last executing test programs: 16.363165481s ago: executing program 1 (id=2935): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000440)={0xa, 0xe1f, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x28) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000340)=@ccm_128={{0x304}, "1f5fe89b3e65d0fd", "313a19ff4c7d278bf34b54168b154d15", "1e5a7ddb", "2fd978cbd6bf3b5d"}, 0x28) setsockopt$inet6_tcp_int(r0, 0x11a, 0x4, &(0x7f0000000040)=0x1, 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000003000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xd50, 0x0, &(0x7f0000000000)="aaf3a4cd08258cebe46db996738b", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) socket$inet6_tcp(0xa, 0x1, 0x0) (async) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) (async) connect$inet6(r0, &(0x7f0000000440)={0xa, 0xe1f, 0x0, @empty}, 0x1c) (async) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x28) (async) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000340)=@ccm_128={{0x304}, "1f5fe89b3e65d0fd", "313a19ff4c7d278bf34b54168b154d15", "1e5a7ddb", "2fd978cbd6bf3b5d"}, 0x28) (async) setsockopt$inet6_tcp_int(r0, 0x11a, 0x4, &(0x7f0000000040)=0x1, 0x4) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000003000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xd50, 0x0, &(0x7f0000000000)="aaf3a4cd08258cebe46db996738b", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) (async) 16.361743145s ago: executing program 1 (id=2940): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@remote, @broadcast}, &(0x7f00000001c0)=0xc) bpf$TOKEN_CREATE(0x24, &(0x7f0000000180), 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x8, 0x2, 0x0, 0x1}, 0x48) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c00000070000100000000000000000007000000", @ANYRES32=r5, @ANYBLOB="140001800800010000000100050006"], 0x2c}}, 0x0) 16.011770977s ago: executing program 1 (id=2948): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) sendmsg$NFC_CMD_FW_DOWNLOAD(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000640)={0x24, r2, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_FIRMWARE_NAME={0x5, 0x14, '\x00'}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x2400c040) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001e0001000000000000000000020000000100000700000000080001000000000008000f"], 0x2c}, 0x1, 0x0, 0x0, 0x4008012}, 0x0) 15.694915601s ago: executing program 1 (id=2950): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x20100, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r2, 0x4004743d, 0x110e22fff6) close(r2) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x44b, 0x70bd28, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x0, 0x12}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MAX_AGE={0x8, 0x3, 0x1b}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x30008095}, 0x0) 5.282795379s ago: executing program 0 (id=3011): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'pim6reg\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000040)={'syztnl2\x00', r0, 0x4, 0x80, 0x9, 0x8, 0x10, @ipv4={'\x00', '\xff\xff', @loopback}, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x7800, 0x10, 0x4853, 0x400000}}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x2, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="850000009a000000040000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x12, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0xfffffffffffffe70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="9feb0b0018000000000000001400000014000000050000000000000001000006040000000100000000000000005f5fa000d63ca93a10ec77b93b5a7255480ff380d40ac7d039720e3ab269f22eb689b668631b6ed97f82bbbb819d4960be54fee1ac0a9092c5858e10cdb229302623a6a80252db64bd1bc5e0f2389aecfb88d5df7f75db542bba2ac7426d276db9ea420ce06296db0c907eed3c25dd31b0b534c57051d69b81335d12d67a3b545a50b0874eb2f099d74b9a4a2b5a0524223507b3532e20d22498"], &(0x7f0000000200)=""/146, 0x31, 0x92, 0x1}, 0x20) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000500)="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", 0x1000) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'wlan0\x00', 0xffffffff}) ioctl(r1, 0x8b22, &(0x7f0000000040)) socket$packet(0x11, 0x2, 0x300) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)=@generic={&(0x7f0000000000)='./file0\x00', 0x0, 0x10}, 0x18) 4.542471789s ago: executing program 0 (id=3014): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000440)={'tunl0\x00', &(0x7f0000000580)={'gretap0\x00', 0x0, 0x8, 0x7800, 0x9, 0x2, {{0x1d, 0x4, 0x1, 0x8, 0x74, 0x67, 0x0, 0x92, 0x2f, 0x0, @private=0xa010100, @broadcast, {[@noop, @timestamp_prespec={0x44, 0x5c, 0xfe, 0x3, 0x1, [{@remote}, {@remote, 0xfffffffa}, {@private=0xa010101, 0x4}, {@dev={0xac, 0x14, 0x14, 0x20}, 0x1}, {@local, 0x6}, {@multicast2, 0x7}, {@empty, 0xe}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x9}, {@remote, 0xe}, {@rand_addr=0x64010102, 0x3}, {@remote, 0x40}]}]}}}}}) sendmsg$nl_route(r0, &(0x7f0000000540)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c000000710020002dbd7000ffdbdf2507000000", @ANYRES32=r2, @ANYBLOB="0c000180080029d8280004000c00018008000100000003000c0001800500060007000000100001800c1a04800800010008000000"], 0x4c}, 0x1, 0x0, 0x0, 0x480c0}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEAUTHENTICATE(r3, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0x2c, r4, 0x1, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40448d1}, 0x800) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0x22, 0x0, &(0x7f00000008c0)="f6f4e9a1000000000000000d0800c32a8bc678bbd404fcd535fdc8a75167efec52a9", 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000700)="0102", 0x0}, 0x50) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=@newtaction={0x6c, 0x30, 0xffff, 0x0, 0x0, {}, [{0x58, 0x1, [@m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x6, 0x0, 0x4}}}, @TCA_IFE_METALST={0xc, 0x6, [@IFE_META_PRIO={0x8, 0x3, @val=0x6}]}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x6c}}, 0x0) 4.293547372s ago: executing program 3 (id=3017): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000300000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) close(r0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x3, 0x2d, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r2) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, r5, 0x1, 0x70bd2a, 0x25dfdbfd, {{}, {}, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x4001}, 0x40000) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x38, r3, 0x1, 0x0, 0x0, {0x4}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast1}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ip6tnl0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast1}]}, 0x38}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0x13, &(0x7f00000009c0)=ANY=[@ANYBLOB="1800000001000000000000000000000018010000786c6c250000000000202020630af8ff00000000bda100000000000026010000f8ffffffb702000008000000b703000000000000850000000800000018010000202070250000000000202020dd00f5ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4.224965552s ago: executing program 0 (id=3019): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="c40000001900674c2cbd70000000000000000000000000000000000000000000ac1eff0100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0100000000000000000000000000000000000020000000000000000000000000000000000000000000008000000000000000000000000000fcffffffffffffff0000000000000000b0ac00000000000000000000000000000000000000000000000400000000000000000002000000000a00100001"], 0xc4}}, 0x4c050) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$kcm(0x29, 0x2, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x5, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@dev={0xac, 0x14, 0x14, 0x40}, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000080)=ANY=[], 0xfdef) 3.962151586s ago: executing program 3 (id=3020): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], 0x0}, 0x94) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet6(0xa, 0x3, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000980)={{{@in=@remote, @in=@local, 0xee24, 0xfffe, 0x0, 0x3, 0x2}, {0x81000, 0x200000004, 0x40000000007, 0xffffffff, 0x100000000, 0x0, 0x200000003, 0x9}, {0x5}, 0x5, 0x6e6bb1, 0x1}, {{@in=@empty, 0x4d5, 0x6c}, 0xa, @in6=@loopback, 0x3501, 0x4, 0x8, 0x0, 0x9075, 0xef, 0x9}}, 0xe8) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x8}}, 0x7}, 0x1c) r3 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200), r5) sendmsg$NBD_CMD_CONNECT(r5, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000006c0)={0x48, r6, 0x1, 0x70bd2c, 0x1000, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x2}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r4}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r4}}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x128}]}, 0x48}}, 0x4) r7 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r8) ioctl$IOCTL_GET_NCIDEV_IDX(r7, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r10], 0x1c}}, 0x4008054) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000100)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000180)=0x0) sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x3c, r9, 0x300, 0x70bd27, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r11}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r12}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r13}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x3c}}, 0x8000) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) sendmsg$inet6(r1, &(0x7f0000000780)={&(0x7f0000000600)={0xa, 0x4e24, 0x80000001, @dev={0xfe, 0x80, '\x00', 0x31}, 0x9}, 0x1c, 0x0, 0x0, &(0x7f0000000700)=[@pktinfo={{0x24, 0x29, 0x32, {@private1={0xfc, 0x1, '\x00', 0x1}, r14}}}], 0x28}, 0x800) r15 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r15, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_XDP={0x14, 0x2b, 0x0, 0x1, [@IFLA_XDP_EXPECTED_FD={0x8}, @IFLA_XDP_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x3c}}, 0x0) 3.613765285s ago: executing program 0 (id=3023): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)={0x30, r1, 0x1, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @random="898c81d6c7cd"}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x7}]}, 0x30}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) (async, rerun: 32) setsockopt$inet_sctp6_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, &(0x7f0000000000)={0x0, 0x2, 0x82, "cc970af11c371464242af03e46a96f3166fe59cb97389ddc558bb271a12c5df869532afd3efc1825fc5771689cc2672ef894e9fe58fc9863e94e93b9d2f9bbe8be32b56c86a4ac7f74b4b14bd59198db0899b20b2e7ef4561a7346bcfaefa4d337f95f3fd9add72a5b764ebd3a76f390629df5f6407b164af9fee31c99ac7225f316"}, 0x8a) (rerun: 32) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r4 = socket$alg(0x26, 0x5, 0x0) (rerun: 32) bind$alg(r4, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) accept4$alg(r4, 0x0, 0x0, 0x0) (async) close(0x4) (async) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r3, 0xc038943b, &(0x7f00000001c0)={0x7, 0x40, '\x00', 0x1, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000004100070127bd7000fe5bd6d1e6bc91c6652682806a040008000c00018006000600800a00001800028014000c0020010000000000000000000000000000337e45e9e716a6989148f5c87fb1317c8e9b71b2c53b6e40c56d2be13b39ed71ebad9dc481565841de74"], 0x40}, 0x1, 0x0, 0x0, 0x4048011}, 0xc0d4) (async) recvmsg(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000002480)=[{&(0x7f0000002a00)=""/4114, 0x1012}, {&(0x7f0000001440)=""/4096, 0x1000}, {&(0x7f0000000440)=""/4096, 0x1000}], 0x3}, 0x100) 3.210608208s ago: executing program 4 (id=3026): r0 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000200)) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0x22, 0x0, &(0x7f0000000380)="f6d4e9a1d78ad62ceef18843080078bb3fb7dbfcebd1f85fc171f748a7b5373a3126", 0x0, 0xffffffff, 0x0, 0x2, 0x0, &(0x7f0000000700)="010a", 0x0}, 0x50) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x20, 0x2d, 0x107, 0x70bd2b, 0x25dfdbfe, {0x6, 0x7c}, [@nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0xdd}]}, @nested={0x4, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x10000004}, 0x4008030) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="68000000010905040000000000000000020000000900010073797a3000000000140002800600010000020000050002000600000008000500000000002c0004800800010000000001200002800c000100706f6c69637930000800020000000002080003000000001e", 0x68}], 0x1}, 0x44) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'xfrm0\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="05031600d3fc140000004788031c09102f28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) socket$packet(0x11, 0x3, 0x300) (async) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)) (async) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) (async) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) (async) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000200)) (async) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0x22, 0x0, &(0x7f0000000380)="f6d4e9a1d78ad62ceef18843080078bb3fb7dbfcebd1f85fc171f748a7b5373a3126", 0x0, 0xffffffff, 0x0, 0x2, 0x0, &(0x7f0000000700)="010a", 0x0}, 0x50) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x20, 0x2d, 0x107, 0x70bd2b, 0x25dfdbfe, {0x6, 0x7c}, [@nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0xdd}]}, @nested={0x4, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x10000004}, 0x4008030) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="68000000010905040000000000000000020000000900010073797a3000000000140002800600010000020000050002000600000008000500000000002c0004800800010000000001200002800c000100706f6c69637930000800020000000002080003000000001e", 0x68}], 0x1}, 0x44) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'xfrm0\x00'}) (async) sendto$packet(r0, &(0x7f00000002c0)="05031600d3fc140000004788031c09102f28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) (async) 2.648493219s ago: executing program 4 (id=3029): r0 = socket$inet6(0xa, 0x80000, 0x11) sendmmsg(r0, &(0x7f0000002140)=[{{&(0x7f0000000040)=@phonet={0x23, 0x9, 0x1, 0x93}, 0x80, &(0x7f0000001c40)=[{&(0x7f0000000940)="76a2d7c00effbb7d8020aa355d9892e1f4143d62c1c5f4890d978964e9d647745ce5cd0a40792e91efabe4357588942bc3f4290a15dbcdd649e4108ca19c01c31678fdf5051785a0190bc887aaa36f7683b08025d634fd5a2a0f1250c45027fe3faba08f249f570b304551660418ba808c5f3decaef7f575c6386f405d637cdb5694fb923cc5267cd19640bbf98c25683b14d67656f90d223436f405817969682f408b3cc63dac2132184897e1f7f653dc9a05eba267b09a53ca2caf9a23c507de9cee11b3badc08e582daa4af01570e4075885ceb20c85740d5973dcc8334c4640e85c0d090923f9b372050bfb037e8167fd8ae3144a702f49b90852de3ae2b5b3c02e1b9b0f67f78cf01c0eb9f8f5fdf4df9a8ab6c46158115b7d70e426b63b4c57165d4eb585ec996b26434856984a0f0bacb307478dee00b7b78cd3e538a04062c6d92f7609540af89ef039cb78ce77be09be9e995f7fa3ed35744a4dfba97acf272f38e83ade17bf70c2b0da028924c67e12d566135f2532f4557e1e1cb6a8e3b3594cc29d6f2337b445b5713515d9d1d6fda89e16eba5a4125e262af0a2f7fdd21d48846eb2924b572a7c7280cf652d097aff02c5cc57d1b5bf65d4b298f966103b7caaa18572357b37cec142e77e4a1d320334a5ac717e8ddda5ddf082a7fa0b0bba15bef27aa3c84353fd41de8d78a05ca958c71d7532cf0ca0b05587cf51bacfc7bf13dbef18c70a957e3a19c4d0914a6d4e8bc9bdd32df5673dfc86b54ebc77e84b5795548da19002e9d8485f4c6b8a002d7168ef5e11c887c87e88827bae1122cf14b46ebbdd5014eaed721fbed66352ae0f2de9fbe2887c1402d2ebe3bef9ba5671618a47430f0d785d3cfd40fb437e81891446ae0e0e37281fd0e6056a85a5be851e0d689a5ceeb0da4c09499511161a372ba03bf1ce15c1b29c95b9223875f29fb7a83e2ebc852d832bbb0a5b356d1e271fb3c757ac2cfc568b797e1f43707fc5da117e32074b0ded789cd8210fbac407150c664b516f8c86ac27277dd9847af1cf007d2e16affc51a1c01f5f7aac8c38f261bafbefd9ea8045d7313514376b7be8a1feb0de7c15ee1f381e0be13ac154507eba027946e5ec13d8a5fbcce83ddcd3f7682e2e1ae81203df3b1d7e846dcf54eed86a79c35f301930bb497493342724eaf45a0cdbf659e6760d6ec25ba2fe5e7d670eab9af790a1323dca6162ba958c1e060aac71720207b2867e65be1bbe92bcf7c82725c3b3a994039e49f8f46e227f7ce14654cf721edc82b861dd33ac85d5c4f56e3217611aaed022b4972f7e32244f2c3b998e802a5aaf67c0c1c57233a4ddb278fa80d70dfad229942da7ec3edf249a08763f758b41f790f4b983cefb0d15d3b02557c4966c40216dc248332a5cb0bbf0c2a492608e0e251667ab56a76312cb543190af49afa23ca7ff1b4ecb4db8e578525ab9e572d0bc3426fd37c3ca67be26b32eaee7854859888bec56c685f9e1c13a89dd5a6de5d7fef19dea4e527545c40c0b6ab9fdea46c784435039f8b71bbe67152dcd91d107e2dd5a519c67a9f10acd317e194830dd26717f7eed674471a419c5115571c38837bfee74535f4c0b61ea7df8c7566efe56b115a113106e97db110e0c02e60f9dae676a5d5d708145791ed347f49a8aa3eb30e1f80b41a3150a492f8980d975337552964d583e16c7a84fac517c1e099922274326fc8ae7dccfe157cdc44ee6259815b6bc32ecdd22c13096005b90ac7d46b34ea1dc63a772b270ffa3cddff16137880973e3664e7ec1b275413819b0369b1907630ee591df5071c4cc5a53fae799c6262af29295550264b8e6236382242ca3fcd75931fc6ef92490a74bbfa648045c9301533cc14b515db135f481ebcf6c69f35ceacb808be5c05dad3ad95d64e353cd45c1f4f496f5a8e75b04fed6f53f5e5943039b28886d10bb40a637541217f7c5cffd9779bdb89a05e8fa0b6d9060758cc26bbb8d7a1659fc71d80263ed82b4806a9ffb7ad86b2a41273cbe3f8420e28e9f4851da9e116f68b9cdf1f94d0f9e3f306562405ea001e9c0cbbea3e6962ff8125b5e38c3491a51a413f28c7f573dd5d5d3e4531f029394f151d7ed201e8c83e93bafde138790a2b4ecee591e4a8a5fc487915905b4c9d21a529df2b5f856f63b9822828a1840429f9bd7817108608b4b07dca80ad9d148c2c73c7d8f1531b2650a172c9dcb41da44282b0486edb072e7e46f05bc8450e927138be1141a5c9fbd5e03e8b20df5f021b402a7023707c09ac00d86d4cd867fa75cdd060553fe9298837ada6cf94052dccdd5bb0b1c3c861d0d6b494f3b9bcf92d5fe90dcae044e9c45f7894af842675056dfe36c920e5fdb14e101417621b4b67fc2492b71d614ba634707393f70580eb91db612518b342b06f242d55b42dd81f1fedf2fbe7f0d2ca7b9e3f47875134f328f46eba684a44b719769aaadb71318fa82f0e3306cdef8f6428c2e2000af97e751758b9788e9e169bcf547326ad8974f6782345f3c725b163aa6635ed45352f3d7c168088e945e69aefa3ad9b491beada560a3985b8777d5ffb967fc219f1d11ad5205a4cbfde541d749edce515235e4d4984b3a2c624f4b8bd1c82d73f4b70714ed18ac13c07313ac82aa748347283b6439421b4e6acf7051dcd7569252c9fb47b49fcb8a29852b18cfecd1b22686405009e7bf0903df5f09ca4273dc330b528c4695393105a1c91732da98b9785be232af5fd6855b4a96a57ce711d3deef8fdd273c8f3f1bd6bf57ee0cd226db5d0d8012f570aade37b63f7abfe6169383b94600e717844f0ab421679c8e7e6e0d4aa02fb76123470006ff017ff4aa38fb2b5e6083a7b0c76ee4611ae7487127dc5616d5a67e26282233345b06a69b14a69948b481c28e7ce7cd6689566538951f1197ce679800a0efbca26233552b68b5b13a14b7e17e316b6c291ebbfb8122e0f4fedd709228b529952ffad17e71163f143df2e2d589f0e9d0a49186820f9e474509cae57f925f58a5a626aaeab712e2ffcce541a2a68972ac186cb6a8af651a0668d6c9d18def239c47b69b3ebbf65ea144d6e79821f0f84e64b65e936d034697439050f1c8fe63b5a1c940d088db3c5e9934d65797202b481d8a3a7d818b2bcc95d28b3b11c79f5199c4e74d35039932c89b2f3206c7dba30f7eb64ba5b969824a22beeb561084f24d6c5fdee5deb4ed3e0cb1b5c0fe6bf1084077a1a950a8bd6489d259cc7b2ab5fb9a5a57a08fe0fa0c293721a2412f147609b659842d169568686300dfab1491a15af1db8877d79e688364ec3c5c1287164d0ffa68345338b21d4524b07727ade8574ecc9b290a426a8a75097c0a1ee68a672d3c57185596a662421f57e507147707e06ae562822f1661d37403f0b9079fe0f05f8c75c08860608d9d3a2e6f72558058e847cc76c7587e7b95df63310ad63584fc80e1db3349900113fa613c74202cd3d298140a5b846c3c74c24c1210385c3dc417b106a097eb5014c266908d24f4d0dcd05b76738135ae1554a6e2b82186969973bb43f94ca04a3845e626d57d41e2828eb10be5d8ef6beff0f7e99c351805095741b0e78c8de347110b95016dff525b7098e085e4a1191165a33a82a3f87c8122fd8d610d01a9e1ffea076e9f25ffcced17e66ca65f7ff74fea6f46094de9703995c287ce1ff498234c5311888631aa23635fb1a935c4f5ec2f5b98c8df9fbff4777f212800f89b21ae3d4341911dc8510da19e4b3834d08c4fa26daddd7d190ff48429ed7df9d414f3ad6b69c3362bb832270a9d28520bce959a9881118bea1b38b175a4d900a44b090850f5b7b3f602bff619263c759b04e431e105b6bee360ef59042669dbdec42ae1c836e336f4e6fab0c395d98e06ae4512b8f9dbad7031ea51ef4a5b172bf478333a6ebcb5429fd26c98c024387c293e249b9bcbd55f85d5485f8629e124de54ad8b6575f89dd493a05a2c62e57a673c53a28b987ce3d6ac6586587fdc2ad8f4f4c4578b45a184cc3055fc3c33a0b9db9d06dd4571a57656aa208f553ad617d4dcacb2591ccf4efe82f0947fc5b5868f3d6b520037eb0adc20c44b8b8f817116e557331337403fd5718b4a6f32aaec50c2b34cf7fa91f567931a06be39147ba0e153b8afa90590d792ecad425a2620378ab3a869bd9e601b7ae917e24d1272f64382efdfee2703157b2bf019d27cae69ff92c822e41b0e58569c8b684bcd700bf8b8f8e6119445e30e7f75f9edefcf8d2271a93732c36aa78311342376c8250dc7683942b3e54cb8a1ba6dc5e0e69f3573196fe3a946347b05b638d13832dd65b254b87f9e6d638020ccbbc2aea360e064e5d7a33a104eeb4438357c77b7e0f7c978a75c754d3f5d1fe6bbf68520d1cbbd165aee14b96cc8b57cf636748996d0b10a48cfc7f056824c731ffb352bddf17101c4b76274110fd61f8e77b6e6c12b909b5ab45bb883fb520565549cf524aba9894faf946a4dcd468e8cf4513294e3bf51e94cb4d7b9dbd4497986b588feeaf6ea91921fe2ab536f50fca1da8d7283590349ea13e101cfdd141eecd83931de8f0c528f8fe2ae7236a32cf8a4f42aebad3133d5fb3518bff6a1c4b038d80d2269a696660f1188ca1cebed7fddf2e37ce88c44df62faf591b21039962f455dbf965889c52ccf1dfe2e46836e6a3bef978678d123e9abf63a842be2ae6c4d271f46b81b77530f4ccc94572687a172ce52a8abc91e98211affbeda11c373260d03b0b34444dcb727813c6a31c32289a904f61bc31030b48bd96185a13eb29db7cb6c4cc62e1f4dc59ed1c2acf11013808b8ce687cd553707b159f27263f21e2314de1c33c7983254e971aa85418f65fa197ff114855129267e1332cac0a50b0e21fa9c975ae22b3e540c639ea45ccd6ddb97a933be616ed12e43f3d0c257610cafeebb1371c51ebd228418afae6e59402725b22f89cfcfb81ffd81026f938154ed9efa292e67e0acbbda0d600dd4b488ee7622463f7b9ff92bb6ca2e37a60e3a6e2090f6027dc306707ad9f286a8a23ba142862867ec3fe4991a2e6055eb0895df3a5eabb53ee8045cd70f942e6bec492fd83fae3d1ba8f25b3c0a51147770ffe0d451e30bd202c89e00f2fd988ba823c47bfa06083a196fd93b9a2012a9b1bf2c2e660f7c56652f918f9a66e9718ff36a1024bc648b72ddf65b9d854ba48103e5716499c1dd94224bf98f7efa1be315ec9d7578a914c78f74c02da10a625131a73fcaef394ebde1ebeb09793f4a3bebbf2c335c6f4b38bd7ac71c5ed3d03abeeeed5c60a622726eb73dc26b87a9288c9d3b496f7f2a590a1f37f97d3ca382f4f9b06561c3e40d8cfeae8a8563922875044f7836de0621bc810543841596c39f7fc917c4562216e3587cb36c08b5188183717a7b09e37f82d39499b6dabfea70babd9505b85a9aa22b3c4717055a05f443106e2496fa57a80afe9bcfcd06690eb2c66ea5bd4ea4730f37197a2f175aede87d192145f6d7947aae4a892cdde967ca1cf5bf32d748179e2fbf089a5e99594594ff89e9185cafa3bd6238d32698af4a222b9c1f73d83f624d822526ce72e3bc914a7331e2f883d1261b42f21028e6c6afd1ca55504c58cbdef1e0c3940b6627c302db1fedda8743718c482bcd01f7480bf2517bbd00c78f3d741d7ef750c64bc56529b5dd3a33b8b9b0365da5cc4d5ab96f1107a18f327bb9bd3b0ca29dac64eac4fab2ed1a7ba031695b2a6ea05a6f90d6c319093475b8e49", 0x1000}, {0x0}, {&(0x7f0000001a40)="54327948dc27f31850d6c06ddd875b9bbc06c177cb866ecfe9af7231cc2bfc1fffb4637a06f26f749ff862d4828aa5240cbb8dad0221825cf30f402996ac7ad6dd444dc3fc9fe4960def666b9baa895564a6f86a2fd461e51c6af4cd53377c81ba1e38c8389a308b823aa7309b7d52eebf66ee3a9ae04269912bfca10696", 0x7e}], 0x3}}, {{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000002000)="fe50043d88c3baf4ef53e5d734a3b7221d8b2641a7ed81ad9f5452e295cc675f82bfb376ac81bda39264efbc6c65982007da04e15273af3f97fcc210c6616d584fcf84d0411d112649012a279950e1d7484f98e3d6ad0878c5c5ef154302130e260b98273ec600b876edd40f7808d141e143", 0x72}, {&(0x7f00000003c0)="b7a1af4ff63fb665a05526f7deceb208eef60b17e574185d6e550432721f41ae591aa8e6e06c", 0x26}, {&(0x7f0000000600)="d2529816ec15cef2b714f6f70a2521257abeb8c678ec3b501b65169c4dd8c4857e461af8c12e69bc3e8de8a1d3ebb5dc3508e2a71d7b1fd04c6216f28ecb37d13550d1e184a466e5e98e89acd7d2f4536bd5e242ff9f35a321e42aacb2295f812a9e4e5f152eb2331089eb51d5ba53853c6a198731f5a9539c6ad220d82891e07790", 0x82}], 0x3}}], 0x2, 0x42051) connect$inet6(r0, &(0x7f0000000400)={0xa, 0x1234, 0x0, @loopback}, 