpy+0x40/0x70 [ 351.629456][T13405] ? __pfx_netlink_unicast+0x10/0x10 [ 351.629499][T13405] netlink_rcv_skb+0x28c/0x470 [ 351.629518][T13405] ? __lock_acquire+0xab9/0xd20 [ 351.629550][T13405] ? __pfx_genl_rcv_msg+0x10/0x10 [ 351.629580][T13405] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 351.629623][T13405] ? down_read+0x1ad/0x2e0 [ 351.629651][T13405] genl_rcv+0x28/0x40 [ 351.629676][T13405] netlink_unicast+0x82f/0x9e0 [ 351.629717][T13405] ? __pfx_netlink_unicast+0x10/0x10 [ 351.629751][T13405] ? netlink_sendmsg+0x642/0xb30 [ 351.629770][T13405] ? skb_put+0x11b/0x210 [ 351.629796][T13405] netlink_sendmsg+0x805/0xb30 [ 351.629829][T13405] ? __pfx_netlink_sendmsg+0x10/0x10 [ 351.629855][T13405] ? aa_sock_msg_perm+0xf1/0x1d0 [ 351.629877][T13405] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 351.629900][T13405] ? __pfx_netlink_sendmsg+0x10/0x10 [ 351.629923][T13405] __sock_sendmsg+0x21c/0x270 [ 351.629957][T13405] ____sys_sendmsg+0x505/0x830 [ 351.629989][T13405] ? __pfx_____sys_sendmsg+0x10/0x10 [ 351.630025][T13405] ? import_iovec+0x74/0xa0 [ 351.630054][T13405] ___sys_sendmsg+0x21f/0x2a0 [ 351.630082][T13405] ? __pfx____sys_sendmsg+0x10/0x10 [ 351.630158][T13405] ? __fget_files+0x2a/0x420 [ 351.630175][T13405] ? __fget_files+0x3a0/0x420 [ 351.630207][T13405] __x64_sys_sendmsg+0x19b/0x260 [ 351.630235][T13405] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 351.630269][T13405] ? __pfx_ksys_write+0x10/0x10 [ 351.630293][T13405] ? rcu_is_watching+0x15/0xb0 [ 351.630320][T13405] ? do_syscall_64+0xbe/0x3b0 [ 351.630347][T13405] do_syscall_64+0xfa/0x3b0 [ 351.630368][T13405] ? lockdep_hardirqs_on+0x9c/0x150 [ 351.630387][T13405] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 351.630406][T13405] ? clear_bhb_loop+0x60/0xb0 [ 351.630432][T13405] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 351.630452][T13405] RIP: 0033:0x7fca8778ebe9 [ 351.630469][T13405] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 351.630485][T13405] RSP: 002b:00007fca886f4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 351.630506][T13405] RAX: ffffffffffffffda RBX: 00007fca879c5fa0 RCX: 00007fca8778ebe9 [ 351.630521][T13405] RDX: 0000000000000880 RSI: 0000200000001ac0 RDI: 0000000000000004 [ 351.630534][T13405] RBP: 00007fca886f4090 R08: 0000000000000000 R09: 0000000000000000 [ 351.630546][T13405] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 351.630558][T13405] R13: 00007fca879c6038 R14: 00007fca879c5fa0 R15: 00007ffff7858618 [ 351.630592][T13405] [ 352.027344][T13406] netlink: 'syz.4.1945': attribute type 13 has an invalid length. [ 352.060374][T13406] netlink: 'syz.4.1945': attribute type 17 has an invalid length. [ 352.172388][T13406] gretap0: left promiscuous mode [ 352.292458][T13406] 8021q: adding VLAN 0 to HW filter on device team0 [ 352.318319][T13406] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 352.678686][T13429] __nla_validate_parse: 9 callbacks suppressed [ 352.678708][T13429] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1949'. [ 352.716595][T13430] IPVS: set_ctl: invalid protocol: 47 255.255.255.255:20001 [ 352.940727][T13434] netlink: 'syz.1.1952': attribute type 10 has an invalid length. [ 352.958302][T13434] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1952'. [ 353.258980][T13451] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1956'. [ 353.349264][T13459] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1957'. [ 353.377603][T13459] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1957'. [ 353.393509][T13459] netlink: 'syz.1.1957': attribute type 7 has an invalid length. [ 353.432747][T13420] lo speed is unknown, defaulting to 1000 [ 353.572430][T13467] FAULT_INJECTION: forcing a failure. [ 353.572430][T13467] name failslab, interval 1, probability 0, space 0, times 0 [ 353.576795][T13461] tipc: Enabled bearer , priority 0 [ 353.608055][T13467] CPU: 0 UID: 0 PID: 13467 Comm: syz.0.1958 Not tainted syzkaller #0 PREEMPT(full) [ 353.608086][T13467] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 353.608099][T13467] Call Trace: [ 353.608108][T13467] [ 353.608117][T13467] dump_stack_lvl+0x189/0x250 [ 353.608156][T13467] ? __pfx____ratelimit+0x10/0x10 [ 353.608179][T13467] ? __pfx_dump_stack_lvl+0x10/0x10 [ 353.608204][T13467] ? __pfx__printk+0x10/0x10 [ 353.608229][T13467] ? genl_rcv+0x28/0x40 [ 353.608262][T13467] ? ____sys_sendmsg+0x505/0x830 [ 353.608286][T13467] ? __x64_sys_sendmsg+0x19b/0x260 [ 353.608321][T13467] should_fail_ex+0x414/0x560 [ 353.608355][T13467] should_failslab+0xa8/0x100 [ 353.608397][T13467] kmem_cache_alloc_noprof+0x73/0x3c0 [ 353.608424][T13467] ? skb_clone+0x212/0x3a0 [ 353.608455][T13467] skb_clone+0x212/0x3a0 [ 353.608486][T13467] __netlink_deliver_tap+0x404/0x850 [ 353.608523][T13467] ? netlink_deliver_tap+0x2e/0x1b0 [ 353.608546][T13467] netlink_deliver_tap+0x19c/0x1b0 [ 353.608568][T13467] netlink_sendskb+0x68/0x140 [ 353.608600][T13467] netlink_unicast+0x397/0x9e0 [ 353.608627][T13467] ? __asan_memcpy+0x40/0x70 [ 353.608653][T13467] ? __pfx_netlink_unicast+0x10/0x10 [ 353.608687][T13467] netlink_rcv_skb+0x28c/0x470 [ 353.608702][T13467] ? __lock_acquire+0xab9/0xd20 [ 353.608727][T13467] ? __pfx_genl_rcv_msg+0x10/0x10 [ 353.608751][T13467] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 353.608784][T13467] ? down_read+0x1ad/0x2e0 [ 353.608807][T13467] genl_rcv+0x28/0x40 [ 353.608827][T13467] netlink_unicast+0x82f/0x9e0 [ 353.608859][T13467] ? __pfx_netlink_unicast+0x10/0x10 [ 353.608886][T13467] ? netlink_sendmsg+0x642/0xb30 [ 353.608904][T13467] ? skb_put+0x11b/0x210 [ 353.608926][T13467] netlink_sendmsg+0x805/0xb30 [ 353.608951][T13467] ? __pfx_netlink_sendmsg+0x10/0x10 [ 353.608972][T13467] ? aa_sock_msg_perm+0xf1/0x1d0 [ 353.608990][T13467] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 353.609013][T13467] ? __pfx_netlink_sendmsg+0x10/0x10 [ 353.609032][T13467] __sock_sendmsg+0x21c/0x270 [ 353.609059][T13467] ____sys_sendmsg+0x505/0x830 [ 353.609084][T13467] ? __pfx_____sys_sendmsg+0x10/0x10 [ 353.609122][T13467] ? import_iovec+0x74/0xa0 [ 353.609193][T13467] ___sys_sendmsg+0x21f/0x2a0 [ 353.609216][T13467] ? __pfx____sys_sendmsg+0x10/0x10 [ 353.609268][T13467] ? __fget_files+0x2a/0x420 [ 353.609282][T13467] ? __fget_files+0x3a0/0x420 [ 353.609306][T13467] __x64_sys_sendmsg+0x19b/0x260 [ 353.609328][T13467] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 353.609357][T13467] ? __pfx_ksys_write+0x10/0x10 [ 353.609378][T13467] ? rcu_is_watching+0x15/0xb0 [ 353.609399][T13467] ? do_syscall_64+0xbe/0x3b0 [ 353.609422][T13467] do_syscall_64+0xfa/0x3b0 [ 353.609441][T13467] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 353.609457][T13467] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 353.609474][T13467] ? clear_bhb_loop+0x60/0xb0 [ 353.609494][T13467] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 353.609510][T13467] RIP: 0033:0x7f532cf8ebe9 [ 353.609525][T13467] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 353.609540][T13467] RSP: 002b:00007f532de4c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 353.609559][T13467] RAX: ffffffffffffffda RBX: 00007f532d1c5fa0 RCX: 00007f532cf8ebe9 [ 353.609571][T13467] RDX: 0000000000000880 RSI: 0000200000001ac0 RDI: 0000000000000004 [ 353.609582][T13467] RBP: 00007f532de4c090 R08: 0000000000000000 R09: 0000000000000000 [ 353.609592][T13467] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 353.609602][T13467] R13: 00007f532d1c6038 R14: 00007f532d1c5fa0 R15: 00007ffd0696a588 [ 353.609631][T13467] [ 353.633789][T13461] syzkaller0: entered promiscuous mode [ 353.739012][T13473] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1961'. [ 353.856237][T13461] syzkaller0: entered allmulticast mode [ 354.180552][T13461] tipc: Resetting bearer [ 354.267284][T13461] tipc: Disabling bearer [ 354.572399][T13500] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1967'. [ 354.816920][T13514] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1971'. [ 354.830849][T13514] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1971'. [ 354.989337][T13528] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1975'. [ 355.189717][T13537] sysfs: cannot create duplicate filename '/class/ieee80211/!å' [ 355.210680][T13537] CPU: 0 UID: 0 PID: 13537 Comm: syz.1.1977 Not tainted syzkaller #0 PREEMPT(full) [ 355.210713][T13537] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 355.210728][T13537] Call Trace: [ 355.210737][T13537] [ 355.210747][T13537] dump_stack_lvl+0x189/0x250 [ 355.210784][T13537] ? __pfx_dump_stack_lvl+0x10/0x10 [ 355.210810][T13537] ? __pfx__printk+0x10/0x10 [ 355.210848][T13537] ? kernfs_path_from_node+0x2f/0x290 [ 355.210872][T13537] ? kernfs_path_from_node+0x250/0x290 [ 355.210893][T13537] ? kernfs_path_from_node+0x2f/0x290 [ 355.210922][T13537] sysfs_warn_dup+0x8e/0xa0 [ 355.210945][T13537] sysfs_do_create_link_sd+0xc0/0x110 [ 355.210971][T13537] device_add_class_symlinks+0x1cf/0x240 [ 355.211008][T13537] device_add+0x475/0xb50 [ 355.211037][T13537] wiphy_register+0x1ba6/0x28d0 [ 355.211081][T13537] ? __pfx_wiphy_register+0x10/0x10 [ 355.211103][T13537] ? minstrel_ht_alloc+0x6dd/0x7e0 [ 355.211141][T13537] ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0 [ 355.211174][T13537] ieee80211_register_hw+0x3484/0x4100 [ 355.211221][T13537] ? ieee80211_register_hw+0x14d1/0x4100 [ 355.211262][T13537] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 355.211296][T13537] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 355.211338][T13537] ? __hrtimer_setup+0x187/0x210 [ 355.211359][T13537] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 355.211395][T13537] mac80211_hwsim_new_radio+0x2f0e/0x5340 [ 355.211462][T13537] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 