last executing test programs: 22.768049992s ago: executing program 4 (id=1116): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r2, @ANYBLOB="08002600b409000008002700b0"], 0x3c}}, 0x44000) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000780)=ANY=[], &(0x7f0000000780)=""/4078, 0x35, 0xfee, 0x0, 0x0, 0x0, @void, @value}, 0x28) r4 = socket(0x2a, 0x1, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r4, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x0, 0xe}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000600)=@newtfilter={0x48, 0x2c, 0x50f, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xfffa, 0xfff3}, {}, {0x10, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_IPV6_DST={0x14, 0x10, @ipv4={'\x00', '\xff\xff', @empty}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x4) r6 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x1f}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{0x1}, &(0x7f0000000080), &(0x7f0000000100)=r8}, 0x20) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x14, 0x2, 0x2, 0x2, 0x8a0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r10 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r9, &(0x7f00000000c0), &(0x7f0000000280)=@udp=r10}, 0x20) socket$packet(0x11, 0x2, 0x300) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="050025bd7000050000002e00190008070000", @ANYRES32=r13, @ANYBLOB="050034008b0000000a00c8006caf1b73e27200000400490008004b00030000000600fb00090000000600fb0009000000"], 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x488c0) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x2, 0x4, 0x40018000, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x5, 0x0, @void, @value, @void, @value}, 0x50) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000680)=@o_path={&(0x7f0000000480)='./file0\x00', 0x0, 0x0, r7}, 0x18) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000006c0)={0x1b, 0x0, 0x0, 0x9, 0x0, 0xffffffffffffffff, 0x1, '\x00', 0x0, r3, 0x2, 0x1, 0x5, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000740)={0x1}, 0x4) socket$inet_udp(0x2, 0x2, 0x0) 19.758449102s ago: executing program 0 (id=1146): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x2, 0xfffffffe, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x3, 0xffe0}, {0x0, 0x7}, {0x14, 0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0x44}, 0x40004) r0 = socket$netlink(0x10, 0x3, 0x4) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000002540)={0x2, 0x2}, 0x4) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80043f679a10ff3d425f9cc3f4ff7f4e32f61bcdf1e422000000000100804824cabecc4b381eaadc28f23457e792945f64009400050028925aaa000000c600000000000000feff2c707f8f00ff", 0x58}], 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000900000000000008000003000000040004001c000180180010"], 0x34}}, 0x4000000) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r0) 19.478318271s ago: executing program 2 (id=1149): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) (async) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x3, 0x7, @loopback}, 0x1c) (async) recvmmsg(r0, &(0x7f0000002740)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000004c0)=""/175, 0xaf}], 0x1}, 0xc45a}, {{0x0, 0x0, &(0x7f0000000cc0)=[{0x0}], 0x1}, 0x8}], 0x2, 0x10112, 0x0) (async) sendmmsg$inet6(r0, &(0x7f0000001600)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000140)='4', 0x1}], 0x1}}], 0x1, 0x10) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000440)={0x2, 0x3}, 0x8) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'macvlan1\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="30c10040001d00305c0102000a0d47c00f020719f7000000fedbdf27ea725d", @ANYRES32=r3, @ANYBLOB="000072010a000200df58e5774b4e000006000500fe"], 0x30}}, 0x4) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) (async) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x1000001, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="280000002000010300000000000000000200000000000000000000000c001400", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="075085c1da5b55bf4583de2b4927cf40fa7b737d4ddfcc901afe72175de71e27cee1b1cbaa0f64c423cb92b79d95acc31fc1f7b35b49a296d54f0149a21e6a2a156db9a79f09bf8c15ae86ec77fb421afee0c9378165235bf894afef58aa5c675146e9b4212f1363c0e4e496a2d7dffd"], 0x28}}, 0x0) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000021000100"], 0x28}}, 0x0) (async) getsockopt$X25_QBITINCL(r4, 0x106, 0x1, 0x0, &(0x7f0000000040)=0x13fe4c102fd7fdb3) (async) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) r9 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r9, &(0x7f00000007c0)={&(0x7f0000000500)={0x1d, r3, 0x3, {0x2, 0x1, 0x4}, 0x1}, 0x18, &(0x7f0000000780)={&(0x7f0000000540)="30109fb9c567f7a575e1fe1d1837", 0xe}, 0x1, 0x0, 0x0, 0x40000}, 0x4000080) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB="380000004800030000000000000000000a000000", @ANYRES32, @ANYBLOB="000000001400010000000000000000000000000000800000080002"], 0x38}}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r8, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x41}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r12 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) ioctl$F2FS_IOC_MOVE_RANGE(r11, 0xc020f509, &(0x7f0000000240)={r7, 0x7, 0x1, 0x2}) getsockopt$netrom_NETROM_T4(r13, 0x103, 0x6, &(0x7f0000000280)=0x6, &(0x7f00000002c0)=0x4) sendmsg$nl_xfrm(r12, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f00000005c0)=@newsa={0x1a4, 0x10, 0x713, 0x0, 0x0, {{@in=@broadcast, @in6=@mcast1}, {@in=@loopback, 0x0, 0xff}, @in6=@mcast1, {}, {0x0, 0x0, 0xffffffffffff7fff}, {0x0, 0x0, 0x1}, 0x0, 0x0, 0xa}, [@algo_aead={0xb2, 0x12, {{'rfc4106-gcm-aesni\x00'}, 0x330, 0x60, "3d3149c1cad5863f4f88ee8ab2f167fd80eb5f1f4ba2ad0bd3cf0e1d0a648f0ea7be550374c768768b71dd5f685b805f6d635b944c733d5356e83f3fa45fcf3932a09c0edc3d34768283bb087c161709588a6759abc19da9f2d17fafef89b88064ad348aec0d"}}]}, 0x1a4}, 0x1, 0x0, 0x0, 0x20048080}, 0x0) 19.477564066s ago: executing program 0 (id=1150): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYRES8=r0, @ANYRES8=r0, @ANYRES16=r0], 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000340)='veth0_virt_wifi\x00', 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r1, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x20, 0x0, 0x9, 0x101, 0x0, 0x0, {0x5}, [@NFCTH_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x40010}, 0x8000) r2 = socket$kcm(0x2, 0x1, 0x84) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000380), r3) setsockopt$sock_attach_bpf(r2, 0x84, 0x64, &(0x7f0000000000), 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_AEAD_AUTHSIZE(r6, 0x117, 0x5, 0x0, 0x2) sendmsg$ETHTOOL_MSG_PAUSE_SET(r4, &(0x7f0000000200)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x44, r5, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@ETHTOOL_A_PAUSE_TX={0x5}, @ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x1}, @ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x1}, @ETHTOOL_A_PAUSE_AUTONEG={0x5}, @ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0xfa}, @ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x41}, 0x4008040) 19.410122336s ago: executing program 1 (id=1151): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=@newlink={0x48, 0x10, 0x1, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x2180, 0x1}, [@IFLA_IFNAME={0x14, 0x3, 'erspan0\x00'}, @IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x9, 0x6}}]}]}]}, 0x48}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_BT_POWER(r2, 0x112, 0x9, 0x0, &(0x7f0000000b80)) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r3, 0x89f1, &(0x7f00000002c0)={'ip6tnl0\x00', &(0x7f0000000000)=@ethtool_cmd={0x0, 0x0, 0x0, 0x200, 0x2, 0x0, 0x0, 0x0, 0xdb, 0x4, 0x0, 0xfffff7fc, 0x7, 0x0, 0x0, 0x47, [0xfffffffc, 0x80]}}) socket$unix(0x1, 0x5, 0x0) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c0000001000010426bd700000000000e60000005fb0c6962674a1b3580444e989cb6b39dd0573016f57fa224f4461e8facf2669a3520d800d979ee8b4e37852c6f6b8dea5371e2cca51c3d1ac8b0981a16d44517bb260ca89a0a3bc8da52afa09c7546767a4946834ffc6e15c1954d10d9d6253d96071d449abe3f656b6548617a68c0a35ea5835dcc7", @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100626f6e64000000000c00028008001c0002000000"], 0x3c}}, 0x4008000) 19.134310096s ago: executing program 2 (id=1153): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'adiantum(xchacha20-simd,anubis-generic,nhpoly1305-sse2)\x00'}, 0x58) r1 = socket$alg(0x26, 0x5, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="4000000010000100"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000200012800e0001006970366772657461700000000c00028006000e00b2"], 0x40}}, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-blowfish-asm\x00'}, 0x58) r4 = accept$alg(r1, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ad060000", 0x4) sendmmsg$inet(r4, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000140)="17", 0x1}, {&(0x7f0000002a40)="0d5ebfd6dfe98a01b2fb5b0eb19a417353a0833d961a98422333bb10a75289c4353c82666dbc1db13e21381283bf8a01be70deccac2c9bce8a8ea365f060b795c3238d7219c2d3020933c9c39c6d0cbc957ec3f682cac392c2a627a0c386f59681fdfd5ea467e2db933c4ae7a5aafaa8c86de5dfdc5ed01a788fc636bf7a8062bebeff2374", 0x85}], 0x2, &(0x7f0000003840)=ANY=[@ANYBLOB='@'], 0x40}}], 0x1, 0x715076165a76ad26) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x4a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x20}, {0x6}]}, 0x10) sendmsg$alg(r4, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x90}, 0x2000) recvmmsg(r4, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000200)=""/120, 0x78}, {&(0x7f0000000100)=""/13, 0xd}], 0x2}, 0x5}], 0x1, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) r6 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000013a40)={0x0, 0x0, &(0x7f0000013a00)={&(0x7f00000158c0)=@newqdisc={0x24, 0x24, 0x10, 0x0, 0x2, {0x0, 0x0, 0x0, 0x0, {}, {0x1}}}, 0x24}}, 0x0) recvmmsg$unix(r6, &(0x7f0000008f80)=[{{0x0, 0x0, &(0x7f0000003c00)=[{&(0x7f0000002c00)=""/4096, 0x1000}], 0x1}}], 0x1, 0x10040, 0x0) socket$alg(0x26, 0x5, 0x0) (async) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'adiantum(xchacha20-simd,anubis-generic,nhpoly1305-sse2)\x00'}, 0x58) (async) socket$alg(0x26, 0x5, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) (async) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="4000000010000100"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000200012800e0001006970366772657461700000000c00028006000e00b2"], 0x40}}, 0x0) (async) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-blowfish-asm\x00'}, 0x58) (async) accept$alg(r1, 0x0, 0x0) (async) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ad060000", 0x4) (async) sendmmsg$inet(r4, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000140)="17", 0x1}, {&(0x7f0000002a40)="0d5ebfd6dfe98a01b2fb5b0eb19a417353a0833d961a98422333bb10a75289c4353c82666dbc1db13e21381283bf8a01be70deccac2c9bce8a8ea365f060b795c3238d7219c2d3020933c9c39c6d0cbc957ec3f682cac392c2a627a0c386f59681fdfd5ea467e2db933c4ae7a5aafaa8c86de5dfdc5ed01a788fc636bf7a8062bebeff2374", 0x85}], 0x2, &(0x7f0000003840)=ANY=[@ANYBLOB='@'], 0x40}}], 0x1, 0x715076165a76ad26) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) (async) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x4a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x20}, {0x6}]}, 0x10) (async) sendmsg$alg(r4, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x90}, 0x2000) (async) recvmmsg(r4, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000200)=""/120, 0x78}, {&(0x7f0000000100)=""/13, 0xd}], 0x2}, 0x5}], 0x1, 0x0, 0x0) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) (async) accept4(r0, 0x0, 0x0, 0x0) (async) sendmsg$nl_route_sched(r6, &(0x7f0000013a40)={0x0, 0x0, &(0x7f0000013a00)={&(0x7f00000158c0)=@newqdisc={0x24, 0x24, 0x10, 0x0, 0x2, {0x0, 0x0, 0x0, 0x0, {}, {0x1}}}, 0x24}}, 0x0) (async) recvmmsg$unix(r6, &(0x7f0000008f80)=[{{0x0, 0x0, &(0x7f0000003c00)=[{&(0x7f0000002c00)=""/4096, 0x1000}], 0x1}}], 0x1, 0x10040, 0x0) (async) 19.134081493s ago: executing program 0 (id=1154): r0 = accept4(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000080)=0x80, 0x800) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x4e23, 0x6, @ipv4={'\x00', '\xff\xff', @local}}}, 0x4, 0x9, 0x3, 0x29, 0x81, 0x0, 0xc}, 0x9c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x19, 0x4, 0x4, 0x7ff, 0x0, 0xffffffffffffffff, 0x7f, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000004340)={0x6, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000540)={r2, 0x8, 0x25, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff27, 0x0, 0x0}, 0x19) 19.116661354s ago: executing program 1 (id=1155): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000000)={0x0, 0x4, 0x5, 0x400, 0xb74, 0x9, 0x96, 0x2, {0x0, @in={{0x2, 0x4e23, @loopback}}, 0x2, 0x748cd638, 0x9, 0x101, 0x3}}, &(0x7f00000000c0)=0xb0) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000100)=@assoc_value={r1, 0x4}, 0x8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000c00)=@delchain={0x220, 0x65, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0x0, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_CHAIN={0x8, 0xb, 0x20000000}, @TCA_RATE={0x6, 0x5, {0x6, 0x2}}, @filter_kind_options=@f_route={{0xa}, {0x1d0, 0x2, [@TCA_ROUTE4_TO={0x8, 0x2, 0xca}, @TCA_ROUTE4_IIF={0x8}, @TCA_ROUTE4_ACT={0x1bc, 0x6, [@m_mirred={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x29, 0x6, "b9e6cb743efb5818279b291a7d56a99d728d0d3c5750442cdd89714a7135052ff6aa167b6d"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_mirred={0x160, 0x9, 0x0, 0x0, {{0xb}, {0xa4, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x7, 0x5, 0x10000000, 0xae, 0x2}, 0x3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0x3, 0x10000000, 0x8, 0x8}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1336e5ff, 0x9, 0x6, 0x0, 0x1}, 0x7}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x5, 0x4, 0x20000000, 0x8}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x100, 0x6, 0x7, 0x1f31, 0xfffffff5}, 0x4}}]}, {0x91, 0x6, "216194e50e7faa7649d1c06839be3b59a7f1bb6c7fbd0e7344b4e9b561d4b406f4a7a0c7e6ebe935ccd4c10fd3ff9357cc52da0d5a0f390e738e2309dae089a4a01ae1f8d77e7299eca92aeabda979c50d976b028b6d90a8796ec58a2c73be7c618754735288960000000000000000005678e96fc0ffe36bed2f20629a3f547bdd4703fbbbdf48368d4a49e7b2"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2}}}}]}]}}]}, 0x220}, 0x1, 0x0, 0x0, 0x81}, 0x0) r2 = socket(0x10, 0x803, 0x0) sendto(r2, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x58, 0x0, 0x1, 0x0, 0x0, {}, [{{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8}}}]}}]}, 0x58}}, 0x0) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="140100001400210200000000fcdbdf2502"], 0x114}], 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00'}) 18.90554676s ago: executing program 3 (id=1156): syz_emit_ethernet(0xbe, &(0x7f00000000c0)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}, @dest_unreach={0xc, 0x0, 0x0, 0x0, 0x20, 0x1, {0x25, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfc, 0x6, 0x0, @multicast2, @loopback, {[@ssrr={0x89, 0x7, 0x1f, [@multicast1]}, @generic={0x0, 0xc, "ee0dd9de36ed4bcc5b4e"}, @rr={0x7, 0x7, 0xe5, [@initdev={0xac, 0x1e, 0x0, 0x0}]}, @ssrr={0x89, 0xb, 0x0, [@private=0xa010100, @broadcast]}, @timestamp_addr={0x44, 0x4c, 0x0, 0x1, 0x0, [{@initdev={0xac, 0x1e, 0x8, 0x0}}, {@loopback}, {}, {@local, 0x200}, {@loopback}, {@private}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@broadcast}, {@broadcast}]}, @timestamp={0x44, 0xc, 0x1f, 0x0, 0x0, [0x0, 0x0]}]}}}}}}}, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f00000007c0), r0) unshare(0x22020600) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x7fff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000080)={r2, 0x0, 0x0, 0x4}, 0x20) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000800)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000840)={0x3c, r1, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r3}}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xe6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x710ce59bde3da92}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x4010044) 18.806468781s ago: executing program 2 (id=1157): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}, [@ldst={0x3, 0x2, 0x3, 0x1c10a1, 0x0, 0x3b}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0xb, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1100000004000000040000000900000000000000", @ANYRES32, @ANYBLOB="2200cb00000000000003fb000000000000000005", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB="d8000000", @ANYRES16=0x0, @ANYBLOB="04002dbd7000f2dbdf254f0000000c00839ced540000680000004c007a8008000400000000181c000200134ecc4d908540c3c8630b918a29360800040004005111335ced5fd94e0800040009000000080004000300000048007a801400010003d869f47d8c428eaa74b31794b4b314b5000400000000000c0003004180081ee4f88f1a080004000c0000000c0003007858754e3c504054080004000800000004007a8020007a800800040005000000140002002929590c"], 0xd8}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x9521, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0x5dc}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 18.805338912s ago: executing program 0 (id=1158): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000026c0)=@flushpolicy={0x40, 0x12, 0x105, 0x0, 0x0, "", [@proto={0x5, 0x19, 0xff}, @address_filter={0x28, 0x1a, {@in6=@mcast2, @in=@private=0xa010100, 0xa, 0x6, 0x9}}]}, 0x40}}, 0x20040810) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x44, r1, 0x1, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x3}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x185}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x45}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r4) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x38, r5, 0x1, 0x0, 0x0, {0x4}, [@NLBL_UNLABEL_A_IPV4ADDR={0x5, 0x4, @multicast1}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1_to_team\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x5, 0x5, @multicast1}]}, 0x38}}, 0x0) 18.548084363s ago: executing program 3 (id=1159): socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, '\x00\x00\x00\x00\x00\x00wb', "ac2e0cdb60ed6b498900000000002ad796bdf297507c12a413ff3931d2873103", "0f9dafb4", "ec3fff9afd96e6c0"}, 0x38) ioctl$int_in(r2, 0x5421, 0x0) writev(r2, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000006c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) connect$inet(r3, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) setsockopt$inet_udp_int(r3, 0x11, 0x67, &(0x7f0000000080)=0x48b5, 0x4) sendto$inet(r1, &(0x7f00000000c0)="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", 0x508, 0x40, 0x0, 0x0) close(r2) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'team_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r5, @ANYBLOB="000024000000000024001200140001006272696467655f736c617665800000000c0005"], 0x3}}, 0x20008080) splice(r0, 0x0, r4, 0x0, 0x10d00, 0x0) r6 = socket(0x2a, 0x2, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r6, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=@newqdisc={0xfffffffffffffe72, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_choke={{}, {0x0, 0x2, [@TCA_CHOKE_MAX_P={0x0, 0x3, 0x7}, @TCA_CHOKE_STAB={0x0, 0x2, "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"}]}}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0xfffa, 0x2}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x800}, @TCA_FLOWER_KEY_IP_PROTO={0x5, 0x9, 0x84}]}}]}, 0x44}}, 0x24004000) r9 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r9, &(0x7f00000002c0), 0x40000000000009f, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) 18.507555935s ago: executing program 1 (id=1160): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) (async) r2 = accept4(r1, 0x0, 0x0, 0x80000) syz_genetlink_get_family_id$ethtool(&(0x7f0000001c40), r2) sendmsg$TCPDIAG_GETSOCK(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001600)={0x580, 0x12, 0x1, 0x70bd29, 0x25dfdbfd, {0x6, 0x8, 0x1, 0xd, {0x4e20, 0x4e20, [0x0, 0x4, 0x3, 0x8], [0x33, 0x7, 0x2, 0x6], 0x0, [0x8000, 0x5]}, 0x3, 0x6}, [@INET_DIAG_REQ_BYTECODE={0x531, 0x1, "199338ab9e25c093d5f64221dbff71bc9a1f5d60bbe9ce6b2fd503a64c192db679a3d28964ef2faf95ae1034fac3f89c0a5470f1ef37e3949a3eda1777311e928609f09b6ebaf3616615ee76a8dd366ff9ce86f6702dd91649113da8e9ea3481dc2d825a51058648eec4244ce7528f514c1e240f0999ef785a2b32747ed94550ec09b92141ace1aa471346debbae6f55948db0b4a4a18e091b4b8e4b40636911b0e61c25d5124b93f1bac65ceb319cff3074484652d8ed3c7bf3ec71f732815cc53ca0bb359b4fee68b177cee44485d08202327a9ed6de90d1d61b96c70d57eca8f4f7cb31c108d3919f606cf8b3a905e2c80c57906bb7a9ccd3fb4e1f556ca02fc7187418a47bb2e444fd00eca5c79f5f37a75b3f1f19bc3da57155af3aac2bfaf1bfb76e83630b32aa222a95fce08c42962ab8f1c57132ee86b82767930b83f36c369962166796c7e993ca4d877f93c6a2fd0dd0406ddd788dcd7661d2af4ae62e9acbd2aaeaef1d82e9a1f21e724ab1e10e050b461725dae2080ef7161bcc4bb776d07999943da36685b177e4cb673948c61d73eae4b0d96401eeba5c37086c13efa29793fef29410e83bfb36255420eda81ef32cd99555a5c672639d89ff77acb965c61acd17538a80ece61b7d0b5f26e7070418311cd9d569179fb40c4caf81c74448e9b054966657f49e375527fa7d4f0cf6a362715c718072e1e95797222c9350185ce47bc9391573df18bc194119942b645f5caedafa7fb4309739c6fb346ca4840739747e996eb8c3ef8793c2a968263610f7601b39bb6e9329830627a213d1a29417b2118b9cf2ec35c86db2f5d366525d1fbadece2c6608c57f9826ff4d9c3290d342d3bbafa976d38e496a438f55b4a01619c4212835bb1fd5ebee836b72f43af6acd3eb1603d1f0b32521bca966075d2e2e7b7e7efde3957751702ae435d8674c4bc6c8dba9ccf0cc30d7f20a5fcf70aa4704d2b9d22530b70282a347fa237a75c75a7af1aec4f3eed51e9bbbc2ffb592284386ffffc52b6b6915184729b4e5c2782f20b324c60f09a1da5f356ce5d7f3cb9f25b198570849060d17a3241e4137532b22cd6ca47ee9880c6a73e52905995f6fb5aa0da561748155e1d5c9c6b34ec55f51c863f9b567bbc82daf0a7a62970a4a992f36c61adc3088b9759ae73ee488ff7ba5b3223c2e65ce34faa33d5a3ee3850ddabb4758d5f735ca69ec0ace1004fedcce180cd064dfd0ce5b8dbb4c4c10e744105ee322fe893a2afbfdd818ac48c4e74cbe329cab1782193c5c38656de5338c127e96dc73a69257550c7c6ef4f5170f48cb8462293df46d37b5754544c4d8943e3d7b7b3bb35e71bddc0aba60c7c9ee74acf0987a69e490a853403b9f50a96288e8c5e0c03a8d946c355c93f3368ec83876e39192a5b2db36bb1398969cdd300e6d80fd1776b4c902ccffe3ca87dc8861adce7d5d69f3b6359651f7d78cf9f19431092d7d6034c5cf39fff71dedeaefa19128236cd4a73de9d9e2f7cf279ac86967180602173d9072f7f42ab62e71a28dce6e1b41d6add7c66c3d4aaf40fa80ee869d7ad450926184120021d6071c9b81b9d403721611c9f5cd4c677ceafe7d91feb0469660133c72e094f4c0caa956fdd44e6bb6c133a350310ed079c8817f55dfe7b5a3d2ba95eadff050187f71d07effb35f4a269b66bea7699c29d2c34376509103fb4f3d41096a454888187f883db4100ac4a6f6eec7727d20d324e9f22430cbc68368ed4f039c8d37e8733bc0655ad87806e1f637fa74938ac26eb40dc61b0b5ae303d097100f225fe35d64b8dada5e4d2eef68be29d23daa2bce59965b86dd8680e00d3bb05911c7bf3106ea9f5924"}]}, 0x580}, 0x1, 0x0, 0x0, 0x8001}, 0x0) (async) bind$netlink(r2, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfe, 0x10000000}, 0xc) getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, &(0x7f0000000040), &(0x7f0000000080)=0x4) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f00000000c0)) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)=@ipv4_delroute={0x1c, 0x19, 0x1, 0x70bd27, 0x25dfdbfc, {0x2, 0x0, 0x80, 0x6, 0xfd, 0x4, 0xff, 0x0, 0x100}}, 0x1c}}, 0x1) 18.398385771s ago: executing program 0 (id=1161): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000c40), 0x12) 18.26746185s ago: executing program 2 (id=1162): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000300)={'veth0\x00', &(0x7f0000000440)=@ethtool_eeprom={0x48, 0x6bf, 0x8}}) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'batadv0\x00', 0x0}) bind$packet(r1, &(0x7f0000000200)={0x11, 0xf8, r2, 0x1, 0x5, 0x6, @multicast}, 0x14) (async) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x0, 0x0, 0x3}, 0x1c) (async) getsockopt(0xffffffffffffffff, 0x74, 0x4, &(0x7f0000000240)=""/91, &(0x7f00000002c0)=0x5b) r3 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) (async) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)={0x14, 0x2b, 0x1, 0x70bd2c, 0x5ffc, "", [@typed={0x4, 0xb9}]}, 0x14}], 0x1, 0x0, 0x0, 0x2040}, 0x0) ioctl$sock_bt_bnep_BNEPCONNADD(r3, 0x400442c8, &(0x7f0000001540)={0xffffffffffffffff, 0xffff}) pselect6(0x40, &(0x7f0000000000)={0x800000004344, 0x5, 0xfffffffffffffffd, 0x6, 0x80, 0x32, 0xffffffffffffffff, 0x4}, &(0x7f0000000040)={0x8000000000000001, 0x0, 0xffffffffffffffff, 0x7, 0x4, 0x9, 0x400, 0x8bbc}, &(0x7f00000000c0)={0x6, 0xe, 0x2, 0x7fff, 0xd, 0x20400002, 0x4}, &(0x7f0000000100)={0x0, 0x3938700}, &(0x7f00000001c0)={&(0x7f0000000180)={[0x2]}, 0x8}) r5 = socket$nl_route(0x10, 0x3, 0x0) (async) r6 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_netrom_SIOCDELRT(r6, 0x8916, 0x0) (async) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c00000010000108000000000000c928c26c00000000", @ANYRES32=0x0, @ANYBLOB="000000000000000014002b8008000100", @ANYRES32, @ANYBLOB="080003001900000008001b0000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x4c0c0}, 