last executing test programs: 3.334002222s ago: executing program 4 (id=1859): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r4, &(0x7f0000000240)={0x0, 0xf0ffffff, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100001400d280c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x305200, 0x0) close(r5) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0xfffffffd, 0xc5, 0xe23, 0x1, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x80000, {0x0, 0x0, 0x0, r8, {}, {0xffe6, 0xb}, {0xffe0, 0x3}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_NAT={0x8, 0xb, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r5, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 2.954995134s ago: executing program 1 (id=1870): r0 = accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)=0x10) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r0, 0x8982, &(0x7f00000000c0)={0x1, 'lo\x00', {}, 0x4}) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0xb, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x21}]}, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) r1 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r1, 0x29, 0xcb, &(0x7f0000000040)={0x0, 0x64ceef03d81ddb0f, 0x7, 0x0, 0x10001}, 0xc) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0xfea3) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c0000001600156f000000000005000000000000", @ANYRES32=0x0, @ANYBLOB="140006"], 0x2c}}, 0x0) getsockopt$TIPC_DEST_DROPPABLE(r2, 0x10f, 0x81, &(0x7f0000000100), &(0x7f0000000140)=0x4) accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)=0x10) (async) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r0, 0x8982, &(0x7f00000000c0)={0x1, 'lo\x00', {}, 0x4}) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0xb, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x21}]}, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) (async) socket(0xa, 0x3, 0x3a) (async) setsockopt$MRT6_DEL_MIF(r1, 0x29, 0xcb, &(0x7f0000000040)={0x0, 0x64ceef03d81ddb0f, 0x7, 0x0, 0x10001}, 0xc) (async) socket(0x10, 0x3, 0x0) (async) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0xfea3) (async) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c0000001600156f000000000005000000000000", @ANYRES32=0x0, @ANYBLOB="140006"], 0x2c}}, 0x0) (async) getsockopt$TIPC_DEST_DROPPABLE(r2, 0x10f, 0x81, &(0x7f0000000100), &(0x7f0000000140)=0x4) (async) 2.813972451s ago: executing program 1 (id=1872): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000060a0b0400000000000000000200000054000480500001800a000100696e6e65720000004000028008000240200000840800034000000007080004400000000f08000140000000001c0005800c000100707b796c6f6164000c00028008000240000000050900010073797a30000000000900020073797a32"], 0xa8}}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f00000000c0)=ANY=[@ANYBLOB="8402020100"], 0x18) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) r5 = socket(0x2, 0xa, 0x300) setsockopt$sock_int(r5, 0x1, 0x28, &(0x7f0000000040)=0x9, 0x4) recvmmsg(r5, &(0x7f0000003cc0)=[{{0x0, 0x0, 0x0}, 0x21}], 0x1, 0x10000, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newqdisc={0x2c, 0x28, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffffdfe, {0x0, 0x0, 0x0, r4, {0xd}, {0xffff}, {0x7, 0x6}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004040}, 0x4000080) 2.786535495s ago: executing program 4 (id=1873): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021bc0000000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000900003808c000080080003400000000280000b807c000180090001006c617374"], 0x140}}, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(r2, 0x89e3, &(0x7f0000000000)={0x6, 0x0, 0x8, 0x4, 0x40}) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x80000000000000a, 0x2, 0x0) getsockopt$inet6_mptcp_buf(r4, 0x11c, 0x3, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000030500"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012800b0001006d61637365630000180002800c0004000100000100c280"], 0x48}}, 0x40000) ioctl$int_in(r1, 0x5452, &(0x7f0000000c80)=0xb) r5 = socket(0x2d, 0x2, 0x0) recvmmsg(r5, &(0x7f00000006c0)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x41, 0x0) r6 = socket$inet6(0xa, 0x2, 0x3a) bind$inet6(r6, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x9, &(0x7f0000000140)={@cgroup, 0xffffffffffffffff, 0x11}, 0x11) readv(r1, &(0x7f0000000300)=[{&(0x7f0000000080)=""/107, 0x6b}], 0x1) writev(r1, &(0x7f0000019880)=[{&(0x7f0000000400)="fb", 0x1}, {&(0x7f00000197c0)="1902e902d5e5f29e59e1a7caec33eb76d2430da474d87e367f6598d026438b65eda8341073b6752abdcee080c8e1e876b25227c37d7dd79886ce33f13e857c8eda1cecf6ac36c03dbf54e3cb5136da5a33fee76fb3113f8b6700e9e5c2df6b8eed665fed48738d59395ad07438c3610ae3976aac75caf2facafa21c25be3c2", 0x7f}], 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021bc0000000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000900003808c000080080003400000000280000b807c000180090001006c617374"], 0x140}}, 0x0) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) (async) syz_init_net_socket$x25(0x9, 0x5, 0x0) (async) ioctl$SIOCX25SFACILITIES(r2, 0x89e3, &(0x7f0000000000)={0x6, 0x0, 0x8, 0x4, 0x40}) (async) socket$netlink(0x10, 0x3, 0x0) (async) socket(0x80000000000000a, 0x2, 0x0) (async) getsockopt$inet6_mptcp_buf(r4, 0x11c, 0x3, 0x0, 0x0) (async) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000030500"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012800b0001006d61637365630000180002800c0004000100000100c280"], 0x48}}, 0x40000) (async) ioctl$int_in(r1, 0x5452, &(0x7f0000000c80)=0xb) (async) socket(0x2d, 0x2, 0x0) (async) recvmmsg(r5, &(0x7f00000006c0)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x41, 0x0) (async) socket$inet6(0xa, 0x2, 0x3a) (async) bind$inet6(r6, 0x0, 0x0) (async) bpf$BPF_PROG_ATTACH(0x9, &(0x7f0000000140)={@cgroup, 0xffffffffffffffff, 0x11}, 0x11) (async) readv(r1, &(0x7f0000000300)=[{&(0x7f0000000080)=""/107, 0x6b}], 0x1) (async) writev(r1, &(0x7f0000019880)=[{&(0x7f0000000400)="fb", 0x1}, {&(0x7f00000197c0)="1902e902d5e5f29e59e1a7caec33eb76d2430da474d87e367f6598d026438b65eda8341073b6752abdcee080c8e1e876b25227c37d7dd79886ce33f13e857c8eda1cecf6ac36c03dbf54e3cb5136da5a33fee76fb3113f8b6700e9e5c2df6b8eed665fed48738d59395ad07438c3610ae3976aac75caf2facafa21c25be3c2", 0x7f}], 0x2) (async) 2.686946398s ago: executing program 2 (id=1875): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="580100001000130726bd70000000000020010000000000000000000000000000000000000000000000000000000000004e22000100000002020000006c000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fe8000000000000000000000000000bb0000000032000000ac1414aa000000000000000000000000feffffffffffffff000000000000000085ea0000000000000a0000000000000006000000000000000000000000000000000000000000000003001c0000000000000000000000000000000000000000000200000000000000f8ffffffffffffff0c000000000000000200000029bd7000000000000a000100280000000000000068001200726663343534332867636d2861657329290000000000000000000000000000000000000000000000000000840000000000000000000000000000000000000000e000000080"], 0x158}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 2.630088286s ago: executing program 1 (id=1877): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r2, 0x0) ppoll(&(0x7f0000001100)=[{r2, 0x7202}], 0x1, &(0x7f00000000c0)={0x0, 0x3938700}, 0x0, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000540)=ANY=[@ANYRESOCT, @ANYRES8=r2, @ANYBLOB="3d9f26bd7000fcdbdf253200000008000300", @ANYRES32=r3, @ANYBLOB="86443642bb7a96dbdfaf7892ae922acce05604bb42fa5567c099a04aeefdb482ea49bc19532fbb400a319cf5938c65a198484c0e1f6169383e20fd7e646d4a965b31fdbb5424d7c62659f3971c5bb01df8467f20eff448c9650879b567f56a5e9fc2c1a57d356671e95f7393f80b04a42c4e1836a31769d6b0d9d8bae64a4e520fed665247a3ef2367fe7e2887decacdebaafd42"], 0x1c}, 0x1, 0x0, 0x0, 0x44}, 0x20000400) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000180)=@ethtool_coalesce={0x3c}}) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240"], 0x7c}}, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0xc, &(0x7f0000000040), 0x4) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001e00010000000000000000000200000001000007000000000800010000000000080005"], 0x2c}, 0x1, 0x0, 0x0, 0x2}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xe, 0x3, &(0x7f0000000000)=@framed={{0x72, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0x5f}}, &(0x7f0000000380)='GPL\x00'}, 0x90) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="38000000101401002cbd7000fedbdf25080003000100000008004a0001000000080001000000000008004c000100000008004b"], 0x38}, 0x1, 0x0, 0x0, 0x24044836}, 0xc094) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r8 = accept4(r4, 0x0, 0x0, 0x80800) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r9, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c) shutdown(r9, 0x1) connect$inet6(r9, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) connect$inet6(r9, &(0x7f0000000100)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x8}, 0x1c) sendmmsg$alg(r8, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xffffff96}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x1, 0x40800) recvmsg$unix(r8, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000680)=""/219, 0xdb}], 0x1}, 0x10000) 2.608413751s ago: executing program 4 (id=1878): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040), 0x6) ioctl$sock_bt_hci(r1, 0x400448e7, &(0x7f0000000000)) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="000000001028000028001280090001007665746800000000180002801400010000000000", @ANYRES32], 0x48}}, 0x0) 2.534883355s ago: executing program 2 (id=1879): bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f00000001c0), 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000003a80)={0x0, 0x1c, &(0x7f0000003980)=[@in6={0xa, 0x4, 0x0, @private2}]}, &(0x7f0000003ac0)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x6d, &(0x7f0000000080), &(0x7f00000000c0)=0x3930) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYRES32=r0], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) 2.534017471s ago: executing program 0 (id=1880): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x34004811) r1 = socket$kcm(0x10, 0x2, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x43}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r6, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@newqdisc={0x38, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0xfffffe5c, &(0x7f00000001c0)={&(0x7f0000001280)=@newtfilter={0x24, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x2}}}, 0x24}}, 0x0) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', r6}, 0x94) socket(0x10, 0x803, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xb68, 0xf5ffffff, &(0x7f0000000000)='%', 0x0, 0xd01, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000100001000000000000dfff000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000004000038008000140000000002c0003801400010067656e65766530000000000000000000140001006c6f0000000000000000000000000000080002"], 0xb4}}, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08061cdc030ec080fffffffe0000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f2130809d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff000000000000000000", 0x89}], 0x1}, 0x0) socket$kcm(0x2, 0x200000000000001, 0x106) (async) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x34004811) (async) socket$kcm(0x10, 0x2, 0x4) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x43}, 0x94) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket(0x10, 0x803, 0x0) (async) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5) (async) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) (async) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r6, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) (async) sendmsg$nl_route_sched(r3, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@newqdisc={0x38, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0xfffffe5c, &(0x7f00000001c0)={&(0x7f0000001280)=@newtfilter={0x24, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x2}}}, 0x24}}, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', r6}, 0x94) (async) socket(0x10, 0x803, 0x0) (async) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xb68, 0xf5ffffff, &(0x7f0000000000)='%', 0x0, 0xd01, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000100001000000000000dfff000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000004000038008000140000000002c0003801400010067656e65766530000000000000000000140001006c6f0000000000000000000000000000080002"], 0xb4}}, 0x0) (async) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08061cdc030ec080fffffffe0000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f2130809d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff000000000000000000", 0x89}], 0x1}, 0x0) (async) 2.471833391s ago: executing program 4 (id=1882): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)={0x20, 0x2d, 0x1, 0x0, 0x0, "", [@nested={0x4, 0x800}, @nested={0xc, 0x1a, 0x0, 0x1, [@typed={0x8, 0x1, 0x0, 0x0, @u32=0x8}]}]}, 0x20}], 0x1}, 0x0) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, &(0x7f0000000440)={0x0, 0x1, 0x1, 0x5, @vifc_lcl_addr=@private=0xa010102, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) 2.360022197s ago: executing program 1 (id=1883): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x3, 0x4, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x4c}, [@call={0x85, 0x0, 0x0, 0x15}]}, &(0x7f0000000000)='GPL\x00'}, 0x90) r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000480)={0x89, 0x0, 0x1, 0x80}, 0x8) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r2, 0x0) listen(r2, 0x0) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000040)={{{@in=@private, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@loopback}}, &(0x7f0000000140)=0xe8) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000280)=0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001600)={0x11b8, 0x3e, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x76}, @nested={0x78, 0x0, 0x0, 0x1, [@typed={0x73, 0x6, 0x0, 0x0, @str='\xb3aCoh0\xb1\xf8\xcd\xc3\xa4\xcc\xae\xf1/\xf8\xe8\xe1\xff};\x9bVO\xf2o\x1b\xa7\x9b\bN\xa4a\xadb\v\xa2\xd0\xab\x11\x18\xccw3[\xe9\xe2\x16I\xc5\x84\x03C\xadfM\xb6\xeb\x14\x83\xc7O\x98\xac0?\x12\xd6\x90\f\"\xfd\xd8\xa2\x1fnm\xc1\xab\x10A\xf5\x81j\x109\xb7d\x10\xa1\xfe\xc52h!\'\xc8^\xf1\x87\xa3\xcc-\xcd\x8dI2\xf2\xf0\xb5 '}]}, @nested={0x1004, 0x2, 0x0, 0x1, [@generic="328b86ef0f0ebb796b10e85ab1dcf555e62f85e6b6a5d363bd3a258988ae2c4ce27ed20865d81cf39c75401b7fdbceb0a15c40efe59064bb02db31f25214f31f840b4de6ee90e31d0171fbbd68fa253899270dc231e8cbbd22bfbb87bce1f269afd0a4caf9a596e457a2833233bd7a9992a12243590a6dffefc8da4cae72558e0658ef8178fb60d075de3c78ccc64796c87be3bd497e387ddff63d7157212d1b70928a0f3b45851656475e9569aea56bf4c2d1f760c74d140b0d1f58c6d61baf60e51c81f0b8bffeeb15b90ade753e0ec7d2074de503d49912eb8562e442fc682673b986708957781d8ac06a9ca72cf887819fff0b1bb426c3d59d7593167305b4813cd686a3f351fd3654ded873639ed500039bcb0dfbeb7e227de2645f2cc288c60002a38e99b1f67d6bb8f982d3d07ccd4243fa1e555bddb04bf34392188f19b9b716fb06a72b07993afad3e45be7a8e750c239b2c9dae14ed42993b07915682fb6974479f4a3d919fb20fe11329f4ffa528d19b028caef0275199f0482c24e17d101dd2974f271e042be014d7298fd9f7e52ada1ebfa13fa8c8dadb1cb1d8368c52483303b46a345e449dee987c79f4c32f065a9821221e685706f9b13198b4016d69c38acbc027dc2b140cb400a76a7ffd0e33328282f9d0e86ce8242ed00f7caef2ee4800f34683b77d100e9987174181a34d295f949c99cd93714db88e16a98e8c4901ef8d429225461a89a202f0e97d4cbe1a6385a66af68a5270b0fcf1512d92cd72ff8c32041eb4f260a3c037e486a13dd45bbc1977c31eb62a3fa99dabec9e7c74b23e826e33de3f9b2c14625bd8c32bf4ed3af5f4aebbbd1958e732fd760d1f52c35eac9a8850689065f45ee156c3d18ddb1deffa384ce2b5e141e2203b76535a4c540301ef4f56eb5231e8e06b79242e477cda3d295d2f46df6a44a866de290bfec6c0eb7f588d2ea6544902bf70d4eed5d065fcda12ad153369844172c96fc8dd9b4a418b92eea35a5baae8370e00a389b84dcca702496594762652878cb43049d066c15da4d15190a68e4b4146d67625f0571d99299ff1b592afb84535fbae9eb41a75e0587dc7fd04ab261f9b012a52906f482e92a7c57fa054b90888d8be0924e13718edee436d3e2d662f8dc007042e34883262e4b8f30b0bc05b8f46b556346820218d9175a2b7c38d9cae49cee0ff8869c775456ff674282fc442f26114c0a043d235f1e6f6a8e76cba26ecce0aa5768ab0de4324b8f2645f1b8fbd6c9d42f49b79d06a1fcdae26065fed6bb9181768c2362870dfdceddd5a501be396deb10089da67a2edc16ddf40dc01fab6aa03a41384ba501e85394fb28707102f2c777017fccb25c71a231ead131ddbfc67ddc29beb8bdb0ac83bd8bb0619955fda97bc79bcbbe962e57e7e1b8d519b73e189893fac38c19339c732e083744a9ad06a5e9bab87c20c6bba65deceafde1cc0ad1c618cea19bf50b106189fd315ccea7a7c8a5c3b46b86cea1051b73bcb5b30f305c9a3f1020d136caacc690dc5d10a4aa1ec0542618e400a5c8d6398b89649e2ce25b392cb49f3c9514219e5b0394c2391bdafd1fee762e75da57c725d65f6cb2ba6de24a6a2e3f80a14ff7799ec5a3cb9953fa34ee6f4f0d6fb0049541918b6bac7ba2ffa99c95b4a12a4dc522df79a85ac9065b39ce44f49a62d8c10d0d1c4a5bf458770fbd4f45b455deb54ce1556ae3c63ed4ac612d41aa6866884eb4d0c61a854ef711718fc435a23767818507adfa1eb32672d4cb12c34342a37dcccb4c4e5d6ec02b8dd2a16d4e9a66d8a3aa264f888295767e782d9f2516863206b465738be489cf575effbe8a83e68bbb81aeea7f47b8d641afb994d1690869f753847139ca590eb2e934ca7de7b6c052ba7c4637e8552a2b3a1a7ec134f73fbd151583b1595342720ffb291c36f37475a6468be7e316ab85e9eff70dd1b0002c9ab6bb04057977e87c7a0562e4520669ad8024484bc7813d1016e2992cf8e9e0a8ec4ebf8246c31f1f0b1328a570eba4d80e6ec454b95ad518cd8e6c0fe9b331d70044d11d5d5aa011c7f0df91fed3591720887f5377e77a4bc61156c3ab95f638bd16f0ab70203b88723363633d5222e41a7eb78ceff4ec53f02a3378f3f802fc93d05da5c02441b2a0b8c5017c1069ddd3eaf4d79c9d416ac7af2e6e46d179deeb5f9b2e847dca1373560f971878f97db5e5403d40fa718949d1ef6842ad0998ab6da23df7645afe3b69f56abf0512731b1f3cf760876599cbeca0979ef5d8ea4d7609c30188c79f6923b605dda54563ffd03c2d791afd186ce8131a18c07e476c5e59887e0cb7964a78f53f2d7ea8d3635c7fb97000468a8296781e990516990a1a63596c99b807bddc73768a088e8ac7aca3e69a2bc3c4e7e24db32fd589d1ba69a8f10959966b2cef2cc7127d766bf2db42f00bd48916eb1eb804685d3f0cd18d6acabda627faed1608d0627039c2d11111259ae06f49f72338f9a4cfde8e909521b6358b89a0f41a77f99ad272aa565dd7b8df8f68364c0290860f892db439c8436ce75aec871f1c8ee3ba2726e4c1b29d6fdae6aa0cbedbbc97e5cd48c0973b33384fb28a36beeb0856e9c8b5b793ca20c8b0cc2f6cc27fac98e88bd05fc1788efd23ed59070719870770429fff3ad6f99e397f00f43e8f3a3c37e359aad78ab4c5fcd179fdd7f76bfaa6d3412d31eca6115fbfbc702a1be1fda825d22c459c26d8c723ea7b55ff7d2fdfecc092df4102b98397d3d3867e106bb5471ea40e7806f6280c3abfed04184028a47bd05da24cbe9d8e4285623ac0dcc83f182c27f7e1bc68f450031b4d020b0bd10abf3019d9324bfbb63ddc864201ba42192611919358e8b9ff7b5c1fc8a8e449a7ecfc55e9db110ba3572f602960acccaa72ef277a35137fa02f272c948e5a68a14e3cb81bba5461a6b39876e03979b15fe4fab25d0e90166e1d3f213ef9ea08b1623f4fc7222c3b057a60f163fc4fecc44887f070e1edf17ed025878028a95169a449b6502b9a645820b63588cdd8ea218b5ed5057d1c0492744b4d2653b431610f8f17c8f5c06e5ac2cec65faea7af6cec9ad4299d76b9bef7d92086a003bb98ed4c8293875f2dbcb567f5971c25b8d70d08e80504424a373df73c84ed10faab1e744aa680102625a7a7011e3100a6ebe72fb62acbcb54248dfd5779ee5b71137b89a6b052bdae7fd299946c9c11216b15da937345cb0402741950fdcc0948cce1d3b4772e83ab7de75ea9d3f77d6e1b6156a546f234a776d0465b283bde22379d4d321886099c958b4ddf30fdec997472dca682d9607b5c93c9a14742aab37431f50bd7f7eeff5f6641771be3c8c89641f76006fdaeb5dcfa94d7ebfecfc1971aa55fa94f705527cbd3b50e90b2d605a26c8c23388587ec783d441942f4ffcee33efc45e064c710504f07e50c20fdf1f94bc34f18a84aa419aed71d49765c66ffb6bb9dd96aa626807786b96e2cd31b5a66db7fb674b934c4cfeffd075fc5b811e402873e83433f75cc3179bbd16aa582a9290fa3518a23fd9e13fbc50442d41dd3d5c88a8b87c44fa8df5522132e9e5818af7e7875a729d4d217c44c88d1b34a57dd4df6dd9ed789f329bbb21428ecda59d9aba03bbe6b6beb77eafb9cf83f7803a363e381762dd80b0638f17af74f5f942eee807a5aa0b1d950ea3ccff759a48cb5d8ced417b8391a0ba20185c4da85c28964bfb1ed7bbc860a1f002d6fb59396e13c1708520d0b5bbe3897cb793387422095bccf11844ef7684468f85324415a874777992b3b84ee1e7e93f454e4c9959c0ad5f6d3e44f728e01cf14d15f314812e57c53adc4040b11d46c353aa5eeef269c8acae8774b08f8ae62c095786410b7061a1bcddaeaf957bcd5f1805017e7ea80a34316b78ac3f2842eec3379359a721ed011ac4cf2c3fec1a374702e6ff1fc733f43497f9e702f8058deab1beadaac37dea5325d91ca6933e9045fdfbc335ce18f4114dbcec67717cbadc04661240059bcc66065126c0aa8eba288e06e2f2e6e2e37a5042a3084f594628d72d9054580ab2ef92c394645ecfb5d3a0c343800fba4d2d78cd28917d8ac4951a5ad3a39b7e76b2ed4d96659029d6f48d10b38ddd470bf7e23536784fa16ba031681b95ba69e59659cd22e286530026dc600e8dd61a8f3f6be0425356129466885dad56d93f8d5563926c78d71ca98ab1357914f1094322fa859dcf610a32dcd554b4e98760ddff2b44a0016886138c638e4f134ef8ba20745182f139ab1d5c0638f132ccae46a53670692a8fea52bde2cc4f8ea8ac71ab6c5facae1473800db70e52a8ed5dde669caf624299eac2cf90682c65a63ac98d9f62c80c77193aebc71c3beba9b65d2818aa8ff3f32e9365342ef8a34a3ab46ea5d042668cfad2d76a5b443f8b8f9b6fcf5ad0a86a708c201e68b8984bdf65358ceff500a9174cd1184631286f6d843a9607ffc44caedd5362cff87e5daf2a6d69ac05051559e95aec0d4ae9cc155e7ec572e5aa076750d0a62aab0a8db21f8f9177622196434275c1253b6c1ab35c0ab2fd810c837e6ed20ed4863392d45e65113bf30e68e9f394d3faa39ce6619e63f3b0418148ddb1c6154986ce355451e6341abb2457f80b45c07936c39ab89b6dd8c3436ada68e05b989f92b1e02c1b74fa3d995937813768b0f75d7de66dd74dfbbd00c9e4d7d73a5ca600cc618a0c65db5d2eed38b5e42a45e1739cc757e7972c4ef843c9c6313ffd458ad3e5dde7b890b4d9a846d1f1caf88dc61a904b55793dc2102e70c441e5ce597b0b637fc43359b65dc8ade86b4deecc037c0626328b0e9986984f496d4accdb8c0f41538ed1f7827f6131078ad1b9751ffe0a1a0530be907caf93cf826761cef031ccbf9faeb1788b34f34d90380e367f031540a1b25325dbb0e15c26f34914a53b1657d0c4c7db9f0e975813892ce27821b219974bb2b7a193384fde70b5878880d3e26970993a288132b48de32e20df31282aeabbb3670d4187581ee7a5df070cde29e7f75e2b26a98d6edf78b935e66bf16d818f1756a67075d10be8ae3a1c4e872980c1d3997c61d417b4ac8f118f982d3f8937aa7b5e87634c3247a88504b28581886bf8bf3031eee7223778ee7857822c731e3909ef6992999fe497481c6eb701f6c1c8da7024a200c1f8e42102586941d660d2cc08e7a370b7fba60b21b9a6cfb3c1edd695fda17a353456f8c725b59e8b978c7786629fd46cbf00b2286a38be78bb10f106f9aa66a6ecc2a60e7bb1682f5f098210e5a57f6dae90b6cebad27a762e92583684d83e2d3f498a3d1498aa8276dcb79febbd64ab76591550d5c0dc7700e7b7bcb6fd21aaba7df071549622612ef37ed42fe88385341dd93b6cf347aa7c2315889384d9dde00cd13b21c02a24aae4ef27ba17fc30de5d3f7989404fd2a2bb1a651f5a6975dfd351c6f2b0159d8472151ac54f95ddc9e615dfb4ec8f25cd5265afa68f7e9202c0df58af6b10ff612f3c2a1a9adf42cad70b9058839da17d4bc25326eaca0240dbf4c5f2dc9e5fe27ed9a4550c793b1e9ee4fd63e275a7b1bdf1a9319d87aafded19a7e9019e56d010e61a6fc3e2ba3279d1dcacf39d571c4c562fcd4481af654cd6dcb8b58e37a68d212f87cdec4c75463db171fb859b7905575acede00cd4c6aa432c4e114f584b828e075de4588ea0ac5897e68277c79f94c28d0f3384664fb79136aefd61d3591546740867f890c897e323e0425d122a77eb"]}, @generic="990fefc8683fdcf022b756dc0d5512b92d78b855a5cbdad5f28da2b676bd29ae5199636beaa964d79dd890bfac54707efd73ad9245fa7370eae6637d1c7ec26c953184d8c55e5a7796a47fc00cd7781c6051cb8c3f2c2c8f7e6b2b07af8434d1c5d50237bfb3b886cb115ca202e8d1aa36bbd522d1c891c8ddfdf4382e1cc2d6a89fa5f9f4117f946e62a2310f2295ed976bb80263bcfb266d47636bd594593baac400080fd55c62ab3d1e67e350e4efe400000000000000", @generic="d7a01a93115a9608102c6124824f94d886ca82ced88db40ad08627c2a3a125cd7714dbfdec2f04b66dfa0aae4fcc32e0d17dbcd8f3dd93c0319270f924a42feac371f2b97d3ee914d5b227123cc168185ad60b2116c64c975fc8", @typed={0x8, 0xdc, 0x0, 0x0, @uid=r3}, @typed={0x8, 0x13c, 0x0, 0x0, @pid=r4}]}, 0x11b8}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x400000, 0x0) 2.358053216s ago: executing program 4 (id=1884): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454da, &(0x7f0000000080)={'batadv0\x00'}) syz_emit_ethernet(0xbe, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c20000000800450000b0"], 0x0) sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24008000}, 0x4040000) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) close(r0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'dvmrp1\x00', 0x1}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="340000003e0007012dbd7000fcdbdf25047c000004006e001c00018006000600800a0000100007"], 0x34}}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x179846, 0x0) ioctl$TUNSETIFF(r6, 0x400454da, &(0x7f0000000140)={'batadv0\x00'}) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) getsockopt$CAN_RAW_LOOPBACK(r7, 0x65, 0x3, &(0x7f00000000c0), &(0x7f0000000200)=0x4) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000100)={'pimreg0\x00', 