355.211490][T13537] ? trace_kmalloc+0x1f/0xd0 [ 355.211515][T13537] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 355.211545][T13537] ? kstrndup+0xbf/0x160 [ 355.211579][T13537] hwsim_new_radio_nl+0xea4/0x1b10 [ 355.211611][T13537] ? __pfx___nla_validate_parse+0x10/0x10 [ 355.211662][T13537] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 355.211711][T13537] ? __nla_parse+0x40/0x60 [ 355.211735][T13537] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 355.211777][T13537] genl_family_rcv_msg_doit+0x212/0x300 [ 355.211814][T13537] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 355.211860][T13537] ? bpf_lsm_capable+0x9/0x20 [ 355.211888][T13537] ? security_capable+0x7e/0x2e0 [ 355.211929][T13537] genl_rcv_msg+0x60e/0x790 [ 355.211965][T13537] ? __pfx_genl_rcv_msg+0x10/0x10 [ 355.212001][T13537] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 355.212050][T13537] netlink_rcv_skb+0x208/0x470 [ 355.212069][T13537] ? __lock_acquire+0xab9/0xd20 [ 355.212101][T13537] ? __pfx_genl_rcv_msg+0x10/0x10 [ 355.212132][T13537] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 355.212178][T13537] ? down_read+0x1ad/0x2e0 [ 355.212207][T13537] genl_rcv+0x28/0x40 [ 355.212232][T13537] netlink_unicast+0x82f/0x9e0 [ 355.212275][T13537] ? __pfx_netlink_unicast+0x10/0x10 [ 355.212309][T13537] ? netlink_sendmsg+0x642/0xb30 [ 355.212329][T13537] ? skb_put+0x11b/0x210 [ 355.212358][T13537] netlink_sendmsg+0x805/0xb30 [ 355.212393][T13537] ? __pfx_netlink_sendmsg+0x10/0x10 [ 355.212420][T13537] ? aa_sock_msg_perm+0xf1/0x1d0 [ 355.212442][T13537] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 355.212465][T13537] ? __pfx_netlink_sendmsg+0x10/0x10 [ 355.212488][T13537] __sock_sendmsg+0x21c/0x270 [ 355.212523][T13537] ____sys_sendmsg+0x505/0x830 [ 355.212556][T13537] ? __pfx_____sys_sendmsg+0x10/0x10 [ 355.212593][T13537] ? import_iovec+0x74/0xa0 [ 355.212623][T13537] ___sys_sendmsg+0x21f/0x2a0 [ 355.212651][T13537] ? __pfx____sys_sendmsg+0x10/0x10 [ 355.212721][T13537] ? __fget_files+0x2a/0x420 [ 355.212740][T13537] ? __fget_files+0x3a0/0x420 [ 355.212774][T13537] __x64_sys_sendmsg+0x19b/0x260 [ 355.212803][T13537] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 355.212843][T13537] ? rcu_is_watching+0x15/0xb0 [ 355.212871][T13537] ? do_syscall_64+0xbe/0x3b0 [ 355.212901][T13537] do_syscall_64+0xfa/0x3b0 [ 355.212923][T13537] ? lockdep_hardirqs_on+0x9c/0x150 [ 355.212945][T13537] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 355.212966][T13537] ? clear_bhb_loop+0x60/0xb0 [ 355.213000][T13537] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 355.213020][T13537] RIP: 0033:0x7fa48998ebe9 [ 355.213040][T13537] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 355.213058][T13537] RSP: 002b:00007fa48a7c2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 355.213080][T13537] RAX: ffffffffffffffda RBX: 00007fa489bc5fa0 RCX: 00007fa48998ebe9 [ 355.213095][T13537] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004 [ 355.213108][T13537] RBP: 00007fa489a11e19 R08: 0000000000000000 R09: 0000000000000000 [ 355.213121][T13537] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 355.213134][T13537] R13: 00007fa489bc6038 R14: 00007fa489bc5fa0 R15: 00007ffc5ab08608 [ 355.213168][T13537] [ 355.725707][T13549] netlink: 'syz.2.1979': attribute type 13 has an invalid length. [ 355.738468][T13549] netlink: 'syz.2.1979': attribute type 17 has an invalid length. [ 355.916313][T13556] tipc: Enabled bearer , priority 0 [ 355.924255][T13556] syzkaller0: entered promiscuous mode [ 355.929793][T13556] syzkaller0: entered allmulticast mode [ 355.965033][T13556] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 355.999697][T13566] IPv6: addrconf: prefix option has invalid lifetime [ 356.016505][T13566] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 356.064987][T13556] tipc: Resetting bearer [ 356.216755][T13555] tipc: Resetting bearer [ 356.297865][T13555] tipc: Disabling bearer [ 356.471918][T13542] lo speed is unknown, defaulting to 1000 [ 356.481505][T13580] netlink: 'syz.3.1990': attribute type 3 has an invalid length. [ 357.554363][T13612] syzkaller1: entered promiscuous mode [ 357.567930][T13612] syzkaller1: entered allmulticast mode [ 359.151799][T13667] __nla_validate_parse: 5 callbacks suppressed [ 359.151819][T13667] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2016'. [ 359.201581][T13667] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2016'. [ 359.407908][T13675] tipc: Enabling of bearer rejected, failed to enable media [ 359.437291][T13675] netlink: 'syz.1.2019': attribute type 2 has an invalid length. [ 359.589073][T13681] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2021'. [ 359.603787][T13681] netlink: 'syz.1.2021': attribute type 1 has an invalid length. [ 359.679453][T13682] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2021'. [ 360.824681][T13724] netlink: 'syz.0.2031': attribute type 1 has an invalid length. [ 360.832482][T13724] netlink: 144 bytes leftover after parsing attributes in process `syz.0.2031'. [ 360.933120][T13724] netlink: 88 bytes leftover after parsing attributes in process `syz.0.2031'. [ 361.001501][T13736] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2035'. [ 361.082057][T13691] lo speed is unknown, defaulting to 1000 [ 361.631460][T13755] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 362.731970][T13799] syzkaller1: entered promiscuous mode [ 362.737818][T13799] syzkaller1: entered allmulticast mode [ 362.837988][T13804] tipc: Enabled bearer , priority 0 [ 362.846227][T13804] syzkaller0: entered promiscuous mode [ 362.851866][T13804] syzkaller0: entered allmulticast mode [ 362.880267][T13804] tipc: Resetting bearer [ 362.887103][T13804] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 362.899421][T13803] tipc: Resetting bearer [ 362.917525][T13803] tipc: Disabling bearer [ 363.244963][T13806] lo speed is unknown, defaulting to 1000 [ 363.411407][T13812] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2058'. [ 363.431508][T13812] IPv6: Can't replace route, no match found [ 363.778980][T13828] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2063'. [ 363.799616][T13828] openvswitch: netlink: Flow key attr not present in new flow. [ 364.325845][T13850] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2071'. [ 364.633767][T13866] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2077'. [ 365.704828][T13929] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 365.780207][T13931] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2096'. [ 365.796843][T13931] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2096'. [ 365.838588][T13933] netlink: 'syz.3.2097': attribute type 2 has an invalid length. [ 365.888031][T13935] nbd: nbd0 already in use [ 365.897637][T13935] block nbd0: NBD_DISCONNECT [ 365.902391][T13935] block nbd0: Send disconnect failed -107 [ 365.910361][T13935] block nbd0: Disconnected due to user request. [ 365.920840][T13935] block nbd0: shutting down sockets [ 365.944955][T13937] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2099'. [ 365.954461][T13937] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2099'. [ 365.963524][T13937] netlink: 'syz.3.2099': attribute type 13 has an invalid length. [ 366.190065][T13943] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2101'. [ 366.219897][T13945] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2103'. [ 366.231967][T13945] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2103'. [ 366.250551][T13945] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2103'. [ 366.264721][T13943] 8021q: adding VLAN 0 to HW filter on device bond13 [ 366.292236][T13943] 8021q: adding VLAN 0 to HW filter on device bond13 [ 366.299703][T13943] bond13: (slave wireguard0): The slave device specified does not support setting the MAC address [ 366.311800][T13943] bond13: (slave wireguard0): Error -95 calling set_mac_address [ 366.528870][T13965] mac80211_hwsim hwsim28 wlan0: entered promiscuous mode [ 366.539379][T13965] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 368.583275][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 368.616125][T13981] netlink: 'syz.2.2111': attribute type 11 has an invalid length. [ 368.685706][T13982] macvlan3: entered allmulticast mode [ 368.691328][T13982] veth1_vlan: entered allmulticast mode [ 368.699562][T13982] veth1_vlan: left allmulticast mode [ 381.221023][ T5874] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 381.231132][ T5874] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 381.240182][ T5874] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 381.249357][ T5874] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 381.258499][ T5874] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 381.437849][T13984] lo speed is unknown, defaulting to 1000 [ 381.581789][T13984] chnl_net:caif_netlink_parms(): no params data found [ 381.670968][T13984] bridge0: port 1(bridge_slave_0) entered blocking state [ 381.678421][T13984] bridge0: port 1(bridge_slave_0) entered disabled state [ 381.686289][T13984] bridge_slave_0: entered allmulticast mode [ 381.694177][T13984] bridge_slave_0: entered promiscuous mode [ 381.704154][T13984] bridge0: port 2(bridge_slave_1) entered blocking state [ 381.711361][T13984] bridge0: port 2(bridge_slave_1) entered disabled state [ 381.718776][T13984] bridge_slave_1: entered allmulticast mode [ 381.727254][T13984] bridge_slave_1: entered promiscuous mode [ 381.762535][T13984] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 381.777014][T13984] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 381.814941][T13984] team0: Port device team_slave_0 added [ 381.823515][T13984] team0: Port device team_slave_1 added [ 381.858508][T13984] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 