0x0) 18.193667399s ago: executing program 0 (id=1163): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x76, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x50}, [@initr0]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="c13e2dbd7000fedbdf25030000000c00850008000000000000000c000500210000000000000008000100000000000c00020005000000000000000c0002000500000000000000040007807f5b7644077e4ce627cb3571d6d9c35fc64f6c13a0ac97cd105eabc633eef398"], 0x50}}, 0x4000000) 17.970316289s ago: executing program 3 (id=1164): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="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"/1582], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) (async, rerun: 64) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x0, 0x0}, 0x8) (rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x0, 0xf, &(0x7f00000002c0)=@ringbuf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r1, r0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) close(r2) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{0x1, 0xffffffffffffffff}, &(0x7f0000000280), &(0x7f0000000340)=r0}, 0x20) (async) r4 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000400)=@generic={&(0x7f00000003c0)='./file0\x00', 0x0, 0x30}, 0x18) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000200), 0xffffffc1) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000840)={0x0, @in={{0x2, 0x4e21, @multicast2}}, 0x1000000, 0x9, 0x4b5, 0x5, 0x40, 0x5, 0x43}, &(0x7f0000000600)=0x9c) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000900)={r6, 0x30, &(0x7f0000000640)=[@in={0x2, 0x4e21, @remote}, @in={0x2, 0x4e24, @broadcast}, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2e}}]}, &(0x7f0000000940)=0x10) (async) r7 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r7, 0x0, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r5, 0x0) mmap(&(0x7f00007a6000/0x3000)=nil, 0x3000, 0x100000c, 0x22051, r5, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1, 0x16, &(0x7f0000000440)=@raw=[@tail_call={{0x18, 0x2, 0x1, 0x0, r3}}, @ldst={0x0, 0x3, 0x6, 0x4, 0x2, 0x8, 0x4}, @map_val={0x18, 0xb, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x104}, @alu={0x7, 0x1, 0x6, 0x6, 0xa, 0xfffffffffffffed0, 0x1}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1000}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}}], &(0x7f0000000500)='syzkaller\x00', 0x6, 0x13, &(0x7f0000000540)=""/19, 0x40f00, 0x24, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000580)={0x5, 0xd, 0x7fff, 0x6}, 0x10, r1, r0, 0x1, 0x0, &(0x7f00000005c0)=[{0x1, 0x1, 0x4, 0xc}], 0x10, 0x1000, @void, @value}, 0x94) (async) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r8}, &(0x7f0000000000), &(0x7f0000000080)=r2}, 0x20) (async) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x12, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x6}, @btf_id={0x18, 0x7, 0x3, 0x0, 0x5}, @jmp={0x5, 0x0, 0x3, 0x7, 0x0, 0xfffffffffffffff4, 0x8}]}, &(0x7f0000000040)='GPL\x00', 0xa38a, 0x64, &(0x7f0000000080)=""/100, 0x40f00, 0x4, '\x00', 0x0, @cgroup_sock_addr=0x13, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000140)={0x0, 0xd, 0xffffbad2, 0x4}, 0x10, r1, r2, 0x1, 0x0, &(0x7f0000000180)=[{0x0, 0x5, 0xd, 0x3}], 0x10, 0x80000000, @void, @value}, 0x94) 17.905034416s ago: executing program 1 (id=1165): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="650a0000000000006111a400000000001800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000002440)=@newtaction={0x1084, 0x30, 0xb, 0x0, 0x0, {}, [{0x1070, 0x1, [@m_ife={0x106c, 0x1a, 0x0, 0x0, {{0x8}, {0x44, 0x2, 0x0, 0x1, [@TCA_IFE_METALST={0x28, 0x6, [@IFE_META_SKBMARK={0x8, 0x1, @val=0x3b}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_PRIO={0x0, 0x3, @val=0x7fa}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x6}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_TCINDEX={0x6, 0x5, @val=0xfff6}]}, @TCA_IFE_SMAC={0xa, 0x4, @random="e488e87b4eef"}, @TCA_IFE_DMAC={0xa, 0x3, @broadcast}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0x1084}}, 0x50) 17.820381172s ago: executing program 2 (id=1166): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r1, &(0x7f00000002c0)="f9", 0x1, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x0, @private0}, 0x1c) shutdown(r1, 0x1) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x74, &(0x7f0000000200)={0x0, 0x0, 0x10}, &(0x7f0000000240)=0x18) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newlink={0x38, 0x10, 0x1, 0x0, 0x2, {0x0, 0x0, 0x0, r2, 0x18f40, 0x2a80a}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ppp={{0x8}, {0xc, 0x2, 0x0, 0x1, {0x8, 0x1, r0}}}}]}, 0x38}}, 0x0) 17.654332426s ago: executing program 1 (id=1167): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x8}, 0x9) write(r0, &(0x7f00000000c0)="240000001e005f0214f6fffffffffff807000000000000000000ffa6080009000d000000", 0x24) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0ac9fa7529189034b300000005000000020000000400000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r3, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000)={0x8, 'macsec0\x00', {'netpci0\x00'}}) r4 = socket$inet(0x2, 0x3, 0x30) getsockopt$inet_mreqsrc(r4, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000080)=0x2c) getsockopt$sock_buf(r2, 0x1, 0x19, &(0x7f0000002f80)=""/217, &(0x7f0000003080)=0xd9) close(r1) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r5, 0x11b, 0x3, &(0x7f0000000180)=0x8000, 0x4) getsockopt$XDP_STATISTICS(r5, 0x11b, 0x7, &(0x7f00000004c0), &(0x7f0000000500)=0x30) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r7 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r7, &(0x7f0000000100)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x1, 0x4}}, 0x10) setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, &(0x7f0000000140)={0x5, 0xba5a772f, 0x1}, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000001600), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_PORTS(r8, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001640)={0x1c, r9, 0x1}, 0x50}}, 0x45) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b0400006c000000000000021818799347dd5bc28bfed8804fdabf0000002c0004802800018007000100637400001c0002800800044000000000080002400000000d0500030000000000b634e561a96efb090001007379457a30000000000900020073797a3200"], 0x80}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000075a9d5315c16231c0000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='geneve1\x00', 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0f00000004000000040000001200000010300000", @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000009a43aff019c9277b218cfc46cec9fd50d344c1667b14f75b433f7c5619de0997504b8e7b25b5202142a2e73b811c25a8d75c1536cdb87b7253518c5cea69ab530ce8727a5622a59eb79f2748f76536846e9e09f539779ae06a6d0ed475882a64d2142ab47d26bb0c7c35649ccef7003eed1bf8e535f603bde324a4f436055e2daa8339985a715f2d2cf7432d967bb26485700f2641897b64dc53fcd1c5833aa72948cf0d1a836878b08d762cbd2482cb85a8", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r10 = socket$rds(0x15, 0x5, 0x0) bind$rds(r10, &(0x7f0000000200)={0xa, 0x0, @private}, 0x1c) 17.652443806s ago: executing program 3 (id=1168): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r1, &(0x7f0000000000)={0x1f, @fixed}, 0x8) setsockopt$bt_BT_VOICE(r1, 0x112, 0xb, &(0x7f0000000280)=0x60, 0x2) getsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f0000000080)=0x400, &(0x7f00000000c0)=0x4) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="a40000003a002902000000000000000002"], 0xa4}}, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r2 = socket(0x11, 0xa, 0x0) sendto$x25(r2, 0x0, 0x0, 0x85, &(0x7f0000000f80)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x3}}, 0x12) r3 = socket(0x10, 0x3, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5", 0x4) r5 = accept4(r4, 0x0, 0x0, 0x80800) sendto$rxrpc(r5, &(0x7f00000003c0)="e3710700217c24965647c6255a1c8fa69473fa99bc3dc853c71da76dfd47de6d", 0x20, 0x200000d0, 0x0, 0x0) recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f0000000100)=""/40, 0x28}], 0x1}, 0x2041) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c000000290003040000000000000000000000000075785dc68b6902ef55874b555e7ff2ed038af678e5b20b946372ec8b9121750a801fd258ef14eb8f9b308b89ffb8bf84855a4aa559410aa405884f7414b824e171f53f07aa3f89c69472b4410df2e656b0c4f79d034dd6bb9e586cbf8e67d83daf1535865b0aeef0187ed127fa179c3f721a58a69849f57618abe02f72a25bf47c520264492e12ab376539a7a6830c836ac0", @ANYRES32=0x0, @ANYBLOB="f7e801000000000094fd12800b0001006d616373656300000400028008000500", @ANYRES32=0x0, @ANYBLOB], 0x3c}}, 0x20008000) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f00000001c0)={0x0, 0x6}, &(0x7f0000000200)=0x8) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) r7 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r7, 0x114, 0xa, &(0x7f0000000180)=ANY=[], 0x4) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000480)={r6, 0x3, 0x20}, &(0x7f00000004c0)=0xc) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000240)=@assoc_value={r6, 0x6}, &(0x7f0000000440)=0x8) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$F2FS_IOC_SEC_TRIM_FILE(r8, 0x4018f514, &(0x7f0000000180)={0x9, 0x1, 0x2}) 17.529054885s ago: executing program 2 (id=1169): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x10, 0x2, 0x3) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x10000, 0x0, 0x0, 0x2}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000680)) socket$inet_mptcp(0x2, 0x1, 0x106) socket$packet(0x11, 0x3, 0x300) pipe(&(0x7f0000000140)) socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket(0x10, 0x803, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000000000000850000008600000018010000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) socket$netlink(0x10, 0x3, 0x14) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="200000005f0005"], 0x20}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000000003000000140001800d00010075cba93a73"], 0x28}}, 0x0) sendmsg$TIPC_NL_NET_GET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYBLOB="a4000000", @ANYRES16=r5, @ANYBLOB="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"], 0xa4}, 0x1, 0x0, 0x0, 0x4010}, 0x64000000) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYRES32=r0], 0x8c}, 0x1, 0x0, 0x0, 0x20048040}, 0x0) socket$inet(0x2, 0x80000, 0x1) 17.383720974s ago: executing program 1 (id=1170): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1400000010000107000000810000000003"], 0x14}}, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$inet6(r2, 0x0, 0x0) (async, rerun: 32) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) (async, rerun: 32) syz_emit_ethernet(0x8a, &(0x7f00000005c0)={@local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010100, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x2c, 0x0, {0x16, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @private, @local, {[@cipso={0x86, 0x2a, 0x0, [{0x0, 0xd, "5e000000ff000000000000"}, {0x0, 0x5, "4eb8a6"}, {0x0, 0x12, "9606053d0006ff00800000b61af93a93"}]}, @lsrr={0x83, 0x13, 0x0, [@dev, @loopback, @loopback, @multicast2]}, @timestamp={0x44, 0x4}]}}, "a815a23da43974ff"}}}}}, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000500)={'syzkaller0\x00', 0x7101}) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r4) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) (async, rerun: 32) r6 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), r5) sendmsg$DEVLINK_CMD_SB_POOL_GET(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000480)={&(0x7f0000000340)={0x124, r7, 0x400, 0x70bd28, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xf4}, {0x6, 0x11, 0x7}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0xffff}}, {@pci={{0x8}, {0x11}}, {0x8}, {0x6, 0x11, 0x8}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x80000000}, {0x6, 0x11, 0x81}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x708}, {0x6, 0x11, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x6}, {0x6, 0x11, 0x7}}]}, 0x124}}, 0x20000041) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) (async) recvmmsg(r0, &(0x7f0000005680)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) (async, rerun: 32) syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r0) (async, rerun: 32) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)) 17.302398306s ago: executing program 3 (id=1171): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) (async) r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r0, &(0x7f0000000440)=[{{&(0x7f0000000280)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000200)="9c", 0x1}], 0x1}}, {{&(0x7f0000000080)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10, &(0x7f0000000180)=[{&(0x7f00000000c0)="9976ef7a", 0x4}], 0x1}}], 0x2, 0x48000) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000001c0)={r1, 0x2}, 0x8) r2 = socket$rds(0x15, 0x5, 0x0) (async) r3 = socket$kcm(0xa, 0x1, 0x106) (async) r4 = socket(0x10, 0x3, 0x0) sendto$inet6(r4, &(0x7f0000000080)="7800000018002507b9409b02ffff48000203be04020406050a02040c5c000900580006080a0000000d0085a168d0bf46d32345653600648d040012000a00000049935ade4a460c89b6ec0cff3959547f509058ba86c902007a00004a32000407160012000a0000000000e000e218d1dd3b6ed538f2523250", 0x78, 0x0, 0x0, 0x52) (async) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x4c, &(0x7f0000000000), 0x4) getsockopt$bt_sco_SCO_CONNINFO(r4, 0x11, 0x2, &(0x7f0000000140)=""/170, &(0x7f0000000200)=0xaa) sendmsg$kcm(r3, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x40012102) ioctl$TUNSETNOCSUM(r6, 0xff07, 0x0) (async) bind$rds(r2, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) (async) sendmsg$rds(r4, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}], 0x1}}], 0x48}, 0x0) 16.385793453s ago: executing program 3 (id=1172): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001600)={0x18, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) (async) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) listen(r2, 0x0) (async) listen(r2, 0x0) (async) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='sched_process_wait\x00', r1}, 0x10) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000180)={0x0, 0x0}, 0x0) r5 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r4, 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r5, 0xffffffffffffffff, 0x4}, 0x10) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, &(0x7f0000000000)={{}, 0x2, 0x40000008, 0x4}) (async) r6 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), r0) (async, rerun: 32) r7 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r7) (async) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x24, r8, 0x1, 0x470bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x882}]}, 0x24}}, 0x9590f6cc3ea35512) (async, rerun: 32) r10 = socket$alg(0x26, 0x5, 0x0) (rerun: 32) bind$alg(r10, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305\x00'}, 0x58) r11 = accept4(r10, 0x0, 0x0, 0x0) sendmmsg$unix(r11, &(0x7f0000003a40)=[{{0x0, 0x0, &(0x7f0000002440)=[{&(0x7f00000011c0)="116deba773907efacb20240a8c", 0xd}, {&(0x7f00000002c0)="b3875540847dd6038e83e47f7f3bc618279e3317", 0x14}, {&(0x7f0000001300)="f3", 0x1}], 0x3}}], 0x1, 0x0) r12 = socket$igmp6(0xa, 0x3, 0x2) r13 = accept4$inet6(r12, &(0x7f0000000100)={0xa, 0x0, 0x0, @private0}, &(0x7f0000000180)=0x1c, 0x1400) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r6, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_IFNAME={0x67, 0x2, 'wg2\x00'}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x2891}, 0x20008010) (async) r14 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r14, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="020300090b00000000000000000000000100080000000000030006000000001e5f0df7f60002000000000000000000000000000000020001000000000000fd090400000000030005000000000002000000ffffffff000000"], 0x58}, 0x1, 0x7}, 0x0) (async) r15 = accept$alg(r10, 0x0, 0x0) (async) r16 = socket$inet6_udp(0xa, 0x2, 0x0) (async) clock_gettime(0x0, &(0x7f00000003c0)={0x0, 0x0}) ppoll(&(0x7f0000000340)=[{r1, 0xc404}, {r13, 0x40}, {r15, 0x297}, {r7, 0x9000}, {r0, 0x50}, {r3, 0x40}, {r7, 0x400}, {r16, 0x8}, {r3, 0x4080}], 0x9, &(0x7f0000000400)={r17, r18+10000000}, &(0x7f0000000440)={[0x81]}, 0x8) socket$nl_generic(0x10, 0x3, 0x10) 16.269673341s ago: executing program 4 (id=1173): r0 = socket$kcm(0x10, 0x2, 0x4) r1 = socket$can_bcm(0x1d, 0x2, 0x2) (async) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) (async) pselect6(0x7e, &(0x7f0000000100)={0x81, 0xa0a, 0x2, 0x9, 0x2, 0x100000000, 0x5f, 0x1}, &(0x7f0000000140)={0x5, 0x53a9, 0x5, 0x2, 0x6, 0x8, 0x7fffffff, 0x6}, &(0x7f00000001c0)={0x1516, 0x80000000, 0x7, 0x81, 0x0, 0x7, 0x4, 0x2}, &(0x7f0000000200)={0x77359400}, &(0x7f0000000280)={&(0x7f0000000240)={[0x7]}, 0x8}) (async, rerun: 64) sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000180)=[@mask_cswp={0x58, 0x114, 0x9, {{}, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}}, @mask_cswp={0x58, 0x114, 0x9, {{0x5, 0x9}, 0x0, 0x0, 0x2, 0x100000000, 0x9, 0xff, 0x1, 0x4}}], 0xb0}, 0x0) (async, rerun: 64) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)={0x2, 0x3, 0x0, 0x3, 0x10, 0x0, 0x0, 0x0, [@sadb_key={0x2, 0x9, 0x8, 0x0, "e4"}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private1}}, @sadb_sa={0x2}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private1}}]}, 0x80}, 0x1, 0x7}, 0x0) (async) recvfrom(r1, 0x0, 0x0, 0x40000060, 0x0, 0x0) (async) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r5, 0x0) (async) recvmmsg(r4, &(0x7f0000006e40)=[{{0x0, 0x0, &(0x7f0000005300)=[{&(0x7f0000000700)=""/86, 0x56}], 0x1}, 0x7}], 0x1, 0x2, 0x0) (async) sendmsg$inet(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="5c00000012006bab9ea60864160af36504b68675f8001d000a00a0e69ee517d34460bc24eab556a705251e6182949a36e23d3b48dfd8cdbf9367b4fa51f60a64c9f408000300060200000800020011000000", 0x52}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x40001) 16.010307906s ago: executing program 4 (id=1174): r0 = socket(0x2a, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000008c0)=@newtfilter={0x384, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xfffa, 0xffff}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_basic={{0xa}, {0x354, 0x2, [@TCA_BASIC_EMATCHES={0x350, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0xa0, 0x2, 0x0, 0x1, [@TCF_EM_META={0x80, 0x1, 0x0, 0x0, {{0x9, 0x4, 0x10}, [@TCA_EM_META_HDR={0xc, 0x1, {{0xe5, 0x2b}, {0xbbda, 0xfe, 0x1}}}, @TCA_EM_META_RVALUE={0xb, 0x3, [@TCF_META_TYPE_VAR="f99926", @TCF_META_TYPE_INT=0x7]}, @TCA_EM_META_RVALUE={0x17, 0x3, [@TCF_META_TYPE_VAR="59a4bf48ca", @TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_VAR="297c3862a79798509b92"]}, @TCA_EM_META_LVALUE={0x8, 0x2, [@TCF_META_TYPE_INT=0xb0d]}, @TCA_EM_META_HDR={0xc, 0x1, {{0xfff7, 0xfd}, {0x8, 0x3, 0x1}}}, @TCA_EM_META_RVALUE={0x30, 0x3, [@TCF_META_TYPE_VAR="e1032c1090b03d", @TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_VAR, @TCF_META_TYPE_INT, @TCF_META_TYPE_VAR="e188308906cc8b3d2d", @TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_INT=0x5]}]}}, @TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x7, 0x3, 0xfff7}, {0xb7a6, 0x12c, 0x59de, 0x5}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0x2, 0x8, 0x4}, {0x3, 0x3, 0x1}}}]}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0x1010, 0x1, 0x9}, {0x1a400000, 0xfcf, 0x1, 0x2, 0x4, 0x1, 0x1}}}]}, @TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}, @TCA_EMATCH_TREE_LIST={0x264, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x104, 0x3, 0x0, 0x0, {{0x7, 0x0, 0x63}, "0dbd5e1bb07f4d868510e0aae79f83c94b2a0fdff262ca960cc8545448675c9a644e87916f2e5efa0444fadabb289116e4abec5941680617f4f6b28ef9913779e81f30213ed8d008e37902568a7549bb29ce2e2e5dced8022d84e4b2e901259ce4f9503b205f07848fcf044f8540e3471738a07d8b883c512168befdb5c13675e13f3ffdce947d049113e66ea1ad82cf3ce3e3f267b3a1b700cfeb006885ce2cea0875564c814b0f627155d461b9406995c2a97cd63c732c257360001667e873ba0a1daf453ebe2e6d379ef1661c6f379311682be29fc26ab19f00cd6967362ef9da300b9b6440e77b420700de6e7b13d231e98d4b"}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x9, 0x7, 0x6}, {{0x1, 0x1, 0x1, 0x1}, {0x3, 0x1, 0x1, 0x1}}}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0xfffb, 0x3, 0x7}, {0x7, 0x5, 0x9, 0x8000}}}, @TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{}, {0x6ea, 0x98, 0x4, 0x6, 0x4, 0x2, 0x2}}}, @TCF_EM_IPT={0x14, 0x2, 0x0, 0x0, {{0xf, 0x9, 0x2}, [@TCA_EM_IPT_HOOK={0x8, 0x1, 0x4}]}}, @TCF_EM_META={0xe0, 0x3, 0x0, 0x0, {{0x1b, 0x4, 0x1}, [@TCA_EM_META_LVALUE={0x2e, 0x2, [@TCF_META_TYPE_VAR="c99b8917468738ff", @TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_VAR="b521168a20", @TCF_META_TYPE_VAR="1b909f", @TCF_META_TYPE_VAR="36a7", @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_VAR="a2fb4c6c6f0b", @TCF_META_TYPE_VAR="41fae553a727280d3667"]}, @TCA_EM_META_RVALUE={0x1b, 0x3, [@TCF_META_TYPE_VAR="0457", @TCF_META_TYPE_VAR, @TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_VAR, @TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_VAR="9a7cdd970e"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0xea8, 0x10, 0x1}, {0x7, 0xd2}}}, @TCA_EM_META_RVALUE={0x24, 0x3, [@TCF_META_TYPE_VAR="2c94af1929aa8b", @TCF_META_TYPE_VAR="4c79e063", @TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_VAR="f49a", @TCF_META_TYPE_INT=0xfffffffe, @TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_VAR="cceaf23e30cb86"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x7d, 0x8}, {0x400, 0x1, 0x2}}}, @TCA_EM_META_LVALUE={0x12, 0x2, [@TCF_META_TYPE_VAR="ab7e5cc08d27c7", @TCF_META_TYPE_VAR="c146f0a5ffbf7f"]}, @TCA_EM_META_RVALUE={0x29, 0x3, [@TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_VAR="58f7d7b90c", @TCF_META_TYPE_VAR="1b4269427984f91f6f", @TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_VAR="c33cf66036b90c"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x6, 0x3a}, {0x4, 0x3}}}]}}, @TCF_EM_META={0x20, 0x3, 0x0, 0x0, {{0x6, 0x4, 0x3}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x8d, 0xe, 0x1}, {0x1, 0x29, 0x2}}}, @TCA_EM_META_LVALUE={0x8, 0x2, [@TCF_META_TYPE_INT=0x1]}]}}]}]}]}}]}, 0x384}}, 0x24004000) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0xfea3) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 15.844926821s ago: executing program 4 (id=1175): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x2000011, r2, 0x0) (async) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f0000002fc0)=@ethtool_coalesce={0xf}}) (async) r3 = socket$rxrpc(0x21, 0x2, 0xa) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x2, 0x6, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@func={0x85, 0x0, 0x1, 0x0, 0x1}, @exit, @call={0x85, 0x0, 0x0, 0x94}]}, &(0x7f0000000300)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) connect$rxrpc(r3, &(0x7f0000000000)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, 0x24) (async) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r4, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x10, 0x1405, 0x1}, 0x10}}, 0x0) connect$rxrpc(r3, &(0x7f0000000000)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @private}}, 0x24) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x7c, 0x7c, 0x2, [@var, @func_proto={0x0, 0x6, 0x0, 0xd, 0x0, [{0x4, 0x2}, {0x1000000}, {0x0, 0x4}, {0x4, 0xfffffffc}, {}, {}]}, @fwd, @volatile, @typedef={0x4, 0x0, 0x0, 0x8, 0x3}, @volatile={0x0, 0x0, 0x0, 0x9, 0x6}]}}, 0x0, 0x96, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) r5 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000780)={0xffffffffffffffff, 0x4, 0x8}, 