last executing test programs: 2.340970048s ago: executing program 4 (id=1260): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000002000000000000000000001e95"], &(0x7f0000000040)='GPL\x00'}, 0x90) r1 = socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x7) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x2c, 0x24, 0xf1d, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x3}, {0xfff1, 0xffff}, {0xfff3}}, [@TCA_RATE={0x6, 0x5, {0x4, 0x7}}]}, 0x2c}}, 0x4000800) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000a80)=@delchain={0x2c, 0x64, 0xf31, 0xffffffff, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0xe, 0x1b}}, [@TCA_CHAIN={0x8, 0xb, 0xffff647b}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000480)='thermal_power_devfreq_get_power\x00', r0, 0x0, 0x1}, 0x18) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x2000000, 0xe, 0x0, &(0x7f0000000000)="fef351f64d23421a5b4e415288ca", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x4c) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100007defab2020702500000000002020207b1af8ff00000000bf0600000000000007010000f8ffffffb702000008000000b70300400000000085000000a00000009500000000000000d86009e226cbe57246e2fe7cddda167cafa4de926811a9e66393de12998e3f1eae18010cd5cce6d83cc300061d5e7a8c069330150d56926ecf50f2602bc81358bfdfc2a4f0a9886001a82fb8586ef3d0131257183efe08ffb4bda059d6b5d8a904604532ea6e3b95e989fcbe20bb73d0069c967ade27c82b9e9ae13fe284"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000180)=0xffffffffffffffff, 0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000440)={r3, 0x20, &(0x7f0000000400)={&(0x7f0000000340)=""/156, 0x9c, 0x0, &(0x7f00000001c0)=""/35, 0x23}}, 0x10) 2.221660692s ago: executing program 4 (id=1262): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000080)={r2, 0x800, 0x6, "2184e34d4650"}, 0xe) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f00000000c0)=@newlinkprop={0x1b8, 0x6c, 0x800, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x2, 0x100}, [@IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x8}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0xfd45}, @IFLA_LINKMODE={0x5, 0x11, 0x80}, @IFLA_EXT_MASK={0x8, 0x1d, 0x4}, @IFLA_AF_SPEC={0xfc, 0x1a, 0x0, 0x1, [@AF_BRIDGE={0x4}, @AF_INET6={0x5c, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x14, 0x7, @local}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x1}, @IFLA_INET6_TOKEN={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @loopback}}, @IFLA_INET6_TOKEN={0x14, 0x7, @loopback}]}, @AF_INET6={0x58, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x4}, @IFLA_INET6_TOKEN={0x14, 0x7, @remote}, @IFLA_INET6_TOKEN={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @empty}}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x80}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x2}, @IFLA_INET6_TOKEN={0x14, 0x7, @mcast2}]}, @AF_INET6={0x40, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0xba}, @IFLA_INET6_TOKEN={0x14, 0x7, @private2={0xfc, 0x2, '\x00', 0xd8}}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0xa}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x3}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0xf7}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x76}]}]}, @IFLA_TARGET_NETNSID={0x8, 0x2e, 0x1}, @IFLA_MASTER={0x8}, @IFLA_PORT_SELF={0x60, 0x19, 0x0, 0x1, [@IFLA_PORT_VF={0x8, 0x1, 0x9}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "ba1b8873378da6133d029c8610e1adc3"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "cd40b4b09be7d8ac6dea79920e5dc28e"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "b864064a5a0e22eaf7d3ecd0632061c1"}, @IFLA_PORT_PROFILE={0x5, 0x2, '\x00'}, @IFLA_PORT_PROFILE={0x5, 0x2, '\x00'}, @IFLA_PORT_PROFILE={0x5, 0x2, '\x00'}]}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x18}}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x44810}, 0x20000890) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x7, 0x4, 0x800, 0x2, 0x20, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) 2.188186516s ago: executing program 4 (id=1264): r0 = socket$netlink(0x10, 0x3, 0x1) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000004000100080c10000000000000000000", 0x58}], 0x1) 2.053604109s ago: executing program 4 (id=1266): r0 = socket(0x840000000002, 0x3, 0xff) setsockopt$inet_int(r0, 0x0, 0xc, &(0x7f0000000000)=0x1, 0x4) sendmmsg$inet(r0, &(0x7f0000000040)=[{{&(0x7f00000001c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001980)=[{&(0x7f0000000200)="a9050000000074640006000000003552bde5c064c6", 0x15}, {&(0x7f0000000600)="174640b6d80fb2eedc81ba60cc0800", 0xf}], 0x2}}], 0x1, 0x0) r1 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x5000, 0x0, @loopback, 0x5}, 0x1c) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xffdf}], 0x1) 2.046035087s ago: executing program 4 (id=1267): r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=@getstat={0xe0, 0x15, 0x0, 0x0, 0x0, {{'pcbc(fcrypt-generic)\x00'}}}, 0xe0}}, 0x0) sendmsg$nl_crypto(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="e8000000110001"], 0xe8}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$alg(0x26, 0x5, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0x3, 0x2) r4 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_PROTOCOL(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x1, 0x6, 0x101, 0x0, 0x0, {0xa, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x810}, 0x80) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r2, &(0x7f0000000080)={@val={0x8, 0x800}, @val={0x0, 0x4, 0x0, 0x3, 0x14}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x1b, 0xb0, 0x66, 0x0, 0x40, 0x11, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x12}}, {0x4e20, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x4, "31150048d5e06bdc339f0b82e56e05e9a3f461bf8f05c607f304e7fe0700221b", "b54970b8807c69e8aba2815e90ed451c3c1a9dff75f0f264e44cbb999c8f292e5aa143fd63ea1886e0cd425df0d8e5e7", "2bed86cd87cd326b66a3ca343e29e347dc61214ad793ad9f48b4d287", {"b15c14be998215153aaf76bbf0aead9a", "5cd7bcd4dc8e1acb0a78f4793cfd119c"}}}}}, 0xbe) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x3}, @func_proto={0x0, 0x0, 0x0, 0xd, 0x4}, @typedef={0x0, 0x0, 0x0, 0x5}, @volatile={0x0, 0x0, 0x0, 0x9, 0x3}]}, {0x0, [0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x52}, 0x20) socket(0x2b, 0x80801, 0x1) socket$inet_tcp(0x2, 0x1, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x40000000000, 0x3, 0x4, 0x0, 0x0, 0x800003}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8001}, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0103fcffffff000000002b0000000c0006"], 0x20}, 0x1, 0x0, 0x0, 0x840}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELOBJ={0x34, 0x14, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14}}, 0x98}}, 0x0) 1.397521073s ago: executing program 0 (id=1271): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) (async, rerun: 32) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c000000020681010000000000000000000000000500050002000000050001"], 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x800) (async, rerun: 32) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="24000000190001002cbd700000c8c3532d"], 0x24}}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) (async) ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0) 1.379177962s ago: executing program 3 (id=1272): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) close(0x3) vmsplice(r0, &(0x7f0000000380)=[{&(0x7f0000013580)='\r', 0x1}], 0x1, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r2, 0x701, 0x0, 0x0, {0x41}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xe, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x8}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) 1.312271065s ago: executing program 3 (id=1273): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x2000000}, [@NFT_MSG_NEWSET={0x1c, 0x12, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}], {0x14}}, 0x44}}, 0x0) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000e808708e40381a8a00f0ffff0fc20be80085000000a0000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sk_msg=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 32) 1.197509656s ago: executing program 0 (id=1275): r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000000)={0x28, 0x0, 0x0, @my=0x1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f000000a440)=0x20, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="500000001000210404000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa888d226000024001280090001007866726d00000000140002080001000300000008000200250000000a00"], 0x50}}, 0xc080) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x3, 0x300) getsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000480), &(0x7f00000004c0)=0x1f) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000040000000030a01080000000000000000010040000900030073797a320000000014000480080002400000000008000140000000000900010073797a300000000088000000060a010400000000000000000100000008000b40000000000900010073797a3000000000600004805c0001800b0001007470726f787900004c000280080003400000001608000140"], 0x110}}, 0x40040) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000000)={r2, 0x43545474, 0x6, 0x8}) accept$ax25(r3, &(0x7f0000000100)={{0x3, @default}, [@rose, @bcast, @netrom, @rose, @null, @bcast]}, &(0x7f0000000080)=0x48) (async) accept$ax25(r3, &(0x7f0000000100)={{0x3, @default}, [@rose, @bcast, @netrom, @rose, @null, @bcast]}, &(0x7f0000000080)=0x48) 1.196913494s ago: executing program 3 (id=1276): r0 = socket$inet6(0xa, 0x1, 0xfffffffd) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000000000)=0x84, 0xfde1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='veno', 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000040)=[@timestamp, @sack_perm, @sack_perm, @window={0x3, 0xffff, 0x96}, @window={0x3, 0x6, 0x7}, @mss, @window={0x3, 0x80, 0x1}, @timestamp], 0x8) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0), 0x62) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0x12, 0x0, 0x12) sendto$inet6(r0, 0x0, 0x0, 0x200c8084, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) sendto$inet6(r0, &(0x7f0000001cc0)="2501d77b330b7e73d6b1d1b8a473ff7420b4b43ce0861f000000714fa228ee1f5b48", 0xfffffffffffffe57, 0x8000, 0x0, 0xfffffffffffffe23) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000040)=0x2, 0x4) recvmmsg(r0, &(0x7f0000002480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40002003, 0x0) socket$inet6(0xa, 0x1, 0xfffffffd) (async) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000000000)=0x84, 0xfde1) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) (async) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10) (async) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) (async) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='veno', 0x4) (async) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000040)=[@timestamp, @sack_perm, @sack_perm, @window={0x3, 0xffff, 0x96}, @window={0x3, 0x6, 0x7}, @mss, @window={0x3, 0x80, 0x1}, @timestamp], 0x8) (async) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0), 0x62) (async) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0x12, 0x0, 0x12) (async) sendto$inet6(r0, 0x0, 0x0, 0x200c8084, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) (async) sendto$inet6(r0, &(0x7f0000001cc0)="2501d77b330b7e73d6b1d1b8a473ff7420b4b43ce0861f000000714fa228ee1f5b48", 0xfffffffffffffe57, 0x8000, 0x0, 0xfffffffffffffe23) (async) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000040)=0x2, 0x4) (async) recvmmsg(r0, &(0x7f0000002480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40002003, 0x0) (async) 1.129250322s ago: executing program 3 (id=1277): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000000c0)={'syztnl1\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x29, 0x2, 0xce, 0xf1c, 0x13, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2, 0x700, 0x8, 0x2e34d6cb, 0x2}}) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@delqdisc={0x58, 0x25, 0x2, 0x70bd2d, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0x7, 0x4}, {0x7, 0xd}, {0x4, 0xa}}, [@TCA_STAB={0x2c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x1, 0xff, 0x8, 0x5, 0x1, 0x400, 0x101}}, {0xc, 0x2, [0xeda6, 0x0, 0x53, 0x19d9]}}]}, @TCA_RATE={0x6, 0x5, {0x2, 0x7}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008010}, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r3, 0x84, 0x70, &(0x7f00000003c0)={r4, @in={{0x2, 0x4e21, @multicast2}}, [0xfffffffffffffff9, 0xd, 0x1, 0x5, 0x1, 0x7, 0x0, 0x2, 0x29, 0xfffffffffffffffe, 0x700, 0x8000000000000000, 0x19c, 0x9, 0x100000000000]}, &(0x7f0000000100)=0x100) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000180)={r5, 0x4}, 0x8) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000800)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000006580)={{0x14}, [@NFT_MSG_NEWCHAIN={0x30, 0x3, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_COUNTERS={0x4}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}], {0x14}}, 0x58}}, 0x0) 1.020897832s ago: executing program 0 (id=1278): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)={&(0x7f00000007c0)={0x128, r3, 0x402, 0x70bd27, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_P2P_OPPPS={0x5}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0xf8}, @NL80211_ATTR_TX_RATES={0x8c, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x48, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1000, 0xae, 0x4, 0x8, 0xd60d, 0x1, 0x0, 0x5]}}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0x30, 0x1b, 0x18, 0x6, 0x4, 0xb, 0x6c, 0x4, 0x1b, 0x36, 0x2, 0x48, 0x6]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x2, 0x7bf5, 0x7, 0x7, 0x5, 0x8, 0x1]}}]}, @NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0xff19, 0x7, 0x5, 0x0, 0x9, 0x0, 0x8]}}]}, @NL80211_BAND_60GHZ={0x28, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xe, 0xfff9, 0x3, 0xfffd, 0x9, 0x7, 0x2, 0x8]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}]}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_BEACON_INTERVAL={0x8}, @acl_policy=[@NL80211_ATTR_MAC_ADDRS={0x1c, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa}]}, @NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_MAC_ADDRS={0x40, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa}, {0xa, 0x6, @device_b}, {0xa}, {0xa, 0x6, @broadcast}]}]]}, 0x128}}, 0x4004010) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)={0x38, r3, 0x1, 0x70bd29, 0x25dfdbfe, {{}, {@void, @val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'wg1\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x8050) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, 0x0, 0x300, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x5, 0x6c}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4040005}, 0x800) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x10, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000711003000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x9}, 0x94) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r4, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x10, 0x10, &(0x7f0000000740)=@framed={{}, [@snprintf={{0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {0x6}, {}, {0x5}, {0x7, 0x0, 0x0, 0x0}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}, {}, {0x85, 0x0, 0x0, 0x5b}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)={&(0x7f00000007c0)={0x128, r3, 0x402, 0x70bd27, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_P2P_OPPPS={0x5}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0xf8}, @NL80211_ATTR_TX_RATES={0x8c, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x48, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1000, 0xae, 0x4, 0x8, 0xd60d, 0x1, 0x0, 0x5]}}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0x30, 0x1b, 0x18, 0x6, 0x4, 0xb, 0x6c, 0x4, 0x1b, 0x36, 0x2, 0x48, 0x6]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x2, 0x7bf5, 0x7, 0x7, 0x5, 0x8, 0x1]}}]}, @NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0xff19, 0x7, 0x5, 0x0, 0x9, 0x0, 0x8]}}]}, @NL80211_BAND_60GHZ={0x28, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xe, 0xfff9, 0x3, 0xfffd, 0x9, 0x7, 0x2, 0x8]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}]}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_BEACON_INTERVAL={0x8}, @acl_policy=[@NL80211_ATTR_MAC_ADDRS={0x1c, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa}]}, @NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_MAC_ADDRS={0x40, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa}, {0xa, 0x6, @device_b}, {0xa}, {0xa, 0x6, @broadcast}]}]]}, 0x128}}, 0x4004010) (async) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)={0x38, r3, 0x1, 0x70bd29, 0x25dfdbfe, {{}, {@void, @val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'wg1\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x8050) (async) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, 0x0, 0x300, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x5, 0x6c}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4040005}, 0x800) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x10, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000711003000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x9}, 0x94) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r4}, 0x4) (async) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x10, 0x10, &(0x7f0000000740)=@framed={{}, [@snprintf={{0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {0x6}, {}, {0x5}, {0x7, 0x0, 0x0, 0x0}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}, {}, {0x85, 0x0, 0x0, 0x5b}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) 885.749491ms ago: executing program 1 (id=1279): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x200000, 0x2ffffffff}, 0xfffffffffffffd09) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x238}}, 0x0) 885.23186ms ago: executing program 4 (id=1280): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) shutdown(r0, 0x1) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e20, 0x0, @loopback, 0x7}}, 0x0, 0x0, 0x47, 0x0, "09be2271b78506e6dd938d324c415acd403a4480fd1afa34432bcdfa64d957e93efafd27ad06a6f589bb643f167cf0fcd370239aaa93f6ded3c5032c96ead0cdc68474d402ab73e482db7ec1e0a57489"}, 0xd8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0xfffffff1, @empty, 0x2}, 0x1c) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x8, @empty, 0x9f}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x2000c190, 0x0, 0x0) 881.458629ms ago: executing program 0 (id=1281): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001380), r0) sendmsg$NL802154_CMD_NEW_SEC_DEV(r0, &(0x7f0000001500)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000014c0)={&(0x7f0000001440)={0x6c, r1, 0x1, 0x70bd29, 0x4, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_DEVICE={0x1c, 0x2e, 0x0, 0x1, [@NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ATTR_SECLEVEL_EXEMPT={0x5}, @NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xaaa2}]}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_DEVICE={0x20, 0x2e, 0x0, 0x1, [@NL802154_DEV_ATTR_EXTENDED_ADDR={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ATTR_FRAME_COUNTER={0x6, 0x1, 0x5}, @NL802154_DEV_ATTR_PAN_ID={0x6, 0x2, 0x3}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40059}, 0xc000) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000980), r2) sendmsg$NFC_CMD_GET_SE(r2, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x14, r3, 0x53f63307afa5bb95, 0x70bd2a, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x200000c1}, 0x880) sendmsg$NFC_CMD_GET_TARGET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r3, 0x400, 0x70bd2d, 0x25dfdbfc, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x40088c5) (async) sendmsg$NFC_CMD_GET_TARGET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r3, 0x400, 0x70bd2d, 0x25dfdbfc, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x40088c5) 817.381393ms ago: executing program 1 (id=1282): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'ccm(aes)\x00'}, 0x58) setsockopt$ALG_SET_AEAD_AUTHSIZE(r0, 0x117, 0x5, 0x0, 0xa) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES32=r4, @ANYBLOB="fb72764400000000ac000000000000000000", @ANYRES32=r2], 0x1c}}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r6) sendmsg$NFC_CMD_LLC_SDREQ(r5, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="01002dbd7000dddbdf25130009e9d98c0c39c9dd5b76000008000100", @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4801}, 0x20001880) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r8, 0x0) r9 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r9, 0x7d4165c9) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r10, 0x0) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) r12 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r12, 0x7d4165c9) listen(r11, 0x0) r13 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r13, 0x0) r14 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r11, 0x6, 0xe, &(0x7f0000000780)={@in6={{0xa, 0x4e24, 0x80000001, @empty, 0x4}}, 0x0, 0x0, 0x43, 0x0, "9c0fe2154aa786d10084ecfbe8e86f7d312fcc8fde38d5823d22fbbb55a7837e5f2329f4d662f2185f18fae43e09d661d12a01669d6eef2e4733c2c29a3c3d16ef45c7c1c8ecfcc76b47d9ab9a573f11"}, 0xd8) listen(r14, 0x0) r15 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r15, &(0x7f0000000540)=[{&(0x7f0000000180)="580000001400192340834b80040d8c560a066f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0effeffe809005300fff5dd00000010000100080c10000000000000000000", 0x58}], 0x1) 729.421955ms ago: executing program 0 (id=1284): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x4, &(0x7f0000002a40)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='GPL\x00', 0x4, 0x1076, &(0x7f0000000300)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x70) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001380)={r1, 0xfe, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff3c, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r2 = socket(0x2, 0x800, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f00000001c0)={0x9}, 0x10) sendmsg$nl_route(r2, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000001400)=ANY=[@ANYBLOB="20000000120001000000020000000000070001"], 0x20}}, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000e00)=ANY=[@ANYBLOB="5800000002060108000000000000000000000000050005000a0000000900020073797a3000000000050004000000000005000100060000000c00078008001240fffffffd14000300"], 0x58}}, 0x0) 631.421249ms ago: executing program 2 (id=1285): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000000240)=[{{&(0x7f0000000200)={0xa, 0x40, 0x0, @private0={0xfc, 0x0, '\x00', 0xfe}, 0x80}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000080)="18", 0x1}], 0x1}}, {{&(0x7f0000000180)={0xa, 0x4e23, 0xfffffffb, @remote, 0x5}, 0x1c, &(0x7f00000001c0)=[{&(0x7f0000000140)}], 0x1}}], 0x2, 0x4000) (async) shutdown(r0, 0x1) (async) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000300)={0x0, 0x1, 0x1, 'U'}, 0x9) (async) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r1, 0x0, 0x0) r2 = socket$inet_sctp(0x2, 0x400000000001, 0x84) sendto$inet(r2, &(0x7f0000000800)='u', 0x1, 0x801, &(0x7f0000000040)={0x2, 0x4e23, @private=0xa010100}, 0x10) (async) listen(r2, 0xda8c) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000000)="62c4ae25eb8fd95164c0d6209f0a06382e4c99e9f177fb26", 0x18) (async) accept4(r2, &(0x7f0000000340)=@nfc, 0x0, 0x0) 588.360779ms ago: executing program 1 (id=1286): r0 = socket$can_raw(0x1d, 0x3, 0x1) sendmsg$can_raw(r0, &(0x7f0000000240)={&(0x7f0000000780), 0x10, &(0x7f0000000200)={&(0x7f0000000140)=@can={{}, 0x0, 0x0, 0x0, 0x0, "5b7ba3698f28aaf0"}, 0x10}, 0x1, 0x0, 0x0, 0x44000}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="400000000a0601010000000000000000070000060900020073797a425201c7cdc0ee457e620800000500010007000000689e622400000005100008800c0007800800094000000a6f0c5e1c29ed325e2a0d13cf2527866d860ceab65bf67b7946208fbddfa4802c2e2a667ddcb642ae5bfc27bea8c0db903a406d5d95349f7400fb105387acba762acc38bb7fab676bb607a445854488e133"], 0x40}, 0x1, 0x0, 0x0, 0x4800}, 0x40080) 465.575968ms ago: executing program 0 (id=1287): r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000002d0000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='tlb_flush\x00', r1}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) r3 = accept4$llc(r0, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000140)=0x10, 0x800) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r5, &(0x7f00000004c0)="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", 0x109e8, 0x805, 0x0, 0x6) recvmmsg(r5, &(0x7f00000031c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x22, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x54}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000780)={{0x14}, [@NFT_MSG_DELRULE={0x38, 0x6, 0xa, 0x135cfb4307d517, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x1}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x2}]}], {0x14}}, 0x60}}, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r3, 0x8983, &(0x7f0000000080)={0x7, 'ipvlan1\x00', {0x400004}, 0x7f}) r6 = socket$inet(0x2, 0x3, 0x33) getsockopt$inet_mreqsrc(r6, 0x0, 0x27, &(0x7f0000000100)={@dev, @local, @broadcast}, &(0x7f0000000040)=0xc) sendto$packet(r0, 0x0, 0x0, 0x16000b21, &(0x7f00000000c0)={0x11, 0x8100, r2, 0x1, 0x83, 0x6, @multicast}, 0x14) 465.199834ms ago: executing program 1 (id=1288): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000540)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x2}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x6, 0x80000001, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0x4, 0x9, 0x80000001, 0x8, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x5, 0x6739, 0x3}}}}]}, 0x78}}, 0x0) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000e40)=@newqdisc={0x40, 0x24, 0x3fe3aa0262d8c583, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xf}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x6}}]}, 0x40}, 0x1, 0x0, 0x0, 0xc083}, 0x2000400c) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280), 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018200000", @ANYRES32=r5, @ANYBLOB="0000000000000000610200000000000095"], &(0x7f0000000d40)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94) r6 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet(r6, &(0x7f0000000200)={&(0x7f0000000000)={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000040)=[{&(0x7f00000000c0)="6e90d5c7a8e0f4b236afb43c1e291ecbaed4085b29025cc1e4ae87e4baba9c996d182841dcf972c32e502066075691cb14cb81a6af89d8f4d7990011dc0545532bd814c09d06b06cedf5155132db9d546730746c0f3f6aca30652bd1aa4c76b72543b8450c963859e72ac4a71b53922dd90ca6ecf79535320c9ade6625a862c922309908aac5eaf8cd8f09a99940e07d894a0829dbd4ec4f0c4c36bea24451d6c361921e2a", 0xa5}], 0x1, &(0x7f0000000180)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x7}}, @ip_ttl={{0x14, 0x0, 0x2, 0x5}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xff}}], 0x48}, 0x400c0) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r0, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0xac, 0x0, 0x2, 0x70bd2a, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x28, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x75}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xae}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x1c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x80}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x10}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xe}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x7}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x10}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xc0}]}, 0xac}, 0x1, 0x0, 0x0, 0xc801}, 0x408f0) socket(0x10, 0x3, 0x0) (async) socket$packet(0x11, 0x3, 0x300) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) (async) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000540)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x2}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x6, 0x80000001, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0x4, 0x9, 0x80000001, 0x8, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x5, 0x6739, 0x3}}}}]}, 0x78}}, 0x0) (async) socket(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) (async) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000e40)=@newqdisc={0x40, 0x24, 0x3fe3aa0262d8c583, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xf}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x6}}]}, 0x40}, 0x1, 0x0, 0x0, 0xc083}, 0x2000400c) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280), 0x48) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018200000", @ANYRES32=r5, @ANYBLOB="0000000000000000610200000000000095"], &(0x7f0000000d40)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) sendmsg$inet(r6, &(0x7f0000000200)={&(0x7f0000000000)={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000040)=[{&(0x7f00000000c0)="6e90d5c7a8e0f4b236afb43c1e291ecbaed4085b29025cc1e4ae87e4baba9c996d182841dcf972c32e502066075691cb14cb81a6af89d8f4d7990011dc0545532bd814c09d06b06cedf5155132db9d546730746c0f3f6aca30652bd1aa4c76b72543b8450c963859e72ac4a71b53922dd90ca6ecf79535320c9ade6625a862c922309908aac5eaf8cd8f09a99940e07d894a0829dbd4ec4f0c4c36bea24451d6c361921e2a", 0xa5}], 0x1, &(0x7f0000000180)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x7}}, @ip_ttl={{0x14, 0x0, 0x2, 0x5}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xff}}], 0x48}, 0x400c0) (async) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r0, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0xac, 0x0, 0x2, 0x70bd2a, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x28, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x75}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xae}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x1c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x80}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x10}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xe}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x7}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x10}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xc0}]}, 0xac}, 0x1, 0x0, 0x0, 0xc801}, 0x408f0) (async) 465.028522ms ago: executing program 2 (id=1289): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) socket$inet6(0xa, 0x800, 0x9) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xd}, {0xffff, 0xb}, {0xfff2}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x5}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x1, 0x1ff, 0x552, 0x0, 0x1000, 0x6}}, {0x4}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000701feffffff00000000017c0000040042800c0001800612061290391200100002"], 0x34}, 0x1, 0x0, 0x0, 0x4000895}, 0xc000) 403.436395ms ago: executing program 1 (id=1290): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) recvfrom(r0, &(0x7f0000000080)=""/203, 0xcb, 0x142, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)={0x18, 0x2c, 0x1, 0x0, 0x0, "", [@typed={0x8, 0xf5, 0x0, 0x0, @ipv4=@multicast2}]}, 0x18}], 0x1}, 0x0) 325.442467ms ago: executing program 1 (id=1291): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000500)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, 0x1}, 0x90) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000fcdbdf250200000008000300", @ANYRES32=r5, @ANYBLOB="0c00990007000000f46f0000080026006c09000008009f0006"], 0x38}, 0x1, 0x0, 0x0, 0xd37697ff280d3c0e}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000180)={&(0x7f0000000340)={0x34, r2, 0x100, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_USE_MFP={0x8}, @NL80211_ATTR_PREV_BSSID={0xa}, @NL80211_ATTR_PRIVACY={0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0xf1482a4564d9c586) (async) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000180)={&(0x7f0000000340)={0x34, r2, 0x100, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_USE_MFP={0x8}, @NL80211_ATTR_PREV_BSSID={0xa}, @NL80211_ATTR_PRIVACY={0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0xf1482a4564d9c586) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r9 = socket$kcm(0x2, 0x5, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6(0xa, 0x2, 0x0) (async) socket$inet6(0xa, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$packet(0x11, 0x3, 0x300) (async) socket$packet(0x11, 0x3, 0x300) socket$inet6_mptcp(0xa, 0x1, 0x106) r10 = socket$netlink(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r11, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) sendmsg$IPVS_CMD_SET_INFO(r11, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r12, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x4c, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x3}, @IFLA_GRE_REMOTE={0x8, 0x7, @loopback}]}}}, @IFLA_MASTER={0x8, 0xa, r12}]}, 0x4c}}, 0x4000) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x4c, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x3}, @IFLA_GRE_REMOTE={0x8, 0x7, @loopback}]}}}, @IFLA_MASTER={0x8, 0xa, r12}]}, 0x4c}}, 0x4000) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r0, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000440)={&(0x7f00000005c0)={0xe4, 0x0, 0x300, 0x70bd29, 0x25dfdbfe, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xc22692c9f92fc301}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x20000000}, 0x81) (async) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r0, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000440)={&(0x7f00000005c0)={0xe4, 0x0, 0x300, 0x70bd29, 0x25dfdbfe, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xc22692c9f92fc301}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x20000000}, 0x81) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3}, 0x0, &(0x7f00000002c0)={0x3fc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) sendmsg$inet(r9, &(0x7f0000000080)={&(0x7f0000001280)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000011c0)=[{&(0x7f00000012c0)='#', 0x1}], 0x1}, 0x0) setsockopt$sock_attach_bpf(r9, 0x1, 0x7, &(0x7f0000000180), 0x43) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x38, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x10, 0xc, 0xfff, 0x8, 0x0, 0x8, 0x3]}}]}]}]}, 0x38}}, 0x0) 173.818988ms ago: executing program 2 (id=1292): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="800000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000580012800c0001006d6163766c616e00480002800800010010000000280005800a000400aaaaaaaaaabb00000a000400aaaaaaaaaa0000000a000400aaaaaaaaaa00000008000300030000000a000400aaaaaaaaaabb000008000500", @ANYRES32=r1], 0x80}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CHANNEL(r3, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x5c, r4, 0x2, 0x70bd28, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x22}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xb}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x97b}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xb}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1f4}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4048891}, 0x20004000) 173.531925ms ago: executing program 3 (id=1293): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800e00010069703665727370616e0000002000028006000200300000001400060000000000000000000000ffff7f00000108000a00", @ANYRESOCT], 0x5c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=@ipv4_newnexthop={0x24, 0x68, 0x109, 0x0, 0x0, {}, [@NHA_FDB={0x4}, @NHA_OIF={0x8, 0x10}]}, 0x24}}, 0x0) 128.388284ms ago: executing program 2 (id=1294): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x24, &(0x7f0000000280)=0x3, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x1000006, 0x4132, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000040)}, 0x4000001) (async) sendmsg(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000040)}, 0x4000001) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3801000010000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="20010000000000000000000000000000000000006c0000007f000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000035000002000100000000000000000048000300"], 0x138}}, 0x0) (async) sendmsg$nl_xfrm(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3801000010000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="20010000000000000000000000000000000000006c0000007f000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000035000002000100000000000000000048000300"], 0x138}}, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r3, 0x0) pipe(&(0x7f0000002740)) socket$inet_mptcp(0x2, 0x1, 0x106) (async) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$IP_VS_SO_GET_SERVICE(r4, 0x0, 0x483, 0x0, 0x0) setsockopt$inet_tcp_buf(r4, 0x6, 0x21, &(0x7f0000000180)="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", 0x1000) sendmmsg$unix(r1, &(0x7f0000002c80)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}}, {{&(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x2, 0x44104) 60.340551ms ago: executing program 2 (id=1295): r0 = socket(0x10, 0x3, 