381.865812][T13984] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 381.892147][T13984] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 381.906320][T13984] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 381.913689][T13984] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 381.939686][T13984] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 381.994795][T13984] hsr_slave_0: entered promiscuous mode [ 382.001257][T13984] hsr_slave_1: entered promiscuous mode [ 382.007628][T13984] debugfs: 'hsr0' already exists in 'hsr' [ 382.013810][T13984] Cannot create hsr debugfs directory [ 382.572229][ T5874] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 382.582190][ T5874] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 382.597747][ T5875] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 382.600673][ T5877] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 382.608882][ T5875] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 382.616070][ T5877] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 382.624169][ T5875] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 382.628193][ T5877] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 382.647589][ T5875] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 382.660148][ T5875] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 382.862637][T13994] lo speed is unknown, defaulting to 1000 [ 383.092071][T13996] lo speed is unknown, defaulting to 1000 [ 383.168786][T13994] chnl_net:caif_netlink_parms(): no params data found [ 383.304279][ T5874] Bluetooth: hci5: command tx timeout [ 383.479165][T13994] bridge0: port 1(bridge_slave_0) entered blocking state [ 383.493203][T13994] bridge0: port 1(bridge_slave_0) entered disabled state [ 383.500618][T13994] bridge_slave_0: entered allmulticast mode [ 383.516736][T13994] bridge_slave_0: entered promiscuous mode [ 383.540387][T13994] bridge0: port 2(bridge_slave_1) entered blocking state [ 383.554827][T13994] bridge0: port 2(bridge_slave_1) entered disabled state [ 383.562673][T13994] bridge_slave_1: entered allmulticast mode [ 383.577062][ T5874] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 383.577219][T13994] bridge_slave_1: entered promiscuous mode [ 383.587524][ T5874] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 383.598557][T13996] chnl_net:caif_netlink_parms(): no params data found [ 383.599280][ T5874] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 383.613987][ T5874] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 383.621762][ T5874] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 383.686060][T13994] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 383.699639][T13994] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 383.774196][T13994] team0: Port device team_slave_0 added [ 383.799072][T13994] team0: Port device team_slave_1 added [ 383.881272][T13994] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 383.888851][T13994] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 383.915197][T13994] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 383.926616][T13996] bridge0: port 1(bridge_slave_0) entered blocking state [ 383.941109][T13996] bridge0: port 1(bridge_slave_0) entered disabled state [ 383.949094][T13996] bridge_slave_0: entered allmulticast mode [ 383.959588][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 383.978765][T13996] bridge_slave_0: entered promiscuous mode [ 383.988107][T13996] bridge0: port 2(bridge_slave_1) entered blocking state [ 383.995507][T13996] bridge0: port 2(bridge_slave_1) entered disabled state [ 384.003588][T13996] bridge_slave_1: entered allmulticast mode [ 384.011769][T13996] bridge_slave_1: entered promiscuous mode [ 384.020037][T13994] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 384.034298][T13994] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 384.061108][T13994] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 384.139858][T13996] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 384.153408][T13996] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 384.162678][T14008] lo speed is unknown, defaulting to 1000 [ 384.267294][T13996] team0: Port device team_slave_0 added [ 384.322327][T13996] team0: Port device team_slave_1 added [ 384.335690][T13994] hsr_slave_0: entered promiscuous mode [ 384.342514][T13994] hsr_slave_1: entered promiscuous mode [ 384.356247][T13994] debugfs: 'hsr0' already exists in 'hsr' [ 384.362053][T13994] Cannot create hsr debugfs directory [ 384.488825][T13996] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 384.496561][T13996] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 384.524087][T13996] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 384.537491][T13996] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 384.544809][T13996] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 384.571339][T13996] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 384.657108][ T5875] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 384.664615][ T51] Bluetooth: hci6: command tx timeout [ 384.674203][ T5875] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 384.689420][ T5875] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 384.699491][ T5875] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 384.709520][ T5875] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 384.743670][ T5875] Bluetooth: hci7: command tx timeout [ 384.774948][T13996] hsr_slave_0: entered promiscuous mode [ 384.781525][T13996] hsr_slave_1: entered promiscuous mode [ 384.788774][T13996] debugfs: 'hsr0' already exists in 'hsr' [ 384.795392][T13996] Cannot create hsr debugfs directory [ 385.199995][T14014] lo speed is unknown, defaulting to 1000 [ 385.266880][T14008] chnl_net:caif_netlink_parms(): no params data found [ 385.383554][ T5875] Bluetooth: hci5: command tx timeout [ 385.473449][T14008] bridge0: port 1(bridge_slave_0) entered blocking state [ 385.480801][T14008] bridge0: port 1(bridge_slave_0) entered disabled state [ 385.488870][T14008] bridge_slave_0: entered allmulticast mode [ 385.497856][T14008] bridge_slave_0: entered promiscuous mode [ 385.507079][T14008] bridge0: port 2(bridge_slave_1) entered blocking state [ 385.515074][T14008] bridge0: port 2(bridge_slave_1) entered disabled state [ 385.522369][T14008] bridge_slave_1: entered allmulticast mode [ 385.530049][T14008] bridge_slave_1: entered promiscuous mode [ 385.584551][T14008] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 385.605645][T14008] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 385.685990][T14008] team0: Port device team_slave_0 added [ 385.699688][T14008] team0: Port device team_slave_1 added [ 385.713197][ T5875] Bluetooth: hci8: command tx timeout [ 385.773728][T14008] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 385.780735][T14008] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 385.808638][T14008] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 385.821567][T14014] chnl_net:caif_netlink_parms(): no params data found [ 385.836146][T14008] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 385.843271][T14008] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 385.869934][T14008] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 385.968908][T14008] hsr_slave_0: entered promiscuous mode [ 385.976563][T14008] hsr_slave_1: entered promiscuous mode [ 385.982871][T14008] debugfs: 'hsr0' already exists in 'hsr' [ 385.988834][T14008] Cannot create hsr debugfs directory [ 386.066415][T14014] bridge0: port 1(bridge_slave_0) entered blocking state [ 386.074662][T14014] bridge0: port 1(bridge_slave_0) entered disabled state [ 386.081924][T14014] bridge_slave_0: entered allmulticast mode [ 386.090922][T14014] bridge_slave_0: entered promiscuous mode [ 386.122538][T14014] bridge0: port 2(bridge_slave_1) entered blocking state [ 386.130105][T14014] bridge0: port 2(bridge_slave_1) entered disabled state [ 386.137893][T14014] bridge_slave_1: entered allmulticast mode [ 386.147407][T14014] bridge_slave_1: entered promiscuous mode [ 386.198085][T14014] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 386.217371][T14014] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 386.279477][T14014] team0: Port device team_slave_0 added [ 386.304582][T14014] team0: Port device team_slave_1 added [ 386.363503][T14014] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 386.370604][T14014] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 386.397232][T14014] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 386.409840][T14014] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 386.417247][T14014] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 386.444495][T14014] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 386.517255][T14014] hsr_slave_0: entered promiscuous mode [ 386.524289][T14014] hsr_slave_1: entered promiscuous mode [ 386.530665][T14014] debugfs: 'hsr0' already exists in 'hsr' [ 386.536730][T14014] Cannot create hsr debugfs directory [ 386.743646][ T5875] Bluetooth: hci6: command tx timeout [ 386.754166][ T5875] Bluetooth: hci9: command tx timeout [ 386.823553][ T5875] Bluetooth: hci7: command tx timeout [ 387.473672][ T5875] Bluetooth: hci5: command tx timeout [ 387.784569][ T5875] Bluetooth: hci8: command tx timeout [ 388.823343][ T5874] Bluetooth: hci6: command tx timeout [ 388.829057][ T5875] Bluetooth: hci9: command tx timeout [ 388.903464][ T5875] Bluetooth: hci7: command tx timeout [ 389.543651][ T5875] Bluetooth: hci5: command tx timeout [ 389.873219][ T5875] Bluetooth: hci8: command tx timeout [ 390.903355][ T5875] Bluetooth: hci6: command tx timeout [ 390.903889][ T5874] Bluetooth: hci9: command tx timeout [ 390.983478][ T5874] Bluetooth: hci7: command