0xc) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000007c0)={&(0x7f0000000400)="ba217c4f0acdf7cd9e4755e5637f222da067373cb33c1276b2f0470700428d1abdce2ab2d60eaa644b507f682dc71b7393112c50305995996449eaab08935833d234a3790283f17d7ffbc224c7d6b9cba0a4ecb5a893597a60b4df7825d377ae80d450ce806c4c9075ecac82854637929053ed", &(0x7f0000000480)=""/59, &(0x7f00000012c0)="d6a73f47873d7cf656c0e272927e0fa82220ceabd2388014ca2e856fdd1c0d392dc80c3773dd78853da0c882cd1f118636a28df4756eee8d3089caca7c28834f7f018e2622487616852558a2ee059d310f75be83e76468fe7417bb6830684dafc5f166464fe22ee809aafb86a7fba46cbf249e9e3c8a230d6d6317f1d2a35de19956594731e51f29931d93c525dd90b6f9f6b5e2686f6b41d6453a3c1da3cb0ef6f6c38c8de1dc21ea4d9f193acdacccc98506cf23183d67ad48f00cb4347904f6050b03b6aaa04642f1ebaebd2bbe048c7e89b8ed053ae08d6fcd124c3ccd1be1a37e72bb4e5f7f36ef9d2acc8aeda718ce7ca4f7ca047cdac67b5536dbdd41d718a16e89fd8d37fd39c804663a84df70ff99def3bd380413690a6bb1c36255b6f1ae62e8d08bae42595ee7199377bcc0f8a6b41c9c3f9589aa56f8b8c652fdac5976f999f83a84553b4c8110a83372a43160c707f2e622b3bc886a06393eefe426469921e7d1f09b405a81d3f0f766c9dc9da12c4340aff65a28744248a219bfe63ed97900ba5f213a0c48851eafd43fa95324caf8d274d0cde04151756325ed1b6dd5194216c548bdae0fc87750649b7b9373ce8fb863d91ea2e3e6dc34827b09805457ad53ecafad00317e9c9694019445e18850f9f09b30d36ec8a68d977f0151c5af60c05b5ddd799b0a19da1470c706fe95e8eec7b772a2d93d423cdeef20cfbf321288d3a78d9c8a009b272dc040466989fd909f644d69219aff9fcdc91b082d3726906da78c6c8e5c2e425d17dab8851cb3712f9bf702f14093f42c9b381d792bca1d14e5572ac345493b3fa92fdebd302c888e725bad88a67ddb0a1ae479e80484e93ce3952f1be816e1610fb3d118d1a2fc9b1f20af389ee129242ed513117fa5c97d50bfdcf69453cfd9bc4ddab347678eeae8ec048970096d2ed5cdcf756c410f5799296fce46efa7739aac9f543a81418bdc0325de771526165502c2e256fc78c10ed4a549de8b49f3a71aa7bcde7abbc050c69ed3d4db7d30eb5adb76c6a8798d0e2ff6f84c595d878e34e3ba341ba297a0971a973ed628d10a335493e07109d814568bdda7e90e0663f5f0f2d76f79351b979a51be7a9f1d32cc44fd132a44d2914ffc274d59042b4c53d4f53371071ddc749fb8ca2a492300964d74d37c33a71e3822ce7b2e3b0cfb18dd15443047f8db61ad619e228a12584b9d68babe6485c73a6013c32a5d4b0ab3c26ca63d88fda6ee00e0df4b6c9852be16bae95c503ef57d08c8cb169dea1cd48930adbe3a5227a6b895bce6517b32324674ab81ece326356e1432a47c12603695d6685364c2132294760884de8c99e045c13c0b72ddcb3785f9cf6e7bf0f2f3a3ee2596ac6f1b3649e79281a409dae5f321bd98d9dcfa5c0f24f184afbdd93e7fa66e991c4a5bee71486eb07e4ba3fb0afdfc4be0ea544ea7e20e8f3ac34c9ea7222398d5e3f7b73972badb6b8a10e44947a02b5c28e21cc918ee550ea1b278adcd4d0d1be00364bec4cddbf1842d9d188456f3cd64fb5610a9d2a53fbaeb0695e25cc243ea1ac1115f11b80d2b2dcad70f27cc03ee8577ecadfdc6504a539eb426664a5dc8d3315bfa1362f8266713e0fa9236aa2f8a137d5d0e21a883730b43326e5a8ceb36f76e495cc0423922394eb5facbd220a9526afddef726faaa11ef77a034105e3fd3be14920daf96f6d91f995a528f4758423d7d8ceae6ee3f6bf8166338a691fe7a6f24dbf893a9c506042393ee13fc2ff82cdd3b615a6156b5983a894b83c2c8ffe57f2e5fb2848ba8b4ebe77ef0b673cabdb737152318f74250447f3ed6bdee7a2d1ff735a58fc60f80fd1f9b5ae3b89c0018fe03cf12a4b8a128c25bebacef81f09ef36c85f9fb8dee7476c69a2910fa5d0a1d2b627fb911574d9ff98a6dfb15ed4e80fa764aee3f9a7554669b5840a69fb94920bf71201dbdaf7fa0021f861fc9ab279de38317979bc851aa1def17cf58a953178e45793c09136b995487a42acb48875745a91ac07f16aea102ab2458c6ea7898cc3e51004e92e642c3ad8257b40920680a7e454879aa3505bad7999fe6813fef59b94ab946c5d6e34f363658231dc8f88238ac5525e272b4769c0e06423b3a78e3af7e4f36b1e1ce403ba3e78de9c48cdd8c939c2944bc752eaaf836131724aa7113bb207f1d3e4c4004d80841c53c16a1bcf93c048c50f11ca1f57374fd8e732597826afea694cb0a751a01849399a20caaf898d95ec19c38e508fea5e122a2295e387a345d0d9211f5178143cbbb9b76057ac30e549880e3dfbca3f7fcddbabec3e89561bd0e2949920f7a195994b4aacf556a655edadbc9e43c4f37b800363e95fbc564e9d56c8a2153d6942684449cbbe392c05f0738fe50deb4d39eedc61231afb0a3dcd9f28b1d6c36b8d7a285c3fa08290f765fe93049256e04b1cf70b35d1dfa6edff493cd8e08f59af9e43716c1cd2ab3d8fc8113d949b3b5313e707cf644ef87933dfea0ad937d509ffb7db205e9cd05317cb4efea8e0ee56be0ea87889e8313ca79cdd46d7db64ba625d44168ecdab9da6fce9398471685cdb02204e028f25368c4f7821a1b65974ff5211deb9e868d9295a8c8396e47debff4f303625f90d362aa455e01e5ee7ed441d527b407ec661cdbfe4984c0d5387be1deb46e48cb088e936e3dd25aeac2ef31824984d268938159680c012e1093175d64c74f87f79227bac687b8662ced2b2485303923ea3adaaf70959a1bb0e1b151e6c455cd3adf5f5892a6f965cc035499631000704a26f743744accc40cef01f862f7e417c6d98f166109b669ef192c4eb3f3caf4b9c2bf8a1282e55e619eee11727d90fdd63e1f725108b80315fc3d89841a97b7c30636353fa9c4055a68c837c8bb0406375fec7340617241431705d4ea69ccd0182e48cf33a46d0d64388a957e8e8b2232a090bdbf05caf16a334dc6335bb0364dd4c51c3b9391215ea0d2c8d8d09b3bd4386e61d5e36b21fb30a34cd18097ff89d590d7d8ef5738f906a37fb3e8e3d5860aa5681c02218d019a7591839baeaa4c57587faf103245cfe75062571acceed10f284d64de2703b2a32cba690ebfe7605654c4f2ac90b60c0e10ce4ee468b35847486dc065ad1c5f7c9c4dc8ec3f18dc8f77e03c72629d5dc8e10e5727f996d20834208d075a47dd6584b6a2314c4e7c24b46ae0464505a1a71a638d49ef8f59a2982b1533d5bbf2872332ae2e6022bd36465870a1e66cd7b3e9049bb5c9475aa0df28c15d16fabe320a4efbc2c42d16aebfd5a48a87e046f4e775874887c63ff822dc9cc1ad62a75e1cc2ac3f5bb6d60b9d11d0994e7ea79b72be42299fa0bde111c4bde8270e71fe9c4f7adeb9684006b52250c072790667108dd35a1e1b12534e5dac466c0d839f2b77c01bd5bd8e617974fcb4493712cf4a989664c3a0fdb41c5002ca2b97dd1fdd717f42b8537c63a4d0159e4c6fe2729720becc6d50bbc2009923f4917f35e050e5f502ec551a742346b645268254da5d7a0236340a216a23e61d0ecc4c5f4dfa6458dcf9622a53619d2d8f356adaf5c3e87df2b844e1a4de7af198ac72f3cccba093c66dd9ca345208c1b04f869ca4d90af703fb9b021d8fd8ff6a07b2702b4c4d149c26146d52e354738e2123e9bf2a6c45dfda8a07a5c521df5af376fa73439b69523d4189fe82355e81200e01956f8e3f3c3d32f4f67dee1a899d647ae424f6d8dae063a7f416516e81ee81763a36650a7fe5f1c82c7af684c202b5910c3bfbf7a02a37495b2382021a53d1450e35aa054b3e085e1f1e3879c6a5b36a5f957df4469a1175c3d158e393ec8a38afe7b5421b7d8d8beac47ab381bf489f85bf69a056cbf6264b9ad9887a2d8a85d85f03ced8d7735fbfdd3f49d7d3281dca6be015b0e1816279ead3f650549c34b0af517e24cbca7152a1c67b5592e80d07b02cf73dda199a3568d126824fb881039a1984fc7ac52012a1136e6fccae0338f2a1f6361cd72b7afecb4a6107657b513aa4740e32f81ca273705bcdd5ff896d75cd9e922e57afbb0fa5672560941e14d6d0e458e296e3222a9869343d129624c81dbc9f5ffb683b4eee9001f5741764e8c0aca2213a04861cd7ae857cadb481883128ceadfb9f88021e800ca348aa7982c3437e66692f6c37c044af7dfb2f61d0e1ea60021414fb30efd1c8454c4fdc1dd8a793e758f286888e400ba25e88d5ff6294fc84be94410d153a26fac6afb01393c4bf71de4a75a8461ff587b029b14f1f1ea39666d4d933d9f4930fe5f768620145d951df367ec9ec9d22e832bb11212f933777472e1522b664c8c4745ba5276ef9648e95db9bcf8cc5b7018499d1e9901c705294394358585995f1218961b3f5d82b403d414e601bda17ae67b275b592816e705c4b7e3fa0ff9137b0f44c56f3bf56d60ffb8d35013d14975360e9b46a975131accb362aec48b8bbd9b76f2ebf21b83b6119f8134d5898b366a064b2fd5cd2b68f8de8db8f65d0a8666cdeeecd110259b4a064a9e27873839ebcee14eb1580bff068b2a1964264be7e909ff00f1d2792f70a92ea4b786e2cbf3174d3f5b287f78e4c08d8f6102f8c1998bf3a09e179ee4ceb0e3792d73cdb8cd2ebac0a33eef6bb3a6df7aa6173c6cdbe5e5b546b5cacf585f212ada09a4679448de55648dfeac6a207d6ad7f89ad20e1a3c7644b11c40332f290d637241064f91b0fc7c4c55bb4e076745706f242875cf8d4b769f4e3b2541683a1302cbd0febf542c9a6b9aca3b72b21566c2eb3e21762c634b74c39e1aeed45bbf6927a45b7a4784d3199707145645f5c838dcd1857fb033967121752be6d4a995b1467be12a91025f63d8f66db17c45eaf60fd2fb8db09270b8ecbd3310058375c3bcf31d4e2ab8d603f59086faf0a1107d807a1b292bff944f817a312934a0aca7f7754a359bdadaf7c22fb3259807b4c6ee3442419348097d4c2fc1568e0877c8cdc419b21f062d88f758ed5ee2cb79f7b85860555afef8999582628722e3c5ade6ff62f8f3f46b46d71c0f0b6e2e475e5e7965662668cea3037dc4d2b9617b822e736f6e1055b60cfd058444007cbfc32ebc0140caed38736a3a62a88bd944d8ea36b38ab18f35b005bb88b88f077353f11b5774ef787a2f798e2228118bf7954606ff338915a6b2f9467f7d0a3a983ba06d6ebdf1372b2c02e4b0c14f12514841166e9418b20aab9a7509617c5a32e4d36f020c59ee950377ad1b43b339e755ec7b0a46e6d8a957beb175271a058c894ecc47d2ad66ae4364f5595a5b048259e2c678b67fd564b75a4e2da3d7f92c386582ec4d218de65eadd3bf345a7d91400d584a9d61790524e634fe4f0f8455724f3491f8aef0264314315f37ed0a52a231941741a40c570498ac0d8ca0870a1195dff95209e5d6d47647b52db015b52a2a5180a29581914e2be83e52521a647453b80f530eae7d54f1cbb677bd3df08d8bebeabc017e1c27ef2dd1421331e08145b62ca9400835007f5e0aa9d3691117bb956435da53f668dbe3beaf92e984926754212ba9ddd6c3032c65a87a6dbce931e00f1fba7d8370e740fc1816cf718560c6d5ebdf8f4148e6bfb6719b9f6d0ec5c21e5628e44a2fdda31fdd6929fcd2941de126ba224d7cf5d9904972c97ea43daa369f678080454a895baf50234d5f2b784638fa1646962c8624f24d6dba72b446ad8d4f70e1bf551b952b7a45639122f8d60b2fd231f1d21954f3d2854812756c72cca174f42be39", &(0x7f0000000680)="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", 0x9, r5, 0x1e2e947c5000ee35}, 0x38) (async) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, &(0x7f0000000040)=""/247, 0x26, 0xf7, 0x1, 0x0, 0x0, @void, @value}, 0x20) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000100001040100"/20, @ANYRES32=0x0, @ANYBLOB="7b130000000000003800128008000100677470002c00028008000100", @ANYRES32, @ANYBLOB="08000300", @ANYRES32], 0x60}}, 0x0) (async) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x203, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}]}], {0x14}}, 0x68}}, 0x0) (async) sendmsg$NFT_BATCH(r8, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_DELFLOWTABLE={0x30, 0x18, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x4}]}], {0x14}}, 0x58}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x7, &(0x7f0000000180)=@framed={{}, [@func={0x85, 0x0, 0x1, 0x0, 0x3}, @map_val, @exit]}, &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r6, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) (async) r9 = socket$pptp(0x18, 0x1, 0x2) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x700}, 0x50) (async) bind$pptp(r9, &(0x7f000000ab00)={0x18, 0x2, {0x1, @private=0xa010101}}, 0x1e) bind$pptp(r9, &(0x7f000000ae00)={0x18, 0x2, {0x1, @local}}, 0x1e) (async) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="ac3ae5f35d800e507d79bba1a7755227193adac3303b14"], 0x30}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) (async) socket$nl_route(0x10, 0x3, 0x0) 15.589035559s ago: executing program 4 (id=1176): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=ANY=[@ANYBLOB="28000000131481"], 0x28}}, 0x0) (async) r1 = socket$inet_udplite(0x2, 0x2, 0x88) (async) r2 = socket(0x15, 0x5, 0x0) getsockopt(r2, 0x200000000114, 0x271a, 0x0, &(0x7f0000000040)) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) (async) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x80800) close(r5) r6 = socket(0x10, 0x80002, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000140), &(0x7f0000000180)=0x4) (async) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000001300290a000000000000000007000000", @ANYRES32=r3, @ANYBLOB="00000132ae57f60014001a8010000580"], 0x34}}, 0x0) 15.350443473s ago: executing program 4 (id=1177): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newrule={0x3c, 0x20, 0x100, 0x70bd2d, 0x25dfdbfd, {0x2, 0x20, 0x10, 0x8, 0x0, 0x0, 0x0, 0x5, 0x5}, [@FRA_DST={0x8, 0x1, @private=0xa010100}, @FRA_DST={0x8, 0x1, @multicast1}, @FRA_SRC={0x8, 0x2, @rand_addr=0x64010102}, @FRA_GENERIC_POLICY=@FRA_IP_PROTO={0x5, 0x16, 0x32}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4055}, 0x80) (async) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@dellink={0x20, 0x11, 0x1, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, 0x1480, 0x2104}}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x80) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f00000045c0)={0x102c, r3, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x100c, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x1003, 0x4, "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"}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_FEATURES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}]}, 0x102c}, 0x1, 0x0, 0x0, 0x4044801}, 0x80) 2.299647051s ago: executing program 32 (id=1163): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x76, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x50}, [@initr0]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="c13e2dbd7000fedbdf25030000000c00850008000000000000000c000500210000000000000008000100000000000c00020005000000000000000c0002000500000000000000040007807f5b7644077e4ce627cb3571d6d9c35fc64f6c13a0ac97cd105eabc633eef398"], 0x50}}, 0x4000000) 2.238181283s ago: executing program 33 (id=1170): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1400000010000107000000810000000003"], 0x14}}, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$inet6(r2, 0x0, 0x0) (async, rerun: 32) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) (async, rerun: 32) syz_emit_ethernet(0x8a, &(0x7f00000005c0)={@local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010100, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x2c, 0x0, {0x16, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @private, @local, {[@cipso={0x86, 0x2a, 0x0, [{0x0, 0xd, "5e000000ff000000000000"}, {0x0, 0x5, "4eb8a6"}, {0x0, 0x12, "9606053d0006ff00800000b61af93a93"}]}, @lsrr={0x83, 0x13, 0x0, [@dev, @loopback, @loopback, @multicast2]}, @timestamp={0x44, 0x4}]}}, "a815a23da43974ff"}}}}}, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000500)={'syzkaller0\x00', 0x7101}) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r4) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) (async, rerun: 32) r6 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), r5) sendmsg$DEVLINK_CMD_SB_POOL_GET(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000480)={&(0x7f0000000340)={0x124, r7, 0x400, 0x70bd28, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xf4}, {0x6, 0x11, 0x7}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0xffff}}, {@pci={{0x8}, {0x11}}, {0x8}, {0x6, 0x11, 0x8}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x80000000}, {0x6, 0x11, 0x81}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x708}, {0x6, 0x11, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x6}, {0x6, 0x11, 0x7}}]}, 0x124}}, 0x20000041) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) (async) recvmmsg(r0, &(0x7f0000005680)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) (async, rerun: 32) syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r0) (async, rerun: 32) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)) 2.159445169s ago: executing program 34 (id=1169): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x10, 0x2, 0x3) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x10000, 0x0, 0x0, 0x2}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000680)) socket$inet_mptcp(0x2, 0x1, 0x106) socket$packet(0x11, 0x3, 0x300) pipe(&(0x7f0000000140)) socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket(0x10, 0x803, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000000000000850000008600000018010000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) socket$netlink(0x10, 0x3, 0x14) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="200000005f0005"], 0x20}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000000003000000140001800d00010075cba93a73"], 0x28}}, 0x0) sendmsg$TIPC_NL_NET_GET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYBLOB="a4000000", @ANYRES16=r5, @ANYBLOB="01002dbd7000fedbdff7ffffff0090000580070001006962000014000280080004000400000008000300070000003400028008000200fdffffff0800010005000000080001000f000000080003000300000008000400050000000800020000000000e9000100657468000c000280080004000b00000007000100696200000800010075647000080009006574680008000800010075647000aeb7fb081fd8d2aa0ea4b9e3bb28bcc732d33555359588595a9849ac4d5ed3112af86178f1dd4fb5525cffda35797cf461450890900742058ce104337c62e950729add61ff1adb320594e4d575b49e115749cfa05bea1d0f8d9b8bb5146c45daa53cb83722b6798b477b4c469371b7e8c29d293f47"], 0xa4}, 0x1, 0x0, 0x0, 0x4010}, 0x64000000) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYRES32=r0], 0x8c}, 0x1, 0x0, 0x0, 0x20048040}, 0x0) socket$inet(0x2, 0x80000, 0x1) 1.096582984s ago: executing program 35 (id=1172): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001600)={0x18, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) (async) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) listen(r2, 0x0) (async) listen(r2, 0x0) (async) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='sched_process_wait\x00', r1}, 0x10) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000180)={0x0, 0x0}, 0x0) r5 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r4, 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r5, 0xffffffffffffffff, 0x4}, 0x10) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, &(0x7f0000000000)={{}, 0x2, 0x40000008, 0x4}) (async) r6 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), r0) (async, rerun: 32) r7 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r7) (async) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x24, r8, 0x1, 0x470bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x882}]}, 0x24}}, 0x9590f6cc3ea35512) (async, rerun: 32) r10 = socket$alg(0x26, 0x5, 0x0) (rerun: 32) bind$alg(r10, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305\x00'}, 0x58) r11 = accept4(r10, 0x0, 0x0, 0x0) sendmmsg$unix(r11, &(0x7f0000003a40)=[{{0x0, 0x0, &(0x7f0000002440)=[{&(0x7f00000011c0)="116deba773907efacb20240a8c", 0xd}, {&(0x7f00000002c0)="b3875540847dd6038e83e47f7f3bc618279e3317", 0x14}, {&(0x7f0000001300)="f3", 0x1}], 0x3}}], 0x1, 0x0) r12 = socket$igmp6(0xa, 0x3, 0x2) r13 = accept4$inet6(r12, &(0x7f0000000100)={0xa, 0x0, 0x0, @private0}, &(0x7f0000000180)=0x1c, 0x1400) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r6, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_IFNAME={0x67, 0x2, 'wg2\x00'}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x2891}, 0x20008010) (async) r14 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r14, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="020300090b00000000000000000000000100080000000000030006000000001e5f0df7f60002000000000000000000000000000000020001000000000000fd090400000000030005000000000002000000ffffffff000000"], 0x58}, 0x1, 0x7}, 0x0) (async) r15 = accept$alg(r10, 0x0, 0x0) (async) r16 = socket$inet6_udp(0xa, 0x2, 0x0) (async) clock_gettime(0x0, &(0x7f00000003c0)={0x0, 0x0}) ppoll(&(0x7f0000000340)=[{r1, 0xc404}, {r13, 0x40}, {r15, 0x297}, {r7, 0x9000}, {r0, 0x50}, {r3, 0x40}, {r7, 0x400}, {r16, 0x8}, {r3, 0x4080}], 0x9, &(0x7f0000000400)={r17, r18+10000000}, &(0x7f0000000440)={[0x81]}, 0x8) socket$nl_generic(0x10, 0x3, 0x10) 0s ago: executing program 36 (id=1177): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newrule={0x3c, 0x20, 0x100, 0x70bd2d, 0x25dfdbfd, {0x2, 0x20, 0x10, 0x8, 0x0, 0x0, 0x0, 0x5, 0x5}, [@FRA_DST={0x8, 0x1, @private=0xa010100}, @FRA_DST={0x8, 0x1, @multicast1}, @FRA_SRC={0x8, 0x2, @rand_addr=0x64010102}, @FRA_GENERIC_POLICY=@FRA_IP_PROTO={0x5, 0x16, 0x32}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4055}, 0x80) (async) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@dellink={0x20, 0x11, 0x1, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, 0x1480, 0x2104}}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x80) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f00000045c0)={0x102c, r3, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x100c, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x1003, 0x4, "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"}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_FEATURES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}]}, 0x102c}, 0x1, 0x0, 0x0, 0x4044801}, 0x80) kernel console output (not intermixed with test programs): ed promiscuous mode [ 93.718993][ T5841] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 93.727211][ T5841] Cannot create hsr debugfs directory [ 93.886175][ T5826] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 93.949004][ T5826] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 94.001026][ T5826] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 94.039631][ T5839] Bluetooth: hci0: command tx timeout [ 94.054090][ T5826] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 94.248096][ T5833] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 94.280495][ T5833] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 94.297895][ T5833] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 94.320960][ T5833] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 94.364965][ T5839] Bluetooth: hci3: command tx timeout [ 94.430861][ T5832] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 94.439276][ T5839] Bluetooth: hci2: command tx timeout [ 94.439291][ T55] Bluetooth: hci4: command tx timeout [ 94.444979][ T5839] Bluetooth: hci1: command tx timeout [ 94.481246][ T5832] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 94.525360][ T5832] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 94.538950][ T5832] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 94.646659][ T5831] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 94.660547][ T5831] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 94.673525][ T5831] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 94.687269][ T5831] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 94.703154][ T5826] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.834543][ T5841] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 94.857635][ T5841] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 94.868104][ T5841] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 94.886137][ T5826] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.898590][ T5833] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.910218][ T5841] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 94.935200][ T4056] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.942541][ T4056] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.002812][ T4056] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.010408][ T4056] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.060163][ T5833] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.098507][ T1146] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.106046][ T1146] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.122478][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.162488][ T63] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.170638][ T63] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.255898][ T5832] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.302182][ T1146] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.309630][ T1146] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.336143][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.369361][ T1146] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.376764][ T1146] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.442835][ T5831] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.478586][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.486103][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.511102][ T5841] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.537781][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.545146][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.703393][ T5841] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.725761][ T5832] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 95.763094][ T5826] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.782405][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.790141][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.827205][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.834649][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.081112][ T5826] veth0_vlan: entered promiscuous mode [ 96.124221][ T5839] Bluetooth: hci0: command tx timeout [ 96.200132][ T5826] veth1_vlan: entered promiscuous mode [ 96.270626][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.363389][ T5826] veth0_macvtap: entered promiscuous mode [ 96.393548][ T5826] veth1_macvtap: entered promiscuous mode [ 96.435288][ T5839] Bluetooth: hci3: command tx timeout [ 96.514158][ T5839] Bluetooth: hci4: command tx timeout [ 96.514577][ T55] Bluetooth: hci2: command tx timeout [ 96.519701][ T5839] Bluetooth: hci1: command tx timeout [ 96.562993][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.590162][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.615093][ T5833] veth0_vlan: entered promiscuous mode [ 96.627665][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.652450][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.667767][ T5833] veth1_vlan: entered promiscuous mode [ 96.687087][ T5826] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.696903][ T5826] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.707662][ T5826] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.716579][ T5826] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.761519][ T5841] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.806479][ T5832] veth0_vlan: entered promiscuous mode [ 96.877120][ T5833] veth0_macvtap: entered promiscuous mode [ 96.911748][ T5833] veth1_macvtap: entered promiscuous mode [ 96.930219][ T5832] veth1_vlan: entered promiscuous mode [ 97.070944][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.099743][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.104912][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.120595][ T5831] veth0_vlan: entered promiscuous mode [ 97.140875][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.168229][ T5832] veth0_macvtap: entered promiscuous mode [ 97.177223][ T1214] cfg80211: failed to load regulatory.db [ 97.242897][ T5833] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.253278][ T5833] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.263244][ T5833] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.272270][ T5833] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.304732][ T3003] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.312078][ T5832] veth1_macvtap: entered promiscuous mode [ 97.312590][ T3003] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.338288][ T5831] veth1_vlan: entered promiscuous mode [ 97.419702][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.444425][ T5826] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 97.490440][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.590271][ T5831] veth0_macvtap: entered