0xc) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000002300)=ANY=[@ANYBLOB="b8000000150001ee"], 0xb8}}, 0x0) recvmsg(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x42) write(r0, &(0x7f0000000040)="effd00001000ff00fd4344c007110000f3050a00dbfd010000000001ffdf00", 0xfe00) 17.877177ms ago: executing program 3 (id=1296): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) shutdown(r0, 0x1) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e20, 0x0, @loopback, 0x7}}, 0x0, 0x0, 0x47, 0x0, "09be2271b78506e6dd938d324c415acd403a4480fd1afa34432bcdfa64d957e93efafd27ad06a6f589bb643f167cf0fcd370239aaa93f6ded3c5032c96ead0cdc68474d402ab73e482db7ec1e0a57489"}, 0xd8) bind$inet6(r0, &(0x7f0000000a00)={0xa, 0x4e20, 0x16e, @empty, 0x5}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0xfffffff1, @empty, 0x2}, 0x1c) (fail_nth: 2) 0s ago: executing program 2 (id=1297): r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) getsockopt$netlink(r1, 0x10e, 0xa, &(0x7f0000000200)=""/70, &(0x7f0000000280)=0x46) bind$alg(r0, &(0x7f00000001c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000300)="c99bfa0018", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000005000)=ANY=[], 0x1198}, 0x1, 0x0, 0x0, 0x40}, 0x880) recvfrom$inet(r3, &(0x7f0000000000)=""/4084, 0x1198, 0x2102, 0x0, 0x0) r4 = accept4(r0, 0x0, 0x0, 0x0) close(r4) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.252' (ED25519) to the list of known hosts. [ 83.211116][ T5815] cgroup: Unknown subsys name 'net' [ 83.381236][ T5815] cgroup: Unknown subsys name 'cpuset' [ 83.390434][ T5815] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 85.095367][ T5815] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 89.428877][ T5837] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 89.436667][ T5837] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 89.445473][ T5837] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 89.456674][ T5837] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 89.465388][ T5837] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 89.473782][ T5837] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 89.473838][ T5841] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 89.481494][ T5837] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 89.496185][ T5837] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 89.504425][ T5837] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 89.508685][ T5841] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 89.513480][ T5837] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 89.527475][ T5837] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 89.536703][ T5841] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 89.536908][ T5846] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 89.551343][ T5845] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 89.552634][ T5846] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 89.566569][ T5841] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 89.570851][ T5846] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 89.576839][ T5844] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 89.590370][ T5844] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 89.598493][ T5841] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 89.602560][ T5846] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 89.606487][ T5844] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 89.620401][ T5833] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 90.369987][ T5826] chnl_net:caif_netlink_parms(): no params data found [ 90.443947][ T5825] chnl_net:caif_netlink_parms(): no params data found [ 90.474675][ T5827] chnl_net:caif_netlink_parms(): no params data found [ 90.492497][ T5829] chnl_net:caif_netlink_parms(): no params data found [ 90.616887][ T5826] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.624282][ T5826] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.631986][ T5826] bridge_slave_0: entered allmulticast mode [ 90.639583][ T5826] bridge_slave_0: entered promiscuous mode [ 90.648893][ T5828] chnl_net:caif_netlink_parms(): no params data found [ 90.683763][ T5826] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.691218][ T5826] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.698533][ T5826] bridge_slave_1: entered allmulticast mode [ 90.705834][ T5826] bridge_slave_1: entered promiscuous mode [ 90.800529][ T5825] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.808287][ T5825] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.815499][ T5825] bridge_slave_0: entered allmulticast mode [ 90.823031][ T5825] bridge_slave_0: entered promiscuous mode [ 90.883836][ T5825] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.891345][ T5825] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.899379][ T5825] bridge_slave_1: entered allmulticast mode [ 90.906680][ T5825] bridge_slave_1: entered promiscuous mode [ 90.916771][ T5826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.997705][ T5826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.012470][ T5829] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.020381][ T5829] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.027679][ T5829] bridge_slave_0: entered allmulticast mode [ 91.034980][ T5829] bridge_slave_0: entered promiscuous mode [ 91.042513][ T5827] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.050270][ T5827] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.057601][ T5827] bridge_slave_0: entered allmulticast mode [ 91.064851][ T5827] bridge_slave_0: entered promiscuous mode [ 91.111225][ T5829] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.119100][ T5829] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.126608][ T5829] bridge_slave_1: entered allmulticast mode [ 91.134211][ T5829] bridge_slave_1: entered promiscuous mode [ 91.141175][ T5827] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.148506][ T5827] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.155715][ T5827] bridge_slave_1: entered allmulticast mode [ 91.163878][ T5827] bridge_slave_1: entered promiscuous mode [ 91.173108][ T5825] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.236150][ T5825] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.261246][ T5826] team0: Port device team_slave_0 added [ 91.267927][ T5828] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.275741][ T5828] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.283259][ T5828] bridge_slave_0: entered allmulticast mode [ 91.290549][ T5828] bridge_slave_0: entered promiscuous mode [ 91.340903][ T5826] team0: Port device team_slave_1 added [ 91.364443][ T5828] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.372664][ T5828] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.380001][ T5828] bridge_slave_1: entered allmulticast mode [ 91.387667][ T5828] bridge_slave_1: entered promiscuous mode [ 91.397836][ T5829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.409867][ T5827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.420999][ T5825] team0: Port device team_slave_0 added [ 91.430572][ T5827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.466854][ T5829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.478415][ T5825] team0: Port device team_slave_1 added [ 91.511303][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.518910][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.545354][ T5826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.597816][ T5838] Bluetooth: hci1: command tx timeout [ 91.611095][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.618346][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.644349][ T5826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.658490][ T5828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.683044][ T5829] team0: Port device team_slave_0 added [ 91.687305][ T5844] Bluetooth: hci2: command tx timeout [ 91.688828][ T5833] Bluetooth: hci4: command tx timeout [ 91.694414][ T5844] Bluetooth: hci0: command tx timeout [ 91.705069][ T5829] team0: Port device team_slave_1 added [ 91.705688][ T5838] Bluetooth: hci3: command tx timeout [ 91.714002][ T5827] team0: Port device team_slave_0 added [ 91.732049][ T5828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.741964][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.749399][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.775398][ T5825] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.800314][ T5827] team0: Port device team_slave_1 added [ 91.834013][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.841496][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.867918][ T5825] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.892112][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.899172][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.925681][ T5829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.939214][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.946200][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.972600][ T5829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.005861][ T5828] team0: Port device team_slave_0 added [ 92.073781][ T5826] hsr_slave_0: entered promiscuous mode [ 92.081651][ T5826] hsr_slave_1: entered promiscuous mode [ 92.089952][ T43] cfg80211: failed to load regulatory.db [ 92.092887][ T5828] team0: Port device team_slave_1 added [ 92.123942][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.131062][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.157152][ T5827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.169975][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.177290][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.204572][ T5827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.304730][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.311801][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.338230][ T5828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.351400][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.358632][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.384629][ T5828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.401004][ T5829] hsr_slave_0: entered promiscuous mode [ 92.408327][ T5829] hsr_slave_1: entered promiscuous mode [ 92.414586][ T5829] debugfs: 'hsr0' already exists in 'hsr' [ 92.420480][ T5829] Cannot create hsr debugfs directory [ 92.443248][ T5825] hsr_slave_0: entered promiscuous mode [ 92.450146][ T5825] hsr_slave_1: entered promiscuous mode [ 92.456399][ T5825] debugfs: 'hsr0' already exists in 'hsr' [ 92.462242][ T5825] Cannot create hsr debugfs directory [ 92.604536][ T5827] hsr_slave_0: entered promiscuous mode [ 92.611569][ T5827] hsr_slave_1: entered promiscuous mode [ 92.618260][ T5827] debugfs: 'hsr0' already exists in 'hsr' [ 92.624022][ T5827] Cannot create hsr debugfs directory [ 92.689274][ T5828] hsr_slave_0: entered promiscuous mode [ 92.695710][ T5828] hsr_slave_1: entered promiscuous mode [ 92.702766][ T5828] debugfs: 'hsr0' already exists in 'hsr' [ 92.708608][ T5828] Cannot create hsr debugfs directory [ 93.187570][ T5829] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 93.204333][ T5829] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 93.215580][ T5829] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 93.235575][ T5829] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 93.305605][ T5826] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 93.319194][ T5826] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 93.334940][ T5826] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 93.348364][ T5826] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 93.441673][ T5825] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 93.455213][ T5825] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 93.472719][ T5825] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 93.486135][ T5825] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 93.610946][ T5827] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 93.624313][ T5827] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 93.662037][ T5827] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 93.672890][ T5827] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 93.677696][ T5838] Bluetooth: hci1: command tx timeout [ 93.716888][ T5829] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.757326][ T5844] Bluetooth: hci0: command tx timeout [ 93.762864][ T5838] Bluetooth: hci3: command tx timeout [ 93.769030][ T5835] Bluetooth: hci2: command tx timeout [ 93.773425][ T5826] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.774587][ T5844] Bluetooth: hci4: command tx timeout [ 93.813934][ T5829] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.859668][ T5828] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 93.873781][ T5828] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 93.889364][ T1165] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.896856][ T1165] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.906843][ T1165] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.914044][ T1165] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.932874][ T5828] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 93.948960][ T5828] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 93.963447][ T5825] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.989117][ T5826] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.033784][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.041001][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.056056][ T5825] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.075864][ T5829] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 94.123703][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.130920][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.140612][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.147845][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.181910][ T1165] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.189178][ T1165] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.339208][ T5825] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 94.405245][ T5827] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.485129][ T5827] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.532048][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.539264][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.564201][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.571412][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.610569][ T5829] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.632449][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.752271][ T5828] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.790399][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.797607][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.856320][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.863580][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.892487][ T5825] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.941231][ T5829] veth0_vlan: entered promiscuous mode [ 94.985840][ T5829] veth1_vlan: entered promiscuous mode [ 95.017871][ T5826] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.144882][ T5829] veth0_macvtap: entered promiscuous mode [ 95.171071][ T5825] veth0_vlan: entered promiscuous mode [ 95.204121][ T5829] veth1_macvtap: entered promiscuous mode [ 95.242443][ T5825] veth1_vlan: entered promiscuous mode [ 95.270091][ T5827] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.315540][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.361537][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.424078][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.469096][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.489981][ T5825] veth0_macvtap: entered promiscuous mode [ 95.499804][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.509769][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.542800][ T5827] veth0_vlan: entered promiscuous mode [ 95.552884][ T5825] veth1_macvtap: entered promiscuous mode [ 95.608972][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.621596][ T5827] veth1_vlan: entered promiscuous mode [ 95.637582][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.663818][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.700647][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.744807][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.758461][ T5844] Bluetooth: hci1: command tx timeout [ 95.783844][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.793071][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.811491][ T5827] veth0_macvtap: entered promiscuous mode [ 95.837410][ T5844] Bluetooth: hci4: command tx timeout [ 95.840256][ T5827] veth1_macvtap: entered promiscuous mode [ 95.842957][ T5844] Bluetooth: hci2: command tx timeout [ 95.848866][ T5838] Bluetooth: hci0: command tx timeout [ 95.854726][ T5835] Bluetooth: hci3: command tx timeout [ 95.873979][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.878965][ T5826] veth0_vlan: entered promiscuous mode [ 95.897203][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.930797][ T5826] veth1_vlan: entered promiscuous mode [ 95.984720][ T5828] veth0_vlan: entered promiscuous mode [ 96.005477][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.010570][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.022696][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.073687][ T5828] veth1_vlan: entered promiscuous mode [ 96.092682][ T5826] veth0_macvtap: entered promiscuous mode [ 96.107812][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.122706][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.137908][ T5826] veth1_macvtap: entered promiscuous mode [ 96.144137][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.154667][ T5829] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 96.175910][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.232598][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.257629][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.302679][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.324714][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.335319][ T5828] veth0_macvtap: entered promiscuous mode [ 96.360517][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.374401][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.382178][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.386411][ T5828] veth1_macvtap: entered promiscuous mode [ 