tx timeout [ 391.943525][ T5874] Bluetooth: hci8: command tx timeout [ 392.983254][ T5874] Bluetooth: hci9: command tx timeout [ 441.455754][ T5875] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 441.465830][ T5875] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 441.474423][ T5875] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 441.484042][ T5875] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 441.491985][ T5875] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 441.697568][T14029] lo speed is unknown, defaulting to 1000 [ 441.872077][T14029] chnl_net:caif_netlink_parms(): no params data found [ 441.967880][T14029] bridge0: port 1(bridge_slave_0) entered blocking state [ 441.975709][T14029] bridge0: port 1(bridge_slave_0) entered disabled state [ 441.982946][T14029] bridge_slave_0: entered allmulticast mode [ 441.990376][T14029] bridge_slave_0: entered promiscuous mode [ 442.001667][T14029] bridge0: port 2(bridge_slave_1) entered blocking state [ 442.010210][T14029] bridge0: port 2(bridge_slave_1) entered disabled state [ 442.017996][T14029] bridge_slave_1: entered allmulticast mode [ 442.027019][T14029] bridge_slave_1: entered promiscuous mode [ 442.067419][T14029] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 442.079812][T14029] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 442.122309][T14029] team0: Port device team_slave_0 added [ 442.131343][T14029] team0: Port device team_slave_1 added [ 442.172192][T14029] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 442.179298][T14029] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 442.206501][T14029] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 442.220270][T14029] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 442.227955][T14029] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 442.254357][T14029] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 442.361944][T14029] hsr_slave_0: entered promiscuous mode [ 442.385362][T14029] hsr_slave_1: entered promiscuous mode [ 442.391911][T14029] debugfs: 'hsr0' already exists in 'hsr' [ 442.413115][T14029] Cannot create hsr debugfs directory [ 442.836339][ T5875] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 442.846067][ T5875] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 442.856530][ T5875] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 442.878616][ T5877] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 442.885048][ T5875] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 442.890254][ T5877] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 442.894450][ T5875] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 442.904965][ T5877] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 442.916066][ T5877] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 442.924833][ T5877] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 443.223883][T14039] lo speed is unknown, defaulting to 1000 [ 443.544307][ T5877] Bluetooth: hci10: command tx timeout [ 443.608728][T14041] lo speed is unknown, defaulting to 1000 [ 443.726814][T14039] chnl_net:caif_netlink_parms(): no params data found [ 443.851767][ T51] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 443.862016][ T51] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 443.874250][ T51] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 443.885278][ T51] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 443.903641][ T51] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 444.018638][T14039] bridge0: port 1(bridge_slave_0) entered blocking state [ 444.026187][T14039] bridge0: port 1(bridge_slave_0) entered disabled state [ 444.033704][T14039] bridge_slave_0: entered allmulticast mode [ 444.041780][T14039] bridge_slave_0: entered promiscuous mode [ 444.064109][T14039] bridge0: port 2(bridge_slave_1) entered blocking state [ 444.071488][T14039] bridge0: port 2(bridge_slave_1) entered disabled state [ 444.078908][T14039] bridge_slave_1: entered allmulticast mode [ 444.091984][T14039] bridge_slave_1: entered promiscuous mode [ 444.177907][T14041] chnl_net:caif_netlink_parms(): no params data found [ 444.206178][T14039] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 444.257878][T14039] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 444.345814][T14048] lo speed is unknown, defaulting to 1000 [ 444.432671][T14039] team0: Port device team_slave_0 added [ 444.469424][T14039] team0: Port device team_slave_1 added [ 444.519592][T14041] bridge0: port 1(bridge_slave_0) entered blocking state [ 444.538523][T14041] bridge0: port 1(bridge_slave_0) entered disabled state [ 444.552009][T14041] bridge_slave_0: entered allmulticast mode [ 444.572224][T14041] bridge_slave_0: entered promiscuous mode [ 444.602687][T14041] bridge0: port 2(bridge_slave_1) entered blocking state [ 444.611074][T14041] bridge0: port 2(bridge_slave_1) entered disabled state [ 444.629637][T14041] bridge_slave_1: entered allmulticast mode [ 444.642087][T14041] bridge_slave_1: entered promiscuous mode [ 444.706114][T14039] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 444.713180][T14039] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 444.740575][T14039] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 444.758471][ T51] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 444.769478][ T51] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 444.777756][ T51] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 444.796543][ T51] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 444.807237][ T51] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 444.844619][T14039] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 444.851691][T14039] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 444.878792][T14039] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 444.913948][T14041] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 444.927549][T14041] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 444.983800][ T5877] Bluetooth: hci11: command tx timeout [ 444.983809][ T51] Bluetooth: hci12: command tx timeout [ 445.042285][T14041] team0: Port device team_slave_0 added [ 445.082107][T14039] hsr_slave_0: entered promiscuous mode [ 445.089100][T14039] hsr_slave_1: entered promiscuous mode [ 445.096554][T14039] debugfs: 'hsr0' already exists in 'hsr' [ 445.102321][T14039] Cannot create hsr debugfs directory [ 445.129534][T14041] team0: Port device team_slave_1 added [ 445.262137][T14041] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 445.279979][T14041] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 445.317660][T14041] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 445.333997][T14041] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 445.341032][T14041] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 445.371114][T14041] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 445.400947][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 445.468218][T14059] lo speed is unknown, defaulting to 1000 [ 445.623922][ T5877] Bluetooth: hci10: command tx timeout [ 445.643766][T14041] hsr_slave_0: entered promiscuous mode [ 445.650775][T14041] hsr_slave_1: entered promiscuous mode [ 445.657277][T14041] debugfs: 'hsr0' already exists in 'hsr' [ 445.663367][T14041] Cannot create hsr debugfs directory [ 445.717995][T14048] chnl_net:caif_netlink_parms(): no params data found [ 445.944094][ T5877] Bluetooth: hci13: command tx timeout [ 446.087192][T14048] bridge0: port 1(bridge_slave_0) entered blocking state [ 446.095134][T14048] bridge0: port 1(bridge_slave_0) entered disabled state [ 446.102461][T14048] bridge_slave_0: entered allmulticast mode [ 446.111084][T14048] bridge_slave_0: entered promiscuous mode [ 446.179029][T14048] bridge0: port 2(bridge_slave_1) entered blocking state [ 446.187197][T14048] bridge0: port 2(bridge_slave_1) entered disabled state [ 446.199205][T14048] bridge_slave_1: entered allmulticast mode [ 446.207323][T14048] bridge_slave_1: entered promiscuous mode [ 446.257436][T14059] chnl_net:caif_netlink_parms(): no params data found [ 446.297277][T14048] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 446.347507][T14048] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 446.453547][T14048] team0: Port device team_slave_0 added [ 446.459649][T14059] bridge0: port 1(bridge_slave_0) entered blocking state [ 446.467449][T14059] bridge0: port 1(bridge_slave_0) entered disabled state [ 446.475083][T14059] bridge_slave_0: entered allmulticast mode [ 446.484353][T14059] bridge_slave_0: entered promiscuous mode [ 446.495074][T14048] team0: Port device team_slave_1 added [ 446.501282][T14059] bridge0: port 2(bridge_slave_1) entered blocking state [ 446.508803][T14059] bridge0: port 2(bridge_slave_1) entered disabled state [ 446.516491][T14059] bridge_slave_1: entered allmulticast mode [ 446.525306][T14059] bridge_slave_1: entered promiscuous mode [ 446.594855][T14048] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 446.601835][T14048] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 446.629116][T14048] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 446.642654][T14048] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 446.651739][T14048] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 446.679263][T14048] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 446.732094][T14059] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 446.772028][T14059] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 446.862024][T14048] hsr_slave_0: entered promiscuous mode [ 446.877992][T14048] hsr_slave_1: entered promiscuous mode [ 446.885216][T14048] debugfs: 'hsr0' already exists in 'hsr' [ 446.891012][T14048] Cannot create hsr debugfs directory [ 446.903380][ T5877] Bluetooth: hci14: command tx timeout [ 446.931293][T14059] team0: Port device team_slave_0 added [ 446.956667][T14059] team0: Port device team_slave_1 added [ 447.041371][T14059] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 447.048648][T14059] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 447.075540][ T5877] Bluetooth: hci11: command tx timeout [ 447.081120][T14059] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 447.092319][ T5877] Bluetooth: hci12: command tx timeout [ 447.110146][T14059] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 447.117636][T14059] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 447.144286][T14059] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 447.297632][T14059] hsr_slave_0: entered promiscuous mode [ 447.304876][T14059] hsr_slave_1: entered promiscuous mode [ 447.311190][T14059] debugfs: 'hsr0' already exists in 'hsr' [ 447.317758][T14059] Cannot create hsr debugfs directory [ 447.703796][ T5877] Bluetooth: hci10: command tx timeout [ 448.024303][ T5877] Bluetooth: hci13: command tx timeout [ 448.983508][ T5877] Bluetooth: hci14: command tx timeout [ 449.143206][ T51] Bluetooth: hci11: command tx timeout [ 449.148841][ T5877] Bluetooth: hci12: command tx timeout [ 449.783710][ T5877] Bluetooth: hci10: command tx timeout [ 450.104282][ T5877] Bluetooth: hci13: command tx timeout [ 451.063262][ T5877] Bluetooth: hci14: command tx timeout [ 451.223263][ T5877] Bluetooth: hci12: command tx timeout [ 451.223943][ T51] Bluetooth: hci11: command tx timeout [ 452.184404][ T51] Bluetooth: hci13: command tx timeout [ 453.143278][ T51] Bluetooth: hci14: command tx timeout [ 481.223602][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 483.303316][ T5877] Bluetooth: hci4: command 0x0401 tx timeout [ 502.063646][ T5875] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 502.072127][ T5875] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 502.082039][ T5875] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 502.092508][ T5875] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 502.101061][ T5875] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 502.335932][T14074] lo speed is unknown, defaulting to 1000 [ 502.674674][ T5875] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 502.685393][ T5875] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 502.696089][ T5875] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 502.713614][ T5875] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 502.722644][ T5875] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 502.727266][T14074] chnl_net:caif_netlink_parms(): no params data found [ 502.868714][T14074] bridge0: port 1(bridge_slave_0) entered blocking state [ 502.876516][T14074] bridge0: port 1(bridge_slave_0) entered disabled state [ 502.884039][T14074] bridge_slave_0: entered allmulticast mode [ 502.892720][T14074] bridge_slave_0: entered promiscuous mode [ 502.902436][T14074] bridge0: port 2(bridge_slave_1) entered blocking state [ 502.909915][T14074] bridge0: port 2(bridge_slave_1) entered disabled state [ 502.918042][T14074] bridge_slave_1: entered allmulticast mode [ 502.935139][T14074] bridge_slave_1: entered promiscuous mode [ 503.021392][T14074] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 503.050163][T14074] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 503.142416][T14080] lo speed is unknown, defaulting to 1000 [ 503.147214][T14074] team0: Port device team_slave_0 added [ 503.158043][T14074] team0: Port device team_slave_1 added [ 503.207710][T14074] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 503.215126][T14074] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 503.242065][T14074] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 503.255235][T14074] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 503.262232][T14074] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 503.288741][T14074] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 503.464619][T14074] hsr_slave_0: entered promiscuous mode [ 503.471711][T14074] hsr_slave_1: entered promiscuous mode [ 503.492086][T14074] debugfs: 'hsr0' already exists in 'hsr' [ 503.498290][T14074] Cannot create hsr debugfs directory [ 503.667280][ T5875] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 503.682470][ T5875] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 503.692485][ T5875] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 503.701045][ T5875] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 503.709078][ T5875] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 503.783974][ T51] Bluetooth: hci5: command 0x0406 tx timeout [ 503.921136][T14080] chnl_net:caif_netlink_parms(): no params data found [ 504.190679][ T5877] Bluetooth: hci15: command tx timeout [ 504.210849][T14080] bridge0: port 1(bridge_slave_0) entered blocking state [ 504.232155][T14080] bridge0: port 1(bridge_slave_0) entered disabled state [ 504.243146][T14080] bridge_slave_0: entered allmulticast mode [ 504.251357][T14080] bridge_slave_0: entered promiscuous mode [ 504.271060][T14087] lo speed is unknown, defaulting to 1000 [ 504.273213][T14080] bridge0: port 2(bridge_slave_1) entered blocking state [ 504.297593][T14080] bridge0: port 2(bridge_slave_1) entered disabled state [ 504.318548][T14080] bridge_slave_1: entered allmulticast mode [ 504.340946][T14080] bridge_slave_1: entered promiscuous mode [ 504.468220][T14080] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 504.565085][T14080] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 504.676251][T14080] team0: Port device team_slave_0 added [ 504.693863][ T51] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1 [ 504.704419][ T51] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9 [ 504.715488][T14080] team0: Port device team_slave_1 added [ 504.725807][ T51] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9 [ 504.747229][ T5875] Bluetooth: hci16: command tx timeout [ 504.749095][ T51] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4 [ 504.762568][ T51] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2 [ 504.966594][T14080] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 504.983527][T14080] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 505.027475][T14080] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 505.049262][T14080] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 505.073762][T14080] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 505.100084][T14080] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 505.244130][ T5877] Bluetooth: hci19: unexpected cc 0x0c03 length: 249 > 1 [ 505.264559][ T5877] Bluetooth: hci19: unexpected cc 0x1003 length: 249 > 9 [ 505.283427][ T5877] Bluetooth: hci19: unexpected cc 0x1001 length: 249 > 9 [ 505.291730][ T5877] Bluetooth: hci19: unexpected cc 0x0c23 length: 249 > 4 [ 505.314223][ T5877] Bluetooth: hci19: unexpected cc 0x0c38 length: 249 > 2 [ 505.315446][T14080] hsr_slave_0: entered promiscuous mode [ 505.339848][T14080] hsr_slave_1: entered promiscuous mode [ 505.347503][T14080] debugfs: 'hsr0' already exists in 'hsr' [ 505.353631][T14080] Cannot create hsr debugfs directory [ 505.415629][T14087] chnl_net:caif_netlink_parms(): no params data found [ 505.555513][T14095] lo speed is unknown, defaulting to 1000 [ 505.784106][ T5877] Bluetooth: hci17: command tx timeout [ 505.841229][T14087] bridge0: port 1(bridge_slave_0) entered blocking state [ 505.849186][T14087] bridge0: port 1(bridge_slave_0) entered disabled state [ 505.857327][T14087] bridge_slave_0: entered allmulticast mode [ 505.866355][T14087] bridge_slave_0: entered promiscuous mode [ 505.908604][T14101] lo speed is unknown, defaulting to 1000 [ 505.908803][T14087] bridge0: port 2(bridge_slave_1) entered blocking state [ 505.925252][T14087] bridge0: port 2(bridge_slave_1) entered disabled state [ 505.932638][T14087] bridge_slave_1: entered allmulticast mode [ 505.941422][T14087] bridge_slave_1: entered promiscuous mode [ 506.056180][T14087] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 506.072087][T14087] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 506.132578][T14087] team0: Port device team_slave_0 added [ 506.173288][T14087] team0: Port device team_slave_1 added [ 506.264266][ T5877] Bluetooth: hci15: command tx timeout [ 506.334149][T14087] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 506.341155][T14087] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 506.367767][T14087] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 506.400586][T14087] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 506.408884][T14087] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 506.440891][T14087] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 506.505820][T14095] chnl_net:caif_netlink_parms(): no params data found [ 506.662839][T14087] hsr_slave_0: entered promiscuous mode [ 506.670377][T14087] hsr_slave_1: entered promiscuous mode [ 506.677545][T14087] debugfs: 'hsr0' already exists in 'hsr' [ 506.683754][T14087] Cannot create hsr debugfs directory [ 506.824432][ T5877] Bluetooth: hci18: command tx timeout [ 506.831568][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 506.832649][ T51] Bluetooth: hci16: command tx timeout [ 506.899517][T14101] chnl_net:caif_netlink_parms(): no params data found [ 506.915010][T14095] bridge0: port 1(bridge_slave_0) entered blocking state [ 506.922499][T14095] bridge0: port 1(bridge_slave_0) entered disabled state [ 506.930089][T14095] bridge_slave_0: entered allmulticast mode [ 506.938360][T14095] bridge_slave_0: entered promiscuous mode [ 506.984222][T14095] bridge0: port 2(bridge_slave_1) entered blocking state [ 506.993136][T14095] bridge0: port 2(bridge_slave_1) entered disabled state [ 507.000531][T14095] bridge_slave_1: entered