0x1c) bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0)={0x0, r0}, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000002a0000000100000000000001040000002000000105000000010000040400000013000000010000000000000017000000020000040800000021000000010000000000000025000000020000002000000000696e74006270665f7370696e5f6c6f636b0076616c006d61705f76616c756500636e74006c"], 0x0, 0x8e}, 0x28) r1 = socket$kcm(0x21, 0x0, 0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$EBT_SO_SET_ENTRIES(r4, 0x0, 0x80, &(0x7f0000002840)=@nat={'nat\x00', 0x19, 0x4, 0x678, [0x2000000021c0, 0x0, 0x0, 0x2000000024ac, 0x2000000024dc], 0x0, &(0x7f00000005c0), &(0x7f00000021c0)=ANY=[@ANYBLOB="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"]}, 0x6f0) r5 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r3, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYRES16=r1, @ANYRES32=r3], 0x44}}, 0x2000800) socket$nl_generic(0x10, 0x3, 0x10) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r7, &(0x7f0000000200), 0xffffffc1) r8 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r9) ioctl$IOCTL_GET_NCIDEV_IDX(r8, 0x0, &(0x7f00000000c0)) sendmsg$NFC_CMD_DEV_UP(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000780)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x200000c0}, 0x4008054) write$nci(r8, &(0x7f0000000240)=ANY=[@ANYBLOB='p\x00\t'], 0xc) write$nci(r7, &(0x7f0000000580)=ANY=[@ANYRES32=0x0], 0x87) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES64=r6, @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r10, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r11, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x22051, r7, 0x0) 2.516650201s ago: executing program 3 (id=3030): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 2.36994657s ago: executing program 0 (id=3031): socket$igmp6(0xa, 0x3, 0x2) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) close(0x4) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) shutdown(0xffffffffffffffff, 0x1) (async) r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f0000000080)=0x1, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) read(r2, 0x0, 0x0) (async) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="140100003b00015300000000fbdbdf2501"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) (async) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@ETHTOOL_A_COALESCE_TX_USECS_LOW={0x8, 0x10, 0x1ccd}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r1) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)={0x34, r3, 0x1, 0x0, 0x25dfdbfb, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x4044851}, 0x40000) 2.245444467s ago: executing program 3 (id=3032): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="c40000001900674c2cbd70000000000000000000000000000000000000000000ac1eff0100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0100000000000000000000000000000000000020000000000000000000000000000000000000000000008000000000000000000000000000fcffffffffffffff0000000000000000b0ac00000000000000000000000000000000000000000000000400000000000000000002000000000a00100001"], 0xc4}}, 0x4c050) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$kcm(0x29, 0x2, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x5, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@dev={0xac, 0x14, 0x14, 0x40}, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000080)=ANY=[], 0xfdef) 1.911879951s ago: executing program 2 (id=3033): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x10, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b700000028000000bca30000000000002403000007feffff720af0ff0000020071a4f0ff000000001f030000000000002e0a0200000000002604fdffffff000e61143c00000000001d430000000000007a0a00fe0000001f7b14180000000000b503f7fff80000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e5181554a090f30002af51efd601b6bf01c8e8b1fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98d9ec21ead2ed51b104d4d91af25b845b9f7d08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f0177184b6a89adaf17b0a6041bdef728f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10076443d643649393bf52d2105bd901128c7e0ec82701c8204a1deeed4155617572652d950ad31928b0b036dc2869f478341d02d0f5ad94b081504507acb4b9c67382f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101ab062cd54e67051d355d84ce97bb0c6b6a595e487a2cc47c0efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599dd273863be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d91c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566de74e425da5e7f009602a9f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b3045024a982f3c48b936e6f9e0fcda88fe4413537528fd79153baae244e7bf573eac34b781337ad5901a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afcc829ba0f85da6d888f18ea40ab959f6074ab2a40d85d1501783a7ab51380d7b4ead35a385e0b4a26b602396df7e0c1e02b88c114f244a9bf93f04bf072f0861f5c0b000000000000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba3401e6a52acb1188883ad2a3b1832371fe5bc621426d1ed01b389708165b9cdbae2ed9dc7358f0ebadde0b727f27feeb7464dcc536cbae2f5e7d951680f6f2f9a6a8346962a350845ffa0d82884f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010ae20e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d648532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2654026c6ea08b83b123145ab5703dad844ceb201efeb6dc5f6a9037d2283c42efc54dd84323afc4c10eff462c8843187f1dd48ef0900000000000000ff0f4000000000f00700003c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f908ba7554ba583ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fcdb4c1011e32f808890205f0e6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927e2571f983e96635600000554f327a3535e7c7542799493c31ac05a7b57f03ca91a01ba2a30ca99e969d6fd09dc28e6ce4d9791c73c2d37999d146aef7799738b292fd64bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a794963442aece449a0d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2869291b7d12096833d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e637d4219ef7ec61261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ecab5d232f89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a05e41f6016ab5bbe4fe7ff5d785d0128171c90d9900ca2532b0f9d01c4b45294fbba468df3e1b393cb4e62e753b4172ba7ac1f2b51c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addbc4b3093c91b8068c5adfcb0d7fd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a881192292ffff5392ab3d1311b82432662806add87047f601fa888400000000000000000000000000006acc19808d7cf29bc974b0ea92499a41b9b9a7c2bca311a28ee4952f2d325a56397c78f12205db653a536f0100e0eda300a43a13bd1b9f3322405d1efd78e578dc6b3fb84f3738a4b6caa800000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf699b3746979f99f6a1527f004f37e84fb478199dc1020f4beb98b8074bf7df8b5e783637daf121f175a81cffff4ac55a4385e9a617aa6c8e10d4202c5afeb06e2f9115558ea12f92d7ae633d44086b3f03b20d546fa66a72e38207c9d20035abc46271a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80eba439772bf60a1db18c472dafc5569adc282928d2a1ffe29f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a4a274000000000000000000000000000000000000000000000009dd14b38f2f5426d7cf5075047c31f6ce6adddfe3ac649c0643c8bfbeb14ba1fd7a485aa893915cf81e29aaf375e904bbe52691a4120260ffcd030000006d291ebcef893e1b9ccb6797d0646fe0e7274434f28efb43e06e64f0698caca42f4e6018a455736c482a017e2b13dac4a90faa109f0e87cc94e3efb649692456463ca74aa6ad4bf50c1acb3928143be1c1023a375e528285544d0064b98646f3109e9a4942ce42c6e7ec84b664f6c2770803f10b0a1fcbfc309381aeba191950bae71f37f1eb7ceeffb3c0547ac6571603adbfde4c8b5f8d7f4b854441613633b48865b65bdc415e1e0dcf672d68cf4cebf04f4bc1eebf560a26d3b332240d450fdb0a9a69f432e277f3a0386eb2bd1305c821c64757f786b79fef54dbe64c67d73934bc80b2133fb3c04cc7ea48bf97a6243c9f95dcbddecf45f008f1822c7868e1ff5a3cff5d6b6898335792749df7b1f51e91f8c1c3b1b93b33aaa3fab69cef08a9f6f6cf39dea3d878b2ed42545421970cc426e644332bc956d1c6adefdf0ede2c5c94aa632646ae225accdf031f611d01622921f1b922a5ac887cca3136133dce8d9f5f4da7bed2ea5d94362200000000000000000000f296b0c1484e5f781ad26bff696b05ff0a5e2270e07e18b04273bd4075ea38ab463bfa6a38e7c537498ba3e4df8dfc9e8c0a0d213c3ffad44d2a376def42e41e9fcf32c221aaac6cfdeb33c27500001a0000000000000000000017350000c11ae694b0c69c2c03f6790044a357e785af6e153d5f1ea460af92c7cbbd6295afe740f5e154346d483e0d10522a7a945b93fb705b95b6aae27a8fab1e6984c8bdc12360627137ab6737b68ab08acb29a74dc36b51209cfbc87f61182bbeb2772e9d5a1ffc477179be481ffe46a4ce86be0b1f8eee42a611a3d44ca450b14586ed63dd92005c79e4a8ab8a94f0b74903580ac98708007c80d6c7d0de4614195e40d797c0348dd70f36a220e8b3710fb5358c27e90793bcb9ee6319342c4b239ca8cbc6fc83d32e6eb62ad92e43991f2447be9c2a1ae1119eafb901a43d57e885116d19aa152bfb89f8d0b2516f80120a1cddff771657f3d0288ec3899f1e3ba0151c4037148fb479de703fc52b6573349c28d1b107d859b4961324c17756dde99de1924a1d2b7095d34a55060f47f4407d89acf9f285b20c2e6b3d0491d0d3591b0d94713332b6b79c8297117b0d14eff64e0aca8a4b4aa773d8fba1217e9519952419bb9dd998d0ec870ff00b6d556018602738fbc6cec89d6dd13cf55b96f6fe9a137d2d6a56ad78e52c23ed080000000000002bc261a781fd14126c146a0aac4221839a4b9bbf61e4bba695a41e2109eba8e40c370267cc51ffadbd15cafc97a4d3edfdcb9b5729307c6bdaf7b69325fb05fa8a9869de0600ee477d71bf3e36d1d9019edfa27aae24b632f251df210c86a18fae731ecb8b0d48357378caf2b6789509b1bacfd4fa812dc341875cfa5e798bbf59770000000000000000c8a594ea3c3347962d9113b1fecdfad5a8da641053f02e49456f5d21674521e67a5b18ea451eccf69dd6af928d2d68da9304a296c22fdcea26498d26229110b1aade386b113045033a6188d56e675564d8cb8d5b40114b0f5bf15dd64c9ece60b8588ee8777d0ea8f4713b258427c7d90f9e93348e17723ba9ab8ae790f74cc41ae5795835f3cec40dff485d2802c08611454d9ea784a205bcc07ec26f906f3cf45bb37014ab6f22af6213618e242b283ea9d3f0677ee598072ec06f7170009d92bb7ed9d12c378dfd3e74ec056ee83eef666423d934fc5908c9ff98715218a5964f1e00000000426ac9588e27aefe307f49662990ee823568bbc2f89596ced7c6c52d76b8096f1848410843b93fd404f535be474f456778b5ef85abb8fc2336abd5ea64a6efea8a5aca0015499b88ae780a7bae4df603bd3c72808cf300440b1b638a6640f7de8d0d82f359ca2f779cd48cd8d3603f4f69e47f386988c9b7b5d6dd3d48a1fdca780049d7c87bea42161a4c0d7cf0125b43dc9d8845f3c05a08acda647e7143d0e0aee2949a45e2848890522c2288072467d2afe269f589fb7e034b92d3ca245b16b71998711bfe206c9690b6d0eebb06a29349229eb45ff15c63aa2c82c56d7420738cd1b04eb16e87cb524315d7361ea3635d3799bb7fcc56aa5e1dbe031a7a12554dee6754b72f43a6fddf427f32ec3df274a88097725679769beebf1aa6eb09d5154e4900000000000d0f7160a05911d969879953d3d4702b2676c07bb0fd14020a66718378825d5ed789711b77d40dc31e0b8fc651b45559da463f0000000000000000000000000052d42124e9c26aba885015e69d42ecd710342ac597ebea576ae15fdf611356f622e831741ab15549e0d7a2bd0324e2b3b48a10551607492c19eaf58485feb4cab19c303b30ba2ddea0d792d77724c9fa4ed58b93668fc20484f141ee2b6a0029e88fdc853189b4dafd36ff23b11967090e508f45e3f10857038a52ef275cf9e3e4b5d30b12d138dfa70930c603b5e3f4b7be67be3dba3cbd8d4d143195af0697d779445d67dcfbd922d12a8b49f93eac7a72faacf80346b3b6"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) 1.654467541s ago: executing program 2 (id=3034): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000001800050000000000000000002d000000000000000101000005000100080000000800"], 0x2c}}, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) connect$inet(r1, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000000), 0x20000328) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x24, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0xb}, @TCA_FQ_CODEL_ECN={0x8}, @TCA_FQ_CODEL_ECN={0x8}, @TCA_FQ_CODEL_INTERVAL={0x8, 0x3, 0x3}]}}]}, 0x58}}, 0x0) 1.597532309s ago: executing program 4 (id=3035): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000600)=@filter={'filter\x00', 0x4, 0x4, 0x398, 0xffffffff, 0x1a0, 0x0, 0x0, 0xfeffffff, 0xffffffff, 0x2c8, 0x2c8, 0x2c8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@mcast2, @empty, [0x47e128f2bce82ddb, 0xff], [0xff, 0xffffff00, 0xff, 0xffffff00], 'veth0_to_bond\x00', 'veth1_vlan\x00', {0xff}, {}, 0x6, 0x8, 0x1, 0x51}, 0x2f2, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}, {{@ipv6={@private0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0xff], [0x0, 0xff, 0xff000000, 0xffffff00], 'veth1_virt_wifi\x00', 'batadv_slave_0\x00', {}, {0xff}, 0xae, 0xe7, 0x4, 0x44}, 0x0, 0xf8, 0x128, 0x0, {}, [@common=@ipv6header={{0x28}, {0xc, 0x5c4274de50300c47}}, @common=@hl={{0x28}, {0x1, 0x5}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x1, 0x5, 0x1}, {0x4, 0x0, 0x6}, 0x6, 0x817e}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3f8) sendmsg$nl_route(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x18}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5000000010008105e9c51c000000000000000000", @ANYRES32=r4, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES64=r1], 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=@newlink={0x40, 0x10, 0x1, 0x1, 0x25dfdbff, {0x0, 0x0, 0x0, r4, 0x0, 0x8}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x10, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0x12, 0x1f}}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x11}, 0x0) r5 = accept$packet(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$inet_sctp(0x2, 0x5, 0x84) r8 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), r6) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_GATEWAYS(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x1c, r8, 0x8af234ad5f3fd7b5, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4044811}, 0x4000800) r10 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r10, 0x1, 0x23, &(0x7f00000000c0)=0x3, 0x4) setsockopt$SO_TIMESTAMP(r10, 0x1, 0x40, &(0x7f0000000000)=0xfffffffa, 0x4) r11 = socket(0x11, 0x3, 0x0) r12 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000680), 0x101402, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f00000005c0)={'hsr0\x00', 0x0}) r14 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r14, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000200)={0x2, 0x1, 0x0, 0x3, 0x5, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x7, 0x0, 0x0, 0x0, @in={0x2, 0x8000, @local}}]}, 0x28}, 0x1, 0x7}, 0x0) bind$packet(r11, &(0x7f00000001c0)={0x11, 0x17, r13, 0x1, 0x0, 0x6, @local}, 0x14) sendmsg$nl_generic(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYRESDEC=r12], 0x18}}, 0x400c010) getsockopt$packet_buf(r5, 0x107, 0x6, &(0x7f0000000340)=""/197, &(0x7f0000000440)=0xc5) 1.537390986s ago: executing program 0 (id=3036): socket$inet6_sctp(0xa, 0x5, 0x84) (async) r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) (async) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x4004032, 0xffffffffffffffff, 0xb06cb000) r4 = socket$l2tp(0x2, 0x2, 0x73) sendto$l2tp(r4, &(0x7f0000001040)="c3", 0x1, 0x4881, &(0x7f0000000200)={0x2, 0x0, @multicast1}, 0x10) (async) r5 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x80c1}, 0x4) sendmsg$NL80211_CMD_AUTHENTICATE(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB="5c00000017b04aaab2ff24bdb46aa94d039e41d78b8d9d1c3c8cf58f55a46d140c6e2175", @ANYRES32=r3, @ANYRESHEX, @ANYRES16=r5, @ANYBLOB="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"], 0x5c}, 0x1, 0x0, 0x0, 0xc0}, 0x4000) (async) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) write(r7, &(0x7f0000000080)="5b20bc9cc46a", 0x6) (async) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'geneve0\x00', 0x5001}) (async) ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000080)=0x4) (async) r8 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r8, &(0x7f0000000140)={0xa, 0x20e6, 0x0, @empty}, 0x1c) connect$inet6(r8, &(0x7f00000001c0)={0xa, 0x4e20, 0x2, @mcast2, 0x17}, 0x1c) (async) r9 = socket$inet6(0xa, 0x800, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r9, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', 0x1}) (async) write$tun(r6, &(0x7f0000000300)=ANY=[@ANYBLOB="010530000a00280006000000600000000030114020010000000000000000000000000001ff02000000000000000000000000000120e620e6"], 0x64) (async) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000006c0)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x200040d0}, 0xc000) syz_genetlink_get_family_id$tipc(&(0x7f0000000140), r2) (async) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r8, 0x84, 0x18, &(0x7f0000000240)={r1, 0x10d}, 0x8) socket$inet6(0xa, 0x1, 0x0) 1.486799364s ago: executing program 2 (id=3037): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0x668, 0x65, 0x200, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x8, 0x2}, {0x0, 0x1}, {0x5}}, [@filter_kind_options=@f_bpf={{0x8}, {0x13c, 0x2, [@TCA_BPF_ACT={0x138, 0x1, [@m_simple={0x134, 0x1, 0x0, 0x0, {{0xb}, {0x78, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x2, 0x10, 0x6, 0xce6b, 0x6}}, @TCA_DEF_PARMS={0x18, 0x2, {0x0, 0x24aa7000, 0x7, 0x8, 0x80000001}}, @TCA_DEF_PARMS={0x18, 0x2, {0x876f, 0x96, 0x3, 0x40, 0x6}}, @TCA_DEF_DATA={0xa, 0x3, '#%@:/\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0xffffffff, 0x6, 0xffffffffffffffff, 0x8, 0x5}}, @TCA_DEF_DATA={0x5, 0x3, '\x00'}]}, {0x91, 0x6, "9209be6ac2eb68ec44c03ad03ccfd5c9aff753ae7cef446e9abdc2009e245df08fa6cf4268a294d87a0186536d0c2458f0e060a1f4dfab45c4880975e027452a67ff09dc0cda2d51a28cf3834caa7aa64015620886e3c095d93664d00664ede4714e13cbf7a559b27b8e74bc4f58e2418eea9cf3966ac82d194b992695034782aaece271e1d165a896011eaa09"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x5, 0x2}}}}]}]}}, @filter_kind_options=@f_matchall={{0xd}, {0x4f0, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x3}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0x1, 0xf}}, @TCA_MATCHALL_ACT={0x1fc, 0x2, [@m_connmark={0x1f8, 0xa, 0x0, 0x0, {{0xd}, {0xe4, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x0, 0x0, 0xffffffffffffffff, 0x9, 0x4}, 0x7}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x9, 0x5, 0x8, 0x8, 0x3ff}, 0x3}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x4, 0x7, 0x3, 0x1800, 0x7fff}, 0x8001}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xfffffff7, 0x2, 0x7, 0x7ff}, 0x2}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x200, 0x9, 0x20000000, 0x2, 0x800}, 0x38}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x71c, 0x6, 0x6, 0x41, 0x7}}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x0, 0x3, 0x3, 0x7, 0x2}, 0x2}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x5, 0x3, 0x3, 0x9, 0x9}, 0x7}}]}, {0xe5, 0x6, "68d5f9b35942b1a9b81011af8ef9f58903979090153440330e71926cf16dfa6a95a63229ec1e046036f5951acc832298a090af5f8dd4c4eda121fe5c11e2758323235d7d4065e102fca2803e8455bbe375423a5083d857379e566a6b55eaa2a53c32659a3eed4669754e022d685f3904836ee46af5a86c45f1a6ba4ad03ce912f0b3be3d485456cdbcd0db56ba63218491a6c93c649f1201f2dcdfb54f743ff852af6a7de13cd0d2252b2d6743c0774446a19f08b9f2c77f986ea287dabf7581d911194d13e1f29884a2081bbf43fce2a1a2b767905dd62ad427703c4290d86deb"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x4}}}}]}, @TCA_MATCHALL_FLAGS={0x8}, @TCA_MATCHALL_FLAGS={0x8}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0x4, 0xf}}, @TCA_MATCHALL_ACT={0x2c8, 0x2, [@m_csum={0x188, 0x0, 0x0, 0x0, {{0x9}, {0x74, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x400000, 0x47, 0x3, 0x80000000, 0x6}, 0x3c}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x7, 0x7ff, 0x0, 0x3, 0x2}, 0xb}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x8, 0x5, 0xfffffffffffffffc, 0x8, 0x3}, 0x4b}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x530e, 0x9, 0x20000000, 0x7, 0xffffffff}, 0x1}}]}, {0xe9, 0x6, "8e742964a8bbfb3154844346644898de0354ee45597bbff6c1b4802726b2ca8b75ce550388c84cc686666dc0fd3ccd01f955cd351f6e0aee4e337b55bb5388a3b58420edfc59ade1349d7cc503101571895e677b64e3bfb9a5173fb1e737612ff18132f5bd2bc66d3b55ecbba2b5457b250035617dcdbdaec682f131f66bed12f8c9f14ba127f64337200b93d2baa76f2745a3aef055faebdf58456bed30345b2e556053be34feea35f858cc9db91981b08dd47caadf768a0b6974308b6864e3b32b95e11458f632c8a4b3de3d407dd970adc90d26a46a602356397bad1f3b4f5cae0b262f"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_vlan={0x13c, 0x15, 0x0, 0x0, {{0x9}, {0x3c, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x1000, 0x40, 0x6, 0x2, 0xf}, 0x1}}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x6, 0x25a, 0x0, 0x80000001, 0x800}, 0x2}}]}, {0xd6, 0x6, "19a3953d78f1563aa910b5ab1c345795a9c5fdb59e62e379663a63a2410c14f25058686dc1f35162d1d61c9ef33f76b41308aa85786484bbc8df8cd7d6f79c7a8afa3f46c074bafc6b8e22601dba54f54cf84920df14f7fa820566ce9a7c7c8be49f40bb7b2f0cebdd8fb8e3d463ca5ef3a3b42ee142b1b380dd4e27c637e5eed7dc23e893606abf117d1645a88f80bd0099ddaaf047e8176c59ee4ad3dd6c16189178332362837467598d104a879c0c3e38990b7dbb96fafdf130365f21370f37f14adeb5658a62010e4723c70132a7d5e7"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1}}}}]}]}}]}, 0x668}, 0x1, 0x0, 0x0, 0x2404c080}, 0x20000080) r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f0000000040)="120000001200e7ef007b00000000000000a1", 0x12, 0x4044084, 0x0, 0x0) recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1002}) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff000000009408000000001700638af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000008000000850000006900000095"], &(0x7f0000005d80)='syzkaller\x00', 0xc}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) r5 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) setsockopt$inet_mreqn(r5, 0x0, 0x23, &(0x7f0000000140)={@loopback, @loopback, r4}, 0xc) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000300)=@gettaction={0x4c, 0x32, 0x200, 0x70bd29, 0x25dfdbff, {}, [@action_gd=@TCA_ACT_TAB={0x2c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0x10, 0x10, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}]}, 0x4c}}, 0x0) write$tun(r0, &(0x7f0000000400)=ANY=[], 0xfdef) 1.418315176s ago: executing program 1 (id=2956): writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000000)="8724866f", 0x4}], 0x1) r0 = epoll_create(0x9) r1 = openat$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.clone_children\x00', 0x2, 0x0) r2 = accept$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000100)) poll(&(0x7f0000000140)=[{r0, 0x5}, {r0, 0x4203}, {r1, 0x200}, {0xffffffffffffffff, 0x440}, {r2, 0x1}, {r0, 0x480}], 0x6, 0x8000009) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x8, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1804"], 0x0, 0x2, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r4, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r3, 0x4010744d, &(0x7f0000000180)) 1.02104811s ago: executing program 3 (id=3039): r0 = socket(0x27, 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x1}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x3, 0x0) clock_gettime(0x0, &(0x7f0000000e40)={0x0, 0x0}) recvmmsg(0xffffffffffffffff, &(0x7f0000000d80)=[{{&(0x7f0000000340)=@vsock={0x28, 0x0, 0x0, @host}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000640)=""/84, 0x54}], 0x1}, 0x45}, {{&(0x7f0000001000)=@ll={0x11, 0x0, 0x0}, 0x80, &(0x7f00000008c0)=[{&(0x7f00000006c0)=""/123, 0x7b}, {&(0x7f0000000780)=""/187, 0xbb}, {&(0x7f00000003c0)=""/19, 0x13}], 0x3}, 0x3}, {{&(0x7f0000000900)=@generic, 0x80, &(0x7f0000000c80)=[{&(0x7f0000000980)=""/6, 0x6}, {&(0x7f00000009c0)=""/206, 0xce}, {&(0x7f0000000ec0)=""/185, 0xb9}, {&(0x7f0000000b80)}, {&(0x7f0000001080)=""/163, 0xa3}], 0x5, &(0x7f0000000d00)=""/97, 0x61}, 0x9}], 0x3, 0x10100, &(0x7f0000000e80)) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', 0x1}) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r0, &(0x7f0000000500)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000480)={&(0x7f00000005c0)=ANY=[@ANYBLOB="28000020000d14000426bd7000fcdbdf25f1003e00050025af0800010002000008000100020000000067c8bcf5114c66b8d3589052d9c9b248a15b6c8fffffff66dcffe8c1fc2d6ee37bc67ff79caa5e59fc300f"], 0x28}, 0x1, 0x0, 0x0, 0x200080d4}, 0x20008084) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x74, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x40, 0x2, [@TCA_MATCHALL_ACT={0x3c, 0x2, [@m_mpls={0x38, 0x1, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_MPLS_BOS={0x5}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x74}}, 