96.574939][ T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.588968][ T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.668279][ T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.694953][ T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.724600][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.763839][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.772428][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.792562][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.839081][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.849364][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.937070][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.946693][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.993121][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.004651][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.837488][ T5835] Bluetooth: hci1: command tx timeout [ 97.914923][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.920570][ T5835] Bluetooth: hci3: command tx timeout [ 97.928581][ T5835] Bluetooth: hci2: command tx timeout [ 97.934029][ T5835] Bluetooth: hci0: command tx timeout [ 97.940765][ T5844] Bluetooth: hci4: command tx timeout [ 97.957815][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.140362][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.150807][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.184174][ T5974] xt_CT: You must specify a L4 protocol and not use inversions on it [ 98.221134][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.223406][ T5970] netlink: 'syz.3.9': attribute type 2 has an invalid length. [ 98.250587][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.273057][ T5970] 9: entered promiscuous mode [ 98.389450][ T5974] tipc: Started in network mode [ 98.394545][ T5974] tipc: Node identity 8215c87984e6, cluster identity 4711 [ 98.433344][ T5974] tipc: Enabled bearer , priority 0 [ 98.468466][ T65] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.476561][ T65] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.496355][ T5980] syzkaller0: entered promiscuous mode [ 98.528031][ T5980] syzkaller0: entered allmulticast mode [ 98.590442][ T5971] tipc: Resetting bearer [ 98.705543][ T5971] tipc: Disabling bearer [ 98.772258][ T5995] netlink: 224 bytes leftover after parsing attributes in process `syz.1.14'. [ 99.208360][ T6008] syz.3.18 uses obsolete (PF_INET,SOCK_PACKET) [ 99.436907][ T6025] netlink: 8 bytes leftover after parsing attributes in process `syz.4.22'. [ 99.455812][ T6025] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 99.470609][ T6025] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 99.478590][ T6025] gretap1: entered promiscuous mode [ 99.485051][ T6025] gretap1: entered allmulticast mode [ 99.715827][ T6035] netlink: 'syz.3.24': attribute type 33 has an invalid length. [ 99.726920][ T6039] netlink: 4 bytes leftover after parsing attributes in process `syz.4.26'. [ 99.756099][ T6035] netlink: 152 bytes leftover after parsing attributes in process `syz.3.24'. [ 99.796082][ T6035] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 99.881687][ T6035] netlink: 40 bytes leftover after parsing attributes in process `syz.3.24'. [ 100.186471][ T6063] netlink: 48 bytes leftover after parsing attributes in process `syz.1.29'. [ 100.217915][ T6061] netlink: 'syz.3.30': attribute type 1 has an invalid length. [ 100.260752][ T6052] netlink: 20 bytes leftover after parsing attributes in process `syz.1.29'. [ 100.300818][ T6046] ipt_REJECT: TCP_RESET invalid for non-tcp [ 100.556147][ T6074] netlink: 'syz.1.32': attribute type 1 has an invalid length. [ 100.573889][ T6064] syzkaller0: entered promiscuous mode [ 100.579595][ T6064] syzkaller0: entered allmulticast mode [ 100.594552][ T6074] netlink: 4 bytes leftover after parsing attributes in process `syz.1.32'. [ 100.664902][ T6077] Cannot find add_set index 1 as target [ 100.982711][ T6088] Cannot find add_set index 0 as target [ 100.990970][ T6088] IPVS: set_ctl: invalid protocol: 210 127.0.0.1:20000 [ 101.000166][ T6088] IPVS: set_ctl: invalid protocol: 33 224.0.0.2:0 [ 101.174621][ T6090] netlink: 8 bytes leftover after parsing attributes in process `syz.2.37'. [ 101.868213][ T6071] netlink: 40 bytes leftover after parsing attributes in process `syz.4.31'. [ 101.899417][ T6083] Zero length message leads to an empty skb [ 102.268265][ T6110] Bluetooth: MGMT ver 1.23 [ 102.867962][ T6123] nbd0: detected capacity change from 0 to 63 [ 102.897915][ T5842] block nbd0: Send control failed (result -32) [ 102.899695][ T5838] block nbd0: Receive control failed (result -32) [ 102.941660][ T5842] block nbd0: Request send failed, requeueing [ 102.980798][ T1073] block nbd0: Dead connection, failed to find a fallback [ 102.988753][ T1073] block nbd0: shutting down sockets [ 102.994276][ T1073] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 103.004576][ T1073] Buffer I/O error on dev nbd0, logical block 0, async page read [ 103.015533][ T5842] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 103.024948][ T5842] Buffer I/O error on dev nbd0, logical block 1, async page read [ 103.038626][ T5842] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 103.048167][ T5842] Buffer I/O error on dev nbd0, logical block 2, async page read [ 103.056322][ T5842] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 103.067756][ T5842] Buffer I/O error on dev nbd0, logical block 3, async page read [ 103.077562][ T5842] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 103.086757][ T5842] Buffer I/O error on dev nbd0, logical block 0, async page read [ 103.095194][ T5842] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 103.104365][ T5842] Buffer I/O error on dev nbd0, logical block 1, async page read [ 103.126089][ T5842] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 103.146624][ T5842] Buffer I/O error on dev nbd0, logical block 2, async page read [ 103.188884][ T5842] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 103.221938][ T5842] Buffer I/O error on dev nbd0, logical block 3, async page read [ 103.267435][ T5842] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 103.276625][ T5842] Buffer I/O error on dev nbd0, logical block 0, async page read [ 103.335883][ T5842] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 103.353817][ T5842] Buffer I/O error on dev nbd0, logical block 1, async page read [ 103.370780][ T5842] ldm_validate_partition_table(): Disk read failed. [ 103.380846][ T5842] Dev nbd0: unable to read RDB block 0 [ 103.390107][ T5842] nbd0: unable to read partition table [ 103.416695][ T5842] ldm_validate_partition_table(): Disk read failed. [ 103.417373][ T6137] netlink: 'syz.3.51': attribute type 7 has an invalid length. [ 103.479235][ T5842] Dev nbd0: unable to read RDB block 0 [ 103.497521][ T5842] nbd0: unable to read partition table [ 103.673509][ T6147] ieee802154 phy0 wpan0: encryption failed: -22 [ 103.699665][ T6149] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input5 [ 104.122385][ T6171] __nla_validate_parse: 3 callbacks suppressed [ 104.122405][ T6171] netlink: 232 bytes leftover after parsing attributes in process `syz.4.64'. [ 104.274030][ T6173] netlink: 192 bytes leftover after parsing attributes in process `syz.0.65'. [ 104.335470][ T6177] netlink: 'syz.4.67': attribute type 7 has an invalid length. [ 104.381532][ T6177] netlink: 'syz.4.67': attribute type 7 has an invalid length. [ 104.381739][ T13] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 104.432675][ T13] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 104.452555][ T13] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 104.471998][ T13] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 104.786536][ T6191] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.71'. [ 105.050452][ T6202] warning: `syz.1.74' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 105.627849][ T6226] netlink: 'syz.0.80': attribute type 21 has an invalid length. [ 105.640078][ T6230] vcan0: tx drop: invalid sa for name 0xfffffffffffffffd [ 105.683729][ T6226] netlink: 4 bytes leftover after parsing attributes in process `syz.0.80'. [ 105.720323][ T6232] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 105.799397][ T6235] netlink: 'syz.1.83': attribute type 1 has an invalid length. [ 105.873219][ T6240] netlink: 8 bytes leftover after parsing attributes in process `syz.3.84'. [ 106.145187][ T6251] netlink: 4 bytes leftover after parsing attributes in process `syz.1.90'. [ 106.151835][ T6245] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 106.167742][ T6245] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.232079][ T6258] netlink: 20 bytes leftover after parsing attributes in process `syz.3.88'. [ 106.274623][ T6249] bond1: entered allmulticast mode [ 106.281189][ T6249] 8021q: adding VLAN 0 to HW filter on device bond1 [ 106.290636][ T6249] bridge0: port 3(bond1) entered blocking state [ 106.298369][ T6249] bridge0: port 3(bond1) entered disabled state [ 106.308148][ T6249] bond1: entered promiscuous mode [ 106.314060][ T6249] bridge0: port 3(bond1) entered blocking state [ 106.320772][ T6249] bridge0: port 3(bond1) entered forwarding state [ 106.331451][ T6260] netlink: 16 bytes leftover after parsing attributes in process `syz.1.92'. [ 106.367926][ T6245] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 106.378889][ T6245] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.518595][ T6245] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 106.558422][ T6245] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.651636][ T6245] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 106.662233][ T6245] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.823382][ T6274] netlink: 28 bytes leftover after parsing attributes in process `syz.2.93'. [ 106.967206][ T65] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 106.997027][ T65] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.038769][ T12] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 107.050566][ T12] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.132116][ T36] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 107.146764][ T36] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.203968][ T6283] syzkaller0: entered promiscuous mode [ 107.214045][ T6283] syzkaller0: entered allmulticast mode [ 107.227774][ T36] bridge0: port 3(bond1) entered disabled state [ 107.235156][ T13] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 107.244934][ T13] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.256486][ T6290] tipc: Started in network mode [ 107.261870][ T6290] tipc: Node identity 5e8004970b64, cluster identity 4711 [ 107.284149][ T6290] tipc: Enabled bearer , priority 0 [ 107.372305][ T6295] syzkaller0: entered promiscuous mode [ 107.386091][ T6295] syzkaller0: entered allmulticast mode [ 107.435475][ T6290] tipc: Resetting bearer [ 107.463826][ T6289] tipc: Resetting bearer [ 107.507574][ T6289] tipc: Disabling bearer [ 107.582885][ T6305] xt_l2tp: missing protocol rule (udp|l2tpip) [ 107.643939][ T6307] netlink: 32 bytes leftover after parsing attributes in process `syz.0.105'. [ 107.886490][ T6317] netdevsim netdevsim2: Direct firmware load for /. failed with error -2 [ 107.925395][ T6317] netdevsim netdevsim2: Falling back to sysfs fallback for: /. [ 108.366508][ T6350] netlink: 'syz.0.116': attribute type 21 has an invalid length. [ 108.414802][ T13] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 108.428216][ T6350] netlink: 'syz.0.116': attribute type 21 has an invalid length. [ 108.440961][ T13] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 108.473000][ T13] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 108.521221][ T13] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 108.523870][ T6353] netlink: 'syz.1.117': attribute type 5 has an invalid length. [ 109.166582][ T6368] syzkaller0: entered promiscuous mode [ 109.173609][ T6368] syzkaller0: entered allmulticast mode [ 109.409897][ T6388] pim6reg1: entered promiscuous mode [ 109.415358][ T6388] pim6reg1: entered allmulticast mode [ 109.600592][ T6399] x_tables: duplicate underflow at hook 3 [ 109.613007][ T6398] netlink: zone id is out of range [ 109.623049][ T6398] netlink: set zone limit has 4 unknown bytes [ 109.630826][ T6399] __nla_validate_parse: 14 callbacks suppressed [ 109.630844][ T6399] netlink: 24 bytes leftover after parsing attributes in process `syz.4.133'. [ 109.631194][ T6400] x_tables: duplicate underflow at hook 2 [ 109.872845][ T6418] netlink: 24 bytes leftover after parsing attributes in process `syz.4.137'. [ 109.906194][ T6412] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.010550][ T6423] netlink: 8 bytes leftover after parsing attributes in process `syz.4.137'. [ 110.312089][ T6438] netlink: 12 bytes leftover after parsing attributes in process `syz.1.144'. [ 110.685208][ T6455] netlink: 12 bytes leftover after parsing attributes in process `syz.1.151'. [ 110.752915][ T6454] bond1: entered promiscuous mode [ 110.784849][ T6454] bond1: entered allmulticast mode [ 110.828745][ T6454] 8021q: adding VLAN 0 to HW filter on device bond1 [ 110.904141][ T6455] vxcan2: entered allmulticast mode [ 111.192509][ T6474] netlink: 60 bytes leftover after parsing attributes in process `syz.3.153'. [ 111.242910][ T6476] netlink: 'syz.4.156': attribute type 29 has an invalid length. [ 111.261740][ T6476] netlink: 8 bytes leftover after parsing attributes in process `syz.4.156'. [ 111.305115][ T6481] netlink: 'syz.4.156': attribute type 29 has an invalid length. [ 111.335239][ T6481] netlink: 8 bytes leftover after parsing attributes in process `syz.4.156'. [ 111.395897][ T6483] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 111.430020][ T6483] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 111.532756][ T6489] netlink: 8 bytes leftover after parsing attributes in process `syz.3.159'. [ 111.568685][ T6490] netlink: 4 bytes leftover after parsing attributes in process `syz.3.159'. [ 111.688974][ T6497] netlink: 'syz.0.161': attribute type 4 has an invalid length. [ 111.762866][ T6497] `: renamed from bond0 (while UP) [ 111.790942][ T6500] netlink: 'syz.0.161': attribute type 4 has an invalid length. [ 112.434995][ T6494] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 113.139833][ T6557] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 113.229173][ T6562] netlink: 'syz.2.177': attribute type 11 has an invalid length. [ 113.311085][ T6557] TCP: TCP_TX_DELAY enabled [ 113.594765][ T6570] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.771215][ T6570] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.950820][ T6570] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.074631][ T6570] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.349072][ T804] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.433050][ T50] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.577736][ T50] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.603230][ T50] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.701958][ T6630] netlink: 'syz.0.197': attribute type 1 has an invalid length. [ 114.758086][ T6630] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 114.836642][ T6639] netlink: 'syz.2.198': attribute type 1 has an invalid length. [ 115.341772][ T6668] __nla_validate_parse: 8 callbacks suppressed [ 115.341792][ T6668] netlink: 60 bytes leftover after parsing attributes in process `syz.1.207'. [ 115.583529][ T6682] netlink: 'syz.1.212': attribute type 1 has an invalid length. [ 115.618623][ T6684] netlink: 'syz.1.212': attribute type 5 has an invalid length. [ 115.626674][ T6684] netlink: 'syz.1.212': attribute type 5 has an invalid length. [ 115.649150][ T6682] netlink: 'syz.1.212': attribute type 2 has an invalid length. [ 115.707313][ T6684] netlink: 'syz.1.212': attribute type 5 has an invalid length. [ 115.715267][ T6684] netlink: 'syz.1.212': attribute type 5 has an invalid length. [ 115.763081][ T6691] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 115.772905][ T6691] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 115.782154][ T6684] netlink: 'syz.1.212': attribute type 5 has an invalid length. [ 115.783288][ T6691] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 115.810193][ T6696] netlink: 'syz.3.214': attribute type 5 has an invalid length. [ 115.843559][ T43] IPVS: starting estimator thread 0... [ 115.949228][ T6698] IPVS: using max 25 ests per chain, 60000 per kthread [ 116.411007][ T6722] xt_hashlimit: size too large, truncated to 1048576 [ 116.438431][ T6724] workqueue: name exceeds WQ_NAME_LEN. Truncating to: &%Q0@æjʫ} [ 116.713263][ T6733] netlink: 80 bytes leftover after parsing attributes in process `syz.0.227'. [ 116.800805][ T6736] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.809181][ T6736] bridge_slave_1: left allmulticast mode [ 116.827394][ T6736] bridge_slave_1: left promiscuous mode [ 116.834132][ T6736] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.841538][ T6737] netlink: 112 bytes leftover after parsing attributes in process `syz.3.228'. [ 116.870255][ T6736] `: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 116.939080][ T6740] netlink: 188 bytes leftover after parsing attributes in process `syz.1.229'. [ 116.974498][ T6740] tap0: tun_chr_ioctl cmd 1074025678 [ 116.990266][ T6740] tap0: group set to 0 [ 117.190339][ T6752] netlink: 52 bytes leftover after parsing attributes in process `syz.0.233'. [ 117.219356][ T6752] netlink: 11562 bytes leftover after parsing attributes in process `syz.0.233'. [ 117.509798][ T6767] netlink: 20 bytes leftover after parsing attributes in process `syz.4.237'. [ 117.528993][ T6769] netlink: 8 bytes leftover after parsing attributes in process `syz.1.239'. [ 117.544708][ T6771] netlink: 8 bytes leftover after parsing attributes in process `syz.4.237'. [ 117.572353][ T6774] netlink: 8 bytes leftover after parsing attributes in process `syz.0.241'. [ 117.612254][ T6767] bond0: entered promiscuous mode [ 117.627272][ T6767] bond_slave_0: entered promiscuous mode [ 117.643830][ T6767] bond_slave_1: entered promiscuous mode [ 117.762110][ T6777] ip6gre1: entered promiscuous mode [ 117.782937][ T6777] ip6gre1: entered allmulticast mode [ 117.810988][ T6777] gretap0: entered promiscuous mode [ 118.041520][ T6783] syzkaller0: entered promiscuous mode [ 118.047242][ T6783] syzkaller0: entered allmulticast mode [ 119.524599][ T6829] xt_TCPMSS: Only works on TCP SYN packets [ 119.525060][ T6831] xt_TCPMSS: Only works on TCP SYN packets [ 119.773825][ T6837] tipc: Enabled bearer , priority 0 [ 119.784847][ T6837] syzkaller0: entered promiscuous mode [ 119.792650][ T6837] syzkaller0: entered allmulticast mode [ 119.827903][ T6837] tipc: Resetting bearer [ 119.872898][ T6841] openvswitch: netlink: nsh attr 0 has unexpected len 32768 expected 0 [ 119.882492][ T6841] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 119.892982][ T6836] tipc: Resetting bearer [ 119.936572][ T6836] tipc: Disabling bearer [ 120.228165][ T6860] block nbd0: reconnected socket [ 120.257830][ T6860] C: renamed from team_slave_0 (while UP) [ 120.279203][ T6860] validate_nla: 63 callbacks suppressed [ 120.279222][ T6860] netlink: 'syz.3.262': attribute type 1 has an invalid length. [ 120.337012][ T6860] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 120.380417][ T5838] block nbd0: Receive control failed (result -32) [ 120.392557][ T6867] __nla_validate_parse: 3 callbacks suppressed [ 120.392576][ T6867] netlink: 12 bytes leftover after parsing attributes in process `syz.1.265'. [ 120.580390][ T6876] netlink: 16 bytes leftover after parsing attributes in process `syz.2.268'. [ 120.818148][ T6889] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 120.955309][ T6893] netlink: 'syz.1.273': attribute type 1 has an invalid length. [ 121.074863][ T6904] netlink: 8 bytes leftover after parsing attributes in process `syz.0.275'. [ 121.106676][ T6899] gretap1: entered promiscuous mode [ 121.126555][ T6907] netlink: 576 bytes leftover after parsing attributes in process `syz.3.277'. [ 121.137139][ T6899] bond1: (slave gretap1): making interface the new active one [ 121.139768][ T6899] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 121.165008][ T6903] bond1: entered promiscuous mode [ 121.182219][ T6903] macvlan2: entered promiscuous mode [ 121.194533][ T6903] macvlan2: entered allmulticast mode [ 121.201962][ T6903] bond1: entered allmulticast mode [ 121.207722][ T6903] gretap1: entered allmulticast mode [ 121.228130][ T6903] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 121.242635][ T6903] bond1: left promiscuous mode [ 121.854174][ T6932] syzkaller0: entered promiscuous mode [ 121.859836][ T6932] syzkaller0: entered allmulticast mode [ 122.051366][ T6936] syzkaller0: entered promiscuous mode [ 122.071582][ T6936] syzkaller0: entered allmulticast mode [ 122.114837][ T6947] netlink: 8 bytes leftover after parsing attributes in process `syz.4.292'. [ 123.234461][ T6947] 8021q: VLANs not supported on ipvlan1 [ 123.251107][ T6954] vlan2: entered promiscuous mode [ 123.259144][ T6954] bridge0: entered promiscuous mode [ 123.498608][ T6970] netlink: 'syz.2.299': attribute type 15 has an invalid length. [ 123.762319][ T6985] netlink: 4 bytes leftover after parsing attributes in process `syz.3.303'. [ 123.839023][ T6985] netlink: 88 bytes leftover after parsing attributes in process `syz.3.303'. [ 124.086083][ T6998] netlink: 8 bytes leftover after parsing attributes in process `syz.4.310'. [ 124.141257][ T6998] netlink: 'syz.4.310': attribute type 1 has an invalid length. [ 124.170506][ T6998] netlink: 'syz.4.310': attribute type 2 has an invalid length. [ 124.385701][ T7012] team0: Port device team_slave_0 removed [ 124.952546][ T7047] netlink: 148 bytes leftover after parsing attributes in process `syz.4.322'. [ 125.058313][ T7053] netlink: 232 bytes leftover after parsing attributes in process `syz.3.324'. [ 125.350090][ T7061] bond0 (unregistering): Released all slaves [ 125.431149][ T7066] netlink: 4 bytes leftover after parsing attributes in process `syz.4.327'. [ 125.463994][ T7067] netlink: 4 bytes leftover after parsing attributes in process `syz.4.327'. [ 125.599658][ T7077] netlink: 516 bytes leftover after parsing attributes in process `syz.1.331'. [ 126.997227][ T7190] netlink: 4 bytes leftover after parsing attributes in process `syz.3.344'. [ 127.015867][ T7190] veth0_macvtap: left promiscuous mode [ 127.372697][ T7208] netlink: 24 bytes leftover after parsing attributes in process `syz.1.350'. [ 127.385179][ T7209] netlink: 4 bytes leftover after parsing attributes in process `syz.0.348'. [ 127.530209][ T7208] netlink: 16 bytes leftover after parsing attributes in process `syz.1.350'. [ 127.865313][ T7223] netlink: 4 bytes leftover after parsing attributes in process `syz.0.355'. [ 127.914410][ T7228] netlink: 232 bytes leftover after parsing attributes in process `syz.4.357'. [ 127.949074][ T7228] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 128.075349][ T7233] netlink: 165 bytes leftover after parsing attributes in process `syz.1.358'. [ 128.230934][ T7241] openvswitch: netlink: Flow actions attr not present in new flow. [ 129.165292][ T7297] ip6t_srh: unknown srh invflags 4000 [ 129.186564][ T7294] batman_adv: batadv0: Adding interface: dummy0 [ 129.226232][ T7294] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 129.261326][ T7294] batman_adv: batadv0: Interface activated: dummy0 [ 129.302702][ T7291] bridge0: port 3(vlan2) entered blocking state [ 129.337305][ T7291] bridge0: port 3(vlan2) entered disabled state [ 129.344012][ T7291] vlan2: entered allmulticast mode [ 129.355205][ T7291] bridge0: entered allmulticast mode [ 129.398545][ T7291] vlan2: left allmulticast mode [ 129.403476][ T7291] bridge0: left allmulticast mode [ 129.798647][ T7337] netlink: 'syz.4.387': attribute type 1 has an invalid length. [ 129.836289][ T7337] bond2: (slave gretap2): making interface the new active one [ 129.852136][ T7337] bond2: (slave gretap2): Enslaving as an active interface with an up link [ 130.477352][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 130.611792][ T7371] __nla_validate_parse: 7 callbacks suppressed [ 130.611813][ T7371] netlink: 4 bytes leftover after parsing attributes in process `syz.4.395'. [ 130.687589][ T7374] netlink: 16 bytes leftover after parsing attributes in process `syz.2.396'. [ 130.708975][ T7374] netlink: 16 bytes leftover after parsing attributes in process `syz.2.396'. [ 130.898216][ T7385] tipc: Enabled bearer , priority 0 [ 130.923700][ T7385] syzkaller0: entered promiscuous mode [ 130.930147][ T7385] syzkaller0: entered allmulticast mode [ 130.951342][ T7388] tipc: Enabling of bearer rejected, media not registered [ 130.971436][ T7385] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 131.113844][ T7396] tipc: Resetting bearer [ 131.217670][ T7406] netlink: 'syz.4.407': attribute type 30 has an invalid length. [ 131.659295][ T7381] tipc: Resetting bearer [ 131.733794][ T7381] tipc: Disabling bearer [ 131.754659][ T7440] 8021q: VLANs not supported on ip6tnl0 [ 131.760210][ T7438] netlink: 4 bytes leftover after parsing attributes in process `syz.1.416'. [ 131.819949][ T7438] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.979366][ T7438] bridge_slave_1 (unregistering): left allmulticast mode [ 131.994287][ T7438] bridge_slave_1 (unregistering): left promiscuous mode [ 132.007230][ T7446] netlink: 8 bytes leftover after parsing attributes in process `syz.4.421'. [ 132.013202][ T7438] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.027792][ T7448] netlink: 'syz.0.420': attribute type 1 has an invalid length. [ 132.340416][ T7461] netlink: 8 bytes leftover after parsing attributes in process `syz.0.424'. [ 132.558552][ T7468] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode [ 132.568830][ T7468] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode [ 133.039503][ T7491] tipc: Cannot configure node identity twice [ 133.340291][ T7509] netlink: 44 bytes leftover after parsing attributes in process `syz.4.439'. [ 133.363696][ T7512] netlink: 24 bytes leftover after parsing attributes in process `syz.0.440'. [ 133.724535][ T7532] sctp: [Deprecated]: syz.1.448 (pid 7532) Use of int in max_burst socket option. [ 133.724535][ T7532] Use struct sctp_assoc_value instead [ 133.809551][ T7536] netlink: 12 bytes leftover after parsing attributes in process `syz.2.450'. [ 133.840618][ T7538] 8021q: adding VLAN 0 to HW filter on device ipvlan0 [ 133.871619][ T7538] bond0: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 133.939268][ T7536] xfrm1: entered promiscuous mode [ 133.949089][ T7536] xfrm1: entered allmulticast mode [ 134.019049][ T7552] netlink: 8 bytes leftover after parsing attributes in process `syz.4.453'. [ 134.204365][ T7560] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 134.288225][ T7569] trusted_key: syz.1.457 sent an empty control message without MSG_MORE. [ 135.587160][ T7638] netlink: 'syz.3.481': attribute type 1 has an invalid length. [ 135.594969][ T7638] netlink: 'syz.3.481': attribute type 3 has an invalid length. [ 135.682288][ T7638] __nla_validate_parse: 6 callbacks suppressed [ 135.682308][ T7638] netlink: 172 bytes leftover after parsing attributes in process `syz.3.481'. [ 135.797182][ T7638] NCSI netlink: No device for ifindex 813332851 [ 135.849851][ T7655] netlink: 68 bytes leftover after parsing attributes in process `syz.4.487'. [ 135.880517][ T7658] netlink: 4 bytes leftover after parsing attributes in process `syz.1.486'. [ 135.988778][ T7655] netlink: 80 bytes leftover after parsing attributes in process `syz.4.487'. [ 135.999506][ T7658] team1 (uninitialized): Failed to send options change via netlink (err -105) [ 136.022279][ T7662] netlink: 12 bytes leftover after parsing attributes in process `syz.2.489'. [ 136.110540][ T7658] team1: entered promiscuous mode [ 136.126037][ T7658] team1: entered allmulticast mode [ 136.454455][ T7686] netlink: 4 bytes leftover after parsing attributes in process `syz.3.493'. [ 136.652986][ T7691] atomic_op ffff88807a4fe198 conn xmit_atomic 0000000000000000 [ 137.007600][ T7706] IPVS: set_ctl: invalid protocol: 47 0.0.0.0:20003 [ 137.062621][ T7710] netlink: 8 bytes leftover after parsing attributes in process `syz.4.504'. [ 137.131349][ T7713] netlink: 60 bytes leftover after parsing attributes in process `syz.3.506'. [ 137.148912][ T7713] netlink: 60 bytes leftover after parsing attributes in process `syz.3.506'. [ 137.168265][ T7713] netlink: 4 bytes leftover after parsing attributes in process `syz.3.506'. [ 137.431849][ T7729] batman_adv: batadv0: Interface deactivated: dummy0 [ 137.439583][ T7729] batman_adv: batadv0: Removing interface: dummy0 [ 137.464499][ T7729] bridge_slave_0: left allmulticast mode [ 137.472895][ T7729] bridge_slave_0: left promiscuous mode [ 137.480074][ T7729] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.494964][ T7729] `: (slave bridge_slave_1): Releasing backup interface [ 137.534212][ T7729] `: (slave bond_slave_0): Releasing backup interface [ 137.558252][ T7729] `: (slave bond_slave_1): Releasing backup interface [ 137.580607][ T7729] team0: Port device team_slave_0 removed [ 137.593931][ T7729] team0: Port device team_slave_1 removed [ 137.603071][ T7729] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 137.611073][ T7729] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 137.622057][ T7729] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 137.629956][ T7729] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 137.639517][ T7729] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 137.863875][ T7753] netlink: 'syz.4.516': attribute type 1 has an invalid length. [ 138.001533][ T7753] 8021q: adding VLAN 0 to HW filter on device bond4 [ 138.072107][ T7768] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 138.177128][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.187272][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.307883][ T7781] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 138.369832][ T7783] team0: Mode changed to "loadbalance" [ 138.618154][ T7793] netlink: 'syz.0.525': attribute type 23 has an invalid length. [ 138.754360][ T7793] delete_channel: no stack [ 138.765663][ T7802] Driver unsupported XDP return value 0 on prog (id 206) dev N/A, expect packet loss! [ 138.844919][ T7804] tipc: Enabled bearer , priority 0 [ 139.387035][ T5891] IPVS: starting estimator thread 0... [ 139.477190][ T7839] IPVS: using max 26 ests per chain, 62400 per kthread [ 139.552465][ T7849] bridge_slave_1: left allmulticast mode [ 139.560910][ T7849] bridge_slave_1: left promiscuous mode [ 139.579689][ T7849] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.625285][ T7849] bridge_slave_0: left allmulticast mode [ 139.637645][ T7849] bridge_slave_0: left promiscuous mode [ 139.643515][ T7849] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.791529][ T7853] bridge0: port 4(ipvlan0) entered blocking state [ 139.798501][ T7853] bridge0: port 4(ipvlan0) entered disabled state [ 139.805109][ T7853] ipvlan0: entered allmulticast mode [ 139.810603][ T7853] bridge0: entered allmulticast mode [ 139.818202][ T7853] ipvlan0: left allmulticast mode [ 139.823399][ T7853] bridge0: left allmulticast mode [ 139.958391][ T10] tipc: Node number set to 116639865 [ 139.960617][ T7869] : entered promiscuous mode [ 140.122987][ T7880] ip6gre1: entered promiscuous mode [ 140.145833][ T7880] ip6gre1: entered allmulticast mode [ 140.188276][ T7149] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 140.204199][ T7149] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 140.217523][ T10] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 140.257598][ T7880] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 140.482365][ T7899] Can't find ip_set type [ 140.687351][ T10] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 140.767218][ T10] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 141.609599][ T7943] x_tables: unsorted entry at hook 1 [ 141.738280][ T7947] dvmrp0: entered allmulticast mode [ 141.755020][ T7952] netlink: 'syz.2.577': attribute type 19 has an invalid length. [ 141.776666][ T7952] __nla_validate_parse: 12 callbacks suppressed [ 141.776687][ T7952] netlink: 36 bytes leftover after parsing attributes in process `syz.2.577'. [ 142.205632][ T7967] 8021q: adding VLAN 0 to HW filter on device ` [ 142.249928][ T7974] netlink: 36 bytes leftover after parsing attributes in process `syz.4.584'. [ 142.269193][ T7967] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 142.529841][ T7982] netlink: 8 bytes leftover after parsing attributes in process `syz.1.586'. [ 142.898349][ T8002] netlink: 'syz.0.593': attribute type 1 has an invalid length. [ 142.938844][ T8002] netlink: 'syz.0.593': attribute type 3 has an invalid length. [ 142.957795][ T8002] netlink: 212 bytes leftover after parsing attributes in process `syz.0.593'. [ 143.021586][ T8005] netlink: 'syz.4.595': attribute type 12 has an invalid length. [ 143.039604][ T8005] netlink: 'syz.4.595': attribute type 29 has an invalid length. [ 143.054549][ T8005] netlink: 148 bytes leftover after parsing attributes in process `syz.4.595'. [ 143.064955][ T8005] netlink: 43 bytes leftover after parsing attributes in process `syz.4.595'. [ 143.074494][ T8009] netlink: 20 bytes leftover after parsing attributes in process `syz.3.596'. [ 143.101303][ T8012] netlink: 8 bytes leftover after parsing attributes in process `syz.1.590'. [ 143.122877][ T8013] netlink: 232 bytes leftover after parsing attributes in process `syz.4.595'. [ 143.496090][ T8027] netlink: 16 bytes leftover after parsing attributes in process `syz.2.602'. [ 143.947933][ T8055] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode [ 143.955778][ T8055] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode [ 144.009762][ T8055] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 144.072719][ T8057] syzkaller1: entered promiscuous mode [ 144.092339][ T8057] syzkaller1: entered allmulticast mode [ 144.241973][ T8073] vlan2: entered promiscuous mode [ 144.267854][ T8073] vlan2: entered allmulticast mode [ 144.306668][ T8073] hsr_slave_1: entered allmulticast mode [ 144.371423][ T8080] dvmrp0: left allmulticast mode [ 144.397251][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 144.535898][ T8085] netlink: 'syz.4.623': attribute type 1 has an invalid length. [ 144.920018][ T8115] netlink: 'syz.0.626': attribute type 10 has an invalid length. [ 145.087290][ T8122] netlink: 'syz.2.628': attribute type 1 has an invalid length. [ 145.216384][ T8131] netlink: 'syz.1.632': attribute type 1 has an invalid length. [ 145.224708][ T8131] netlink: 'syz.1.632': attribute type 3 has an invalid length. [ 145.255791][ T8122] bond3: entered promiscuous mode [ 145.261561][ T8122] bond3: entered allmulticast mode [ 145.267797][ T8122] 8021q: adding VLAN 0 to HW filter on device bond3 [ 145.602771][ T8150] Bluetooth: MGMT ver 1.23 [ 145.756799][ T8169] IPv6: NLM_F_CREATE should be specified when creating new route [ 146.263598][ T8196] bond2: (slave bridge1): making interface the new active one [ 146.309666][ T8196] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 146.434940][ T8200] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 146.467578][ T8200] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 146.477131][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 146.634274][ T8206] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 146.865400][ T8221] __nla_validate_parse: 8 callbacks suppressed [ 146.865420][ T8221] netlink: 8 bytes leftover after parsing attributes in process `syz.0.657'. [ 147.035889][ T8236] netlink: 4 bytes leftover after parsing attributes in process `syz.4.660'. [ 147.251238][ T8226] smc: net device gre0 applied user defined pnetid SYZ1 [ 147.261056][ T8229] veth0: entered promiscuous mode [ 147.266349][ T8237] validate_nla: 3 callbacks suppressed [ 147.266366][ T8237] netlink: 'syz.3.661': attribute type 1 has an invalid length. [ 147.296370][ T8233] veth0_to_bridge: entered promiscuous mode [ 147.296874][ T8237] netlink: 232 bytes leftover after parsing attributes in process `syz.3.661'. [ 147.497626][ T8230] veth0_to_bridge: left promiscuous mode [ 147.729807][ T8254] netlink: 'syz.2.666': attribute type 21 has an invalid length. [ 147.756184][ T8251] syz_tun: entered allmulticast mode [ 148.102897][ T8248] syz_tun: left allmulticast mode [ 148.349633][ T8285] netlink: 'syz.4.673': attribute type 4 has an invalid length. [ 148.409539][ T8290] netlink: 'syz.4.673': attribute type 4 has an invalid length. [ 148.499799][ T8285] netlink: 'syz.4.673': attribute type 1 has an invalid length. [ 148.714148][ T8290] veth1: entered promiscuous mode [ 149.054380][ T8313] netlink: 40 bytes leftover after parsing attributes in process `syz.2.683'. [ 149.068705][ T8311] netlink: 24 bytes leftover