0x1}) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000180)={'\x00', 0x52d35ce30131f272}) 2.308018534s ago: executing program 0 (id=1885): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newtaction={0x64, 0x30, 0x9, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x5}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)=ANY=[@ANYRESOCT=r1, @ANYRES16=r1, @ANYBLOB="01000000000000000000050000000400048008000200010000400800010000000000040008803a010c8054000b800800530000000000050009", @ANYRESOCT=r0], 0x184}}, 0x81) 2.242297277s ago: executing program 1 (id=1886): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000003940)=[{{&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, 0x0}}], 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x14, &(0x7f0000000040), 0x50) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$unix(0x1, 0x5, 0x0) r2 = socket$kcm(0x2, 0x3, 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x34, r5, 0x11, 0x0, 0x3, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7f}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x34}}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000240)={@val={0x2f3a, 0x800}, @val={0x0, 0x3, 0x3, 0x1}, @ipv4=@tcp={{0x5, 0x4, 0x2, 0x2, 0xfc0, 0x68, 0x0, 0x5, 0x6, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast}, {{0x4e20, 0x4e21, 0x41424344, 0x41424344, 0x1, 0x0, 0x8, 0x40, 0x141a, 0x0, 0x15f1, {[@mptcp=@syn={0x1e, 0xc, 0x2, 0x1, 0x9, 0x4}]}}, {"b898f48a5203aec1c20360cd2ef7d58da55b659aa6992f305f3fb5d188f517abf96e559cce7d2282a54862bc80a51035e81c9f2d030a6cd6e7c83ed735fe91a467f79be2c7d85f7529eff6f03e92199b12eae0ad8d098f78165de6ccd711c6be47076c700a8a74e5b91a9355bb250b70cc5af2c4219f1cf2fa23910722a02956f3612fc9f024e77b9d745b22dacc05c41e125d6487e6ffd4ca8db7a1f2befb5708d551a43ad989dc418b24f8fefc9febd72b8504db532be5759ec8a0e4e48662c5f29dd566101c64946a9c9b8e12fd22f56093a80f345a106dc2b95ccb043f0131602e6ef13caddcc9fcfa2e40ab3b603ff5881f4fba3c8bbfffd05510a5952a6335b6e02fe85927bd050bfc265b2afd2735345a9380f5af87e6a3d2479fc06afc9252d7d28710570837daa46d2b942be5433f46ca6cc0efe65e5b874fede589d6026c20e28749a857eb0b9bd9157a247cde360572592da40909d903ef6c4c10cc06f59b45d0e0991bc820bfef700ca4e2b6aad5c32d2a8a807e9333e0eddec1c0ed393deb690e1b827db9f5da75dbc32874e5fcc5c76c05c0ec2fb1e8d5918cd09023865e9008cca311ed9672237bcf925fa09ae410683726998bf0ef51937e764e55a09e009429c8eeae288eda500541b7a33d29d492493084ba2c0a89dc61126d3fae08440bb57473adfdeadb98bdada889ebc36ae25649e5b7187e0d2dd011b39e037f3cad6e0e2161ab344173e125545945b1debe71f24213f581df639d486bf77ccc6da56997708b76eb6cbde470ad004fbfb84e8d1495a2d7bb544f282dad56316b50472015c74847e3209ef4a6edbff327ec99dd0288214d9329f433bc71698808201bf0a769d608fac5faf16c32a09c34750040d9d19aa8b4071c051338527952e5afcfd2e33a14d9f123c6dd5f1a3c47583ff6e3c154eff46c1942bbc357add5253d96f5b6dc6e440271a377b03db190ed081e2989dec4a839e1c2d7fecfaa2459f62151b9ef4716fbc15fd86812763fbaf38e4d5af6d0c8b830436770819361104f30bd8ba795f9104dfb7370d1c6940819d6432b159fbbe633a093ff4dc3c44c4623e16eddb6151ef904fc96b87957ab22230dd6c2458fbaa438d3c222c055ce4253db8fdda2077f0159fddc1306b0277d122c51cc577b2b6dee459f1bf28c6d94178a0fc3e382f6b58e1db6cda5eca7dc0720e61d59ec794a02295ccdeedc811457e30e8548a8be271c69f0cbfd08fdcfa281ec3b1ea7bb2ff784be0a732344cc0978b37507d448330149537f1de512d4952e2d6a8901be7bf9c8497ffdc3910096e2ef5c2d056f909621f1c8c90702c9469fcfb9ccda91123da96c4c8381718624e74948ce35b4ddc47982d392d84fe377a0e4edcf34f4bc814d12a5fee04ed6750b074fd046a47c59b84c6d465bce16101ced3d8f6b8a9d1d8b96f730569dd4bce831c188c236b5c600349932d42d846dbd6d5ecd07a89c6f535237567aebd4eb12bbfe5120e0c0e5f077005394e71772d796bbe82be4e014c63c8a1c4bbbddf186d94eb73313e91a97ce8ade5c6ec3defd412842f1afc7c642bbb94ce29a16ea298291519a5f5a6f5782a17fcd9af20699f70307270c5b6f88606c986aae6766130d63278b64a09fa4850ec92b72d2e19f1b8a305c237061af9f85ea6d2d33ea5c77754eaaa0b221e7883da6e95d6f031f033df057faa24c078a7ad1e922f371b076d7b492d5837f6f4a0980f882b160f581f2fdd551baf1fdccfb2677871eb55bdaf8c6c158bb9ae0684fec562045ba365ff7443c60e7381d0ffa426b98640bc6f95b8191dc2e14cec948871d5fbbfe46c6f669c1a4f98dc4cfdebe8bca4fd627acb475c9c80875d766c976116e7a2245088cc70a51242756710a6164e417d4fe7f2bb4f878df548598021f246492211d9c780a9d66b47c19e4924f2ba392a54ddbf73d61eab4c45dfa3510f705bd23c0ecc7210b3f982e328142f74e10edce9677990b862965594b9c671dc0e7c193b7df65de53f953e53ec0789a36c0895cf063ff0d2711b28e177d457192493454d07ad162c8f4a2db7db5761928fdb45311a44be6af7e170b3dd38783ceb9c5745deb957f6fc1cc073d7abe2cc5c58c29136b89c745085304457ce9e1394b1c4de3c664fa843c5183e45f65137e57b627a9938dfcb3cdf60829e5d8014534df04da80c53613a419d8811a4cc9f8a483a3488f942b1e9f69730f9861b70d6e42efbb147ce969854a56877c64a9c5e7e3852994d8d36b86aadc74c3b765307af433c23b0e963f95966beb7cc859bcf9217a52df243a41532cb4b0b316677db0104f12aca9fee6fd5908169451b0fcccf0cfdfbf3de802cc2488a532d5d7de6582c5645160c5ef673d2c95d5b8b2d99ed9486c069798f13c14eab4c99fd509fa9f879d18a5f0bdefd8f44ad0c9280ca9335ed661cb6cc22264f95e1f3443b41a044e4a15ab73f20bed9f6caa6bf231351fd882c11320e40f61718d4c43e99f98a72b459e9ce6eab66903a4ca67560e6c3579c558140e9a035d380b21064f70ed5ad62be784e4f75619fe92a4b6c22438a5907bb234570b962389228a9a454caa0579253a8d697dd890663f0bbed83e2c249dcab4db3d4124202abed769bbc90aa21ae521d9153352bec7eb6e0623fe9486bb2c1dbda0726daa64343304e6b878f768404848e5df3be0f1838f71a232cc8737fbc62172c7ee73306edf0b621e76ef35d76c86473926f47bfaaf943abcf63a81449006583ecfbbc3c498f5dd176bbff6e4e51134ffa5b92dcf4719cb789c9fec63955607da72b335ef7fe1c12dc9cdf44a9e83d7ab5a51977ba1168354a1e89bc5e420329c5864393bd3c72cd9f2c9d7b8e79f661a37f4a03105e77aaa28f4978f44abc4f89c458080e93cfaa043c105f396badc033d12dbed823a2e4d24406c7b77cd33630e6257d21a27857beaad037c1031a319d79e6103e1b7600ad9d418e5af02d372d0ddd5e328edf7245b7907632eae607992a8048a24721e8ce32a5be8adc4704c58de99613bf254d0448c452b7e81fdfd8b3c1b3ff8d573678448aef089e5477e1174bc424c77b08bf81144faadd289d04a02fc19cab03ff2cee402693fb215c4b4b12afcbc532646eed43aa6408df1b2d738e611d5082053882b5a69e0e6ae967c89ebb2980c933c04337acac94130de8e1e99acb3878685a4d0e3f7c95179f4e8d6674ced26a91099da84fa0ff485a0cab23b35de4f8091a22e22a969d1daf17549b092b0353468b3d0918f514a1248a3d4a19767bf037cff673771fa22c6ee4952728a8126eac03e50aece013d0c59bb9bc230c48f3115b37a482bae47ca56f8b10419f78195ec89dbd381a04a7ffb645ad53f60783d4997d7cab42591735ad56d565d33325715e2fc29ed8c64869485fd6e14136f4a5f66681668b519c749a790b6417a853ef04015aeeefc48bd85aa351186f728b5f1b0183c03d2168d52dbed1ce13aa3c673458dabeed746d513593b6c561a79f399b498396fd94473aa2acea127591eeeff8f691dddf95288e06203c1e779ba7f5b2b7764e8aad4a44e547d5470193acfbfac984bdda75d8b35eb2258abdcf47ee7df549d499204d19c0b89a91f1aef847f375b5cf1f0829d538d14361327073c0edb6605810f330c401270c8eb35eb97aed751feb21211a51a9031ed386fa1598618a38ae9a1c86ae64c84727b1864f64b4da71a7a3195c2757fed49945d63458d89cf5c536bdd441f3f265fc9d61a554087a9b2b83660c0c17e15d9d1d40065ba244453fb08b4ea027e3301ea254513633704ca1a496c7ad2227ca99cf07c58b1c11deb9216e940e2e1243d75b4a6882e84581cc727bcfea0d20d39cb545830a99da07659b347922df1f29ca7496e493826fac4b8f1d641fee7460e99fccd8672473e59a6c240d09a541e460e5f2945776c707212bb33a5ee5051961f21592d9ea3ae018b8fbc2140e6151f14ff033a6dbb1afbddd684b6a9d5f29b7f273b430dab91c53cd89e191adc78c7ce20bb4340425531cfc23f119a5eab1d7c73bc703b7fba48c8038c068df1f77eda5e18b2f2609d9d99de2768349987ba51cb98f698797051844c0c8637bf2f7ffac991ccf95e1b5eae9d7d25e7f3e0bdc788d99754a8be1baddafc4f0914f1a05bf8bec1a40bd2135539150da59d4163c67a575bc6dd7f2f786114c372842795601e8569e28c949e8bdc96e5a43cb6639dedf1ef1f054e0d42589a16d30e296b6dfdac6e13a6c68e03bd39dc172b6007b01793ceafa13c6379d2b820e98e9e87891e3bbdc688f62c56ef80c67ad066a53e36141af58fa9734429498580dc6d32d1c2e8cc722b4f9dd9d165d07b7b536c398df39dee06f48ad422492fe1777619f49e153ad276c86fbf8f607e7b1e9d6040889f166eb8a73ddba4668d6618b31c36b6427b1cd3cb97ef268ec1f1b049a35bceddff9147fde7309db0c474be42a6d54150172df4d5614106ea5f134cf543a70105a0a75f649d6de1a9bd3858bcccf3b220886ea6a7702dbe7f17e03a022a0ffc5145da4895bcb41da3fc5a2a10bc7b2a70a3a86ef8fa600d24894260cdbbf3c36313f3b1e9e8096921b625cb9c7f3ab8423277c9b80743a2185c95e9e7fb3f6d63669257fac197b7a73c5a4a2c4a2df52af705b46b56ade64c8a4265373a770676ec7fe3738843402f63a79f0ddb59e4bf439e4eac709a0127e9588e1538872af3916a12a1a850206392c16e17fab5a7d72bc3e9caad7bab64481728861016c124888210d06e31005ffbd39a65abbf69ce1683de2bb9f90e4955deb7afd23e90e3e11fcbd55627ab48cea806cf5da35e094bbaab42dbbdb454599a6659c2ce10845dc2beba123ae01f043c8c13c463634546e3fc913360adf2441ce3753840af235b0828ee6f74bac40d08d7b8dd8828af44a577e52e9adc86d895e1e561881320091c18bf7c466c945c4872dfc884858f5d710e0f9786878e09a906896308135097da35e465e140f22171878a42f3fe2f0872656b4ffbacc54dd99baef3c58450f1d585e3e3b8c1a9bf0f6afb9858fd6f58791382ff65d926d49f5e02abc84bd4df49ed5beec83517fbf782f983353398063831a1a4668afd7bbe2275c712497686ccff4c447f34cb4dd6b5af0f2e517fea11783d265db2c6dacb393fa3e2d484c3a62c516fe24294ca324bea8095265d560c6f68ae278c7bc34afb7309eb96fbf851af3616fd07e335d010804e60e44a57d38a2d79a19a5f9b22daec534d0379b3fe8a3a6cd8c63b585dcf00abef832b402fd3c0dd95037bb5be517b14ac6627408ba35f15cc4aa0fa96d888baa2d82b4efdf27a018330cca8a83eb587ca8a2536bdd5ab7d783044c76166d27c15299cbe3d82a612236157d25c73b19a3f454309500822206d9ea91f77ea58291d3527f85fcd7f44f1dd4bec1fdd26ee5bbc11620a62fc8c6887904b9f3bde3c640b7e4ba801f49f90e191ade5df7d39f0999a2b5e32f3385c0ec657c6ea6da3bc3d417b3b3856f92bcbbf0eb30ef02715a53dfece840180678d156e79d8149987a1172212529cec710a2bed59478371ab88b8c769ae17b8cf8b1f3d"}}}}, 0xfce) 2.240699625s ago: executing program 3 (id=1887): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="85000000ad000000799000000000000063008000000000009500050000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0x13, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x23) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r0, &(0x7f0000000f40)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000006c0)="ed", 0x1}], 0x1}}], 0x1, 0x4048841) sendmmsg$inet(r0, &(0x7f0000004f80)=[{{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f00000005c0)="e3fb46c2", 0x4}], 0x1}}], 0x1, 0x40) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) bind(r1, &(0x7f0000000100)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x2, 0x2, 0x4, 0x4, {0xa, 0x4e24, 0x5, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x9}}}, 0x80) 2.11431153s ago: executing program 3 (id=1888): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xe, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000711063000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001140)=ANY=[@ANYBLOB="bf16000000000000b70700000100e0ff5070000028000000770000000000000095000200000000007ae9413df8ff0af5aa35339f4b382c4cad9db67dc983134d04ef2fd6fa7a9b857b72abaca100af1ba23d69883c073ec10500000000000000000000000000ac0e064c27bdfbd301150500000000000000bfdc995279d64072aacbb0595b950600009ad3bf16a461e48e955a772d4062093f4cb1c3d9532abad2085401f098eb039ae4f4103699b9e079229c1a72cb6d47cef1595e84d21951010f0274b1445a2ad6a7ad73827cccc21842599e0ae7b91f0b858b7b67aa0b28d69a74ffdea61be892f0f9ff9468e42aea53ee0cb83ff180aa18b625d1667459c7cba77cff9dc8c2772fe552fecfcd1778b08381000000c0b8e14631d521207e7423d86508416780983c2f380bc01cefe9773a9a5cd5b24aa24a561e72393c0ce2bf44825b05c1779fe74f884c2472ab45c2af60289cb199963312dd1929096c6f49d116f1612a7b97f77169fa5e8a66a372ef8e3ee7167f7d2a26fc6c3cfa4dc5860277223d6eb3460e3b10a0dc9400010000ca11d7beb5e700498b43bdadc916c01264d22d7969530633f94b257fbc5da7a96820e31044c0b0f62619c9e351996185e4015510875b774666ba5c0ba9845ad25b578d7d714ff3a85586b9b452301f5470d0e0ae5d7f82f178f0c7c9c8f44c390c8a2c5be9e24a125420912ec9a3149f87b35ef1169f05e49164a4944e7b4da2097f57020dd4f1f4f15edd7a0b1e24c6f79e1ea72a29c773f40f5bd9a6d7926c5c741f5aa85405273c7967d2c1a14efe0d5322cdcf2bc058ff9acb481926312f04008b1044e8c1c17d8c562edf69f4db96e059c49ec69a6086b5a3d24f4c7810ab5f6a9f9eb5c881883e5671bbca4614df48103ca6e408910000000000f784583b63fcd46293e1ea56bd87915783a144d41669cd2c52dbb03e2b7384f100000000000000000090bd4fa6a2d30dafd3a04d373eaf151dfbbb744f0f1ce962217b32ad159f41671f002c3a25b4efbc3b193e0954f71c7f240a7cdc5bf9be12ca0e82d2a408c8f882760331612a7c3d74386b3268e0c2a95396f6d16b8309cc192295fea2d0ce983baef6deecca6b6268b6cc965f2623bac861e31026a6aba7ebf78a614092257e3a4e52b7b1628dc33a425dce56fc939b96fbb66e131ba7651b542c86650336735d315c26bae977ff5a619b2534a5d1479e9090447aa860b81b905ded2f52ab9c741fc3a05030476b159690a811416d59f9d92c84fcbf0146be0330e1127cc4bb4e4c94d603f449279874e44113e9de94fbc14891af08e20a4701f0f8788b357815cf4ca3da2066ee6604ac6ab6ec54a111bd5b1887e74eb854010cc2dc95b06ceddfbc1b914be267fc29e6cf2301291ca8de0eed796d9e5e356861349b0fc217592e962360e714bb93a2e936f70873e773b9b6c056f28a36185bb8ecdcd3332528ab2d05be93bc69a373ac9d20fa087015481cfba74612d93104db153f89d03d6ce620f1f25be68b9cb2d225711c1b288ec6464111db1b40dbce06fd1bd887d7254476c9c70fe79be0fb7810e054b6e2205c2b4b27f13751639c581dac83889ed6eea54c798f2287c9d5345b0c49f78b9aa27a9c96ce5e43b6ca11bb6375ed390773315d19b596a60500330115bb100d0ea1511e29720d5f712eedd8e165af0c1d591fdbbd84e654b0e60c338c530a9e8ae1316a889134204f9db96e870bc1c5ffc1bdb2394d77e6c751f9d87ef42f6d53293f31ff4b60912fa0777c59db1ff74ba90026eed627e0f8ab250c8c6d51d86030e6be4a8982684c12c1c435d586ce106d0b4cd0f5fabcc5fbe30db5e715646867122ef50f767e215f92d407ad1c6575eccfe25f76aaf388008ec2217c9ba0f807edebe686b420287b6e0c6f14a48c82ec45f1aa7ac2508932d0e3a5834a1a4e20bc9bb2a802304900d6bef57bd9c081b45520e7bd491a0ef1bfec4721cc70962f4d55f01bae699cb3fe31c179f00dc79140333fa4e85ec393dd01bdc5bf79677453a30c63d1561a35c5e94e3cad80136e753052b08901965293bcf5f9de9c8019a1fdebddb255427326deea4506d2cc2949df6a5c13fbcc36cbcd0f0d35602668c3bc7c7264457f161a51"], &(0x7f0000000140)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r0, 0x0, 0xe, 0x0, &(0x7f0000000240)="ffffffff75664a0a90f73e9eb3cf", 0x0, 0x6100, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000200)={0x0, 0x0}, 0x8) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r2, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000001c0)='sched_process_wait\x00', r3}, 0x18) r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r4}, 0x8) r6 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="85000000070000006a0a00ff000000220c00000000000000950000000000000018100000", @ANYRES32, @ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000002c0)={@ifindex, r6, 0x11, 0x0, 0x0, @void, @value=r5}, 0x20) writev(0xffffffffffffffff, &(0x7f0000000300)=[{0x0}], 0x1) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000003500)=[{0x0}], 0x1) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000c40)={0x6, 0x10, &(0x7f00000009c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x10000}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@exit], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000a40)='syzkaller\x00', 0x6, 0xb3, &(0x7f0000000a80)=""/179, 0x40f00, 0x44, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000b40)={0x0, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000b80)=[r5, r5, r5, r5], &(0x7f0000000bc0)=[{0x1, 0x3, 0xe}, {0x2, 0x4, 0xe, 0x9}, {0x2, 0x2, 0x2, 0x7}, {0x0, 0x1, 0xa, 0x9}, {0x2, 0x1, 0x2, 0x4}, {0x4, 0x2, 0x0, 0x3}], 0x10, 0x4a}, 0x94) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000980)={@cgroup=r5, r6, 0x7, 0x0, 0x0, @void, @value=r8}, 0x20) setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) r9 = socket(0x11, 0x3, 0x80000001) bind$can_j1939(r9, &(0x7f0000000080), 0x18) getsockopt$PNPIPE_IFINDEX(r5, 0x113, 0x2, &(0x7f0000000540)=0x0, &(0x7f00000007c0)=0x4) sendmsg$inet(r9, &(0x7f0000000940)={&(0x7f0000000440)={0x2, 0x4e23, @multicast2}, 0x10, &(0x7f0000000480)=[{&(0x7f0000000600)="5615a4a8ad59aa79577e4494e2637b5dce866dd5b1cc7a2e5dc6e21d88e71940fd805ca4b5629986195433ec4987d6b49d8e8b2ebc3eecf96ace80a8d2e5314032231354487354d0ed7633400fd7730f5ab712090aec49c17e3577687daf9977e97d338abc93f517a33f8621e7be85b187749480d54d7e1b44c0867c83adb175e3914e1bc6c94503db2984bcda869817da9f28885eaab1305d77d414d6ccb25acb2f3d3e6b859867edbda06652b9", 0xae}, {&(0x7f00000006c0)="c274ace56ee0023fcf701a0f6e56609db2fe586023a71fec540e404d8240f92bf8868151f47b260499e957094a196c7bb2c2a125c2e5c162cfd3f50c7f5ada566bb34401f6773d38c3c3433f7b4cfc40ad949e", 0x53}, {&(0x7f0000000740)="3809a564450d009e682e3e4a3e7aee220ca18bb23b24cfef236e3d8d94a2eeb33c90bc4268eb87e825de3d9bb71f6192d2fd453d3cdae62bb04afe3673d5bdec1972fb394635c8db2c0f31ac64852cb851e09c55d61efb2d5886b00e42e4fd5483d7901d905500ce3e720f395c522aa4c0307163a4", 0x75}], 0x3, &(0x7f0000000800)=[@ip_ttl={{0x14, 0x0, 0x2, 0xfffff801}}, @ip_retopts={{0xf4, 0x0, 0x7, {[@generic={0x94, 0x5, "5ef460"}, @rr={0x7, 0xf, 0x80, [@private=0xa010101, @empty, @remote]}, @ssrr={0x89, 0x7, 0xe1, [@loopback]}, @timestamp_prespec={0x44, 0x2c, 0x33, 0x3, 0x7, [{@loopback, 0x7}, {@local, 0xfbdc}, {@rand_addr=0x64010102, 0xea3a}, {@loopback}, {@multicast1, 0x2}]}, @cipso={0x86, 0x2f, 0x1, [{0x5, 0x12, "6ee4642bc533b1b0cee610f65f00fcb4"}, {0x1, 0x9, "2e00c75713f77f"}, {0x4, 0xe, "b52be0164684c525e3470449"}]}, @lsrr={0x83, 0x1f, 0x46, [@local, @remote, @multicast2, @remote, @empty, @remote, @multicast1]}, @lsrr={0x83, 0x23, 0x23, [@dev={0xac, 0x14, 0x14, 0x23}, @multicast2, @broadcast, @dev={0xac, 0x14, 0x14, 0x13}, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @remote, @multicast2]}, @rr={0x7, 0xf, 0x8d, [@private=0xa010100, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @timestamp={0x44, 0x1c, 0xb2, 0x0, 0x7, [0x3, 0x3, 0x2, 0x0, 0x4, 0xfffffffb]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r10, @local, @rand_addr=0x64010101}}}], 0x130}, 0xc0) bind$inet6(r7, 0x0, 0x0) bind$inet6(r7, &(0x7f0000000280)={0xa, 0x4e22, 0x0, @loopback, 0x3ff}, 0x1c) listen(r7, 0x0) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000280)=r1, 0x4) 2.106113552s ago: executing program 0 (id=1889): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="580100001000130726bd70000000000020010000000000000000000000000000000000000000000000000000000000004e22000100000002020000006c000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fe8000000000000000000000000000bb0000000032000000ac1414aa000000000000000000000000feffffffffffffff000000000000000085ea0000000000000a000000000000000600000000000000000000000000000000000000000000000300200000000000000000000000000000000000000000000200000000000000f8ffffffffffffff0c000000000000000200000029bd7000000000000a000100280000000000000068001200726663343534332867636d2861657329290000000000000000000000000000000000000000000000000000840000000000000000000000000000000000000000e000000080"], 0x158}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 2.023873938s ago: executing program 3 (id=1890): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(gcm(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000009c0)="ad56b6c5820fae9d6dcd3292ea54c7be8bbdadbb1632ea5704cae881ef915d374c90c200", 0x24) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg$qrtr(r2, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000700)=""/192, 0xc0}], 0x1, 0x0, 0x0, 0x10000}, 0x38, 0x2) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0xfffc}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_SOCKET_KEY={0x8}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xd8}, 0x1, 0x0, 0x0, 0x8000}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$alg(0x26, 0x5, 0x0) (async) bind$alg(r1, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(gcm(aes))\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000009c0)="ad56b6c5820fae9d6dcd3292ea54c7be8bbdadbb1632ea5704cae881ef915d374c90c200", 0x24) (async) accept4(r1, 0x0, 0x0, 0x800) (async) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) (async) recvmsg$qrtr(r2, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000700)=""/192, 0xc0}], 0x1, 0x0, 0x0, 0x10000}, 0x38, 0x2) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0xfffc}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_SOCKET_KEY={0x8}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xd8}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async) 1.970626275s ago: executing program 0 (id=1891): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r2, &(0x7f0000000000)="c0", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x15}, 0x1c) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r2, 0x84, 0x1a, 0x0, &(0x7f0000000100)) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000095c8ac4cd774ddb50000000000000000", @ANYRES32=0x0, @ANYBLOB="46060900000000001400350065727370616e300000000000000000000500210002000000"], 0x3c}, 0x1, 0x0, 0x0, 0x600}, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r1, 0x8983, &(0x7f00000000c0)={0x6, 'veth1_to_bond\x00', {0x73d}, 0xfff}) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000b40)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000c00)="93bffce623851797a8dc7901f0048678cd35ef833c350900f95a94770a6845b091e69f243dea0d601c54e9c93ee3568b89a3427c84262ff67b679ccac305b5cea1dcd151d7bb5754603b6b0e36168041bdc61529260e6c4046d55927c96dcce1609b9c4f8424b9da760270a470f95b99ebb600"/134, 0x86}, {&(0x7f0000000000)="029993440c7a1d9531361ecdc91c14b06273864cd3bb8cf353fd63c588ffa39f0ff0fced20927ea4b2a247d082247558bef6b2b2cd6a0dffece1b36526e9388c344fb7ac429e430bcb", 0x49}], 0x2}}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000000200)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x26}}, 0x10, &(0x7f00000009c0)=[{&(0x7f0000000240)="1edafcc7a43bea5ac132d16a6f8362569124c6199498a909ad7177365f431746913f2f015164063aa43280dcf7bf07b113ebe152defe", 0x36}, {&(0x7f00000003c0)="547688c416e62757c42d59585d2e0e61ab6997b3025cec860d181d2ab516da4689e44a1f37fc5f0aecfb2e6326c496a880898c26d3b9293ea85f659d44dbc857fc409ca964babd685efecb40a1f4af15c74afb32186b3594be4ec2e56cd4577652b698297cf5b8847e254f5c83c9a79f8da4fb8be971fc0803a2ef69e1fb5cc2b1b76c58639bfc6cb23a17c034da21388a92bfde5c4676b131", 0x99}, {&(0x7f0000000640)="f0760a2d4a464bb225b0c56fcca52151799d19af5b2fbc87b23dd7fb1cc1a899ea805d41ba467bd9ad721e3caa89913b2e643ba2ed041735d1d47968958129b122f76ce0c0baed24c8bf421ba623348e9916cb7ab697323a24fc43e471a8dc5873613641e84f0fadd33d5773add7d277c0e71cadaa06d8b9106ff5a552e72dc246d779c59df4beea2811e90e41579629fda46671e93b0b2d1907fb29952e91b3e0a1d4a21b426f8a67e4c8", 0xab}, {&(0x7f0000000700)="dac83fb7850c99e92602d4c519854bad51c33d314e2956f8cb93dd4c8ed596cedfbbbb24bad6e22c8a01b54983964dacac9ed4524ee6027b721be9f2a9e97d54352b16a8c2621a7ac68a9017d9ff3bcd956e164d4ddc76b79b2c2b99c863517a77c3c4fce4c2e45ced4250a1bf1ceac15e360108a5b0e973a8f427d59ab7b060ed5b0b927745a1bf4991d1a735a5ccfc67d7fe61225fe4c87d2a7b3c", 0x9c}, {0x0}, {&(0x7f00000008c0)="5899b95bf9f2bc5b3dc29e05331dafe22445f99ec0ab486f0d054ab8dc80fccd57be1d68331f179341ca643b87c21bb1cc7a522e2eafd7a95f952b873fdf32e0d84354dc15e9380286d3a66e665c9f8a2bd940ac8257127088f34cf2b28dfbb725f8dc0098e81bce", 0x68}], 0x6}}], 0x3, 0xc0) 1.89018634s ago: executing program 3 (id=1892): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f0000000200)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000180000003d030100000000009518f000000000006926000000000000bf67000000000000560602000f0200006706000020000000620a00ff0ee60000bf250000000000002d350000000000006507000002080000070700004c0000001f75000000000000bf54000000000000070400000400f9ffcd35010000000000ce040000000000001c000000000000009500000000000000db13d5d8b741f2cdaabc8383c8f56bb5df3083d20f8c2bf304000000815dcf0066d7ded3c5c49a08a503ea6d54f7f3125a8200578ac0836d6454745e70a27444003c5b20451b624db6f5320e9befc1e00b8b32917c4d30d16b7edb732bc3ac330b16c442aff70d27659bc58e296b16750c5577c848754b4894b07f15bab1c640a5c0c4fd62f9db829b301ef67fd2b2736f3af0c54af2412313b17c4c8081c4ed0572261960e227d34cfbfdb247bc2351c9d8363a8cb18b7330604da78b0aba47545f9a25a80dd7d28a5ae41824f611dd2de6dd581c52698f9542a444a8a3969946faded5275c00"/420], &(0x7f0000000100)='GPL\x00'}, 0x48) 1.827672312s ago: executing program 3 (id=1893): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0}, 0x48) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000003f000000000000000000f195", @ANYRESHEX=r0, @ANYRES64, @ANYRES8=r0], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r1, 0x10, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c0000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="00000000120000000c002b8008000100", @ANYRES32, @ANYBLOB="08001b"], 0x3c}}, 0x0) 1.598360844s ago: executing program 2 (id=1894): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{}, {0x0, 