0x0) write(r1, &(0x7f0000000400)="0000884700064001", 0x8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r7, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3e}, 0x94) connect$inet6(r7, &(0x7f00000004c0)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) sendto$inet6(r7, &(0x7f00000002c0), 0x0, 0x2005c844, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000f80)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x3, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x7}]}, 0x2c}}, 0x51) bpf$MAP_CREATE(0x0, &(0x7f0000000fc0)=ANY=[@ANYRES32=r4, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYRESDEC=r7], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={0xffffffffffffffff, &(0x7f0000000540)="1601cb3bc334e0a5475db37b48e054987f41086d7e9abbd3836c2a7a219775b2cff2ec40d52d7aab7288fe43e3ab6f50daf1cf5fb3a1177e010075ec9e00", &(0x7f00000000c0)=""/109, 0x18}, 0x20) sendmsg$can_j1939(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)="ca0280fe79cce337b605fdb534d16738c618326479e0e2fbda14956bb7fb2aca0a77f462eb50a63a167dc7f9bd5ac259814add1d32b3c5bc16829d2aab61c86ea73649222803946a5aa700cd232aa6dcd1a95a699674aa98441dc2574fd62d438a73228b428eb12cc102cea3859e521a132f8ec946b87d8c014a4d36ad02e7931f", 0x81}, 0x1, 0x0, 0x0, 0x20040040}, 0x69e21e27bb2e8557) socketpair(0x1, 0x1, 0x6, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ifreq(r8, 0x8938, &(0x7f0000000040)={'bridge_slave_1\x00', @ifru_map={0x7, 0x5, 0x0, 0x73, 0x3, 0x7}}) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a64000000000000000000040000000900030073797a30000000000c00024000000000000000020c00024000000000000000032c000480080002402f563afa08000140001c0002080001400800000008000140000000040800024000000000140000001100010000000000000000000000000a7af2a3ab88000000000000"], 0x8c}, 0x1, 0x0, 0x0, 0x84}, 0x0) r10 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r10, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) 866.319729ms ago: executing program 4 (id=3040): socket$can_j1939(0x1d, 0x2, 0x7) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x49920d862a92153b, 0xc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2, 0x5c83}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x8, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}]}, 0x38}}, 0x48010) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r1, 0x0, 0xd1, &(0x7f0000000000)=0x3, 0x4) setsockopt$MRT_PIM(r1, 0x0, 0xcf, &(0x7f0000000040), 0x4) getpeername(r0, 0x0, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x49920d862a92153b, 0xc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2, 0x5c83}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x8, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}]}, 0x38}}, 0x48010) (async) socket$igmp(0x2, 0x3, 0x2) (async) setsockopt$MRT_FLUSH(r1, 0x0, 0xd1, &(0x7f0000000000)=0x3, 0x4) (async) setsockopt$MRT_PIM(r1, 0x0, 0xcf, &(0x7f0000000040), 0x4) (async) getpeername(r0, 0x0, 0x0) (async) 864.854679ms ago: executing program 2 (id=3041): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 669.35338ms ago: executing program 2 (id=3042): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r0, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) (async) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0x5, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0x4, 0x4, 0x3, 0x0, 0x1}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x3, &(0x7f0000000080)=@raw=[@map_val={0x18, 0x0, 0x2, 0x0, r2}, @exit], &(0x7f0000000180)='syzkaller\x00', 0x2, 0xb, &(0x7f0000000340)=""/233, 0x0, 0x11}, 0x80) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0x16, &(0x7f0000000100)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}}, @map_val={0x18, 0x8, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x6}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sk_msg=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) (rerun: 64) 475.298808ms ago: executing program 4 (id=3043): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000002a0000000100000000000001040000002000000105000000010000040400000013000000010000000000000017000000020000040800000021000000010000000000000025000000020000002000000000696e74006270665f7370696e5f6c6f636b0076616c006d61705f76616c756500636e74006c"], 0x0, 0x8e}, 0x28) (async) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000002a0000000100000000000001040000002000000105000000010000040400000013000000010000000000000017000000020000040800000021000000010000000000000025000000020000002000000000696e74006270665f7370696e5f6c6f636b0076616c006d61705f76616c756500636e74006c"], 0x0, 0x8e}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000009d0b3e1066f42544", @ANYRES64, @ANYRES32=r0, @ANYBLOB="010000000300"], 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000009d0b3e1066f42544", @ANYRES64, @ANYRES32=r0, @ANYBLOB="010000000300"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="2000000004000000080000000000000001"], 0x40) unshare(0x22020600) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0xf, &(0x7f00000004c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x2}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='GPL\x00', 0x6, 0x8b, &(0x7f0000000240)=""/139, 0x0, 0x1d}, 0x94) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0xffffffc0, 0x0, 0x0, 0x0, 0xc}, [@call={0x85, 0x0, 0x0, 0x28}]}, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0xa0900, 0x51}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0xffffffc0, 0x0, 0x0, 0x0, 0xc}, [@call={0x85, 0x0, 0x0, 0x28}]}, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0xa0900, 0x51}, 0x94) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c00018006000600800a000014000280", @ANYRES8=r4], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) unshare(0x20000) (async) unshare(0x20000) mmap(&(0x7f00006b7000/0x14000)=nil, 0x14000, 0x4, 0x1010, r3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, r1, 0x7, '\x00', r5, r0, 0x4, 0x2}, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000003c0)={r1, 0x0, 0x0}, 0x20) (async) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000003c0)={r1, 0x0, 0x0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f00000000c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x89}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3f}, 0x90) 364.440769ms ago: executing program 3 (id=3044): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000004d4330000002001000000000000000000000000000200000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000023500000a00000000000000000000008d001400736861310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000802000000000000b01f46fc7c0ff1ba6ae78607befd59c34031658fd87baff04f012138bf21fa481731c1a993da6cf3ec79d3767409b63af2c8cc54637c3d7545c6b42a31f9b7ef21000000"], 0x180}}, 0x1000) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x4044005}, 0x814) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002a00)={0x20, 0x2d, 0x107, 0x70bd2b, 0x25dfdbfe, {0x8, 0x7c}, [@nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0xdd}]}, @nested={0x4, 0x3}]}, 0x20}}, 0x4008030) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x600) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000300), 0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_NODELAY(r2, 0x84, 0x3, &(0x7f0000000080)=0xfffffffa, 0x4) r10 = socket$key(0xf, 0x3, 0x2) recvmmsg(r10, &(0x7f0000000440), 0x6f5, 0x2000000022, &(0x7f0000000480)={0x77359400}) setsockopt$sock_int(r10, 0x1, 0x28, &(0x7f0000000040)=0x80000004, 0x4) sendmsg$key(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="18000000", @ANYRES16=r9, @ANYBLOB="01002cbd70e3558807e1ef6f7f5123a1558e00fedbdf250b00000004047897bd000180"], 0x18}, 0x1, 0x0, 0x0, 0x24000080}, 0x4008084) r11 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="020a"], 0x38}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e"], 0x70}}, 0x0) sendmmsg(r11, &(0x7f0000000180), 0x3ef, 0x0) sendmsg$NBD_CMD_CONNECT(r5, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000140)={0x38, r6, 0x1, 0xfffffffd, 0x0, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r7}}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x38}}, 0x20000000) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x1c, r6, 0x1, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x51}, 0x4000810) r12 = syz_genetlink_get_family_id$batadv(&(0x7f0000000380), r2) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000780)={&(0x7f0000000440)={0x14, r12, 0x1, 0x70bd25, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4000004}, 0x810) 154.374527ms ago: executing program 2 (id=3045): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000040)={0x0, 0x1, 0x8}, 0xc) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={r0, 0x58, &(0x7f0000000080)}, 0x10) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x2, 0x4, 0x8, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, r1, 0x1, 0x3}, 0x48) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000002000000b705000008000000850000006900000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b70800000c300000638af8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018240000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x5, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5c, '\x00', 0x0, @fallback=0x4d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet6(0xa, 0x2, 0x3a) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e21, 0x7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2}, 0x1c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) (async) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000040)={0x0, 0x1, 0x8}, 0xc) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={r0, 0x58, &(0x7f0000000080)}, 0x10) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80}, 0x28) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x2, 0x4, 0x8, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, r1, 0x1, 0x3}, 0x48) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[], 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000002000000b705000008000000850000006900000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b70800000c300000638af8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018240000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x5, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5c, '\x00', 0x0, @fallback=0x4d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) socket$inet6(0xa, 0x2, 0x3a) (async) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e21, 0x7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2}, 0x1c) (async) 153.465582ms ago: executing program 1 (id=3046): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=@ipmr_getroute={0x1c, 0x1a, 0x2, 0x70bd29, 0x25dfdbfb, {0x80, 0x20, 0x80, 0xdd, 0xfd, 0x0, 0xff, 0x3, 0xd00}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x80) sendmsg$nl_route_sched(r1, &(0x7f0000000680)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000640)={&(0x7f0000000400)=@deltaction={0x1d8, 0x31, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@TCA_ACT_TAB={0x64, 0x1, [{0x10, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0xd, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x10, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xb9c1}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0x10, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0x20, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfffffffa}}]}, @TCA_ACT_TAB={0x80, 0x1, [{0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0x20, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0x10, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0x10, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7fffffff}}, {0x14, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0x14, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0x10, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0x10, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}]}, @TCA_ACT_TAB={0x24, 0x1, [{0x10, 0x10, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0x10, 0x10, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}]}, @TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xaa61}}]}, @TCA_ACT_TAB={0x48, 0x1, [{0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x10000}}, {0x10, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0xb, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @TCA_ACT_TAB={0x64, 0x1, [{0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x29f4}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7f}}, {0x10, 0x3, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0x10, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0x10, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0xf, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}]}]}, 0x1d8}, 0x1, 0x0, 0x0, 0x20000894}, 0x80) socket$nl_route(0x10, 0x3, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848130000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r3], 0x20}, 0x1, 0x0, 0x0, 0x20000886}, 0x0) 0s ago: executing program 4 (id=3047): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="020a"], 0x38}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e"], 0x70}}, 0x0) sendmmsg(r1, &(0x7f0000000180), 0x3ef, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv4_newrule={0x2c, 0x1e, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7}, [@FRA_DST={0x8, 0x1, @empty}, @FRA_FLOW={0x8, 0xb, 0x10000}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4008012}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r4, 0x0, 0xd2, &(0x7f0000000280)={@broadcast, @remote, 0x0, "d009000000000000006404000000dc3f0900000000000000d800000000000400", 0x0, 0x0, 0xfffffd, 0xfffffffd}, 0x3c) r5 = socket$inet6_udp(0xa, 0x2, 0x0) r6 = socket$can_j1939(0x1d, 0x2, 0x7) socket$inet6_icmp(0xa, 0x2, 0x3a) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r8, &(0x7f0000000280)={0x1d, r9, 0x2, {0x0, 0x1, 0x2}, 0xfe}, 0x18) bind$can_j1939(r6, &(0x7f0000000a40)={0x1d, r9, 0x3, {0x1, 0xff}, 0xff}, 0x18) setsockopt$sock_int(r6, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmmsg$inet(r6, &(0x7f00000005c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r10, 0x8946, &(0x7f0000000080)={'veth0_to_bond\x00', &(0x7f00000004c0)=@ethtool_channels={0x3d, 0xfffffffc, 0x0, 0x0, 0x0, 0x2, 0x2, 0x3, 0x9}}) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x4e0, 0x320, 0x18c, 0x203, 0x320, 0x19030000, 0x410, 0x2e0, 0x2e0, 0x410, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x320, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x0, 0x0, 0x8, 0x2000000}, {}, {}, {}, {}, {}, {0x0, 0x81}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0xe}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x3}, {0x2, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x8}, {}, {0x16}, {0x0, 0xff}, {}, {0x7}, {0x0, 0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0x101}, {}, {0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x0, 0x9}, {0xfffc, 0x0, 0x0, 0x6}, {}, {0xfffe}, {}, {}, {}, {0xfffe, 0xfb}, {}, {0x7a04}, {}, {}, {0x20, 0x6}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb8c, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {0x3}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {0x0, 0xfd}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0xb}, {0x4, 0x2}]}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x2, 'syz0\x00', {0x8001}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz0\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x540) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000400)=ANY=[@ANYBLOB="6400000010000304000000000000000000e4ff00b1c9a4b46a8b33155cd3e83768fe994401a144ef13b27128346c5d10db1514d43c7619fcccd0f1a488e13249ac4d22c92dc3a9fa782b586fe1ba97c7b0aec5cb01ddc765526fc29359f7a47d8cd6898706a1a3c7ee017b33e5f7c8273f4c2b4e36a4422da494c65d55debdf94a3364a17eba96384901b6fade25bf24844fa42f7b93a8771084ee88846833772804f38d1926dbd74c8a9723e90d5d0f3d26eb129f160fab16", @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c000200060000001f000000060001000000000008000500", @ANYRES32=r2, @ANYRESOCT=r3, @ANYRES32, @ANYRESOCT=r5], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x48810) socket$kcm(0x29, 0x2, 0x0) kernel console output (not intermixed with test programs): x320 [ 187.672222][T10549] ? apparmor_socket_sendmsg+0x27b/0x360 [ 187.672244][T10549] ? __pfx_inet_sendmsg+0x10/0x10 [ 187.672261][T10549] sock_sendmsg_nosec+0x10e/0x180 [ 187.672284][T10549] __sys_sendto+0x408/0x5a0 [ 187.672305][T10549] ? ksys_write+0x1e6/0x270 [ 187.672335][T10549] ? __pfx___sys_sendto+0x10/0x10 [ 187.672355][T10549] ? __mutex_unlock_slowpath+0x731/0x900 [ 187.672407][T10549] ? __pfx_ksys_write+0x10/0x10 [ 187.672440][T10549] __x64_sys_sendto+0xde/0x100 [ 187.672464][T10549] do_syscall_64+0x166/0x520 [ 187.672485][T10549] ? trace_irq_disable+0x3b/0x140 [ 187.672502][T10549] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.672521][T10549] ? clear_bhb_loop+0x70/0xc0 [ 187.672543][T10549] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.672561][T10549] RIP: 0033:0x7efcab19e159 [ 187.672578][T10549] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 187.672593][T10549] RSP: 002b:00007efcabfd0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 187.672613][T10549] RAX: ffffffffffffffda RBX: 00007efcab425fa0 RCX: 00007efcab19e159 [ 187.672626][T10549] RDX: 0000000000000001 RSI: 0000200000000040 RDI: 0000000000000003 [ 187.672638][T10549] RBP: 00007efcabfd0090 R08: 0000200000000100 R09: 000000000000001c [ 187.672651][T10549] R10: 0000000024004881 R11: 0000000000000246 R12: 0000000000000002 [ 187.672663][T10549] R13: 00007efcab426038 R14: 00007efcab425fa0 R15: 00007ffe9f5d0718 [ 187.672693][T10549] [ 188.322568][T10574] netlink: 'syz.3.1262': attribute type 1 has an invalid length. [ 188.323279][T10574] netlink: 'syz.3.1262': attribute type 10 has an invalid length. [ 188.325554][T10576] netlink: 'syz.3.1262': attribute type 1 has an invalid length. [ 188.325985][T10574] netlink: 'syz.3.1262': attribute type 10 has an invalid length. [ 190.254006][T10518] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 190.504843][T10596] FAULT_INJECTION: forcing a failure. [ 190.504843][T10596] name failslab, interval 1, probability 0, space 0, times 0 [ 190.504875][T10596] CPU: 0 UID: 0 PID: 10596 Comm: syz.3.1267 Not tainted syzkaller #0 PREEMPT(full) [ 190.504895][T10596] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 190.504907][T10596] Call Trace: [ 190.504914][T10596] [ 190.504922][T10596] dump_stack_lvl+0xe8/0x150 [ 190.504953][T10596] should_fail_ex+0x410/0x560 [ 190.504979][T10596] should_failslab+0xa8/0x100 [ 190.505004][T10596] __kmalloc_cache_noprof+0xa3/0x600 [ 190.505024][T10596] ? __kmalloc_cache_noprof+0x14d/0x600 [ 190.505041][T10596] ? sctp_add_bind_addr+0x8c/0x370 [ 190.505066][T10596] ? sctp_add_bind_addr+0x8c/0x370 [ 190.505100][T10596] sctp_add_bind_addr+0x8c/0x370 [ 190.505131][T10596] sctp_copy_local_addr_list+0x31a/0x4e0 [ 190.505160][T10596] ? sctp_copy_local_addr_list+0xa3/0x4e0 [ 190.505189][T10596] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 190.505225][T10596] ? sctp_v6_is_any+0x64/0x80 [ 190.505245][T10596] ? sctp_copy_one_addr+0x93/0x360 [ 190.505274][T10596] sctp_bind_addr_copy+0xb3/0x3c0 [ 190.505305][T10596] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 190.505334][T10596] sctp_connect_new_asoc+0x2ff/0x6b0 [ 190.505359][T10596] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 190.505382][T10596] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 190.505404][T10596] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 190.505422][T10596] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 190.505444][T10596] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 190.505468][T10596] ? security_sctp_bind_connect+0x7e/0x2c0 [ 190.505490][T10596] sctp_sendmsg+0x159b/0x2d00 [ 190.505523][T10596] ? kstrtouint+0x6e/0xe0 [ 190.505551][T10596] ? __pfx_sctp_sendmsg+0x10/0x10 [ 190.505570][T10596] ? lock_acquire+0x115/0x350 [ 190.505590][T10596] ? get_pid_task+0x20/0x1f0 [ 190.505626][T10596] ? aa_sock_msg_perm+0xf5/0x210 [ 190.505647][T10596] ? sock_rps_record_flow+0x19/0x350 [ 190.505668][T10596] ? inet_sendmsg+0x298/0x320 [ 190.505684][T10596] ? apparmor_socket_sendmsg+0x27b/0x360 [ 190.505705][T10596] ? __pfx_inet_sendmsg+0x10/0x10 [ 190.505721][T10596] sock_sendmsg_nosec+0x10e/0x180 [ 190.505743][T10596] __sys_sendto+0x408/0x5a0 [ 190.505763][T10596] ? ksys_write+0x1e6/0x270 [ 190.505793][T10596] ? __pfx___sys_sendto+0x10/0x10 [ 190.505813][T10596] ? __mutex_unlock_slowpath+0x731/0x900 [ 190.505864][T10596] ? __pfx_ksys_write+0x10/0x10 [ 190.505897][T10596] __x64_sys_sendto+0xde/0x100 [ 190.505923][T10596] do_syscall_64+0x166/0x520 [ 190.505944][T10596] ? trace_irq_disable+0x3b/0x140 [ 190.505962][T10596] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.505980][T10596] ? clear_bhb_loop+0x70/0xc0 [ 190.506003][T10596] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.506022][T10596] RIP: 0033:0x7f026179e159 [ 190.506039][T10596] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 190.506053][T10596] RSP: 002b:00007f0262750028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 190.506072][T10596] RAX: ffffffffffffffda RBX: 00007f0261a25fa0 RCX: 00007f026179e159 [ 190.506084][T10596] RDX: 0000000000000001 RSI: 0000200000000040 RDI: 0000000000000003 [ 190.506094][T10596] RBP: 00007f0262750090 R08: 0000200000000100 R09: 000000000000001c [ 190.506106][T10596] R10: 0000000024004881 R11: 0000000000000246 R12: 0000000000000002 [ 190.506116][T10596] R13: 00007f0261a26038 R14: 00007f0261a25fa0 R15: 00007fff4cdb4f08 [ 190.506145][T10596] [ 191.266148][T10626] FAULT_INJECTION: forcing a failure. [ 191.266148][T10626] name failslab, interval 1, probability 0, space 0, times 0 [ 191.266187][T10626] CPU: 0 UID: 0 PID: 10626 Comm: syz.1.1279 Not tainted syzkaller #0 PREEMPT(full) [ 191.266207][T10626] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 191.266219][T10626] Call Trace: [ 191.266226][T10626] [ 191.266233][T10626] dump_stack_lvl+0xe8/0x150 [ 191.266264][T10626] should_fail_ex+0x410/0x560 [ 191.266290][T10626] should_failslab+0xa8/0x100 [ 191.266317][T10626] __kmalloc_cache_noprof+0xa3/0x600 [ 191.266336][T10626] ? __kmalloc_cache_noprof+0x14d/0x600 [ 191.266352][T10626] ? sctp_add_bind_addr+0x8c/0x370 [ 191.266377][T10626] ? sctp_add_bind_addr+0x8c/0x370 [ 191.266408][T10626] sctp_add_bind_addr+0x8c/0x370 [ 191.266438][T10626] sctp_copy_local_addr_list+0x31a/0x4e0 [ 191.266466][T10626] ? sctp_copy_local_addr_list+0xa3/0x4e0 [ 191.266494][T10626] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 191.266523][T10626] ? sctp_v6_is_any+0x64/0x80 [ 191.266541][T10626] ? sctp_copy_one_addr+0x93/0x360 [ 191.266568][T10626] sctp_bind_addr_copy+0xb3/0x3c0 [ 191.266594][T10626] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 191.266620][T10626] sctp_connect_new_asoc+0x2ff/0x6b0 [ 191.266645][T10626] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 191.266667][T10626] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 191.266687][T10626] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 191.266705][T10626] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 191.266727][T10626] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 191.266750][T10626] ? security_sctp_bind_connect+0x7e/0x2c0 [ 191.266771][T10626] sctp_sendmsg+0x159b/0x2d00 [ 191.266802][T10626] ? kstrtouint+0x6e/0xe0 [ 191.266829][T10626] ? __pfx_sctp_sendmsg+0x10/0x10 [ 191.266848][T10626] ? lock_acquire+0x115/0x350 [ 191.266866][T10626] ? get_pid_task+0x20/0x1f0 [ 191.266899][T10626] ? aa_sock_msg_perm+0xf5/0x210 [ 191.266919][T10626] ? sock_rps_record_flow+0x19/0x350 [ 191.266941][T10626] ? inet_sendmsg+0x298/0x320 [ 191.266956][T10626] ? apparmor_socket_sendmsg+0x27b/0x360 [ 191.266979][T10626] ? __pfx_inet_sendmsg+0x10/0x10 [ 191.266996][T10626] sock_sendmsg_nosec+0x10e/0x180 [ 191.267018][T10626] __sys_sendto+0x408/0x5a0 [ 191.267039][T10626] ? ksys_write+0x1e6/0x270 [ 191.267068][T10626] ? __pfx___sys_sendto+0x10/0x10 [ 191.267088][T10626] ? __mutex_unlock_slowpath+0x731/0x900 [ 191.267140][T10626] ? __pfx_ksys_write+0x10/0x10 [ 191.267179][T10626] __x64_sys_sendto+0xde/0x100 [ 191.267205][T10626] do_syscall_64+0x166/0x520 [ 191.267226][T10626] ? trace_irq_disable+0x3b/0x140 [ 191.267243][T10626] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.267261][T10626] ? clear_bhb_loop+0x70/0xc0 [ 191.267283][T10626] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.267302][T10626] RIP: 0033:0x7f1f99b9e159 [ 191.267320][T10626] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 191.267335][T10626] RSP: 002b:00007f1f9ab3b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 191.267355][T10626] RAX: ffffffffffffffda RBX: 00007f1f99e25fa0 RCX: 00007f1f99b9e159 [ 191.267368][T10626] RDX: 0000000000000001 RSI: 0000200000000040 RDI: 0000000000000003 [ 191.267379][T10626] RBP: 00007f1f9ab3b090 R08: 0000200000000100 R09: 000000000000001c [ 191.267392][T10626] R10: 0000000024004881 R11: 0000000000000246 R12: 0000000000000002 [ 191.267404][T10626] R13: 00007f1f99e26038 R14: 00007f1f99e25fa0 R15: 00007fff352094a8 [ 191.267435][T10626] [ 191.350741][T10631] __nla_validate_parse: 3 callbacks suppressed [ 191.350760][T10631] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1281'. [ 191.362544][T10631] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1281'. [ 191.448223][T10631] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1281'. [ 191.674461][T10639] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 191.956476][T10655] syzkaller0: left promiscuous mode [ 191.956499][T10655] syzkaller0: left allmulticast mode [ 192.075249][T10667] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1292'. [ 192.075271][T10667] netlink: 176 bytes leftover after parsing attributes in process `syz.1.1292'. [ 192.075316][T10667] netlink: 'syz.1.1292': attribute type 5 has an invalid length. [ 192.182581][T10671] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1293'. [ 192.242392][T10675] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1293'. [ 192.320705][T10671] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1293'. [ 192.401807][T10688] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1293'. [ 192.460351][T10696] IPVS: set_ctl: invalid protocol: 51 255.255.255.255:20001 [ 192.776820][T10707] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 192.777462][T10707] batman_adv: batadv0: Adding interface: gretap1 [ 192.777475][T10707] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 192.824454][T10707] batman_adv: batadv0: Interface activated: gretap1 [ 193.187092][T10735] IPVS: lc: TCP 127.0.0.1:5376 - no destination available [ 193.226965][T10740] netlink: 'syz.1.1309': attribute type 11 has an invalid length. [ 193.264638][T10742] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1307'. [ 194.188378][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.188433][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.476742][T10820] ipvlan2: entered allmulticast mode [ 194.476763][T10820] virt_wifi0: entered allmulticast mode [ 194.631415][T10819] ipvlan3: entered allmulticast mode [ 194.932287][T10859] netdevsim0: mtu less than device minimum [ 195.583430][T10890] netlink: 'syz.1.1352': attribute type 2 has an invalid length. [ 195.584585][T10890] netlink: 'syz.1.1352': attribute type 1 has an invalid length. [ 195.735968][T10896] 8021q: adding VLAN 0 to HW filter on device bond10 [ 195.767635][T10896] bond9: (slave bond10): making interface the new active one [ 195.783229][T10896] bond9: (slave bond10): Enslaving as an active interface with an up link [ 195.852506][T10890] bond9: (slave gretap3): Enslaving as a backup interface with an up link [ 195.864325][T10901] 8021q: adding VLAN 0 to HW filter on device bond9 [ 195.983255][T10889] lo speed is unknown, defaulting to 1000 [ 195.985158][T10889] wg0 speed is unknown, defaulting to 1000 [ 196.670683][T10949] __nla_validate_parse: 14 callbacks suppressed [ 196.670703][T10949] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1368'. [ 196.864603][T10953] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1372'. [ 196.914194][T10957] netlink: 'syz.2.1371': attribute type 2 has an invalid length. [ 197.138806][T10973] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1377'. [ 197.140386][T10964] netdevsim netdevsim1 : renamed from netdevsim0 (while UP) [ 197.145552][T10965] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 197.185634][ T30] audit: type=1107 audit(1790039927.256:2): pid=10972 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='Ù‹5ž÷Œ•%èÍUýAÊÃËÙ ë0ä™l…t¿Ý•/Öÿ Ž6òŠ¨Šç›' [ 197.206942][T10964] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1374'. [ 197.215506][T10964] bridge0: port 2(bridge_slave_1) entered disabled state [ 197.215691][T10964] bridge0: port 1(bridge_slave_0) entered disabled state [ 197.341952][T10983] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1378'. [ 197.370439][T10983] vlan4: entered promiscuous mode [ 197.370460][T10983] gretap0: entered promiscuous mode [ 197.461789][T10991] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1381'. [ 197.498060][T10991] netlink: 'syz.1.1381': attribute type 11 has an invalid length. [ 197.738805][T11002] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1384'. [ 200.116633][T10973] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 200.245623][T11011] IPv6: Can't replace route, no match found [ 200.268184][T11011] openvswitch: netlink: Flow key attr not present in new flow. [ 200.421708][T11022] netlink: 'syz.4.1393': attribute type 39 has an invalid length. [ 200.534685][T11024] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.1392'. [ 200.534710][T11024] veth0_to_bond: default FDB implementation only supports local addresses [ 200.535236][T11024] netlink: 'syz.3.1392': attribute type 17 has an invalid length. [ 200.535251][T11024] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1392'. [ 200.535275][T11024] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1392'. [ 200.581961][T11029] netlink: 'syz.2.1395': attribute type 21 has an invalid length. [ 200.644651][T11029] netlink: 'syz.2.1395': attribute type 4 has an invalid length. [ 200.644671][T11029] netlink: 'syz.2.1395': attribute type 5 has an invalid length. [ 201.061174][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880569c0c00: rx timeout, send abort [ 201.184177][T11065] netlink: 'syz.1.1409': attribute type 1 has an invalid length. [ 201.233851][T11065] 8021q: adding VLAN 0 to HW filter on device bond11 [ 201.256010][T11065] bond11: (slave veth0_to_bond): making interface the new active one [ 201.257408][T11065] bond11: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 201.294185][T11065] macvlan2: entered promiscuous mode [ 201.294201][T11065] macvlan2: entered allmulticast mode [ 201.296274][T11065] bond11: entered promiscuous mode [ 201.296292][T11065] veth0_to_bond: entered promiscuous mode [ 201.323616][T11065] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 201.325615][T11065] bond11: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 201.335399][T11065] bond11: left promiscuous mode [ 201.335419][T11065] veth0_to_bond: left promiscuous mode [ 201.483739][T11086] macvlan0: entered promiscuous mode [ 201.561340][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880561da800: rx timeout, send abort [ 201.562498][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880569c0c00: abort rx timeout. Force session deactivation [ 201.879824][T11097] __nla_validate_parse: 40 callbacks suppressed [ 201.879842][T11097] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1417'. [ 201.974853][T11103] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1416'. [ 202.061390][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880561da800: abort rx timeout. Force session deactivation [ 202.421500][T11125] 8021q: adding VLAN 0 to HW filter on device bond12 [ 202.571295][T11138] netlink: 'syz.1.1427': attribute type 4 has an invalid length. [ 202.571313][T11138] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1427'. [ 202.613282][T11133] No such timeout policy "syz0" [ 202.723278][T11146] netlink: 'syz.2.1431': attribute type 5 has an invalid length. [ 202.994162][T11163] Bluetooth: hci0: invalid length 0, exp 4 for type 32 [ 203.202873][T11175] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1438'. [ 203.218952][T11175] netlink: 1 bytes leftover after parsing attributes in process `syz.4.1438'. [ 203.307518][T11178] ¾x9ÿ: left allmulticast mode [ 203.307542][T11178] ¾x9ÿ: left promiscuous mode [ 203.307735][T11178] bridge0: port 1(1¾x9ÿ) entered disabled state [ 203.357302][T11178] bridge_slave_1: left allmulticast mode [ 203.357328][T11178] bridge_slave_1: left promiscuous mode [ 203.357542][T11178] bridge0: port 2(bridge_slave_1) entered disabled state [ 203.396940][T11178] bond0: (slave bond_slave_0): Releasing backup interface [ 203.397684][T11178] bond_slave_0: left allmulticast mode [ 203.421618][T11178] bond0: (slave bond_slave_1): Releasing backup interface [ 203.427030][T11178] bond_slave_1: left allmulticast mode [ 204.283580][T11178] team0: Port device team_slave_0 removed [ 204.311427][T11178] team0: Port device team_slave_1 removed [ 204.315100][T11178] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 204.315120][T11178] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 204.318622][T11178] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 204.318642][T11178] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 204.363626][T11178] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 204.745138][T11224] netlink: 'syz.1.1447': attribute type 4 has an invalid length. [ 204.853545][T11213] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1443'. [ 204.853576][T11213] openvswitch: netlink: Missing key (keys=c0, expected=20080) [ 204.904676][T11213] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1443'. [ 204.907728][T11213] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1443'. [ 205.375055][T11256] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1454'. [ 205.447605][T11266] syzkaller1: entered promiscuous mode [ 205.447628][T11266] syzkaller1: entered allmulticast mode [ 205.664681][T11276] bond0: (slave team0): Releasing backup interface [ 205.685585][T11276] team0: Cannot enslave team device to itself [ 205.925902][T11287] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 205.925927][T11287] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 205.928177][T11289] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1466'. [ 206.154604][T11295] 8021q: adding VLAN 0 to HW filter on device macsec3 [ 206.260690][T11305] openvswitch: netlink: IP tunnel dst address not specified [ 206.477510][T11320] netlink: 'syz.3.1475': attribute type 29 has an invalid length. [ 209.239495][T11308] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 209.545356][T11378] syzkaller0: entered promiscuous mode [ 209.545378][T11378] syzkaller0: entered allmulticast mode [ 209.557762][T11376] openvswitch: netlink: Key type 1542 is out of range max 32 [ 209.568531][T11366] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 212.360630][T11363] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 212.665723][T11420] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 212.704986][T11432] netlink: 'syz.4.1503': attribute type 2 has an invalid length. [ 212.705004][T11432] netlink: 'syz.4.1503': attribute type 8 has an invalid length. [ 212.705014][T11432] __nla_validate_parse: 2 callbacks suppressed [ 212.705023][T11432] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1503'. [ 212.745796][T11438] dvmrp0: entered allmulticast mode [ 212.761102][T11441] ip6t_srh: unknown srh match flags 5F28 [ 212.805243][T11438] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 215.005652][T11467] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1509'. [ 215.086783][T11477] netlink: 'syz.4.1512': attribute type 3 has an invalid length. [ 215.316017][T11481] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1514'. [ 215.731093][T11502] raw_sendmsg: syz.0.1520 forgot to set AF_INET. Fix it! [ 215.892045][T11514] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1524'. [ 215.894103][T11514] netlink: 'syz.0.1524': attribute type 1 has an invalid length. [ 216.051372][T11525] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1526'. [ 216.145799][ T30] audit: type=1800 audit(1790039946.206:3): pid=11531 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1529" name="memory.events" dev="tmpfs" ino=1586 res=0 errno=0 [ 216.162521][ T30] audit: type=1804 audit(1790039946.226:4): pid=11531 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.1529" name="/newroot/308/memory.events" dev="tmpfs" ino=1586 res=1 errno=0 [ 216.226127][ T30] audit: type=1804 audit(1790039946.296:5): pid=11531 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.1529" name="/newroot/308/memory.events" dev="tmpfs" ino=1586 res=1 errno=0 [ 216.226367][ T30] audit: type=1800 audit(1790039946.296:6): pid=11531 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1529" name="memory.events" dev="tmpfs" ino=1586 res=0 errno=0 [ 216.227207][ T30] audit: type=1804 audit(1790039946.296:7): pid=11536 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.1529" name="/newroot/308/memory.events" dev="tmpfs" ino=1586 res=1 errno=0 [ 216.641247][T11560] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1536'. [ 216.692140][T11562] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1537'. [ 216.784216][T11565] tipc: Started in network mode [ 216.784245][T11565] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 216.784296][T11565] tipc: Enabling of bearer rejected, failed to enable media [ 216.820766][T11566] tipc: Enabling of bearer rejected, failed to enable media [ 217.423329][T11601] netlink: 'syz.0.1549': attribute type 1 has an invalid length. [ 217.423348][T11601] netlink: 'syz.0.1549': attribute type 4 has an invalid length. [ 217.423360][T11601] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.1549'. [ 217.424829][T11601] netlink: 'syz.0.1549': attribute type 1 has an invalid length. [ 217.424844][T11601] netlink: 'syz.0.1549': attribute type 4 has an invalid length. [ 217.424855][T11601] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.1549'. [ 217.549171][T11608] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1551'. [ 217.550083][T11609] veth0: entered promiscuous mode [ 217.557947][T11605] veth0: left promiscuous mode [ 217.629784][T11616] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 217.751906][T11620] __nla_validate_parse: 3 callbacks suppressed [ 217.751927][T11620] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1554'. [ 217.904398][T11627] wg0: entered promiscuous mode [ 217.947764][T11627] openvswitch: netlink: Flow key attr not present in new flow. [ 218.001212][T11635] bond7 (unregistering): Released all slaves [ 218.606433][T11675] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1568'. [ 218.660264][T11679] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 218.660276][T11679] IPv6: NLM_F_CREATE should be set when creating new route [ 218.660300][T11679] IPv6: NLM_F_CREATE should be set when creating new route [ 218.660313][T11679] IPv6: NLM_F_CREATE should be set when creating new route [ 219.111616][T11705] x_tables: unsorted entry at hook 3 [ 219.150788][T11704] IPVS: set_ctl: invalid protocol: 58 100.1.1.2:20003 [ 219.276394][T11715] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1580'. [ 219.323203][T11723] netlink: 'syz.1.1583': attribute type 23 has an invalid length. [ 219.369691][T11721] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1582'. [ 219.706934][T11747] sit0: entered promiscuous mode [ 219.732462][T11747] netlink: 'syz.0.1588': attribute type 1 has an invalid length. [ 219.732484][T11747] netlink: 1 bytes leftover after parsing attributes in process `syz.0.1588'. [ 219.752741][T11749] sctp: [Deprecated]: syz.3.1589 (pid 11749) Use of int in maxseg socket option. [ 219.752741][T11749] Use struct sctp_assoc_value instead [ 219.752777][T11749] sctp: [Deprecated]: syz.3.1589 (pid 11749) Use of int in maxseg socket option. [ 219.752777][T11749] Use struct sctp_assoc_value instead [ 219.752797][T11749] sctp: [Deprecated]: syz.3.1589 (pid 11749) Use of int in maxseg socket option. [ 219.752797][T11749] Use struct sctp_assoc_value instead [ 219.752818][T11749] sctp: [Deprecated]: syz.3.1589 (pid 11749) Use of int in maxseg socket option. [ 219.752818][T11749] Use struct sctp_assoc_value instead [ 219.752838][T11749] sctp: [Deprecated]: syz.3.1589 (pid 11749) Use of int in maxseg socket option. [ 219.752838][T11749] Use struct sctp_assoc_value instead [ 219.752858][T11749] sctp: [Deprecated]: syz.3.1589 (pid 11749) Use of int in maxseg socket option. [ 219.752858][T11749] Use struct sctp_assoc_value instead [ 219.752877][T11749] sctp: [Deprecated]: syz.3.1589 (pid 11749) Use of int in maxseg socket option. [ 219.752877][T11749] Use struct sctp_assoc_value instead [ 219.752897][T11749] sctp: [Deprecated]: syz.3.1589 (pid 11749) Use of int in maxseg socket option. [ 219.752897][T11749] Use struct sctp_assoc_value instead [ 219.752917][T11749] sctp: [Deprecated]: syz.3.1589 (pid 11749) Use of int in maxseg socket option. [ 219.752917][T11749] Use struct sctp_assoc_value instead [ 219.752936][T11749] sctp: [Deprecated]: syz.3.1589 (pid 11749) Use of int in maxseg socket option. [ 219.752936][T11749] Use struct sctp_assoc_value instead [ 219.834676][T11757] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1591'. [ 219.880550][T11757] vlan3: entered promiscuous mode [ 219.880571][T11757] gretap0: entered promiscuous mode [ 220.194448][T11773] nftables ruleset with unbound chain [ 220.333728][ T30] audit: type=1107 audit(1790039950.406:8): pid=11775 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='îMkÆk,p°7{B™è²ü™[´H˜ÆÖ‰Ic'' [ 220.508230][T11793] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1604'. [ 220.552723][T11796] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1603'. [ 220.606066][T11796] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1603'. [ 220.816171][T11813] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1607'. [ 222.223633][T11874] bond6: entered allmulticast mode [ 222.226211][T11874] 8021q: adding VLAN 0 to HW filter on device bond6 [ 222.950656][T11928] netlink: 'syz.1.1638': attribute type 12 has an invalid length. [ 222.980785][T11930] netlink: 'syz.3.1637': attribute type 10 has an invalid length. [ 222.987657][T11928] bond14: option primary_reselect: invalid value (255) [ 223.034225][T11935] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 223.036240][T11934] netlink: 'syz.4.1639': attribute type 1 has an invalid length. [ 223.036257][T11934] __nla_validate_parse: 7 callbacks suppressed [ 223.036267][T11934] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1639'. [ 223.080066][T11928] bond14 (unregistering): Released all slaves [ 223.092350][T11936] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1639'. [ 223.092402][T11936] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1639'. [ 223.450295][T11930] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 223.996322][T11955] erspan0: entered promiscuous mode [ 224.062369][T11958] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1646'. [ 224.181942][T11960] erspan0: entered promiscuous mode [ 224.181965][T11960] erspan0: entered allmulticast mode [ 224.229428][T11974] Unsupported ieee802154 address type: 0 [ 224.337729][T11976] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1650'. [ 224.572787][T11989] x_tables: duplicate underflow at hook 1 [ 224.655993][T11983] netlink: 'syz.2.1657': attribute type 3 has an invalid length. [ 224.686622][T11995] netlink: 'syz.2.1657': attribute type 3 has an invalid length. [ 224.886580][T12009] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 224.887230][T12010] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 224.933102][T12007] netlink: 'syz.3.1660': attribute type 14 has an invalid length. [ 225.181771][T12030] netlink: 'syz.3.1667': attribute type 3 has an invalid length. [ 225.181790][T12030] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1667'. [ 225.253105][T12033] netlink: 9 bytes leftover after parsing attributes in process `syz.3.1667'. [ 225.253996][T12033] netlink: 5 bytes leftover after parsing attributes in process `syz.3.1667'. [ 225.254108][T12033] 0ªî{X¹¦: renamed from gretap0 [ 225.287156][T12033] 0ªî{X¹¦: left promiscuous mode [ 225.287176][T12033] 0ªî{X¹¦: entered allmulticast mode [ 225.303359][T12033] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 225.570682][T12056] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1673'. [ 225.639111][ T1025] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 225.639143][ T1025] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.882329][T12065] netlink: 'syz.1.1675': attribute type 1 has an invalid length. [ 225.882351][T12065] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1675'. [ 225.968655][T12079] IPv6: NLM_F_CREATE should be specified when creating new route [ 226.062981][T12091] netlink: 'syz.1.1682': attribute type 12 has an invalid length. [ 226.063002][T12091] netlink: 'syz.1.1682': attribute type 29 has an invalid length. [ 226.254586][T12105] Cannot find set identified by id 0 to match [ 226.257663][T12101] ipvlan2: entered allmulticast mode [ 226.257676][T12101] virt_wifi0: entered allmulticast mode [ 226.268389][T12101] batman_adv: batadv0: Adding interface: ipvlan2 [ 226.268404][T12101] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 226.268597][T12101] batman_adv: batadv0: Interface activated: ipvlan2 [ 226.303227][T12096] ipvlan3: entered allmulticast mode [ 226.306982][T12096] batman_adv: batadv0: Adding interface: ipvlan3 [ 226.306997][T12096] batman_adv: batadv0: The MTU of interface ipvlan3 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 226.307018][T12096] batman_adv: The newly added mac address (f6:9f:4c:5b:8e:64) already exists on: ipvlan2 [ 226.307031][T12096] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.330201][T12096] batman_adv: batadv0: Interface activated: ipvlan3 [ 226.550309][T12115] netlink: 'syz.2.1690': attribute type 1 has an invalid length. [ 226.613592][T12115] bond7: entered promiscuous mode [ 226.615517][T12115] 8021q: adding VLAN 0 to HW filter on device bond7 [ 226.689538][T12121] netlink: 'syz.3.1688': attribute type 30 has an invalid length. [ 227.627923][T12166] ipt_REJECT: ECHOREPLY no longer supported. [ 227.783053][T12171] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 228.266965][T12203] __nla_validate_parse: 5 callbacks suppressed [ 228.266984][T12203] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1713'. [ 228.268358][T12203] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1713'. [ 228.320442][T12207] Cannot find del_set index 0 as target [ 228.495709][T12216] RDS: rds_bind could not find a transport for fc01::1, load rds_tcp or rds_rdma? [ 228.606269][T12221] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1718'. [ 228.754152][T12232] netlink: 'syz.3.1722': attribute type 1 has an invalid length. [ 228.800132][T12235] Bluetooth: ISO socket layer initialized [ 228.801945][T12236] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 