after parsing attributes in process `syz.3.682'. [ 149.109091][ T8312] tipc: New replicast peer: 255.255.255.255 [ 149.143626][ T8312] tipc: Enabled bearer , priority 10 [ 149.296851][ T8315] tipc: Enabling of bearer rejected, already enabled [ 149.577828][ T8331] batadv_slave_0: entered promiscuous mode [ 149.663561][ T8329] batadv_slave_0: left promiscuous mode [ 149.704788][ T8333] netlink: 12 bytes leftover after parsing attributes in process `syz.2.688'. [ 150.037743][ T8346] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 150.045306][ T8346] IPv6: NLM_F_CREATE should be set when creating new route [ 150.068783][ T8347] netlink: 4 bytes leftover after parsing attributes in process `syz.1.694'. [ 150.310479][ T8362] netlink: 'syz.3.698': attribute type 3 has an invalid length. [ 150.418398][ T8368] veth0: entered promiscuous mode [ 150.474758][ T8369] veth0: left promiscuous mode [ 150.702303][ T8383] netlink: 8 bytes leftover after parsing attributes in process `syz.1.703'. [ 150.776343][ T8389] netlink: 44 bytes leftover after parsing attributes in process `syz.1.703'. [ 150.807337][ T8389] netlink: 8 bytes leftover after parsing attributes in process `syz.1.703'. [ 150.876352][ T8393] netlink: 'syz.4.707': attribute type 10 has an invalid length. [ 150.892100][ T8383] netlink: 'syz.1.703': attribute type 1 has an invalid length. [ 150.908939][ T8383] netlink: 'syz.1.703': attribute type 2 has an invalid length. [ 150.935046][ T8391] batadv_slave_0: entered promiscuous mode [ 150.947290][ T8396] netlink: 'syz.4.707': attribute type 10 has an invalid length. [ 150.964278][ T8391] batman_adv: batadv0: Adding interface: macsec1 [ 150.971502][ T8391] batman_adv: batadv0: The MTU of interface macsec1 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 151.020990][ T8391] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 151.067579][ T8391] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.096640][ T8391] batman_adv: batadv0: Interface activated: macsec1 [ 151.124055][ T8386] syzkaller0: entered promiscuous mode [ 151.130700][ T8386] syzkaller0: entered allmulticast mode [ 151.143082][ T8393] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.151006][ T8393] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.223543][ T8408] openvswitch: netlink: nsh attribute has unmatched MD type 0. [ 151.232163][ T8408] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 151.269735][ T8408] tipc: Started in network mode [ 151.297132][ T8408] tipc: Node identity 080211000001, cluster identity 4711 [ 151.304501][ T8408] tipc: Enabled bearer , priority 0 [ 151.461367][ T8420] veth5: entered promiscuous mode [ 151.491788][ T8420] veth5: entered allmulticast mode [ 151.572527][ T8414] tipc: Resetting bearer [ 152.091556][ T8458] __nla_validate_parse: 5 callbacks suppressed [ 152.091576][ T8458] netlink: 16 bytes leftover after parsing attributes in process `syz.4.720'. [ 152.149071][ T8459] netlink: 48 bytes leftover after parsing attributes in process `syz.4.720'. [ 152.304446][ T8462] netlink: 4 bytes leftover after parsing attributes in process `syz.2.721'. [ 152.315622][ T5891] tipc: Node number set to 134418688 [ 152.363368][ T8462] chnl_net:caif_netlink_parms(): no params data found [ 152.403997][ T8466] netlink: 164 bytes leftover after parsing attributes in process `syz.4.724'. [ 152.823524][ T8491] netlink: 8 bytes leftover after parsing attributes in process `syz.0.728'. [ 152.863426][ T8491] netlink: 20 bytes leftover after parsing attributes in process `syz.0.728'. [ 152.877148][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 152.978181][ T8491] geneve2: entered promiscuous mode [ 152.999223][ T8491] geneve2: entered allmulticast mode [ 153.265064][ T8508] netlink: 44 bytes leftover after parsing attributes in process `syz.2.731'. [ 153.341072][ T8516] netlink: 294 bytes leftover after parsing attributes in process `syz.0.734'. [ 153.377523][ T8516] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 153.571121][ T8519] wg2: entered promiscuous mode [ 153.605538][ T8519] wg2: entered allmulticast mode [ 153.653855][ T8529] netlink: 8 bytes leftover after parsing attributes in process `syz.3.736'. [ 153.702354][ T8533] netlink: 8 bytes leftover after parsing attributes in process `syz.0.738'. [ 154.480455][ T8567] x_tables: duplicate entry at hook 2 [ 154.683724][ T8579] bond3: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 154.701629][ T8579] bond3 (unregistering): Released all slaves [ 155.190714][ T8615] netlink: 'syz.3.757': attribute type 21 has an invalid length. [ 155.332030][ T8619] vlan2: entered promiscuous mode [ 155.387607][ T8619] bridge0: entered promiscuous mode [ 155.775640][ T8645] IPVS: set_ctl: invalid protocol: 22 224.0.0.2:20002 [ 155.788816][ T5838] Bluetooth: hci3: link tx timeout [ 155.794267][ T5838] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 156.543265][ T8684] veth1_macvtap: left promiscuous mode [ 156.551781][ T8684] macsec0: entered promiscuous mode [ 156.558507][ T8684] macsec0: entered allmulticast mode [ 156.608390][ T8687] veth1_macvtap: entered promiscuous mode [ 156.635646][ T8687] veth1_macvtap: entered allmulticast mode [ 156.646537][ T8687] macsec0: left promiscuous mode [ 156.652364][ T8687] macsec0: left allmulticast mode [ 156.657663][ T8687] veth1_macvtap: left allmulticast mode [ 156.701156][ T8688] tipc: Enabling of bearer rejected, already enabled [ 156.939528][ T8705] v: renamed from veth1_vlan (while UP) [ 157.184591][ T8721] __nla_validate_parse: 13 callbacks suppressed [ 157.184611][ T8721] netlink: 8 bytes leftover after parsing attributes in process `syz.4.788'. [ 157.254249][ T8721] netlink: 12 bytes leftover after parsing attributes in process `syz.4.788'. [ 157.274671][ T8724] netlink: 8 bytes leftover after parsing attributes in process `syz.1.787'. [ 157.308304][ T8724] netlink: 4 bytes leftover after parsing attributes in process `syz.1.787'. [ 157.562245][ T8744] netlink: 4 bytes leftover after parsing attributes in process `syz.1.793'. [ 157.575685][ T8746] netlink: 124 bytes leftover after parsing attributes in process `syz.3.794'. [ 157.680577][ T8753] netlink: 8 bytes leftover after parsing attributes in process `syz.1.797'. [ 157.751835][ T8748] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 157.778963][ T8748] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.812376][ T8759] tipc: Started in network mode [ 157.819072][ T8759] tipc: Node identity 7272ad03e379, cluster identity 4711 [ 157.826864][ T8759] tipc: Enabled bearer , priority 0 [ 157.838151][ T5844] Bluetooth: hci3: command 0x0405 tx timeout [ 157.896238][ T8748] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 157.917707][ T8748] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.957946][ T8751] syzkaller0: entered promiscuous mode [ 157.969494][ T8751] syzkaller0: entered allmulticast mode [ 157.975234][ T8764] syz.3.800: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 157.990909][ T8764] CPU: 1 UID: 0 PID: 8764 Comm: syz.3.800 Not tainted syzkaller #0 PREEMPT(full) [ 157.990937][ T8764] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 157.990956][ T8764] Call Trace: [ 157.990964][ T8764] [ 157.990973][ T8764] dump_stack_lvl+0x189/0x250 [ 157.991008][ T8764] ? __pfx_dump_stack_lvl+0x10/0x10 [ 157.991036][ T8764] ? __pfx__printk+0x10/0x10 [ 157.991056][ T8764] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 157.991082][ T8764] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 157.991110][ T8764] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 157.991139][ T8764] warn_alloc+0x214/0x310 [ 157.991180][ T8764] ? stack_depot_save_flags+0x40/0x860 [ 157.991218][ T8764] ? __pfx_warn_alloc+0x10/0x10 [ 157.991250][ T8764] ? kasan_save_track+0x3e/0x80 [ 157.991279][ T8764] ? __kasan_kmalloc+0x93/0xb0 [ 157.991310][ T8764] ? xsk_setsockopt+0x4dc/0x8d0 [ 157.991333][ T8764] ? do_sock_setsockopt+0x17c/0x1b0 [ 157.991351][ T8764] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 157.991369][ T8764] ? do_syscall_64+0xfa/0xfa0 [ 157.991396][ T8764] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.991432][ T8764] __vmalloc_node_range_noprof+0x125/0x12d0 [ 157.991495][ T8764] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 157.991532][ T8764] ? __kasan_kmalloc+0x93/0xb0 [ 157.991571][ T8764] vmalloc_user_noprof+0xad/0xf0 [ 157.991602][ T8764] ? xskq_create+0xbf/0x170 [ 157.991630][ T8764] xskq_create+0xbf/0x170 [ 157.991660][ T8764] xsk_init_queue+0xb0/0x110 [ 157.991690][ T8764] xsk_setsockopt+0x4dc/0x8d0 [ 157.991717][ T8764] ? __pfx_xsk_setsockopt+0x10/0x10 [ 157.991745][ T8764] ? __pfx_aa_sk_perm+0x10/0x10 [ 157.991776][ T8764] ? aa_sock_opt_perm+0xff/0x1b0 [ 157.991810][ T8764] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 157.991831][ T8764] ? __pfx_xsk_setsockopt+0x10/0x10 [ 157.991858][ T8764] do_sock_setsockopt+0x17c/0x1b0 [ 157.991884][ T8764] __x64_sys_setsockopt+0x13f/0x1b0 [ 157.991912][ T8764] do_syscall_64+0xfa/0xfa0 [ 157.991939][ T8764] ? lockdep_hardirqs_on+0x9c/0x150 [ 157.991969][ T8764] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.991990][ T8764] ? clear_bhb_loop+0x60/0xb0 [ 157.992015][ T8764] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.992035][ T8764] RIP: 0033:0x7f6cf2d8f6c9 [ 157.992064][ T8764] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 157.992081][ T8764] RSP: 002b:00007f6cf3cda038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 157.992104][ T8764] RAX: ffffffffffffffda RBX: 00007f6cf2fe5fa0 RCX: 00007f6cf2d8f6c9 [ 157.992120][ T8764] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000004 [ 157.992131][ T8764] RBP: 00007f6cf2e11f91 R08: 0000000000000004 R09: 0000000000000000 [ 157.992144][ T8764] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 157.992164][ T8764] R13: 00007f6cf2fe6038 R14: 00007f6cf2fe5fa0 R15: 00007fff7e79b2d8 [ 157.992195][ T8764] [ 157.993044][ T8764] Mem-Info: [ 158.294929][ T8764] active_anon:5603 inactive_anon:0 isolated_anon:0 [ 158.294929][ T8764] active_file:2628 inactive_file:39900 isolated_file:0 [ 158.294929][ T8764] unevictable:768 dirty:69 writeback:0 [ 158.294929][ T8764] slab_reclaimable:10762 slab_unreclaimable:99205 [ 158.294929][ T8764] mapped:32381 shmem:1353 pagetables:1234 [ 158.294929][ T8764] sec_pagetables:0 bounce:0 [ 158.294929][ T8764] kernel_misc_reclaimable:0 [ 158.294929][ T8764] free:1325951 free_pcp:19564 free_cma:0 [ 158.346177][ T8764] Node 0 active_anon:22416kB inactive_anon:0kB active_file:10512kB inactive_file:159396kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:129464kB dirty:272kB writeback:0kB shmem:3876kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13308kB pagetables:4788kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 158.379154][ T8764] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:176kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 158.381144][ T8748] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 158.410970][ T8764] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 158.425411][ T8748] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.471334][ T8764] lowmem_reserve[]: 0 2505 2505 2505 2505 [ 158.478808][ T8764] Node 0 DMA32 free:1386576kB boost:0kB min:34308kB low:42884kB high:51460kB reserved_highatomic:0KB free_highatomic:0KB active_anon:22416kB inactive_anon:0kB active_file:10512kB inactive_file:159396kB unevictable:1536kB writepending:272kB zspages:0kB present:3129332kB managed:2565168kB mlocked:0kB bounce:0kB free_pcp:62768kB local_pcp:20800kB free_cma:0kB [ 158.519401][ T8764] lowmem_reserve[]: 0 0 0 0 0 [ 158.522673][ T8751] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 158.524351][ T8764] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 158.571802][ T8764] lowmem_reserve[]: 0 0 0 0 0 [ 158.579582][ T8773] tipc: Resetting bearer [ 158.586686][ T8764] Node 1 Normal free:3901868kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:16096kB local_pcp:7072kB free_cma:0kB [ 158.586860][ T8750] tipc: Resetting bearer [ 158.626228][ T8764] lowmem_reserve[]: 0 0 0 0 0 [ 158.632073][ T8764] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 158.653163][ T8764] Node 0 DMA32: 630*4kB (UME) 311*8kB (UM) 168*16kB (UM) 391*32kB (UME) 109*64kB (UM) 47*128kB (UM) 39*256kB (UME) 22*512kB (UM) 11*1024kB (UM) 5*2048kB (M) 320*4096kB (M) = 1386672kB [ 158.673865][ T8764] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 158.674774][ T8750] tipc: Disabling bearer [ 158.689281][ T8764] Node 1 Normal: 189*4kB (UME) 43*8kB (UME) 42*16kB (UME) 74*32kB (UM) 24*64kB (UME) 7*128kB (UME) 4*256kB (UME) 4*512kB (UM) 3*1024kB (UME) 1*2048kB (E) 949*4096kB (M) = 3901868kB [ 158.711788][ T8764] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 158.722515][ T8764] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 158.732341][ T8764] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 158.742860][ T8764] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 158.752344][ T8764] 43877 total pagecache pages [ 158.757449][ T8764] 0 pages in swap cache [ 158.761642][ T8764] Free swap = 124996kB [ 158.765825][ T8764] Total swap = 124996kB [ 158.770581][ T8764] 2097051 pages RAM [ 158.775351][ T8764] 0 pages HighMem/MovableOnly [ 158.779768][ T8748] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 158.791523][ T8748] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.811367][ T8764] 424117 pages reserved [ 158.815856][ T8764] 0 pages cma reserved [ 158.938080][ T8785] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 159.023257][ T1165] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 159.035044][ T1165] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.044408][ T8789] x_tables: duplicate underflow at hook 2 [ 159.124507][ T1165] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 159.143665][ T1165] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.176294][ T1165] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 159.219265][ T1165] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.261592][ T1165] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 159.286360][ T1165] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.286386][ T8792] netlink: 112 bytes leftover after parsing attributes in process `syz.1.807'. [ 159.309648][ T8799] netlink: 36 bytes leftover after parsing attributes in process `syz.3.809'. [ 159.312894][ T8796] netlink: 4 bytes leftover after parsing attributes in process `syz.4.810'. [ 159.980382][ T8834] netlink: 'syz.3.822': attribute type 1 has an invalid length. [ 160.155472][ T8848] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 160.273562][ T8855] tipc: Started in network mode [ 160.287077][ T8855] tipc: Node identity 10000, cluster identity 4711 [ 160.293632][ T8855] tipc: Node number set to 65536 [ 160.301366][ T8855] tipc: Cannot configure node identity twice [ 160.555810][ T8872] netlink: 'syz.1.833': attribute type 12 has an invalid length. [ 160.934076][ T8893] netlink: 'syz.4.836': attribute type 1 has an invalid length. [ 160.980887][ T8893] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 161.485984][ T8928] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 161.499184][ T8930] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 168.877173][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 178.477316][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 193.295014][ T8967] __nla_validate_parse: 16 callbacks suppressed [ 193.295059][ T8967] netlink: 8 bytes leftover after parsing attributes in process `syz.4.858'. [ 194.444347][ T9018] netlink: 12 bytes leftover after parsing attributes in process `syz.1.880'. [ 194.581706][ T9018] 8021q: adding VLAN 0 to HW filter on device bond3 [ 195.490760][ T9054] netlink: 28 bytes leftover after parsing attributes in process `syz.1.890'. [ 195.571060][ T9058] mac80211_hwsim hwsim6 syzkaller0: Caught tx_queue_len zero misconfig [ 195.635805][ T9062] netlink: 20 bytes leftover after parsing attributes in process `syz.3.894'. [ 195.662345][ T9062] netlink: 56 bytes leftover after parsing attributes in process `syz.3.894'. [ 195.663705][ T9053] netlink: 4 bytes leftover after parsing attributes in process `syz.4.891'. [ 195.724006][ T9062] bond2 (unregistering): Released all slaves [ 196.088981][ T9087] netlink: 'syz.2.899': attribute type 1 has an invalid length. [ 196.203190][ T9087] 8021q: adding VLAN 0 to HW filter on device bond4 [ 196.354240][ T9103] netlink: 8 bytes leftover after parsing attributes in process `syz.1.902'. [ 196.405449][ T9105] netlink: 4 bytes leftover after parsing attributes in process `syz.0.901'. [ 196.458250][ T9109] netlink: 12 bytes leftover after parsing attributes in process `syz.0.901'. [ 198.083244][ T9093] bond4: (slave veth3): Enslaving as an active interface with a down link [ 198.149556][ T9087] bond4: (slave veth0_to_bond): making interface the new active one [ 198.193962][ T9087] veth0_to_bond: entered promiscuous mode [ 198.231309][ T9087] bond4: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 198.272731][ T9103] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 198.281255][ T9114] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 198.384797][ T9157] raw_sendmsg: syz.3.904 forgot to set AF_INET. Fix it! [ 198.439512][ T9159] netlink: 48 bytes leftover after parsing attributes in process `syz.3.904'. [ 198.785139][ T9180] netlink: 2 bytes leftover after parsing attributes in process `syz.2.910'. [ 198.957163][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 199.360467][ T9215] netlink: 'syz.4.919': attribute type 10 has an invalid length. [ 199.503276][ T9215] syz_tun: entered promiscuous mode [ 199.534724][ T9215] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 199.543727][ T9221] netlink: 12 bytes leftover after parsing attributes in process `syz.1.918'. [ 199.602949][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.612279][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 200.009960][ T9241] netlink: 4 bytes leftover after parsing attributes in process `syz.4.925'. [ 200.207638][ T9257] netlink: 'syz.1.930': attribute type 1 has an invalid length. [ 200.268289][ T9257] 8021q: adding VLAN 0 to HW filter on device bond4 [ 200.335215][ T9264] bond4: (slave geneve2): making interface the new active one [ 200.356666][ T9264] bond4: (slave geneve2): Enslaving as an active interface with an up link [ 200.626627][ T9270] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 201.015370][ T9300] netlink: 4 bytes leftover after