allmulticast mode [ 507.009217][T14095] bridge_slave_1: entered promiscuous mode [ 507.135069][T14095] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 507.162827][T14095] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 507.275729][T14095] team0: Port device team_slave_0 added [ 507.285401][T14095] team0: Port device team_slave_1 added [ 507.335792][T14101] bridge0: port 1(bridge_slave_0) entered blocking state [ 507.343831][T14101] bridge0: port 1(bridge_slave_0) entered disabled state [ 507.351306][T14101] bridge_slave_0: entered allmulticast mode [ 507.360120][T14101] bridge_slave_0: entered promiscuous mode [ 507.383279][ T5876] Bluetooth: hci19: command tx timeout [ 507.397700][T14101] bridge0: port 2(bridge_slave_1) entered blocking state [ 507.406963][T14101] bridge0: port 2(bridge_slave_1) entered disabled state [ 507.414567][T14101] bridge_slave_1: entered allmulticast mode [ 507.422230][T14101] bridge_slave_1: entered promiscuous mode [ 507.438986][T14095] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 507.446760][T14095] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 507.473755][T14095] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 507.542096][T14101] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 507.554726][T14095] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 507.561736][T14095] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 507.588001][T14095] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 507.617922][T14101] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 507.728317][T14101] team0: Port device team_slave_0 added [ 507.741141][T14095] hsr_slave_0: entered promiscuous mode [ 507.748495][T14095] hsr_slave_1: entered promiscuous mode [ 507.755901][T14095] debugfs: 'hsr0' already exists in 'hsr' [ 507.761687][T14095] Cannot create hsr debugfs directory [ 507.787582][T14101] team0: Port device team_slave_1 added [ 507.861869][T14101] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 507.869011][ T5876] Bluetooth: hci17: command tx timeout [ 507.876312][T14101] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 507.904333][T14101] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 507.951743][T14101] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 507.959168][T14101] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 507.986133][T14101] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 508.106523][T14101] hsr_slave_0: entered promiscuous mode [ 508.113742][T14101] hsr_slave_1: entered promiscuous mode [ 508.120507][T14101] debugfs: 'hsr0' already exists in 'hsr' [ 508.126673][T14101] Cannot create hsr debugfs directory [ 508.343534][ T5876] Bluetooth: hci15: command tx timeout [ 508.906926][ T5876] Bluetooth: hci7: command 0x0406 tx timeout [ 508.908008][ T51] Bluetooth: hci8: command 0x0406 tx timeout [ 508.920213][ T5876] Bluetooth: hci9: command 0x0406 tx timeout [ 508.923976][ T51] Bluetooth: hci18: command tx timeout [ 508.927790][ T5877] Bluetooth: hci16: command tx timeout [ 508.933249][ T51] Bluetooth: hci6: command 0x0406 tx timeout [ 509.473313][ T5865] Bluetooth: hci19: command tx timeout [ 509.943229][ T5865] Bluetooth: hci17: command tx timeout [ 510.023450][ T31] INFO: task syz.0.2098:13935 blocked for more than 143 seconds. [ 510.031322][ T31] Not tainted syzkaller #0 [ 510.036586][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 510.045951][ T31] task:syz.0.2098 state:D stack:25048 pid:13935 tgid:13934 ppid:5859 task_flags:0x400140 flags:0x00004004 [ 510.058184][ T31] Call Trace: [ 510.061501][ T31] [ 510.064598][ T31] __schedule+0x1798/0x4cc0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 510.069178][ T31] ? validate_chain+0x897/0x2140 [ 510.074445][ T31] ? __lock_acquire+0xab9/0xd20 [ 510.083052][ T31] ? __pfx___schedule+0x10/0x10 [ 510.087984][ T31] ? schedule+0x91/0x360 [ 510.092290][ T31] schedule+0x165/0x360 [ 510.096618][ T31] schedule_timeout+0x9a/0x270 [ 510.101425][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 510.107310][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 510.112593][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 510.118173][ T31] ? wait_for_completion+0x267/0x5d0 [ 510.123800][ T31] wait_for_completion+0x2bf/0x5d0 [ 510.128966][ T31] ? __pfx_wait_for_completion+0x10/0x10 [ 510.134917][ T31] ? flush_workqueue_prep_pwqs+0x47c/0x4f0 [ 510.140766][ T31] ? check_flush_dependency+0x88/0x400 [ 510.146872][ T31] __flush_workqueue+0x6f7/0x14b0 [ 510.151963][ T31] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 510.221396][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 510.235976][ T31] ? __pfx___flush_workqueue+0x10/0x10 [ 510.241507][ T31] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 510.249226][ T31] ? __wake_up_common_lock+0x190/0x1f0 [ 510.254850][ T31] nbd_disconnect_and_put+0x9e/0x2a0 [ 510.260186][ T31] nbd_genl_disconnect+0x485/0x570 [ 510.266582][ T31] ? __pfx_nbd_genl_disconnect+0x10/0x10 [ 510.272302][ T31] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 510.278904][ T31] genl_family_rcv_msg_doit+0x212/0x300 [ 510.284554][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 510.290688][ T31] ? stack_trace_save+0x9c/0xe0 [ 510.295783][ T31] genl_rcv_msg+0x60e/0x790 [ 510.300334][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 510.305446][ T31] ? __pfx_nbd_genl_disconnect+0x10/0x10 [ 510.311158][ T31] netlink_rcv_skb+0x208/0x470 [ 510.316159][ T31] ? __lock_acquire+0xab9/0xd20 [ 510.321050][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 510.326145][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 510.331471][ T31] ? down_read+0x1ad/0x2e0 [ 510.336035][ T31] genl_rcv+0x28/0x40 [ 510.340056][ T31] netlink_unicast+0x82f/0x9e0 [ 510.345096][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 510.350423][ T31] ? netlink_sendmsg+0x642/0xb30 [ 510.355663][ T31] ? skb_put+0x11b/0x210 [ 510.359984][ T31] netlink_sendmsg+0x805/0xb30 [ 510.364855][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 510.370172][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 510.375271][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 510.380721][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 510.386332][ T31] __sock_sendmsg+0x21c/0x270 [ 510.391055][ T31] ____sys_sendmsg+0x505/0x830 [ 510.396041][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 510.401376][ T31] ? import_iovec+0x74/0xa0 [ 510.406027][ T31] ___sys_sendmsg+0x21f/0x2a0 [ 510.410743][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 510.416109][ T31] ? __fget_files+0x2a/0x420 [ 510.420725][ T31] ? __fget_files+0x3a0/0x420 [ 510.425609][ T5865] Bluetooth: hci15: command tx timeout [ 510.431184][ T31] __x64_sys_sendmsg+0x19b/0x260 [ 510.436343][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 510.441854][ T31] ? rcu_is_watching+0x15/0xb0 [ 510.446746][ T31] ? do_syscall_64+0xbe/0x3b0 [ 510.451461][ T31] do_syscall_64+0xfa/0x3b0 [ 510.456078][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 510.461328][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 510.467613][ T31] ? clear_bhb_loop+0x60/0xb0 [ 510.472371][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 510.478536][ T31] RIP: 0033:0x7f532cf8ebe9 [ 510.483042][ T31] RSP: 002b:00007f532de4c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 510.491493][ T31] RAX: ffffffffffffffda RBX: 00007f532d1c5fa0 RCX: 00007f532cf8ebe9 [ 510.499734][ T31] RDX: 00000000000000c0 RSI: 0000200000000280 RDI: 0000000000000004 [ 510.507843][ T31] RBP: 00007f532d011e19 R08: 0000000000000000 R09: 0000000000000000 [ 510.516100][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 510.524165][ T31] R13: 00007f532d1c6038 R14: 00007f532d1c5fa0 R15: 00007ffd0696a588 [ 510.532187][ T31] [ 510.535396][ T31] INFO: task syz.1.2105:13954 blocked for more than 143 seconds. [ 510.543244][ T31] Not tainted syzkaller #0 [ 510.548202][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 510.557095][ T31] task:syz.1.2105 state:D stack:28360 pid:13954 tgid:13953 ppid:5861 task_flags:0x400040 flags:0x00004004 [ 510.573415][ T31] Call Trace: [ 510.576740][ T31] [ 510.579708][ T31] __schedule+0x1798/0x4cc0 [ 510.584610][ T31] ? __lock_acquire+0xab9/0xd20 [ 510.589529][ T31] ? __lock_acquire+0xab9/0xd20 [ 510.594591][ T31] ? __pfx___schedule+0x10/0x10 [ 510.599497][ T31] ? schedule+0x91/0x360 [ 510.603888][ T31] schedule+0x165/0x360 [ 510.608081][ T31] schedule_preempt_disabled+0x13/0x30 [ 510.613603][ T31] __mutex_lock+0x7e6/0x1350 [ 510.618231][ T31] ? __mutex_lock+0x5bb/0x1350 [ 510.623195][ T31] ? genl_rcv_msg+0x10d/0x790 [ 510.627966][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 510.633193][ T31] ? __dev_queue_xmit+0x27b/0x3b50 [ 510.638379][ T31] ? radix_tree_lookup+0x240/0x290 [ 510.643617][ T31] genl_rcv_msg+0x10d/0x790 [ 510.648170][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 510.653285][ T31] ? ref_tracker_free+0x63a/0x7d0 [ 510.658347][ T31] ? __asan_memcpy+0x40/0x70 [ 510.663300][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 510.668737][ T31] netlink_rcv_skb+0x208/0x470 [ 510.673685][ T31] ? __lock_acquire+0xab9/0xd20 [ 510.678669][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 510.683835][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 510.689175][ T31] ? down_read+0x1ad/0x2e0 [ 510.693741][ T31] genl_rcv+0x28/0x40 [ 510.697790][ T31] netlink_unicast+0x82f/0x9e0 [ 510.702601][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 510.708052][ T31] ? netlink_sendmsg+0x642/0xb30 [ 510.713180][ T31] ? skb_put+0x11b/0x210 [ 510.717493][ T31] netlink_sendmsg+0x805/0xb30 [ 510.722310][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 510.727764][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 