228.925680][T12243] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1725'. [ 229.206855][T12257] sctp: [Deprecated]: syz.0.1728 (pid 12257) Use of int in maxseg socket option. [ 229.206855][T12257] Use struct sctp_assoc_value instead [ 229.506776][T12271] Cannot find set identified by id 0 to match [ 229.600026][T12276] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1735'. [ 229.694286][T12285] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1737'. [ 229.806754][T12299] batman_adv: batadv0: Adding interface: syzkaller0 [ 229.806774][T12299] batman_adv: batadv0: Interface activated: syzkaller0 [ 229.836758][T12299] h: entered promiscuous mode [ 230.016488][T12311] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 230.311396][T12327] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1749'. [ 230.376665][T12331] 8021q: adding VLAN 0 to HW filter on device bond7 [ 230.413020][T12319] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 230.481495][T12338] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1752'. [ 231.717477][T12425] validate_nla: 1 callbacks suppressed [ 231.717498][T12425] netlink: 'syz.4.1772': attribute type 1 has an invalid length. [ 231.737688][T12425] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1772'. [ 232.094056][T12446] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1776'. [ 232.300515][T12461] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 232.452095][T12469] netlink: 'syz.3.1784': attribute type 1 has an invalid length. [ 232.452118][T12469] netlink: 'syz.3.1784': attribute type 2 has an invalid length. [ 232.469930][T12472] netlink: 'syz.3.1784': attribute type 1 has an invalid length. [ 232.469950][T12472] netlink: 'syz.3.1784': attribute type 2 has an invalid length. [ 232.602247][T12482] Bluetooth: hci0: unsupported parameter 5135 [ 232.602267][T12482] Bluetooth: hci0: unsupported parameter 8192 [ 232.602277][T12482] Bluetooth: hci0: unsupported parameter 5135 [ 232.602287][T12482] Bluetooth: hci0: unsupported parameter 8192 [ 232.712886][T12487] netlink: 'syz.2.1788': attribute type 23 has an invalid length. [ 233.229359][T12521] block nbd1: server does not support multiple connections per device. [ 233.229658][T12521] block nbd1: shutting down sockets [ 233.333924][T12537] ovs-s: entered promiscuous mode [ 233.724188][T12558] __nla_validate_parse: 3 callbacks suppressed [ 233.724207][T12558] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1812'. [ 233.822287][T12564] netlink: 'syz.1.1814': attribute type 10 has an invalid length. [ 233.822505][T12564] v: entered allmulticast mode [ 234.204455][T12585] netlink: 'syz.1.1817': attribute type 10 has an invalid length. [ 234.314914][T12591] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1818'. [ 234.314949][T12591] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1818'. [ 234.362446][T12599] ip_tables: iptables: counters copy to user failed while replacing table [ 234.639336][T12609] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1823'. [ 234.794426][T12612] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1824'. [ 236.456580][T12617] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 236.503727][T12623] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 236.692414][T12637] tipc: Started in network mode [ 236.692454][T12637] tipc: Node identity ac14142f, cluster identity 4711 [ 236.692503][T12637] tipc: Enabling of bearer rejected, failed to enable media [ 236.810431][T12678] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1831'. [ 236.810628][T12678] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1831'. [ 237.455296][T12715] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1843'. [ 237.507352][T12730] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 238.046591][T12754] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1855'. [ 238.157428][T12769] netlink: 'syz.3.1858': attribute type 2 has an invalid length. [ 238.261221][T12776] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1860'. [ 240.016018][T12787] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1864'. [ 240.016265][T12788] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1864'. [ 240.185216][T12800] ieee802154 phy0 wpan0: encryption failed: -22 [ 240.628613][T12833] ipt_REJECT: TCP_RESET invalid for non-tcp [ 240.634071][T12833] netlink: NAT attribute has 5 unknown bytes [ 240.634103][T12833] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 240.634597][T12833] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1873'. [ 240.634625][T12833] netlink: 'syz.1.1873': attribute type 1 has an invalid length. [ 240.791987][T12840] syzkaller0: entered promiscuous mode [ 240.792008][T12840] syzkaller0: entered allmulticast mode [ 240.872283][T12847] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1879'. [ 241.297834][T12874] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1887'. [ 241.297866][T12874] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1887'. [ 241.297881][T12874] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1887'. [ 241.318755][T12873] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1886'. [ 241.482090][T12885] xt_REDIRECT: bad MAP_IPS. [ 241.487861][T12881] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1890'. [ 241.568143][T12890] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1894'. [ 241.643969][T12896] geneve3: entered promiscuous mode [ 241.643991][T12896] geneve3: entered allmulticast mode [ 241.675172][T12894] vlan3: entered promiscuous mode [ 241.675195][T12894] bridge0: entered promiscuous mode [ 241.740546][ T13] netdevsim netdevsim1 : set [1, 2] type 2 family 0 port 19999 - 0 [ 241.740622][ T13] netdevsim netdevsim1 netdevsim1: set [1, 2] type 2 family 0 port 19999 - 0 [ 241.740653][ T13] netdevsim netdevsim1 netdevsim2: set [1, 2] type 2 family 0 port 19999 - 0 [ 241.740683][ T13] netdevsim netdevsim1 netdevsim3: set [1, 2] type 2 family 0 port 19999 - 0 [ 242.908020][T12969] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 243.656016][T13019] x_tables: duplicate entry at hook 1 [ 243.668999][T13017] netlink: 'syz.0.1924': attribute type 3 has an invalid length. [ 243.669021][T13017] netlink: 'syz.0.1924': attribute type 1 has an invalid length. [ 243.741106][T13021] sch_fq: defrate 2 ignored. [ 244.270134][T13057] netlink: 'syz.2.1936': attribute type 1 has an invalid length. [ 244.412056][T13051] tap0: tun_chr_ioctl cmd 2148553947 [ 244.426558][T13063] netlink: 'syz.0.1939': attribute type 10 has an invalid length. [ 244.469480][T13063] geneve4: entered promiscuous mode [ 244.469503][T13063] geneve4: entered allmulticast mode [ 244.502884][T13063] netlink: 'syz.0.1939': attribute type 3 has an invalid length. [ 244.502906][T13063] netlink: 'syz.0.1939': attribute type 1 has an invalid length. [ 244.786388][T13086] netlink: 'syz.2.1944': attribute type 1 has an invalid length. [ 245.006354][T13095] netlink: 'syz.4.1949': attribute type 1 has an invalid length. [ 245.042248][T13095] bond7: entered promiscuous mode [ 245.042686][T13095] 8021q: adding VLAN 0 to HW filter on device bond7 [ 245.067517][T13095] __nla_validate_parse: 13 callbacks suppressed [ 245.067535][T13095] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1949'. [ 245.126638][T13098] syzkaller0: Caught tx_queue_len zero misconfig [ 245.197174][T13102] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1952'. [ 245.297465][T13102] wireguard0: entered promiscuous mode [ 245.402444][T13116] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1954'. [ 245.838369][T13133] x_tables: duplicate underflow at hook 2 [ 246.016535][T13141] sctp: [Deprecated]: syz.4.1960 (pid 13141) Use of struct sctp_assoc_value in delayed_ack socket option. [ 246.016535][T13141] Use struct sctp_sack_info instead [ 246.582067][T13184] x_tables: duplicate underflow at hook 1 [ 246.900331][T13197] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1971'. [ 246.900397][T13197] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1971'. [ 246.923634][T13198] x_tables: duplicate underflow at hook 2 [ 247.066554][T13202] netlink: 'syz.0.1972': attribute type 28 has an invalid length. [ 247.066577][T13202] netlink: 'syz.0.1972': attribute type 3 has an invalid length. [ 247.066590][T13202] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1972'. [ 247.408342][T13222] mac80211_hwsim hwsim11 syzkaller0: Caught tx_queue_len zero misconfig [ 247.863916][T13250] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1988'. [ 247.867551][T13250] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1988'. [ 247.867986][T13250] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1988'. [ 247.872439][T13250] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1988'. [ 248.303535][T13270] xt_cluster: you have exceeded the maximum number of cluster nodes (2048 > 32) [ 248.450513][T13282] openvswitch: netlink: Duplicate or invalid key (type 0). [ 248.635551][T13290] veth1_macvtap: left promiscuous mode [ 248.643722][T13290] bond0: (slave macsec0): Error -34 calling dev_set_mtu [ 249.115909][T13332] IPVS: set_ctl: invalid protocol: 58 172.20.20.170:20000 [ 249.662818][T13355] bond6: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 250.169497][T13355] bond6 (unregistering): Released all slaves [ 250.394828][T13367] validate_nla: 1 callbacks suppressed [ 250.394842][T13367] netlink: 'syz.3.2022': attribute type 1 has an invalid length. [ 250.394849][T13367] __nla_validate_parse: 11 callbacks suppressed [ 250.394854][T13367] netlink: 228 bytes leftover after parsing attributes in process `syz.3.2022'. [ 250.451472][T13369] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2023'. [ 250.456677][T13369] syzkaller1: entered promiscuous mode [ 250.456690][T13369] syzkaller1: entered allmulticast mode [ 250.565618][T13371] netlink: 'syz.3.2024': attribute type 64 has an invalid length. [ 250.565871][T13371] netlink: 'syz.3.2024': attribute type 64 has an invalid length. [ 250.689535][T13376] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2026'. [ 250.689533][T13375] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2026'. [ 250.866442][T13382] syzkaller0: left promiscuous mode [ 250.866456][T13382] syzkaller0: left allmulticast mode [ 251.886887][T13309] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 252.152481][T13386] bond6: option mode: invalid value (10) [ 252.157572][T13386] bond6 (unregistering): Released all slaves [ 252.186272][T13396] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2030'. [ 252.187685][T13396] netlink: 9 bytes leftover after parsing attributes in process `syz.4.2030'. [ 252.211017][T13396] netlink: 5 bytes leftover after parsing attributes in process `syz.4.2030'. [ 252.287134][T13396] 0ªî{X¹¦: renamed from gretap0 [ 252.297723][T13396] 0ªî{X¹¦: entered allmulticast mode [ 252.301551][T13396] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 252.301953][T13398] syzkaller1: entered promiscuous mode [ 252.301969][T13398] syzkaller1: entered allmulticast mode [ 252.373521][T13401] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2034'. [ 252.476191][T13408] vcan0: tx address claim with dlc 0 [ 252.893196][T13441] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2045'. [ 252.944307][T13447] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2047'. [ 253.347147][T13475] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 253.366517][T13471] macvlan0: left promiscuous mode [ 253.393180][T13471] netlink: 'syz.0.2052': attribute type 2 has an invalid length. [ 253.409538][T13483] netlink: 'syz.2.2053': attribute type 1 has an invalid length. [ 253.502189][T13474] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 253.777020][T13509] netlink: 'syz.4.2059': attribute type 2 has an invalid length. [ 253.895949][T13515] mac80211_hwsim hwsim11 syzkaller0: entered promiscuous mode [ 253.895974][T13515] mac80211_hwsim hwsim11 syzkaller0: entered allmulticast mode [ 254.053287][T13525] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 254.161581][T13533] netlink: 'syz.1.2067': attribute type 16 has an invalid length. [ 255.255371][T13589] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 255.272889][T13591] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 255.273286][T13156] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 255.273304][T13156] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 255.430903][T13602] __nla_validate_parse: 7 callbacks suppressed [ 255.430920][T13602] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2089'. [ 255.621695][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.644237][T13609] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 255.660366][T13611] batadv_slave_0: entered promiscuous mode [ 255.693386][T13610] batadv_slave_0: left promiscuous mode [ 255.873642][T13629] netlink: 'syz.3.2097': attribute type 5 has an invalid length. [ 255.901620][T13630] netlink: 'syz.4.2096': attribute type 4 has an invalid length. [ 256.253955][T13653] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2105'. [ 256.983251][T13690] syzkaller0: entered promiscuous mode [ 256.983274][T13690] syzkaller0: entered allmulticast mode [ 257.019328][T13690] tipc: Enabled bearer , priority 0 [ 257.036985][T13688] tipc: Resetting bearer [ 257.089856][T13688] tipc: Disabling bearer [ 257.402885][T13704] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2116'. [ 257.472166][ T10] Dead loop on virtual device ip6_vti0 (net 38), fix it urgently! [ 257.767550][T13732] netlink: 80 bytes leftover after parsing attributes in process `syz.2.2118'. [ 258.244532][T13753] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 258.503265][ T978] Dead loop on virtual device ip6_vti0 (net 38), fix it urgently! [ 258.874887][T13787] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2137'. [ 258.964133][T13791] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2136'. [ 259.003655][T13791] netlink: 'syz.1.2136': attribute type 1 has an invalid length. [ 259.003679][T13791] netlink: 'syz.1.2136': attribute type 268 has an invalid length. [ 259.003693][T13791] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2136'. [ 259.201675][T13804] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2142'. [ 259.509352][T13821] netlink: 'syz.4.2147': attribute type 1 has an invalid length. [ 259.557857][T13828] sctp: [Deprecated]: syz.2.2149 (pid 13828) Use of int in maxseg socket option. [ 259.557857][T13828] Use struct sctp_assoc_value instead [ 259.563780][T13828] netlink: 9 bytes leftover after parsing attributes in process `syz.2.2149'. [ 259.767154][T13838] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2154'. [ 259.897988][T13853] netlink: 'syz.2.2155': attribute type 11 has an invalid length. [ 260.027564][T13855] bond8: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-alb(6) [ 260.043912][T13855] bond8 (unregistering): Released all slaves [ 260.449150][ T3384] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.459972][T13882] __nla_validate_parse: 2 callbacks suppressed [ 260.459990][T13882] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2162'. [ 261.183340][T13932] openvswitch: netlink: Missing valid actions attribute. [ 261.183373][T13932] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 261.270613][T13937] netlink: 'syz.2.2181': attribute type 11 has an invalid length. [ 261.841391][T13980] ip_tables: iptables: counters copy to user failed while replacing table [ 261.876320][T13980] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2190'. [ 262.042306][T13996] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2194'. [ 262.060333][T13996] sit0: entered promiscuous mode [ 262.065550][T13996] netlink: 'syz.3.2194': attribute type 1 has an invalid length. [ 262.065570][T13996] netlink: 1 bytes leftover after parsing attributes in process `syz.3.2194'. [ 262.787142][T14027] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2195'. [ 262.804893][T14027] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2195'. [ 262.804915][T14027] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2195'. [ 262.859180][T14028] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 264.323847][T13940] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 264.480838][T14058] netlink: 'syz.3.2203': attribute type 2 has an invalid length. [ 264.628626][T14065] FAULT_INJECTION: forcing a failure. [ 264.628626][T14065] name failslab, interval 1, probability 0, space 0, times 0 [ 264.628657][T14065] CPU: 0 UID: 0 PID: 14065 Comm: syz.1.2205 Not tainted syzkaller #0 PREEMPT(full) [ 264.628680][T14065] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 264.628708][T14065] Call Trace: [ 264.628714][T14065] [ 264.628722][T14065] dump_stack_lvl+0xe8/0x150 [ 264.628753][T14065] should_fail_ex+0x410/0x560 [ 264.628779][T14065] should_failslab+0xa8/0x100 [ 264.628803][T14065] __kmalloc_noprof+0xfe/0x720 [ 264.628822][T14065] ? sk_prot_alloc+0xe7/0x210 [ 264.628843][T14065] ? sk_prot_alloc+0xe7/0x210 [ 264.628870][T14065] sk_prot_alloc+0xe7/0x210 [ 264.628891][T14065] ? sk_alloc+0x27/0x390 [ 264.628913][T14065] sk_alloc+0x3a/0x390 [ 264.628938][T14065] bpf_prog_test_run_skb+0x3a6/0x2230 [ 264.628966][T14065] ? lock_acquire+0x115/0x350 [ 264.628999][T14065] ? __fget_files+0x3a2/0x420 [ 264.629022][T14065] ? __fget_files+0x2a/0x420 [ 264.629051][T14065] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 264.629078][T14065] bpf_prog_test_run+0x2c5/0x340 [ 264.629103][T14065] __sys_bpf+0xa22/0xd90 [ 264.629132][T14065] ? __pfx___sys_bpf+0x10/0x10 [ 264.629164][T14065] ? __fget_files+0x2a/0x420 [ 264.629205][T14065] ? ksys_write+0x242/0x270 [ 264.629233][T14065] ? __pfx_ksys_write+0x10/0x10 [ 264.629265][T14065] __x64_sys_bpf+0xba/0xd0 [ 264.629287][T14065] do_syscall_64+0x166/0x520 [ 264.629308][T14065] ? trace_irq_disable+0x3b/0x140 [ 264.629326][T14065] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 264.629343][T14065] ? clear_bhb_loop+0x70/0xc0 [ 264.629366][T14065] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 264.629385][T14065] RIP: 0033:0x7f1f99b9e159 [ 264.629409][T14065] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 264.629424][T14065] RSP: 002b:00007f1f9ab3b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 264.629444][T14065] RAX: ffffffffffffffda RBX: 00007f1f99e25fa0 RCX: 00007f1f99b9e159 [ 264.629456][T14065] RDX: 0000000000000050 RSI: 00002000000003c0 RDI: 000000000000000a [ 264.629467][T14065] RBP: 00007f1f9ab3b090 R08: 0000000000000000 R09: 0000000000000000 [ 264.629477][T14065] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 264.629487][T14065] R13: 00007f1f99e26038 R14: 00007f1f99e25fa0 R15: 00007fff352094a8 [ 264.629515][T14065] [ 264.914331][T14071] netlink: 84 bytes leftover after parsing attributes in process `syz.0.2208'. [ 265.660122][T14108] FAULT_INJECTION: forcing a failure. [ 265.660122][T14108] name failslab, interval 1, probability 0, space 0, times 0 [ 265.660153][T14108] CPU: 0 UID: 0 PID: 14108 Comm: syz.2.2220 Not tainted syzkaller #0 PREEMPT(full) [ 265.660173][T14108] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 265.660184][T14108] Call Trace: [ 265.660191][T14108] [ 265.660199][T14108] dump_stack_lvl+0xe8/0x150 [ 265.660231][T14108] should_fail_ex+0x410/0x560 [ 265.660264][T14108] should_failslab+0xa8/0x100 [ 265.660288][T14108] __kmalloc_noprof+0xfe/0x720 [ 265.660308][T14108] ? security_sk_alloc+0x52/0x360 [ 265.660333][T14108] ? security_sk_alloc+0x52/0x360 [ 265.660366][T14108] security_sk_alloc+0x52/0x360 [ 265.660395][T14108] sk_prot_alloc+0x101/0x210 [ 265.660418][T14108] ? sk_alloc+0x27/0x390 [ 265.660442][T14108] sk_alloc+0x3a/0x390 [ 265.660468][T14108] bpf_prog_test_run_skb+0x3a6/0x2230 [ 265.660496][T14108] ? lock_acquire+0x115/0x350 [ 265.660530][T14108] ? __fget_files+0x3a2/0x420 [ 265.660554][T14108] ? __fget_files+0x2a/0x420 [ 265.660583][T14108] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 265.660611][T14108] bpf_prog_test_run+0x2c5/0x340 [ 265.660636][T14108] __sys_bpf+0xa22/0xd90 [ 265.660663][T14108] ? __pfx___sys_bpf+0x10/0x10 [ 265.660694][T14108] ? __fget_files+0x2a/0x420 [ 265.660735][T14108] ? ksys_write+0x242/0x270 [ 265.660767][T14108] ? __pfx_ksys_write+0x10/0x10 [ 265.660798][T14108] __x64_sys_bpf+0xba/0xd0 [ 265.660819][T14108] do_syscall_64+0x166/0x520 [ 265.660841][T14108] ? trace_irq_disable+0x3b/0x140 [ 265.660859][T14108] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 265.660877][T14108] ? clear_bhb_loop+0x70/0xc0 [ 265.660900][T14108] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 265.660918][T14108] RIP: 0033:0x7f4575b9e159 [ 265.660936][T14108] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 265.660951][T14108] RSP: 002b:00007f4576999028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 265.660971][T14108] RAX: ffffffffffffffda RBX: 00007f4575e25fa0 RCX: 00007f4575b9e159 [ 265.660985][T14108] RDX: 0000000000000050 RSI: 00002000000003c0 RDI: 000000000000000a [ 265.660997][T14108] RBP: 00007f4576999090 R08: 0000000000000000 R09: 0000000000000000 [ 265.661009][T14108] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 265.661020][T14108] R13: 00007f4575e26038 R14: 00007f4575e25fa0 R15: 00007ffe4918b8f8 [ 265.661050][T14108] [ 266.006352][T14114] netlink: 'syz.1.2223': attribute type 1 has an invalid length. [ 266.006376][T14114] netlink: 'syz.1.2223': attribute type 1 has an invalid length. [ 266.101346][T14120] Bluetooth: hci0: Opcode 0x0c20 failed: -22 [ 266.117904][T14119] FAULT_INJECTION: forcing a failure. [ 266.117904][T14119] name failslab, interval 1, probability 0, space 0, times 0 [ 266.117934][T14119] CPU: 0 UID: 0 PID: 14119 Comm: syz.4.2226 Not tainted syzkaller #0 PREEMPT(full) [ 266.117955][T14119] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 266.117965][T14119] Call Trace: [ 266.117973][T14119] [ 266.117981][T14119] dump_stack_lvl+0xe8/0x150 [ 266.118012][T14119] should_fail_ex+0x410/0x560 [ 266.118039][T14119] should_failslab+0xa8/0x100 [ 266.118063][T14119] __kmalloc_noprof+0xfe/0x720 [ 266.118083][T14119] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 266.118105][T14119] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 266.118136][T14119] genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 266.118174][T14119] genl_family_rcv_msg_doit+0xda/0x340 [ 266.118204][T14119] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 266.118234][T14119] ? apparmor_capable+0x126/0x170 [ 266.118263][T14119] ? bpf_lsm_capable+0x9/0x20 [ 266.118280][T14119] ? security_capable+0x7e/0x2c0 [ 266.118307][T14119] genl_rcv_msg+0x614/0x7a0 [ 266.118336][T14119] ? __pfx_genl_rcv_msg+0x10/0x10 [ 266.118356][T14119] ? __pfx_ieee802154_llsec_del_key+0x10/0x10 [ 266.118396][T14119] netlink_rcv_skb+0x226/0x4a0 [ 266.118425][T14119] ? __pfx_genl_rcv_msg+0x10/0x10 [ 266.118448][T14119] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 266.118491][T14119] ? down_read+0x2be/0x330 [ 266.118519][T14119] genl_rcv+0x28/0x40 [ 266.118539][T14119] netlink_unicast+0x7bd/0x940 [ 266.118575][T14119] netlink_sendmsg+0x813/0xb40 [ 266.118611][T14119] ? __pfx_netlink_sendmsg+0x10/0x10 [ 266.118647][T14119] ? apparmor_socket_sendmsg+0x98/0x360 [ 266.118669][T14119] ? __pfx_netlink_sendmsg+0x10/0x10 [ 266.118695][T14119] sock_sendmsg_nosec+0x13a/0x180 [ 266.118715][T14119] ____sys_sendmsg+0x54e/0x850 [ 266.118742][T14119] ? __pfx_____sys_sendmsg+0x10/0x10 [ 266.118775][T14119] ? import_iovec+0x73/0xa0 [ 266.118802][T14119] ___sys_sendmsg+0x2a5/0x360 [ 266.118825][T14119] ? __lock_acquire+0x747/0x2de0 [ 266.118849][T14119] ? __pfx____sys_sendmsg+0x10/0x10 [ 