promiscuous mode [ 97.608744][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.617629][ T5832] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.626920][ T5832] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.636173][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.644402][ T5832] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.653312][ T5832] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.667835][ T5920] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:0000 with DS=0x2 [ 97.680147][ T5831] veth1_macvtap: entered promiscuous mode [ 97.692249][ T5841] veth0_vlan: entered promiscuous mode [ 97.833335][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.844038][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.859559][ T5841] veth1_vlan: entered promiscuous mode [ 97.900153][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.940034][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.981859][ T5831] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.995515][ T5831] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.005057][ T5831] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.014311][ T5831] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.078414][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.105946][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.132083][ T5841] veth0_macvtap: entered promiscuous mode [ 98.164480][ T5841] veth1_macvtap: entered promiscuous mode [ 98.195120][ T5839] Bluetooth: hci0: command tx timeout [ 98.259215][ T3003] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.291967][ T3003] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.311069][ T1146] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.331133][ T5930] Zero length message leads to an empty skb [ 98.357454][ T1146] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.419547][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.494669][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.513978][ T5839] Bluetooth: hci3: command tx timeout [ 98.599256][ T5839] Bluetooth: hci1: command tx timeout [ 98.599275][ T55] Bluetooth: hci2: command tx timeout [ 98.599314][ T55] Bluetooth: hci4: command tx timeout [ 98.609174][ T5841] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.696824][ T5841] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.718503][ T5841] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.729583][ T5841] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.771049][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.787384][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.134625][ T1146] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.186918][ T1146] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.295436][ T5953] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 99.335235][ T5956] netlink: 12 bytes leftover after parsing attributes in process `syz.0.13'. [ 99.378154][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.428887][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.579832][ T5964] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 99.779146][ T5966] netlink: 20 bytes leftover after parsing attributes in process `syz.0.16'. [ 99.788253][ T5966] netlink: 16 bytes leftover after parsing attributes in process `syz.0.16'. [ 100.038787][ T5975] netlink: 20 bytes leftover after parsing attributes in process `syz.2.18'. [ 100.071492][ T5975] netlink: 8 bytes leftover after parsing attributes in process `syz.2.18'. [ 100.098911][ T5975] netlink: 8 bytes leftover after parsing attributes in process `syz.2.18'. [ 100.135704][ T5977] netlink: 1044 bytes leftover after parsing attributes in process `syz.0.20'. [ 100.206799][ T5977] TCP: TCP_TX_DELAY enabled [ 100.707043][ T6005] netlink: 76 bytes leftover after parsing attributes in process `syz.3.26'. [ 100.737226][ T6004] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 100.774654][ T6004] team0: Device ipvlan2 is already an upper device of the team interface [ 101.276853][ T6027] net veth1_virt_wifi : renamed from virt_wifi0 [ 101.750838][ T6048] netlink: 8 bytes leftover after parsing attributes in process `syz.4.39'. [ 101.761542][ T6048] netlink: 12 bytes leftover after parsing attributes in process `syz.4.39'. [ 101.795302][ T6048] netlink: 'syz.4.39': attribute type 5 has an invalid length. [ 103.249377][ T6086] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 103.292125][ T6092] netlink: 'syz.1.53': attribute type 1 has an invalid length. [ 103.812963][ T6114] openvswitch: netlink: Missing key (keys=40, expected=80) [ 104.112209][ T6126] sctp: failed to load transform for md5: -2 [ 104.550226][ T6114] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 104.569371][ T6114] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 104.596446][ T6114] bond0 (unregistering): Released all slaves [ 105.323477][ T6178] netlink: 'syz.2.78': attribute type 1 has an invalid length. [ 105.357330][ T6178] netlink: 'syz.2.78': attribute type 1 has an invalid length. [ 105.871598][ T6198] syz_tun: entered allmulticast mode [ 106.048517][ T6206] netlink: 'syz.3.83': attribute type 4 has an invalid length. [ 106.132363][ T6212] netlink: 'syz.3.83': attribute type 4 has an invalid length. [ 106.418140][ T6219] netlink: 'syz.0.86': attribute type 11 has an invalid length. [ 106.459682][ T6219] __nla_validate_parse: 9 callbacks suppressed [ 106.459701][ T6219] netlink: 224 bytes leftover after parsing attributes in process `syz.0.86'. [ 106.611987][ T6192] syz_tun: left allmulticast mode [ 106.901049][ T6237] netlink: 8 bytes leftover after parsing attributes in process `syz.3.92'. [ 107.020980][ T6245] netlink: 8 bytes leftover after parsing attributes in process `syz.2.93'. [ 107.543777][ T6265] syz.4.99 uses obsolete (PF_INET,SOCK_PACKET) [ 107.616460][ T6271] xt_limit: Overflow, try lower: 0/0 [ 107.671145][ T6275] xt_hashlimit: size too large, truncated to 1048576 [ 107.777205][ T6278] xt_hashlimit: size too large, truncated to 1048576 [ 107.895271][ T6286] netlink: 5 bytes leftover after parsing attributes in process `syz.2.104'. [ 107.949809][ T6286] 0ªÃøÂFNð¡: renamed from bond_slave_0 (while UP) [ 108.055371][ T6286] 0ªÃøÂFNð¡: entered allmulticast mode [ 108.218638][ T6299] netlink: 24 bytes leftover after parsing attributes in process `syz.3.108'. [ 108.320071][ T6301] netlink: 132 bytes leftover after parsing attributes in process `syz.2.107'. [ 108.557677][ T6310] netlink: 4 bytes leftover after parsing attributes in process `syz.3.111'. [ 108.671107][ T6310] netlink: 576 bytes leftover after parsing attributes in process `syz.3.111'. [ 108.815111][ T6317] ipt_REJECT: ECHOREPLY no longer supported. [ 109.637774][ T6348] netlink: 28 bytes leftover after parsing attributes in process `syz.4.125'. [ 109.694882][ T6354] netlink: 'syz.3.127': attribute type 1 has an invalid length. [ 109.706780][ T6348] netlink: 20 bytes leftover after parsing attributes in process `syz.4.125'. [ 109.718583][ T6356] netlink: 'syz.0.128': attribute type 1 has an invalid length. [ 109.732971][ T6354] netlink: 'syz.3.127': attribute type 3 has an invalid length. [ 109.734907][ T6356] netlink: 'syz.0.128': attribute type 4 has an invalid length. [ 109.774496][ T6353] netlink: 'syz.2.126': attribute type 3 has an invalid length. [ 109.778033][ T6357] netlink: 'syz.3.127': attribute type 10 has an invalid length. [ 109.898532][ T6357] veth0_macvtap: left promiscuous mode [ 111.838406][ T6432] netlink: 'syz.0.148': attribute type 4 has an invalid length. [ 111.848207][ T6421] __nla_validate_parse: 6 callbacks suppressed [ 111.848227][ T6421] netlink: 20 bytes leftover after parsing attributes in process `syz.0.148'. [ 111.912517][ T6434] FAULT_INJECTION: forcing a failure. [ 111.912517][ T6434] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 111.951378][ T6434] CPU: 0 UID: 0 PID: 6434 Comm: syz.4.150 Not tainted 6.15.0-rc6-syzkaller-00160-gc39b1bb5bc6d #0 PREEMPT(full) [ 111.951408][ T6434] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 111.951426][ T6434] Call Trace: [ 111.951442][ T6434] [ 111.951453][ T6434] dump_stack_lvl+0x189/0x250 [ 111.951499][ T6434] ? __lock_acquire+0xaac/0xd20 [ 111.951534][ T6434] ? __pfx_dump_stack_lvl+0x10/0x10 [ 111.951565][ T6434] ? __pfx__printk+0x10/0x10 [ 111.951587][ T6434] ? __might_fault+0xb0/0x130 [ 111.951628][ T6434] should_fail_ex+0x414/0x560 [ 111.951656][ T6434] _copy_from_user+0x2d/0xb0 [ 111.951687][ T6434] ___sys_sendmsg+0x158/0x2a0 [ 111.951720][ T6434] ? __pfx____sys_sendmsg+0x10/0x10 [ 111.951797][ T6434] ? __might_fault+0xb0/0x130 [ 111.951829][ T6434] __sys_sendmmsg+0x227/0x430 [ 111.951866][ T6434] ? __pfx___sys_sendmmsg+0x10/0x10 [ 111.951906][ T6434] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 111.951955][ T6434] ? ksys_write+0x1f0/0x250 [ 111.951989][ T6434] ? rcu_is_watching+0x15/0xb0 [ 111.952021][ T6434] __x64_sys_sendmmsg+0xa0/0xc0 [ 111.952054][ T6434] do_syscall_64+0xf6/0x210 [ 111.952084][ T6434] ? clear_bhb_loop+0x60/0xb0 [ 111.952111][ T6434] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.952131][ T6434] RIP: 0033:0x7fb3d218e969 [ 111.952156][ T6434] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 111.952174][ T6434] RSP: 002b:00007fb3d30cf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 111.952196][ T6434] RAX: ffffffffffffffda RBX: 00007fb3d23b5fa0 RCX: 00007fb3d218e969 [ 111.952211][ T6434] RDX: 000000000000fdef RSI: 00002000000020c0 RDI: 0000000000000008 [ 111.952225][ T6434] RBP: 00007fb3d30cf090 R08: 0000000000000000 R09: 0000000000000000 [ 111.952244][ T6434] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 111.952256][ T6434] R13: 0000000000000000 R14: 00007fb3d23b5fa0 R15: 00007ffe09abc718 [ 111.952286][ T6434] [ 112.442988][ T6444] warning: `syz.2.152' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 112.494111][ T6442] netlink: 60 bytes leftover after parsing attributes in process `syz.4.154'. [ 112.813530][ T6457] netlink: 36 bytes leftover after parsing attributes in process `syz.2.157'. [ 112.834473][ T6457] netlink: 24 bytes leftover after parsing attributes in process `syz.2.157'. [ 112.845732][ T6459] netlink: 'syz.0.158': attribute type 2 has an invalid length. [ 112.935558][ T6462] netlink: 4 bytes leftover after parsing attributes in process `syz.4.159'. [ 113.101122][ T6474] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 113.115789][ T6477] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 113.197133][ T6480] netlink: 168 bytes leftover after parsing attributes in process `syz.0.162'. [ 113.496023][ T6482] FAULT_INJECTION: forcing a failure. [ 113.496023][ T6482] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 113.525455][ T6484] syzkaller1: entered promiscuous mode [ 113.538075][ T6484] syzkaller1: entered allmulticast mode [ 113.564036][ T6482] CPU: 0 UID: 0 PID: 6482 Comm: syz.1.165 Not tainted 6.15.0-rc6-syzkaller-00160-gc39b1bb5bc6d #0 PREEMPT(full) [ 113.564066][ T6482] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 113.564079][ T6482] Call Trace: [ 113.564087][ T6482] [ 113.564097][ T6482] dump_stack_lvl+0x189/0x250 [ 113.564135][ T6482] ? __lock_acquire+0xaac/0xd20 [ 113.564168][ T6482] ? __pfx_dump_stack_lvl+0x10/0x10 [ 113.564199][ T6482] ? __pfx__printk+0x10/0x10 [ 113.564220][ T6482] ? __might_fault+0xb0/0x130 [ 113.564259][ T6482] should_fail_ex+0x414/0x560 [ 113.564287][ T6482] _copy_from_user+0x2d/0xb0 [ 113.564318][ T6482] ___sys_sendmsg+0x158/0x2a0 [ 113.564504][ T6482] ? __pfx____sys_sendmsg+0x10/0x10 [ 113.564664][ T6482] ? __might_fault+0xb0/0x130 [ 113.564699][ T6482] __sys_sendmmsg+0x227/0x430 [ 113.564734][ T6482] ? __pfx___sys_sendmmsg+0x10/0x10 [ 113.564771][ T6482] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 113.564826][ T6482] ? ksys_write+0x1f0/0x250 [ 113.564849][ T6482] ? rcu_is_watching+0x15/0xb0 [ 113.564878][ T6482] __x64_sys_sendmmsg+0xa0/0xc0 [ 113.564908][ T6482] do_syscall_64+0xf6/0x210 [ 113.564938][ T6482] ? clear_bhb_loop+0x60/0xb0 [ 113.564964][ T6482] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.564983][ T6482] RIP: 0033:0x7f83cc18e969 [ 113.565002][ T6482] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 113.565020][ T6482] RSP: 002b:00007f83cd018038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 113.565042][ T6482] RAX: ffffffffffffffda RBX: 00007f83cc3b5fa0 RCX: 00007f83cc18e969 [ 113.565124][ T6482] RDX: 000000000000fdef RSI: 00002000000020c0 RDI: 0000000000000008 [ 113.565139][ T6482] RBP: 00007f83cd018090 R08: 0000000000000000 R09: 0000000000000000 [ 113.565152][ T6482] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 113.565207][ T6482] R13: 0000000000000000 R14: 00007f83cc3b5fa0 R15: 00007ffc44a7c398 [ 113.565240][ T6482] [ 114.505366][ T6511] netlink: 'syz.2.175': attribute type 64 has an invalid length. [ 114.562228][ T6511] netlink: 44 bytes leftover after parsing attributes in process `syz.2.175'. [ 114.665268][ T6519] netlink: 12 bytes leftover after parsing attributes in process `syz.3.178'. [ 114.954160][ T6527] netlink: 8 bytes leftover after parsing attributes in process `syz.2.180'. [ 114.999545][ T6526] FAULT_INJECTION: forcing a failure. [ 114.999545][ T6526] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 115.048883][ T6526] CPU: 1 UID: 0 PID: 6526 Comm: syz.0.181 Not tainted 6.15.0-rc6-syzkaller-00160-gc39b1bb5bc6d #0 PREEMPT(full) [ 115.048920][ T6526] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 115.048933][ T6526] Call Trace: [ 115.048942][ T6526] [ 115.048951][ T6526] dump_stack_lvl+0x189/0x250 [ 115.048985][ T6526] ? __lock_acquire+0xaac/0xd20 [ 115.049019][ T6526] ? __pfx_dump_stack_lvl+0x10/0x10 [ 115.049050][ T6526] ? __pfx__printk+0x10/0x10 [ 115.049072][ T6526] ? __might_fault+0xb0/0x130 [ 115.049112][ T6526] should_fail_ex+0x414/0x560 [ 115.049140][ T6526] _copy_from_user+0x2d/0xb0 [ 115.049174][ T6526] ___sys_sendmsg+0x158/0x2a0 [ 115.049207][ T6526] ? __pfx____sys_sendmsg+0x10/0x10 [ 115.049284][ T6526] ? __might_fault+0xb0/0x130 [ 115.049316][ T6526] __sys_sendmmsg+0x227/0x430 [ 115.049352][ T6526] ? __pfx___sys_sendmmsg+0x10/0x10 [ 115.049392][ T6526] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 115.049440][ T6526] ? ksys_write+0x1f0/0x250 [ 115.049463][ T6526] ? rcu_is_watching+0x15/0xb0 [ 115.049493][ T6526] __x64_sys_sendmmsg+0xa0/0xc0 [ 115.049526][ T6526] do_syscall_64+0xf6/0x210 [ 115.049555][ T6526] ? clear_bhb_loop+0x60/0xb0 [ 115.049582][ T6526] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.049602][ T6526] RIP: 0033:0x7fa08cb8e969 [ 115.049620][ T6526] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 115.049637][ T6526] RSP: 002b:00007fa08d9ef038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 115.049668][ T6526] RAX: ffffffffffffffda RBX: 00007fa08cdb5fa0 RCX: 00007fa08cb8e969 [ 115.049683][ T6526] RDX: 000000000000fdef RSI: 00002000000020c0 RDI: 0000000000000008 [ 115.049697][ T6526] RBP: 00007fa08d9ef090 R08: 0000000000000000 R09: 0000000000000000 [ 115.049709][ T6526] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 115.049721][ T6526] R13: 0000000000000000 R14: 00007fa08cdb5fa0 R15: 00007ffcb1399d68 [ 115.049753][ T6526] [ 115.314013][ T6531] netlink: 'syz.4.183': attribute type 2 has an invalid length. [ 115.515827][ T6539] netlink: 20 bytes leftover after parsing attributes in process `syz.3.187'. [ 115.533404][ T6539] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 115.541263][ T6539] IPv6: NLM_F_CREATE should be set when creating new route [ 115.788046][ T6537] netlink: 'syz.2.186': attribute type 1 has an invalid length. [ 115.807640][ T6555] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 115.839367][ T6537] netlink: 'syz.2.186': attribute type 2 has an invalid length. [ 116.009869][ T6558] netlink: 'syz.4.191': attribute type 10 has an invalid length. [ 116.114769][ T6558] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 116.287527][ T6564] bond1: entered promiscuous mode [ 116.388156][ T6564] bond1: entered allmulticast mode [ 116.398234][ T6564] 8021q: adding VLAN 0 to HW filter on device bond1 [ 116.440345][ T6572] FAULT_INJECTION: forcing a failure. [ 116.440345][ T6572] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 116.467838][ T6572] CPU: 1 UID: 0 PID: 6572 Comm: syz.3.195 Not tainted 6.15.0-rc6-syzkaller-00160-gc39b1bb5bc6d #0 PREEMPT(full) [ 116.467869][ T6572] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 116.467882][ T6572] Call Trace: [ 116.467891][ T6572] [ 116.467900][ T6572] dump_stack_lvl+0x189/0x250 [ 116.467935][ T6572] ? __lock_acquire+0xaac/0xd20 [ 116.467969][ T6572] ? __pfx_dump_stack_lvl+0x10/0x10 [ 116.468000][ T6572] ? __pfx__printk+0x10/0x10 [ 116.468020][ T6572] ? __might_fault+0xb0/0x130 [ 116.468058][ T6572] should_fail_ex+0x414/0x560 [ 116.468084][ T6572] _copy_from_user+0x2d/0xb0 [ 116.468115][ T6572] ___sys_sendmsg+0x158/0x2a0 [ 116.468148][ T6572] ? __pfx____sys_sendmsg+0x10/0x10 [ 116.468222][ T6572] ? __might_fault+0xb0/0x130 [ 116.468255][ T6572] __sys_sendmmsg+0x227/0x430 [ 116.468290][ T6572] ? __pfx___sys_sendmmsg+0x10/0x10 [ 116.468330][ T6572] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 116.468377][ T6572] ? ksys_write+0x1f0/0x250 [ 116.468401][ T6572] ? rcu_is_watching+0x15/0xb0 [ 116.468507][ T6572] __x64_sys_sendmmsg+0xa0/0xc0 [ 116.468562][ T6572] do_syscall_64+0xf6/0x210 [ 116.468594][ T6572] ? clear_bhb_loop+0x60/0xb0 [ 116.468622][ T6572] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.468642][ T6572] RIP: 0033:0x7fe2c198e969 [ 116.468663][ T6572] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 116.468682][ T6572] RSP: 002b:00007fe2c2794038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 116.468705][ T6572] RAX: ffffffffffffffda RBX: 00007fe2c1bb6080 RCX: 00007fe2c198e969 [ 116.468722][ T6572] RDX: 000000000000fdef RSI: 00002000000020c0 RDI: 0000000000000008 [ 116.468736][ T6572] RBP: 00007fe2c2794090 R08: 0000000000000000 R09: 0000000000000000 [ 116.468750][ T6572] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 116.468762][ T6572] R13: 0000000000000000 R14: 00007fe2c1bb6080 R15: 00007fffab8dd7f8 [ 116.468795][ T6572] [ 116.850499][ T6579] netlink: 'syz.1.198': attribute type 4 has an invalid length. [ 116.994825][ T6585] __nla_validate_parse: 2 callbacks suppressed [ 116.994845][ T6585] netlink: 4 bytes leftover after parsing attributes in process `syz.2.201'. [ 117.054322][ T6587] netlink: 4 bytes leftover after parsing attributes in process `syz.2.201'. [ 117.273240][ T6597] netlink: 'syz.3.204': attribute type 11 has an invalid length. [ 117.668184][ T6619] netlink: 'syz.1.210': attribute type 1 has an invalid length. [ 117.700704][ T6619] netlink: 232 bytes leftover after parsing attributes in process `syz.1.210'. [ 117.711681][ T6619] netlink: 8 bytes leftover after parsing attributes in process `syz.1.210'. [ 117.739827][ T6622] netlink: 'syz.1.210': attribute type 1 has an invalid length. [ 117.801147][ T6622] netlink: 232 bytes leftover after parsing attributes in process `syz.1.210'. [ 117.859878][ T6622] netlink: 8 bytes leftover after parsing attributes in process `syz.1.210'. [ 117.910817][ T6617] netlink: 'syz.3.208': attribute type 11 has an invalid length. [ 117.921196][ T6617] netlink: 224 bytes leftover after parsing attributes in process `syz.3.208'. [ 118.174311][ T6636] netlink: 328 bytes leftover after parsing attributes in process `syz.2.215'. [ 118.300353][ T6639] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.309717][ T6639] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.790103][ T6657] Bluetooth: MGMT ver 1.23 [ 118.827454][ T6660] netlink: 'syz.4.222': attribute type 10 has an invalid length. [ 118.922855][ T6660] 8021q: adding VLAN 0 to HW filter on device bond0 [ 118.985173][ T6660] team0: Port device bond0 added [ 119.097867][ T6668] netlink: 'syz.0.224': attribute type 2 has an invalid length. [ 119.127676][ T6667] ip6tnl2: entered promiscuous mode [ 119.140985][ T6668] netlink: 8 bytes leftover after parsing attributes in process `syz.0.224'. [ 119.223508][ T6673] netlink: 64 bytes leftover after parsing attributes in process `syz.0.224'. [ 119.464286][ T6682] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 119.824497][ T6694] openvswitch: netlink: Missing key (keys=40, expected=80) [ 119.918247][ T6694] bridge_slave_0: left allmulticast mode [ 119.933793][ T6694] bridge_slave_0: left promiscuous mode [ 119.964570][ T6694] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.018111][ T6694] bridge_slave_1: left allmulticast mode [ 120.031578][ T6694] bridge_slave_1: left promiscuous mode [ 120.045128][ T6694] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.096411][ T6694] bond0: (slave bond_slave_0): Releasing backup interface [ 120.139061][ T6694] bond0: (slave bond_slave_1): Releasing backup interface [ 120.216959][ T6694] team0: Port device team_slave_0 removed [ 120.217655][ T6711] sctp: [Deprecated]: syz.0.236 (pid 6711) Use of int in maxseg socket option. [ 120.217655][ T6711] Use struct sctp_assoc_value instead [ 120.265733][ T6694] team0: Port device team_slave_1 removed [ 120.309991][ T6694] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 120.333739][ T6694] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 120.375348][ T6694] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 120.402759][ T6694] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 120.478027][ T53] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 120.492656][ T53] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 120.504279][ T5900] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 120.530751][ T6702] dvmrp0: entered allmulticast mode [ 120.822028][ T6726] pimreg3: entered allmulticast mode [ 121.416502][ T6745] A link change request failed with some changes committed already. Interface veth1_to_team may have been left with an inconsistent configuration, please check. [ 121.500673][ T6743] syzkaller1: entered promiscuous mode [ 121.534890][ T6743] syzkaller1: entered allmulticast mode [ 121.554159][ T5900] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 121.562979][ T5900] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 121.592845][ T6749] openvswitch: netlink: Message has 18242 unknown bytes. [ 121.691935][ T6753] netlink: 'syz.3.246': attribute type 1 has an invalid length. [ 121.701979][ T6753] netlink: 'syz.3.246': attribute type 2 has an invalid length. [ 121.749710][ T6752] netlink: 'syz.0.249': attribute type 10 has an invalid length. [ 121.758821][ T6752] veth1_macvtap: left promiscuous mode [ 121.804165][ T6756] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 122.028382][ T6766] set match dimension is over the limit! [ 122.438874][ T6780] tls_set_device_offload: netdev not found [ 122.564775][ T6781] netlink: 'syz.4.259': attribute type 21 has an invalid length. [ 122.792811][ T6788] __nla_validate_parse: 40 callbacks suppressed [ 122.792831][ T6788] netlink: 156 bytes leftover after parsing attributes in process `syz.0.262'. [ 122.841883][ T6791] af_packet: tpacket_rcv: packet too big, clamped from 32 to 4294967272. macoff=96 [ 122.877928][ T6792] netlink: 24 bytes leftover after parsing attributes in process `syz.0.262'. [ 122.927234][ T6788] netlink: 28 bytes leftover after parsing attributes in process `syz.0.262'. [ 122.952066][ T6795] netlink: 32 bytes leftover after parsing attributes in process `syz.3.266'. [ 123.454840][ T6822] netlink: 12 bytes leftover after parsing attributes in process `syz.0.271'. [ 123.860856][ T6840] netlink: 'syz.1.278': attribute type 1 has an invalid length. [ 123.909544][ T6840] netlink: 224 bytes leftover after parsing attributes in process `syz.1.278'. [ 123.921553][ T6840] netlink: 8 bytes leftover after parsing attributes in process `syz.1.278'. [ 123.957106][ T6850] netlink: 4 bytes leftover after parsing attributes in process `syz.3.275'. [ 124.005057][ T6850] bridge_slave_1: left allmulticast mode [ 124.012057][ T6841] netlink: 'syz.1.278': attribute type 1 has an invalid length. [ 124.061106][ T6850] bridge_slave_1: left promiscuous mode [ 124.124023][ T6841] netlink: 224 bytes leftover after parsing attributes in process `syz.1.278'. [ 124.135761][ T6850] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.171904][ T6841] netlink: 8 bytes leftover after parsing attributes in process `syz.1.278'. [ 124.196148][ T6850] bridge_slave_0: left allmulticast mode [ 124.225178][ T6850] bridge_slave_0: left promiscuous mode [ 124.253944][ T6850] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.660481][ T6869] IPVS: Error connecting to the multicast addr [ 124.676894][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 124.794239][ T6886] ip6gretap0: entered promiscuous mode [ 124.855165][ T6894] netlink: 'syz.2.288': attribute type 14 has an invalid length. [ 124.865220][ T6893] ip6t_srh: unknown srh invflags 5F00 [ 124.879985][ T6886] C: renamed from team_slave_0 (while UP) [ 124.881842][ T6894] netlink: 'syz.2.288': attribute type 13 has an invalid length. [ 124.946728][ T6886] netlink: 'syz.0.287': attribute type 1 has an invalid length. [ 124.986222][ T6886] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 125.627406][ T6925] sctp: [Deprecated]: syz.3.298 (pid 6925) Use of struct sctp_assoc_value in delayed_ack socket option. [ 125.627406][ T6925] Use struct sctp_sack_info instead [ 125.692043][ T6925] sctp: [Deprecated]: syz.3.298 (pid 6925) Use of struct sctp_assoc_value in delayed_ack socket option. [ 125.692043][ T6925] Use struct sctp_sack_info instead [ 126.890846][ T6989] netlink: 'syz.4.317': attribute type 3 has an invalid length. [ 127.228411][ T7002] netlink: 'syz.3.321': attribute type 4 has an invalid length. [ 127.243542][ T7003] openvswitch: netlink: Multiple metadata blocks provided [ 127.357540][ T7006] ip6gre0: entered promiscuous mode [ 127.798150][ T7030] netlink: 'syz.2.331': attribute type 33 has an invalid length. [ 127.845228][ T7030] __nla_validate_parse: 42 callbacks suppressed [ 127.845252][ T7030] netlink: 152 bytes leftover after parsing attributes in process `syz.2.331'. [ 127.892001][ T7031] netlink: 24 bytes leftover after parsing attributes in process `syz.4.329'. [ 127.921702][ T7035] netlink: 4 bytes leftover after parsing attributes in process `syz.2.331'. [ 127.944052][ T7036] netlink: 40 bytes leftover after parsing attributes in process `syz.3.332'. [ 128.018962][ T7031] netlink: 'syz.4.329': attribute type 2 has an invalid length. [ 128.061675][ T7036] netlink: 256 bytes leftover after parsing attributes in process `syz.3.332'. [ 128.108124][ T7027] (unnamed net_device) (uninitialized): option miimon: invalid value (18446744073709551585) [ 128.135416][ T7027] (unnamed net_device) (uninitialized): option miimon: allowed values 0 - 2147483647 [ 128.155136][ T7036] sch_fq: defrate 0 ignored. [ 128.825064][ T7074] netlink: 4 bytes leftover after parsing attributes in process `syz.0.342'. [ 128.874676][ T7073] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 128.956194][ T7083] netlink: 'syz.1.344': attribute type 1 has an invalid length. [ 128.985112][ T7083] netlink: 'syz.1.344': attribute type 2 has an invalid length. [ 129.163378][ T7091] netlink: 12 bytes leftover after parsing attributes in process `syz.0.347'. [ 129.183861][ T7091] netlink: 12 bytes leftover after parsing attributes in process `syz.0.347'. [ 129.204785][ T7093] netlink: 4 bytes leftover after parsing attributes in process `syz.2.349'. [ 129.254672][ T7093] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.349'. [ 130.017918][ T7130] netlink: 'syz.3.362': attribute type 2 has an invalid length. [ 130.031779][ T7130] netlink: 'syz.3.362': attribute type 1 has an invalid length. [ 130.148179][ T7138] netlink: 'syz.0.363': attribute type 21 has an invalid length. [ 130.383689][ T7148] netlink: 'syz.3.366': attribute type 4 has an invalid length. [ 130.748820][ T7159] veth1_to_team: Caught tx_queue_len zero misconfig [ 131.096799][ T7163] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.319175][ T7163] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.372892][ T7183] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 131.510171][ T7180] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 131.570942][ T7163] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.899225][ T7163] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.001146][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.009893][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.643940][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 134.018521][ T7163] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.060302][ T7218] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 134.231614][ T7229] __nla_validate_parse: 10 callbacks suppressed [ 134.231641][ T7229] netlink: 8 bytes leftover after parsing attributes in process `syz.0.388'. [ 134.251636][ T7230] xt_cluster: node mask cannot exceed total number of nodes [ 134.268848][ T7218] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 134.281194][ T7229] netlink: 8 bytes leftover after parsing attributes in process `syz.0.388'. [ 134.410246][ T7233] openvswitch: netlink: Flow actions attr not present in new flow. [ 134.457814][ T7163] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.506468][ T7239] IPVS: set_ctl: invalid protocol: 4 172.20.20.68:20004 [ 134.543082][ T7163] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.629420][ T7163] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.767544][ T7246] netlink: 24 bytes leftover after parsing attributes in process `syz.2.394'. [ 135.147733][ T7264] openvswitch: netlink: ct_state flags 0000ee01 unsupported [ 135.548267][ T7279] validate_nla: 131 callbacks suppressed [ 135.548288][ T7279] netlink: 'syz.4.406': attribute type 4 has an invalid length. [ 135.873890][ T7293] netlink: 16 bytes leftover after parsing attributes in process `syz.4.410'. [ 136.118619][ T7297] netlink: 12 bytes leftover after parsing attributes in process `syz.0.412'. [ 136.271627][ T7311] netlink: 44 bytes leftover after parsing attributes in process `syz.4.415'. [ 136.420719][ T7313] netlink: 'syz.3.417': attribute type 1 has an invalid length. [ 136.653352][ T7327] netlink: 4 bytes leftover after parsing attributes in process `syz.4.421'. [ 136.869395][ T7336] openvswitch: netlink: Key 22 has unexpected len 2 expected 4 [ 136.992910][ T7339] netlink: 8 bytes leftover after parsing attributes in process `syz.4.425'. [ 137.322380][ T7354] openvswitch: netlink: IP tunnel TTL not specified. [ 137.677915][ T7366] unknown channel width for channel at 909000KHz? [ 137.721237][ T7366] unknown channel width for channel at 909000KHz? [ 137.770444][ T7366] unknown channel width for channel at 909000KHz? [ 138.468925][ T7401] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 138.679141][ T7401] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 138.846167][ T7420] syz.1.449 uses old SIOCAX25GETINFO [ 139.042625][ T7428] ieee802154 phy0 wpan0: encryption failed: -22 [ 139.121747][ T7429] ieee802154 phy0 wpan0: encryption failed: -22 [ 139.513337][ T7451] team0: No ports can be present during mode change [ 140.049211][ T7472] netlink: 20 bytes leftover after parsing attributes in process `syz.2.468'. [ 140.302813][ T7479] netlink: 'syz.4.470': attribute type 1 has an invalid length. [ 140.335334][ T7478] netlink: 'syz.2.471': attribute type 13 has an invalid length. [ 140.345894][ T7479] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 140.521699][ T7490] netlink: 204 bytes leftover after parsing attributes in process `syz.1.475'. [ 140.642909][ T7499] netlink: 72 bytes leftover after parsing attributes in process `syz.2.477'. [ 141.426416][ T7530] batman_adv: batadv0: Adding interface: dummy0 [ 141.433181][ T7530] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 141.477640][ T7530] batman_adv: batadv0: Interface activated: dummy0 [ 141.557205][ T7534] netlink: 24 bytes leftover after parsing attributes in process `syz.2.489'. [ 141.613748][ T7534] netlink: 272 bytes leftover after parsing attributes in process `syz.2.489'. [ 141.623069][ T7534] netlink: 8 bytes leftover after parsing attributes in process `syz.2.489'. [ 142.052455][ T7545] syzkaller0: entered promiscuous mode [ 142.091658][ T7545] syzkaller0: entered allmulticast mode [ 143.059717][ T7576] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.501'. [ 143.570719][ T7586] FAULT_INJECTION: forcing a failure. [ 143.570719][ T7586] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 143.587840][ T7586] CPU: 1 UID: 0 PID: 7586 Comm: syz.1.505 Not tainted 6.15.0-rc6-syzkaller-00160-gc39b1bb5bc6d #0 PREEMPT(full) [ 143.587873][ T7586] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 143.587890][ T7586] Call Trace: [ 143.587900][ T7586] [ 143.587909][ T7586] dump_stack_lvl+0x189/0x250 [ 143.588054][ T7586] ? __lock_acquire+0xaac/0xd20 [ 143.588088][ T7586] ? __pfx_dump_stack_lvl+0x10/0x10 [ 143.588116][ T7586] ? __pfx__printk+0x10/0x10 [ 143.588135][ T7586] ? __might_fault+0xb0/0x130 [ 143.588170][ T7586] should_fail_ex+0x414/0x560 [ 143.588196][ T7586] _copy_from_user+0x2d/0xb0 [ 143.588224][ T7586] ___sys_sendmsg+0x158/0x2a0 [ 143.588256][ T7586] ? __pfx____sys_sendmsg+0x10/0x10 [ 143.588325][ T7586] ? __might_fault+0xb0/0x130 [ 143.588419][ T7586] __sys_sendmmsg+0x227/0x430 [ 143.588463][ T7586] ? __pfx___sys_sendmmsg+0x10/0x10 [ 143.588504][ T7586] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 143.588547][ T7586] ? ksys_write+0x1f0/0x250 [ 143.588574][ T7586] ? rcu_is_watching+0x15/0xb0 [ 143.588600][ T7586] __x64_sys_sendmmsg+0xa0/0xc0 [ 143.588630][ T7586] do_syscall_64+0xf6/0x210 [ 143.588657][ T7586] ? clear_bhb_loop+0x60/0xb0 [ 143.588681][ T7586] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.588699][ T7586] RIP: 0033:0x7f83cc18e969 [ 143.588777][ T7586] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 143.588792][ T7586] RSP: 002b:00007f83ccff7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 143.588819][ T7586] RAX: ffffffffffffffda RBX: 00007f83cc3b6080 RCX: 00007f83cc18e969 [ 143.588832][ T7586] RDX: 000000000000fdef RSI: 00002000000020c0 RDI: 0000000000000008 [ 143.588843][ T7586] RBP: 00007f83ccff7090 R08: 0000000000000000 R09: 0000000000000000 [ 143.588854][ T7586] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 143.588863][ T7586] R13: 0000000000000000 R14: 00007f83cc3b6080 R15: 00007ffc44a7c398 [ 143.588891][ T7586] [ 144.350833][ T7573] vxcan1 speed is unknown, defaulting to 1000 [ 144.374419][ T7574] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 144.378909][ T7573] vxcan1 speed is unknown, defaulting to 1000 [ 144.437503][ T7573] vxcan1 speed is unknown, defaulting to 1000 [ 145.616705][ T7573] infiniband syz2: set active [ 145.625655][ T5913] vxcan1 speed is unknown, defaulting to 1000 [ 145.644082][ T7573] infiniband syz2: added vxcan1 [ 145.667922][ T7573] syz2: rxe_create_cq: returned err = -12 [ 145.676220][ T7573] infiniband syz2: Couldn't create ib_mad CQ [ 145.683889][ T7573] infiniband syz2: Couldn't open port 1 [ 145.878460][ T7573] RDS/IB: syz2: added [ 145.904378][ T7573] smc: adding ib device syz2 with port count 1 [ 145.920041][ T7573] smc: ib device syz2 port 1 has pnetid [ 145.943956][ T5913] vxcan1 speed is unknown, defaulting to 1000 [ 145.984183][ T7573] vxcan1 speed is unknown, defaulting to 1000 [ 146.270949][ T7666] netlink: 12 bytes leftover after parsing attributes in process `syz.4.523'. [ 146.972661][ T7573] vxcan1 speed is unknown, defaulting to 1000 [ 147.353163][ T7704] Bluetooth: MGMT ver 1.23 [ 147.878952][ T7721] FAULT_INJECTION: forcing a failure. [ 147.878952][ T7721] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 147.911249][ T7721] CPU: 0 UID: 0 PID: 7721 Comm: syz.0.538 Not tainted 6.15.0-rc6-syzkaller-00160-gc39b1bb5bc6d #0 PREEMPT(full) [ 147.911278][ T7721] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 147.911290][ T7721] Call Trace: [ 147.911299][ T7721] [ 147.911308][ T7721] dump_stack_lvl+0x189/0x250 [ 147.911341][ T7721] ? __lock_acquire+0xaac/0xd20 [ 147.911374][ T7721] ? __pfx_dump_stack_lvl+0x10/0x10 [ 147.911404][ T7721] ? __pfx__printk+0x10/0x10 [ 147.911424][ T7721] ? __might_fault+0xb0/0x130 [ 147.911466][ T7721] should_fail_ex+0x414/0x560 [ 147.911501][ T7721] _copy_from_user+0x2d/0xb0 [ 147.911533][ T7721] ___sys_sendmsg+0x158/0x2a0 [ 147.911567][ T7721] ? __pfx____sys_sendmsg+0x10/0x10 [ 147.911643][ T7721] ? __might_fault+0xb0/0x130 [ 147.911676][ T7721] __sys_sendmmsg+0x227/0x430 [ 147.911713][ T7721] ? __pfx___sys_sendmmsg+0x10/0x10 [ 147.911753][ T7721] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 147.911800][ T7721] ? ksys_write+0x1f0/0x250 [ 147.911825][ T7721] ? rcu_is_watching+0x15/0xb0 [ 147.911855][ T7721] __x64_sys_sendmmsg+0xa0/0xc0 [ 147.911888][ T7721] do_syscall_64+0xf6/0x210 [ 147.911918][ T7721] ? clear_bhb_loop+0x60/0xb0 [ 147.911945][ T7721] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.911965][ T7721] RIP: 0033:0x7fa08cb8e969 [ 147.911982][ T7721] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 147.911999][ T7721] RSP: 002b:00007fa08d9ef038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 147.912021][ T7721] RAX: ffffffffffffffda RBX: 00007fa08cdb5fa0 RCX: 00007fa08cb8e969 [ 147.912036][ T7721] RDX: 000000000000fdef RSI: 00002000000020c0 RDI: 0000000000000008 [ 147.912048][ T7721] RBP: 00007fa08d9ef090 R08: 0000000000000000 R09: 0000000000000000 [ 147.912060][ T7721] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 147.912072][ T7721] R13: 0000000000000000 R14: 00007fa08cdb5fa0 R15: 00007ffcb1399d68 [ 147.912105][ T7721] [ 148.168909][ T7573] vxcan1 speed is unknown, defaulting to 1000 [ 148.840059][ T7744] bond0: entered allmulticast mode [ 148.880713][ T7744] 8021q: adding VLAN 0 to HW filter on device bond0 [ 148.921733][ T7746] batadv_slave_1: default FDB implementation only supports local addresses [ 148.942516][ T7751] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 149.273112][ T7764] FAULT_INJECTION: forcing a failure. [ 149.273112][ T7764] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 149.295231][ T7767] sch_tbf: burst 0 is lower than device lo mtu (18) ! [ 149.319226][ T7764] CPU: 1 UID: 0 PID: 7764 Comm: syz.3.551 Not tainted 6.15.0-rc6-syzkaller-00160-gc39b1bb5bc6d #0 PREEMPT(full) [ 149.319258][ T7764] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 149.319271][ T7764] Call Trace: [ 149.319279][ T7764] [ 149.319289][ T7764] dump_stack_lvl+0x189/0x250 [ 149.319324][ T7764] ? __lock_acquire+0xaac/0xd20 [ 149.319353][ T7764] ? __pfx_dump_stack_lvl+0x10/0x10 [ 149.319384][ T7764] ? __pfx__printk+0x10/0x10 [ 149.319405][ T7764] ? __might_fault+0xb0/0x130 [ 149.319445][ T7764] should_fail_ex+0x414/0x560 [ 149.319473][ T7764] _copy_from_user+0x2d/0xb0 [ 149.319505][ T7764] ___sys_sendmsg+0x158/0x2a0 [ 149.319537][ T7764] ? __pfx____sys_sendmsg+0x10/0x10 [ 149.319615][ T7764] ? __might_fault+0xb0/0x130 [ 149.319647][ T7764] __sys_sendmmsg+0x227/0x430 [ 149.319682][ T7764] ? __pfx___sys_sendmmsg+0x10/0x10 [ 149.319722][ T7764] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 149.319771][ T7764] ? ksys_write+0x1f0/0x250 [ 149.319794][ T7764] ? rcu_is_watching+0x15/0xb0 [ 149.319825][ T7764] __x64_sys_sendmmsg+0xa0/0xc0 [ 149.319857][ T7764] do_syscall_64+0xf6/0x210 [ 149.319887][ T7764] ? clear_bhb_loop+0x60/0xb0 [ 149.319913][ T7764] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.319933][ T7764] RIP: 0033:0x7fe2c198e969 [ 149.319952][ T7764] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 149.319969][ T7764] RSP: 002b:00007fe2c27b5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 149.319991][ T7764] RAX: ffffffffffffffda RBX: 00007fe2c1bb5fa0 RCX: 00007fe2c198e969 [ 149.320007][ T7764] RDX: 000000000000fdef RSI: 00002000000020c0 RDI: 0000000000000008 [ 149.320020][ T7764] RBP: 00007fe2c27b5090 R08: 0000000000000000 R09: 0000000000000000 [ 149.320032][ T7764] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 149.320044][ T7764] R13: 0000000000000000 R14: 00007fe2c1bb5fa0 R15: 00007fffab8dd7f8 [ 149.320084][ T7764] [ 149.591888][ T7769] netlink: 'syz.1.552': attribute type 2 has an invalid length. [ 149.599836][ T7769] netlink: 'syz.1.552': attribute type 8 has an invalid length. [ 149.608503][ T7769] netlink: 132 bytes leftover after parsing attributes in process `syz.1.552'. [ 149.664988][ T7770] netlink: 8 bytes leftover after parsing attributes in process `syz.4.550'. [ 149.772034][ T7573] vxcan1 speed is unknown, defaulting to 1000 [ 149.905260][ T7781] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 150.056271][ T7786] netlink: 'syz.3.558': attribute type 1 has an invalid length. [ 150.067059][ T7785] xt_bpf: check failed: parse error [ 150.274119][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 150.303355][ T7786] 8021q: adding VLAN 0 to HW filter on device bond1 [ 150.435424][ T7788] veth3: entered promiscuous mode [ 150.468404][ T7788] bond1: (slave veth3): Enslaving as an active interface with a down link [ 150.531925][ T7789] vlan2: entered allmulticast mode [ 150.544133][ T7789] bond1: entered allmulticast mode [ 150.556537][ T7789] bond1: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 150.677966][ T7573] vxcan1 speed is unknown, defaulting to 1000 [ 150.774703][ T7800] syzkaller0: entered promiscuous mode [ 150.780644][ T7800] syzkaller0: entered allmulticast mode [ 150.819027][ T7803] FAULT_INJECTION: forcing a failure. [ 150.819027][ T7803] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 150.838927][ T7803] CPU: 0 UID: 0 PID: 7803 Comm: syz.0.564 Not tainted 6.15.0-rc6-syzkaller-00160-gc39b1bb5bc6d #0 PREEMPT(full) [ 150.838960][ T7803] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 150.838973][ T7803] Call Trace: [ 150.838982][ T7803] [ 150.838992][ T7803] dump_stack_lvl+0x189/0x250 [ 150.839026][ T7803] ? __lock_acquire+0xaac/0xd20 [ 150.839060][ T7803] ? __pfx_dump_stack_lvl+0x10/0x10 [ 150.839090][ T7803] ? __pfx__printk+0x10/0x10 [ 150.839112][ T7803] ? __might_fault+0xb0/0x130 [ 150.839152][ T7803] should_fail_ex+0x414/0x560 [ 150.839187][ T7803] _copy_from_user+0x2d/0xb0 [ 150.839219][ T7803] ___sys_sendmsg+0x158/0x2a0 [ 150.839252][ T7803] ? __pfx____sys_sendmsg+0x10/0x10 [ 150.839331][ T7803] ? __might_fault+0xb0/0x130 [ 150.839363][ T7803] __sys_sendmmsg+0x227/0x430 [ 150.839400][ T7803] ? __pfx___sys_sendmmsg+0x10/0x10 [ 150.839440][ T7803] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 150.839488][ T7803] ? ksys_write+0x1f0/0x250 [ 150.839511][ T7803] ? rcu_is_watching+0x15/0xb0 [ 150.839541][ T7803] __x64_sys_sendmmsg+0xa0/0xc0 [ 150.839573][ T7803] do_syscall_64+0xf6/0x210 [ 150.839603][ T7803] ? clear_bhb_loop+0x60/0xb0 [ 150.839629][ T7803] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.839650][ T7803] RIP: 0033:0x7fa08cb8e969 [ 150.839668][ T7803] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 150.839686][ T7803] RSP: 002b:00007fa08d9ce038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 150.839708][ T7803] RAX: ffffffffffffffda RBX: 00007fa08cdb6080 RCX: 00007fa08cb8e969 [ 150.839723][ T7803] RDX: 000000000000fdef RSI: 00002000000020c0 RDI: 0000000000000008 [ 150.839736][ T7803] RBP: 00007fa08d9ce090 R08: 0000000000000000 R09: 0000000000000000 [ 150.839749][ T7803] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 150.839761][ T7803] R13: 0000000000000000 R14: 00007fa08cdb6080 R15: 00007ffcb1399d68 [ 150.839793][ T7803] [ 151.539333][ T7827] netlink: 4 bytes leftover after parsing attributes in process `syz.4.571'. [ 151.598367][ T7827] hsr_slave_0: left promiscuous mode [ 151.659004][ T7827] hsr_slave_1: left promiscuous mode [ 152.099784][ T7834] bond1: entered promiscuous mode [ 152.139798][ T7834] bond1: entered allmulticast mode [ 152.156367][ T7834] 8021q: adding VLAN 0 to HW filter on device bond1 [ 152.172816][ T7854] netlink: 'syz.3.576': attribute type 9 has an invalid length. [ 152.420778][ T7862] netlink: 36 bytes leftover after parsing attributes in process `syz.1.579'. [ 152.682416][ T7870] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.582'. [ 152.793304][ T7874] netlink: 4 bytes leftover after parsing attributes in process `syz.2.584'. [ 153.222074][ T7895] netlink: 12 bytes leftover after parsing attributes in process `syz.3.588'. [ 153.442504][ T7904] tap0: tun_chr_ioctl cmd 1074025676 [ 153.448126][ T7904] tap0: owner set to 0 [ 153.469520][ T7904] netlink: 12 bytes leftover after parsing attributes in process `syz.1.590'. [ 153.514848][ T7904] tc_dump_action: action bad kind [ 153.795272][ T7918] sctp: [Deprecated]: syz.0.594 (pid 7918) Use of struct sctp_assoc_value in delayed_ack socket option. [ 153.795272][ T7918] Use struct sctp_sack_info instead [ 154.266338][ T7943] netlink: 'syz.2.601': attribute type 16 has an invalid length. [ 154.289371][ T7943] netlink: 'syz.2.601': attribute type 17 has an invalid length. [ 154.531493][ T47] vxcan1 speed is unknown, defaulting to 1000 [ 154.546347][ T7949] xt_time: unknown flags 0x4 [ 154.884999][ T7933] DRBG: could not allocate digest TFM handle: hmac(sha512) [ 154.919961][ T7961] netlink: 64 bytes leftover after parsing attributes in process `syz.3.607'. [ 155.102936][ T7968] netlink: 4 bytes leftover after parsing attributes in process `syz.2.610'. [ 155.221187][ T7968] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 155.290498][ T7968] tipc: Failed to remove unknown binding: 66,1,1/0:1520879575/1520879577 [ 155.409899][ T7968] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 155.477633][ T7968] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 155.939248][ T7997] RDS: rds_bind could not find a transport for ::ffff:172.30.0.4, load rds_tcp or rds_rdma? [ 156.266830][ T8009] netlink: 32 bytes leftover after parsing attributes in process `syz.4.624'. [ 156.875203][ T8038] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 156.911412][ T8039] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 156.963989][ T8039] netlink: 16 bytes leftover after parsing attributes in process `syz.2.633'. [ 157.456914][ T8064] FAULT_INJECTION: forcing a failure. [ 157.456914][ T8064] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 157.468387][ T8061] netlink: 32 bytes leftover after parsing attributes in process `syz.0.641'. [ 157.502289][ T8064] CPU: 0 UID: 0 PID: 8064 Comm: syz.2.642 Not tainted 6.15.0-rc6-syzkaller-00160-gc39b1bb5bc6d #0 PREEMPT(full) [ 157.502320][ T8064] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 157.502333][ T8064] Call Trace: [ 157.502341][ T8064] [ 157.502351][ T8064] dump_stack_lvl+0x189/0x250 [ 157.502385][ T8064] ? __lock_acquire+0xaac/0xd20 [ 157.502420][ T8064] ? __pfx_dump_stack_lvl+0x10/0x10 [ 157.502452][ T8064] ? __pfx__printk+0x10/0x10 [ 157.502474][ T8064] ? __might_fault+0xb0/0x130 [ 157.502526][ T8064] should_fail_ex+0x414/0x560 [ 157.502555][ T8064] _copy_from_user+0x2d/0xb0 [ 157.502588][ T8064] ___sys_sendmsg+0x158/0x2a0 [ 157.502622][ T8064] ? __pfx____sys_sendmsg+0x10/0x10 [ 157.502703][ T8064] ? __might_fault+0xb0/0x130 [ 157.502736][ T8064] __sys_sendmmsg+0x227/0x430 [ 157.502777][ T8064] ? __pfx___sys_sendmmsg+0x10/0x10 [ 157.502818][ T8064] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 157.502867][ T8064] ? ksys_write+0x1f0/0x250 [ 157.502891][ T8064] ? rcu_is_watching+0x15/0xb0 [ 157.503032][ T8064] __x64_sys_sendmmsg+0xa0/0xc0 [ 157.503065][ T8064] do_syscall_64+0xf6/0x210 [ 157.503094][ T8064] ? clear_bhb_loop+0x60/0xb0 [ 157.503120][ T8064] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.503138][ T8064] RIP: 0033:0x7fb8b3b8e969 [ 157.503163][ T8064] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 157.503179][ T8064] RSP: 002b:00007fb8b49ee038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 157.503202][ T8064] RAX: ffffffffffffffda RBX: 00007fb8b3db5fa0 RCX: 00007fb8b3b8e969 [ 157.503216][ T8064] RDX: 000000000000fdef RSI: 00002000000020c0 RDI: 0000000000000008 [ 157.503230][ T8064] RBP: 00007fb8b49ee090 R08: 0000000000000000 R09: 0000000000000000 [ 157.503242][ T8064] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 157.503253][ T8064] R13: 0000000000000000 R14: 00007fb8b3db5fa0 R15: 00007fff1ccafc08 [ 157.503384][ T8064] [ 157.772722][ T8071] netlink: 240 bytes leftover after parsing attributes in process `syz.1.644'. [ 157.808096][ T8072] netlink: 240 bytes leftover after parsing attributes in process `syz.1.644'. [ 157.916939][ T8079] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 157.919302][ T8077] netlink: 4 bytes leftover after parsing attributes in process `syz.0.647'. [ 158.050414][ T8077] 8021q: adding VLAN 0 to HW filter on device team1 [ 158.063150][ T8082] netlink: 788 bytes leftover after parsing attributes in process `syz.1.648'. [ 158.268507][ T8090] netlink: 4 bytes leftover after parsing attributes in process `syz.2.650'. [ 158.293957][ T8091] netlink: 4 bytes leftover after parsing attributes in process `syz.2.650'. [ 158.437089][ T8095] netlink: 8 bytes leftover after parsing attributes in process `syz.3.652'. [ 158.495515][ T47] hid-generic 0005:046D:0A0B.0001: item fetching failed at offset 1/74 [ 158.499245][ T8095] netlink: 4 bytes leftover after parsing attributes in process `syz.3.652'. [ 158.514691][ T8095] netlink: 'syz.3.652': attribute type 15 has an invalid length. [ 158.526129][ T8099] pim6reg: entered allmulticast mode [ 158.550159][ T8104] pim6reg: left allmulticast mode [ 158.561363][ T47] hid-generic 0005:046D:0A0B.0001: probe with driver hid-generic failed with error -22 [ 158.680543][ T8105] netlink: 'syz.0.655': attribute type 29 has an invalid length. [ 158.826656][ T8114] tipc: Started in network mode [ 158.832829][ T8114] tipc: Node identity ffffa848, cluster identity 4711 [ 158.895424][ T8114] tipc: Node number set to 4294944840 [ 159.104034][ T8123] unsupported nla_type 52263 [ 159.143431][ T8121] tap0: tun_chr_ioctl cmd 1074025672 [ 159.150048][ T8121] tap0: ignored: set checksum disabled [ 159.191180][ T8128] netlink: 'syz.3.662': attribute type 10 has an invalid length. [ 159.295106][ T8128] team0: Device veth1_macvtap failed to register rx_handler [ 159.524562][ T8139] (unnamed net_device) (uninitialized): option lp_interval: invalid value (0) [ 159.565405][ T8139] (unnamed net_device) (uninitialized): option lp_interval: allowed values 1 - 2147483647 [ 159.649199][ T8138] macsec0: entered promiscuous mode [ 159.739673][ T8146] syzkaller1: entered promiscuous mode [ 159.761905][ T8146] syzkaller1: entered allmulticast mode [ 159.810324][ T8148] netlink: 'syz.3.670': attribute type 21 has an invalid length. [ 160.808386][ T8164] gretap0: entered promiscuous mode [ 160.863799][ T8171] 0ªî{X¹¦: renamed from gretap0 [ 160.882620][ T8171] 0ªî{X¹¦: left promiscuous mode [ 160.900383][ T8171] 0ªî{X¹¦: entered allmulticast mode [ 160.916177][ T8171] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 162.197612][ T8223] __nla_validate_parse: 12 callbacks suppressed [ 162.197666][ T8223] netlink: 8 bytes leftover after parsing attributes in process `syz.1.692'. [ 162.248192][ T8226] netlink: 76 bytes leftover after parsing attributes in process `syz.4.694'. [ 162.515291][ T8240] netlink: 4 bytes leftover after parsing attributes in process `syz.1.698'. [ 162.602631][ T8240] netlink: 12 bytes leftover after parsing attributes in process `syz.1.698'. [ 162.735923][ T8248] veth1_macvtap: entered promiscuous mode [ 163.153354][ T8258] netlink: 4 bytes leftover after parsing attributes in process `syz.0.705'. [ 163.545176][ T8278] netlink: 4 bytes leftover after parsing attributes in process `syz.1.710'. [ 163.749049][ T8282] netlink: 'syz.3.711': attribute type 11 has an invalid length. [ 163.791971][ T8282] netlink: 12 bytes leftover after parsing attributes in process `syz.3.711'. [ 163.971348][ T8282] 8021q: adding VLAN 0 to HW filter on device bond2 [ 164.042909][ T8289] vlan2: entered allmulticast mode [ 164.104103][ T8289] bond2: entered allmulticast mode [ 164.702228][ T8315] netlink: 16 bytes leftover after parsing attributes in process `syz.2.718'. [ 164.740750][ T8318] netlink: 224 bytes leftover after parsing attributes in process `syz.4.719'. [ 164.771262][ T8319] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 164.780446][ T8319] team0: Device ipvlan2 is already an upper device of the team interface [ 164.955647][ T8324] netlink: 8 bytes leftover after parsing attributes in process `syz.2.722'. [ 165.745001][ T8353] netlink: 'syz.0.729': attribute type 5 has an invalid length. [ 166.028475][ T8363] bridge1: entered promiscuous mode [ 166.063632][ T8363] bridge1: entered allmulticast mode [ 166.272657][ T8375] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 167.050333][ T8394] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 167.149339][ T8406] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 167.262931][ T8406] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 167.287009][ T8406] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 167.332070][ T8406] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 167.386066][ T8414] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 167.436607][ T8406] syz.0.744 (8406) used greatest stack depth: 18312 bytes left [ 168.376175][ T8443] __nla_validate_parse: 5 callbacks suppressed [ 168.376204][ T8443] netlink: 8 bytes leftover after parsing attributes in process `syz.3.756'. [ 168.429057][ T8443] netlink: 12 bytes leftover after parsing attributes in process `syz.3.756'. [ 168.815268][ T8465] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 168.839065][ T8460] netlink: 52 bytes leftover after parsing attributes in process `syz.2.761'. [ 168.862940][ T8460] netlink: 52 bytes leftover after parsing attributes in process `syz.2.761'. [ 168.876895][ T8460] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 169.079275][ T8474] netlink: 232 bytes leftover after parsing attributes in process `syz.4.766'. [ 169.157436][ T8478] netlink: 40 bytes leftover after parsing attributes in process `syz.1.768'. [ 169.167801][ T8478] netlink: 40 bytes leftover after parsing attributes in process `syz.1.768'. [ 169.178593][ T8478] netlink: 'syz.1.768': attribute type 13 has an invalid length. [ 169.198989][ T8478] veth0_macvtap: left promiscuous mode [ 169.211251][ T8478] macvtap0: entered allmulticast mode [ 169.224874][ T8478] macvtap0: refused to change device tx_queue_len [ 169.421457][ T8486] netlink: 8 bytes leftover after parsing attributes in process `syz.4.769'. [ 169.539153][ T8490] xt_connbytes: Forcing CT accounting to be enabled [ 169.696667][ T8492] netlink: 40 bytes leftover after parsing attributes in process `syz.3.771'. [ 169.727151][ T8494] netlink: 4 bytes leftover after parsing attributes in process `syz.2.772'. [ 169.848428][ T8499] netlink: 'syz.3.773': attribute type 21 has an invalid length. [ 169.858487][ T8499] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 169.958469][ T8478] Bluetooth: hci2: Opcode 0x0401 failed: -4 [ 170.246728][ T8506] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 170.651636][ T8523] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 171.050076][ T8535] Bluetooth: MGMT ver 1.23 [ 171.315722][ T55] Bluetooth: hci2: command 0x0401 tx timeout [ 171.455696][ T8558] (unnamed net_device) (uninitialized): Unable to set peer notification delay as MII monitoring is disabled [ 171.573335][ T8563] FAULT_INJECTION: forcing a failure. [ 171.573335][ T8563] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 171.593429][ T8563] CPU: 0 UID: 0 PID: 8563 Comm: syz.2.797 Not tainted 6.15.0-rc6-syzkaller-00160-gc39b1bb5bc6d #0 PREEMPT(full) [ 171.593461][ T8563] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 171.593474][ T8563] Call Trace: [ 171.593483][ T8563] [ 171.593494][ T8563] dump_stack_lvl+0x189/0x250 [ 171.593529][ T8563] ? __lock_acquire+0xaac/0xd20 [ 171.593568][ T8563] ? __pfx_dump_stack_lvl+0x10/0x10 [ 171.593598][ T8563] ? __pfx__printk+0x10/0x10 [ 171.593620][ T8563] ? __might_fault+0xb0/0x130 [ 171.593659][ T8563] should_fail_ex+0x414/0x560 [ 171.593686][ T8563] _copy_from_user+0x2d/0xb0 [ 171.593728][ T8563] ___sys_sendmsg+0x158/0x2a0 [ 171.593760][ T8563] ? __pfx____sys_sendmsg+0x10/0x10 [ 171.593837][ T8563] ? __might_fault+0xb0/0x130 [ 171.593869][ T8563] __sys_sendmmsg+0x227/0x430 [ 171.593905][ T8563] ? __pfx___sys_sendmmsg+0x10/0x10 [ 171.593946][ T8563] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 171.593997][ T8563] ? ksys_write+0x1f0/0x250 [ 171.594022][ T8563] ? rcu_is_watching+0x15/0xb0 [ 171.594053][ T8563] __x64_sys_sendmmsg+0xa0/0xc0 [ 171.594086][ T8563] do_syscall_64+0xf6/0x210 [ 171.594118][ T8563] ? clear_bhb_loop+0x60/0xb0 [ 171.594145][ T8563] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.594166][ T8563] RIP: 0033:0x7fb8b3b8e969 [ 171.594185][ T8563] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 171.594203][ T8563] RSP: 002b:00007fb8b49ee038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 171.594225][ T8563] RAX: ffffffffffffffda RBX: 00007fb8b3db5fa0 RCX: 00007fb8b3b8e969 [ 171.594241][ T8563] RDX: 000000000000fdef RSI: 00002000000020c0 RDI: 0000000000000008 [ 171.594254][ T8563] RBP: 00007fb8b49ee090 R08: 0000000000000000 R09: 0000000000000000 [ 171.594267][ T8563] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 171.594279][ T8563] R13: 0000000000000000 R14: 00007fb8b3db5fa0 R15: 00007fff1ccafc08 [ 171.594312][ T8563] [ 172.362169][ T8585] syzkaller1: entered promiscuous mode [ 172.397142][ T8585] syzkaller1: entered allmulticast mode [ 172.432241][ T8588] xt_ecn: cannot match TCP bits for non-tcp packets [ 172.620090][ T8593] netlink: 'syz.2.807': attribute type 4 has an invalid length. [ 172.672098][ T8596] netlink: 'syz.2.807': attribute type 4 has an invalid length. [ 172.756358][ T8601] veth0: entered promiscuous mode [ 173.352099][ T8625] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 173.369078][ T8625] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 173.490985][ T8636] __nla_validate_parse: 104 callbacks suppressed [ 173.491008][ T8636] netlink: 8 bytes leftover after parsing attributes in process `syz.1.819'. [ 173.527398][ T8631] netlink: 12 bytes leftover after parsing attributes in process `syz.4.818'. [ 173.539204][ T8597] veth0: left promiscuous mode [ 173.608114][ T8631] netlink: 4 bytes leftover after parsing attributes in process `syz.4.818'. [ 173.848324][ T8649] xt_nat: multiple ranges no longer supported [ 174.089222][ T8658] netlink: 8 bytes leftover after parsing attributes in process `syz.1.824'. [ 174.117799][ T8661] (unnamed net_device) (uninitialized): option miimon: invalid value (18446744073709551585) [ 174.133296][ T8658] netlink: 4 bytes leftover after parsing attributes in process `syz.1.824'. [ 174.147449][ T8661] (unnamed net_device) (uninitialized): option miimon: allowed values 0 - 2147483647 [ 174.373029][ T8671] netlink: 'syz.1.828': attribute type 2 has an invalid length. [ 174.422963][ T8673] netlink: 'syz.1.828': attribute type 2 has an invalid length. [ 174.456734][ T8677] netlink: 4 bytes leftover after parsing attributes in process `syz.4.832'. [ 174.492285][ T8668] trusted_key: syz.1.828 sent an empty control message without MSG_MORE. [ 174.499971][ T8677] netlink: 'syz.4.832': attribute type 3 has an invalid length. [ 175.024656][ T8698] netlink: 'syz.0.838': attribute type 10 has an invalid length. [ 175.053818][ T8698] netlink: 40 bytes leftover after parsing attributes in process `syz.0.838'. [ 175.138453][ T8698] team0: Port device geneve0 added [ 175.159005][ T8703] openvswitch: netlink: Missing key (keys=40, expected=80) [ 175.217402][ T8702] infiniband srz1: RDMA CMA: cma_listen_on_dev, error -98 [ 175.400436][ T8710] netlink: 12 bytes leftover after parsing attributes in process `syz.1.842'. [ 175.415773][ T8710] netlink: 'syz.1.842': attribute type 1 has an invalid length. [ 175.481153][ T8710] netlink: 16 bytes leftover after parsing attributes in process `syz.1.842'. [ 175.505233][ T8712] netlink: 4 bytes leftover after parsing attributes in process `syz.0.845'. [ 175.756248][ T8721] netlink: 'syz.3.846': attribute type 4 has an invalid length. [ 175.794675][ T55] Bluetooth: hci4: command tx timeout [ 175.876867][ T8720] netem: unknown loss type 0 [ 175.882833][ T8720] netem: change failed [ 177.242512][ T8769] syzkaller0: entered promiscuous mode [ 177.260701][ T8769] syzkaller0: entered allmulticast mode [ 177.476713][ T8773] sit0: entered promiscuous mode [ 177.519572][ T8773] netlink: 'syz.2.867': attribute type 1 has an invalid length. [ 177.980452][ T8798] ksmbd: Unknown IPC event: 3, ignore. [ 178.191034][ T8798] ipip0: entered promiscuous mode [ 178.751655][ T8826] tipc: Started in network mode [ 178.793728][ T8826] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711 [ 178.817527][ T8826] tipc: Enabling of bearer rejected, failed to enable media [ 179.219651][ T5913] IPVS: starting estimator thread 0... [ 179.284527][ T8849] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 179.328076][ T8849] batadv_slave_1: entered promiscuous mode [ 179.364143][ T8850] IPVS: using max 26 ests per chain, 62400 per kthread [ 179.677826][ T8861] macvlan1: entered promiscuous mode [ 179.744692][ T8861] macvlan1: left promiscuous mode [ 180.071762][ T8880] __nla_validate_parse: 4 callbacks suppressed [ 180.071797][ T8880] netlink: 96 bytes leftover after parsing attributes in process `syz.4.899'. [ 180.120465][ T8880] 8021q: VLANs not supported on gre0 [ 180.340530][ T8890] netlink: 'syz.1.901': attribute type 1 has an invalid length. [ 180.342027][ T8886] netlink: 56 bytes leftover after parsing attributes in process `syz.3.902'. [ 180.409695][ T8886] netlink: 872 bytes leftover after parsing attributes in process `syz.3.902'. [ 180.625891][ T8902] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 180.663191][ T8890] 8021q: adding VLAN 0 to HW filter on device bond2 [ 181.128568][ T8918] FAULT_INJECTION: forcing a failure. [ 181.128568][ T8918] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 181.205890][ T8918] CPU: 0 UID: 0 PID: 8918 Comm: syz.2.905 Not tainted 6.15.0-rc6-syzkaller-00160-gc39b1bb5bc6d #0 PREEMPT(full) [ 181.205921][ T8918] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 181.205935][ T8918] Call Trace: [ 181.205944][ T8918] [ 181.205954][ T8918] dump_stack_lvl+0x189/0x250 [ 181.205988][ T8918] ? __lock_acquire+0xaac/0xd20 [ 181.206021][ T8918] ? __pfx_dump_stack_lvl+0x10/0x10 [ 181.206053][ T8918] ? __pfx__printk+0x10/0x10 [ 181.206075][ T8918] ? __might_fault+0xb0/0x130 [ 181.206116][ T8918] should_fail_ex+0x414/0x560 [ 181.206145][ T8918] _copy_from_user+0x2d/0xb0 [ 181.206178][ T8918] ___sys_sendmsg+0x158/0x2a0 [ 181.206374][ T8918] ? __pfx____sys_sendmsg+0x10/0x10 [ 181.206455][ T8918] ? __might_fault+0xb0/0x130 [ 181.206499][ T8918] __sys_sendmmsg+0x227/0x430 [ 181.206542][ T8918] ? __pfx___sys_sendmmsg+0x10/0x10 [ 181.206584][ T8918] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 181.206635][ T8918] ? ksys_write+0x1f0/0x250 [ 181.206661][ T8918] ? rcu_is_watching+0x15/0xb0 [ 181.206761][ T8918] __x64_sys_sendmmsg+0xa0/0xc0 [ 181.206795][ T8918] do_syscall_64+0xf6/0x210 [ 181.206828][ T8918] ? clear_bhb_loop+0x60/0xb0 [ 181.206855][ T8918] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.206875][ T8918] RIP: 0033:0x7fb8b3b8e969 [ 181.206896][ T8918] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 181.206913][ T8918] RSP: 002b:00007fb8b49cd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 181.206945][ T8918] RAX: ffffffffffffffda RBX: 00007fb8b3db6080 RCX: 00007fb8b3b8e969 [ 181.206957][ T8918] RDX: 000000000000fdef RSI: 00002000000020c0 RDI: 0000000000000008 [ 181.206973][ T8918] RBP: 00007fb8b49cd090 R08: 0000000000000000 R09: 0000000000000000 [ 181.206986][ T8918] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 181.206998][ T8918] R13: 0000000000000000 R14: 00007fb8b3db6080 R15: 00007fff1ccafc08 [ 181.207030][ T8918] [ 182.165836][ T8938] netlink: 16 bytes leftover after parsing attributes in process `syz.0.916'. [ 182.330802][ T8944] netlink: 20 bytes leftover after parsing attributes in process `syz.2.917'. [ 182.553272][ T8946] : entered promiscuous mode [ 182.630595][ T8956] vxcan1 speed is unknown, defaulting to 1000 [ 182.709376][ T8960] FAULT_INJECTION: forcing a failure. [ 182.709376][ T8960] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 182.737701][ T8960] CPU: 0 UID: 0 PID: 8960 Comm: syz.4.920 Not tainted 6.15.0-rc6-syzkaller-00160-gc39b1bb5bc6d #0 PREEMPT(full) [ 182.737731][ T8960] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 182.737744][ T8960] Call Trace: [ 182.737753][ T8960] [ 182.737762][ T8960] dump_stack_lvl+0x189/0x250 [ 182.737797][ T8960] ? __lock_acquire+0xaac/0xd20 [ 182.737831][ T8960] ? __pfx_dump_stack_lvl+0x10/0x10 [ 182.737861][ T8960] ? __pfx__printk+0x10/0x10 [ 182.737882][ T8960] ? __might_fault+0xb0/0x130 [ 182.737924][ T8960] should_fail_ex+0x414/0x560 [ 182.737952][ T8960] _copy_from_user+0x2d/0xb0 [ 182.737983][ T8960] ___sys_sendmsg+0x158/0x2a0 [ 182.738018][ T8960] ? __pfx____sys_sendmsg+0x10/0x10 [ 182.738095][ T8960] ? __might_fault+0xb0/0x130 [ 182.738128][ T8960] __sys_sendmmsg+0x227/0x430 [ 182.738164][ T8960] ? __pfx___sys_sendmmsg+0x10/0x10 [ 182.738204][ T8960] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 182.738253][ T8960] ? ksys_write+0x1f0/0x250 [ 182.738276][ T8960] ? rcu_is_watching+0x15/0xb0 [ 182.738306][ T8960] __x64_sys_sendmmsg+0xa0/0xc0 [ 182.738339][ T8960] do_syscall_64+0xf6/0x210 [ 182.738369][ T8960] ? clear_bhb_loop+0x60/0xb0 [ 182.738395][ T8960] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.738415][ T8960] RIP: 0033:0x7fb3d218e969 [ 182.738434][ T8960] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 182.738451][ T8960] RSP: 002b:00007fb3d30ae038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 182.738473][ T8960] RAX: ffffffffffffffda RBX: 00007fb3d23b6080 RCX: 00007fb3d218e969 [ 182.738489][ T8960] RDX: 000000000000fdef RSI: 00002000000020c0 RDI: 0000000000000008 [ 182.738502][ T8960] RBP: 00007fb3d30ae090 R08: 0000000000000000 R09: 0000000000000000 [ 182.738514][ T8960] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 182.738533][ T8960] R13: 0000000000000000 R14: 00007fb3d23b6080 R15: 00007ffe09abc718 [ 182.738565][ T8960] [ 183.553802][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 183.875924][ T8990] openvswitch: netlink: Port 10289156 exceeds max allowable 65535 [ 184.133856][ T8998] netlink: 36 bytes leftover after parsing attributes in process `syz.3.935'. [ 184.664820][ T9019] nbd0: detected capacity change from 0 to 4096 [ 184.703023][ T9024] netlink: 16 bytes leftover after parsing attributes in process `syz.1.942'. [ 184.704487][ T9025] netlink: 16 bytes leftover after parsing attributes in process `syz.1.942'. [ 184.760736][ T55] block nbd0: Receive control failed (result -104) [ 185.264005][ T9043] netlink: 'syz.4.948': attribute type 21 has an invalid length. [ 185.409720][ T9050] netlink: 8 bytes leftover after parsing attributes in process `syz.2.950'. [ 185.923414][ T9074] netlink: 8 bytes leftover after parsing attributes in process `syz.4.956'. [ 186.107073][ T9081] netlink: 8 bytes leftover after parsing attributes in process `syz.2.957'. [ 186.839951][ T9106] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 187.373278][ T9128] netlink: 8 bytes leftover after parsing attributes in process `syz.1.972'. [ 188.620173][ T9186] netlink: 8 bytes leftover after parsing attributes in process `syz.3.990'. [ 188.931623][ T9190] openvswitch: netlink: Message has 8 unknown bytes. [ 190.013960][ T9228] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1003'. [ 190.451088][ T9246] netlink: 'syz.4.1010': attribute type 2 has an invalid length. [ 190.552436][ T9252] openvswitch: netlink: Key type 9488 is out of range max 32 [ 190.968455][ T9266] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1016'. [ 191.000215][ T9268] netlink: 'syz.4.1017': attribute type 8 has an invalid length. [ 191.048180][ T9266] x_tables: duplicate underflow at hook 2 [ 191.261903][ T9276] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1019'. [ 191.302652][ T9278] netlink: 'syz.3.1018': attribute type 1 has an invalid length. [ 191.366357][ T9279] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1020'. [ 191.393948][ T9278] netlink: 184 bytes leftover after parsing attributes in process `syz.3.1018'. [ 191.396723][ T9280] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1018'. [ 191.565214][ T9278] netlink: 'syz.3.1018': attribute type 1 has an invalid length. [ 191.678807][ T9285] sch_tbf: peakrate 7 is lower than or equals to rate 2147483647 ! [ 191.970857][ T9295] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1026'. [ 192.006852][ T9297] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1026'. [ 192.043700][ T9295] netlink: 'syz.3.1026': attribute type 8 has an invalid length. [ 192.071392][ T9297] netlink: 'syz.3.1026': attribute type 8 has an invalid length. [ 192.478844][ T9318] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1031'. [ 192.958429][ T9330] xt_HMARK: proto mask must be zero with L3 mode [ 193.974933][ T9363] netlink: 'syz.2.1044': attribute type 29 has an invalid length. [ 194.023913][ T9363] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1044'. [ 194.069606][ T9368] netlink: 'syz.2.1044': attribute type 29 has an invalid length. [ 194.110551][ T9368] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1044'. [ 194.397510][ T9389] xt_connbytes: Forcing CT accounting to be enabled [ 194.414222][ T9389] --map-set only usable from mangle table [ 194.432525][ T9393] netlink: 'syz.2.1048': attribute type 3 has an invalid length. [ 194.445115][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.463837][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.891288][ T9411] netlink: 'syz.4.1053': attribute type 21 has an invalid length. [ 197.139605][ T9420] __nla_validate_parse: 5 callbacks suppressed [ 197.139625][ T9420] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1054'. [ 197.209137][ T9429] netlink: 'syz.4.1058': attribute type 13 has an invalid length. [ 197.217992][ T9427] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1056'. [ 197.243757][ T9429] netlink: 'syz.4.1058': attribute type 58 has an invalid length. [ 197.289748][ T9429] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1058'. [ 197.428700][ T9429] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1058'. [ 197.470426][ T9429] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1058'. [ 197.515101][ T9441] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1059'. [ 197.773746][ T9451] FAULT_INJECTION: forcing a failure. [ 197.773746][ T9451] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 197.817220][ T9451] CPU: 0 UID: 0 PID: 9451 Comm: syz.3.1063 Not tainted 6.15.0-rc6-syzkaller-00160-gc39b1bb5bc6d #0 PREEMPT(full) [ 197.817251][ T9451] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 197.817264][ T9451] Call Trace: [ 197.817273][ T9451] [ 197.817282][ T9451] dump_stack_lvl+0x189/0x250 [ 197.817315][ T9451] ? __lock_acquire+0xaac/0xd20 [ 197.817349][ T9451] ? __pfx_dump_stack_lvl+0x10/0x10 [ 197.817380][ T9451] ? __pfx__printk+0x10/0x10 [ 197.817402][ T9451] ? __might_fault+0xb0/0x130 [ 197.817443][ T9451] should_fail_ex+0x414/0x560 [ 197.817472][ T9451] _copy_from_user+0x2d/0xb0 [ 197.817504][ T9451] ___sys_sendmsg+0x158/0x2a0 [ 197.817536][ T9451] ? __pfx____sys_sendmsg+0x10/0x10 [ 197.817614][ T9451] ? __might_fault+0xb0/0x130 [ 197.817646][ T9451] __sys_sendmmsg+0x227/0x430 [ 197.817682][ T9451] ? __pfx___sys_sendmmsg+0x10/0x10 [ 197.817722][ T9451] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 197.817771][ T9451] ? ksys_write+0x1f0/0x250 [ 197.817795][ T9451] ? rcu_is_watching+0x15/0xb0 [ 197.817824][ T9451] __x64_sys_sendmmsg+0xa0/0xc0 [ 197.817857][ T9451] do_syscall_64+0xf6/0x210 [ 197.817886][ T9451] ? clear_bhb_loop+0x60/0xb0 [ 197.817912][ T9451] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.817940][ T9451] RIP: 0033:0x7fe2c198e969 [ 197.817958][ T9451] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 197.817972][ T9451] RSP: 002b:00007fe2c2794038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 197.817990][ T9451] RAX: ffffffffffffffda RBX: 00007fe2c1bb6080 RCX: 00007fe2c198e969 [ 197.818003][ T9451] RDX: 000000000000fdef RSI: 00002000000020c0 RDI: 0000000000000008 [ 197.818014][ T9451] RBP: 00007fe2c2794090 R08: 0000000000000000 R09: 0000000000000000 [ 197.818024][ T9451] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 197.818034][ T9451] R13: 0000000000000000 R14: 00007fe2c1bb6080 R15: 00007fffab8dd7f8 [ 197.818059][ T9451] [ 199.162446][ T9493] @ÿ: renamed from bond_slave_0 [ 199.617978][ T9509] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1080'. [ 199.805587][ T9512] netlink: 'syz.0.1082': attribute type 24 has an invalid length. [ 200.331127][ T9535] openvswitch: netlink: Tunnel attr 14 has unexpected len 6 expected 0 [ 200.416595][ T9539] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1089'. [ 200.428711][ T9535] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1087'. [ 200.449150][ T9535] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1087'. [ 200.571076][ T9540] netlink: 'syz.0.1090': attribute type 1 has an invalid length. [ 200.817314][ T9540] 8021q: adding VLAN 0 to HW filter on device bond2 [ 200.978445][ T9547] bond2: (slave geneve2): making interface the new active one [ 201.041372][ T9547] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 201.381860][ T9562] netlink: 'syz.0.1090': attribute type 1 has an invalid length. [ 201.677783][ T9577] netlink: 'syz.0.1099': attribute type 11 has an invalid length. [ 201.828838][ T9577] ieee802154 phy0 wpan0: encryption failed: -22 [ 202.545909][ T9611] netlink: 'syz.3.1109': attribute type 1 has an invalid length. [ 202.603867][ T9615] __nla_validate_parse: 9 callbacks suppressed [ 202.603889][ T9615] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1110'. [ 202.611550][ T9611] netlink: 232 bytes leftover after parsing attributes in process `syz.3.1109'. [ 202.689832][ T9615] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1110'. [ 202.817511][ T9615] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1110'. [ 203.011838][ T9635] IPVS: Unknown mcast interface: syzkaller0 [ 203.243453][ T9640] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1116'. [ 203.256943][ T9643] netlink: 'syz.3.1118': attribute type 2 has an invalid length. [ 203.283878][ T9643] netlink: 1184 bytes leftover after parsing attributes in process `syz.3.1118'. [ 203.305786][ T9640] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1116'. [ 203.519450][ T9648] netlink: 'syz.1.1119': attribute type 2 has an