0x2}]}]}}, &(0x7f0000000540)=""/228, 0x36, 0xe4, 0x1}, 0x20) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000d00)={{0x14}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x54}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940001000000fcffc50000000f00000095"], &(0x7f00000001c0)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x101}, 0x90) sendmsg$NFT_MSG_GETRULE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)={0x38, 0x7, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x1}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040}, 0x0) 1.537201978s ago: executing program 2 (id=1895): bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x12, 0xb, 0x8, 0x2}, 0x48) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000050000000000000000000024000a20000000000a1f000000000000000000010000000900010073797a300000000058000000030a0104000000000000000001000000090003803d2175fbe782c2002c00048008000240172af2e40800014000000003080002401c791e7108000240423930ce08000140000000030900010073797a300000000088000000060a010400000000000000000100000008000b400000000014000480100001800b0001006e756d67656e00000900010073797a30000000004c0004804800018008000100666962003c000280080003400000000c0800014000000002080001"], 0x122}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, {0xfff1, 0x3}, {0x6}, {0x4, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x20040080}, 0x40004) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000900000000000008000003000000040004001c000180180010"], 0x34}}, 0x84) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r1) sendmsg$NL80211_CMD_GET_WOWLAN(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x24, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x57}, @val={0x8, 0x3, r3}, @void}}}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) 235.315079ms ago: executing program 3 (id=1896): r0 = socket$xdp(0x2c, 0x3, 0x0) (async, rerun: 32) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r1) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f00000007c0)={0x34, r3, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @local}, @NLBL_MGMT_A_IPV4MASK={0x5, 0x8, @multicast1}, @NLBL_MGMT_A_FAMILY={0x6}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x34}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000100)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x2, @local, @rand_addr=0x64010100, @empty, @dev={0xac, 0x14, 0x14, 0x20}}}}}, 0x0) (async) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r4, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @link_local}, 0x14) (async) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, 0x0, &(0x7f0000000200)) (async) r6 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r6, &(0x7f0000000040)={0x24, @short={0x2, 0xffff}}, 0x14) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 64) r8 = socket$l2tp(0x2, 0x2, 0x73) (rerun: 64) setsockopt$inet_mreqsrc(r8, 0x0, 0x28, &(0x7f0000000000)={@empty, @dev={0xac, 0x14, 0x14, 0x29}, @broadcast}, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async, rerun: 32) sendmsg$NFT_BATCH(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a50000000060a0b040000000000000000020000002400048020000180080001006c6f670014000280060001400000000008000540000000000900010073797a00000000000008000073797a3200000000140000001100010000000000000000000000000ade465480bc2f0f50b7005ca990753a19267012a544d22476e165a0c292105b3f4df2bc5baeda79d571974ad50399d9f13dad917baa0bfc53c472f8cea007c9eca0323392a905989699107e5dd97be2f3d042d853adcd0aa21890d01ad33878d434f585708f72e53326a5a18acca56dbd838b0dcbf3ff05edcb1e312f918f2970c8aa5818e8622682d813d762fa0053fe117cb86caec51b928251a8ffd51220b90c4531c0fe3f386b3397afe9b4676bd17f495e75ec0cf63d"], 0x78}}, 0x0) (rerun: 32) 183.997764ms ago: executing program 0 (id=1897): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000000040)={'batadv0\x00', {0x2, 0x4e21, @loopback}}) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_FSGETXATTR(r2, 0x801c581f, &(0x7f0000000080)={0x3, 0x8, 0xddb8, 0x9, 0x1f}) ioctl$AUTOFS_IOC_ASKUMOUNT(r1, 0x80049370, &(0x7f00000000c0)) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000200)={'erspan0\x00', &(0x7f0000000100)={'erspan0\x00', 0x0, 0x8000, 0x80, 0xccb, 0x0, {{0x30, 0x4, 0x3, 0x31, 0xc0, 0x68, 0x0, 0x2, 0x4, 0x0, @broadcast, @loopback, {[@ra={0x94, 0x4}, @noop, @ra={0x94, 0x4}, @timestamp={0x44, 0x24, 0x54, 0x0, 0xd, [0x1, 0x9, 0x1ff, 0x7, 0x9, 0x1, 0x1, 0x9d]}, @timestamp_prespec={0x44, 0x14, 0x2a, 0x3, 0x8, [{@broadcast, 0x8}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xd7e6}]}, @cipso={0x86, 0x6b, 0x1, [{0x6, 0x12, "0d19613d935bd0bb94390da601d7c0bd"}, {0x6, 0xb, "cafe5caa45b39ead34"}, {0x6, 0xf, "310a74ac20a43869c6baabf23d"}, {0x6, 0x3, "d5"}, {0x0, 0xa, "7d0cb58d69cb2659"}, {0x5, 0x9, "b346aab8e860b9"}, {0x6, 0xc, "aa293d4f87d100eb104a"}, {0x5, 0x9, "aa574ad820c42e"}, {0x0, 0xe, "ffec92f5e1c9d5eb57e01e26"}]}]}}}}}) ioctl$sock_TIOCINQ(r2, 0x541b, &(0x7f0000000240)) ioctl(r1, 0x9, &(0x7f0000000280)="cc5c6e9724768084130776a162b8e00ce2769fc8db6fcf0f83bf5ee25208fbef722682f2d7be5ad98e0ac90e4854196b63a5aba2ea4e8f1d4251ce0923bc53199bca26d95764aac1b2e12df87805ef072261a827469955a9066aa0b2ebf9da4a6dddcbc3820b48d08d445dd80999f238468d1a6e681c0e40d14f56398c5b1fdc917b9c93722520315641823529c17481ea866e3e4e831b6005dd8ec3e0e76cbbab4b16f865b14796119e7f4dae10d4ae5b6c7c39b2acba21d3febb1a36dd3651957f3307307c200ffc04c621725610f952820ef099c54f35") r4 = socket$phonet(0x23, 0x2, 0x1) recvfrom$phonet(r4, &(0x7f0000000380)=""/95, 0x5f, 0x40010140, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x2010, r2, 0x9fc6f000) r5 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$inet_icmp_ICMP_FILTER(r5, 0x1, 0x1, &(0x7f0000000400)={0x80}, 0x4) (async) getpeername(r2, &(0x7f0000000440)=@ieee802154={0x24, @long}, &(0x7f00000004c0)=0x80) (async) getsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000500), &(0x7f0000000540)=0x8) (async) close(r2) (async) ioctl$BTRFS_IOC_DEV_REPLACE(r5, 0xca289435, &(0x7f0000000580)={0x0, 0x8001, @status={[0x9, 0x599, 0xffffffffffffffff, 0x6, 0x7, 0x8000000000000000]}, [0xd999, 0x7, 0x0, 0x100000000, 0x1ff, 0xfffffffffffffffa, 0xfffffffffffffffd, 0x7fffffff, 0x6, 0x100, 0x4, 0xfffffffffffffff7, 0x1, 0x2, 0x3, 0x4, 0x1, 0x8000, 0x10001, 0x0, 0x0, 0x10000, 0xffff, 0x4, 0xa, 0x766, 0x200, 0xffffffffffffff81, 0xfffffffff70126a8, 0x7, 0x5, 0xfff, 0x685, 0xffffffffffffff06, 0x81, 0x7, 0x9, 0x9, 0x6, 0x2, 0xb6b9000000000, 0x3, 0x4, 0x3, 0x1, 0x3515, 0x0, 0x2, 0x800, 0x6, 0x100, 0x0, 0x3dc3, 0xa00000, 0x5, 0x0, 0x2, 0x1, 0x1, 0x7, 0x2, 0x8, 0x7ff, 0x4]}) bind$ax25(r4, &(0x7f0000000fc0)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x6}, [@default, @null, @default, @bcast, @null, @null, @null, @default]}, 0x48) (async) shutdown(r4, 0x0) (async) r6 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_ifreq(r6, 0x8917, &(0x7f0000001080)={'bridge0\x00', @ifru_settings={0x9, 0x4, @raw_hdlc=&(0x7f0000001040)={0x5}}}) (async) ioctl$BTRFS_IOC_GET_FEATURES(r2, 0x80189439, &(0x7f00000010c0)) (async) r7 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_NODELAY(r7, 0x84, 0x3, &(0x7f0000001100)=0x9, 0x4) (async, rerun: 64) r8 = socket$inet6_icmp(0xa, 0x2, 0x3a) (rerun: 64) bind$inet6(r8, &(0x7f0000001140)={0xa, 0x4e23, 0xb, @private0, 0x9}, 0x1c) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000001240)={@l2tp6={0xa, 0x0, 0x3a6, @loopback, 0x8, 0x3}, {&(0x7f0000001180)=""/65, 0x41}, &(0x7f0000001200)}, 0xa0) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) (async) r10 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001340), r2) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r9, &(0x7f0000001440)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001400)={&(0x7f0000001380)={0x70, r10, 0x300, 0x70bd2c, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x8}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x14}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r3}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x13}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x14}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x1}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x3}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}]}, 0x70}, 0x1, 0x0, 0x0, 0x2000c800}, 0x44004) 183.432442ms ago: executing program 2 (id=1898): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x60ae0}], 0x318, 0x0, 0xdb0, 0xf5ffffff}, 0x3f01) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x18, &(0x7f00000000c0), 0x31}, 0x0) sendmmsg$sock(r1, &(0x7f0000002c80)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000008c0)="9a1646e333841dd817f884072bcfc4e86d09eae42c771150d2a0f7409c1370d3638a8b435039d8f5f5a58fd9696b618dee51e4869aced576ce4348d9b259fb3273c6a36fc309164021180c785a3c299cbf15a38790db0474eb0b41d11d4893959adec407e9ba742652a28fc5165a05b7593682298736a7ccd86db5f3758d2939e9992035d6de58a4b803a94a72a31139fd6e1f77b7e96492191da02c8bfd789de8bc6acd5484430d64a233fd9512f3d646d33db37e305f92dc1db89bd85b2689c942b596c0a45c4efff576", 0xcb}, {&(0x7f0000000fc0)="efaf7a93d21cbcbd56d058e53b498eb5aec446ded5a0a15afc4a85e66ba967dd32bdaa041334d821c83f07626dff625725d9d7f2454a3c0354409cd461092701a394007cca7bf7ed39cb6d0860fc9fffc3867688808a8a9fa32d9c9f797ac6d2f35665413642d174ba233adaa36bf0d40144a05abc9458f98e5738d6952053397589681183bf74246782eaa788d1afbf227f54319c505f1678a3165181261067da7d2cc5ce2f9a8ca0b99fa09f8e95675cd7666c5e2edb4b8029c371ccfe0497285e0e223106e4b43dbbdae8faa67a625fff23346e701f1c8cf9b6cd0d485c422d1c07b63988d3377dfe6634b1e184", 0xef}, {&(0x7f0000000ac0)="8f30e4f3a357d24b35a884da0ffdc5c42f7ce57129b691f99daded3f1e2aa5f6738c747cd9fa7b3e59a5a24970b0a2a5bcc8cd72fc0a6e472442b441e273146cb840d20afb23fa12cfaaf4d54ffea9bdaf5d445e4773e815b6462cdc4b449d55a1d007a07e49cef17635abf4c4986abcc36fc5529e63aa97265af26fd3286548b2a7932c81883c382b1598d0761891370633573d40cd4b425576ff4998bf040fa0aef4b64392fc7f7b6fafb4a073a88f883f16c9c771664b430d91", 0xbb}, {&(0x7f0000000b80)="3b3d07b7091f697381965e2e7909f9f6f54a284af3f8fdb1c24e6d0c4a7f58ffca9b24b191f510fbf55fd3e76154e2a4fe1e14c7bbff4c24907805f79e2a90f0d8c8faccbd2243475ecfa1f5fac83b8910baf212596b2a4a23aab8eb9cfa683836af5e50b1bc4f815b49fc47f85fe32f", 0x70}], 0x4}}, {{0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f0000000d80)="d51927d7b27f39aa725cb19a990f66ac9aae2f7d92045a4c05e60f4dc5dc6c4e4ac8449b9915fb289bf1692a4c7d9440950ee716b680274b3c53048b6a2aeca47c5e6987db6b4fb364fa1e1709caa0696b9e02eabc8757ef2dd6a17f3efa", 0x5e}, {&(0x7f0000000e00)="96bc7002996addfa3b96a5e4de4cf18b08fa24022c9e", 0x16}, {&(0x7f0000000e40)="1304235350b0171b15c5c7a6c9861d", 0xf}, {&(0x7f0000000e80)="048dc9fb57afe301fd6f4184903098607627504035b7aa74e71b85eaa192909644d18f5695718d3c3532f6ed73c2422e87", 0x31}], 0x4}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0) setsockopt(r1, 0x9, 0x5, &(0x7f0000000140)="3509c540d2eb1a26f237a2d11af83e29bd1336236aec87031ee124c420bff10719857400779540cffc04c3f2250b69590cf3f4c732ebe3575181ccd4b11fc0569a3191a75da3707b7952c36fc66d8367b190db00f2e83fe95926cb39a4e2243abe82896cee7ce713b217e06922c9015e3ad16fc7d841a5cd8351e1c4324e7c02121273ecb53babe4879ab96614f821a0277314c24ad00a24659bb7d2a42085e7ad994eae563fc79295f466e13f88aae38353ff5052558c361d5eecc65f1de7460637408ac660664e3727ae6f7fd16ce2e18fb95c3576d6f72ec22539ea181e812b9f4e4e7d", 0xe5) 168.944875ms ago: executing program 4 (id=1899): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_LOG_GROUP={0x6}, @NFTA_LOG_FLAGS={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@newtaction={0x8c, 0x30, 0xb, 0x0, 0x0, {}, [{0x78, 0x1, [@m_ct={0x74, 0x1, 0x0, 0x0, {{0x7}, {0x4c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}, @TCA_CT_LABELS={0x14, 0x7, "4614c334e344ae53204373dc0ddeb17f"}, @TCA_CT_LABELS_MASK={0x14, 0x8, "eb6404074c369780d3df843c4e5e039f"}, @TCA_CT_ZONE={0x6}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x8c}}, 0x0) 112.166744ms ago: executing program 1 (id=1900): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x7, 0x4932, 0x7f, 0x1, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0xca, r0}, 0x38) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000008850000007600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=@newtaction={0x94, 0x30, 0xffffffffffffffff, 0x0, 0x40002, {}, [{0x80, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x64, 0x7, 0x8, 0x1}}, @TCA_ACT_BPF_FD={0x8, 0x5, r2}]}, {0x4}, {0xc}, {0xc}}}, @m_police={0x30, 0x2, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r3 = socket(0x1e, 0x805, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x80, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2}, [@IFLA_LINKINFO={0x60, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x54, 0x2, 0x0, 0x1, [@IFLA_GTP_LOCAL={0x8, 0x7, @multicast2}, @IFLA_GTP_FD0={0x8, 0x1, @udp6=r3}, @IFLA_GTP_PDP_HASHSIZE={0x8, 0x3, 0x2}, @IFLA_GTP_LOCAL6={0x14, 0x8, @local}, @IFLA_GTP_CREATE_SOCKETS={0x5, 0x5, 0x1}, @IFLA_GTP_LOCAL6={0x14, 0x8, @empty}, @IFLA_GTP_FD1={0x8, 0x2, @udp6=r3}]}}}]}, 0x80}}, 0x0) ioctl$sock_netrom_SIOCADDRT(r3, 0x890b, &(0x7f0000000280)={0x20f3d11ca51fc9ad, @default, @rose={'rose', 0x0}, 0x5, 'syz0\x00', @bcast, 0x1, 0x7, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @null, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast]}) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r5) 2.67713ms ago: executing program 2 (id=1901): ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000000c0)={0xffffffffffffffff}) connect$qrtr(r0, &(0x7f0000000100)={0x2a, 0xffffffffffffffff, 0x7fff}, 0xc) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth0_vlan\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newqdisc={0x24, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x0, 0x2}, {0xffff, 0xffff}, {0x2, 0xfff3}}}, 0x24}}, 0x20008000) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmsg$DCCPDIAG_GETSOCK(r4, &(0x7f00000001c0)={&(0x7f0000000140), 0xc, &(0x7f0000000180)={&(0x7f0000000280)={0x488, 0x13, 0x100, 0x70bd25, 0x25dfdbfc, {0x27, 0x21, 0xc8, 0x7, {0x4e20, 0x4e24, [0x9, 0x8, 0x0, 0xf62d], [0x7, 0x6, 0x8, 0x6], 0x0, [0x7, 0x7]}, 0x7ff, 0xe}, [@INET_DIAG_REQ_BYTECODE={0x99, 0x1, "2157c66a8753edaedd54f6f129824f6d348ee4d54ca3c95177d63a15b2afbc5f53ed3b17655a299e4e7b82ea89f3ee617985575b378306a1a2b537e6ed00c07ea11eec3711b1261121ce721488d707f9e92f2e3ab25b6d5490781c0bf91591f5047b1d4e6f7287adbeaa53fea10201b76775f332f9476ecdca5d153dd18480c096ea816200e817342e279b54ac22fb0c4c80cf5f9e"}, @INET_DIAG_REQ_BYTECODE={0x2a, 0x1, "4f1b6836b4904043f3ffeb30f1e6650cec29f4175a0cca26431a17a238131bcca3171742ccb8"}, @INET_DIAG_REQ_BYTECODE={0x8a, 0x1, "188e5cb500eff0b3ea4d62cd48d6be7bc663d6d73527eb257dd20dfbb7152c0f2715911c81134cd002bcdd4fa02d451aa0de257ca9dc007b20496434270a4912a07148302728e157547a391e80f1e5c019a5b93241a34c485391bd5d0105f9879c38d1d38fc040fb7e75ea32e9bda514b384e2bc77ff9f4d0c17a83a8f16cecf166d181d46b9"}, @INET_DIAG_REQ_BYTECODE={0x82, 0x1, "0967af20b8af06d639672ae77061ec702188c52507970282d2cd9965111211f781b6560318c894ea7f4b452f50aaa3d2c046d03a5e4ed32bee39cdbb5365e467a7f3ed5d2b4c6255b319f0794f596b00471432c2ed24a7f5bfacef7d08bc95dbbe9414f7944cae5fe6ea18b5ea71dd20149b1bedc24809b3fa009fee4d3e"}, @INET_DIAG_REQ_BYTECODE={0xd, 0x1, "1c41aab39b208abfdd"}, @INET_DIAG_REQ_BYTECODE={0x7e, 0x1, "e86feece6948c103e8eb5488c1a0414db76b9697605023a868a40b75eb0ec640d2ccd95f52d54aaa58cd8e3749b9027108157018e367a9f8f8ef4d8b48dfea76b93f42bcd450cff62300a6e1dff7bd779dc523969f681e1a386581be94c97fe40dbc515157b94fb08201f1558f4cff57c41369ba8b145d0387d0"}, @INET_DIAG_REQ_BYTECODE={0x58, 0x1, "5dfd0da5f700bcb7981bfe46c2bcc552169dded118358289f8b8ff4d295ddce0f451934b7e74723aa6a8d501ff0a444c72dd1485b918eff94b5d71521b785919ff7ef9bf76dd8a20e9637f87a5b2a28286526540"}, @INET_DIAG_REQ_BYTECODE={0x85, 0x1, "84dae34a311bc1b53ea0ac00e8eccf1d5f64101a5b09e9b71f5d46847f80608438c06bf06836a03843dcff60be1c960c5e5e7708795d33d322141d85b0f8b7792b987cc08b723e9ed0a2848a453a02746e32b906256978e6e8a5036aec8c76109f0687062f898a97712519d3575de245521ad31e9d663d1c1619f2fb3bf474f50e"}, @INET_DIAG_REQ_BYTECODE={0xa2, 0x1, "b3563f18b3b5ef1cf542d15fc10e9985ebe2cefa34bacbd1cc66257d999611f7365c99e2b3f5b5570109003489ec1d6e03b63fe69b4c040b29d95b48c8b64cef4e6fb161d8757d086ea23237e602f09478344fc37e13bf47bd51109016d81463dff632cc730a9e84388af05c832879d2ae84cff9de0872904b4ff0a82e78c88a1d54e81380883a4ff7937b5c9aa035348a49291ff846173c79c1322556ea"}, @INET_DIAG_REQ_BYTECODE={0x50, 0x1, "7f523ad4c669a0685edec561ed9b988f1851376bf0775fa58c3b3c4b577a17d4ca742d01730e075710d482068a4d2f886ea2fa2473518f475521132cc1ef9ba00309dadab51a8f86a67339a5"}]}, 0x488}, 0x1, 0x0, 0x0, 0x801}, 0x8040) r5 = socket$kcm(0x10, 0x2, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r4, 0xc400941d, &(0x7f0000000800)={0x0, 0xd5, 0x1}) ioctl$BTRFS_IOC_RESIZE(r4, 0x50009403, &(0x7f0000000200)={{r3}, {@val={r7}, @actul_num={@val=0x2b, 0x1, 0x50}}}) getsockname$packet(r6, 0x0, &(0x7f0000000000)) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="0439000025"], 0x33fe0) ioctl$int_in(r1, 0x5421, &(0x7f0000000040)=0x5) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000000c0)) (async) connect$qrtr(r0, &(0x7f0000000100)={0x2a, 0xffffffffffffffff, 0x7fff}, 0xc) (async) socket$packet(0x11, 0x2, 0x300) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth0_vlan\x00'}) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newqdisc={0x24, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x0, 0x2}, {0xffff, 0xffff}, {0x2, 0xfff3}}}, 0x24}}, 0x20008000) (async) socket(0x1e, 0x4, 0x0) (async) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) (async) sendmsg$DCCPDIAG_GETSOCK(r4, &(0x7f00000001c0)={&(0x7f0000000140), 0xc, &(0x7f0000000180)={&(0x7f0000000280)={0x488, 0x13, 0x100, 0x70bd25, 0x25dfdbfc, {0x27, 0x21, 0xc8, 0x7, {0x4e20, 0x4e24, [0x9, 0x8, 0x0, 0xf62d], [0x7, 0x6, 0x8, 0x6], 0x0, [0x7, 0x7]}, 0x7ff, 0xe}, [@INET_DIAG_REQ_BYTECODE={0x99, 0x1, "2157c66a8753edaedd54f6f129824f6d348ee4d54ca3c95177d63a15b2afbc5f53ed3b17655a299e4e7b82ea89f3ee617985575b378306a1a2b537e6ed00c07ea11eec3711b1261121ce721488d707f9e92f2e3ab25b6d5490781c0bf91591f5047b1d4e6f7287adbeaa53fea10201b76775f332f9476ecdca5d153dd18480c096ea816200e817342e279b54ac22fb0c4c80cf5f9e"}, @INET_DIAG_REQ_BYTECODE={0x2a, 0x1, "4f1b6836b4904043f3ffeb30f1e6650cec29f4175a0cca26431a17a238131bcca3171742ccb8"}, @INET_DIAG_REQ_BYTECODE={0x8a, 0x1, "188e5cb500eff0b3ea4d62cd48d6be7bc663d6d73527eb257dd20dfbb7152c0f2715911c81134cd002bcdd4fa02d451aa0de257ca9dc007b20496434270a4912a07148302728e157547a391e80f1e5c019a5b93241a34c485391bd5d0105f9879c38d1d38fc040fb7e75ea32e9bda514b384e2bc77ff9f4d0c17a83a8f16cecf166d181d46b9"}, @INET_DIAG_REQ_BYTECODE={0x82, 0x1, "0967af20b8af06d639672ae77061ec702188c52507970282d2cd9965111211f781b6560318c894ea7f4b452f50aaa3d2c046d03a5e4ed32bee39cdbb5365e467a7f3ed5d2b4c6255b319f0794f596b00471432c2ed24a7f5bfacef7d08bc95dbbe9414f7944cae5fe6ea18b5ea71dd20149b1bedc24809b3fa009fee4d3e"}, @INET_DIAG_REQ_BYTECODE={0xd, 0x1, "1c41aab39b208abfdd"}, @INET_DIAG_REQ_BYTECODE={0x7e, 0x1, "e86feece6948c103e8eb5488c1a0414db76b9697605023a868a40b75eb0ec640d2ccd95f52d54aaa58cd8e3749b9027108157018e367a9f8f8ef4d8b48dfea76b93f42bcd450cff62300a6e1dff7bd779dc523969f681e1a386581be94c97fe40dbc515157b94fb08201f1558f4cff57c41369ba8b145d0387d0"}, @INET_DIAG_REQ_BYTECODE={0x58, 0x1, "5dfd0da5f700bcb7981bfe46c2bcc552169dded118358289f8b8ff4d295ddce0f451934b7e74723aa6a8d501ff0a444c72dd1485b918eff94b5d71521b785919ff7ef9bf76dd8a20e9637f87a5b2a28286526540"}, @INET_DIAG_REQ_BYTECODE={0x85, 0x1, "84dae34a311bc1b53ea0ac00e8eccf1d5f64101a5b09e9b71f5d46847f80608438c06bf06836a03843dcff60be1c960c5e5e7708795d33d322141d85b0f8b7792b987cc08b723e9ed0a2848a453a02746e32b906256978e6e8a5036aec8c76109f0687062f898a97712519d3575de245521ad31e9d663d1c1619f2fb3bf474f50e"}, @INET_DIAG_REQ_BYTECODE={0xa2, 0x1, "b3563f18b3b5ef1cf542d15fc10e9985ebe2cefa34bacbd1cc66257d999611f7365c99e2b3f5b5570109003489ec1d6e03b63fe69b4c040b29d95b48c8b64cef4e6fb161d8757d086ea23237e602f09478344fc37e13bf47bd51109016d81463dff632cc730a9e84388af05c832879d2ae84cff9de0872904b4ff0a82e78c88a1d54e81380883a4ff7937b5c9aa035348a49291ff846173c79c1322556ea"}, @INET_DIAG_REQ_BYTECODE={0x50, 0x1, "7f523ad4c669a0685edec561ed9b988f1851376bf0775fa58c3b3c4b577a17d4ca742d01730e075710d482068a4d2f886ea2fa2473518f475521132cc1ef9ba00309dadab51a8f86a67339a5"}]}, 0x488}, 0x1, 0x0, 0x0, 0x801}, 0x8040) (async) socket$kcm(0x10, 0x2, 0x0) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) (async) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r4, 0xc400941d, &(0x7f0000000800)={0x0, 0xd5, 0x1}) (async) ioctl$BTRFS_IOC_RESIZE(r4, 0x50009403, &(0x7f0000000200)={{r3}, {@val={r7}, @actul_num={@val=0x2b, 0x1, 0x50}}}) (async) getsockname$packet(r6, 0x0, &(0x7f0000000000)) (async) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="0439000025"], 0x33fe0) (async) ioctl$int_in(r1, 0x5421, &(0x7f0000000040)=0x5) (async) 0s ago: executing program 0 (id=1902): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x1, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff37}, 0x48) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x1000000000000f, &(0x7f0000000080)=0x7fffffff, 0x4) setsockopt$sock_attach_bpf(r1, 0x1, 0x34, &(0x7f0000000040)=r0, 0x4) (async) setsockopt$sock_attach_bpf(r1, 0x1, 0x44, &(0x7f00000000c0), 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) (async) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000085c0)=@newtfilter={0x70, 0x2c, 0xd27, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0x0, 0xe}, {}, {0x8, 0xc}}, [@filter_kind_options=@f_flow={{0x9}, {0x40, 0x2, [@TCA_FLOW_EMATCHES={0x3c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x7, 0x3, 0x67e6}, {0x9, 0x3, 0x5, 0x9}}}, @TCF_EM_NBYTE={0xd, 0x2, 0x0, 0x0, {{0x24}, {0x7d, 0x0, 0x2}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}]}]}}]}, 0x70}}, 0x0) (async) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f0000000140)={0x0, 0x3, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="44e500090c0000000400000000000000f100060000001100020000007f0000010000000000000000020001522c0000000009ae02000000c00300050002b9607be4bbe6ae000000020000000000000000005b0010000000"], 0x50}}, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000003c0)=ANY=[@ANYBLOB="400000001000030400000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="05020000000000002000128008000100687372001400028008000100", @ANYRES32=r9, @ANYBLOB="08000200", @ANYRES32=r3, @ANYBLOB="f3f89d92dbdba73323b7dc79cd797407aa8dbb7b96e361bea4cdcb2bfe908837793b429a81bd05ac833434f918919cc1509624e19559ed23c8bd35944e2d464524f7158389d5aff38af555e4bfe4df6933895cf5e2078a5fde190cee"], 0x40}, 0x1, 0xba01, 0x0, 0x4000044}, 0x10) kernel console output (not intermixed with test programs): ys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 76.522389][ T5850] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 80.735241][ T5878] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 80.742909][ T5878] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 80.751443][ T5878] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 80.759524][ T5878] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 80.767514][ T5878] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 80.775559][ T5878] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 80.782470][ T5879] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 80.783066][ T5878] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 80.798015][ T5878] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 80.806562][ T5878] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 80.809049][ T5880] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 80.814537][ T5878] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 80.824549][ T5880] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 80.830984][ T5878] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 80.837058][ T5880] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 80.842806][ T5882] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 80.849396][ T5880] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 80.856896][ T5878] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 80.864991][ T5880] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 80.870096][ T5882] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 80.879381][ T5876] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 80.886459][ T5882] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 80.903903][ T5882] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 80.919861][ T5871] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 80.945081][ T5184] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 81.609103][ T5861] chnl_net:caif_netlink_parms(): no params data found [ 81.669803][ T5872] chnl_net:caif_netlink_parms(): no params data found [ 81.792000][ T5862] chnl_net:caif_netlink_parms(): no params data found [ 81.805775][ T5865] chnl_net:caif_netlink_parms(): no params data found [ 82.075726][ T5861] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.083009][ T5861] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.092459][ T5861] bridge_slave_0: entered allmulticast mode [ 82.099992][ T5861] bridge_slave_0: entered promiscuous mode [ 82.108710][ T5861] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.115899][ T5861] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.123113][ T5861] bridge_slave_1: entered allmulticast mode [ 82.131088][ T5861] bridge_slave_1: entered promiscuous mode [ 82.229309][ T5863] chnl_net:caif_netlink_parms(): no params data found [ 82.298155][ T5865] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.305905][ T5865] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.313966][ T5865] bridge_slave_0: entered allmulticast mode [ 82.320999][ T5865] bridge_slave_0: entered promiscuous mode [ 82.335280][ T5862] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.342407][ T5862] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.350145][ T5862] bridge_slave_0: entered allmulticast mode [ 82.357229][ T5862] bridge_slave_0: entered promiscuous mode [ 82.365696][ T5862] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.372865][ T5862] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.380569][ T5862] bridge_slave_1: entered allmulticast mode [ 82.388214][ T5862] bridge_slave_1: entered promiscuous mode [ 82.398356][ T5861] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.411475][ T5861] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.421778][ T5872] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.429301][ T5872] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.436656][ T5872] bridge_slave_0: entered allmulticast mode [ 82.444125][ T5872] bridge_slave_0: entered promiscuous mode [ 82.452169][ T5872] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.459819][ T5872] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.468936][ T5872] bridge_slave_1: entered allmulticast mode [ 82.476095][ T5872] bridge_slave_1: entered promiscuous mode [ 82.482623][ T5865] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.490419][ T5865] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.497809][ T5865] bridge_slave_1: entered allmulticast mode [ 82.506206][ T5865] bridge_slave_1: entered promiscuous mode [ 82.628031][ T5862] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.639180][ T5861] team0: Port device team_slave_0 added [ 82.662404][ T5865] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.680873][ T5862] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.691661][ T5861] team0: Port device team_slave_1 added [ 82.701122][ T5872] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.714088][ T5872] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.726523][ T5865] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.810680][ T5865] team0: Port device team_slave_0 added [ 82.875796][ T5865] team0: Port device team_slave_1 added [ 82.884116][ T5872] team0: Port device team_slave_0 added [ 82.902873][ T5862] team0: Port device team_slave_0 added [ 82.912176][ T5862] team0: Port device team_slave_1 added [ 82.919146][ T5861] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.926816][ T5861] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.952763][ T5861] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.965766][ T51] Bluetooth: hci0: command tx timeout [ 82.971512][ T51] Bluetooth: hci3: command tx timeout [ 82.977537][ T5184] Bluetooth: hci4: command tx timeout [ 82.988285][ T5872] team0: Port device team_slave_1 added [ 82.994488][ T5863] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.001641][ T5863] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.009179][ T5863] bridge_slave_0: entered allmulticast mode [ 83.016343][ T5863] bridge_slave_0: entered promiscuous mode [ 83.038653][ T5861] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.046280][ T5861] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.046295][ T5874] Bluetooth: hci1: command tx timeout [ 83.072577][ T51] Bluetooth: hci2: command tx timeout [ 83.078124][ T5861] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.117887][ T5863] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.125613][ T5863] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.132790][ T5863] bridge_slave_1: entered allmulticast mode [ 83.140184][ T5863] bridge_slave_1: entered promiscuous mode [ 83.182009][ T5865] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.189275][ T5865] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.215325][ T5865] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.228410][ T5865] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.235840][ T5865] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.261852][ T5865] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.296060][ T5862] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.303026][ T5862] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.329208][ T5862] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.342216][ T5862] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.349230][ T5862] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.375778][ T5862] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.404983][ T5872] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.411959][ T5872] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.438562][ T5872] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.452354][ T5863] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.466701][ T5863] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.516011][ T5872] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.522991][ T5872] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.549803][ T5872] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.610793][ T5861] hsr_slave_0: entered promiscuous mode [ 83.618154][ T5861] hsr_slave_1: entered promiscuous mode [ 83.631574][ T5862] hsr_slave_0: entered promiscuous mode [ 83.638930][ T5862] hsr_slave_1: entered promiscuous mode [ 83.645682][ T5862] debugfs: 'hsr0' already exists in 'hsr' [ 83.651487][ T5862] Cannot create hsr debugfs directory [ 83.682500][ T5863] team0: Port device team_slave_0 added [ 83.738452][ T5863] team0: Port device team_slave_1 added [ 83.765692][ T5865] hsr_slave_0: entered promiscuous mode [ 83.771973][ T5865] hsr_slave_1: entered promiscuous mode [ 83.778505][ T5865] debugfs: 'hsr0' already exists in 'hsr' [ 83.784312][ T5865] Cannot create hsr debugfs directory [ 83.796179][ T5872] hsr_slave_0: entered promiscuous mode [ 83.802444][ T5872] hsr_slave_1: entered promiscuous mode [ 83.808788][ T5872] debugfs: 'hsr0' already exists in 'hsr' [ 83.814607][ T5872] Cannot create hsr debugfs directory [ 83.895559][ T5863] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.902563][ T5863] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.929497][ T5863] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.942594][ T5863] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.949680][ T5863] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.975882][ T5863] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.211683][ T5863] hsr_slave_0: entered promiscuous mode [ 84.218313][ T5863] hsr_slave_1: entered promiscuous mode [ 84.224859][ T5863] debugfs: 'hsr0' already exists in 'hsr' [ 84.230635][ T5863] Cannot create hsr debugfs directory [ 84.627363][ T5862] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 84.640537][ T5862] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 84.651076][ T5862] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 84.676622][ T5862] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 84.731002][ T5861] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 84.750443][ T5861] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 84.760314][ T5861] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 84.787914][ T5861] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 84.858596][ T5872] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 84.894067][ T5872] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 84.923485][ T5872] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 84.944826][ T5872] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 85.026432][ T5863] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 85.037997][ T5863] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 85.045540][ T51] Bluetooth: hci3: command tx timeout [ 85.045720][ T5874] Bluetooth: hci4: command tx timeout [ 85.053531][ T51] Bluetooth: hci0: command tx timeout [ 85.068905][ T5863] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 85.080253][ T5863] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 85.109281][ T5862] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.123292][ T51] Bluetooth: hci1: command tx timeout [ 85.134078][ T51] Bluetooth: hci2: command tx timeout [ 85.200388][ T5862] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.229352][ T5865] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 85.247016][ T1337] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.254272][ T1337] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.284062][ T5865] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 85.299638][ T5865] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 85.310151][ T5865] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 85.350676][ T76] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.357859][ T76] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.376571][ T5861] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.460002][ T5861] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.501954][ T974] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.509141][ T974] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.528802][ T5872] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.540594][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.547795][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.648706][ T5872] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.701688][ T76] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.708900][ T76] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.728056][ T5865] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.755620][ T76] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.762788][ T76] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.818094][ T5861] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 85.848234][ T5865] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.886731][ T5863] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.908312][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.915506][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.955910][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.963089][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.022684][ T5872] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 86.034137][ T5872] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 86.064837][ T5863] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.108756][ T3512] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.115947][ T3512] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.142208][ T5862] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.185375][ T974] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.192566][ T974] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.316688][ T5862] veth0_vlan: entered promiscuous mode [ 86.329999][ T5861] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.392617][ T5862] veth1_vlan: entered promiscuous mode [ 86.549141][ T5861] veth0_vlan: entered promiscuous mode [ 86.606101][ T5862] veth0_macvtap: entered promiscuous mode [ 86.647367][ T5861] veth1_vlan: entered promiscuous mode [ 86.659566][ T5872] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.669298][ T5862] veth1_macvtap: entered promiscuous mode [ 86.739848][ T5862] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.769653][ T5865] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.780699][ T5862] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.806232][ T982] cfg80211: failed to load regulatory.db [ 86.852778][ T974] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.862938][ T974] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.877419][ T974] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.911554][ T5872] veth0_vlan: entered promiscuous mode [ 86.918361][ T974] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.940909][ T5861] veth0_macvtap: entered promiscuous mode [ 86.952602][ T5861] veth1_macvtap: entered promiscuous mode [ 86.996450][ T5863] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.005074][ T5872] veth1_vlan: entered promiscuous mode [ 87.060833][ T5861] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.084667][ T5865] veth0_vlan: entered promiscuous mode [ 87.112491][ T5861] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.125456][ T51] Bluetooth: hci0: command tx timeout [ 87.130891][ T51] Bluetooth: hci3: command tx timeout [ 87.137176][ T51] Bluetooth: hci4: command tx timeout [ 87.161275][ T5865] veth1_vlan: entered promiscuous mode [ 87.206955][ T51] Bluetooth: hci2: command tx timeout [ 87.206964][ T5184] Bluetooth: hci1: command tx timeout [ 87.233405][ T1337] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.242961][ T1337] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.261058][ T974] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.270018][ T974] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.288400][ T5872] veth0_macvtap: entered promiscuous mode [ 87.298486][ T1337] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.307488][ T1337] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.330902][ T5872] veth1_macvtap: entered promiscuous mode [ 87.428250][ T5865] veth0_macvtap: entered promiscuous mode [ 87.461612][ T5865] veth1_macvtap: entered promiscuous mode [ 87.484814][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.498974][ T5872] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.504468][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.539758][ T5865] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.553104][ T5872] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.574031][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.590537][ T5865] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.600985][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.634719][ T5862] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 87.675679][ T36] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.684733][ T36] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.703157][ T5863] veth0_vlan: entered promiscuous mode [ 87.734882][ T36] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.758581][ T36] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.787887][ T5985] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1'. [ 87.809008][ T36] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.809594][ T1337] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.828496][ T1337] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.852846][ T76] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.861726][ T76] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.906411][ T5863] veth1_vlan: entered promiscuous mode [ 87.922320][ T76] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.035744][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.064405][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.143092][ T5863] veth0_macvtap: entered promiscuous mode [ 88.187641][ T5863] veth1_macvtap: entered promiscuous mode [ 88.197504][ T76] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.214467][ T76] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.283094][ T76] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.320668][ T76] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.357372][ T5863] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.439782][ T5999] Zero length message leads to an empty skb [ 88.453147][ T5863] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.500701][ T3512] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.529731][ T36] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.538990][ T3512] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.594388][ T1337] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.650068][ T1337] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.708248][ T1337] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.820508][ T6016] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11'. [ 89.054535][ T1337] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.080364][ T1337] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.152025][ T6028] netlink: 'syz.3.15': attribute type 1 has an invalid length. [ 89.182150][ T6028] netlink: 236 bytes leftover after parsing attributes in process `syz.3.15'. [ 89.204668][ T51] Bluetooth: hci3: command tx timeout [ 89.212149][ T51] Bluetooth: hci0: command tx timeout [ 89.218299][ T5184] Bluetooth: hci4: command tx timeout [ 89.229176][ T3512] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.284939][ T51] Bluetooth: hci2: command tx timeout [ 89.284951][ T5184] Bluetooth: hci1: command tx timeout [ 89.306742][ T3512] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.585836][ T6039] netlink: 'syz.3.20': attribute type 3 has an invalid length. [ 89.660338][ T6045] nftables ruleset with unbound set [ 89.761842][ T6052] netlink: 12 bytes leftover after parsing attributes in process `syz.0.21'. [ 89.782441][ T6044] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 90.200722][ T6068] syz.2.26 uses obsolete (PF_INET,SOCK_PACKET) [ 90.311610][ T6072] netlink: 'syz.1.27': attribute type 1 has an invalid length. [ 90.467568][ T6072] netlink: 4 bytes leftover after parsing attributes in process `syz.1.27'. [ 90.992424][ T6106] netlink: 64 bytes leftover after parsing attributes in process `syz.0.38'. [ 91.391803][ T6123] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 91.722416][ T6137] netlink: 8 bytes leftover after parsing attributes in process `syz.2.50'. [ 91.820232][ T6149] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 91.903735][ T6149] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 91.953790][ T6149] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 92.039727][ T6149] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 92.158391][ T6160] netlink: 'syz.2.57': attribute type 2 has an invalid length. [ 92.169861][ T6149] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 92.263874][ T6149] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 92.264572][ T6164] netlink: 24 bytes leftover after parsing attributes in process `syz.4.59'. [ 92.337589][ T6164] netlink: 'syz.4.59': attribute type 11 has an invalid length. [ 92.340889][ T6149] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 92.403644][ T6149] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 92.474274][ T6149] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 92.794524][ T6180] netlink: 203516 bytes leftover after parsing attributes in process `syz.4.65'. [ 92.809762][ T6185] delete_channel: no stack [ 93.137628][ T6199] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 93.178143][ T6199] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 93.183651][ T6201] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 93.332389][ T6201] IPv6: Can't replace route, no match found [ 93.600792][ T6224] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.78'. [ 93.687462][ T6228] netlink: 'syz.3.82': attribute type 25 has an invalid length. [ 93.838409][ T6235] netlink: 56 bytes leftover after parsing attributes in process `syz.2.84'. [ 94.021627][ T6239] team0: Port device bridge1 added [ 94.248124][ T6252] netlink: 32 bytes leftover after parsing attributes in process `syz.0.89'. [ 94.276363][ T6255] netlink: 8 bytes leftover after parsing attributes in process `syz.4.90'. [ 94.332272][ T6255] gtp0: entered promiscuous mode [ 94.345131][ T6255] gtp0: entered allmulticast mode [ 94.400561][ T6258] : renamed from vlan0 (while UP) [ 94.547846][ T6261] netlink: 32 bytes leftover after parsing attributes in process `syz.4.92'. [ 95.259024][ T6299] netlink: 8 bytes leftover after parsing attributes in process `syz.0.105'. [ 95.261861][ T6300] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 95.303686][ T49] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.378756][ T6300] gretap0: entered promiscuous mode [ 95.402154][ T6300] vlan2: entered promiscuous mode [ 95.620710][ T6312] netlink: 18 bytes leftover after parsing attributes in process `syz.1.109'. [ 96.035696][ T6324] netlink: 24 bytes leftover after parsing attributes in process `syz.4.111'. [ 96.731350][ T6357] netlink: 'syz.3.122': attribute type 1 has an invalid length. [ 96.742374][ T6357] netlink: 228 bytes leftover after parsing attributes in process `syz.3.122'. [ 97.488508][ T6395] netlink: 'syz.4.132': attribute type 2 has an invalid length. [ 97.833967][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880557c8c00: rx timeout, send abort [ 97.858068][ T6410] __nla_validate_parse: 8 callbacks suppressed [ 97.858088][ T6410] netlink: 1 bytes leftover after parsing attributes in process `syz.2.137'. [ 97.891835][ T6412] vlan2: entered promiscuous mode [ 97.946456][ T6415] net_ratelimit: 111 callbacks suppressed [ 97.946477][ T6415] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 97.980711][ T6416] netlink: 24 bytes leftover after parsing attributes in process `syz.2.137'. [ 98.335611][ T12] TC_ACT_REPEAT abuse ? [ 98.346585][ T6023] TC_ACT_REPEAT abuse ? [ 98.369423][ T982] TC_ACT_REPEAT abuse ? [ 98.506349][ T6424] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.141'. [ 98.622124][ T6431] bridge2: entered promiscuous mode [ 98.639943][ T6431] bridge2: entered allmulticast mode [ 98.801287][ T6442] netlink: 9 bytes leftover after parsing attributes in process `syz.4.148'. [ 99.714766][ T6486] netlink: 4 bytes leftover after parsing attributes in process `syz.3.164'. [ 100.004505][ T6502] 8021q: adding VLAN 0 to HW filter on device bond0 [ 100.079479][ T6502] bond0: (slave rose0): Enslaving as an active interface with an up link [ 100.179430][ T6510] vlan2: entered allmulticast mode [ 100.187322][ T6510] hsr_slave_1: entered allmulticast mode [ 100.538407][ T6530] lo: entered allmulticast mode [ 100.563839][ T6528] lo: left allmulticast mode [ 100.609853][ T6535] netlink: 12 bytes leftover after parsing attributes in process `syz.0.175'. [ 100.637300][ T6533] netlink: 12 bytes leftover after parsing attributes in process `syz.0.175'. [ 100.656691][ T6535] trusted_key: syz.0.175 sent an empty control message without MSG_MORE. [ 100.893902][ T6023] TC_ACT_REPEAT abuse ? [ 100.898562][ T6023] TC_ACT_REPEAT abuse ? [ 100.987018][ T6547] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.179'. [ 101.269450][ T6559] warning: `syz.1.184' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 101.605981][ T6583] TC_ACT_REPEAT abuse ? [ 101.635047][ T6583] TC_ACT_REPEAT abuse ? [ 101.639755][ T6583] TC_ACT_REPEAT abuse ? [ 101.667143][ T6585] TC_ACT_REPEAT abuse ? [ 102.360406][ T6619] geneve2: entered promiscuous mode [ 102.400240][ T6619] geneve2: entered allmulticast mode [ 102.410091][ T12] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 102.454257][ T12] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 102.477427][ T12] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 102.511211][ T12] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 102.539165][ T6633] netlink: 4 bytes leftover after parsing attributes in process `syz.4.205'. [ 102.596352][ T6632] netlink: 8 bytes leftover after parsing attributes in process `syz.3.208'. [ 102.619290][ T6637] netlink: 'syz.0.209': attribute type 1 has an invalid length. [ 102.685927][ T6638] netem: change failed [ 102.968625][ T6657] tipc: Enabling of bearer rejected, failed to enable media [ 103.047943][ T6664] netlink: 'syz.0.218': attribute type 1 has an invalid length. [ 103.280095][ T6683] net_ratelimit: 9 callbacks suppressed [ 103.280112][ T6683] TC_ACT_REPEAT abuse ? [ 103.294513][ T6678] __nla_validate_parse: 5 callbacks suppressed [ 103.294529][ T6678] netlink: 8 bytes leftover after parsing attributes in process `syz.3.216'. [ 103.323309][ T6678] netlink: 4 bytes leftover after parsing attributes in process `syz.3.216'. [ 103.334943][ T6664] 8021q: adding VLAN 0 to HW filter on device bond2 [ 103.365773][ T6664] bond1: (slave bond2): making interface the new active one [ 103.370130][ T6678] netlink: 'syz.3.216': attribute type 12 has an invalid length. [ 103.385108][ T6678] netlink: 'syz.3.216': attribute type 11 has an invalid length. [ 103.396301][ T6664] bond1: (slave bond2): Enslaving as an active interface with an up link [ 103.408291][ T6668] nbd0: detected capacity change from 0 to 127 [ 103.449112][ T5184] block nbd0: Receive control failed (result -32) [ 103.450996][ T51] block nbd0: Receive control failed (result -32) [ 103.741836][ T6704] tipc: Enabling of bearer rejected, media not registered [ 103.815685][ T6718] netlink: 'syz.3.230': attribute type 1 has an invalid length. [ 103.840788][ T6718] netlink: 184 bytes leftover after parsing attributes in process `syz.3.230'. [ 103.844285][ T6710] can: request_module (can-proto-3) failed. [ 103.885868][ T6714] syzkaller1: entered promiscuous mode [ 103.891377][ T6714] syzkaller1: entered allmulticast mode [ 103.921974][ T6718] netlink: 'syz.3.230': attribute type 1 has an invalid length. [ 104.069369][ T6734] netlink: 12 bytes leftover after parsing attributes in process `syz.0.238'. [ 104.210487][ T6741] netlink: 36 bytes leftover after parsing attributes in process `syz.4.240'. [ 104.307941][ T1557] IPVS: starting estimator thread 0... [ 104.403644][ T6752] IPVS: using max 32 ests per chain, 76800 per kthread [ 104.490031][ T6759] netlink: 4 bytes leftover after parsing attributes in process `syz.4.244'. [ 104.558790][ T6766] netlink: 4 bytes leftover after parsing attributes in process `syz.4.244'. [ 104.704827][ T6771] netlink: 88 bytes leftover after parsing attributes in process `syz.1.247'. [ 105.791676][ T6819] ip6_tunnel: non-ECT from 0000:0000:0000:0000:0000:ffff:7f00:0001 with DS=0xb [ 105.859882][ T6827] netlink: 12 bytes leftover after parsing attributes in process `syz.1.266'. [ 105.921224][ T6828] netlink: 104 bytes leftover after parsing attributes in process `syz.1.266'. [ 106.424234][ T6858] pim6reg: entered allmulticast mode [ 106.437525][ T6858] pim6reg: left allmulticast mode [ 106.562105][ T6870] netlink: 'syz.2.279': attribute type 5 has an invalid length. [ 106.581022][ T1337] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 106.593679][ T6870] netlink: 'syz.2.279': attribute type 5 has an invalid length. [ 106.604323][ T24] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 106.612315][ T1337] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 106.623829][ T6870] netlink: 'syz.2.279': attribute type 5 has an invalid length. [ 106.636783][ T6870] netlink: 'syz.2.279': attribute type 5 has an invalid length. [ 106.710249][ T6875] ip6gre1: entered allmulticast mode [ 106.762005][ T6877] geneve2: entered promiscuous mode [ 106.785577][ T6877] geneve2: entered allmulticast mode [ 107.309704][ T6896] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 107.349511][ T6901] ieee802154 phy0 wpan0: encryption failed: -22 [ 107.364185][ T24] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 107.683507][ T5927] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 108.307226][ T6963] tipc: Enabling of bearer rejected, failed to enable media [ 108.467338][ T6979] __nla_validate_parse: 44 callbacks suppressed [ 108.467357][ T6979] netlink: 84 bytes leftover after parsing attributes in process `syz.1.313'. [ 108.529163][ T6987] netlink: 60 bytes leftover after parsing attributes in process `syz.1.313'. [ 108.761488][ T7004] netlink: 4 bytes leftover after parsing attributes in process `syz.2.321'. [ 108.877287][ T7007] netlink: 8 bytes leftover after parsing attributes in process `syz.0.324'. [ 108.900134][ T7009] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 109.279424][ T7039] netlink: 16 bytes leftover after parsing attributes in process `syz.3.334'. [ 109.560324][ T7060] sctp: [Deprecated]: syz.1.341 (pid 7060) Use of int in max_burst socket option deprecated. [ 109.560324][ T7060] Use struct sctp_assoc_value instead [ 109.579058][ T7052] syz.0.340 (7052) used greatest stack depth: 17640 bytes left [ 109.802672][ T7074] netlink: 104 bytes leftover after parsing attributes in process `syz.1.345'. [ 110.010129][ T7081] validate_nla: 29 callbacks suppressed [ 110.010147][ T7081] netlink: 'syz.0.348': attribute type 83 has an invalid length. [ 110.028741][ T7081] netlink: 132 bytes leftover after parsing attributes in process `syz.0.348'. [ 110.158567][ T7090] openvswitch: netlink: Message has 4 unknown bytes. [ 110.167752][ T7093] openvswitch: netlink: Message has 4 unknown bytes. [ 110.185860][ T7091] sctp: [Deprecated]: syz.4.350 (pid 7091) Use of int in max_burst socket option deprecated. [ 110.185860][ T7091] Use struct sctp_assoc_value instead [ 110.303375][ T7100] netlink: 8 bytes leftover after parsing attributes in process `syz.3.354'. [ 110.461130][ T7113] netlink: 36 bytes leftover after parsing attributes in process `syz.2.357'. [ 110.485386][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 110.494155][ T6023] TC_ACT_REPEAT abuse ? [ 110.638753][ T7125] netlink: 4 bytes leftover after parsing attributes in process `syz.2.362'. [ 110.713659][ T7130] netlink: 'syz.3.363': attribute type 4 has an invalid length. [ 110.821956][ T7137] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 110.825942][ T7130] netlink: 'syz.3.363': attribute type 8 has an invalid length. [ 110.941931][ T5956] IPVS: starting estimator thread 0... [ 111.043706][ T7140] IPVS: using max 35 ests per chain, 84000 per kthread [ 111.124099][ T6023] TC_ACT_REPEAT abuse ? [ 112.370764][ T7207] openvswitch: netlink: Duplicate or invalid key (type 0). [ 112.386330][ T7207] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 112.931733][ T7205] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 113.101702][ T7237] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 113.120425][ T7237] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 113.129042][ T7237] gretap1: entered promiscuous mode [ 113.134886][ T7237] gretap1: entered allmulticast mode [ 113.289361][ T7247] IPv6: sit1: Disabled Multicast RS [ 113.310427][ T7247] sit1: entered allmulticast mode [ 113.531040][ T7266] tipc: Enabling of bearer rejected, failed to enable media [ 113.576274][ T7271] netlink: 'syz.3.406': attribute type 1 has an invalid length. [ 113.764219][ T7285] __nla_validate_parse: 11 callbacks suppressed [ 113.764240][ T7285] netlink: 16 bytes leftover after parsing attributes in process `syz.2.410'. [ 113.792249][ T7285] netlink: 32 bytes leftover after parsing attributes in process `syz.2.410'. [ 113.880012][ T7292] netlink: 68 bytes leftover after parsing attributes in process `syz.0.412'. [ 113.906340][ T7292] netlink: 12 bytes leftover after parsing attributes in process `syz.0.412'. [ 113.920140][ T7294] netlink: 16 bytes leftover after parsing attributes in process `syz.2.414'. [ 113.925976][ T7291] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 113.952472][ T7295] team_slave_0: entered promiscuous mode [ 113.958353][ T7295] team_slave_1: entered promiscuous mode [ 113.969350][ T7295] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 113.978995][ T7295] team0: Device macvtap1 is already an upper device of the team interface [ 113.984172][ T7292] netlink: 12 bytes leftover after parsing attributes in process `syz.0.412'. [ 114.000954][ T7295] team_slave_0: left promiscuous mode [ 114.006530][ T7295] team_slave_1: left promiscuous mode [ 114.025352][ T7302] netlink: 4 bytes leftover after parsing attributes in process `syz.4.416'. [ 114.038095][ T7294] netlink: 16 bytes leftover after parsing attributes in process `syz.2.414'. [ 114.069170][ T7299] netlink: 4 bytes leftover after parsing attributes in process `syz.1.415'. [ 114.148894][ T7305] netlink: 56 bytes leftover after parsing attributes in process `syz.2.417'. [ 114.212806][ T7311] netlink: 'syz.3.420': attribute type 1 has an invalid length. [ 114.269605][ T7311] 8021q: adding VLAN 0 to HW filter on device bond1 [ 114.365288][ T7316] bond1: (slave gretap1): making interface the new active one [ 114.383633][ T7326] netlink: 'syz.4.424': attribute type 7 has an invalid length. [ 114.391475][ T7326] netlink: 'syz.4.424': attribute type 8 has an invalid length. [ 114.405158][ T7316] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 114.612973][ T7337] netlink: 'syz.3.427': attribute type 4 has an invalid length. [ 114.706974][ T7350] TC_ACT_REPEAT abuse ? [ 114.711561][ T7350] TC_ACT_REPEAT abuse ? [ 114.720044][ T7350] TC_ACT_REPEAT abuse ? [ 114.725371][ T7350] TC_ACT_REPEAT abuse ? [ 114.729984][ T7350] TC_ACT_REPEAT abuse ? [ 114.738256][ T7350] TC_ACT_REPEAT abuse ? [ 114.742823][ T7350] TC_ACT_REPEAT abuse ? [ 114.747403][ T7350] TC_ACT_REPEAT abuse ? [ 114.752020][ T7350] TC_ACT_REPEAT abuse ? [ 116.632612][ T7419] team0 (unregistering): Port device team_slave_0 removed [ 116.658484][ T7419] team0 (unregistering): Port device team_slave_1 removed [ 116.685457][ T7419] team0 (unregistering): Port device bridge1 removed [ 116.718571][ T7435] netlink: 'syz.4.457': attribute type 4 has an invalid length. [ 117.239658][ T7475] syzkaller1: entered promiscuous mode [ 117.250083][ T7475] syzkaller1: entered allmulticast mode [ 117.874926][ T7500] 8021q: VLANs not supported on lo [ 118.158389][ T7505] tipc: Started in network mode [ 118.163479][ T7508] blkio.reset_stats is deprecated [ 118.173388][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 118.191615][ T7505] tipc: Node identity 06fcac8a2ad7, cluster identity 4711 [ 118.207530][ T7505] tipc: Enabled bearer , priority 0 [ 118.218457][ T7506] syzkaller0: entered promiscuous mode [ 118.224118][ T7506] syzkaller0: entered allmulticast mode [ 118.341546][ T7505] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 118.395754][ T7505] tipc: Resetting bearer [ 118.430854][ T7504] tipc: Resetting bearer [ 118.479774][ T7504] tipc: Disabling bearer [ 118.745373][ T7536] IPVS: set_ctl: invalid protocol: 0 224.0.0.1:20004 [ 118.936960][ T7508] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 118.971868][ T7508] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 119.009764][ T7508] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 119.020684][ T7508] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 119.041282][ T7508] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 119.049977][ T7508] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 119.138448][ T7508] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 119.145133][ T7508] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 119.271018][ T7508] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 119.291355][ T7508] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 119.437333][ T7582] net_ratelimit: 20 callbacks suppressed [ 119.437350][ T7582] TC_ACT_REPEAT abuse ? [ 119.449651][ C1] TC_ACT_REPEAT abuse ? [ 119.976843][ T7603] IPVS: set_ctl: invalid protocol: 108 10.1.1.2:0 [ 120.249962][ T7595] netlink: 'syz.3.506': attribute type 29 has an invalid length. [ 120.371757][ T7598] netlink: 'syz.3.506': attribute type 29 has an invalid length. [ 120.544462][ T7625] TC_ACT_REPEAT abuse ? [ 120.548910][ T7625] TC_ACT_REPEAT abuse ? [ 120.563912][ T7625] TC_ACT_REPEAT abuse ? [ 120.584800][ T7625] TC_ACT_REPEAT abuse ? [ 120.589549][ T7625] TC_ACT_REPEAT abuse ? [ 120.603506][ T7625] TC_ACT_REPEAT abuse ? [ 120.611619][ T7625] TC_ACT_REPEAT abuse ? [ 120.616198][ T7625] TC_ACT_REPEAT abuse ? [ 120.962809][ T7648] __nla_validate_parse: 11 callbacks suppressed [ 120.962832][ T7648] netlink: 12 bytes leftover after parsing attributes in process `syz.4.518'. [ 121.630915][ T7687] netlink: 20 bytes leftover after parsing attributes in process `syz.4.528'. [ 121.650646][ T7687] 8021q: VLANs not supported on gre0 [ 122.057220][ T7710] netlink: 388 bytes leftover after parsing attributes in process `syz.4.536'. [ 122.329746][ T7726] netlink: 12 bytes leftover after parsing attributes in process `syz.3.542'. [ 122.382013][ T7726] netlink: 'syz.3.542': attribute type 4 has an invalid length. [ 122.414309][ T7724] netlink: 68 bytes leftover after parsing attributes in process `syz.0.541'. [ 122.455322][ T7735] netlink: 4 bytes leftover after parsing attributes in process `syz.4.544'. [ 122.671173][ T7743] netlink: 'syz.3.548': attribute type 33 has an invalid length. [ 122.752526][ T7748] netlink: 56 bytes leftover after parsing attributes in process `syz.0.551'. [ 122.841735][ T7758] sctp: [Deprecated]: syz.3.553 (pid 7758) Use of int in max_burst socket option deprecated. [ 122.841735][ T7758] Use struct sctp_assoc_value instead [ 123.071298][ T7772] netlink: 16 bytes leftover after parsing attributes in process `syz.3.557'. [ 123.094742][ T7773] netlink: 'syz.1.560': attribute type 30 has an invalid length. [ 123.098585][ T7772] netlink: 224 bytes leftover after parsing attributes in process `syz.3.557'. [ 123.130662][ T7772] netlink: 'syz.3.557': attribute type 21 has an invalid length. [ 123.153375][ T7772] netlink: 4 bytes leftover after parsing attributes in process `syz.3.557'. [ 123.191399][ T7772] netlink: 'syz.3.557': attribute type 21 has an invalid length. [ 123.281891][ T7784] gretap0: entered promiscuous mode [ 123.289602][ T7784] batadv_slave_1: entered promiscuous mode [ 123.400210][ T7793] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 123.998548][ T7831] netlink: 'syz.4.577': attribute type 13 has an invalid length. [ 124.037477][ T7831] netlink: 'syz.4.577': attribute type 58 has an invalid length. [ 124.120459][ T7833] netlink: 'syz.0.579': attribute type 1 has an invalid length. [ 124.162143][ T7829] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.170674][ T7829] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.339934][ T7829] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 124.357869][ T7829] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 124.459610][ T7850] net_ratelimit: 7 callbacks suppressed [ 124.459629][ T7850] TC_ACT_REPEAT abuse ? [ 124.474108][ T7851] netlink: 'syz.3.580': attribute type 21 has an invalid length. [ 124.482830][ T7850] TC_ACT_REPEAT abuse ? [ 124.495933][ T7850] TC_ACT_REPEAT abuse ? [ 124.506311][ T7850] TC_ACT_REPEAT abuse ? [ 124.516528][ T7850] TC_ACT_REPEAT abuse ? [ 124.527490][ T7850] TC_ACT_REPEAT abuse ? [ 124.537686][ T7850] TC_ACT_REPEAT abuse ? [ 124.542209][ T7850] TC_ACT_REPEAT abuse ? [ 124.568481][ T7850] TC_ACT_REPEAT abuse ? [ 124.583431][ T7850] TC_ACT_REPEAT abuse ? [ 124.629485][ T7841] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 124.761888][ T13] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.789019][ T13] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 124.812643][ T13] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.837478][ T13] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 124.861447][ T13] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.898719][ T13] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 125.101486][ T7858] dvmrp0: entered allmulticast mode [ 125.160657][ T7855] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 125.269004][ T7880] team0 (uninitialized): Failed to send options change via netlink (err -105) [ 125.309468][ T7880] team0: entered promiscuous mode [ 125.315414][ T7880] team0: entered allmulticast mode [ 125.946316][ T7920] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 126.029124][ T7920] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 126.893134][ T7967] __nla_validate_parse: 10 callbacks suppressed [ 126.899692][ T7967] netlink: 40 bytes leftover after parsing attributes in process `syz.0.629'. [ 126.911044][ T7967] netlink: 4 bytes leftover after parsing attributes in process `syz.0.629'. [ 126.939681][ T7969] netlink: 4 bytes leftover after parsing attributes in process `syz.1.631'. [ 126.991301][ T7969] team1: entered promiscuous mode [ 127.002196][ T7969] team1: entered allmulticast mode [ 127.092038][ T7977] netlink: 87 bytes leftover after parsing attributes in process `syz.1.635'. [ 127.161132][ T7979] netlink: 'syz.0.636': attribute type 4 has an invalid length. [ 127.357833][ T7992] netlink: 36 bytes leftover after parsing attributes in process `syz.1.642'. [ 127.979452][ T8031] netlink: 4 bytes leftover after parsing attributes in process `syz.4.660'. [ 130.876602][ T8136] sctp: [Deprecated]: syz.2.708 (pid 8136) Use of int in max_burst socket option deprecated. [ 130.876602][ T8136] Use struct sctp_assoc_value instead [ 130.922729][ T8138] netlink: 'syz.0.709': attribute type 4 has an invalid length. [ 131.174139][ T8152] netlink: 4 bytes leftover after parsing attributes in process `syz.3.715'. [ 131.316827][ T8160] net_ratelimit: 40 callbacks suppressed [ 131.316845][ T8160] TC_ACT_REPEAT abuse ? [ 131.347019][ T8163] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 131.374262][ T9] TC_ACT_REPEAT abuse ? [ 131.443848][ T9] TC_ACT_REPEAT abuse ? [ 131.503630][ T24] TC_ACT_REPEAT abuse ? [ 131.563700][ T24] TC_ACT_REPEAT abuse ? [ 131.633807][ T24] TC_ACT_REPEAT abuse ? [ 131.657297][ T8182] TC_ACT_REPEAT abuse ? [ 131.661846][ C1] TC_ACT_REPEAT abuse ? [ 131.764372][ T8192] Bluetooth: MGMT ver 1.23 [ 131.836969][ T24] TC_ACT_REPEAT abuse ? [ 132.272603][ T8220] netlink: 36 bytes leftover after parsing attributes in process `syz.2.741'. [ 132.387326][ T8233] netlink: 8 bytes leftover after parsing attributes in process `syz.0.745'. [ 132.402419][ T8233] netlink: 16 bytes leftover after parsing attributes in process `syz.0.745'. [ 132.528195][ T8244] netlink: 3 bytes leftover after parsing attributes in process `syz.0.749'. [ 132.542275][ T8244] netlink: 284 bytes leftover after parsing attributes in process `syz.0.749'. [ 132.883483][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 132.894153][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 135.074265][ T8320] syzkaller0: entered promiscuous mode [ 135.080405][ T8320] syzkaller0: entered allmulticast mode [ 135.192567][ T8343] netlink: 4 bytes leftover after parsing attributes in process `syz.4.781'. [ 136.401323][ T8346] tipc: Enabling of bearer rejected, failed to enable media [ 136.796380][ T8377] netlink: 80 bytes leftover after parsing attributes in process `syz.3.790'. [ 136.827638][ T8380] netlink: 36 bytes leftover after parsing attributes in process `syz.2.793'. [ 136.831397][ T8377] netlink: 'syz.3.790': attribute type 1 has an invalid length. [ 136.851574][ T8377] netlink: 'syz.3.790': attribute type 1 has an invalid length. [ 137.137933][ T8399] netlink: 144 bytes leftover after parsing attributes in process `syz.1.801'. [ 137.226637][ T8406] netlink: 40 bytes leftover after parsing attributes in process `syz.1.801'. [ 137.341062][ T8413] team_slave_0: entered promiscuous mode [ 137.346838][ T8413] team_slave_1: entered promiscuous mode [ 137.361340][ T8413] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 137.369433][ T8413] team0: Device macvtap1 is already an upper device of the team interface [ 137.379955][ T8413] team_slave_0: left promiscuous mode [ 137.385595][ T8413] team_slave_1: left promiscuous mode [ 137.569029][ T8430] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.582250][ T8430] netlink: 16 bytes leftover after parsing attributes in process `syz.2.813'. [ 137.748238][ T8435] netlink: 48 bytes leftover after parsing attributes in process `syz.3.815'. [ 137.867674][ T8453] netlink: 'syz.0.820': attribute type 83 has an invalid length. [ 137.996309][ T8457] netlink: 'syz.4.822': attribute type 33 has an invalid length. [ 138.006118][ T8457] (unnamed net_device) (uninitialized): option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 138.123824][ T8468] netlink: 12 bytes leftover after parsing attributes in process `syz.2.824'. [ 138.444907][ T8486] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.458112][ T8492] netlink: 'syz.4.833': attribute type 1 has an invalid length. [ 138.471470][ T8492] netlink: 224 bytes leftover after parsing attributes in process `syz.4.833'. [ 138.495448][ T8496] netlink: 36 bytes leftover after parsing attributes in process `syz.0.834'. [ 138.552541][ T8494] netlink: 24 bytes leftover after parsing attributes in process `syz.2.831'. [ 138.658760][ T8486] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.738348][ T8510] netlink: 'syz.1.839': attribute type 19 has an invalid length. [ 138.830828][ T8486] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.941808][ T8527] netlink: 8 bytes leftover after parsing attributes in process `syz.4.840'. [ 138.957340][ T8527] netlink: 8 bytes leftover after parsing attributes in process `syz.4.840'. [ 138.993887][ T8486] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.190342][ T12] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.249403][ T49] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.312134][ T8548] netlink: 'syz.1.849': attribute type 11 has an invalid length. [ 139.338928][ T8548] netlink: 224 bytes leftover after parsing attributes in process `syz.1.849'. [ 139.350141][ T49] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.366043][ T49] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.386108][ T8553] netlink: 'syz.0.851': attribute type 10 has an invalid length. [ 139.394407][ T8553] veth1_macvtap: left promiscuous mode [ 139.424475][ T8553] team0: Device veth1_macvtap failed to register rx_handler [ 139.632866][ T8566] netlink: 8 bytes leftover after parsing attributes in process `syz.3.856'. [ 139.650860][ T8564] net_ratelimit: 11 callbacks suppressed [ 139.650880][ T8564] TC_ACT_REPEAT abuse ? [ 139.661631][ C0] TC_ACT_REPEAT abuse ? [ 139.705578][ T8566] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap3 [ 139.742066][ T8566] gretap3: default qdisc (pfifo_fast) fail, fallback to noqueue [ 139.758009][ T8566] gretap3: entered promiscuous mode [ 139.764788][ T8566] gretap3: entered allmulticast mode [ 139.859933][ T8582] netlink: 'syz.2.862': attribute type 5 has an invalid length. [ 140.074667][ T8600] netlink: 'syz.1.867': attribute type 11 has an invalid length. [ 140.099300][ T8600] netlink: 'syz.1.867': attribute type 1 has an invalid length. [ 140.175260][ T8600] 8021q: adding VLAN 0 to HW filter on device bond2 [ 140.186281][ T8599] netlink: 'syz.2.866': attribute type 5 has an invalid length. [ 140.215447][ T8609] bond2: (slave geneve2): making interface the new active one [ 140.225280][ T8609] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 140.356234][ T8617] tipc: Started in network mode [ 140.375679][ T8617] tipc: Node identity ac14140f, cluster identity 4711 [ 140.393085][ T8617] tipc: New replicast peer: 255.255.255.255 [ 140.414146][ T8617] tipc: Enabled bearer , priority 10 [ 140.623725][ T8631] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 140.917706][ T8647] 8021q: adding VLAN 0 to HW filter on device bond4 [ 141.016659][ T8654] xt_time: unknown flags 0xf4 [ 141.036280][ T8658] veth0: entered promiscuous mode [ 141.390309][ T8676] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 141.534642][ T982] tipc: Node number set to 2886997007 [ 142.548535][ T8758] ieee802154 phy0 wpan0: encryption failed: -90 [ 142.577760][ T8761] ieee802154 phy0 wpan0: encryption failed: -90 [ 142.822090][ T8768] __nla_validate_parse: 16 callbacks suppressed [ 142.822111][ T8768] netlink: 8 bytes leftover after parsing attributes in