510.732746][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 510.738210][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 510.743738][ T31] __sock_sendmsg+0x21c/0x270 [ 510.748480][ T31] __sys_sendto+0x3bd/0x520 [ 510.753161][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 510.758233][ T31] ? count_memcg_event_mm+0x21/0x260 [ 510.763706][ T31] ? exc_page_fault+0x76/0xf0 [ 510.768420][ T31] ? do_user_addr_fault+0xc8a/0x1390 [ 510.773802][ T31] __x64_sys_sendto+0xde/0x100 [ 510.778601][ T31] do_syscall_64+0xfa/0x3b0 [ 510.783259][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 510.788585][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 510.794799][ T31] ? clear_bhb_loop+0x60/0xb0 [ 510.799523][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 510.805761][ T31] RIP: 0033:0x7fa489990a7c [ 510.810206][ T31] RSP: 002b:00007fa48a7c0ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 510.818716][ T31] RAX: ffffffffffffffda RBX: 00007fa48a7c0fc0 RCX: 00007fa489990a7c [ 510.826912][ T31] RDX: 0000000000000020 RSI: 00007fa48a7c1010 RDI: 0000000000000004 [ 510.835062][ T31] RBP: 0000000000000000 R08: 00007fa48a7c0f14 R09: 000000000000000c [ 510.843248][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000004 [ 510.851262][ T31] R13: 00007fa48a7c0f68 R14: 00007fa48a7c1010 R15: 0000000000000000 [ 510.859361][ T31] [ 510.862423][ T31] INFO: task syz.1.2105:13958 blocked for more than 144 seconds. [ 510.870344][ T31] Not tainted syzkaller #0 [ 510.875439][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 510.884208][ T31] task:syz.1.2105 state:D stack:27688 pid:13958 tgid:13953 ppid:5861 task_flags:0x400140 flags:0x00004004 [ 510.896406][ T31] Call Trace: [ 510.899719][ T31] [ 510.902678][ T31] __schedule+0x1798/0x4cc0 [ 510.909007][ T31] ? __lock_acquire+0xab9/0xd20 [ 510.914080][ T31] ? __lock_acquire+0xab9/0xd20 [ 510.918975][ T31] ? __pfx___schedule+0x10/0x10 [ 510.923910][ T31] ? schedule+0x91/0x360 [ 510.928182][ T31] schedule+0x165/0x360 [ 510.932353][ T31] schedule_preempt_disabled+0x13/0x30 [ 510.937874][ T31] __mutex_lock+0x7e6/0x1350 [ 510.942510][ T31] ? __mutex_lock+0x5bb/0x1350 [ 510.947428][ T31] ? genl_rcv_msg+0x10d/0x790 [ 510.952145][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 510.957390][ T31] ? __dev_queue_xmit+0x27b/0x3b50 [ 510.962545][ T31] ? radix_tree_lookup+0x240/0x290 [ 510.967769][ T31] genl_rcv_msg+0x10d/0x790 [ 510.972315][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 510.977426][ T31] ? ref_tracker_free+0x63a/0x7d0 [ 510.982484][ T31] ? __asan_memcpy+0x40/0x70 [ 510.983548][ T5865] Bluetooth: hci16: command tx timeout [ 510.987169][ T5874] Bluetooth: hci18: command tx timeout [ 511.000365][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 511.006159][ T31] netlink_rcv_skb+0x208/0x470 [ 511.010958][ T31] ? __lock_acquire+0xab9/0xd20 [ 511.015896][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 511.020960][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 511.026449][ T31] ? down_read+0x1ad/0x2e0 [ 511.030958][ T31] genl_rcv+0x28/0x40 [ 511.035081][ T31] netlink_unicast+0x82f/0x9e0 [ 511.039900][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 511.045325][ T31] ? netlink_sendmsg+0x642/0xb30 [ 511.050405][ T31] ? skb_put+0x11b/0x210 [ 511.054754][ T31] netlink_sendmsg+0x805/0xb30 [ 511.059559][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 511.065067][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 511.070042][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 511.075482][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 511.080800][ T31] __sock_sendmsg+0x21c/0x270 [ 511.085547][ T31] __sys_sendto+0x3bd/0x520 [ 511.090083][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 511.095200][ T31] ? count_memcg_event_mm+0x21/0x260 [ 511.100568][ T31] ? exc_page_fault+0x76/0xf0 [ 511.105360][ T31] ? do_user_addr_fault+0xc8a/0x1390 [ 511.110693][ T31] __x64_sys_sendto+0xde/0x100 [ 511.115650][ T31] do_syscall_64+0xfa/0x3b0 [ 511.120389][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 511.125691][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 511.131787][ T31] ? clear_bhb_loop+0x60/0xb0 [ 511.136612][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 511.142533][ T31] RIP: 0033:0x7fa489990a7c [ 511.147287][ T31] RSP: 002b:00007fa48a79fec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 511.155839][ T31] RAX: ffffffffffffffda RBX: 00007fa48a79ffc0 RCX: 00007fa489990a7c [ 511.163908][ T31] RDX: 0000000000000020 RSI: 00007fa48a7a0010 RDI: 0000000000000003 [ 511.171944][ T31] RBP: 0000000000000000 R08: 00007fa48a79ff14 R09: 000000000000000c [ 511.180073][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 511.188156][ T31] R13: 00007fa48a79ff68 R14: 00007fa48a7a0010 R15: 0000000000000000 [ 511.196321][ T31] [ 511.199393][ T31] INFO: task syz.4.2107:13960 blocked for more than 144 seconds. [ 511.207199][ T31] Not tainted syzkaller #0 [ 511.212157][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 511.220923][ T31] task:syz.4.2107 state:D stack:27200 pid:13960 tgid:13959 ppid:5870 task_flags:0x400040 flags:0x00004004 [ 511.233123][ T31] Call Trace: [ 511.236441][ T31] [ 511.239406][ T31] __schedule+0x1798/0x4cc0 [ 511.244088][ T31] ? __lock_acquire+0xab9/0xd20 [ 511.249001][ T31] ? __lock_acquire+0xab9/0xd20 [ 511.253978][ T31] ? __pfx___schedule+0x10/0x10 [ 511.258888][ T31] ? schedule+0x91/0x360 [ 511.263215][ T31] schedule+0x165/0x360 [ 511.267408][ T31] schedule_preempt_disabled+0x13/0x30 [ 511.272903][ T31] __mutex_lock+0x7e6/0x1350 [ 511.277592][ T31] ? __mutex_lock+0x5bb/0x1350 [ 511.282433][ T31] ? genl_rcv_msg+0x10d/0x790 [ 511.287361][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 511.292422][ T31] ? __dev_queue_xmit+0x27b/0x3b50 [ 511.297708][ T31] ? radix_tree_lookup+0x240/0x290 [ 511.302884][ T31] genl_rcv_msg+0x10d/0x790 [ 511.307643][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 511.312717][ T31] ? ref_tracker_free+0x63a/0x7d0 [ 511.317916][ T31] ? __asan_memcpy+0x40/0x70 [ 511.322540][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 511.328018][ T31] netlink_rcv_skb+0x208/0x470 [ 511.332816][ T31] ? __lock_acquire+0xab9/0xd20 [ 511.337741][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 511.342803][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 511.348209][ T31] ? down_read+0x1ad/0x2e0 [ 511.352660][ T31] genl_rcv+0x28/0x40 [ 511.356837][ T31] netlink_unicast+0x82f/0x9e0 [ 511.361660][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 511.367065][ T31] ? netlink_sendmsg+0x642/0xb30 [ 511.372113][ T31] ? skb_put+0x11b/0x210 [ 511.376509][ T31] netlink_sendmsg+0x805/0xb30 [ 511.381314][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 511.386699][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 511.391678][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 511.397170][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 511.402507][ T31] __sock_sendmsg+0x21c/0x270 [ 511.407272][ T31] ____sys_sendmsg+0x505/0x830 [ 511.412162][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 511.417545][ T31] ? import_iovec+0x74/0xa0 [ 511.422089][ T31] ___sys_sendmsg+0x21f/0x2a0 [ 511.426864][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 511.432123][ T31] ? __fget_files+0x2a/0x420 [ 511.436888][ T31] ? __fget_files+0x3a0/0x420 [ 511.441619][ T31] __x64_sys_sendmsg+0x19b/0x260 [ 511.446637][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 511.452261][ T31] ? rcu_is_watching+0x15/0xb0 [ 511.457163][ T31] ? do_syscall_64+0xbe/0x3b0 [ 511.461895][ T31] do_syscall_64+0xfa/0x3b0 [ 511.466567][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 511.471817][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 511.478103][ T31] ? clear_bhb_loop+0x60/0xb0 [ 511.482833][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 511.488856][ T31] RIP: 0033:0x7f7c0158ebe9 [ 511.493357][ T31] RSP: 002b:00007f7c0241f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 511.501875][ T31] RAX: ffffffffffffffda RBX: 00007f7c017c5fa0 RCX: 00007f7c0158ebe9 [ 511.510072][ T31] RDX: 0000000000040094 RSI: 0000200000000100 RDI: 0000000000000003 [ 511.518306][ T31] RBP: 00007f7c01611e19 R08: 0000000000000000 R09: 0000000000000000 [ 511.526399][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 511.534460][ T31] R13: 00007f7c017c6038 R14: 00007f7c017c5fa0 R15: 00007ffe5df84b78 [ 511.542476][ T31] [ 511.545863][ T5874] Bluetooth: hci19: command tx timeout [ 511.551610][ T31] [ 511.551610][ T31] Showing all locks held in the system: [ 511.559490][ T31] 1 lock held by khungtaskd/31: [ 511.564435][ T31] #0: ffffffff8e139f20 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 511.574843][ T31] 2 locks held by kworker/u8:3/49: [ 511.579985][ T31] #0: ffff88801a489148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 511.591775][ T31] #1: ffffc90000b97bc0 ((work_completion)(&(&kfence_timer)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 511.604710][ T31] 2 locks held by getty/5622: [ 511.609413][ T31] #0: ffff8880339840a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 511.619368][ T31] #1: ffffc900036c32f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 511.629601][ T31] 2 locks held by kworker/u9:9/5880: [ 511.635058][ T31] #0: ffff8880254b2148 ((wq_completion)nbd0-recv){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 511.646386][ T31] #1: ffffc9000421fbc0 ((work_completion)(&args->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 511.658267][ T31] 2 locks held by kworker/u8:10/6106: [ 511.663731][ T31] 3 locks held by syz.0.2098/13935: [ 511.668947][ T31] #0: ffffffff8f59ea90 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 511.677466][ T31] #1: ffffffff8f59e8a8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 