invalid length. [ 203.539267][ T9651] netlink: 'syz.2.1120': attribute type 4 has an invalid length. [ 203.557678][ T9648] netlink: 'syz.1.1119': attribute type 2 has an invalid length. [ 203.614351][ T9655] netlink: 'syz.2.1120': attribute type 4 has an invalid length. [ 203.619590][ T9648] netlink: 'syz.1.1119': attribute type 2 has an invalid length. [ 203.646306][ T9648] netlink: 'syz.1.1119': attribute type 2 has an invalid length. [ 203.655944][ T9648] netlink: 'syz.1.1119': attribute type 2 has an invalid length. [ 204.286527][ T9680] netlink: 'syz.2.1130': attribute type 2 has an invalid length. [ 204.784349][ T9688] xt_CT: No such helper "pptp" [ 205.447800][ T9708] x_tables: duplicate underflow at hook 3 [ 205.457497][ T9709] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1140'. [ 205.657919][ T9717] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1142'. [ 206.001427][ T9728] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.115080][ T9731] openvswitch: netlink: IPv6 tunnel dst address is zero [ 206.483106][ T9736] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1148'. [ 206.839657][ T9755] sctp: [Deprecated]: syz.1.1155 (pid 9755) Use of struct sctp_assoc_value in delayed_ack socket option. [ 206.839657][ T9755] Use struct sctp_sack_info instead [ 207.237565][ T55] block nbd1: Receive control failed (result -32) [ 208.296004][ T9803] __nla_validate_parse: 2 callbacks suppressed [ 208.296026][ T9803] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1168'. [ 210.088595][ T9832] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1175'. [ 210.101088][ T9832] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1175'. [ 210.304517][ T9836] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1176'. [ 210.516834][ T9842] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 210.543821][ T9842] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 210.575809][ T9842] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 210.604009][ T9842] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 214.928945][ T42] block nbd0: Possible stuck request ffff888024c30000: control (read@0,4096B). Runtime 30 seconds [ 217.002058][ T5139] Bluetooth: hci2: command 0x0401 tx timeout [ 217.012388][ T5829] Bluetooth: hci0: command 0x0406 tx timeout [ 217.022608][ T5139] Bluetooth: hci3: command 0x0406 tx timeout [ 217.029448][ T55] Bluetooth: hci1: command 0x0406 tx timeout [ 224.224667][ T5139] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 224.236893][ T5139] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 224.245947][ T5139] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 224.265057][ T5139] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 224.277846][ T5139] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 224.323710][ T55] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 224.333768][ T55] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 224.342839][ T55] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 224.386409][ T55] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 224.400219][ T5829] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 224.410911][ T5840] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 224.421193][ T5840] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 224.436389][ T5829] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 224.446498][ T5829] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 224.459136][ T5829] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 224.467445][ T9847] vxcan1 speed is unknown, defaulting to 1000 [ 224.842332][ T9849] vxcan1 speed is unknown, defaulting to 1000 [ 225.341227][ T5829] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 225.344273][ T9851] vxcan1 speed is unknown, defaulting to 1000 [ 225.357697][ T5829] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 225.370459][ T9847] chnl_net:caif_netlink_parms(): no params data found [ 225.380719][ T5829] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 225.394386][ T5829] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 225.408548][ T5829] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 225.809801][ T9847] bridge0: port 1(bridge_slave_0) entered blocking state [ 225.844012][ T9847] bridge0: port 1(bridge_slave_0) entered disabled state [ 225.852266][ T9847] bridge_slave_0: entered allmulticast mode [ 225.886253][ T9847] bridge_slave_0: entered promiscuous mode [ 225.919352][ T9847] bridge0: port 2(bridge_slave_1) entered blocking state [ 225.929597][ T9847] bridge0: port 2(bridge_slave_1) entered disabled state [ 225.939686][ T9847] bridge_slave_1: entered allmulticast mode [ 225.947728][ T9847] bridge_slave_1: entered promiscuous mode [ 225.983779][ T9857] vxcan1 speed is unknown, defaulting to 1000 [ 226.176973][ T9847] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 226.217899][ T9847] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 226.353801][ T5829] Bluetooth: hci5: command tx timeout [ 226.524053][ T55] Bluetooth: hci6: command tx timeout [ 226.531373][ T5829] Bluetooth: hci7: command tx timeout [ 226.610745][ T9847] team0: Port device team_slave_0 added [ 226.635907][ T9847] team0: Port device team_slave_1 added [ 226.685683][ T55] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 226.696914][ T55] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 226.706022][ T55] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 226.714991][ T55] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 226.724445][ T55] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 226.840821][ T9847] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 226.851296][ T9847] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 226.884251][ T9847] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 226.896844][ T9849] chnl_net:caif_netlink_parms(): no params data found [ 226.924590][ T9847] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 226.932451][ T9847] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 226.964165][ T9847] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 227.160414][ T9847] hsr_slave_0: entered promiscuous mode [ 227.168813][ T9847] hsr_slave_1: entered promiscuous mode [ 227.175648][ T9847] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 227.184847][ T9847] Cannot create hsr debugfs directory [ 227.246221][ T9866] vxcan1 speed is unknown, defaulting to 1000 [ 227.484152][ T5829] Bluetooth: hci8: command tx timeout [ 227.700196][ T9849] bridge0: port 1(bridge_slave_0) entered blocking state [ 227.709446][ T9849] bridge0: port 1(bridge_slave_0) entered disabled state [ 227.730201][ T9849] bridge_slave_0: entered allmulticast mode [ 227.743498][ T9849] bridge_slave_0: entered promiscuous mode [ 227.785290][ T9849] bridge0: port 2(bridge_slave_1) entered blocking state [ 227.793791][ T9849] bridge0: port 2(bridge_slave_1) entered disabled state [ 227.801089][ T9849] bridge_slave_1: entered allmulticast mode [ 227.810564][ T9849] bridge_slave_1: entered promiscuous mode [ 227.870893][ T9851] chnl_net:caif_netlink_parms(): no params data found [ 228.104334][ T9849] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 228.261178][ T9849] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 228.408726][ T9857] chnl_net:caif_netlink_parms(): no params data found [ 228.427857][ T9849] team0: Port device team_slave_0 added [ 228.434366][ T5829] Bluetooth: hci5: command tx timeout [ 228.484871][ T9849] team0: Port device team_slave_1 added [ 228.594218][ T5829] Bluetooth: hci7: command tx timeout [ 228.600133][ T5829] Bluetooth: hci6: command tx timeout [ 228.612248][ T9851] bridge0: port 1(bridge_slave_0) entered blocking state [ 228.620599][ T9851] bridge0: port 1(bridge_slave_0) entered disabled state [ 228.628452][ T9851] bridge_slave_0: entered allmulticast mode [ 228.636859][ T9851] bridge_slave_0: entered promiscuous mode [ 228.729770][ T9851] bridge0: port 2(bridge_slave_1) entered blocking state [ 228.737617][ T9851] bridge0: port 2(bridge_slave_1) entered disabled state [ 228.747653][ T9851] bridge_slave_1: entered allmulticast mode [ 228.756733][ T9851] bridge_slave_1: entered promiscuous mode [ 228.829692][ T9849] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 228.842186][ T5829] Bluetooth: hci9: command tx timeout [ 228.850341][ T9849] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 228.883465][ T9849] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 229.055725][ T9849] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 229.062928][ T9849] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 229.099487][ T9849] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 229.182303][ T9851] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 229.199241][ T9857] bridge0: port 1(bridge_slave_0) entered blocking state [ 229.208116][ T9857] bridge0: port 1(bridge_slave_0) entered disabled state [ 229.221430][ T9857] bridge_slave_0: entered allmulticast mode [ 229.237366][ T9857] bridge_slave_0: entered promiscuous mode [ 229.275874][ T9851] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 229.289225][ T9857] bridge0: port 2(bridge_slave_1) entered blocking state [ 229.297290][ T9857] bridge0: port 2(bridge_slave_1) entered disabled state [ 229.305655][ T9857] bridge_slave_1: entered allmulticast mode [ 229.315146][ T9857] bridge_slave_1: entered promiscuous mode [ 229.461125][ T9866] chnl_net:caif_netlink_parms(): no params data found [ 229.522783][ T9849] hsr_slave_0: entered promiscuous mode [ 229.531574][ T9849] hsr_slave_1: entered promiscuous mode [ 229.539353][ T9849] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 229.549256][ T9849] Cannot create hsr debugfs directory [ 229.555895][ T5829] Bluetooth: hci8: command tx timeout [ 229.606481][ T9851] team0: Port device team_slave_0 added [ 229.617555][ T9857] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 229.633148][ T9857] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 229.701394][ T9851] team0: Port device team_slave_1 added [ 229.849303][ T9857] team0: Port device team_slave_0 added [ 229.871119][ T9851] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 229.878387][ T9851] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 229.905681][ T9851] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 229.927476][ T9851] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 229.935272][ T9851] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 229.962731][ T9851] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 229.978345][ T9857] team0: Port device team_slave_1 added [ 230.151246][ T9866] bridge0: port 1(bridge_slave_0) entered blocking state [ 230.159408][ T9866] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.167981][ T9866] bridge_slave_0: entered allmulticast mode [ 230.177556][ T9866] bridge_slave_0: entered promiscuous mode [ 230.211894][ T9857] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 230.220286][ T9857] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 230.248549][ T9857] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 230.269771][ T9866] bridge0: port 2(bridge_slave_1) entered blocking state [ 230.286489][ T9866] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.295776][ T9866] bridge_slave_1: entered allmulticast mode [ 230.304202][ T9866] bridge_slave_1: entered promiscuous mode [ 230.320859][ T9851] hsr_slave_0: entered promiscuous mode [ 230.328404][ T9851] hsr_slave_1: entered promiscuous mode [ 230.336597][ T9851] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 230.344709][ T9851] Cannot create hsr debugfs directory [ 230.352484][ T9857] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 230.360898][ T9857] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 230.392005][ T9857] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 230.508651][ T9866] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 230.518894][ T5829] Bluetooth: hci5: command tx timeout [ 230.587579][ T9866] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 230.671104][ T9857] hsr_slave_0: entered promiscuous mode [ 230.677696][ T5829] Bluetooth: hci6: command tx timeout [ 230.683226][ T5829] Bluetooth: hci7: command tx timeout [ 230.702250][ T9857] hsr_slave_1: entered promiscuous mode [ 230.708906][ T9857] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 230.717019][ T9857] Cannot create hsr debugfs directory [ 230.832100][ T9866] team0: Port device team_slave_0 added [ 230.845234][ T9866] team0: Port device team_slave_1 added [ 230.914127][ T5829] Bluetooth: hci9: command tx timeout [ 231.062382][ T9866] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 231.070286][ T9866] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 231.098517][ T9866] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 231.130756][ T9866] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 231.147013][ T9866] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 231.182430][ T9866] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 231.427101][ T9866] hsr_slave_0: entered promiscuous mode [ 231.438049][ T9866] hsr_slave_1: entered promiscuous mode [ 231.444916][ T9866] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 231.452756][ T9866] Cannot create hsr debugfs directory [ 231.633776][ T5829] Bluetooth: hci8: command tx timeout [ 232.593900][ T5829] Bluetooth: hci5: command tx timeout [ 232.754050][ T5829] Bluetooth: hci6: command tx timeout [ 232.754059][ T55] Bluetooth: hci7: command tx timeout [ 232.994708][ T5829] Bluetooth: hci9: command tx timeout [ 233.713990][ T5829] Bluetooth: hci8: command tx timeout [ 235.073904][ T5829] Bluetooth: hci9: command tx timeout [ 244.995064][ T42] block nbd0: Possible stuck request ffff888024c30000: control (read@0,4096B). Runtime 60 seconds [ 247.020359][ T5199] udevd[5199]: worker [5880] /devices/virtual/block/nbd0 is taking a long time [ 255.874176][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 255.892027][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.898632][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 275.077066][ T42] block nbd0: Possible stuck request ffff888024c30000: control (read@0,4096B). Runtime 90 seconds [ 284.751116][ T55] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 284.760839][ T55] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 284.769840][ T5139] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 284.769933][ T55] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 284.779710][ T5139] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 284.795323][ T5139] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 284.806643][ T5139] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 284.815263][ T5139] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 284.829222][ T5139] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 284.834100][ T55] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 284.926336][ T9898] vxcan1 speed is unknown, defaulting to 1000 [ 284.936996][ T5829] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 284.953965][ T5829] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 284.964335][ T5829] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 284.974494][ T5829] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 284.984889][ T5829] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 285.390199][ T9900] vxcan1 speed is unknown, defaulting to 1000 [ 285.606434][ T5829] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 285.616733][ T5829] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 285.625651][ T5829] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 285.635269][ T5829] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 285.643510][ T5829] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 286.001699][ T9898] chnl_net:caif_netlink_parms(): no params data found [ 286.048779][ T9902] vxcan1 speed is unknown, defaulting to 1000 [ 286.545672][ T9898] bridge0: port 1(bridge_slave_0) entered blocking state [ 286.573907][ T9898] bridge0: port 1(bridge_slave_0) entered disabled state [ 286.581427][ T9898] bridge_slave_0: entered allmulticast mode [ 286.624263][ T9898] bridge_slave_0: entered promiscuous mode [ 286.672379][ T9898] bridge0: port 2(bridge_slave_1) entered blocking state [ 286.704628][ T9898] bridge0: port 2(bridge_slave_1) entered disabled state [ 286.712322][ T9898] bridge_slave_1: entered allmulticast mode [ 286.766334][ T9898] bridge_slave_1: entered promiscuous mode [ 286.785461][ T9906] vxcan1 speed is unknown, defaulting to 1000 [ 286.914056][ T5829] Bluetooth: hci10: command tx timeout [ 286.920579][ T5829] Bluetooth: hci11: command tx timeout [ 286.976031][ T9898] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 287.036720][ T9898] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 287.065675][ T5840] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 287.074664][ T5840] Bluetooth: hci12: command tx timeout [ 287.081979][ T5139] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 287.094259][ T5139] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 287.120632][ T5139] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 287.140780][ T5139] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 287.305153][ T9898] team0: Port device team_slave_0 added [ 287.401276][ T9898] team0: Port device team_slave_1 added [ 287.503306][ T9898] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 287.523687][ T9898] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 287.563022][ T9898] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 287.619139][ T9898] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 287.632371][ T9898] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 287.665749][ T9898] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 287.698198][ T9915] vxcan1 speed is unknown, defaulting to 1000 [ 287.714165][ T5139] Bluetooth: hci13: command tx timeout [ 287.729152][ T9900] chnl_net:caif_netlink_parms(): no params data found [ 288.131542][ T9898] hsr_slave_0: entered promiscuous mode [ 288.145387][ T9898] hsr_slave_1: entered promiscuous mode [ 288.152515][ T9898] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 288.174942][ T9898] Cannot create hsr debugfs directory [ 288.203460][ T9902] chnl_net:caif_netlink_parms(): no params data found [ 288.759279][ T9900] bridge0: port 1(bridge_slave_0) entered blocking state [ 288.779345][ T9900] bridge0: port 1(bridge_slave_0) entered disabled state [ 288.793248][ T9900] bridge_slave_0: entered allmulticast mode [ 288.815365][ T9900] bridge_slave_0: entered promiscuous mode [ 288.907583][ T9900] bridge0: port 2(bridge_slave_1) entered blocking state [ 288.915540][ T9900] bridge0: port 2(bridge_slave_1) entered disabled state [ 288.923245][ T9900] bridge_slave_1: entered allmulticast mode [ 288.932405][ T9900] bridge_slave_1: entered promiscuous mode [ 288.993964][ T5139] Bluetooth: hci11: command tx timeout [ 288.999818][ T5139] Bluetooth: hci10: command tx timeout [ 289.163742][ T5139] Bluetooth: hci12: command tx timeout [ 289.205894][ T9902] bridge0: port 1(bridge_slave_0) entered blocking state [ 289.223886][ T9902] bridge0: port 1(bridge_slave_0) entered disabled state [ 289.231400][ T9902] bridge_slave_0: entered allmulticast mode [ 289.233739][ T5139] Bluetooth: hci14: command tx timeout [ 289.255849][ T9902] bridge_slave_0: entered promiscuous mode [ 289.297566][ T9900] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 289.343256][ T9902] bridge0: port 2(bridge_slave_1) entered blocking state [ 289.358364][ T9902] bridge0: port 2(bridge_slave_1) entered disabled state [ 289.381442][ T9902] bridge_slave_1: entered allmulticast mode [ 289.392421][ T9902] bridge_slave_1: entered promiscuous mode [ 289.477537][ T9900] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 289.550417][ T9906] chnl_net:caif_netlink_parms(): no params data found [ 289.761592][ T9902] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 289.795166][ T5139] Bluetooth: hci13: command tx timeout [ 289.878460][ T9900] team0: Port device team_slave_0 added [ 289.892616][ T9902] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 289.952872][ T9900] team0: Port device team_slave_1 added [ 290.081133][ T9902] team0: Port device team_slave_0 added [ 290.186627][ T9900] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 290.204043][ T9900] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 290.248284][ T9900] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 290.280938][ T9900] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 290.295604][ T9900] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 290.333476][ T9900] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 290.372078][ T9902] team0: Port device team_slave_1 added [ 290.531929][ T9906] bridge0: port 1(bridge_slave_0) entered blocking state [ 290.552035][ T9906] bridge0: port 1(bridge_slave_0) entered disabled state [ 290.563226][ T9906] bridge_slave_0: entered allmulticast mode [ 290.583377][ T9906] bridge_slave_0: entered promiscuous mode [ 290.668974][ T9906] bridge0: port 2(bridge_slave_1) entered blocking state [ 290.676773][ T9906] bridge0: port 2(bridge_slave_1) entered disabled state [ 290.708896][ T9906] bridge_slave_1: entered allmulticast mode [ 290.726439][ T9906] bridge_slave_1: entered promiscuous mode [ 290.743209][ T9915] chnl_net:caif_netlink_parms(): no params data found [ 290.800348][ T9902] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 290.811784][ T9902] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 290.856470][ T9902] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 290.882736][ T9902] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 290.896685][ T9902] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 290.940326][ T9902] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 291.042212][ T9900] hsr_slave_0: entered promiscuous mode [ 291.051528][ T9900] hsr_slave_1: entered promiscuous mode [ 291.059748][ T9900] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 291.068786][ T9900] Cannot create hsr debugfs directory [ 291.074912][ T5139] Bluetooth: hci10: command tx timeout [ 291.074925][ T5829] Bluetooth: hci11: command tx timeout [ 291.186518][ T9906] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 291.212894][ T9906] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 291.233868][ T5829] Bluetooth: hci12: command tx timeout [ 291.313763][ T5829] Bluetooth: hci14: command tx timeout [ 291.593340][ T9906] team0: Port device team_slave_0 added [ 291.699458][ T9906] team0: Port device team_slave_1 added [ 291.808589][ T9902] hsr_slave_0: entered promiscuous mode [ 291.826930][ T9902] hsr_slave_1: entered promiscuous mode [ 291.844823][ T9902] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 291.852997][ T9902] Cannot create hsr debugfs directory [ 291.874151][ T5829] Bluetooth: hci13: command tx timeout [ 292.117531][ T9906] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 292.136826][ T9906] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 292.184071][ T9906] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 292.315322][ T9915] bridge0: port 1(bridge_slave_0) entered blocking state [ 292.322767][ T9915] bridge0: port 1(bridge_slave_0) entered disabled state [ 292.341962][ T9915] bridge_slave_0: entered allmulticast mode [ 292.350997][ T9915] bridge_slave_0: entered promiscuous mode [ 292.376533][ T9906] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 292.393912][ T9906] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 292.437237][ T9906] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 292.466699][ T9915] bridge0: port 2(bridge_slave_1) entered blocking state [ 292.474760][ T9915] bridge0: port 2(bridge_slave_1) entered disabled state [ 292.483140][ T9915] bridge_slave_1: entered allmulticast mode [ 292.493325][ T9915] bridge_slave_1: entered promiscuous mode [ 292.728623][ T9915] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 292.778389][ T9906] hsr_slave_0: entered promiscuous mode [ 292.786341][ T9906] hsr_slave_1: entered promiscuous mode [ 292.793209][ T9906] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 292.802720][ T9906] Cannot create hsr debugfs directory [ 292.834800][ T9915] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 293.088308][ T9915] team0: Port device team_slave_0 added [ 293.109910][ T9915] team0: Port device team_slave_1 added [ 293.153869][ T5829] Bluetooth: hci11: command tx timeout [ 293.153874][ T5139] Bluetooth: hci10: command tx timeout [ 293.313869][ T5139] Bluetooth: hci12: command tx timeout [ 293.321672][ T9915] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 293.347771][ T9915] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 293.378490][ T9915] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 293.403300][ T5139] Bluetooth: hci14: command tx timeout [ 293.445050][ T9915] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 