266.118911][T14119] ? __fget_files+0x2a/0x420 [ 266.118935][T14119] ? __fget_files+0x3a2/0x420 [ 266.118970][T14119] __x64_sys_sendmsg+0x1b1/0x290 [ 266.118998][T14119] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 266.119045][T14119] do_syscall_64+0x166/0x520 [ 266.119066][T14119] ? trace_irq_disable+0x3b/0x140 [ 266.119085][T14119] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 266.119105][T14119] ? clear_bhb_loop+0x70/0xc0 [ 266.119128][T14119] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 266.119147][T14119] RIP: 0033:0x7efcab19e159 [ 266.119170][T14119] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 266.119186][T14119] RSP: 002b:00007efcabfd0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 266.119206][T14119] RAX: ffffffffffffffda RBX: 00007efcab425fa0 RCX: 00007efcab19e159 [ 266.119220][T14119] RDX: 0000000000000010 RSI: 0000200000000480 RDI: 0000000000000004 [ 266.119231][T14119] RBP: 00007efcabfd0090 R08: 0000000000000000 R09: 0000000000000000 [ 266.119243][T14119] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 266.119254][T14119] R13: 00007efcab426038 R14: 00007efcab425fa0 R15: 00007ffe9f5d0718 [ 266.119286][T14119] [ 266.398005][T14130] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2229'. [ 266.713773][T14138] netlink: 'syz.3.2232': attribute type 1 has an invalid length. [ 266.770572][T14138] bond6: entered promiscuous mode [ 266.771867][T14138] 8021q: adding VLAN 0 to HW filter on device bond6 [ 266.822756][T14145] bond6: (slave bridge30): making interface the new active one [ 266.822781][T14145] bridge30: entered promiscuous mode [ 266.824616][T14145] bond6: (slave bridge30): Enslaving as an active interface with an up link [ 266.923619][T14139] bond6: (slave bridge31): Enslaving as a backup interface with an up link [ 267.245780][T14156] FAULT_INJECTION: forcing a failure. [ 267.245780][T14156] name failslab, interval 1, probability 0, space 0, times 0 [ 267.245811][T14156] CPU: 1 UID: 0 PID: 14156 Comm: syz.4.2240 Not tainted syzkaller #0 PREEMPT(full) [ 267.245831][T14156] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 267.245843][T14156] Call Trace: [ 267.245850][T14156] [ 267.245858][T14156] dump_stack_lvl+0xe8/0x150 [ 267.245890][T14156] should_fail_ex+0x410/0x560 [ 267.245917][T14156] should_failslab+0xa8/0x100 [ 267.245942][T14156] __kmalloc_noprof+0xfe/0x720 [ 267.245962][T14156] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 267.245984][T14156] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 267.246012][T14156] genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 267.246039][T14156] genl_family_rcv_msg_doit+0xda/0x340 [ 267.246066][T14156] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 267.246095][T14156] ? apparmor_capable+0x126/0x170 [ 267.246130][T14156] ? bpf_lsm_capable+0x9/0x20 [ 267.246147][T14156] ? security_capable+0x7e/0x2c0 [ 267.246176][T14156] genl_rcv_msg+0x614/0x7a0 [ 267.246203][T14156] ? __pfx_genl_rcv_msg+0x10/0x10 [ 267.246227][T14156] ? __pfx_ieee802154_llsec_del_key+0x10/0x10 [ 267.246267][T14156] netlink_rcv_skb+0x226/0x4a0 [ 267.246294][T14156] ? __pfx_genl_rcv_msg+0x10/0x10 [ 267.246317][T14156] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 267.246359][T14156] ? down_read+0x2be/0x330 [ 267.246387][T14156] genl_rcv+0x28/0x40 [ 267.246406][T14156] netlink_unicast+0x7bd/0x940 [ 267.246442][T14156] netlink_sendmsg+0x813/0xb40 [ 267.246478][T14156] ? __pfx_netlink_sendmsg+0x10/0x10 [ 267.246513][T14156] ? apparmor_socket_sendmsg+0x98/0x360 [ 267.246536][T14156] ? __pfx_netlink_sendmsg+0x10/0x10 [ 267.246562][T14156] sock_sendmsg_nosec+0x13a/0x180 [ 267.246585][T14156] ____sys_sendmsg+0x54e/0x850 [ 267.246614][T14156] ? __pfx_____sys_sendmsg+0x10/0x10 [ 267.246648][T14156] ? import_iovec+0x73/0xa0 [ 267.246675][T14156] ___sys_sendmsg+0x2a5/0x360 [ 267.246698][T14156] ? __lock_acquire+0x747/0x2de0 [ 267.246722][T14156] ? __pfx____sys_sendmsg+0x10/0x10 [ 267.246782][T14156] ? __fget_files+0x2a/0x420 [ 267.246806][T14156] ? __fget_files+0x3a2/0x420 [ 267.246841][T14156] __x64_sys_sendmsg+0x1b1/0x290 [ 267.246868][T14156] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 267.246915][T14156] do_syscall_64+0x166/0x520 [ 267.246936][T14156] ? trace_irq_disable+0x3b/0x140 [ 267.246955][T14156] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 267.246973][T14156] ? clear_bhb_loop+0x70/0xc0 [ 267.246996][T14156] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 267.247014][T14156] RIP: 0033:0x7efcab19e159 [ 267.247031][T14156] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 267.247046][T14156] RSP: 002b:00007efcabfd0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 267.247071][T14156] RAX: ffffffffffffffda RBX: 00007efcab425fa0 RCX: 00007efcab19e159 [ 267.247084][T14156] RDX: 0000000000000010 RSI: 0000200000000480 RDI: 0000000000000004 [ 267.247097][T14156] RBP: 00007efcabfd0090 R08: 0000000000000000 R09: 0000000000000000 [ 267.247113][T14156] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 267.247124][T14156] R13: 00007efcab426038 R14: 00007efcab425fa0 R15: 00007ffe9f5d0718 [ 267.247154][T14156] [ 267.275149][T14158] netlink: 'syz.1.2239': attribute type 5 has an invalid length. [ 267.275168][T14158] netlink: 'syz.1.2239': attribute type 9 has an invalid length. [ 267.275180][T14158] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2239'. [ 267.393044][T14160] netlink: 'syz.2.2241': attribute type 1 has an invalid length. [ 267.393071][T14160] NCSI netlink: No device for ifindex 0 [ 267.686212][T14168] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2245'. [ 267.757317][T14170] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2245'. [ 267.849629][T14164] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 267.849656][T14164] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 267.871463][T14179] xt_l2tp: invalid flags combination: 8 [ 267.877692][T14166] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2244'. [ 267.891904][T14179] netlink: 'syz.3.2247': attribute type 1 has an invalid length. [ 267.902812][T14175] bond14: entered promiscuous mode [ 267.902832][T14175] bond14: entered allmulticast mode [ 267.965468][T14166] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2244'. [ 268.036663][T14179] tipc: Failed to obtain node identity [ 268.036704][T14179] tipc: Enabling of bearer rejected, failed to enable media [ 268.313523][T14196] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2252'. [ 268.341586][T14192] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2249'. [ 268.839343][T14220] netlink: 'syz.3.2259': attribute type 2 has an invalid length. [ 268.993474][T14231] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2263'. [ 269.260037][T14240] bond8: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 269.282329][T14240] bond8 (unregistering): Released all slaves [ 269.325333][T14245] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2265'. [ 269.501873][T14239] bond8: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 269.528264][T14239] bond8 (unregistering): Released all slaves [ 269.602023][T14249] syzkaller1: entered promiscuous mode [ 269.602045][T14249] syzkaller1: entered allmulticast mode [ 269.881335][T14273] netlink: 'syz.0.2268': attribute type 83 has an invalid length. [ 269.888664][T14277] netlink: 'syz.0.2268': attribute type 83 has an invalid length. [ 270.778942][T14336] netlink: 'syz.1.2287': attribute type 3 has an invalid length. [ 270.778964][T14336] netlink: 'syz.1.2287': attribute type 2 has an invalid length. [ 270.825331][T14338] IPv6: NLM_F_CREATE should be specified when creating new route [ 271.340222][T14366] netlink: zone id is out of range [ 271.340237][T14366] netlink: zone id is out of range [ 271.340263][T14366] netlink: zone id is out of range [ 271.340457][T14366] netlink: zone id is out of range [ 271.340525][T14366] netlink: zone id is out of range [ 271.340851][T14366] netlink: zone id is out of range [ 271.340859][T14366] netlink: zone id is out of range [ 271.340866][T14366] netlink: zone id is out of range [ 271.340872][T14366] netlink: zone id is out of range [ 271.341231][T14366] netlink: zone id is out of range [ 271.477656][T14377] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2297'. [ 271.500430][T14377] workqueue: name exceeds WQ_NAME_LEN. Truncating to: '¸ŠŸ>úáÂN9Ü5äx×Ùhˉ½p¡þàn [ 271.630192][T14384] veth7: entered promiscuous mode [ 271.630215][T14384] veth7: entered allmulticast mode [ 271.988293][T14402] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2303'. [ 272.542384][T14440] netlink: 260 bytes leftover after parsing attributes in process `syz.2.2316'. [ 272.549818][T14440] validate_nla: 2 callbacks suppressed [ 272.549834][T14440] netlink: 'syz.2.2316': attribute type 2 has an invalid length. [ 272.553247][T14443] netlink: 260 bytes leftover after parsing attributes in process `syz.2.2316'. [ 272.557473][T14440] netlink: 'syz.2.2316': attribute type 2 has an invalid length. [ 272.572601][T14436] wireguard0: entered promiscuous mode [ 272.710014][T14446] 8021q: adding VLAN 0 to HW filter on device macsec2 [ 272.761387][T14451] bond0: Error: CAN devices cannot be enslaved [ 272.921557][T14464] ip6t_srh: unknown srh invflags 4000 [ 272.921918][T14465] netlink: 'syz.2.2322': attribute type 9 has an invalid length. [ 272.921934][T14465] netlink: 'syz.2.2322': attribute type 8 has an invalid length. [ 273.034878][T14472] syz.1.2325: vmalloc error: size 8589938688, exceeds total pages, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 273.035098][T14472] CPU: 1 UID: 0 PID: 14472 Comm: syz.1.2325 Not tainted syzkaller #0 PREEMPT(full) [ 273.035120][T14472] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 273.035131][T14472] Call Trace: [ 273.035138][T14472] [ 273.035147][T14472] dump_stack_lvl+0xe8/0x150 [ 273.035179][T14472] warn_alloc+0x24d/0x270 [ 273.035204][T14472] ? kasan_save_track+0x4f/0x80 [ 273.035223][T14472] ? kasan_save_track+0x3e/0x80 [ 273.035245][T14472] ? __pfx_warn_alloc+0x10/0x10 [ 273.035262][T14472] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 273.035287][T14472] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.035325][T14472] __vmalloc_node_range_noprof+0x127/0x1540 [ 273.035374][T14472] ? rcu_is_watching+0x16/0xb0 [ 273.035402][T14472] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 273.035429][T14472] ? __kmalloc_cache_noprof+0x321/0x600 [ 273.035448][T14472] ? __kmalloc_cache_noprof+0x14d/0x600 [ 273.035466][T14472] ? xskq_create+0x56/0x220 [ 273.035490][T14472] xskq_create+0x148/0x220 [ 273.035510][T14472] ? xsk_init_queue+0x8a/0xe0 [ 273.035532][T14472] xsk_init_queue+0x8a/0xe0 [ 273.035554][T14472] xsk_setsockopt+0x52a/0x960 [ 273.035585][T14472] ? __pfx_xsk_setsockopt+0x10/0x10 [ 273.035604][T14472] ? __pfx_aa_sk_perm+0x10/0x10 [ 273.035636][T14472] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 273.035661][T14472] ? __pfx_xsk_setsockopt+0x10/0x10 [ 273.035681][T14472] do_sock_setsockopt+0x17c/0x1b0 [ 273.035706][T14472] __x64_sys_setsockopt+0x13d/0x1b0 [ 273.035734][T14472] do_syscall_64+0x166/0x520 [ 273.035754][T14472] ? trace_irq_disable+0x3b/0x140 [ 273.035774][T14472] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.035792][T14472] ? clear_bhb_loop+0x70/0xc0 [ 273.035816][T14472] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.035834][T14472] RIP: 0033:0x7f1f99b9e159 [ 273.035851][T14472] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 273.035867][T14472] RSP: 002b:00007f1f9ab3b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 273.035887][T14472] RAX: ffffffffffffffda RBX: 00007f1f99e25fa0 RCX: 00007f1f99b9e159 [ 273.035904][T14472] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000004 [ 273.035916][T14472] RBP: 00007f1f99c3506b R08: 0000000000000004 R09: 0000000000000000 [ 273.035928][T14472] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 273.035940][T14472] R13: 00007f1f99e26038 R14: 00007f1f99e25fa0 R15: 00007fff352094a8 [ 273.035970][T14472] [ 273.036086][T14472] Mem-Info: [ 273.036096][T14472] active_anon:5683 inactive_anon:0 isolated_anon:0 [ 273.036096][T14472] active_file:2 inactive_file:43116 isolated_file:0 [ 273.036096][T14472] unevictable:0 dirty:81 writeback:0 [ 273.036096][T14472] slab_reclaimable:11344 slab_unreclaimable:104482 [ 273.036096][T14472] mapped:29463 shmem:526 pagetables:1275 [ 273.036096][T14472] sec_pagetables:0 bounce:0 [ 273.036096][T14472] kernel_misc_reclaimable:0 [ 273.036096][T14472] free:1321159 free_pcp:9878 free_cma:0 [ 273.036144][T14472] Node 0 active_anon:22732kB inactive_anon:0kB active_file:8kB inactive_file:172256kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:117852kB dirty:320kB writeback:0kB shmem:2104kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13856kB pagetables:4960kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 273.036194][T14472] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:140kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 273.036242][T14472] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 273.036292][T14472] lowmem_reserve[]: 0 2487 2487 2487 2487 [ 273.036328][T14472] Node 0 DMA32 free:1327784kB boost:0kB min:34140kB low:42672kB high:51204kB reserved_highatomic:0kB free_highatomic:0kB active_anon:22732kB inactive_anon:0kB active_file:8kB inactive_file:172256kB unevictable:0kB writepending:320kB zspages:0kB present:3129332kB managed:2546960kB mlocked:0kB bounce:0kB free_pcp:39512kB local_pcp:10416kB free_cma:0kB [ 273.036377][T14472] lowmem_reserve[]: 0 0 0 0 0 [ 273.036407][T14472] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:0kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 273.036451][T14472] lowmem_reserve[]: 0 0 0 0 0 [ 273.036483][T14472] Node 1 Normal free:3941492kB boost:0kB min:55760kB low:69700kB high:83640kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:0kB writepending:4kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 273.036535][T14472] lowmem_reserve[]: 0 0 0 0 0 [ 273.036566][T14472] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 273.036684][T14472] Node 0 DMA32: 2396*4kB (UME) 1423*8kB (UME) 542*16kB (UM) 332*32kB (UM) 138*64kB (UM) 79*128kB (UME) 49*256kB (UME) 9*512kB (UME) 6*1024kB (UME) 8*2048kB (UM) 300*4096kB (UM) = 1327688kB [ 273.036833][T14472] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 273.036927][T14472] Node 1 Normal: 1*4kB (M) 6*8kB (UM) 6*16kB (UM) 5*32kB (UM) 9*64kB (UM) 6*128kB (UM) 2*256kB (M) 4*512kB (UM) 3*1024kB (UM) 1*2048kB (U) 960*4096kB (M) = 3941492kB [ 273.037491][T14472] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 273.037510][T14472] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 273.037529][T14472] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 273.037544][T14472] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 273.037558][T14472] 43644 total pagecache pages [ 273.037576][T14472] 4 pages in swap cache [ 273.037596][T14472] Free swap = 124980kB [ 273.037604][T14472] Total swap = 124996kB [ 273.037612][T14472] 2097051 pages RAM [ 273.037620][T14472] 0 pages HighMem/MovableOnly [ 273.037626][T14472] 428695 pages reserved [ 273.037633][T14472] 0 pages cma reserved [ 273.776538][T14484] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2331'. [ 273.798182][T14495] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2332'. [ 273.798216][T14495] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2332'. [ 273.852735][T14491] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2333'. [ 273.893273][T14502] ipt_ECN: cannot use operation on non-tcp rule [ 274.451390][T14520] netlink: 'syz.1.2339': attribute type 1 has an invalid length. [ 274.689440][T14527] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2341'. [ 274.691131][T14526] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2341'. [ 274.741392][T13168] wlan1: Trigger new scan to find an IBSS to join [ 276.426897][T14520] workqueue: Failed to create a rescuer kthread for wq "bond15": -EINTR [ 276.513510][T14550] net_ratelimit: 18 callbacks suppressed [ 276.513538][T14550] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 276.542543][T14550] set match dimension is over the limit! [ 276.638233][T14557] ieee802154 phy0 wpan0: encryption failed: -22 [ 276.671490][T14557] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2350'. [ 276.671727][T14557] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2350'. [ 276.782837][T14563] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2352'. [ 277.664219][T14619] openvswitch: netlink: Key 0 has unexpected len 4 expected 0 [ 277.780404][ T116] wlan1: Trigger new scan to find an IBSS to join [ 277.861207][T14623] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2374'. [ 277.883763][T14623] netlink: 'syz.1.2374': attribute type 11 has an invalid length. [ 277.928621][T14625] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2375'. [ 278.112003][T14632] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 278.114139][T14632] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 278.195142][T14636] Cannot find set identified by id 0 to match [ 278.270162][T14641] netlink: 392 bytes leftover after parsing attributes in process `syz.3.2382'. [ 278.346168][T14651] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2381'. [ 278.642386][T14671] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2386'. [ 278.735735][T14671] bond7: Invalid ad_actor_system MAC address. [ 278.735755][T14671] bond7: option ad_actor_system: invalid value (1) [ 278.758807][T14671] bond7 (unregistering): Released all slaves [ 278.790437][T14680] netlink: 'syz.4.2389': attribute type 1 has an invalid length. [ 278.790458][T14680] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2389'. [ 278.832984][T14682] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2390'. [ 279.102111][T14696] netlink: 'syz.1.2394': attribute type 1 has an invalid length. [ 279.402016][T14704] netlink: 'syz.4.2397': attribute type 10 has an invalid length. [ 280.121866][T14759] C: renamed from lo [ 280.139608][T14759] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 280.505489][T14773] netlink: 'syz.4.2413': attribute type 9 has an invalid length. [ 280.513740][T14775] netlink: 'syz.3.2415': attribute type 32 has an invalid length. [ 280.529359][T14779] netlink: 'syz.4.2413': attribute type 9 has an invalid length. [ 280.820063][ T9778] wlan1: Trigger new scan to find an IBSS to join [ 280.880149][ T9778] IPVS: starting estimator thread 0... [ 280.970610][T14798] IPVS: using max 27 ests per chain, 64800 per kthread [ 281.286998][T14830] netlink: 'syz.0.2428': attribute type 2 has an invalid length. [ 281.306411][T14833] netlink: 'syz.0.2428': attribute type 2 has an invalid length. [ 281.676414][T14854] bond8: entered promiscuous mode [ 281.676474][T14854] bond8: entered allmulticast mode [ 281.676941][T14854] 8021q: adding VLAN 0 to HW filter on device bond8 [ 281.757606][ T9778] wlan1: Creating new IBSS network, BSSID 6a:40:6a:13:4d:4f [ 281.876698][T14870] netlink: 'syz.3.2437': attribute type 1 has an invalid length. [ 282.036223][T14876] bridge0: port 2(bridge_slave_1) entered blocking state [ 282.036377][T14876] bridge0: port 2(bridge_slave_1) entered listening state [ 282.036635][T14876] bridge0: port 1(bridge_slave_0) entered blocking state [ 282.036783][T14876] bridge0: port 1(bridge_slave_0) entered listening state [ 282.116928][T14876] v: left promiscuous mode [ 282.131615][T14876] v: entered promiscuous mode [ 282.164257][T14876] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 282.171200][T14885] __nla_validate_parse: 76 callbacks suppressed [ 282.171218][T14885] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2439'. [ 282.171230][T14885] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2439'. [ 282.310235][T14885] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2439'. [ 282.329688][T14885] hsr_slave_0: left promiscuous mode [ 282.336042][T14885] hsr_slave_1: left promiscuous mode [ 282.447040][T14892] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2441'. [ 282.451374][T14895] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2443'. [ 282.452969][T14894] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2443'. [ 282.655854][T14905] xt_CT: You must specify a L4 protocol and not use inversions on it [ 282.837776][T14918] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2449'. [ 282.838312][T14919] netlink: 'syz.3.2448': attribute type 1 has an invalid length. [ 282.838328][T14919] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2448'. [ 283.045196][T14935] bond7: entered allmulticast mode [ 283.058397][T14931] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2449'. [ 283.547610][T14974] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 283.605190][T14973] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 283.616744][T14973] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 283.740792][T14980] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 283.753898][T14980] bond0 (unregistering): Released all slaves [ 283.896415][T14988] validate_nla: 1 callbacks suppressed [ 283.896435][T14988] netlink: 'syz.4.2462': attribute type 1 has an invalid length. [ 283.960965][T14988] 8021q: adding VLAN 0 to HW filter on device bond9 [ 283.975485][T14985] bond9: up delay (136) is not a multiple of miimon (100), value rounded to 100 ms [ 284.000748][T14985] bond9: entered allmulticast mode [ 284.106408][T15005] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 284.106834][T15006] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 284.389507][T15024] netlink: 'syz.3.2469': attribute type 1 has an invalid length. [ 284.482042][T15024] 8021q: adding VLAN 0 to HW filter on device bond0 [ 284.541356][T15029] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2471'. [ 284.584871][T15029] : renamed from vlan1 (while UP) [ 284.617025][T15024] bond0: (slave geneve2): making interface the new active one [ 284.627355][T15024] bond0: (slave geneve2): Enslaving as an active interface with an up link [ 284.829858][T15051] netlink: 'syz.1.2478': attribute type 1 has an invalid length. [ 285.222638][T15077] netlink: 'syz.1.2486': attribute type 10 has an invalid length. [ 285.584698][T15097] tipc: Enabled bearer , priority 0 [ 285.585179][T15097] tipc: Enabling of bearer rejected, already enabled [ 285.585562][T15097] tipc: Enabling of bearer rejected, already enabled [ 285.585970][T15097] tipc: Enabling of bearer rejected, already enabled [ 285.596595][T15097] tipc: Enabling of bearer rejected, already enabled [ 285.596998][T15097] tipc: Enabling of bearer rejected, already enabled [ 285.604011][T15097] tipc: Enabling of bearer rejected, already enabled [ 285.608046][T15097] tipc: Enabling of bearer rejected, already enabled [ 285.608435][T15097] tipc: Enabling of bearer rejected, already enabled [ 285.634935][T15097] tipc: Enabling of bearer rejected, already enabled [ 285.635410][T15097] tipc: Enabling of bearer rejected, already enabled [ 285.635795][T15097] tipc: Enabling of bearer rejected, already enabled [ 285.636172][T15097] tipc: Enabling of bearer rejected, already enabled [ 285.652795][T15102] netlink: 'syz.4.2492': attribute type 1 has an invalid length. [ 285.656193][T15097] tipc: Enabling of bearer rejected, already enabled [ 285.656610][T15097] tipc: Enabling of bearer rejected, already enabled [ 285.657020][T15097] tipc: Enabling of bearer rejected, already enabled [ 285.662990][T15097] tipc: Enabling of bearer rejected, already enabled [ 285.663419][T15097] tipc: Enabling of bearer rejected, already enabled [ 285.804809][T15117] netlink: 'syz.3.2494': attribute type 1 