511.686624][ T31] #2: ffff888024f5e230 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_disconnect_and_put+0x2f/0x2a0 [ 511.697101][ T31] 2 locks held by syz.1.2105/13954: [ 511.702445][ T31] #0: ffffffff8f59ea90 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 511.711009][ T31] #1: ffffffff8f59e8a8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 511.720180][ T31] 2 locks held by syz.1.2105/13958: [ 511.725580][ T31] #0: ffffffff8f59ea90 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 511.733903][ T31] #1: ffffffff8f59e8a8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 511.742927][ T31] 2 locks held by syz.4.2107/13960: [ 511.748182][ T31] #0: ffffffff8f59ea90 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 511.756668][ T31] #1: ffffffff8f59e8a8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 511.765730][ T31] 2 locks held by syz.3.2110/13973: [ 511.770990][ T31] #0: ffffffff8f59ea90 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 511.779264][ T31] #1: ffffffff8f59e8a8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 511.788591][ T31] 2 locks held by syz.2.2111/13981: [ 511.794016][ T31] #0: ffffffff8f59ea90 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 511.802261][ T31] #1: ffffffff8f59e8a8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 511.811367][ T31] 2 locks held by syz-executor/13984: [ 511.816826][ T31] #0: ffffffff8f59ea90 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 511.825131][ T31] #1: ffffffff8f59e8a8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 511.834320][ T31] 2 locks held by syz-executor/13994: [ 511.839748][ T31] #0: ffffffff8f59ea90 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 511.848056][ T31] #1: ffffffff8f59e8a8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 511.857140][ T31] 2 locks held by syz-executor/13996: [ 511.862548][ T31] #0: ffffffff8f59ea90 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 511.870821][ T31] #1: ffffffff8f59e8a8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 511.879976][ T31] 2 locks held by syz-executor/14008: [ 511.885401][ T31] #0: ffffffff8f59ea90 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 511.893682][ T31] #1: ffffffff8f59e8a8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 511.902739][ T31] 2 locks held by syz-executor/14014: [ 511.908278][ T31] #0: ffffffff8f59ea90 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 511.916675][ T31] #1: ffffffff8f59e8a8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 511.925751][ T31] 2 locks held by syz-executor/14029: [ 511.931141][ T31] #0: ffffffff8f59ea90 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 511.939444][ T31] #1: ffffffff8f59e8a8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 511.948687][ T31] 2 locks held by syz-executor/14039: [ 511.954201][ T31] #0: ffffffff8f59ea90 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 511.962541][ T31] #1: ffffffff8f59e8a8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 511.971685][ T31] 2 locks held by syz-executor/14041: [ 511.977226][ T31] #0: ffffffff8f59ea90 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 511.985517][ T31] #1: ffffffff8f59e8a8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 511.994672][ T31] 2 locks held by syz-executor/14048: [ 512.000063][ T31] #0: ffffffff8f59ea90 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 512.008371][ T31] #1: ffffffff8f59e8a8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 512.017557][ T31] 2 locks held by syz-executor/14059: [ 512.023169][ T5874] Bluetooth: hci17: command tx timeout [ 512.028804][ T31] #0: ffffffff8f59ea90 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 512.037192][ T31] #1: ffffffff8f59e8a8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 512.046279][ T31] 2 locks held by syz-executor/14074: [ 512.051676][ T31] #0: ffffffff8f59ea90 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 512.060029][ T31] #1: ffffffff8f59e8a8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 512.069114][ T31] 2 locks held by syz-executor/14080: [ 512.074626][ T31] #0: ffffffff8f59ea90 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 512.082874][ T31] #1: ffffffff8f59e8a8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 512.091943][ T31] 2 locks held by syz-executor/14087: [ 512.097413][ T31] #0: ffffffff8f59ea90 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 512.105951][ T31] #1: ffffffff8f59e8a8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 512.115101][ T31] 2 locks held by syz-executor/14095: [ 512.120678][ T31] #0: ffffffff8f59ea90 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 512.129080][ T31] #1: ffffffff8f59e8a8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 512.138182][ T31] 2 locks held by syz-executor/14101: [ 512.146084][ T31] #0: ffffffff8f59ea90 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 512.154476][ T31] #1: ffffffff8f59e8a8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 512.163635][ T31] [ 512.165991][ T31] ============================================= [ 512.165991][ T31] [ 512.174660][ T31] NMI backtrace for cpu 0 [ 512.174688][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 512.174711][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 512.174724][ T31] Call Trace: [ 512.174732][ T31] [ 512.174742][ T31] dump_stack_lvl+0x189/0x250 [ 512.174776][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 512.174801][ T31] ? __pfx__printk+0x10/0x10 [ 512.174844][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 512.174877][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 512.174909][ T31] ? __pfx__printk+0x10/0x10 [ 512.174943][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 512.174978][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 512.175011][ T31] watchdog+0xf93/0xfe0 [ 512.175046][ T31] ? watchdog+0x1de/0xfe0 [ 512.175092][ T31] kthread+0x70e/0x8a0 [ 512.175121][ T31] ? __pfx_watchdog+0x10/0x10 [ 512.175147][ T31] ? __pfx_kthread+0x10/0x10 [ 512.175174][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 512.175206][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 512.175225][ T31] ? __pfx_kthread+0x10/0x10 [ 512.175251][ T31] ret_from_fork+0x3fc/0x770 [ 512.175275][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 512.175303][ T31] ? __switch_to_asm+0x39/0x70 [ 512.175327][ T31] ? __switch_to_asm+0x33/0x70 [ 512.175353][ T31] ? __pfx_kthread+0x10/0x10 [ 512.175385][ T31] ret_from_fork_asm+0x1a/0x30 [ 512.175429][ T31] [ 512.175437][ T31] Sending NMI from CPU 0 to CPUs 1: [ 512.322057][ C1] NMI backtrace for cpu 1 [ 512.322076][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 512.322101][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 512.322112][ C1] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 512.322136][ C1] Code: 13 e8 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 73 b7 0d 00 f3 0f 1e fa fb f4 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 512.322151][ C1] RSP: 0018:ffffc90000197de0 EFLAGS: 000002c2 [ 512.322167][ C1] RAX: 3b6055d9dfeb8900 RBX: ffffffff819683f8 RCX: 3b6055d9dfeb8900 [ 512.322181][ C1] RDX: 0000000000000001 RSI: ffffffff8d9b9d08 RDI: ffffffff8be33880 [ 512.322193][ C1] RBP: ffffc90000197f20 R08: ffff8880b8732f9b R09: 1ffff110170e65f3 [ 512.322205][ C1] R10: dffffc0000000000 R11: ffffed10170e65f4 R12: ffffffff8fa39230 [ 512.322218][ C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff110039d5b40 [ 512.322230][ C1] FS: 0000000000000000(0000) GS:ffff888125d14000(0000) knlGS:0000000000000000 [ 512.322244][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 512.322255][ C1] CR2: 00005563d70aa000 CR3: 000000000df36000 CR4: 00000000003526f0 [ 512.322271][ C1] Call Trace: [ 512.322279][ C1] [ 512.322285][ C1] default_idle+0x13/0x20 [ 512.322305][ C1] default_idle_call+0x74/0xb0 [ 512.322328][ C1] do_idle+0x1e8/0x510 [ 512.322350][ C1] ? __pfx_do_idle+0x10/0x10 [ 512.322376][ C1] cpu_startup_entry+0x44/0x60 [ 512.322392][ C1] start_secondary+0x101/0x110 [ 512.322418][ C1] common_startup_64+0x13e/0x147 [ 512.322450][ C1] [ 512.323131][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 512.323152][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 512.323179][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 512.323195][ T31] Call Trace: [ 512.323206][ T31] [ 512.323216][ T31] dump_stack_lvl+0x99/0x250 [ 512.323250][ T31] ? __asan_memcpy+0x40/0x70 [ 512.323279][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 512.323308][ T31] ? __pfx__printk+0x10/0x10 [ 512.323366][ T31] vpanic+0x281/0x750 [ 512.323396][ T31] ? __pfx_vpanic+0x10/0x10 [ 512.323424][ T31] ? preempt_schedule+0xae/0xc0 [ 512.323450][ T31] ? preempt_schedule_common+0x83/0xd0 [ 512.323482][ T31] panic+0xb9/0xc0 [ 512.323508][ T31] ? __pfx_panic+0x10/0x10 [ 512.323539][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 512.323569][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 512.323608][ T31] watchdog+0xfd2/0xfe0 [ 512.323648][ T31] ? watchdog+0x1de/0xfe0 [ 512.323688][ T31] kthread+0x70e/0x8a0 [ 512.323722][ T31] ? __pfx_watchdog+0x10/0x10 [ 512.323755][ T31] ? __pfx_kthread+0x10/0x10 [ 512.323786][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 512.323823][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 512.323846][ T31] ? __pfx_kthread+0x10/0x10 [ 512.323876][ T31] ret_from_fork+0x3fc/0x770 [ 512.323904][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 512.323937][ T31] ? __switch_to_asm+0x39/0x70 [ 512.323966][ T31] ? __switch_to_asm+0x33/0x70 [ 512.323997][ T31] ? __pfx_kthread+0x10/0x10 [ 512.324027][ T31] ret_from_fork_asm+0x1a/0x30 [ 512.324079][ T31] [ 512.640043][ T31] Kernel Offset: disabled [ 512.644413][ T31] Rebooting in 86400 seconds..