293.452755][ T9915] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 293.485662][ T9915] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 293.623147][ T9915] hsr_slave_0: entered promiscuous mode [ 293.631873][ T9915] hsr_slave_1: entered promiscuous mode [ 293.641048][ T9915] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 293.649398][ T9915] Cannot create hsr debugfs directory [ 293.954061][ T5139] Bluetooth: hci13: command tx timeout [ 295.473747][ T5139] Bluetooth: hci14: command tx timeout [ 304.034011][ T5829] Bluetooth: hci4: command 0x0406 tx timeout [ 305.155244][ T42] block nbd0: Possible stuck request ffff888024c30000: control (read@0,4096B). Runtime 120 seconds [ 317.318205][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.325203][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 335.234526][ T42] block nbd0: Possible stuck request ffff888024c30000: control (read@0,4096B). Runtime 150 seconds [ 345.480328][ T5829] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 345.489988][ T5829] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 345.498767][ T5829] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 345.515639][ T5829] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 345.532048][ T5829] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 345.593180][ T5139] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 345.602956][ T5139] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 345.612802][ T5139] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 345.621985][ T5139] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 345.652058][ T5139] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 345.666485][ T5840] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 345.687504][ T5840] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 345.705391][ T5840] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 345.715681][ T9949] vxcan1 speed is unknown, defaulting to 1000 [ 345.722595][ T5840] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 345.733346][ T5840] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 346.212925][ T9951] vxcan1 speed is unknown, defaulting to 1000 [ 346.715563][ T5840] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1 [ 346.726014][ T5840] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9 [ 346.738315][ T5840] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9 [ 346.749163][ T5840] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4 [ 346.758979][ T5840] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2 [ 347.011019][ T9953] vxcan1 speed is unknown, defaulting to 1000 [ 347.020061][ T9949] chnl_net:caif_netlink_parms(): no params data found [ 347.555614][ T5840] Bluetooth: hci15: command tx timeout [ 347.655195][ T9949] bridge0: port 1(bridge_slave_0) entered blocking state [ 347.663212][ T9949] bridge0: port 1(bridge_slave_0) entered disabled state [ 347.684012][ T9949] bridge_slave_0: entered allmulticast mode [ 347.701058][ T9949] bridge_slave_0: entered promiscuous mode [ 347.720935][ T9949] bridge0: port 2(bridge_slave_1) entered blocking state [ 347.728744][ T5840] Bluetooth: hci16: command tx timeout [ 347.748293][ T9949] bridge0: port 2(bridge_slave_1) entered disabled state [ 347.785497][ T9949] bridge_slave_1: entered allmulticast mode [ 347.793926][ T5840] Bluetooth: hci17: command tx timeout [ 347.814961][ T9949] bridge_slave_1: entered promiscuous mode [ 347.857443][ T5139] Bluetooth: hci19: unexpected cc 0x0c03 length: 249 > 1 [ 347.878296][ T5139] Bluetooth: hci19: unexpected cc 0x1003 length: 249 > 9 [ 347.878356][ T9958] vxcan1 speed is unknown, defaulting to 1000 [ 347.903792][ T5139] Bluetooth: hci19: unexpected cc 0x1001 length: 249 > 9 [ 347.917345][ T5139] Bluetooth: hci19: unexpected cc 0x0c23 length: 249 > 4 [ 347.926540][ T5139] Bluetooth: hci19: unexpected cc 0x0c38 length: 249 > 2 [ 348.120565][ T9949] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 348.155320][ T9949] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 348.503135][ T9949] team0: Port device team_slave_0 added [ 348.519938][ T9949] team0: Port device team_slave_1 added [ 348.559855][ T9966] vxcan1 speed is unknown, defaulting to 1000 [ 348.747398][ T9949] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 348.764528][ T9949] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 348.823787][ T9949] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 348.834709][ T5838] Bluetooth: hci18: command tx timeout [ 348.846125][ T9949] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 348.853148][ T9949] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 348.943704][ T9949] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 349.004418][ T9951] chnl_net:caif_netlink_parms(): no params data found [ 349.545710][ T9949] hsr_slave_0: entered promiscuous mode [ 349.564205][ T9949] hsr_slave_1: entered promiscuous mode [ 349.575632][ T9949] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 349.583343][ T9949] Cannot create hsr debugfs directory [ 349.634206][ T5838] Bluetooth: hci15: command tx timeout [ 349.744295][ T9951] bridge0: port 1(bridge_slave_0) entered blocking state [ 349.751628][ T9951] bridge0: port 1(bridge_slave_0) entered disabled state [ 349.762735][ T9951] bridge_slave_0: entered allmulticast mode [ 349.771815][ T9951] bridge_slave_0: entered promiscuous mode [ 349.794132][ T5838] Bluetooth: hci16: command tx timeout [ 349.835756][ T9951] bridge0: port 2(bridge_slave_1) entered blocking state [ 349.847917][ T9951] bridge0: port 2(bridge_slave_1) entered disabled state [ 349.855708][ T9951] bridge_slave_1: entered allmulticast mode [ 349.863956][ T9951] bridge_slave_1: entered promiscuous mode [ 349.873970][ T5838] Bluetooth: hci17: command tx timeout [ 349.929101][ T9953] chnl_net:caif_netlink_parms(): no params data found [ 350.034555][ T5838] Bluetooth: hci19: command tx timeout [ 350.114359][ T5838] Bluetooth: hci8: command 0x0406 tx timeout [ 350.120697][ T5843] Bluetooth: hci5: command 0x0406 tx timeout [ 350.127743][ T5843] Bluetooth: hci6: command 0x0406 tx timeout [ 350.134664][ T5836] Bluetooth: hci7: command 0x0406 tx timeout [ 350.135067][ T9978] Bluetooth: hci9: command 0x0406 tx timeout [ 350.196698][ T9951] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 350.296310][ T9951] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 350.417752][ T9951] team0: Port device team_slave_0 added [ 350.443189][ T9951] team0: Port device team_slave_1 added [ 350.831966][ T9951] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 350.857103][ T9951] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 350.899979][ T9951] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 350.924094][ T5829] Bluetooth: hci18: command tx timeout [ 350.934829][ T9958] chnl_net:caif_netlink_parms(): no params data found [ 351.029575][ T9951] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 351.037471][ T9951] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 351.070249][ T9951] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 351.104833][ T9953] bridge0: port 1(bridge_slave_0) entered blocking state [ 351.112444][ T9953] bridge0: port 1(bridge_slave_0) entered disabled state [ 351.120458][ T9953] bridge_slave_0: entered allmulticast mode [ 351.129926][ T9953] bridge_slave_0: entered promiscuous mode [ 351.191127][ T9953] bridge0: port 2(bridge_slave_1) entered blocking state [ 351.199104][ T9953] bridge0: port 2(bridge_slave_1) entered disabled state [ 351.207048][ T9953] bridge_slave_1: entered allmulticast mode [ 351.216169][ T9953] bridge_slave_1: entered promiscuous mode [ 351.230755][ T9966] chnl_net:caif_netlink_parms(): no params data found [ 351.238973][ T31] INFO: task syz.0.1163:9788 blocked for more than 143 seconds. [ 351.253643][ T31] Not tainted 6.15.0-rc6-syzkaller-00160-gc39b1bb5bc6d #0 [ 351.261346][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 351.283632][ T31] task:syz.0.1163 state:D stack:25656 pid:9788 tgid:9783 ppid:5832 task_flags:0x480140 flags:0x00000004 [ 351.307411][ T31] Call Trace: [ 351.310776][ T31] [ 351.331477][ T31] __schedule+0x16e2/0x4cd0 [ 351.348342][ T31] ? __lock_acquire+0xaac/0xd20 [ 351.361341][ T31] ? schedule+0x165/0x360 [ 351.423640][ T31] ? __pfx___schedule+0x10/0x10 [ 351.444038][ T31] ? schedule+0x91/0x360 [ 351.448380][ T31] schedule+0x165/0x360 [ 351.452671][ T31] blk_mq_freeze_queue_wait+0xf4/0x170 [ 351.499804][ T31] ? __pfx_blk_mq_freeze_queue_wait+0x10/0x10 [ 351.523880][ T31] ? __pfx_autoremove_wake_function+0x10/0x10 [ 351.530613][ T31] ? percpu_ref_kill_and_confirm+0xa3/0x130 [ 351.552079][ T31] queue_limits_commit_update_frozen+0x5e/0x360 [ 351.564115][ T31] ? nbd_set_size+0x2bd/0x6c0 [ 351.568901][ T31] nbd_set_size+0x496/0x6c0 [ 351.584349][ T31] ? __pfx_nbd_set_size+0x10/0x10 [ 351.589709][ T31] ? __mutex_trylock_common+0x153/0x260 [ 351.610084][ T31] ? __mutex_lock+0x330/0xe80 [ 351.615317][ T31] ? nla_memcpy+0x5b/0xc0 [ 351.619752][ T31] nbd_genl_size_set+0x2eb/0x3c0 [ 351.625572][ T31] ? __pfx_nbd_genl_size_set+0x10/0x10 [ 351.631109][ T31] ? __pfx_nbd_get_config_unlocked+0x10/0x10 [ 351.638352][ T31] ? bpf_lsm_capable+0x9/0x20 [ 351.643089][ T31] ? security_capable+0x7e/0x2e0 [ 351.650259][ T31] ? radix_tree_lookup+0x240/0x290 [ 351.655930][ T31] nbd_genl_reconfigure+0x409/0x1870 [ 351.661516][ T31] ? __pfx_nbd_genl_reconfigure+0x10/0x10 [ 351.667812][ T31] ? __nla_parse+0x40/0x60 [ 351.672296][ T31] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 351.681098][ T31] genl_family_rcv_msg_doit+0x212/0x300 [ 351.687309][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 351.694938][ T31] ? stack_depot_save_flags+0x40/0x910 [ 351.700459][ T31] genl_rcv_msg+0x60e/0x790 [ 351.705555][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 351.710655][ T31] ? __pfx_nbd_genl_reconfigure+0x10/0x10 [ 351.717389][ T5829] Bluetooth: hci15: command tx timeout [ 351.724092][ T31] netlink_rcv_skb+0x219/0x490 [ 351.729283][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 351.735179][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 351.740562][ T31] ? down_read+0x1ad/0x2e0 [ 351.746068][ T31] genl_rcv+0x28/0x40 [ 351.750319][ T31] netlink_unicast+0x75b/0x8d0 [ 351.755670][ T31] netlink_sendmsg+0x805/0xb30 [ 351.760537][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 351.766900][ T31] ? aa_sock_msg_perm+0x94/0x160 [ 351.771904][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 351.778481][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 351.784522][ T31] __sock_sendmsg+0x219/0x270 [ 351.790323][ T31] ____sys_sendmsg+0x505/0x830 [ 351.796383][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 351.801761][ T31] ? import_iovec+0x74/0xa0 [ 351.807241][ T31] ___sys_sendmsg+0x21f/0x2a0 [ 351.812027][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 351.818011][ T31] ? __fget_files+0x2a/0x420 [ 351.822669][ T31] ? __fget_files+0x3a0/0x420 [ 351.828128][ T31] __x64_sys_sendmsg+0x19b/0x260 [ 351.833305][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 351.839428][ T31] ? do_syscall_64+0xba/0x210 [ 351.845011][ T31] do_syscall_64+0xf6/0x210 [ 351.849571][ T31] ? clear_bhb_loop+0x60/0xb0 [ 351.854958][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 351.861073][ T31] RIP: 0033:0x7fa08cb8e969 [ 351.867053][ T31] RSP: 002b:00007fa08d9ef038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 351.877024][ T5829] Bluetooth: hci16: command tx timeout [ 351.884719][ T31] RAX: ffffffffffffffda RBX: 00007fa08cdb5fa0 RCX: 00007fa08cb8e969 [ 351.893125][ T31] RDX: 0000000004000000 RSI: 00002000000002c0 RDI: 0000000000000005 [ 351.901826][ T31] RBP: 00007fa08cc10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 351.910195][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 351.920229][ T31] R13: 0000000000000000 R14: 00007fa08cdb5fa0 R15: 00007ffcb1399d68 [ 351.928985][ T31] [ 351.964859][ T55] Bluetooth: hci17: command tx timeout [ 351.974282][ T31] [ 351.974282][ T31] Showing all locks held in the system: [ 351.983154][ T31] 1 lock held by khungtaskd/31: [ 352.034380][ T31] #0: ffffffff8df3dce0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 352.057290][ T31] 2 locks held by getty/5592: [ 352.062040][ T31] #0: ffff888034d4a0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 352.089143][ T31] #1: ffffc90002ffe2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 352.103926][ T31] 1 lock held by udevd/5880: [ 352.108632][ T31] #0: ffff888024a69358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 352.119403][ T55] Bluetooth: hci19: command tx timeout [ 352.143182][ T31] 4 locks held by kworker/0:4/5882: [ 352.149160][ T31] 2 locks held by kworker/u8:16/6889: [ 352.154894][ T31] 6 locks held by syz.0.1163/9788: [ 352.160124][ T31] #0: ffffffff8f35b9f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 352.168957][ T31] #1: ffffffff8f35b808 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 352.178625][ T31] #2: ffff888024a64198 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_genl_reconfigure+0x36f/0x1870 [ 352.190163][ T31] #3: ffff8880249ee878 (&q->limits_lock){+.+.}-{4:4}, at: nbd_set_size+0x2a4/0x6c0 [ 352.201305][ T31] #4: ffff8880249ee228 (&q->q_usage_counter(io)#49){++++}-{0:0}, at: queue_limits_commit_update_frozen+0x5e/0x360 [ 352.228011][ T31] #5: ffff8880249ee260 (&q->q_usage_counter(queue)){+.+.}-{0:0}, at: queue_limits_commit_update_frozen+0x5e/0x360 [ 352.251717][ T31] 2 locks held by syz.2.1169/9807: [ 352.263467][ T31] #0: ffffffff8f35b9f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 352.272114][ T31] #1: ffffffff8f35b808 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 352.298713][ T31] 2 locks held by syz.1.1170/9810: [ 352.313785][ T31] #0: ffffffff8f35b9f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 352.323163][ T31] #1: ffffffff8f35b808 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 352.348391][ T31] 2 locks held by syz.3.1172/9820: [ 352.363785][ T31] #0: ffffffff8f35b9f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 352.375379][ T31] #1: ffffffff8f35b808 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 352.386419][ T31] 2 locks held by syz.4.1177/9843: [ 352.392634][ T31] #0: ffffffff8f35b9f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 352.402527][ T31] #1: ffffffff8f35b808 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 352.413527][ T31] 2 locks held by syz-executor/9847: [ 352.419629][ T31] #0: ffffffff8f35b9f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 352.429310][ T31] #1: ffffffff8f35b808 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 352.439863][ T31] 2 locks held by syz-executor/9849: [ 352.445840][ T31] #0: ffffffff8f35b9f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 352.455088][ T31] #1: ffffffff8f35b808 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 352.465218][ T31] 2 locks held by syz-executor/9851: [ 352.470849][ T31] #0: ffffffff8f35b9f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 352.479708][ T31] #1: ffffffff8f35b808 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 352.490164][ T31] 2 locks held by syz-executor/9857: [ 352.497217][ T31] #0: ffffffff8f35b9f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 352.506397][ T31] #1: ffffffff8f35b808 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 352.530503][ T31] 2 locks held by syz-executor/9866: [ 352.544258][ T31] #0: ffffffff8f35b9f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 352.553156][ T31] #1: ffffffff8f35b808 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 352.578414][ T31] 2 locks held by syz-executor/9898: [ 352.593946][ T31] #0: ffffffff8f35b9f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 352.603295][ T31] #1: ffffffff8f35b808 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 352.627288][ T31] 2 locks held by syz-executor/9900: [ 352.632905][ T31] #0: ffffffff8f35b9f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 352.643769][ T31] #1: ffffffff8f35b808 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 352.653472][ T31] 2 locks held by syz-executor/9902: [ 352.660834][ T31] #0: ffffffff8f35b9f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 352.669643][ T31] #1: ffffffff8f35b808 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 352.679559][ T31] 2 locks held by syz-executor/9906: [ 352.686106][ T31] #0: ffffffff8f35b9f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 352.694622][ T31] #1: ffffffff8f35b808 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 352.709826][ T31] 2 locks held by syz-executor/9915: [ 352.723470][ T31] #0: ffffffff8f35b9f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 352.732313][ T31] #1: ffffffff8f35b808 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 352.757822][ T31] 7 locks held by syz-executor/9949: [ 352.765199][ T31] #0: ffff888034f6a420 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x211/0xa90 [ 352.774681][ T31] #1: ffff888046bf2c88 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e0/0x4f0 [ 352.784601][ T31] #2: ffff888026832e18 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x203/0x4f0 [ 352.795193][ T31] #3: ffffffff8eb97068 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 352.806406][ T31] #4: ffff888033c630e8 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb6/0x7c0 [ 352.817529][ T31] #5: ffff88805b541250 (&devlink->lock_key#12){+.+.}-{4:4}, at: nsim_drv_remove+0x50/0x160 [ 352.828472][ T31] #6: ffffffff8f2f7408 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_net_dev_lock+0x257/0x2f0 [ 352.853792][ T31] 1 lock held by syz-executor/9953: [ 352.859507][ T31] #0: ffffffff8df437b8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2f4/0x730 [ 352.874630][ T31] 2 locks held by syz-executor/9958: [ 352.880387][ T31] #0: ffffffff8f7f36b0 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 352.892346][ T31] #1: ffffffff8f2f7408 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70 [ 352.902076][ T31] 3 locks held by syz-executor/9966: [ 352.908885][ T31] #0: ffffffff8ea90ce0 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 352.919727][ T31] #1: ffffffff8f2f7408 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70 [ 352.930139][ T31] #2: ffffffff8df437b8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b7/0x730 [ 352.942736][ T31] [ 352.945889][ T31] ============================================= [ 352.945889][ T31] [ 352.963581][ T31] NMI backtrace for cpu 1 [ 352.963603][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-rc6-syzkaller-00160-gc39b1bb5bc6d #0 PREEMPT(full) [ 352.963646][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 352.963664][ T31] Call Trace: [ 352.963672][ T31] [ 352.963682][ T31] dump_stack_lvl+0x189/0x250 [ 352.963716][ T31] ? __wake_up_klogd+0xd9/0x110 [ 352.963746][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 352.963778][ T31] ? __pfx__printk+0x10/0x10 [ 352.963822][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 352.963849][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 352.963869][ T31] ? _printk+0xcf/0x120 [ 352.963894][ T31] ? __pfx__printk+0x10/0x10 [ 352.963917][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 352.963943][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 352.963969][ T31] watchdog+0xfee/0x1030 [ 352.964000][ T31] ? watchdog+0x1de/0x1030 [ 352.964036][ T31] kthread+0x711/0x8a0 [ 352.964067][ T31] ? __pfx_watchdog+0x10/0x10 [ 352.964093][ T31] ? __pfx_kthread+0x10/0x10 [ 352.964120][ T31] ? __pfx_kthread+0x10/0x10 [ 352.964145][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 352.964168][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 352.964195][ T31] ? __pfx_kthread+0x10/0x10 [ 352.964218][ T31] ret_from_fork+0x4b/0x80 [ 352.964240][ T31] ? __pfx_kthread+0x10/0x10 [ 352.964266][ T31] ret_from_fork_asm+0x1a/0x30 [ 352.964302][ T31] [ 352.964310][ T31] Sending NMI from CPU 1 to CPUs 0: [ 352.996381][ T55] Bluetooth: hci18: command tx timeout [ 352.997437][ C0] NMI backtrace for cpu 0 [ 352.997453][ C0] CPU: 0 UID: 0 PID: 55 Comm: kworker/u9:0 Not tainted 6.15.0-rc6-syzkaller-00160-gc39b1bb5bc6d #0 PREEMPT(full) [ 352.997475][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 352.997488][ C0] Workqueue: hci18 hci_cmd_timeout [ 352.997519][ C0] RIP: 0010:io_serial_in+0x77/0xc0 [ 352.997543][ C0] Code: e8 3e 06 82 fc 44 89 f9 d3 e3 49 83 c6 40 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 6f ff e3 fc 41 03 1e 89 da ec <0f> b6 c0 5b 41 5c 41 5e 41 5f c3 cc cc cc cc cc 44 89 f9 80 e1 07 [ 352.997559][ C0] RSP: 0018:ffffc9000121f3b8 EFLAGS: 00000006 [ 352.997574][ C0] RAX: 1ffffffff336a105 RBX: 00000000000003f9 RCX: 0000000000000000 [ 352.997586][ C0] RDX: 00000000000003f9 RSI: 0000000000000000 RDI: 0000000000000020 [ 352.997597][ C0] RBP: ffffc9000121f590 R08: 0000000000000003 R09: 0000000000000004 [ 352.997609][ C0] R10: dffffc0000000000 R11: ffffffff853deb60 R12: dffffc0000000000 [ 352.997622][ C0] R13: dffffc0000000000 R14: ffffffff99b50c00 R15: 0000000000000000 [ 352.997635][ C0] FS: 0000000000000000(0000) GS:ffff8881260c7000(0000) knlGS:0000000000000000 [ 352.997649][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 352.997661][ C0] CR2: 000055a6aff73fb0 CR3: 0000000031a92000 CR4: 00000000003526f0 [ 352.997677][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 352.997687][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 352.997698][ C0] Call Trace: [ 352.997711][ C0] [ 352.997721][ C0] serial8250_console_write+0x581/0x1ba0 [ 352.997752][ C0] ? __pfx_serial8250_console_write+0x10/0x10 [ 352.997775][ C0] ? console_flush_all+0x13a/0xc40 [ 352.997797][ C0] ? console_flush_all+0x13a/0xc40 [ 352.997820][ C0] ? do_raw_spin_unlock+0x122/0x240 [ 352.997841][ C0] ? console_flush_all+0x13a/0xc40 [ 352.997860][ C0] ? console_flush_all+0x13a/0xc40 [ 352.997880][ C0] console_flush_all+0x728/0xc40 [ 352.997902][ C0] ? console_flush_all+0x13a/0xc40 [ 352.997925][ C0] ? __pfx_console_flush_all+0x10/0x10 [ 352.997951][ C0] ? is_printk_cpu_sync_owner+0x32/0x40 [ 352.997977][ C0] console_unlock+0xc4/0x270 [ 352.997996][ C0] ? __pfx_console_unlock+0x10/0x10 [ 352.998016][ C0] ? vprintk_emit+0x444/0x7a0 [ 352.998032][ C0] ? vprintk_emit+0x444/0x7a0 [ 352.998049][ C0] vprintk_emit+0x5b7/0x7a0 [ 352.998065][ C0] ? vprintk_emit+0x444/0x7a0 [ 352.998083][ C0] ? __pfx_vprintk_emit+0x10/0x10 [ 352.998104][ C0] ? kvm_sched_clock_read+0x11/0x20 [ 352.998125][ C0] ? sched_clock_cpu+0x74/0x430 [ 352.998145][ C0] _printk+0xcf/0x120 [ 352.998165][ C0] ? __pfx__printk+0x10/0x10 [ 352.998181][ C0] ? do_raw_spin_lock+0x121/0x290 [ 352.998201][ C0] ? look_up_lock_class+0x74/0x170 [ 352.998227][ C0] bt_err+0x10b/0x160 [ 352.998252][ C0] ? __pfx_bt_err+0x10/0x10 [ 352.998282][ C0] hci_cmd_timeout+0xff/0x1e0 [ 352.998308][ C0] ? process_scheduled_works+0x9ec/0x17a0 [ 352.998326][ C0] process_scheduled_works+0xade/0x17a0 [ 352.998358][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 352.998397][ C0] worker_thread+0x8a0/0xda0 [ 352.998429][ C0] kthread+0x711/0x8a0 [ 352.998452][ C0] ? __pfx_worker_thread+0x10/0x10 [ 352.998470][ C0] ? __pfx_kthread+0x10/0x10 [ 352.998492][ C0] ? __pfx_kthread+0x10/0x10 [ 352.998512][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 352.998533][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 352.998555][ C0] ? __pfx_kthread+0x10/0x10 [ 352.998575][ C0] ret_from_fork+0x4b/0x80 [ 352.998593][ C0] ? __pfx_kthread+0x10/0x10 [ 352.998614][ C0] ret_from_fork_asm+0x1a/0x30 [ 352.998639][ C0] [ 353.103680][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 353.103719][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-rc6-syzkaller-00160-gc39b1bb5bc6d #0 PREEMPT(full) [ 353.103750][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 353.103767][ T31] Call Trace: [ 353.103779][ T31] [ 353.103790][ T31] dump_stack_lvl+0x99/0x250 [ 353.103833][ T31] ? __asan_memcpy+0x40/0x70 [ 353.103861][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 353.103897][ T31] ? __pfx__printk+0x10/0x10 [ 353.103936][ T31] panic+0x2db/0x790 [ 353.103977][ T31] ? __pfx_panic+0x10/0x10 [ 353.104008][ T31] ? tick_nohz_tick_stopped+0x86/0xb0 [ 353.104040][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 353.104070][ T31] ? nmi_trigger_cpumask_backtrace+0x2b6/0x300 [ 353.104105][ T31] watchdog+0x102d/0x1030 [ 353.104140][ T31] ? watchdog+0x1de/0x1030 [ 353.104182][ T31] kthread+0x711/0x8a0 [ 353.104216][ T31] ? __pfx_watchdog+0x10/0x10 [ 353.104247][ T31] ? __pfx_kthread+0x10/0x10 [ 353.104279][ T31] ? __pfx_kthread+0x10/0x10 [ 353.104309][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 353.104337][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 353.104368][ T31] ? __pfx_kthread+0x10/0x10 [ 353.104397][ T31] ret_from_fork+0x4b/0x80 [ 353.104424][ T31] ? __pfx_kthread+0x10/0x10 [ 353.104620][ T31] ret_from_fork_asm+0x1a/0x30 [ 353.104668][ T31] [ 353.108393][ T31] Kernel Offset: disabled