parsing attributes in process `syz.4.940'. [ 201.060859][ T9291] tipc: Enabling of bearer rejected, already enabled [ 201.070220][ T9296] netlink: 12 bytes leftover after parsing attributes in process `syz.4.940'. [ 201.097765][ T9292] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 201.348794][ T9313] netlink: 76 bytes leftover after parsing attributes in process `syz.1.943'. [ 201.474826][ T9325] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 201.662435][ T9334] netlink: 14 bytes leftover after parsing attributes in process `syz.4.949'. [ 201.686718][ T9331] netlink: 14 bytes leftover after parsing attributes in process `syz.4.949'. [ 202.030315][ T9359] netlink: 12 bytes leftover after parsing attributes in process `syz.0.954'. [ 202.330157][ T9369] can: request_module (can-proto-0) failed. [ 202.865900][ T9396] tipc: Enabling of bearer rejected, already enabled [ 203.062504][ T9403] netlink: 'syz.4.964': attribute type 17 has an invalid length. [ 203.577114][ T9437] syzkaller0: entered promiscuous mode [ 203.598610][ T9437] syzkaller0: entered allmulticast mode [ 203.666695][ T9437] __nla_validate_parse: 6 callbacks suppressed [ 203.666714][ T9437] netlink: 108 bytes leftover after parsing attributes in process `syz.4.972'. [ 203.702199][ T9437] netlink: 8 bytes leftover after parsing attributes in process `syz.4.972'. [ 203.995212][ T9465] netlink: 4 bytes leftover after parsing attributes in process `syz.4.980'. [ 204.006804][ T9465] openvswitch: netlink: Flow actions attr not present in new flow. [ 204.121293][ T9476] netlink: 'syz.4.984': attribute type 1 has an invalid length. [ 204.191174][ T9476] 8021q: adding VLAN 0 to HW filter on device bond7 [ 204.260899][ T9478] bond7: (slave geneve2): making interface the new active one [ 204.275664][ T9478] bond7: (slave geneve2): Enslaving as an active interface with an up link [ 204.290259][ T9482] netlink: 8 bytes leftover after parsing attributes in process `syz.1.986'. [ 204.290512][ T9485] netlink: 216 bytes leftover after parsing attributes in process `syz.0.987'. [ 204.476857][ T9491] netlink: 'syz.1.990': attribute type 3 has an invalid length. [ 204.510964][ T9489] netlink: 8 bytes leftover after parsing attributes in process `syz.2.989'. [ 204.632209][ T9496] netlink: 12 bytes leftover after parsing attributes in process `syz.0.992'. [ 204.673104][ T9498] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 204.680166][ T9498] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 204.805057][ T9509] netlink: 'syz.3.995': attribute type 2 has an invalid length. [ 204.818974][ T9509] netlink: 4 bytes leftover after parsing attributes in process `syz.3.995'. [ 205.115144][ T9526] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1000'. [ 205.231053][ T9526] bond4: option xmit_hash_policy: invalid value (64) [ 205.273584][ T9537] netlink: 'syz.2.1003': attribute type 1 has an invalid length. [ 205.304305][ T9526] bond4 (unregistering): Released all slaves [ 205.338877][ T9537] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1003'. [ 205.485874][ T9540] x_tables: duplicate underflow at hook 1 [ 205.517554][ T9543] !: renamed from dummy0 (while UP) [ 205.569191][ T9543] xt_TPROXY: Can be used only with -p tcp or -p udp [ 205.611979][ T9543] x_tables: unsorted underflow at hook 2 [ 205.874106][ T9563] sctp: [Deprecated]: syz.2.1013 (pid 9563) Use of int in max_burst socket option deprecated. [ 205.874106][ T9563] Use struct sctp_assoc_value instead [ 205.920351][ T9567] IPVS: set_ctl: invalid protocol: 60 10.1.1.2:20002 [ 205.956646][ T9572] ip6t_REJECT: ECHOREPLY is not supported [ 206.079952][ T9576] netlink: 'syz.2.1018': attribute type 13 has an invalid length. [ 206.377746][ T5891] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 206.439125][ T9593] syzkaller1: entered promiscuous mode [ 206.444759][ T9593] syzkaller1: entered allmulticast mode [ 206.588287][ T24] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 206.707674][ T24] IPVS: starting estimator thread 0... [ 206.737438][ T9604] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 206.828955][ T9611] IPVS: using max 23 ests per chain, 55200 per kthread [ 207.970766][ T9653] tipc: Enabled bearer , priority 0 [ 207.979275][ T9653] syzkaller0: entered promiscuous mode [ 207.984802][ T9653] syzkaller0: entered allmulticast mode [ 208.034186][ T9653] tipc: Resetting bearer [ 208.112306][ T9652] tipc: Resetting bearer [ 208.185141][ T9652] tipc: Disabling bearer [ 208.235931][ T9668] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 208.288099][ T9669] netlink: 'syz.2.1048': attribute type 2 has an invalid length. [ 208.504942][ T9678] FAULT_INJECTION: forcing a failure. [ 208.504942][ T9678] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 208.523808][ T9667] hsr_slave_1 (unregistering): left promiscuous mode [ 208.523944][ T9678] CPU: 0 UID: 0 PID: 9678 Comm: syz.3.1051 Not tainted syzkaller #0 PREEMPT(full) [ 208.523974][ T9678] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 208.523990][ T9678] Call Trace: [ 208.524000][ T9678] [ 208.524009][ T9678] dump_stack_lvl+0x189/0x250 [ 208.524063][ T9678] ? __pfx____ratelimit+0x10/0x10 [ 208.524097][ T9678] ? __pfx_dump_stack_lvl+0x10/0x10 [ 208.524129][ T9678] ? __pfx__printk+0x10/0x10 [ 208.524154][ T9678] ? __might_fault+0xb0/0x130 [ 208.524202][ T9678] should_fail_ex+0x414/0x560 [ 208.524245][ T9678] _copy_from_user+0x2d/0xb0 [ 208.524278][ T9678] __sys_sendto+0x25c/0x520 [ 208.524303][ T9678] ? __pfx___sys_sendto+0x10/0x10 [ 208.524338][ T9678] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 208.524390][ T9678] ? __fget_files+0x3a0/0x420 [ 208.524426][ T9678] ? ksys_write+0x22a/0x250 [ 208.524463][ T9678] ? __pfx_ksys_write+0x10/0x10 [ 208.524501][ T9678] __x64_sys_sendto+0xde/0x100 [ 208.524528][ T9678] do_syscall_64+0xfa/0xfa0 [ 208.524561][ T9678] ? lockdep_hardirqs_on+0x9c/0x150 [ 208.524595][ T9678] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.524618][ T9678] ? clear_bhb_loop+0x60/0xb0 [ 208.524647][ T9678] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.524671][ T9678] RIP: 0033:0x7f6cf2d8f6c9 [ 208.524701][ T9678] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 208.524721][ T9678] RSP: 002b:00007f6cf3cda038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 208.524756][ T9678] RAX: ffffffffffffffda RBX: 00007f6cf2fe5fa0 RCX: 00007f6cf2d8f6c9 [ 208.524774][ T9678] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 208.524789][ T9678] RBP: 00007f6cf3cda090 R08: 00002000000000c0 R09: 0000000000000014 [ 208.524803][ T9678] R10: 0000000016000b21 R11: 0000000000000246 R12: 0000000000000001 [ 208.524819][ T9678] R13: 00007f6cf2fe6038 R14: 00007f6cf2fe5fa0 R15: 00007fff7e79b2d8 [ 208.524857][ T9678] [ 208.792034][ T5838] block nbd1: Receive control failed (result -32) [ 208.975215][ T9679] syzkaller1: entered promiscuous mode [ 208.986357][ T9679] syzkaller1: entered allmulticast mode [ 209.184056][ T9703] nbd: must specify a device to reconfigure [ 209.288370][ T7153] veth0_to_bond: left promiscuous mode [ 209.543489][ T9722] nbd: nbd3 already in use [ 209.784836][ T9729] __nla_validate_parse: 3 callbacks suppressed [ 209.784855][ T9729] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1064'. [ 209.917148][ T9729] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1064'. [ 210.024767][ T9727] can_create: 1 callbacks suppressed [ 210.024796][ T9727] can: request_module (can-proto-3) failed. [ 210.323994][ T9735] ieee802154 phy0 wpan0: encryption failed: -22 [ 210.355364][ T9746] tipc: Enabled bearer , priority 0 [ 210.373361][ T9746] syzkaller0: entered promiscuous mode [ 210.387104][ T9746] syzkaller0: entered allmulticast mode [ 210.414895][ T9746] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 210.479234][ T9749] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1069'. [ 210.512514][ T9746] tipc: Resetting bearer [ 210.547624][ T9744] tipc: Resetting bearer [ 210.598713][ T9744] tipc: Disabling bearer [ 210.991835][ T9769] syzkaller0: entered promiscuous mode [ 211.005271][ T9769] syzkaller0: entered allmulticast mode [ 211.048782][ T9777] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1078'. [ 211.510288][ T9799] x_tables: duplicate underflow at hook 1 [ 211.601264][ T9804] tipc: Failed to remove unknown binding: 66,1,1/0:1142703290/1142703292 [ 211.863171][ T9816] netlink: 88 bytes leftover after parsing attributes in process `syz.3.1093'. [ 211.873653][ T9816] netem: invalid attributes len -24 [ 211.881992][ T9816] netem: change failed [ 211.910224][ T9819] netlink: 'syz.1.1096': attribute type 1 has an invalid length. [ 211.921698][ T5833] Bluetooth: hci4: command 0x0406 tx timeout [ 211.927986][ T5833] Bluetooth: hci1: command 0x0406 tx timeout [ 211.934195][ T52] Bluetooth: hci2: command 0x0406 tx timeout [ 212.077238][ T5835] Bluetooth: hci3: command 0x0405 tx timeout [ 212.400691][ T9846] netlink: 'syz.0.1103': attribute type 1 has an invalid length. [ 212.497403][ T9854] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1106'. [ 212.824464][ T9869] tipc: Enabling of bearer rejected, already enabled [ 212.836588][ T9877] netlink: 148 bytes leftover after parsing attributes in process `syz.3.1111'. [ 214.157202][ T5846] Bluetooth: hci3: command 0x0405 tx timeout [ 214.607347][ T9899] tipc: Enabling of bearer rejected, already enabled [ 214.616035][ T9911] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1121'. [ 214.626227][ T9910] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1121'. [ 214.713616][ T9918] tipc: Resetting bearer [ 214.842357][ T9924] netlink: 'syz.1.1124': attribute type 58 has an invalid length. [ 214.871265][ T9924] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1124'. [ 214.920104][ T9928] tipc: Enabling not permitted [ 214.925774][ T9928] tipc: Enabling of bearer rejected, failed to enable media [ 215.022837][ T9933] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1127'. [ 215.034697][ T9933] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1127'. [ 215.051674][ T9936] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1128'. [ 215.096280][ T9933] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1127'. [ 215.119599][ T9933] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1127'. [ 215.254800][ T9946] netlink: 108 bytes leftover after parsing attributes in process `syz.1.1129'. [ 215.348228][ T9946] netlink: 108 bytes leftover after parsing attributes in process `syz.1.1129'. [ 215.409636][ T9946] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1129'. [ 215.559704][ T9958] openvswitch: netlink: Flow key attr not present in new flow. [ 215.621360][ T9962] netlink: 88 bytes leftover after parsing attributes in process `syz.3.1134'. [ 215.799372][ T9974] netlink: 'syz.2.1138': attribute type 1 has an invalid length. [ 215.967398][ T9974] 8021q: adding VLAN 0 to HW filter on device bond5 [ 216.133875][ T9982] bond5: (slave veth5): Enslaving as an active interface with a down link [ 216.253440][ T9985] bond4: (slave veth0_to_bond): Releasing active interface [ 216.343470][ T9985] bond5: (slave veth0_to_bond): making interface the new active one [ 216.388900][ T9985] veth0_to_bond: entered promiscuous mode [ 216.414378][ T9985] bond5: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 216.514516][ T9988] bond5: (slave veth7): Enslaving as an active interface with a down link [ 216.955717][T10027] lo: Caught tx_queue_len zero misconfig [ 217.619354][T10066] netlink: 'syz.4.1165': attribute type 1 has an invalid length. [ 217.646816][T10069] netlink: 'syz.0.1166': attribute type 23 has an invalid length. [ 217.665486][T10066] netlink: 'syz.4.1165': attribute type 2 has an invalid length. [ 218.422423][T10073] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 219.244848][T10132] 8021q: VLANs not supported on ip6_vti0 [ 219.776265][T10154] tc_dump_action: action bad kind [ 219.781907][T10152] tipc: Trying to set illegal importance in message [ 219.840735][T10151] delete_channel: no stack [ 220.266093][T10181] sctp: [Deprecated]: syz.1.1207 (pid 10181) Use of struct sctp_assoc_value in delayed_ack socket option. [ 220.266093][T10181] Use struct sctp_sack_info instead [ 220.275462][T10182] __nla_validate_parse: 15 callbacks suppressed [ 220.275488][T10182] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1208'. [ 220.311801][T10182] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1208'. [ 220.322039][T10182] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1208'. [ 220.387787][T10182] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1208'. [ 220.433660][T10191] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1210'. [ 220.548492][T10197] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1212'. [ 220.588284][T10197] bond5: (slave erspan0): Device is not bonding slave [ 220.595135][T10197] bond5: option active_slave: invalid value (erspan0) [ 220.624637][T10197] bond5 (unregistering): Released all slaves [ 220.694619][T10199] bridge0: entered allmulticast mode [ 220.894843][T10212] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1217'. [ 220.911159][T10212] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1217'. [ 220.920423][T10212] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1217'. [ 220.960446][T10213] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 220.974895][T10217] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1218'. [ 221.122360][T10225] tipc: Enabling of bearer rejected, already enabled [ 221.133569][T10225] netlink: 'syz.1.1222': attribute type 28 has an invalid length. [ 221.357263][ T5835] Bluetooth: hci3: command 0x0405 tx timeout [ 221.608290][T10256] openvswitch: netlink: Message has 536 unknown bytes. [ 221.620538][T10256] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 221.633470][T10256] openvswitch: netlink: Message has 536 unknown bytes. [ 221.641162][T10256] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 221.664835][T10258] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 222.229476][T10297] delete_channel: no stack [ 222.741160][T10326] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 222.826197][T10333] xt_hashlimit: overflow, try lower: 18446744073709551613/4 [ 223.390076][T10375] syzkaller1: entered promiscuous mode [ 223.395764][T10375] syzkaller1: entered allmulticast mode [ 223.939524][ T7120] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 223.957233][ T7120] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 223.990539][ T7120] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 224.006780][ T7120] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 224.591958][T10419] netlink: 'syz.0.1281': attribute type 1 has an invalid length. [ 225.049627][T10457] netlink: 'syz.2.1289': attribute type 2 has an invalid length. [ 225.088827][T10457] 9: entered promiscuous mode [ 225.131208][T10459] netlink: 'syz.1.1291': attribute type 1 has an invalid length. [ 225.369212][T10472] netlink: 'syz.2.1295': attribute type 1 has an invalid length. [ 225.372729][T10473] FAULT_INJECTION: forcing a failure. [ 225.372729][T10473] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 225.374049][T10473] [ 225.374061][T10473] ====================================================== [ 225.374070][T10473] WARNING: possible circular locking dependency detected [ 225.374085][T10473] syzkaller #0 Not tainted [ 225.374097][T10473] ------------------------------------------------------ [ 225.374106][T10473] syz.3.1296/10473 is trying to acquire lock: [ 225.374119][T10473] ffffffff8df31260 (console_owner){..-.}-{0:0}, at: vprintk_emit+0x2ee/0x590 [ 225.374184][T10473] [ 225.374184][T10473] but task is already holding lock: [ 225.374192][T10473] ffff8880b893a058 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 225.374240][T10473] [ 225.374240][T10473] which lock already depends on the new lock. [ 225.374240][T10473] [ 225.374248][T10473] [ 225.374248][T10473] the existing dependency chain (in reverse order) is: [ 225.374257][T10473] [ 225.374257][T10473] -> #4 (&rq->__lock){-.-.}-{2:2}: [ 225.374286][T10473] lock_acquire+0x120/0x360 [ 225.374307][T10473] _raw_spin_lock_nested+0x32/0x50 [ 225.374338][T10473] raw_spin_rq_lock_nested+0x2a/0x140 [ 225.374359][T10473] task_rq_lock+0xbc/0x470 [ 225.374379][T10473] cgroup_move_task+0x92/0x2a0 [ 225.374405][T10473] css_set_move_task+0x658/0x9e0 [ 225.374434][T10473] cgroup_post_fork+0x1ef/0x790 [ 225.374469][T10473] copy_process+0x3862/0x3c00 [ 225.374493][T10473] kernel_clone+0x21e/0x840 [ 225.374517][T10473] user_mode_thread+0xdd/0x140 [ 225.374542][T10473] rest_init+0x23/0x300 [ 225.374562][T10473] start_kernel+0x3ae/0x410 [ 225.374596][T10473] x86_64_start_reservations+0x24/0x30 [ 225.374623][T10473] x86_64_start_kernel+0x143/0x1c0 [ 225.374649][T10473] common_startup_64+0x13e/0x147 [ 225.374678][T10473] [ 225.374678][T10473] -> #3 (&p->pi_lock){-.-.}-{2:2}: [ 225.374707][T10473] lock_acquire+0x120/0x360 [ 225.374726][T10473] _raw_spin_lock_irqsave+0xa7/0xf0 [ 225.374753][T10473] try_to_wake_up+0x67/0x12b0 [ 225.374781][T10473] __wake_up_common_lock+0x137/0x1f0 [ 225.374811][T10473] tty_port_default_wakeup+0xfb/0x170 [ 225.374847][T10473] serial8250_tx_chars+0x72e/0x970 [ 225.374879][T10473] serial8250_handle_irq+0x633/0xbb0 [ 225.374909][T10473] serial8250_default_handle_irq+0xbf/0x200 [ 225.374932][T10473] serial8250_interrupt+0x8d/0x180 [ 225.374958][T10473] __handle_irq_event_percpu+0x295/0xab0 [ 225.374990][T10473] handle_irq_event+0x8b/0x1e0 [ 225.375020][T10473] handle_edge_irq+0x23b/0xa10 [ 225.375046][T10473] __common_interrupt+0x141/0x1f0 [ 225.375080][T10473] common_interrupt+0xb6/0xe0 [ 225.375128][T10473] asm_common_interrupt+0x26/0x40 [ 225.375150][T10473] pv_native_safe_halt+0x13/0x20 [ 225.375179][T10473] default_idle+0x13/0x20 [ 225.375195][T10473] default_idle_call+0x73/0xb0 [ 225.375215][T10473] do_idle+0x1e7/0x510 [ 225.375238][T10473] cpu_startup_entry+0x44/0x60 [ 225.375259][T10473] rest_init+0x2de/0x300 [ 225.375279][T10473] start_kernel+0x3ae/0x410 [ 225.375311][T10473] x86_64_start_reservations+0x24/0x30 [ 225.375337][T10473] x86_64_start_kernel+0x143/0x1c0 [ 225.375361][T10473] common_startup_64+0x13e/0x147 [ 225.375392][T10473] [ 225.375392][T10473] -> #2 (&tty->write_wait){-.-.