has an invalid length. [ 286.196738][T15097] tipc: Enabling of bearer rejected, already enabled [ 286.315816][T15128] FAULT_INJECTION: forcing a failure. [ 286.315816][T15128] name failslab, interval 1, probability 0, space 0, times 0 [ 286.315847][T15128] CPU: 0 UID: 0 PID: 15128 Comm: syz.1.2498 Not tainted syzkaller #0 PREEMPT(full) [ 286.315868][T15128] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 286.315879][T15128] Call Trace: [ 286.315886][T15128] [ 286.315895][T15128] dump_stack_lvl+0xe8/0x150 [ 286.315927][T15128] should_fail_ex+0x410/0x560 [ 286.315951][T15128] ? __alloc_skb+0x1db/0x7a0 [ 286.315974][T15128] should_failslab+0xa8/0x100 [ 286.315998][T15128] ? __alloc_skb+0x1db/0x7a0 [ 286.316018][T15128] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 286.316053][T15128] ? __alloc_skb+0x18d/0x7a0 [ 286.316075][T15128] ? __alloc_skb+0x1db/0x7a0 [ 286.316103][T15128] __alloc_skb+0x1db/0x7a0 [ 286.316128][T15128] netlink_ack+0x136/0xb30 [ 286.316152][T15128] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 286.316174][T15128] ? ref_tracker_free+0x689/0x830 [ 286.316199][T15128] ? __pfx_ref_tracker_free+0x10/0x10 [ 286.316231][T15128] netlink_rcv_skb+0x2a4/0x4a0 [ 286.316258][T15128] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 286.316283][T15128] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 286.316323][T15128] ? netlink_deliver_tap+0x2e/0x1b0 [ 286.316350][T15128] ? netlink_deliver_tap+0x2e/0x1b0 [ 286.316382][T15128] netlink_unicast+0x7bd/0x940 [ 286.316418][T15128] netlink_sendmsg+0x813/0xb40 [ 286.316454][T15128] ? __pfx_netlink_sendmsg+0x10/0x10 [ 286.316490][T15128] ? apparmor_socket_sendmsg+0x98/0x360 [ 286.316513][T15128] ? __pfx_netlink_sendmsg+0x10/0x10 [ 286.316539][T15128] sock_sendmsg_nosec+0x13a/0x180 [ 286.316560][T15128] ____sys_sendmsg+0x54e/0x850 [ 286.316590][T15128] ? __pfx_____sys_sendmsg+0x10/0x10 [ 286.316623][T15128] ? import_iovec+0x73/0xa0 [ 286.316650][T15128] ___sys_sendmsg+0x2a5/0x360 [ 286.316673][T15128] ? __lock_acquire+0x747/0x2de0 [ 286.316697][T15128] ? __pfx____sys_sendmsg+0x10/0x10 [ 286.316756][T15128] ? __fget_files+0x2a/0x420 [ 286.316783][T15128] ? __fget_files+0x3a2/0x420 [ 286.316817][T15128] __x64_sys_sendmsg+0x1b1/0x290 [ 286.316845][T15128] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 286.316891][T15128] do_syscall_64+0x166/0x520 [ 286.316913][T15128] ? trace_irq_disable+0x3b/0x140 [ 286.316931][T15128] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.316951][T15128] ? clear_bhb_loop+0x70/0xc0 [ 286.316974][T15128] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.316992][T15128] RIP: 0033:0x7f1f99b9e159 [ 286.317009][T15128] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 286.317025][T15128] RSP: 002b:00007f1f9ab3b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 286.317045][T15128] RAX: ffffffffffffffda RBX: 00007f1f99e25fa0 RCX: 00007f1f99b9e159 [ 286.317064][T15128] RDX: 0000000000000010 RSI: 0000200000006a00 RDI: 0000000000000003 [ 286.317076][T15128] RBP: 00007f1f9ab3b090 R08: 0000000000000000 R09: 0000000000000000 [ 286.317087][T15128] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 286.317098][T15128] R13: 00007f1f99e26038 R14: 00007f1f99e25fa0 R15: 00007fff352094a8 [ 286.317129][T15128] [ 286.779734][T15096] tipc: Resetting bearer [ 286.862385][T15096] tipc: Disabling bearer [ 286.898147][ T10] tipc: Node number set to 2886997039 [ 287.016794][T15154] netlink: 'syz.3.2505': attribute type 21 has an invalid length. [ 287.016819][T15154] IPv6: NLM_F_CREATE should be specified when creating new route [ 287.220553][T15162] __nla_validate_parse: 16 callbacks suppressed [ 287.220567][T15162] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2508'. [ 287.405551][T15176] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2512'. [ 287.405575][T15176] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2512'. [ 288.221340][T15232] openvswitch: netlink: IPv4 tunnel dst address is zero [ 288.262673][T15236] ip_tables: iptables: counters copy to user failed while replacing table [ 289.444726][T15268] syzkaller0: entered promiscuous mode [ 289.444748][T15268] syzkaller0: entered allmulticast mode [ 289.595101][ T9778] bond0: (slave bond_slave_0): link status definitely down, disabling slave [ 289.646876][T15272] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 289.696040][T15275] netlink: 'syz.1.2547': attribute type 1 has an invalid length. [ 289.846500][T15280] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2549'. [ 290.072693][T15291] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2551'. [ 290.224299][T15298] netlink: 'syz.3.2555': attribute type 7 has an invalid length. [ 290.224323][T15298] netlink: 'syz.3.2555': attribute type 23 has an invalid length. [ 290.267805][T15298] netlink: 'syz.3.2555': attribute type 7 has an invalid length. [ 290.301608][T15298] netlink: 'syz.3.2555': attribute type 7 has an invalid length. [ 290.320924][ T9778] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 290.324094][T13155] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 290.324137][T13155] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 290.324179][T13155] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 290.527578][T15309] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2558'. [ 290.745798][T15314] IPv6: NLM_F_REPLACE set, but no existing node found! [ 290.767342][T15315] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2561'. [ 291.341923][T15340] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2569'. [ 291.342378][T15342] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2569'. [ 291.747697][T15346] syzkaller0: entered promiscuous mode [ 291.747870][T15346] syzkaller0: entered allmulticast mode [ 292.976379][T15401] x_tables: duplicate underflow at hook 2 [ 293.355950][T15413] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2586'. [ 294.118466][T15445] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2592'. [ 294.161335][T15445] syzkaller1: entered promiscuous mode [ 294.161356][T15445] syzkaller1: entered allmulticast mode [ 294.349098][T15453] openvswitch: netlink: Key type 30 is not supported [ 295.259609][T15493] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2605'. [ 295.425474][T15498] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2608'. [ 295.490894][T15493] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2605'. [ 295.497056][T15493] netlink: 'syz.1.2605': attribute type 16 has an invalid length. [ 295.497076][T15493] netlink: 'syz.1.2605': attribute type 17 has an invalid length. [ 295.529549][T15498] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2608'. [ 295.535951][T15493] erspan0: left promiscuous mode [ 295.535973][T15493] erspan0: left allmulticast mode [ 295.577748][T15493] v: left allmulticast mode [ 295.590804][T15493] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 295.800137][T15506] netlink: 'syz.3.2609': attribute type 97 has an invalid length. [ 295.800159][T15506] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2609'. [ 295.800172][T15506] netlink: 'syz.3.2609': attribute type 97 has an invalid length. [ 295.806020][T15506] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2609'. [ 296.832273][T15541] ip_tables: iptables: counters copy to user failed while replacing table [ 296.850696][T15537] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2615'. [ 298.016848][T15534] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 298.164071][T15571] Bluetooth: hci0: unsupported parameter 5135 [ 298.164094][T15571] Bluetooth: hci0: unsupported parameter 8192 [ 298.164104][T15571] Bluetooth: hci0: unsupported parameter 5135 [ 298.164114][T15571] Bluetooth: hci0: unsupported parameter 8192 [ 298.166832][T15572] Bluetooth: hci0: unsupported parameter 5135 [ 298.166851][T15572] Bluetooth: hci0: unsupported parameter 8192 [ 298.166862][T15572] Bluetooth: hci0: unsupported parameter 5135 [ 298.166873][T15572] Bluetooth: hci0: unsupported parameter 8192 [ 298.344872][T15578] nbd: must specify at least one socket [ 298.540974][T15588] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2627'. [ 298.669254][T15597] netlink: 168 bytes leftover after parsing attributes in process `syz.3.2629'. [ 298.730066][T15588] netlink: 'syz.2.2627': attribute type 1 has an invalid length. [ 298.730088][T15588] netlink: 232 bytes leftover after parsing attributes in process `syz.2.2627'. [ 298.730102][T15588] netlink: 'syz.2.2627': attribute type 1 has an invalid length. [ 299.043010][T13155] nci: nci_rsp_packet: unknown rsp opcode 0x32 [ 299.295426][T15633] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2632'. [ 299.362063][T15626] netlink: 'syz.3.2634': attribute type 1 has an invalid length. [ 299.492341][T15626] bond7: entered promiscuous mode [ 299.494477][T15626] 8021q: adding VLAN 0 to HW filter on device bond7 [ 299.556699][T15630] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2635'. [ 299.563391][T15647] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2635'. [ 301.902498][T15608] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 302.286261][T15681] netlink: Setting conntrack mark requires 'commit' flag. [ 302.286291][T15681] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 302.460648][T15685] netlink: 'syz.0.2641': attribute type 1 has an invalid length. [ 302.559626][T15689] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2642'. [ 302.949446][T15705] netlink: 256 bytes leftover after parsing attributes in process `syz.0.2646'. [ 303.279233][T15731] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 303.589736][T15740] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2652'. [ 303.633507][T15743] netlink: 80 bytes leftover after parsing attributes in process `syz.0.2653'. [ 304.053281][T15759] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2656'. [ 304.057304][T15758] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2656'. [ 304.367758][T15770] SET target dimension over the limit! [ 304.615382][T15791] netlink: 'syz.0.2663': attribute type 19 has an invalid length. [ 304.615404][T15791] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2663'. [ 304.618825][T15791] netlink: 'syz.0.2663': attribute type 19 has an invalid length. [ 304.618844][T15791] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2663'. [ 304.635811][T15794] Cannot find add_set index 0 as target [ 304.645454][T15794] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2666'. [ 304.653046][T15794] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2666'. [ 305.018332][T15797] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2667'. [ 305.521300][T15809] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2670'. [ 305.587452][T15810] tunl0: entered promiscuous mode [ 305.676538][T15810] netlink: 'syz.3.2671': attribute type 4 has an invalid length. [ 306.012922][T15832] ip_tables: iptables: counters copy to user failed while replacing table [ 306.756154][T15843] x_tables: unsorted underflow at hook 3 [ 306.896009][T15849] syzkaller0: entered promiscuous mode [ 306.896031][T15849] syzkaller0: entered allmulticast mode [ 307.175832][T15860] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 307.340927][T15864] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 308.188478][T15901] netlink: zone id is out of range [ 308.188496][T15901] netlink: zone id is out of range [ 308.188577][T15901] netlink: zone id is out of range [ 308.548992][T15909] netlink: 'syz.1.2698': attribute type 21 has an invalid length. [ 308.549078][T15909] netlink: 'syz.1.2698': attribute type 5 has an invalid length. [ 308.549091][T15909] netlink: 'syz.1.2698': attribute type 6 has an invalid length. [ 308.829416][T15915] FAULT_INJECTION: forcing a failure. [ 308.829416][T15915] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 308.829447][T15915] CPU: 0 UID: 0 PID: 15915 Comm: syz.3.2701 Not tainted syzkaller #0 PREEMPT(full) [ 308.829467][T15915] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 308.829479][T15915] Call Trace: [ 308.829486][T15915] [ 308.829494][T15915] dump_stack_lvl+0xe8/0x150 [ 308.829525][T15915] should_fail_ex+0x410/0x560 [ 308.829550][T15915] _copy_from_user+0x2d/0xb0 [ 308.829574][T15915] ___sys_sendmsg+0x1c6/0x360 [ 308.829599][T15915] ? __lock_acquire+0x747/0x2de0 [ 308.829622][T15915] ? __pfx____sys_sendmsg+0x10/0x10 [ 308.829679][T15915] ? __fget_files+0x2a/0x420 [ 308.829703][T15915] ? __fget_files+0x3a2/0x420 [ 308.829736][T15915] __x64_sys_sendmsg+0x1b1/0x290 [ 308.829763][T15915] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 308.829808][T15915] do_syscall_64+0x166/0x520 [ 308.829826][T15915] ? trace_irq_disable+0x3b/0x140 [ 308.829844][T15915] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 308.829863][T15915] ? clear_bhb_loop+0x70/0xc0 [ 308.829885][T15915] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 308.829903][T15915] RIP: 0033:0x7f026179e159 [ 308.829920][T15915] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 308.829935][T15915] RSP: 002b:00007f0262750028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 308.829955][T15915] RAX: ffffffffffffffda RBX: 00007f0261a25fa0 RCX: 00007f026179e159 [ 308.829969][T15915] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000005 [ 308.829980][T15915] RBP: 00007f0262750090 R08: 0000000000000000 R09: 0000000000000000 [ 308.829990][T15915] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 308.829999][T15915] R13: 00007f0261a26038 R14: 00007f0261a25fa0 R15: 00007fff4cdb4f08 [ 308.830030][T15915] [ 308.837162][T15916] __nla_validate_parse: 4 callbacks suppressed [ 308.837183][T15916] netlink: 9 bytes leftover after parsing attributes in process `syz.0.2700'. [ 308.860025][T15916] 1ªî{X¹¦: left allmulticast mode [ 308.923088][T15917] netlink: 'syz.4.2702': attribute type 3 has an invalid length. [ 309.018037][T15917] netlink: 'syz.4.2702': attribute type 3 has an invalid length. [ 309.206584][T15930] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2706'. [ 309.542258][T15946] netlink: 'syz.3.2710': attribute type 3 has an invalid length. [ 309.542280][T15946] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2710'. [ 310.104579][T15969] FAULT_INJECTION: forcing a failure. [ 310.104579][T15969] name failslab, interval 1, probability 0, space 0, times 0 [ 310.104619][T15969] CPU: 1 UID: 0 PID: 15969 Comm: syz.4.2716 Not tainted syzkaller #0 PREEMPT(full) [ 310.104641][T15969] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 310.104652][T15969] Call Trace: [ 310.104659][T15969] [ 310.104667][T15969] dump_stack_lvl+0xe8/0x150 [ 310.104699][T15969] should_fail_ex+0x410/0x560 [ 310.104724][T15969] ? __alloc_skb+0x1db/0x7a0 [ 310.104746][T15969] should_failslab+0xa8/0x100 [ 310.104770][T15969] ? __alloc_skb+0x1db/0x7a0 [ 310.104790][T15969] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 310.104818][T15969] ? __alloc_skb+0x18d/0x7a0 [ 310.104840][T15969] ? __alloc_skb+0x1db/0x7a0 [ 310.104867][T15969] __alloc_skb+0x1db/0x7a0 [ 310.104893][T15969] netlink_sendmsg+0x5d4/0xb40 [ 310.104930][T15969] ? __pfx_netlink_sendmsg+0x10/0x10 [ 310.104966][T15969] ? apparmor_socket_sendmsg+0x98/0x360 [ 310.104988][T15969] ? __pfx_netlink_sendmsg+0x10/0x10 [ 310.105015][T15969] sock_sendmsg_nosec+0x13a/0x180 [ 310.105038][T15969] ____sys_sendmsg+0x54e/0x850 [ 310.105068][T15969] ? __pfx_____sys_sendmsg+0x10/0x10 [ 310.105103][T15969] ? import_iovec+0x73/0xa0 [ 310.105130][T15969] ___sys_sendmsg+0x2a5/0x360 [ 310.105153][T15969] ? __lock_acquire+0x747/0x2de0 [ 310.105177][T15969] ? __pfx____sys_sendmsg+0x10/0x10 [ 310.105236][T15969] ? __fget_files+0x2a/0x420 [ 310.105260][T15969] ? __fget_files+0x3a2/0x420 [ 310.105294][T15969] __x64_sys_sendmsg+0x1b1/0x290 [ 310.105322][T15969] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 310.105367][T15969] do_syscall_64+0x166/0x520 [ 310.105389][T15969] ? trace_irq_disable+0x3b/0x140 [ 310.105407][T15969] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 310.105427][T15969] ? clear_bhb_loop+0x70/0xc0 [ 310.105450][T15969] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 310.105469][T15969] RIP: 0033:0x7efcab19e159 [ 310.105486][T15969] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 310.105501][T15969] RSP: 002b:00007efcabfd0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 310.105522][T15969] RAX: ffffffffffffffda RBX: 00007efcab425fa0 RCX: 00007efcab19e159 [ 310.105535][T15969] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000005 [ 310.105547][T15969] RBP: 00007efcabfd0090 R08: 0000000000000000 R09: 0000000000000000 [ 310.105559][T15969] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 310.105570][T15969] R13: 00007efcab426038 R14: 00007efcab425fa0 R15: 00007ffe9f5d0718 [ 310.105606][T15969] [ 310.375501][T15968] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2715'. [ 311.533489][T16021] netlink: 'syz.2.2729': attribute type 1 has an invalid length. [ 311.533512][T16021] netlink: 500 bytes leftover after parsing attributes in process `syz.2.2729'. [ 311.551008][T16024] bridge0: port 1(batadv1) entered blocking state [ 311.553512][T16024] bridge0: port 1(batadv1) entered disabled state [ 311.553838][T16024] batadv1: entered allmulticast mode [ 311.558454][T16024] batadv1: entered promiscuous mode [ 311.657720][T16019] netlink: 288 bytes leftover after parsing attributes in process `syz.0.2730'. [ 311.848048][ T116] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 311.978459][T16028] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2731'. [ 312.022892][ T116] batman_adv: batadv1: IGMP Querier appeared [ 312.022909][ T116] batman_adv: batadv1: MLD Querier appeared [ 312.293690][T16042] netlink: 100 bytes leftover after parsing attributes in process `syz.4.2733'. [ 312.314566][T16042] netlink: 14719 bytes leftover after parsing attributes in process `syz.4.2733'. [ 312.316445][T16042] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 312.590482][ C0] bridge0: port 1(bridge_slave_0) entered learning state [ 312.591072][ C0] bridge0: port 2(bridge_slave_1) entered learning state [ 312.950558][T16051] veth1_macvtap: entered promiscuous mode [ 313.280198][T16056] netlink: 'syz.0.2735': attribute type 5 has an invalid length. [ 313.280221][T16056] netlink: 'syz.0.2735': attribute type 9 has an invalid length. [ 313.280233][T16056] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2735'. [ 313.544660][T16062] netlink: 'syz.2.2739': attribute type 1 has an invalid length. [ 313.633096][T16068] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 313.897681][T16073] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2744'. [ 313.898043][T16073] xt_cgroup: path and classid specified [ 313.944941][T16073] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2744'. [ 315.338371][T16092] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2747'. [ 315.441615][T16089] 8021q: adding VLAN 0 to HW filter on device ipvlan0 [ 316.574426][T16177] netlink: 'syz.1.2769': attribute type 2 has an invalid length. [ 316.574448][T16177] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2769'. [ 316.631004][T16173] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2768'. [ 316.721017][T16174] syzkaller1: entered promiscuous mode [ 316.721038][T16174] syzkaller1: entered allmulticast mode [ 316.833698][T16185] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 317.188613][T16201] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2775'. [ 317.489656][T16215] bond0: (slave ip6gre0): Error: Device can not be enslaved while up [ 317.554941][T16217] bond0: (slave ip6gre0): Error: Device can not be enslaved while up [ 317.731037][T16225] sctp: [Deprecated]: syz.2.2777 (pid 16225) Use of int in maxseg socket option. [ 317.731037][T16225] Use struct sctp_assoc_value instead [ 318.087777][T16249] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2784'. [ 318.361536][T16262] netlink: 'syz.4.2786': attribute type 11 has an invalid length. [ 318.361558][T16262] netlink: 'syz.4.2786': attribute type 11 has an invalid length. [ 318.361569][T16262] netlink: 228 bytes leftover after parsing attributes in process `syz.4.2786'. [ 318.371670][T16263] netlink: 'syz.4.2786': attribute type 11 has an invalid length. [ 318.371689][T16263] netlink: 'syz.4.2786': attribute type 11 has an invalid length. [ 318.371700][T16263] netlink: 228 bytes leftover after parsing attributes in process `syz.4.2786'. [ 319.023558][T16281] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2791'. [ 319.580589][T16296] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 320.161102][T16320] netlink: 'syz.0.2801': attribute type 1 has an invalid length. [ 320.313339][T16320] 8021q: adding VLAN 0 to HW filter on device bond8 [ 320.315628][T16325] bond8: up delay (136) is not a multiple of miimon (100), value rounded to 100 ms [ 320.350984][T16325] bond8: entered allmulticast mode [ 320.414728][T16335] bond8: (slave ip6gretap1): Enslaving as an active interface with an up link [ 320.689713][T16344] trusted_key: syz.2.2810 sent an empty control message without MSG_MORE. [ 320.909220][T16344] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2810'. [ 320.910580][T16346] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2810'. [ 321.090010][T16360] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 321.114671][T16360] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2813'. [ 321.564010][T16385] netlink: 'syz.3.2821': attribute type 2 has an invalid length. [ 321.820431][T16398] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2823'. [ 322.142250][T16408] block nbd0: Unsupported socket: should be TCP or UNIX. [ 322.377965][T16418] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2831'. [ 322.485580][T16423] ip_tables: iptables: counters copy to user failed while replacing table [ 322.492747][T16420] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2832'. [ 322.587959][T16420] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2832'. [ 322.598185][T16420] tipc: New replicast peer: 172.20.20.187 [ 322.612598][T16420] tipc: Enabled bearer , priority 10 [ 322.706533][T16428] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2834'. [ 322.836287][T16430] netlink: NAT attributes may be specified only when CT COMMIT flag is also specified. [ 322.836322][T16430] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 322.850883][T16430] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2835'. [ 322.856441][T16429] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 323.589256][ T5733] tipc: Node number set to 1 [ 324.566169][T16486] netlink: 'syz.1.2854': attribute type 2 has an invalid length. [ 324.676353][T16491] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2856'. [ 324.829579][T16501] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 324.858969][T16501] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2854'. [ 324.861296][T16501] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2854'. [ 325.573754][T16521] tipc: Failed to remove unknown binding: 66,0,0/1:92015303/92015304 [ 325.576092][T16521] tipc: Failed to remove unknown binding: 66,0,0/1:92015303/92015304 [ 325.664743][T16528] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2866'. [ 325.902413][T16539] netlink: zone id is out of range [ 325.902427][T16539] netlink: zone id is out of range [ 325.902433][T16539] netlink: zone id is out of range [ 325.902441][T16539] netlink: zone id is out of range [ 325.902447][T16539] netlink: zone id is out of range [ 325.907236][T16541] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2868'. [ 325.955235][T16540] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2868'. [ 