process `syz.0.920'. [ 142.841924][ T8768] netlink: 12 bytes leftover after parsing attributes in process `syz.0.920'. [ 142.867433][ T8772] netlink: 104 bytes leftover after parsing attributes in process `syz.1.922'. [ 142.888390][ T8777] validate_nla: 6 callbacks suppressed [ 142.888411][ T8777] netlink: 'syz.3.921': attribute type 1 has an invalid length. [ 142.902210][ T8777] netlink: 'syz.3.921': attribute type 4 has an invalid length. [ 142.911889][ T8777] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.921'. [ 142.930689][ T8775] netlink: 12 bytes leftover after parsing attributes in process `syz.4.923'. [ 142.977338][ T8783] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 143.011627][ T8783] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 143.039621][ T8785] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 143.050914][ T8783] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 143.081133][ T8783] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 143.094523][ T8785] syzkaller1: entered promiscuous mode [ 143.100036][ T8785] syzkaller1: entered allmulticast mode [ 143.108877][ T8783] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 143.153851][ T8783] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 143.181347][ T8783] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 143.449216][ T8807] netlink: 12 bytes leftover after parsing attributes in process `syz.1.932'. [ 143.584033][ T8815] netlink: 8 bytes leftover after parsing attributes in process `syz.4.933'. [ 143.990860][ T8829] !: renamed from dummy0 (while UP) [ 144.148459][ T8841] netlink: 156 bytes leftover after parsing attributes in process `syz.4.945'. [ 144.202035][ T8843] netlink: 16 bytes leftover after parsing attributes in process `syz.4.945'. [ 144.242123][ T8843] netlink: 32 bytes leftover after parsing attributes in process `syz.4.945'. [ 144.267054][ T8841] gretap1: entered promiscuous mode [ 144.283557][ T8841] gretap1: entered allmulticast mode [ 144.471063][ T8861] tipc: Enabled bearer , priority 0 [ 144.519243][ T8861] syzkaller0: entered promiscuous mode [ 144.537388][ T8861] syzkaller0: entered allmulticast mode [ 144.570093][ T8861] tipc: Resetting bearer [ 144.616083][ T8860] tipc: Resetting bearer [ 144.663852][ T8860] tipc: Disabling bearer [ 144.928225][ T8888] netlink: 'syz.4.960': attribute type 1 has an invalid length. [ 145.318210][ T8906] tipc: Started in network mode [ 145.326580][ T8906] tipc: Node identity d65d015db216, cluster identity 4711 [ 145.334128][ T8906] tipc: Enabled bearer , priority 0 [ 145.372514][ T8914] syzkaller0: entered promiscuous mode [ 145.381519][ T8914] syzkaller0: entered allmulticast mode [ 145.407712][ T8906] (unnamed net_device) (uninitialized): peer notification delay (1164) is not a multiple of miimon (100), value rounded to 1100 ms [ 145.456885][ T8906] bond2: entered promiscuous mode [ 145.461969][ T8906] bond2: entered allmulticast mode [ 145.468237][ T8906] 8021q: adding VLAN 0 to HW filter on device bond2 [ 145.493436][ T8906] tipc: Resetting bearer [ 145.504163][ T8919] (unnamed net_device) (uninitialized): option use_carrier: invalid value (4) [ 145.528832][ T8905] tipc: Resetting bearer [ 145.631464][ T8905] tipc: Disabling bearer [ 146.659640][ T9011] netlink: 'syz.1.1000': attribute type 1 has an invalid length. [ 146.670286][ T9013] veth0: entered promiscuous mode [ 146.679865][ T9013] net_ratelimit: 59 callbacks suppressed [ 146.679882][ T9013] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 146.721044][ T9012] veth0: left promiscuous mode [ 146.821295][ T9018] netlink: 'syz.3.1004': attribute type 8 has an invalid length. [ 147.161615][ T9045] tipc: Can't bind to reserved service type 2 [ 147.181367][ T9037] ve: renamed from ipvlan1 [ 147.424303][ T9062] lo: entered allmulticast mode [ 147.430207][ T9062] lo: left allmulticast mode [ 147.553584][ T9070] tipc: Enabled bearer , priority 0 [ 147.580598][ T9070] syzkaller0: entered promiscuous mode [ 147.611457][ T9070] syzkaller0: entered allmulticast mode [ 147.737890][ T9079] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 147.760270][ T9070] tipc: Resetting bearer [ 147.778758][ T9070] netlink: 'syz.0.1017': attribute type 83 has an invalid length. [ 147.847837][ T9069] tipc: Resetting bearer [ 147.875736][ T9069] tipc: Disabling bearer [ 148.145235][ T9110] netlink: 'syz.2.1029': attribute type 4 has an invalid length. [ 148.307704][ T9120] __nla_validate_parse: 15 callbacks suppressed [ 148.307727][ T9120] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1032'. [ 148.362936][ T9120] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1032'. [ 149.656625][ T9106] 8021q: VLANs not supported on ip6_vti0 [ 149.766104][ T9139] netlink: 'syz.1.1039': attribute type 28 has an invalid length. [ 149.781412][ T9140] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1038'. [ 149.833348][ T9139] netlink: 'syz.1.1039': attribute type 3 has an invalid length. [ 149.845747][ T9139] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1039'. [ 149.871309][ T9139] netlink: 'syz.1.1039': attribute type 2 has an invalid length. [ 149.888955][ T9144] netlink: 112 bytes leftover after parsing attributes in process `syz.4.1041'. [ 150.029202][ T9156] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1044'. [ 150.111750][ T9163] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1047'. [ 150.370522][ T8690] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 150.380036][ T9178] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 150.398330][ T9178] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1054'. [ 150.417953][ T9178] netlink: 19 bytes leftover after parsing attributes in process `syz.2.1054'. [ 150.420613][ T9174] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1053'. [ 150.456395][ T9178] xfrm1: entered promiscuous mode [ 150.461903][ T9178] xfrm1: entered allmulticast mode [ 150.546239][ T9185] netlink: 'syz.0.1056': attribute type 1 has an invalid length. [ 150.581103][ T9185] netlink: 'syz.0.1056': attribute type 4 has an invalid length. [ 150.818712][ T9200] netlink: 'syz.0.1062': attribute type 14 has an invalid length. [ 151.031210][ T9213] netlink: 'syz.2.1067': attribute type 1 has an invalid length. [ 151.039288][ T9213] netlink: 'syz.2.1067': attribute type 4 has an invalid length. [ 151.194027][ T9224] netlink: 'syz.4.1070': attribute type 10 has an invalid length. [ 151.201929][ T9224] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 151.259763][ T9224] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 151.333129][ T9232] bridge_slave_1: left allmulticast mode [ 151.349920][ T9232] bridge_slave_1: left promiscuous mode [ 151.375386][ T9232] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.400114][ T9232] bridge_slave_0: left allmulticast mode [ 151.409427][ T9232] bridge_slave_0: left promiscuous mode [ 151.420427][ T9232] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.457486][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 151.596189][ T9224] macvtap1: entered allmulticast mode [ 151.613738][ T9224] veth0_macvtap: entered allmulticast mode [ 152.037268][ T9278] bridge: RTM_NEWNEIGH with invalid ether address [ 152.452962][ T9308] tc_dump_action: action bad kind [ 153.010569][ T9339] tipc: Started in network mode [ 153.015775][ T9339] tipc: Node identity de64962a98f7, cluster identity 4711 [ 153.023488][ T9339] tipc: Enabled bearer , priority 0 [ 153.072798][ T9339] syzkaller0: entered promiscuous mode [ 153.091056][ T9339] syzkaller0: entered allmulticast mode [ 153.184386][ T9339] tipc: Resetting bearer [ 153.208256][ T9337] tipc: Resetting bearer [ 153.251266][ T9337] tipc: Disabling bearer [ 153.685245][ T9374] syzkaller0: entered promiscuous mode [ 153.723510][ T9374] syzkaller0: entered allmulticast mode [ 153.752811][ T9370] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 153.821319][ T9364] infiniband syz2: set down [ 153.826172][ T9364] infiniband syz2: added ipvlan1 [ 153.892348][ T9364] RDS/IB: syz2: added [ 153.897142][ T9364] smc: adding ib device syz2 with port count 1 [ 153.904028][ T9364] smc: ib device syz2 port 1 has pnetid [ 154.383468][ T9405] __nla_validate_parse: 23 callbacks suppressed [ 154.383491][ T9405] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1128'. [ 154.407348][ T9406] validate_nla: 4 callbacks suppressed [ 154.407368][ T9406] netlink: 'syz.4.1126': attribute type 7 has an invalid length. [ 154.524722][ T9410] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1130'. [ 154.540112][ T9406] : entered promiscuous mode [ 154.723372][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 154.751793][ T9420] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1133'. [ 154.761671][ T9419] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1133'. [ 154.846532][ T9423] vlan3: entered allmulticast mode [ 154.851862][ T9423] hsr0: entered allmulticast mode [ 154.858543][ T9423] hsr_slave_0: entered allmulticast mode [ 155.041624][ T9431] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1137'. [ 155.116954][ T9436] Bluetooth: MGMT ver 1.23 [ 155.192100][ T9438] nftables ruleset with unbound chain [ 155.289042][ T9437] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1139'. [ 155.301796][ T9441] netlink: 9 bytes leftover after parsing attributes in process `syz.2.1140'. [ 155.312334][ T9441] gretap0: entered promiscuous mode [ 155.322453][ T9441] netlink: 5 bytes leftover after parsing attributes in process `syz.2.1140'. [ 155.332677][ T9441] 0{X: renamed from gretap0 [ 155.342520][ T9441] 0{X: left promiscuous mode [ 155.348188][ T9441] 0{X: entered allmulticast mode [ 155.385813][ T9441] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 155.580081][ T9453] netlink: 'syz.1.1143': attribute type 1 has an invalid length. [ 155.682762][ T9454] bond3: (slave gretap1): making interface the new active one [ 155.691312][ T9454] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 155.890550][ T9471] netlink: 'syz.1.1150': attribute type 10 has an invalid length. [ 155.906807][ T9471] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 155.937030][ T9471] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 156.011118][ T9477] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1152'. [ 156.295374][ T9480] netlink: 'syz.2.1153': attribute type 10 has an invalid length. [ 156.306282][ T9480] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1153'. [ 156.333536][ T9480] dummy0: entered promiscuous mode [ 156.370785][ T9480] bridge0: port 3(dummy0) entered blocking state [ 156.383962][ T9480] bridge0: port 3(dummy0) entered disabled state [ 156.411028][ T9480] dummy0: entered allmulticast mode [ 156.439457][ T9480] bridge0: port 3(dummy0) entered blocking state [ 156.446107][ T9480] bridge0: port 3(dummy0) entered forwarding state [ 156.743474][ T9505] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 156.778965][ T9505] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 156.828692][ T9505] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 156.857221][ T9505] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 156.888620][ T9505] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 156.981391][ T9519] lo speed is unknown, defaulting to 1000 [ 157.003013][ T9519] lo speed is unknown, defaulting to 1000 [ 157.020743][ T9519] lo speed is unknown, defaulting to 1000 [ 157.511170][ T9546] Bluetooth: MGMT ver 1.23 [ 157.511900][ T43] lo speed is unknown, defaulting to 1000 [ 157.521955][ T9519] infiniband syz0: set active [ 157.527949][ T9519] infiniband syz0: added lo [ 157.611747][ T9550] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 157.694282][ T9519] RDS/IB: syz0: added [ 157.698519][ T9519] smc: adding ib device syz0 with port count 1 [ 157.708678][ T9519] smc: ib device syz0 port 1 has pnetid [ 157.730854][ T43] lo speed is unknown, defaulting to 1000 [ 157.740051][ T9519] lo speed is unknown, defaulting to 1000 [ 157.910113][ T9565] netlink: 'syz.4.1176': attribute type 8 has an invalid length. [ 158.267265][ T9519] lo speed is unknown, defaulting to 1000 [ 158.878922][ T9519] lo speed is unknown, defaulting to 1000 [ 159.035733][ T9618] netlink: 'syz.0.1196': attribute type 29 has an invalid length. [ 159.061785][ T9618] netlink: 'syz.0.1196': attribute type 29 has an invalid length. [ 159.249013][ T9601] lo speed is unknown, defaulting to 1000 [ 159.542246][ T9519] lo speed is unknown, defaulting to 1000 [ 159.659009][ T9642] __nla_validate_parse: 13 callbacks suppressed [ 159.659027][ T9642] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1205'. [ 159.674784][ T9642] bridge_slave_1: left allmulticast mode [ 159.680543][ T9642] bridge_slave_1: left promiscuous mode [ 159.687953][ T9642] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.728730][ T9642] bridge_slave_0: left allmulticast mode [ 159.747290][ T9642] bridge_slave_0: left promiscuous mode [ 159.774525][ T9642] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.784291][ T9648] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 160.083671][ T9666] FAULT_INJECTION: forcing a failure. [ 160.083671][ T9666] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 160.101511][ T9666] CPU: 0 UID: 0 PID: 9666 Comm: syz.4.1212 Not tainted syzkaller #0 PREEMPT(full) [ 160.101539][ T9666] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 160.101558][ T9666] Call Trace: [ 160.101566][ T9666] [ 160.101576][ T9666] dump_stack_lvl+0x189/0x250 [ 160.101606][ T9666] ? __pfx____ratelimit+0x10/0x10 [ 160.101628][ T9666] ? __pfx_dump_stack_lvl+0x10/0x10 [ 160.101652][ T9666] ? __pfx__printk+0x10/0x10 [ 160.101680][ T9666] ? __might_fault+0xb0/0x130 [ 160.101719][ T9666] should_fail_ex+0x414/0x560 [ 160.101753][ T9666] _copy_from_user+0x2d/0xb0 [ 160.101779][ T9666] ___sys_sendmsg+0x158/0x2a0 [ 160.101808][ T9666] ? __pfx____sys_sendmsg+0x10/0x10 [ 160.101877][ T9666] ? __fget_files+0x2a/0x420 [ 160.101894][ T9666] ? __fget_files+0x3a0/0x420 [ 160.101922][ T9666] __x64_sys_sendmsg+0x19b/0x260 [ 160.101950][ T9666] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 160.101984][ T9666] ? __pfx_ksys_write+0x10/0x10 [ 160.102007][ T9666] ? rcu_is_watching+0x15/0xb0 [ 160.102030][ T9666] ? do_syscall_64+0xbe/0x3b0 [ 160.102051][ T9666] do_syscall_64+0xfa/0x3b0 [ 160.102069][ T9666] ? lockdep_hardirqs_on+0x9c/0x150 [ 160.102088][ T9666] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.102107][ T9666] ? clear_bhb_loop+0x60/0xb0 [ 160.102131][ T9666] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.102150][ T9666] RIP: 0033:0x7f55a158eba9 [ 160.102168][ T9666] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 160.102185][ T9666] RSP: 002b:00007f55a23de038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 160.102211][ T9666] RAX: ffffffffffffffda RBX: 00007f55a17d5fa0 RCX: 00007f55a158eba9 [ 160.102225][ T9666] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 160.102237][ T9666] RBP: 00007f55a23de090 R08: 0000000000000000 R09: 0000000000000000 [ 160.102248][ T9666] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 160.102259][ T9666] R13: 00007f55a17d6038 R14: 00007f55a17d5fa0 R15: 00007ffcea9c5c08 [ 160.102286][ T9666] [ 160.343531][ T9519] lo speed is unknown, defaulting to 1000 [ 160.438575][ T9671] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1216'. [ 160.449827][ T9671] netlink: 'syz.0.1216': attribute type 2 has an invalid length. [ 160.457899][ T9671] netlink: 'syz.0.1216': attribute type 1 has an invalid length. [ 160.466523][ T9671] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1216'. [ 162.963366][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 162.971000][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 178.963442][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 194.092332][ T9690] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1217'. [ 194.227914][ T9693] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 194.242813][ T9693] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 194.270995][ T9701] FAULT_INJECTION: forcing a failure. [ 194.270995][ T9701] name failslab, interval 1, probability 0, space 0, times 1 [ 194.285423][ T9701] CPU: 0 UID: 0 PID: 9701 Comm: syz.1.1225 Not tainted syzkaller #0 PREEMPT(full) [ 194.285449][ T9701] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 194.285461][ T9701] Call Trace: [ 194.285469][ T9701] [ 194.285477][ T9701] dump_stack_lvl+0x189/0x250 [ 194.285506][ T9701] ? __pfx____ratelimit+0x10/0x10 [ 194.285526][ T9701] ? __pfx_dump_stack_lvl+0x10/0x10 [ 194.285547][ T9701] ? __pfx__printk+0x10/0x10 [ 194.285575][ T9701] ? __pfx___might_resched+0x10/0x10 [ 194.285596][ T9701] should_fail_ex+0x414/0x560 [ 194.285627][ T9701] should_failslab+0xa8/0x100 [ 194.285656][ T9701] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 194.285681][ T9701] ? __alloc_skb+0x112/0x2d0 [ 194.285703][ T9701] __alloc_skb+0x112/0x2d0 [ 194.285724][ T9701] netlink_sendmsg+0x5c6/0xb30 [ 194.285753][ T9701] ? __pfx_netlink_sendmsg+0x10/0x10 [ 194.285773][ T9701] ? aa_sock_msg_perm+0xf1/0x1d0 [ 194.285792][ T9701] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 194.285810][ T9701] ? __pfx_netlink_sendmsg+0x10/0x10 [ 194.285830][ T9701] __sock_sendmsg+0x21c/0x270 [ 194.285861][ T9701] ____sys_sendmsg+0x505/0x830 [ 194.285891][ T9701] ? __pfx_____sys_sendmsg+0x10/0x10 [ 194.285924][ T9701] ? import_iovec+0x74/0xa0 [ 194.285953][ T9701] ___sys_sendmsg+0x21f/0x2a0 [ 194.285979][ T9701] ? __pfx____sys_sendmsg+0x10/0x10 [ 194.286039][ T9701] ? __fget_files+0x2a/0x420 [ 194.286056][ T9701] ? __fget_files+0x3a0/0x420 [ 194.286082][ T9701] __x64_sys_sendmsg+0x19b/0x260 [ 194.286109][ T9701] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 194.286143][ T9701] ? __pfx_ksys_write+0x10/0x10 [ 194.286166][ T9701] ? rcu_is_watching+0x15/0xb0 [ 194.286188][ T9701] ? do_syscall_64+0xbe/0x3b0 [ 194.286210][ T9701] do_syscall_64+0xfa/0x3b0 [ 194.286226][ T9701] ? lockdep_hardirqs_on+0x9c/0x150 [ 194.286241][ T9701] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.286257][ T9701] ? clear_bhb_loop+0x60/0xb0 [ 194.286276][ T9701] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.286292][ T9701] RIP: 0033:0x7fdd15f8eba9 [ 194.286321][ T9701] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 194.286335][ T9701] RSP: 002b:00007fdd16e43038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 194.286353][ T9701] RAX: ffffffffffffffda RBX: 00007fdd161d5fa0 RCX: 00007fdd15f8eba9 [ 194.286364][ T9701] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 194.286374][ T9701] RBP: 00007fdd16e43090 R08: 0000000000000000 R09: 0000000000000000 [ 194.286384][ T9701] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 194.286393][ T9701] R13: 00007fdd161d6038 R14: 00007fdd161d5fa0 R15: 00007ffec3f3aac8 [ 194.286418][ T9701] [ 194.571660][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.895294][ T9719] netlink: 'syz.0.1230': attribute type 1 has an invalid length. [ 194.977825][ T9719] 8021q: adding VLAN 0 to HW filter on device bond5 [ 195.016740][ T9719] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1230'. [ 195.019733][ T9729] bond5: (slave geneve3): making interface the new active one [ 195.038150][ T9729] bond5: (slave geneve3): Enslaving as an active interface with an up link [ 195.066463][ T974] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.079861][ T974] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.091802][ T974] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.615168][ T9765] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 195.659154][ T9765] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1243'. [ 195.700145][ T9769] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1245'. [ 195.802251][ T9769] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 196.098502][ T9786] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1248'. [ 196.108800][ T9786] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1248'. [ 196.365320][ T9809] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 196.426718][ T9814] netlink: 'syz.4.1260': attribute type 23 has an invalid length. [ 196.656432][ T9831] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1264'. [ 196.673360][ T9831] netlink: 92 bytes leftover after parsing attributes in process `syz.0.1264'. [ 196.841946][ T9837] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1267'. [ 196.852219][ T9835] pimreg3: entered allmulticast mode [ 196.950887][ T9844] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1271'. [ 197.064869][ T9852] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 197.081929][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 197.110641][ T1557] lo speed is unknown, defaulting to 1000 [ 197.117024][ T9854] netlink: 'syz.4.1271': attribute type 29 has an invalid length. [ 197.165291][ T9858] netlink: 'syz.4.1271': attribute type 29 has an invalid length. [ 197.467947][ T9878] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 197.613443][ T5947] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 197.756660][ T9895] bridge4: entered promiscuous mode [ 197.774632][ T9895] bridge4: entered allmulticast mode [ 197.992613][ T9912] tipc: Enabled bearer , priority 0 [ 198.020867][ T9912] syzkaller0: entered promiscuous mode [ 198.033317][ T9912] syzkaller0: entered allmulticast mode [ 198.053697][ T9912] sch_tbf: burst 127 is lower than device veth1_to_bridge mtu (1514) ! [ 198.118771][ T9919] netlink: 'syz.2.1296': attribute type 1 has an invalid length. [ 198.159095][ T9919] 8021q: adding VLAN 0 to HW filter on device bond3 [ 198.174359][ T9912] tipc: Resetting bearer [ 198.203484][ T9911] tipc: Resetting bearer [ 198.219274][ T9926] block nbd3: not configured, cannot reconfigure [ 198.254131][ T9911] tipc: Disabling bearer [ 198.719687][ T9949] tipc: Enabled bearer , priority 0 [ 198.881368][ T9949] syzkaller0: entered promiscuous mode [ 198.899075][ T9949] syzkaller0: entered allmulticast mode [ 198.910947][ T9949] tipc: Resetting bearer [ 199.085449][ T974] tipc: Resetting bearer [ 199.111865][ T9948] tipc: Resetting bearer [ 199.225082][ T9974] __nla_validate_parse: 9 callbacks suppressed [ 199.225101][ T9974] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1313'. [ 199.280861][ T9976] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1314'. [ 200.790204][ T9948] tipc: Disabling bearer [ 200.822318][ T9976] erspan0: entered promiscuous mode [ 200.898912][T10006] nbd: must specify at least one socket [ 201.085207][T10016] sctp: [Deprecated]: syz.3.1321 (pid 10016) Use of struct sctp_assoc_value in delayed_ack socket option. [ 201.085207][T10016] Use struct sctp_sack_info instead [ 201.141251][T10022] lo: entered allmulticast mode [ 201.169088][T10020] netlink: 'syz.0.1322': attribute type 1 has an invalid length. [ 201.580452][T10041] FAULT_INJECTION: forcing a failure. [ 201.580452][T10041] name failslab, interval 1, probability 0, space 0, times 0 [ 201.613231][T10041] CPU: 1 UID: 0 PID: 10041 Comm: syz.0.1328 Not tainted syzkaller #0 PREEMPT(full) [ 201.613257][T10041] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 201.613269][T10041] Call Trace: [ 201.613277][T10041] [ 201.613284][T10041] dump_stack_lvl+0x189/0x250 [ 201.613312][T10041] ? __pfx____ratelimit+0x10/0x10 [ 201.613331][T10041] ? __pfx_dump_stack_lvl+0x10/0x10 [ 201.613356][T10041] ? __pfx__printk+0x10/0x10 [ 201.613388][T10041] ? __pfx___might_resched+0x10/0x10 [ 201.613405][T10041] ? fs_reclaim_acquire+0x7d/0x100 [ 201.613429][T10041] should_fail_ex+0x414/0x560 [ 201.613463][T10041] should_failslab+0xa8/0x100 [ 201.613493][T10041] __kmalloc_noprof+0xcb/0x4f0 [ 201.613518][T10041] ? security_sk_alloc+0x52/0x390 [ 201.613568][T10041] security_sk_alloc+0x52/0x390 [ 201.613594][T10041] sk_prot_alloc+0x101/0x220 [ 201.613622][T10041] sk_alloc+0x3a/0x370 [ 201.613650][T10041] inet_create+0x7a0/0x1000 [ 201.613669][T10041] ? inet_create+0x9c/0x1000 [ 201.613692][T10041] __sock_create+0x4b0/0x9f0 [ 201.613722][T10041] udp_sock_create4+0xbe/0x4b0 [ 201.613754][T10041] ? __pfx_udp_sock_create4+0x10/0x10 [ 201.613786][T10041] ? __pfx___nla_validate_parse+0x10/0x10 [ 201.613822][T10041] fou_nl_add_doit+0x16c/0x690 [ 201.613846][T10041] ? __pfx_fou_nl_add_doit+0x10/0x10 [ 201.613889][T10041] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 201.613925][T10041] genl_family_rcv_msg_doit+0x212/0x300 [ 201.613960][T10041] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 201.614001][T10041] ? bpf_lsm_capable+0x9/0x20 [ 201.614027][T10041] ? security_capable+0x7e/0x2e0 [ 201.614063][T10041] genl_rcv_msg+0x60e/0x790 [ 201.614097][T10041] ? __pfx_genl_rcv_msg+0x10/0x10 [ 201.614122][T10041] ? __pfx_fou_nl_add_doit+0x10/0x10 [ 201.614159][T10041] netlink_rcv_skb+0x208/0x470 [ 201.614177][T10041] ? __lock_acquire+0xab9/0xd20 [ 201.614206][T10041] ? __pfx_genl_rcv_msg+0x10/0x10 [ 201.614234][T10041] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 201.614275][T10041] ? down_read+0x1ad/0x2e0 [ 201.614302][T10041] genl_rcv+0x28/0x40 [ 201.614325][T10041] netlink_unicast+0x82f/0x9e0 [ 201.614365][T10041] ? __pfx_netlink_unicast+0x10/0x10 [ 201.614397][T10041] ? netlink_sendmsg+0x642/0xb30 [ 201.614416][T10041] ? skb_put+0x11b/0x210 [ 201.614440][T10041] netlink_sendmsg+0x805/0xb30 [ 201.614471][T10041] ? __pfx_netlink_sendmsg+0x10/0x10 [ 201.614496][T10041] ? aa_sock_msg_perm+0xf1/0x1d0 [ 201.614518][T10041] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 201.614539][T10041] ? __pfx_netlink_sendmsg+0x10/0x10 [ 201.614559][T10041] __sock_sendmsg+0x21c/0x270 [ 201.614592][T10041] ____sys_sendmsg+0x505/0x830 [ 201.614622][T10041] ? __pfx_____sys_sendmsg+0x10/0x10 [ 201.614657][T10041] ? import_iovec+0x74/0xa0 [ 201.614685][T10041] ___sys_sendmsg+0x21f/0x2a0 [ 201.614711][T10041] ? __pfx____sys_sendmsg+0x10/0x10 [ 201.614777][T10041] ? __fget_files+0x2a/0x420 [ 201.614793][T10041] ? __fget_files+0x3a0/0x420 [ 201.614828][T10041] __x64_sys_sendmsg+0x19b/0x260 [ 201.614856][T10041] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 201.614891][T10041] ? __pfx_ksys_write+0x10/0x10 [ 201.614914][T10041] ? rcu_is_watching+0x15/0xb0 [ 201.614940][T10041] ? do_syscall_64+0xbe/0x3b0 [ 201.614966][T10041] do_syscall_64+0xfa/0x3b0 [ 201.614985][T10041] ? lockdep_hardirqs_on+0x9c/0x150 [ 201.615005][T10041] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 201.615024][T10041] ? clear_bhb_loop+0x60/0xb0 [ 201.615048][T10041] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 201.615067][T10041] RIP: 0033:0x7ff17938eba9 [ 201.615084][T10041] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 201.615101][T10041] RSP: 002b:00007ff17a20d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 201.615122][T10041] RAX: ffffffffffffffda RBX: 00007ff1795d5fa0 RCX: 00007ff17938eba9 [ 201.615136][T10041] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 201.615149][T10041] RBP: 00007ff17a20d090 R08: 0000000000000000 R09: 0000000000000000 [ 201.615161][T10041] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 201.615172][T10041] R13: 00007ff1795d6038 R14: 00007ff1795d5fa0 R15: 00007ffe9cf759e8 [ 201.615205][T10041] [ 201.618766][T10043] ip6tnl0: Caught tx_queue_len zero misconfig [ 202.061387][T10043] sch_tbf: burst 8 is lower than device ip6tnl0 mtu (1452) ! [ 202.281447][T10069] netlink: 'syz.1.1336': attribute type 11 has an invalid length. [ 202.294181][T10069] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1336'. [ 202.412356][T10077] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1335'. [ 202.525072][T10086] FAULT_INJECTION: forcing a failure. [ 202.525072][T10086] name failslab, interval 1, probability 0, space 0, times 0 [ 202.546708][T10086] CPU: 1 UID: 0 PID: 10086 Comm: syz.0.1340 Not tainted syzkaller #0 PREEMPT(full) [ 202.546744][T10086] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 202.546755][T10086] Call Trace: [ 202.546763][T10086] [ 202.546772][T10086] dump_stack_lvl+0x189/0x250 [ 202.546798][T10086] ? __pfx____ratelimit+0x10/0x10 [ 202.546819][T10086] ? __pfx_dump_stack_lvl+0x10/0x10 [ 202.546843][T10086] ? __pfx__printk+0x10/0x10 [ 202.546873][T10086] ? __pfx___might_resched+0x10/0x10 [ 202.546888][T10086] ? fs_reclaim_acquire+0x7d/0x100 [ 202.546910][T10086] should_fail_ex+0x414/0x560 [ 202.546944][T10086] should_failslab+0xa8/0x100 [ 202.546971][T10086] __kmalloc_cache_noprof+0x70/0x3d0 [ 202.546995][T10086] ? fou_nl_add_doit+0x1be/0x690 [ 202.547019][T10086] fou_nl_add_doit+0x1be/0x690 [ 202.547041][T10086] ? __pfx_fou_nl_add_doit+0x10/0x10 [ 202.547080][T10086] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 202.547116][T10086] genl_family_rcv_msg_doit+0x212/0x300 [ 202.547149][T10086] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 202.547188][T10086] ? bpf_lsm_capable+0x9/0x20 [ 202.547213][T10086] ? security_capable+0x7e/0x2e0 [ 202.547250][T10086] genl_rcv_msg+0x60e/0x790 [ 202.547284][T10086] ? __pfx_genl_rcv_msg+0x10/0x10 [ 202.547308][T10086] ? __pfx_fou_nl_add_doit+0x10/0x10 [ 202.547343][T10086] netlink_rcv_skb+0x208/0x470 [ 202.547360][T10086] ? __lock_acquire+0xab9/0xd20 [ 202.547390][T10086] ? __pfx_genl_rcv_msg+0x10/0x10 [ 202.547416][T10086] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 202.547454][T10086] ? down_read+0x1ad/0x2e0 [ 202.547478][T10086] genl_rcv+0x28/0x40 [ 202.547501][T10086] netlink_unicast+0x82f/0x9e0 [ 202.547538][T10086] ? __pfx_netlink_unicast+0x10/0x10 [ 202.547567][T10086] ? netlink_sendmsg+0x642/0xb30 [ 202.547583][T10086] ? skb_put+0x11b/0x210 [ 202.547610][T10086] netlink_sendmsg+0x805/0xb30 [ 202.547641][T10086] ? __pfx_netlink_sendmsg+0x10/0x10 [ 202.547665][T10086] ? aa_sock_msg_perm+0xf1/0x1d0 [ 202.547687][T10086] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 202.547706][T10086] ? __pfx_netlink_sendmsg+0x10/0x10 [ 202.547735][T10086] __sock_sendmsg+0x21c/0x270 [ 202.547768][T10086] ____sys_sendmsg+0x505/0x830 [ 202.547796][T10086] ? __pfx_____sys_sendmsg+0x10/0x10 [ 202.547830][T10086] ? import_iovec+0x74/0xa0 [ 202.547855][T10086] ___sys_sendmsg+0x21f/0x2a0 [ 202.547881][T10086] ? __pfx____sys_sendmsg+0x10/0x10 [ 202.547946][T10086] ? __fget_files+0x2a/0x420 [ 202.547962][T10086] ? __fget_files+0x3a0/0x420 [ 202.547990][T10086] __x64_sys_sendmsg+0x19b/0x260 [ 202.548018][T10086] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 202.548053][T10086] ? __pfx_ksys_write+0x10/0x10 [ 202.548074][T10086] ? rcu_is_watching+0x15/0xb0 [ 202.548099][T10086] ? do_syscall_64+0xbe/0x3b0 [ 202.548123][T10086] do_syscall_64+0xfa/0x3b0 [ 202.548141][T10086] ? lockdep_hardirqs_on+0x9c/0x150 [ 202.548160][T10086] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 202.548177][T10086] ? clear_bhb_loop+0x60/0xb0 [ 202.548200][T10086] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 202.548217][T10086] RIP: 0033:0x7ff17938eba9 [ 202.548233][T10086] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 202.548248][T10086] RSP: 002b:00007ff17a20d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 202.548268][T10086] RAX: ffffffffffffffda RBX: 00007ff1795d5fa0 RCX: 00007ff17938eba9 [ 202.548281][T10086] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 202.548293][T10086] RBP: 00007ff17a20d090 R08: 0000000000000000 R09: 0000000000000000 [ 202.548303][T10086] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 202.548314][T10086] R13: 00007ff1795d6038 R14: 00007ff1795d5fa0 R15: 00007ffe9cf759e8 [ 202.548344][T10086] [ 203.083375][T10097] netlink: 'syz.1.1343': attribute type 12 has an invalid length. [ 203.268404][T10109] netlink: 'syz.0.1346': attribute type 10 has an invalid length. [ 203.308655][T10109] team0: Device veth1_macvtap failed to register rx_handler [ 203.323707][T10112] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1349'. [ 203.347376][T10112] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 203.383800][T10114] netlink: 300 bytes leftover after parsing attributes in process `syz.3.1349'. [ 203.488953][T10122] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1352'. [ 203.513447][T10123] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1353'. [ 203.514736][T10120] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1352'. [ 203.551575][T10123] netlink: 92 bytes leftover after parsing attributes in process `syz.0.1353'. [ 203.578084][T10127] FAULT_INJECTION: forcing a failure. [ 203.578084][T10127] name failslab, interval 1, probability 0, space 0, times 0 [ 203.646686][T10127] CPU: 1 UID: 0 PID: 10127 Comm: syz.1.1354 Not tainted syzkaller #0 PREEMPT(full) [ 203.646715][T10127] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 203.646727][T10127] Call Trace: [ 203.646735][T10127] [ 203.646743][T10127] dump_stack_lvl+0x189/0x250 [ 203.646772][T10127] ? __pfx____ratelimit+0x10/0x10 [ 203.646793][T10127] ? __pfx_dump_stack_lvl+0x10/0x10 [ 203.646816][T10127] ? __pfx__printk+0x10/0x10 [ 203.646849][T10127] ? __pfx___might_resched+0x10/0x10 [ 203.646867][T10127] ? fs_reclaim_acquire+0x7d/0x100 [ 203.646890][T10127] should_fail_ex+0x414/0x560 [ 203.646924][T10127] should_failslab+0xa8/0x100 [ 203.646954][T10127] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 203.646982][T10127] ? __alloc_skb+0x112/0x2d0 [ 203.647013][T10127] __alloc_skb+0x112/0x2d0 [ 203.647042][T10127] netlink_ack+0x146/0xa50 [ 203.647060][T10127] ? __pfx_genl_rcv_msg+0x10/0x10 [ 203.647094][T10127] ? __asan_memcpy+0x40/0x70 [ 203.647115][T10127] ? __pfx_ref_tracker_free+0x10/0x10 [ 203.647143][T10127] netlink_rcv_skb+0x28c/0x470 [ 203.647161][T10127] ? __lock_acquire+0xab9/0xd20 [ 203.647190][T10127] ? __pfx_genl_rcv_msg+0x10/0x10 [ 203.647218][T10127] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 203.647263][T10127] ? down_read+0x1ad/0x2e0 [ 203.647288][T10127] genl_rcv+0x28/0x40 [ 203.647310][T10127] netlink_unicast+0x82f/0x9e0 [ 203.647346][T10127] ? __pfx_netlink_unicast+0x10/0x10 [ 203.647374][T10127] ? netlink_sendmsg+0x642/0xb30 [ 203.647391][T10127] ? skb_put+0x11b/0x210 [ 203.647417][T10127] netlink_sendmsg+0x805/0xb30 [ 203.647447][T10127] ? __pfx_netlink_sendmsg+0x10/0x10 [ 203.647471][T10127] ? aa_sock_msg_perm+0xf1/0x1d0 [ 203.647493][T10127] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 203.647513][T10127] ? __pfx_netlink_sendmsg+0x10/0x10 [ 203.647535][T10127] __sock_sendmsg+0x21c/0x270 [ 203.647568][T10127] ____sys_sendmsg+0x505/0x830 [ 203.647598][T10127] ? __pfx_____sys_sendmsg+0x10/0x10 [ 203.647640][T10127] ? import_iovec+0x74/0xa0 [ 203.647669][T10127] ___sys_sendmsg+0x21f/0x2a0 [ 203.647696][T10127] ? __pfx____sys_sendmsg+0x10/0x10 [ 203.647760][T10127] ? __fget_files+0x2a/0x420 [ 203.647776][T10127] ? __fget_files+0x3a0/0x420 [ 203.647804][T10127] __x64_sys_sendmsg+0x19b/0x260 [ 203.647832][T10127] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 203.647867][T10127] ? __pfx_ksys_write+0x10/0x10 [ 203.647890][T10127] ? rcu_is_watching+0x15/0xb0 [ 203.647916][T10127] ? do_syscall_64+0xbe/0x3b0 [ 203.647946][T10127] do_syscall_64+0xfa/0x3b0 [ 203.647965][T10127] ? lockdep_hardirqs_on+0x9c/0x150 [ 203.647984][T10127] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.648003][T10127] ? clear_bhb_loop+0x60/0xb0 [ 203.648026][T10127] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.648045][T10127] RIP: 0033:0x7fdd15f8eba9 [ 203.648062][T10127] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 203.648078][T10127] RSP: 002b:00007fdd16e43038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 203.648099][T10127] RAX: ffffffffffffffda RBX: 00007fdd161d5fa0 RCX: 00007fdd15f8eba9 [ 203.648113][T10127] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 203.648125][T10127] RBP: 00007fdd16e43090 R08: 0000000000000000 R09: 0000000000000000 [ 203.648137][T10127] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 203.648148][T10127] R13: 00007fdd161d6038 R14: 00007fdd161d5fa0 R15: 00007ffec3f3aac8 [ 203.648180][T10127] [ 204.018936][T10131] tipc: Enabling of bearer rejected, failed to enable media [ 204.169566][T10145] netlink: 'syz.4.1362': attribute type 10 has an invalid length. [ 204.187130][T10145] team0: Port device dummy0 added [ 204.194560][T10145] netlink: 'syz.4.1362': attribute type 10 has an invalid length. [ 204.219415][T10145] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 204.270219][T10145] team0: Failed to send options change via netlink (err -105) [ 204.281201][T10145] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 204.291942][T10145] team0: Port device dummy0 removed [ 204.304481][T10145] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 204.321425][T10150] __nla_validate_parse: 2 callbacks suppressed [ 204.321442][T10150] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1363'. [ 204.424349][T10155] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 204.469607][T10156] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 204.646908][T10165] openvswitch: netlink: Geneve opt len 62 is not a multiple of 4. [ 204.842374][T10172] FAULT_INJECTION: forcing a failure. [ 204.842374][T10172] name failslab, interval 1, probability 0, space 0, times 0 [ 204.855708][T10172] CPU: 1 UID: 0 PID: 10172 Comm: syz.4.1370 Not tainted syzkaller #0 PREEMPT(full) [ 204.855735][T10172] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 204.855747][T10172] Call Trace: [ 204.855755][T10172] [ 204.855763][T10172] dump_stack_lvl+0x189/0x250 [ 204.855791][T10172] ? __pfx____ratelimit+0x10/0x10 [ 204.855812][T10172] ? __pfx_dump_stack_lvl+0x10/0x10 [ 204.855835][T10172] ? __pfx__printk+0x10/0x10 [ 204.855866][T10172] ? __pfx___might_resched+0x10/0x10 [ 204.855883][T10172] ? fs_reclaim_acquire+0x7d/0x100 [ 204.855907][T10172] should_fail_ex+0x414/0x560 [ 204.855941][T10172] should_failslab+0xa8/0x100 [ 204.855970][T10172] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 204.855997][T10172] ? __alloc_skb+0x112/0x2d0 [ 204.856023][T10172] __alloc_skb+0x112/0x2d0 [ 204.856048][T10172] netlink_ack+0x146/0xa50 [ 204.856066][T10172] ? __pfx_genl_rcv_msg+0x10/0x10 [ 204.856096][T10172] ? __asan_memcpy+0x40/0x70 [ 204.856117][T10172] ? __pfx_ref_tracker_free+0x10/0x10 [ 204.856144][T10172] netlink_rcv_skb+0x28c/0x470 [ 204.856163][T10172] ? __lock_acquire+0xab9/0xd20 [ 204.856191][T10172] ? __pfx_genl_rcv_msg+0x10/0x10 [ 204.856219][T10172] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 204.856258][T10172] ? down_read+0x1ad/0x2e0 [ 204.856284][T10172] genl_rcv+0x28/0x40 [ 204.856307][T10172] netlink_unicast+0x82f/0x9e0 [ 204.856346][T10172] ? __pfx_netlink_unicast+0x10/0x10 [ 204.856377][T10172] ? netlink_sendmsg+0x642/0xb30 [ 204.856396][T10172] ? skb_put+0x11b/0x210 [ 204.856422][T10172] netlink_sendmsg+0x805/0xb30 [ 204.856453][T10172] ? __pfx_netlink_sendmsg+0x10/0x10 [ 204.856478][T10172] ? aa_sock_msg_perm+0xf1/0x1d0 [ 204.856507][T10172] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 204.856528][T10172] ? __pfx_netlink_sendmsg+0x10/0x10 [ 204.856549][T10172] __sock_sendmsg+0x21c/0x270 [ 204.856582][T10172] ____sys_sendmsg+0x505/0x830 [ 204.856613][T10172] ? __pfx_____sys_sendmsg+0x10/0x10 [ 204.856644][T10172] ? import_iovec+0x74/0xa0 [ 204.856673][T10172] ___sys_sendmsg+0x21f/0x2a0 [ 204.856700][T10172] ? __pfx____sys_sendmsg+0x10/0x10 [ 204.856764][T10172] ? __fget_files+0x2a/0x420 [ 204.856780][T10172] ? __fget_files+0x3a0/0x420 [ 204.856808][T10172] __x64_sys_sendmsg+0x19b/0x260 [ 204.856836][T10172] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 204.856871][T10172] ? __pfx_ksys_write+0x10/0x10 [ 204.856894][T10172] ? rcu_is_watching+0x15/0xb0 [ 204.856919][T10172] ? do_syscall_64+0xbe/0x3b0 [ 204.856944][T10172] do_syscall_64+0xfa/0x3b0 [ 204.856963][T10172] ? lockdep_hardirqs_on+0x9c/0x150 [ 204.856983][T10172] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 204.857002][T10172] ? clear_bhb_loop+0x60/0xb0 [ 204.857025][T10172] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 204.857044][T10172] RIP: 0033:0x7f55a158eba9 [ 204.857061][T10172] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 204.857077][T10172] RSP: 002b:00007f55a23de038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 204.857097][T10172] RAX: ffffffffffffffda RBX: 00007f55a17d5fa0 RCX: 00007f55a158eba9 [ 204.857112][T10172] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 204.857124][T10172] RBP: 00007f55a23de090 R08: 0000000000000000 R09: 0000000000000000 [ 204.857136][T10172] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 204.857147][T10172] R13: 00007f55a17d6038 R14: 00007f55a17d5fa0 R15: 00007ffcea9c5c08 [ 204.857179][T10172] [ 205.352331][T10167] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 205.362845][T10168] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 205.520642][T10184] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1373'. [ 205.606397][T10187] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1376'. [ 205.663766][T10186] netlink: 'syz.2.1376': attribute type 1 has an invalid length. [ 205.671631][T10186] netlink: 232 bytes leftover after parsing attributes in process `syz.2.1376'. [ 205.982407][T10212] netlink: 18 bytes leftover after parsing attributes in process `syz.2.1380'. [ 206.238276][T10235] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1388'. [ 206.276892][T10235] netlink: 576 bytes leftover after parsing attributes in process `syz.1.1388'. [ 206.319585][T10239] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0) [ 206.371169][T10241] netlink: 1020 bytes leftover after parsing attributes in process `syz.2.1392'. [ 206.389247][T10243] netlink: 'syz.3.1391': attribute type 4 has an invalid length. [ 206.409998][T10239] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0) [ 206.466362][T10243] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1391'. [ 206.934050][T10278] netlink: 'syz.3.1403': attribute type 2 has an invalid length. [ 206.945694][T10283] netlink: 'syz.3.1403': attribute type 2 has an invalid length. [ 207.032336][T10285] netlink: 'syz.1.1404': attribute type 11 has an invalid length. [ 207.045240][T10285] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1404'. [ 207.132222][T10297] netlink: 'syz.3.1409': attribute type 2 has an invalid length. [ 207.143294][T10291] v: renamed from veth0_macvtap [ 207.168619][T10297] team0: left promiscuous mode [ 207.173994][T10297] team0: left allmulticast mode [ 207.184231][T10297] 8021q: adding VLAN 0 to HW filter on device team0 [ 207.201622][T10297] team0: Cannot enslave team device to itself [ 207.214308][T10302] syzkaller1: entered promiscuous mode [ 207.230875][T10302] syzkaller1: entered allmulticast mode [ 207.374465][T10311] vlan1: entered allmulticast mode [ 207.389659][T10311] veth0_vlan: entered allmulticast mode [ 207.803760][T10334] team0: No ports can be present during mode change [ 207.872456][T10334] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !d4QN寿$ULvDUDw [ 208.244780][T10364] unknown channel width for channel at 909000KHz? [ 208.252643][T10364] netlink: 'syz.4.1432': attribute type 12 has an invalid length. [ 208.270901][T10364] netlink: 'syz.4.1432': attribute type 12 has an invalid length. [ 208.279631][ T3512] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 208.290923][ T3512] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 208.348865][ T3512] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 208.363346][ T3512] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 209.681085][T10406] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 209.699758][ T5956] IPVS: starting estimator thread 0... [ 209.793266][T10408] IPVS: using max 28 ests per chain, 67200 per kthread [ 210.291691][T10436] 8021q: VLANs not supported on ip_vti0 [ 210.421582][T10440] tipc: MTU too low for tipc bearer [ 210.442200][T10440] __nla_validate_parse: 7 callbacks suppressed [ 210.442219][T10440] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1455'. [ 210.475398][T10442] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1456'. [ 210.508858][T10442] lo: Caught tx_queue_len zero misconfig [ 210.922619][T10461] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1459'. [ 210.942654][T10461] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1459'. [ 211.199479][T10477] netlink: 'syz.3.1462': attribute type 1 has an invalid length. [ 211.370385][T10472] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.378160][T10472] bridge0: port 1(bridge_slave_0) entered disabled state [ 211.651875][T10472] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 211.665603][T10472] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 211.920999][ T5963] IPVS: starting estimator thread 0... [ 211.927822][T10514] IPVS: set_ctl: invalid protocol: 92 224.0.0.2:20004 [ 212.015366][T10516] IPVS: using max 29 ests per chain, 69600 per kthread [ 212.049699][ T974] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.073479][ T974] netdevsim netdevsim3 netdevsim0: unset [1, 1] type 2 family 0 port 19999 - 0 [ 212.083896][ T974] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.092962][ T974] netdevsim netdevsim3 netdevsim1: unset [1, 1] type 2 family 0 port 19999 - 0 [ 212.131425][ T974] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.143667][ T974] netdevsim netdevsim3 netdevsim2: unset [1, 1] type 2 family 0 port 19999 - 0 [ 212.152671][ T974] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.173302][ T974] netdevsim netdevsim3 netdevsim3: unset [1, 1] type 2 family 0 port 19999 - 0 [ 212.243303][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 212.345123][T10535] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1477'. [ 212.358011][T10533] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1476'. [ 212.401882][T10535] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1477'. [ 212.434844][T10538] netlink: 'syz.3.1477': attribute type 1 has an invalid length. [ 212.506594][T10535] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1477'. [ 212.718302][T10558] IPv6: sit1: Disabled Multicast RS [ 212.855239][T10563] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1487'. [ 212.957365][T10569] sysfs: cannot create duplicate filename '/class/ieee80211/!d4QN寿$ULvDUDw}z' [ 212.990861][T10569] CPU: 1 UID: 0 PID: 10569 Comm: syz.3.1488 Not tainted syzkaller #0 PREEMPT(full) [ 212.990889][T10569] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 212.990901][T10569] Call Trace: [ 212.990910][T10569] [ 212.990919][T10569] dump_stack_lvl+0x189/0x250 [ 212.990954][T10569] ? __pfx_dump_stack_lvl+0x10/0x10 [ 212.990978][T10569] ? __pfx__printk+0x10/0x10 [ 212.991009][T10569] ? kernfs_path_from_node+0x2f/0x290 [ 212.991030][T10569] ? kernfs_path_from_node+0x250/0x290 [ 212.991050][T10569] ? kernfs_path_from_node+0x2f/0x290 [ 212.991076][T10569] sysfs_warn_dup+0x8e/0xa0 [ 212.991098][T10569] sysfs_do_create_link_sd+0xc0/0x110 [ 212.991122][T10569] device_add_class_symlinks+0x1cf/0x240 [ 212.991151][T10569] device_add+0x475/0xb50 [ 212.991179][T10569] wiphy_register+0x1ba6/0x28d0 [ 212.991217][T10569] ? __pfx_wiphy_register+0x10/0x10 [ 212.991236][T10569] ? minstrel_ht_alloc+0x6dd/0x7e0 [ 212.991271][T10569] ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0 [ 212.991299][T10569] ieee80211_register_hw+0x3484/0x4100 [ 212.991343][T10569] ? ieee80211_register_hw+0x13e1/0x4100 [ 212.991380][T10569] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 212.991411][T10569] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 212.991449][T10569] ? __hrtimer_setup+0x187/0x210 [ 212.991483][T10569] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 212.991507][T10569] mac80211_hwsim_new_radio+0x2f0e/0x5340 [ 212.991571][T10569] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 212.991599][T10569] ? trace_kmalloc+0x1f/0xd0 [ 212.991621][T10569] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 212.991649][T10569] ? kstrndup+0xbf/0x160 [ 212.991681][T10569] hwsim_new_radio_nl+0xea4/0x1b10 [ 212.991713][T10569] ? __pfx___nla_validate_parse+0x10/0x10 [ 212.991747][T10569] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 212.991791][T10569] ? __nla_parse+0x40/0x60 [ 212.991815][T10569] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 212.991854][T10569] genl_family_rcv_msg_doit+0x212/0x300 [ 212.991889][T10569] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 212.991929][T10569] ? bpf_lsm_capable+0x9/0x20 [ 212.991954][T10569] ? security_capable+0x7e/0x2e0 [ 212.991990][T10569] genl_rcv_msg+0x60e/0x790 [ 212.992021][T10569] ? __pfx_genl_rcv_msg+0x10/0x10 [ 212.992045][T10569] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 212.992087][T10569] netlink_rcv_skb+0x208/0x470 [ 212.992105][T10569] ? __lock_acquire+0xab9/0xd20 [ 212.992135][T10569] ? __pfx_genl_rcv_msg+0x10/0x10 [ 212.992164][T10569] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 212.992207][T10569] ? down_read+0x1ad/0x2e0 [ 212.992232][T10569] genl_rcv+0x28/0x40 [ 212.992253][T10569] netlink_unicast+0x82f/0x9e0 [ 212.992291][T10569] ? __pfx_netlink_unicast+0x10/0x10 [ 212.992322][T10569] ? netlink_sendmsg+0x642/0xb30 [ 212.992341][T10569] ? skb_put+0x11b/0x210 [ 212.992391][T10569] netlink_sendmsg+0x805/0xb30 [ 212.992423][T10569] ? __pfx_netlink_sendmsg+0x10/0x10 [ 212.992449][T10569] ? aa_sock_msg_perm+0xf1/0x1d0 [ 212.992481][T10569] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 212.992503][T10569] ? __pfx_netlink_sendmsg+0x10/0x10 [ 212.992526][T10569] __sock_sendmsg+0x21c/0x270 [ 212.992558][T10569] ____sys_sendmsg+0x505/0x830 [ 212.992589][T10569] ? __pfx_____sys_sendmsg+0x10/0x10 [ 212.992623][T10569] ? import_iovec+0x74/0xa0 [ 212.992652][T10569] ___sys_sendmsg+0x21f/0x2a0 [ 212.992678][T10569] ? __pfx____sys_sendmsg+0x10/0x10 [ 212.992739][T10569] ? __fget_files+0x2a/0x420 [ 212.992755][T10569] ? __fget_files+0x3a0/0x420 [ 212.992784][T10569] __x64_sys_sendmsg+0x19b/0x260 [ 212.992809][T10569] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 212.992844][T10569] ? rcu_is_watching+0x15/0xb0 [ 212.992868][T10569] ? do_syscall_64+0xbe/0x3b0 [ 212.992892][T10569] do_syscall_64+0xfa/0x3b0 [ 212.992910][T10569] ? lockdep_hardirqs_on+0x9c/0x150 [ 212.992930][T10569] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.992948][T10569] ? clear_bhb_loop+0x60/0xb0 [ 212.992972][T10569] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.992990][T10569] RIP: 0033:0x7fba46b8eba9 [ 212.993008][T10569] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 212.993023][T10569] RSP: 002b:00007fba47abc038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 212.993042][T10569] RAX: ffffffffffffffda RBX: 00007fba46dd5fa0 RCX: 00007fba46b8eba9 [ 212.993056][T10569] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000005 [ 212.993068][T10569] RBP: 00007fba46c11e19 R08: 0000000000000000 R09: 0000000000000000 [ 212.993080][T10569] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 212.993092][T10569] R13: 00007fba46dd6038 R14: 00007fba46dd5fa0 R15: 00007ffff1a954e8 [ 212.993126][T10569] [ 213.761648][T10601] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1498'. [ 214.624872][T10641] netlink: 'syz.4.1511': attribute type 1 has an invalid length. [ 214.709588][T10650] 0{X: renamed from gretap0 [ 214.742338][T10650] 0{X: entered allmulticast mode [ 214.755791][T10650] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 215.108869][T10671] netlink: 'syz.1.1518': attribute type 8 has an invalid length. [ 215.367056][T10679] netlink: 'syz.0.1523': attribute type 1 has an invalid length. [ 215.603011][T10688] bond6: (slave gretap2): making interface the new active one [ 215.641066][T10688] bond6: (slave gretap2): Enslaving as an active interface with an up link [ 215.733059][T10706] openvswitch: netlink: Missing valid actions attribute. [ 215.763792][T10706] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 216.336377][T10743] bond0: (slave dummy0): Releasing backup interface [ 216.396516][T10743] batman_adv: batadv0: Adding interface: dummy0 [ 216.402894][T10743] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 216.484296][T10743] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 216.625598][T10758] __nla_validate_parse: 3 callbacks suppressed [ 216.625618][T10758] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1544'. [ 216.813707][T10763] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1547'. [ 216.822689][T10763] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1547'. [ 216.874685][T10769] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1548'. [ 216.995982][T10775] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1551'. [ 217.235365][T10785] netlink: 'syz.0.1552': attribute type 3 has an invalid length. [ 217.389076][T10789] netlink: 'syz.1.1556': attribute type 1 has an invalid length. [ 217.421418][T10789] 8021q: adding VLAN 0 to HW filter on device bond5 [ 217.460986][T10789] bond5: (slave veth7): Enslaving as an active interface with a down link [ 217.522180][T10789] veth9: entered promiscuous mode [ 217.587238][T10789] bond5: (slave veth9): Enslaving as an active interface with a down link [ 217.678439][T10791] vlan3: entered allmulticast mode [ 217.691344][T10791] bond5: entered allmulticast mode [ 217.716866][T10791] bond5: (slave vlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 218.195233][T10811] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1563'. [ 218.292835][T10815] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1563'. [ 218.505285][T10823] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 218.693248][T10828] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1569'. [ 218.964994][T10843] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1572'. [ 218.994623][T10843] netlink: 'syz.3.1572': attribute type 6 has an invalid length. [ 219.018264][T10843] netlink: 'syz.3.1572': attribute type 1 has an invalid length. [ 219.026443][T10843] netlink: 'syz.3.1572': attribute type 3 has an invalid length. [ 219.035816][T10843] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1572'. [ 219.309670][T10600] Set syz1 is full, maxelem 65536 reached [ 219.477263][T10857] netlink: 'syz.2.1579': attribute type 11 has an invalid length. [ 219.699000][T10876] pim6reg1: entered promiscuous mode [ 219.716749][T10876] pim6reg1: entered allmulticast mode [ 219.924686][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 220.035543][T10892] bond4: entered promiscuous mode [ 220.040700][T10892] bond4: entered allmulticast mode [ 220.046465][T10892] 8021q: adding VLAN 0 to HW filter on device bond4 [ 220.137551][T10900] netlink: 'syz.2.1592': attribute type 2 has an invalid length. [ 220.139628][T10899] IPv6: sit1: Disabled Multicast RS [ 220.145645][T10900] netlink: 'syz.2.1592': attribute type 8 has an invalid length. [ 220.156466][T10899] sit1: entered allmulticast mode [ 220.344637][T10905] IPVS: Unknown mcast interface: vcan0 [ 220.966928][T10927] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 220.980437][T10927] gre0: entered promiscuous mode [ 221.455790][T10962] netlink: zone id is out of range [ 221.474638][T10962] netlink: get zone limit has 8 unknown bytes [ 221.552741][T10969] netlink: 'syz.1.1621': attribute type 1 has an invalid length. [ 221.750021][T10983] __nla_validate_parse: 13 callbacks suppressed [ 221.750041][T10983] netlink: 9 bytes leftover after parsing attributes in process `syz.0.1627'. [ 221.800435][T10981] netlink: 5 bytes leftover after parsing attributes in process `syz.0.1627'. [ 221.801479][T10983] gretap0: entered promiscuous mode [ 221.820963][T10981] 0{X: renamed from gretap0 [ 221.832363][T10981] 0{X: left promiscuous mode [ 221.847625][T10981] 0{X: entered allmulticast mode [ 221.855094][T10981] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 222.060917][T11008] netlink: 'syz.3.1633': attribute type 1 has an invalid length. [ 222.088514][T11008] tc_dump_action: action bad kind [ 222.621122][T11038] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 222.637290][T11038] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.777762][T11038] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 222.788705][T11038] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.904082][T11063] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1650'. [ 222.918883][T11038] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 222.930030][T11038] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.022069][T11038] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 223.035102][T11038] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.137380][T11073] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1652'. [ 223.187160][T11068] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1652'. [ 223.240862][ T974] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 223.277034][ T974] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.323924][ T49] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 223.345058][ T49] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.419768][ T974] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 223.448792][ T974] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.496956][ T974] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 223.517007][ T974] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.587534][T11094] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 223.612526][T11095] geneve0: mtu less than device minimum [ 223.624348][T11095] nft_compat: unsupported protocol 5 [ 223.897053][T11107] netlink: 'syz.4.1661': attribute type 2 has an invalid length. [ 223.944062][T11114] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1664'. [ 224.037842][T11121] bond0: Caught tx_queue_len zero misconfig [ 224.122629][T11131] netlink: 64138 bytes leftover after parsing attributes in process `syz.0.1667'. [ 224.261318][T11141] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 224.290585][T11141] netlink: 'syz.0.1670': attribute type 2 has an invalid length. [ 224.798494][T11162] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1677'. [ 224.812678][T11163] (unnamed net_device) (uninitialized): option arp_all_targets: invalid value (18446744073709551613) [ 225.043354][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 225.126270][T11184] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1686'. [ 225.280640][T11184] netlink: 'syz.1.1686': attribute type 6 has an invalid length. [ 225.344438][T11199] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1691'. [ 226.001767][T11248] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 226.129617][T11256] (unnamed net_device) (uninitialized): option miimon: invalid value (18446744073709551585) [ 226.140882][T11256] (unnamed net_device) (uninitialized): option miimon: allowed values 0 - 2147483647 [ 226.323629][ T51] Bluetooth: hci0: command tx timeout [ 226.425150][T11270] siw: device registration error -23 [ 226.499983][T11277] tipc: Enabled bearer , priority 0 [ 226.549188][T11277] mac80211_hwsim hwsim9 syzkaller0: entered promiscuous mode [ 226.556543][T11283] netlink: 'syz.0.1720': attribute type 6 has an invalid length. [ 226.574971][T11277] mac80211_hwsim hwsim9 syzkaller0: entered allmulticast mode [ 226.842671][T11303] __nla_validate_parse: 5 callbacks suppressed [ 226.842692][T11303] netlink: 244 bytes leftover after parsing attributes in process `syz.0.1723'. [ 226.901059][T11305] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1724'. [ 226.947797][T11310] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1726'. [ 226.965826][T11312] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1725'. [ 227.038352][T11312] bond5: (slave geneve3): Opening slave failed [ 227.085474][T11320] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1727'. [ 227.199193][T11325] netlink: 100 bytes leftover after parsing attributes in process `syz.4.1730'. [ 227.258076][T11327] 8021q: adding VLAN 0 to HW filter on device bond4 [ 227.271967][T11330] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 227.371751][T11337] netlink: 'syz.4.1734': attribute type 12 has an invalid length. [ 227.392233][T11334] openvswitch: netlink: Key type 29 is not supported [ 227.402246][T11334] netlink: 'syz.2.1733': attribute type 1 has an invalid length. [ 227.421710][T11340] netlink: 'syz.2.1733': attribute type 1 has an invalid length. [ 227.613238][ T43] tipc: Node number set to 741059722 [ 227.679902][T11356] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1737'. [ 227.780033][T11364] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1740'. [ 227.866384][T11368] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1741'. [ 227.887361][T11375] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1744'. [ 227.911376][T11368] netlink: 'syz.1.1741': attribute type 10 has an invalid length. [ 227.940475][T11368] netlink: 'syz.1.1741': attribute type 10 has an invalid length. [ 227.952368][T11368] batadv0: entered promiscuous mode [ 227.962080][T11368] batadv0: entered allmulticast mode [ 227.982364][T11368] bond0: (slave batadv0): Releasing backup interface [ 228.016627][T11368] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 228.891616][T11435] netlink: 'syz.0.1766': attribute type 21 has an invalid length. [ 228.919480][T11435] netlink: 'syz.0.1766': attribute type 21 has an invalid length. [ 229.339505][T11470] bridge0: port 3(syz_tun) entered blocking state [ 229.347009][T11470] bridge0: port 3(syz_tun) entered disabled state [ 229.353902][T11470] syz_tun: entered allmulticast mode [ 229.361188][T11470] syz_tun: entered promiscuous mode [ 229.369115][T11470] validate_nla: 2 callbacks suppressed [ 229.369134][T11470] netlink: 'syz.3.1777': attribute type 10 has an invalid length. [ 229.394397][T11470] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 230.286156][T11503] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 230.892595][T11548] IPVS: set_ctl: invalid protocol: 1 0.0.0.0:20003 [ 231.645643][T11590] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 231.696424][T11591] 8021q: VLANs not supported on tunl0 [ 231.719658][T11596] netlink: 'syz.4.1814': attribute type 1 has an invalid length. [ 231.728379][T11588] 8021q: VLANs not supported on tunl0 [ 231.832938][T11596] bond3: (slave vxcan1): The slave device specified does not support setting the MAC address [ 231.868830][T11596] bond3: (slave vxcan1): Error -95 calling set_mac_address [ 231.884007][T11606] __nla_validate_parse: 16 callbacks suppressed [ 231.884028][T11606] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1814'. [ 231.913455][T11602] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1818'. [ 231.945183][T11610] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1816'. [ 232.389575][T11634] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1822'. [ 232.455633][T11639] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1821'. [ 232.541800][T11642] siw: device registration error -23 [ 232.565637][T11645] netlink: 116 bytes leftover after parsing attributes in process `syz.2.1827'. [ 232.895339][T11664] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1834'. [ 233.353721][T11692] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1842'. [ 233.417321][T11695] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1844'. [ 233.654669][T11697] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1845'. [ 233.845178][T11709] netlink: 'syz.0.1851': attribute type 29 has an invalid length. [ 233.897183][T11714] netlink: 'syz.0.1851': attribute type 29 has an invalid length. [ 233.947617][T11709] netlink: 'syz.0.1851': attribute type 29 has an invalid length. [ 233.971357][T11709] netlink: 'syz.0.1851': attribute type 29 has an invalid length. [ 234.435059][T11765] tipc: Started in network mode [ 234.450684][T11765] tipc: Node identity 1e891b09dad6, cluster identity 4711 [ 234.473460][T11765] tipc: Enabled bearer , priority 0 [ 234.500624][T11765] syzkaller0: entered promiscuous mode [ 234.509841][T11765] syzkaller0: entered allmulticast mode [ 234.588195][T11765] tipc: Resetting bearer [ 234.635139][T11762] tipc: Resetting bearer [ 234.670473][T11783] netlink: 'syz.3.1868': attribute type 10 has an invalid length. [ 234.688430][T11762] tipc: Disabling bearer [ 234.718262][T11787] netlink: 'syz.3.1868': attribute type 10 has an invalid length. [ 235.088383][T11817] netlink: 'syz.1.1877': attribute type 5 has an invalid length. [ 235.285353][T11829] openvswitch: netlink: Flow key attr not present in new flow. [ 235.315121][T11833] tipc: Enabled bearer , priority 0 [ 235.372170][T11836] sock: sock_set_timeout: `syz.1.1886' (pid 11836) tries to set negative timeout [ 235.418833][T11833] syzkaller0: entered promiscuous mode [ 235.428311][T11833] syzkaller0: entered allmulticast mode [ 235.436405][T11833] tipc: Resetting bearer [ 235.447681][T11833] openvswitch: netlink: Unexpected mask (mask=c0, allowed=10048) [ 235.465437][T11832] tipc: Resetting bearer [ 236.071641][T11864] openvswitch: netlink: IPv4 tun info is not correct [ 236.335901][T10506] tipc: Node number set to 3294567177 [ 237.293689][T11832] tipc: Disabling bearer [ 237.555891][T11879] [ 237.558264][T11879] ====================================================== [ 237.565302][T11879] WARNING: possible circular locking dependency detected [ 237.572352][T11879] syzkaller #0 Not tainted [ 237.576780][T11879] ------------------------------------------------------ [ 237.583809][T11879] syz.1.1900/11879 is trying to acquire lock: [ 237.589890][T11879] ffffffff8e23f8a0 (fs_reclaim){+.+.}-{0:0}, at: prepare_alloc_pages+0x153/0x610 [ 237.599146][T11879] [ 237.599146][T11879] but task is already holding lock: [ 237.606512][T11879] ffffffff8e21e7e8 (pcpu_alloc_mutex){+.+.}-{4:4}, at: pcpu_alloc_noprof+0x286/0x1720 [ 237.616105][T11879] [ 237.616105][T11879] which lock already depends on the new lock. [ 237.616105][T11879] [ 237.626681][T11879] [ 237.626681][T11879] the existing dependency chain (in reverse order) is: [ 237.635703][T11879] [ 237.635703][T11879] -> #2 (pcpu_alloc_mutex){+.+.}-{4:4}: [ 237.643786][T11879] lock_acquire+0x120/0x360 [ 237.648814][T11879] __mutex_lock+0x187/0x1350 [ 237.653914][T11879] pcpu_alloc_noprof+0x286/0x1720 [ 237.659466][T11879] sbitmap_init_node+0x1e1/0x630 [ 237.664918][T11879] sbitmap_queue_init_node+0x3e/0x4d0 [ 237.670810][T11879] blk_mq_init_tags+0x110/0x280 [ 237.676266][T11879] blk_mq_alloc_map_and_rqs+0xbd/0x9f0 [ 237.682238][T11879] blk_mq_update_nr_hw_queues+0xa26/0x1aa0 [ 237.688560][T11879] nbd_start_device+0x17f/0xb10 [ 237.693922][T11879] nbd_genl_connect+0x135b/0x18f0 [ 237.699462][T11879] genl_family_rcv_msg_doit+0x212/0x300 [ 237.705524][T11879] genl_rcv_msg+0x60e/0x790 [ 237.710544][T11879] netlink_rcv_skb+0x208/0x470 [ 237.715816][T11879] genl_rcv+0x28/0x40 [ 237.720315][T11879] netlink_unicast+0x82f/0x9e0 [ 237.725601][T11879] netlink_sendmsg+0x805/0xb30 [ 237.730902][T11879] __sock_sendmsg+0x21c/0x270 [ 237.736115][T11879] ____sys_sendmsg+0x505/0x830 [ 237.741406][T11879] ___sys_sendmsg+0x21f/0x2a0 [ 237.746615][T11879] __x64_sys_sendmsg+0x19b/0x260 [ 237.752170][T11879] do_syscall_64+0xfa/0x3b0 [ 237.757293][T11879] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.763843][T11879] [ 237.763843][T11879] -> #1 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 237.772472][T11879] lock_acquire+0x120/0x360 [ 237.777519][T11879] blk_alloc_queue+0x538/0x620 [ 237.782818][T11879] __blk_mq_alloc_disk+0x15c/0x340 [ 237.788452][T11879] nbd_dev_add+0x46c/0xae0 [ 237.793387][T11879] nbd_init+0x168/0x1f0 [ 237.798153][T11879] do_one_initcall+0x233/0x820 [ 237.803442][T11879] do_initcall_level+0x104/0x190 [ 237.808908][T11879] do_initcalls+0x59/0xa0 [ 237.813761][T11879] kernel_init_freeable+0x334/0x4b0 [ 237.819515][T11879] kernel_init+0x1d/0x1d0 [ 237.824370][T11879] ret_from_fork+0x436/0x7d0 [ 237.829473][T11879] ret_from_fork_asm+0x1a/0x30 [ 237.834783][T11879] [ 237.834783][T11879] -> #0 (fs_reclaim){+.+.}-{0:0}: [ 237.842012][T11879] validate_chain+0xb9b/0x2140 [ 237.847296][T11879] __lock_acquire+0xab9/0xd20 [ 237.852493][T11879] lock_acquire+0x120/0x360 [ 237.857518][T11879] fs_reclaim_acquire+0x72/0x100 [ 237.862965][T11879] prepare_alloc_pages+0x153/0x610 [ 237.868593][T11879] __alloc_frozen_pages_noprof+0x123/0x370 [ 237.874928][T11879] __alloc_pages_noprof+0xa/0x30 [ 237.880380][T11879] pcpu_populate_chunk+0x182/0xb30 [ 237.886031][T11879] pcpu_alloc_noprof+0xcbf/0x1720 [ 237.891597][T11879] __alloc+0x80/0x180 [ 237.896096][T11879] alloc_bulk+0x33b/0x530 [ 237.901200][T11879] bpf_mem_alloc_init+0x45c/0xc60 [ 237.906735][T11879] htab_map_alloc+0x8ec/0xc70 [ 237.911926][T11879] map_create+0xaa0/0x14d0 [ 237.916859][T11879] __sys_bpf+0x60f/0x870 [ 237.921620][T11879] __x64_sys_bpf+0x7c/0x90 [ 237.926546][T11879] do_syscall_64+0xfa/0x3b0 [ 237.931573][T11879] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.938089][T11879] [ 237.938089][T11879] other info that might help us debug this: [ 237.938089][T11879] [ 237.948316][T11879] Chain exists of: [ 237.948316][T11879] fs_reclaim --> &q->q_usage_counter(io)#49 --> pcpu_alloc_mutex [ 237.948316][T11879] [ 237.962146][T11879] Possible unsafe locking scenario: [ 237.962146][T11879] [ 237.969591][T11879] CPU0 CPU1 [ 237.974944][T11879] ---- ---- [ 237.980423][T11879] lock(pcpu_alloc_mutex); [ 237.984920][T11879] lock(&q->q_usage_counter(io)#49); [ 237.992810][T11879] lock(pcpu_alloc_mutex); [ 237.999846][T11879] lock(fs_reclaim); [ 238.003835][T11879] [ 238.003835][T11879] *** DEADLOCK *** [ 238.003835][T11879] [ 238.012045][T11879] 1 lock held by syz.1.1900/11879: [ 238.017158][T11879] #0: ffffffff8e21e7e8 (pcpu_alloc_mutex){+.+.}-{4:4}, at: pcpu_alloc_noprof+0x286/0x1720 [ 238.027280][T11879] [ 238.027280][T11879] stack backtrace: [ 238.033181][T11879] CPU: 0 UID: 0 PID: 11879 Comm: syz.1.1900 Not tainted syzkaller #0 PREEMPT(full) [ 238.033204][T11879] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 238.033216][T11879] Call Trace: [ 238.033225][T11879] [ 238.033234][T11879] dump_stack_lvl+0x189/0x250 [ 238.033261][T11879] ? __pfx_dump_stack_lvl+0x10/0x10 [ 238.033281][T11879] ? __pfx__printk+0x10/0x10 [ 238.033303][T11879] ? print_lock_name+0xde/0x100 [ 238.033326][T11879] print_circular_bug+0x2ee/0x310 [ 238.033346][T11879] check_noncircular+0x134/0x160 [ 238.033366][T11879] validate_chain+0xb9b/0x2140 [ 238.033384][T11879] ? is_bpf_text_address+0x26/0x2b0 [ 238.033410][T11879] ? is_bpf_text_address+0x292/0x2b0 [ 238.033437][T11879] __lock_acquire+0xab9/0xd20 [ 238.033463][T11879] ? prepare_alloc_pages+0x153/0x610 [ 238.033478][T11879] lock_acquire+0x120/0x360 [ 238.033500][T11879] ? prepare_alloc_pages+0x153/0x610 [ 238.033520][T11879] fs_reclaim_acquire+0x72/0x100 [ 238.033534][T11879] ? prepare_alloc_pages+0x153/0x610 [ 238.033548][T11879] prepare_alloc_pages+0x153/0x610 [ 238.033565][T11879] __alloc_frozen_pages_noprof+0x123/0x370 [ 238.033582][T11879] ? pcpu_block_update+0x1b5/0x8d0 [ 238.033599][T11879] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 238.033621][T11879] __alloc_pages_noprof+0xa/0x30 [ 238.033636][T11879] pcpu_populate_chunk+0x182/0xb30 [ 238.033667][T11879] pcpu_alloc_noprof+0xcbf/0x1720 [ 238.033695][T11879] __alloc+0x80/0x180 [ 238.033715][T11879] alloc_bulk+0x33b/0x530 [ 238.033736][T11879] bpf_mem_alloc_init+0x45c/0xc60 [ 238.033756][T11879] ? bpf_map_area_alloc+0x71/0x180 [ 238.033780][T11879] htab_map_alloc+0x8ec/0xc70 [ 238.033803][T11879] map_create+0xaa0/0x14d0 [ 238.033825][T11879] ? security_bpf+0x7e/0x300 [ 238.033856][T11879] __sys_bpf+0x60f/0x870 [ 238.033877][T11879] ? __pfx___sys_bpf+0x10/0x10 [ 238.033907][T11879] ? exc_page_fault+0x76/0xf0 [ 238.033927][T11879] __x64_sys_bpf+0x7c/0x90 [ 238.033946][T11879] do_syscall_64+0xfa/0x3b0 [ 238.033964][T11879] ? lockdep_hardirqs_on+0x9c/0x150 [ 238.033980][T11879] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 238.033996][T11879] ? clear_bhb_loop+0x60/0xb0 [ 238.034013][T11879] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 238.034030][T11879] RIP: 0033:0x7fdd15f8eba9 [ 238.034046][T11879] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 238.034062][T11879] RSP: 002b:00007fdd16e43038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 238.034080][T11879] RAX: ffffffffffffffda RBX: 00007fdd161d5fa0 RCX: 00007fdd15f8eba9 [ 238.034092][T11879] RDX: 0000000000000050 RSI: 00002000000000c0 RDI: 0000000000000000 [ 238.034103][T11879] RBP: 00007fdd16011e19 R08: 0000000000000000 R09: 0000000000000000 [ 238.034113][T11879] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 238.034123][T11879] R13: 00007fdd161d6038 R14: 00007fdd161d5fa0 R15: 00007ffec3f3aac8 [ 238.034140][T11879] [ 238.359892][T11881] __nla_validate_parse: 16 callbacks suppressed [ 238.359911][T11881] netlink: 14560 bytes leftover after parsing attributes in process `syz.2.1901'. [ 238.406736][T11884] batadv0: entered promiscuous mode [ 238.412857][T11884] batadv0: left promiscuous mode