}-{3:3}: [ 225.375422][T10473] lock_acquire+0x120/0x360 [ 225.375447][T10473] _raw_spin_lock_irqsave+0xa7/0xf0 [ 225.375474][T10473] __wake_up_common_lock+0x2f/0x1f0 [ 225.375504][T10473] tty_port_default_wakeup+0xfb/0x170 [ 225.375538][T10473] serial8250_tx_chars+0x72e/0x970 [ 225.375568][T10473] serial8250_handle_irq+0x633/0xbb0 [ 225.375600][T10473] serial8250_default_handle_irq+0xbf/0x200 [ 225.375621][T10473] serial8250_interrupt+0x8d/0x180 [ 225.375646][T10473] __handle_irq_event_percpu+0x295/0xab0 [ 225.375676][T10473] handle_irq_event+0x8b/0x1e0 [ 225.375722][T10473] handle_edge_irq+0x23b/0xa10 [ 225.375747][T10473] __common_interrupt+0x141/0x1f0 [ 225.375781][T10473] common_interrupt+0xb6/0xe0 [ 225.375802][T10473] asm_common_interrupt+0x26/0x40 [ 225.375822][T10473] pv_native_safe_halt+0x13/0x20 [ 225.375850][T10473] default_idle+0x13/0x20 [ 225.375867][T10473] default_idle_call+0x73/0xb0 [ 225.375886][T10473] do_idle+0x1e7/0x510 [ 225.375908][T10473] cpu_startup_entry+0x44/0x60 [ 225.375930][T10473] rest_init+0x2de/0x300 [ 225.375950][T10473] start_kernel+0x3ae/0x410 [ 225.375982][T10473] x86_64_start_reservations+0x24/0x30 [ 225.376009][T10473] x86_64_start_kernel+0x143/0x1c0 [ 225.376034][T10473] common_startup_64+0x13e/0x147 [ 225.376063][T10473] [ 225.376063][T10473] -> #1 (&port_lock_key){-.-.}-{3:3}: [ 225.376092][T10473] lock_acquire+0x120/0x360 [ 225.376111][T10473] _raw_spin_lock_irqsave+0xa7/0xf0 [ 225.376138][T10473] serial8250_console_write+0x17e/0x1ba0 [ 225.376172][T10473] console_flush_all+0x6f3/0xb10 [ 225.376200][T10473] console_unlock+0xbb/0x190 [ 225.376223][T10473] vprintk_emit+0x4c5/0x590 [ 225.376248][T10473] _printk+0xcf/0x120 [ 225.376267][T10473] register_console+0xa8b/0xf90 [ 225.376296][T10473] univ8250_console_init+0x3a/0x70 [ 225.376325][T10473] console_init+0x10e/0x430 [ 225.376349][T10473] start_kernel+0x254/0x410 [ 225.376382][T10473] x86_64_start_reservations+0x24/0x30 [ 225.376407][T10473] x86_64_start_kernel+0x143/0x1c0 [ 225.376432][T10473] common_startup_64+0x13e/0x147 [ 225.376467][T10473] [ 225.376467][T10473] -> #0 (console_owner){..-.}-{0:0}: [ 225.376497][T10473] validate_chain+0xb9b/0x2140 [ 225.376521][T10473] __lock_acquire+0xab9/0xd20 [ 225.376540][T10473] lock_acquire+0x120/0x360 [ 225.376559][T10473] vprintk_emit+0x30a/0x590 [ 225.376584][T10473] _printk+0xcf/0x120 [ 225.376602][T10473] should_fail_ex+0x3f5/0x560 [ 225.376635][T10473] strncpy_from_user+0x36/0x290 [ 225.376664][T10473] strncpy_from_user_nofault+0x72/0x150 [ 225.376689][T10473] bpf_probe_read_compat_str+0xe2/0x180 [ 225.376717][T10473] bpf_prog_84c16067fcc0268f+0x41/0x68 [ 225.376735][T10473] bpf_trace_run2+0x284/0x4b0 [ 225.376766][T10473] __bpf_trace_tlb_flush+0xf5/0x150 [ 225.376797][T10473] trace_tlb_flush+0x115/0x140 [ 225.376827][T10473] switch_mm_irqs_off+0x54a/0x7b0 [ 225.376857][T10473] __schedule+0x110e/0x4cc0 [ 225.376883][T10473] preempt_schedule_irq+0xb5/0x150 [ 225.376912][T10473] irqentry_exit+0x6f/0x90 [ 225.376941][T10473] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 225.376963][T10473] __sanitizer_cov_trace_const_cmp4+0x0/0x90 [ 225.376985][T10473] fib6_node_lookup_1+0x704/0x8a0 [ 225.377012][T10473] fib6_node_lookup+0xcc/0x1b0 [ 225.377035][T10473] fib6_table_lookup+0xbf/0xa80 [ 225.377056][T10473] ip6_pol_route+0x222/0x1180 [ 225.377077][T10473] fib6_rule_action+0x206/0x7d0 [ 225.377101][T10473] fib_rules_lookup+0x767/0xe90 [ 225.377119][T10473] fib6_rule_lookup+0x18e/0x6f0 [ 225.377143][T10473] ip6_route_output_flags+0x364/0x5d0 [ 225.377166][T10473] ip6_dst_lookup_tail+0x1ae/0x1510 [ 225.377193][T10473] ip6_dst_lookup_flow+0x47/0xe0 [ 225.377220][T10473] tcp_v6_connect+0xbdb/0x18a0 [ 225.377242][T10473] __inet_stream_connect+0x2ae/0xe70 [ 225.377271][T10473] inet_stream_connect+0x66/0xa0 [ 225.377298][T10473] __sys_connect+0x316/0x440 [ 225.377326][T10473] __x64_sys_connect+0x7a/0x90 [ 225.377353][T10473] do_syscall_64+0xfa/0xfa0 [ 225.377379][T10473] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 225.377397][T10473] [ 225.377397][T10473] other info that might help us debug this: [ 225.377397][T10473] [ 225.377403][T10473] Chain exists of: [ 225.377403][T10473] console_owner --> &p->pi_lock --> &rq->__lock [ 225.377403][T10473] [ 225.377433][T10473] Possible unsafe locking scenario: [ 225.377433][T10473] [ 225.377438][T10473] CPU0 CPU1 [ 225.377451][T10473] ---- ---- [ 225.377456][T10473] lock(&rq->__lock); [ 225.377469][T10473] lock(&p->pi_lock); [ 225.377483][T10473] lock(&rq->__lock); [ 225.377495][T10473] lock(console_owner); [ 225.377509][T10473] [ 225.377509][T10473] *** DEADLOCK *** [ 225.377509][T10473] [ 225.377515][T10473] 6 locks held by syz.3.1296/10473: [ 225.377526][T10473] #0: ffff88807cbd60e0 (sk_lock-AF_INET6){+.+.}-{0:0}, at: inet_stream_connect+0x51/0xa0 [ 225.377586][T10473] #1: ffffffff8df3d2e0 (rcu_read_lock){....}-{1:3}, at: ip6_route_output_flags+0x2e/0x5d0 [ 225.377638][T10473] #2: ffffffff8df3d2e0 (rcu_read_lock){....}-{1:3}, at: fib_rules_lookup+0x96/0xe90 [ 225.377685][T10473] #3: ffffffff8df3d2e0 (rcu_read_lock){....}-{1:3}, at: ip6_pol_route+0x162/0x1180 [ 225.377734][T10473] #4: ffff8880b893a058 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 225.377782][T10473] #5: ffffffff8df3d2e0 (rcu_read_lock){....}-{1:3}, at: bpf_trace_run2+0x186/0x4b0 [ 225.377839][T10473] [ 225.377839][T10473] stack backtrace: [ 225.377850][T10473] CPU: 1 UID: 0 PID: 10473 Comm: syz.3.1296 Not tainted syzkaller #0 PREEMPT(full) [ 225.377872][T10473] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 225.377885][T10473] Call Trace: [ 225.377893][T10473] [ 225.377901][T10473] dump_stack_lvl+0x189/0x250 [ 225.377932][T10473] ? __pfx_dump_stack_lvl+0x10/0x10 [ 225.377959][T10473] ? __pfx__printk+0x10/0x10 [ 225.377979][T10473] ? print_lock_name+0xde/0x100 [ 225.377998][T10473] print_circular_bug+0x2ee/0x310 [ 225.378024][T10473] check_noncircular+0x134/0x160 [ 225.378052][T10473] validate_chain+0xb9b/0x2140 [ 225.378086][T10473] __lock_acquire+0xab9/0xd20 [ 225.378109][T10473] ? vprintk_emit+0x2ee/0x590 [ 225.378132][T10473] lock_acquire+0x120/0x360 [ 225.378150][T10473] ? vprintk_emit+0x2ee/0x590 [ 225.378177][T10473] ? do_raw_spin_unlock+0x122/0x240 [ 225.378205][T10473] ? vprintk_emit+0x2ee/0x590 [ 225.378230][T10473] vprintk_emit+0x30a/0x590 [ 225.378253][T10473] ? vprintk_emit+0x2ee/0x590 [ 225.378278][T10473] ? __pfx_vprintk_emit+0x10/0x10 [ 225.378312][T10473] _printk+0xcf/0x120 [ 225.378331][T10473] ? __pfx____ratelimit+0x10/0x10 [ 225.378357][T10473] ? __pfx__printk+0x10/0x10 [ 225.378382][T10473] should_fail_ex+0x3f5/0x560 [ 225.378414][T10473] strncpy_from_user+0x36/0x290 [ 225.378451][T10473] strncpy_from_user_nofault+0x72/0x150 [ 225.378475][T10473] bpf_probe_read_compat_str+0xe2/0x180 [ 225.378503][T10473] bpf_prog_84c16067fcc0268f+0x41/0x68 [ 225.378520][T10473] bpf_trace_run2+0x284/0x4b0 [ 225.378550][T10473] ? bpf_trace_run2+0x186/0x4b0 [ 225.378582][T10473] ? __pfx_bpf_trace_run2+0x10/0x10 [ 225.378615][T10473] ? __pfx_css_rstat_updated+0x10/0x10 [ 225.378639][T10473] ? __bpf_trace_tlb_flush+0xe0/0x150 [ 225.378669][T10473] __bpf_trace_tlb_flush+0xf5/0x150 [ 225.378699][T10473] ? __pfx___bpf_trace_tlb_flush+0x10/0x10 [ 225.378733][T10473] ? psi_group_change+0xab8/0x1050 [ 225.378758][T10473] trace_tlb_flush+0x115/0x140 [ 225.378787][T10473] switch_mm_irqs_off+0x54a/0x7b0 [ 225.378819][T10473] ? __pfx_switch_mm_irqs_off+0x10/0x10 [ 225.378847][T10473] ? psi_task_switch+0x4e3/0x880 [ 225.378875][T10473] __schedule+0x110e/0x4cc0 [ 225.378913][T10473] ? __pfx___schedule+0x10/0x10 [ 225.378936][T10473] ? __lock_acquire+0xab9/0xd20 [ 225.378955][T10473] ? __lock_acquire+0xab9/0xd20 [ 225.378976][T10473] ? preempt_schedule_irq+0xaa/0x150 [ 225.379004][T10473] preempt_schedule_irq+0xb5/0x150 [ 225.379029][T10473] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 225.379058][T10473] ? rcu_irq_exit_check_preempt+0xdf/0x210 [ 225.379084][T10473] irqentry_exit+0x6f/0x90 [ 225.379108][T10473] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 225.379129][T10473] RIP: 0010:__sanitizer_cov_trace_const_cmp4+0x0/0x90 [ 225.379150][T10473] Code: 7c 11 10 48 89 74 11 18 48 89 44 11 20 e9 08 1c 89 09 cc 0f 1f 80 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 48 8b 04 24 65 48 8b 14 25 08 40 6e 92 65 8b 0d 68 37 [ 225.379167][T10473] RSP: 0018:ffffc9000388f130 EFLAGS: 00000246 [ 225.379185][T10473] RAX: 0000000000000001 RBX: ffff8880306e1c58 RCX: ffff88805987bc80 [ 225.379200][T10473] RDX: ffff88805987bc80 RSI: 0000000000000001 RDI: 0000000000000000 [ 225.379210][T10473] RBP: 0000000000000001 R08: ffffc9000388f20f R09: 0000000000000000 [ 225.379220][T10473] R10: ffffc9000388f200 R11: fffff52000711e42 R12: dffffc0000000000 [ 225.379233][T10473] R13: ffffc9000388f1e0 R14: ffff88805cd1332a R15: ffffc9000388f1e8 [ 225.379256][T10473] fib6_node_lookup_1+0x704/0x8a0 [ 225.379286][T10473] fib6_node_lookup+0xcc/0x1b0 [ 225.379311][T10473] ? kernel_text_address+0xa5/0xe0 [ 225.379339][T10473] ? __pfx_fib6_node_lookup+0x10/0x10 [ 225.379369][T10473] ? __lock_acquire+0xab9/0xd20 [ 225.379392][T10473] fib6_table_lookup+0xbf/0xa80 [ 225.379420][T10473] ? __lock_acquire+0xab9/0xd20 [ 225.379454][T10473] ? __pfx_fib6_table_lookup+0x10/0x10 [ 225.379483][T10473] ? ip6_pol_route+0x162/0x1180 [ 225.379507][T10473] ip6_pol_route+0x222/0x1180 [ 225.379535][T10473] ? __pfx_ip6_pol_route+0x10/0x10 [ 225.379564][T10473] ? fib_rules_lookup+0x96/0xe90 [ 225.379587][T10473] ? __pfx_ip6_pol_route_output+0x10/0x10 [ 225.379611][T10473] fib6_rule_action+0x206/0x7d0 [ 225.379638][T10473] ? __pfx_fib6_rule_action+0x10/0x10 [ 225.379664][T10473] fib_rules_lookup+0x767/0xe90 [ 225.379687][T10473] ? fib_rules_lookup+0x96/0xe90 [ 225.379706][T10473] ? __pfx_fib_rules_lookup+0x10/0x10 [ 225.379724][T10473] ? l3mdev_update_flow+0x29/0x640 [ 225.379755][T10473] ? l3mdev_update_flow+0x4d1/0x640 [ 225.379789][T10473] fib6_rule_lookup+0x18e/0x6f0 [ 225.379817][T10473] ? __pfx_ip6_pol_route_output+0x10/0x10 [ 225.379843][T10473] ? __pfx_fib6_rule_lookup+0x10/0x10 [ 225.379872][T10473] ? __pfx_ip6_pol_route_output+0x10/0x10 [ 225.379898][T10473] ? __pfx_ip6_addr_string+0x10/0x10 [ 225.379926][T10473] ip6_route_output_flags+0x364/0x5d0 [ 225.379953][T10473] ? ip6_route_output_flags+0x2e/0x5d0 [ 225.379980][T10473] ip6_dst_lookup_tail+0x1ae/0x1510 [ 225.380010][T10473] ? tomoyo_domain_quota_is_ok+0x97/0x570 [ 225.380037][T10473] ? __pfx_ip6_dst_lookup_tail+0x10/0x10 [ 225.380065][T10473] ? format_decode+0x5a3/0xe30 [ 225.380088][T10473] ? __pfx_tomoyo_supervisor+0x10/0x10 [ 225.380120][T10473] ip6_dst_lookup_flow+0x47/0xe0 [ 225.380150][T10473] tcp_v6_connect+0xbdb/0x18a0 [ 225.380181][T10473] ? __pfx_tcp_v6_connect+0x10/0x10 [ 225.380206][T10473] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 225.380244][T10473] __inet_stream_connect+0x2ae/0xe70 [ 225.380279][T10473] ? __local_bh_enable_ip+0x12d/0x1c0 [ 225.380299][T10473] ? __pfx___inet_stream_connect+0x10/0x10 [ 225.380329][T10473] ? __local_bh_enable_ip+0x12d/0x1c0 [ 225.380350][T10473] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 225.380376][T10473] inet_stream_connect+0x66/0xa0 [ 225.380409][T10473] __sys_connect+0x316/0x440 [ 225.380447][T10473] ? __fget_files+0x3a0/0x420 [ 225.380467][T10473] ? __pfx___sys_connect+0x10/0x10 [ 225.380503][T10473] ? __pfx_ksys_write+0x10/0x10 [ 225.380535][T10473] __x64_sys_connect+0x7a/0x90 [ 225.380567][T10473] do_syscall_64+0xfa/0xfa0 [ 225.380594][T10473] ? lockdep_hardirqs_on+0x9c/0x150 [ 225.380622][T10473] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 225.380643][T10473] ? clear_bhb_loop+0x60/0xb0 [ 225.380666][T10473] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 225.380686][T10473] RIP: 0033:0x7f6cf2d8f6c9 [ 225.380703][T10473] Code: Unable to access opcode bytes at 0x7f6cf2d8f69f. [ 225.380714][T10473] RSP: 002b:00007f6cf3cda038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 225.380735][T10473] RAX: ffffffffffffffda RBX: 00007f6cf2fe5fa0 RCX: 00007f6cf2d8f6c9 [ 225.380750][T10473] RDX: 000000000000001c RSI: 0000200000000000 RDI: 0000000000000003 [ 225.380764][T10473] RBP: 00007f6cf3cda090 R08: 0000000000000000 R09: 0000000000000000 [ 225.380777][T10473] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 225.380788][T10473] R13: 00007f6cf2fe6038 R14: 00007f6cf2fe5fa0 R15: 00007fff7e79b2d8 [ 225.380812][T10473] [ 226.926521][T10473] CPU: 1 UID: 0 PID: 10473 Comm: syz.3.1296 Not tainted syzkaller #0 PREEMPT(full) [ 226.926541][T10473] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 226.926551][T10473] Call Trace: [ 226.926559][T10473] [ 226.926567][T10473] dump_stack_lvl+0x189/0x250 [ 226.926591][T10473] ? __pfx____ratelimit+0x10/0x10 [ 226.926615][T10473] ? __pfx_dump_stack_lvl+0x10/0x10 [ 226.926635][T10473] ? __pfx__printk+0x10/0x10 [ 226.926653][T10473] should_fail_ex+0x414/0x560 [ 226.926678][T10473] strncpy_from_user+0x36/0x290 [ 226.926704][T10473] strncpy_from_user_nofault+0x72/0x150 [ 226.926722][T10473] bpf_probe_read_compat_str+0xe2/0x180 [ 226.926743][T10473] bpf_prog_84c16067fcc0268f+0x41/0x68 [ 226.926755][T10473] bpf_trace_run2+0x284/0x4b0 [ 226.926778][T10473] ? bpf_trace_run2+0x186/0x4b0 [ 226.926800][T10473] ? __pfx_bpf_trace_run2+0x10/0x10 [ 226.926822][T10473] ? __pfx_css_rstat_updated+0x10/0x10 [ 226.926839][T10473] ? __bpf_trace_tlb_flush+0xe0/0x150 [ 226.926861][T10473] __bpf_trace_tlb_flush+0xf5/0x150 [ 226.926882][T10473] ? __pfx___bpf_trace_tlb_flush+0x10/0x10 [ 226.926906][T10473] ? psi_group_change+0xab8/0x1050 [ 226.926924][T10473] trace_tlb_flush+0x115/0x140 [ 226.926945][T10473] switch_mm_irqs_off+0x54a/0x7b0 [ 226.926967][T10473] ? __pfx_switch_mm_irqs_off+0x10/0x10 [ 226.926986][T10473] ? psi_task_switch+0x4e3/0x880 [ 226.927006][T10473] __schedule+0x110e/0x4cc0 [ 226.927033][T10473] ? __pfx___schedule+0x10/0x10 [ 226.927050][T10473] ? __lock_acquire+0xab9/0xd20 [ 226.927070][T10473] ? __lock_acquire+0xab9/0xd20 [ 226.927086][T10473] ? preempt_schedule_irq+0xaa/0x150 [ 226.927106][T10473] preempt_schedule_irq+0xb5/0x150 [ 226.927126][T10473] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 226.927148][T10473] ? rcu_irq_exit_check_preempt+0xdf/0x210 [ 226.927166][T10473] irqentry_exit+0x6f/0x90 [ 226.927186][T10473] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 226.927202][T10473] RIP: 0010:__sanitizer_cov_trace_const_cmp4+0x0/0x90 [ 226.927218][T10473] Code: 7c 11 10 48 89 74 11 18 48 89 44 11 20 e9 08 1c 89 09 cc 0f 1f 80 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 48 8b 04 24 65 48 8b 14 25 08 40 6e 92 65 8b 0d 68 37 [ 226.927230][T10473] RSP: 0018:ffffc9000388f130 EFLAGS: 00000246 [ 226.927243][T10473] RAX: 0000000000000001 RBX: ffff8880306e1c58 RCX: ffff88805987bc80 [ 226.927254][T10473] RDX: ffff88805987bc80 RSI: 0000000000000001 RDI: 0000000000000000 [ 226.927263][T10473] RBP: 0000000000000001 R08: ffffc9000388f20f R09: 0000000000000000 [ 226.927272][T10473] R10: ffffc9000388f200 R11: fffff52000711e42 R12: dffffc0000000000 [ 226.927283][T10473] R13: ffffc9000388f1e0 R14: ffff88805cd1332a R15: ffffc9000388f1e8 [ 226.927301][T10473] fib6_node_lookup_1+0x704/0x8a0 [ 226.927325][T10473] fib6_node_lookup+0xcc/0x1b0 [ 226.927344][T10473] ? kernel_text_address+0xa5/0xe0 [ 226.927366][T10473] ? __pfx_fib6_node_lookup+0x10/0x10 [ 226.927387][T10473] ? __lock_acquire+0xab9/0xd20 [ 226.927403][T10473] fib6_table_lookup+0xbf/0xa80 [ 226.927424][T10473] ? __lock_acquire+0xab9/0xd20 [ 226.927442][T10473] ? __pfx_fib6_table_lookup+0x10/0x10 [ 226.927463][T10473] ? ip6_pol_route+0x162/0x1180 [ 226.927479][T10473] ip6_pol_route+0x222/0x1180 [ 226.927499][T10473] ? __pfx_ip6_pol_route+0x10/0x10 [ 226.927519][T10473] ? fib_rules_lookup+0x96/0xe90 [ 226.927536][T10473] ? __pfx_ip6_pol_route_output+0x10/0x10 [ 226.927553][T10473] fib6_rule_action+0x206/0x7d0 [ 226.927574][T10473] ? __pfx_fib6_rule_action+0x10/0x10 [ 226.927593][T10473] fib_rules_lookup+0x767/0xe90 [ 226.927611][T10473] ? fib_rules_lookup+0x96/0xe90 [ 226.927625][T10473] ? __pfx_fib_rules_lookup+0x10/0x10 [ 226.927644][T10473] ? l3mdev_update_flow+0x29/0x640 [ 226.927667][T10473] ? l3mdev_update_flow+0x4d1/0x640 [ 226.927691][T10473] fib6_rule_lookup+0x18e/0x6f0 [ 226.927710][T10473] ? __pfx_ip6_pol_route_output+0x10/0x10 [ 226.927728][T10473] ? __pfx_fib6_rule_lookup+0x10/0x10 [ 226.927749][T10473] ? __pfx_ip6_pol_route_output+0x10/0x10 [ 226.927768][T10473] ? __pfx_ip6_addr_string+0x10/0x10 [ 226.927789][T10473] ip6_route_output_flags+0x364/0x5d0 [ 226.927808][T10473] ? ip6_route_output_flags+0x2e/0x5d0 [ 226.927827][T10473] ip6_dst_lookup_tail+0x1ae/0x1510 [ 226.927849][T10473] ? tomoyo_domain_quota_is_ok+0x97/0x570 [ 226.927870][T10473] ? __pfx_ip6_dst_lookup_tail+0x10/0x10 [ 226.927891][T10473] ? format_decode+0x5a3/0xe30 [ 226.927908][T10473] ? __pfx_tomoyo_supervisor+0x10/0x10 [ 226.927933][T10473] ip6_dst_lookup_flow+0x47/0xe0 [ 226.927955][T10473] tcp_v6_connect+0xbdb/0x18a0 [ 226.927978][T10473] ? __pfx_tcp_v6_connect+0x10/0x10 [ 226.927995][T10473] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 226.928025][T10473] __inet_stream_connect+0x2ae/0xe70 [ 226.928051][T10473] ? __local_bh_enable_ip+0x12d/0x1c0 [ 226.928072][T10473] ? __pfx___inet_stream_connect+0x10/0x10 [ 226.928095][T10473] ? __local_bh_enable_ip+0x12d/0x1c0 [ 226.928110][T10473] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 226.928129][T10473] inet_stream_connect+0x66/0xa0 [ 226.928152][T10473] __sys_connect+0x316/0x440 [ 226.928174][T10473] ? __fget_files+0x3a0/0x420 [ 226.928188][T10473] ? __pfx___sys_connect+0x10/0x10 [ 226.928214][T10473] ? __pfx_ksys_write+0x10/0x10 [ 226.928236][T10473] __x64_sys_connect+0x7a/0x90 [ 226.928258][T10473] do_syscall_64+0xfa/0xfa0 [ 226.928278][T10473] ? lockdep_hardirqs_on+0x9c/0x150 [ 226.928298][T10473] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 226.928312][T10473] ? clear_bhb_loop+0x60/0xb0 [ 226.928328][T10473] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 226.928342][T10473] RIP: 0033:0x7f6cf2d8f6c9 [ 226.928354][T10473] Code: Unable to access opcode bytes at 0x7f6cf2d8f69f. [ 226.928361][T10473] RSP: 002b:00007f6cf3cda038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 226.928375][T10473] RAX: ffffffffffffffda RBX: 00007f6cf2fe5fa0 RCX: 00007f6cf2d8f6c9 [ 226.928385][T10473] RDX: 000000000000001c RSI: 0000200000000000 RDI: 0000000000000003 [ 226.928395][T10473] RBP: 00007f6cf3cda090 R08: 0000000000000000 R09: 0000000000000000 [ 226.928404][T10473] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 226.928412][T10473] R13: 00007f6cf2fe6038 R14: 00007f6cf2fe5fa0 R15: 00007fff7e79b2d8 [ 226.928430][T10473] [ 229.608082][ T7155] veth0_to_bond: left promiscuous mode