327.262084][T16592] tipc: Started in network mode [ 327.262114][T16592] tipc: Node identity 2e84ea0e765f, cluster identity 4711 [ 327.262345][T16592] tipc: Enabled bearer , priority 0 [ 327.262932][T16590] syzkaller0: entered promiscuous mode [ 327.262947][T16590] syzkaller0: entered allmulticast mode [ 327.321343][T16596] net_ratelimit: 1718 callbacks suppressed [ 327.321360][T16596] syzkaller0: mtu less than device minimum [ 328.005800][T16615] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2885'. [ 328.382172][ T5725] tipc: Node number set to 1490807310 [ 328.558433][T16638] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2894'. [ 328.636179][T16636] syzkaller1: entered promiscuous mode [ 328.636203][T16636] syzkaller1: entered allmulticast mode [ 328.904992][T16651] macvtap1: entered promiscuous mode [ 328.905214][T16651] macvtap1: entered allmulticast mode [ 328.905227][T16651] veth1_vlan: entered allmulticast mode [ 328.997456][T16656] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2898'. [ 329.190418][T16666] netlink: 'syz.1.2900': attribute type 10 has an invalid length. [ 329.195102][T16666] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2900'. [ 329.314189][T16673] netlink: 'syz.4.2902': attribute type 1 has an invalid length. [ 329.725977][T16685] __nla_validate_parse: 2 callbacks suppressed [ 329.725999][T16685] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2906'. [ 329.802938][T16688] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2906'. [ 330.428929][T16693] netlink: 'syz.2.2907': attribute type 26 has an invalid length. [ 331.985775][T16656] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 332.513138][T16736] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2910'. [ 332.658381][T16722] tipc: New replicast peer: 172.20.20.187 [ 332.696287][T16722] tipc: Enabled bearer , priority 10 [ 332.806695][T16740] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2914'. [ 334.237186][T16813] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2928'. [ 334.718327][T16837] netlink: 9 bytes leftover after parsing attributes in process `syz.4.2932'. [ 334.875631][T16842] openvswitch: netlink: Encap mask attribute is set for non-VLAN frame. [ 334.905839][T16844] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2933'. [ 334.925938][T16833] xt_CT: No such helper "snmp_trap" [ 335.016398][T16847] netlink: 164 bytes leftover after parsing attributes in process `syz.1.2934'. [ 335.276385][T16854] netlink: 'syz.3.2937': attribute type 29 has an invalid length. [ 336.025451][T16885] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2941'. [ 336.160090][T16897] netlink: 'syz.0.2942': attribute type 10 has an invalid length. [ 336.163561][T16897] bridge0: port 2(bridge_slave_1) entered blocking state [ 336.163684][T16897] bridge0: port 2(bridge_slave_1) entered listening state [ 336.177032][T16897] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 336.460885][T16910] openvswitch: netlink: ufid size 17 bytes exceeds the range (1, 16) [ 336.460909][T16910] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 337.077378][T16929] netlink: 'syz.2.2952': attribute type 1 has an invalid length. [ 337.077399][T16929] netlink: 228 bytes leftover after parsing attributes in process `syz.2.2952'. [ 337.078516][T16930] netlink: 'syz.2.2952': attribute type 1 has an invalid length. [ 337.078532][T16930] netlink: 228 bytes leftover after parsing attributes in process `syz.2.2952'. [ 337.741618][T16938] bond8: entered promiscuous mode [ 337.741645][T16938] bond8: entered allmulticast mode [ 337.775520][T16938] 8021q: adding VLAN 0 to HW filter on device bond8 [ 338.087901][ T5625] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 338.099406][ T5625] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 338.102623][ T5625] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 338.104277][ T5625] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 338.105792][ T5625] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 338.229256][ T5629] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 338.248152][ T5629] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 338.258089][T16963] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2960'. [ 338.270482][ T5629] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 338.402227][ T5629] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 338.403827][ T5629] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 339.233490][T17003] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2968'. [ 339.237840][T16992] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2968'. [ 339.633034][T17017] netlink: 'syz.2.2972': attribute type 75 has an invalid length. [ 339.646106][T17017] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2972'. [ 339.653131][T17017] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2972'. [ 340.011560][T17020] IPv6: sit2: Disabled Multicast RS [ 340.021101][T17020] sit2: entered promiscuous mode [ 340.021122][T17020] sit2: entered allmulticast mode [ 340.160830][T16955] C speed is unknown, defaulting to 1000 [ 340.257631][T16955] wg0 speed is unknown, defaulting to 1000 [ 340.374840][T17035] openvswitch: netlink: Tunnel attr 68 out of range max 16 [ 340.499241][ T5625] Bluetooth: hci5: command tx timeout [ 341.185705][T16955] bridge0: port 1(bridge_slave_0) entered blocking state [ 341.185881][T16955] bridge0: port 1(bridge_slave_0) entered disabled state [ 341.186289][T16955] bridge_slave_0: entered allmulticast mode [ 341.188075][T16955] bridge_slave_0: entered promiscuous mode [ 341.195560][T16955] bridge0: port 2(bridge_slave_1) entered blocking state [ 341.195722][T16955] bridge0: port 2(bridge_slave_1) entered disabled state [ 341.195879][T16955] bridge_slave_1: entered allmulticast mode [ 341.197724][T16955] bridge_slave_1: entered promiscuous mode [ 341.247024][T17056] __nla_validate_parse: 1 callbacks suppressed [ 341.247041][T17056] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2982'. [ 341.276398][T17065] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2983'. [ 341.319776][T16955] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 341.322958][T16955] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 341.543824][T16955] team0: Port device team_slave_0 added [ 341.559526][T16955] team0: Port device team_slave_1 added [ 341.605709][T16955] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 341.605734][T16955] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 341.605758][T16955] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 341.607808][T16955] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 341.607822][T16955] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 341.607845][T16955] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 341.845078][T16955] hsr_slave_0: entered promiscuous mode [ 341.846214][T16955] hsr_slave_1: entered promiscuous mode [ 341.848591][T16955] debugfs: 'hsr0' already exists in 'hsr' [ 341.848612][T16955] Cannot create hsr debugfs directory [ 342.455332][T17105] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2994'. [ 342.551653][T16955] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 342.551688][T16955] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 342.551711][T16955] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 342.551735][T16955] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 2] type 2 family 0 port 19999 - 0 [ 342.590823][ T5625] Bluetooth: hci5: command tx timeout [ 342.606055][T17107] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode [ 342.606085][T17107] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode [ 342.662124][ C0] bridge0: port 2(bridge_slave_1) entered forwarding state [ 342.662151][ C0] bridge0: topology change detected, propagating [ 342.662527][ C0] bridge0: port 1(bridge_slave_0) entered forwarding state [ 342.662543][ C0] bridge0: topology change detected, propagating [ 342.772230][T13155] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 342.777772][T16955] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 342.777807][T16955] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 342.777832][T16955] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 342.777856][T16955] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 2] type 2 family 0 port 19999 - 0 [ 342.923507][T16955] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 342.923543][T16955] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 342.923568][T16955] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 342.923591][T16955] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 2] type 2 family 0 port 19999 - 0 [ 343.022030][T16955] netdevsim netdevsim1  (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 343.022065][T16955] netdevsim netdevsim1  (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.022097][T16955] netdevsim netdevsim1  (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 343.022120][T16955] netdevsim netdevsim1  (unregistering): unset [1, 2] type 2 family 0 port 19999 - 0 [ 344.659503][ T5625] Bluetooth: hci5: command tx timeout [ 345.333667][T17096] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 345.405025][T16955] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 345.586292][T16955] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 345.593736][T16955] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 345.629334][T16955] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 345.635050][T16955] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 345.655657][T16955] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 345.662125][T16955] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 345.677391][T16955] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 345.716356][T17146] netlink: 9 bytes leftover after parsing attributes in process `syz.0.2998'. [ 345.889742][T17161] netlink: 'syz.2.3000': attribute type 4 has an invalid length. [ 346.145657][T17171] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3002'. [ 346.164107][T17172] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3001'. [ 346.192704][T16955] 8021q: adding VLAN 0 to HW filter on device bond0 [ 346.228348][T17172] netlink: 'syz.2.3001': attribute type 39 has an invalid length. [ 346.238597][T17174] netlink: 2224 bytes leftover after parsing attributes in process `syz.4.3003'. [ 346.238621][T17174] netlink: 5748 bytes leftover after parsing attributes in process `syz.4.3003'. [ 346.254211][T16955] 8021q: adding VLAN 0 to HW filter on device team0 [ 346.286979][T13167] bridge0: port 1(bridge_slave_0) entered blocking state [ 346.287136][T13167] bridge0: port 1(bridge_slave_0) entered forwarding state [ 346.346170][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 346.346313][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 346.740025][ T5625] Bluetooth: hci5: command tx timeout [ 347.555671][T17216] bond12: Unable to set peer notification delay as MII monitoring is disabled [ 347.574991][T17216] bond12 (unregistering): Released all slaves [ 347.744573][T17215] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3009'. [ 347.785661][ C1] Dead loop on virtual device ip6_vti0 (net 38), fix it urgently! [ 347.982846][T17227] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 348.663474][T17240] netlink: 'syz.4.3016': attribute type 2 has an invalid length. [ 348.663494][T17240] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3016'. [ 348.688153][T17252] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3018'. [ 349.018899][T16955] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 349.026262][T17271] netlink: 112 bytes leftover after parsing attributes in process `syz.4.3022'. [ 349.057325][T17271] RDS: rds_bind could not find a transport for ::ffff:10.1.1.1, load rds_tcp or rds_rdma? [ 349.297023][T16955] veth0_vlan: entered promiscuous mode [ 349.397477][T16955] veth1_vlan: entered promiscuous mode [ 349.849693][ T5625] block nbd1: Receive control failed (result -32) [ 349.851385][ T5629] block nbd1: Receive control failed (result -32) [ 349.914392][T16955] veth0_macvtap: entered promiscuous mode [ 349.973597][T16955] veth1_macvtap: entered promiscuous mode [ 350.088366][T16955] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 350.132958][T16955] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 350.250700][T13167] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.299045][T13165] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.300978][ T116] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.301350][ T116] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.402159][T17313] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3028'. [ 350.767501][T13155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 350.767522][T13155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 350.889501][T13165] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 350.889523][T13165] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 351.377409][T17353] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 352.190365][ T5625] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 352.197026][ T5625] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 352.212900][ T5625] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 352.230797][ T5625] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 352.234859][ T5625] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 352.479854][T17381] netlink: 144 bytes leftover after parsing attributes in process `syz.3.3044'. [ 352.646622][T17385] netlink: 'syz.1.3046': attribute type 10 has an invalid length. [ 352.673721][T17385] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 352.695094][T17385] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 352.697421][T17388] nbd3: detected capacity change from 0 to 63 [ 352.698998][T17381] block nbd3: NBD_DISCONNECT [ 352.700512][T17381] block nbd3: Disconnected ** replaying previous printk message ** [ 352.700512][T17381] block nbd3: Disconnected due to user request. [ 352.700531][T17381] block nbd3: shutting down sockets [ 352.722219][ T2004] [ 352.740896][ T2004] ====================================================== [ 352.747914][ T2004] WARNING: possible circular locking dependency detected [ 352.754960][ T2004] syzkaller #0 Not tainted [ 352.759378][ T2004] ------------------------------------------------------ [ 352.766396][ T2004] kworker/0:1H/2004 is trying to acquire lock: [ 352.772552][ T2004] ffff88807b0e6868 (&nsock->tx_lock){+.+.}-{4:4}, at: nbd_queue_rq+0x373/0xff0 [ 352.781692][ T2004] [ 352.781692][ T2004] but task is already holding lock: [ 352.789057][ T2004] ffff888027b751f8 (&cmd->lock){+.+.}-{4:4}, at: nbd_queue_rq+0xc1/0xff0 [ 352.797505][ T2004] [ 352.797505][ T2004] which lock already depends on the new lock. [ 352.797505][ T2004] [ 352.807909][ T2004] [ 352.807909][ T2004] the existing dependency chain (in reverse order) is: [ 352.816922][ T2004] [ 352.816922][ T2004] -> #6 (&cmd->lock){+.+.}-{4:4}: [ 352.824141][ T2004] __mutex_lock+0x19d/0x1550 [ 352.829385][ T2004] nbd_queue_rq+0xc1/0xff0 [ 352.834333][ T2004] blk_mq_dispatch_rq_list+0x499/0x1990 [ 352.840516][ T2004] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 352.847487][ T2004] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 352.853992][ T2004] blk_mq_run_work_fn+0x16c/0x300 [ 352.859546][ T2004] process_scheduled_works+0xc3d/0x1630 [ 352.865665][ T2004] worker_thread+0xa47/0xfb0 [ 352.870778][ T2004] kthread+0x38b/0x480 [ 352.875373][ T2004] ret_from_fork+0x514/0xb70 [ 352.880517][ T2004] ret_from_fork_asm+0x1a/0x30 [ 352.885849][ T2004] [ 352.885849][ T2004] -> #5 (set->srcu){.+.+}-{0:0}: [ 352.893034][ T2004] __synchronize_srcu+0xc9/0x2f0 [ 352.898536][ T2004] elevator_switch+0x1e8/0x7b0 [ 352.903891][ T2004] elevator_change+0x2fa/0x480 [ 352.909170][ T2004] elevator_set_default+0x375/0x440 [ 352.914903][ T2004] blk_register_queue+0x3f3/0x4e0 [ 352.920548][ T2004] __add_disk+0x6b8/0xdb0 [ 352.925399][ T2004] add_disk_fwnode+0x100/0x3a0 [ 352.930693][ T2004] nbd_dev_add+0x733/0xb60 [ 352.935652][ T2004] nbd_init+0x168/0x1f0 [ 352.940461][ T2004] do_one_initcall+0x250/0x870 [ 352.945751][ T2004] do_initcall_level+0x10a/0x1a0 [ 352.951260][ T2004] do_initcalls+0x59/0xa0 [ 352.956117][ T2004] kernel_init_freeable+0x29d/0x3e0 [ 352.961832][ T2004] kernel_init+0x22/0x1d0 [ 352.966762][ T2004] ret_from_fork+0x514/0xb70 [ 352.971868][ T2004] ret_from_fork_asm+0x1a/0x30 [ 352.977151][ T2004] [ 352.977151][ T2004] -> #4 (&q->elevator_lock){+.+.}-{4:4}: [ 352.984976][ T2004] __mutex_lock+0x19d/0x1550 [ 352.990096][ T2004] elevator_change+0x1af/0x480 [ 352.995391][ T2004] elevator_set_none+0xb5/0x140 [ 353.000775][ T2004] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 353.007112][ T2004] nbd_start_device+0x189/0xb30 [ 353.012478][ T2004] nbd_genl_connect+0x167d/0x1cd0 [ 353.018017][ T2004] genl_family_rcv_msg_doit+0x233/0x340 [ 353.024245][ T2004] genl_rcv_msg+0x614/0x7a0 [ 353.029258][ T2004] netlink_rcv_skb+0x226/0x4a0 [ 353.034576][ T2004] genl_rcv+0x28/0x40 [ 353.039062][ T2004] netlink_unicast+0x7bd/0x940 [ 353.044345][ T2004] netlink_sendmsg+0x813/0xb40 [ 353.049620][ T2004] sock_sendmsg_nosec+0x13a/0x180 [ 353.055220][ T2004] ____sys_sendmsg+0x54e/0x850 [ 353.060492][ T2004] ___sys_sendmsg+0x2a5/0x360 [ 353.065678][ T2004] __x64_sys_sendmsg+0x1b1/0x290 [ 353.071124][ T2004] do_syscall_64+0x166/0x520 [ 353.076281][ T2004] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 353.082696][ T2004] [ 353.082696][ T2004] -> #3 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 353.091297][ T2004] blk_alloc_queue+0x544/0x690 [ 353.096593][ T2004] __blk_mq_alloc_disk+0x194/0x390 [ 353.102212][ T2004] nbd_dev_add+0x494/0xb60 [ 353.107136][ T2004] nbd_init+0x168/0x1f0 [ 353.111797][ T2004] do_one_initcall+0x250/0x870 [ 353.117075][ T2004] do_initcall_level+0x10a/0x1a0 [ 353.122523][ T2004] do_initcalls+0x59/0xa0 [ 353.127364][ T2004] kernel_init_freeable+0x29d/0x3e0 [ 353.133074][ T2004] kernel_init+0x22/0x1d0 [ 353.137948][ T2004] ret_from_fork+0x514/0xb70 [ 353.143044][ T2004] ret_from_fork_asm+0x1a/0x30 [ 353.148318][ T2004] [ 353.148318][ T2004] -> #2 (fs_reclaim){+.+.}-{0:0}: [ 353.155511][ T2004] fs_reclaim_acquire+0x71/0x100 [ 353.161000][ T2004] __kmalloc_cache_noprof+0x61/0x600 [ 353.166790][ T2004] tls_set_sw_offload+0x13a/0x1770 [ 353.172492][ T2004] tls_setsockopt+0x1071/0x1710 [ 353.177893][ T2004] do_sock_setsockopt+0x17c/0x1b0 [ 353.183427][ T2004] __x64_sys_setsockopt+0x13d/0x1b0 [ 353.189134][ T2004] do_syscall_64+0x166/0x520 [ 353.194232][ T2004] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 353.200701][ T2004] [ 353.200701][ T2004] -> #1 (sk_lock-AF_INET6-NBD){+.+.}-{0:0}: [ 353.208766][ T2004] lock_sock_nested+0x41/0x100 [ 353.214107][ T2004] inet_shutdown+0x6a/0x390 [ 353.219191][ T2004] nbd_mark_nsock_dead+0x2cb/0x550 [ 353.224812][ T2004] recv_work+0x1cee/0x1e10 [ 353.229739][ T2004] process_scheduled_works+0xc3d/0x1630 [ 353.235795][ T2004] worker_thread+0xa47/0xfb0 [ 353.240893][ T2004] kthread+0x38b/0x480 [ 353.245464][ T2004] ret_from_fork+0x514/0xb70 [ 353.250555][ T2004] ret_from_fork_asm+0x1a/0x30 [ 353.255831][ T2004] [ 353.255831][ T2004] -> #0 (&nsock->tx_lock){+.+.}-{4:4}: [ 353.263457][ T2004] __lock_acquire+0x164c/0x2de0 [ 353.268838][ T2004] lock_acquire+0x115/0x350 [ 353.273846][ T2004] __mutex_lock+0x19d/0x1550 [ 353.278942][ T2004] nbd_queue_rq+0x373/0xff0 [ 353.283949][ T2004] blk_mq_dispatch_rq_list+0x499/0x1990 [ 353.289999][ T2004] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 353.296831][ T2004] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 353.303322][ T2004] blk_mq_run_work_fn+0x16c/0x300 [ 353.308852][ T2004] process_scheduled_works+0xc3d/0x1630 [ 353.314906][ T2004] worker_thread+0xa47/0xfb0 [ 353.320001][ T2004] kthread+0x38b/0x480 [ 353.324573][ T2004] ret_from_fork+0x514/0xb70 [ 353.329675][ T2004] ret_from_fork_asm+0x1a/0x30 [ 353.334973][ T2004] [ 353.334973][ T2004] other info that might help us debug this: [ 353.334973][ T2004] [ 353.345181][ T2004] Chain exists of: [ 353.345181][ T2004] &nsock->tx_lock --> set->srcu --> &cmd->lock [ 353.345181][ T2004] [ 353.357243][ T2004] Possible unsafe locking scenario: [ 353.357243][ T2004] [ 353.364673][ T2004] CPU0 CPU1 [ 353.370022][ T2004] ---- ---- [ 353.375367][ T2004] lock(&cmd->lock); [ 353.379344][ T2004] lock(set->srcu); [ 353.385743][ T2004] lock(&cmd->lock); [ 353.392231][ T2004] lock(&nsock->tx_lock); [ 353.396630][ T2004] [ 353.396630][ T2004] *** DEADLOCK *** [ 353.396630][ T2004] [ 353.404749][ T2004] locks held by kworker/0:1H/2004: 4, last CPU#0: [ 353.411141][ T2004] #0: ffff88801f68e140 ((wq_completion)kblockd){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 353.422177][ T2004] #1: ffffc9000695fc40 ((work_completion)(&(&hctx->run_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 353.435037][ T2004] #2: ffff888021b1da18 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_work_fn+0x144/0x300 [ 353.444430][ T2004] #3: ffff888027b751f8 (&cmd->lock){+.+.}-{4:4}, at: nbd_queue_rq+0xc1/0xff0 [ 353.453290][ T2004] [ 353.453290][ T2004] stack backtrace: [ 353.459161][ T2004] CPU: 0 UID: 0 PID: 2004 Comm: kworker/0:1H Not tainted syzkaller #0 PREEMPT(full) [ 353.468600][ T2004] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 353.478638][ T2004] Workqueue: kblockd blk_mq_run_work_fn [ 353.484188][ T2004] Call Trace: [ 353.487451][ T2004] [ 353.490364][ T2004] dump_stack_lvl+0xe8/0x150 [ 353.494943][ T2004] print_circular_bug+0x2e2/0x300 [ 353.499976][ T2004] check_noncircular+0x12f/0x150 [ 353.504904][ T2004] __lock_acquire+0x164c/0x2de0 [ 353.509750][ T2004] lock_acquire+0x115/0x350 [ 353.514235][ T2004] ? nbd_queue_rq+0x373/0xff0 [ 353.518904][ T2004] __mutex_lock+0x19d/0x1550 [ 353.523486][ T2004] ? nbd_queue_rq+0x373/0xff0 [ 353.528149][ T2004] ? ret_from_fork_asm+0x1a/0x30 [ 353.533079][ T2004] ? unwind_next_frame+0x8f/0x2550 [ 353.538219][ T2004] ? nbd_queue_rq+0x373/0xff0 [ 353.542880][ T2004] ? __pfx___mutex_lock+0x10/0x10 [ 353.547892][ T2004] ? ret_from_fork_asm+0x1a/0x30 [ 353.552821][ T2004] ? stack_trace_save+0xa9/0x100 [ 353.557742][ T2004] ? __pfx_stack_trace_save+0x10/0x10 [ 353.563164][ T2004] nbd_queue_rq+0x373/0xff0 [ 353.567685][ T2004] ? __lock_acquire+0x1511/0x2de0 [ 353.572713][ T2004] ? __pfx_nbd_queue_rq+0x10/0x10 [ 353.577726][ T2004] ? irqentry_exit+0x218/0x910 [ 353.582495][ T2004] ? lockdep_hardirqs_on+0x7b/0x110 [ 353.587688][ T2004] ? irqentry_exit+0x218/0x910 [ 353.592441][ T2004] blk_mq_dispatch_rq_list+0x499/0x1990 [ 353.597979][ T2004] ? sbitmap_get+0x229/0x390 [ 353.602673][ T2004] ? __pfx_blk_mq_dispatch_rq_list+0x10/0x10 [ 353.608637][ T2004] ? __blk_mq_alloc_driver_tag+0x2e7/0x6e0 [ 353.614432][ T2004] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 353.620753][ T2004] ? __pfx___blk_mq_sched_dispatch_requests+0x10/0x10 [ 353.627509][ T2004] ? lock_acquire+0x115/0x350 [ 353.632178][ T2004] ? process_scheduled_works+0x97a/0x1630 [ 353.637893][ T2004] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 353.643862][ T2004] ? blk_mq_run_work_fn+0x144/0x300 [ 353.649048][ T2004] blk_mq_run_work_fn+0x16c/0x300 [ 353.654072][ T2004] ? process_scheduled_works+0x97a/0x1630 [ 353.659782][ T2004] process_scheduled_works+0xc3d/0x1630 [ 353.665329][ T2004] ? __pfx_process_scheduled_works+0x10/0x10 [ 353.671297][ T2004] ? assign_work+0x3cf/0x5d0 [ 353.675877][ T2004] worker_thread+0xa47/0xfb0 [ 353.680461][ T2004] ? __kthread_parkme+0x71/0x1f0 [ 353.685393][ T2004] kthread+0x38b/0x480 [ 353.689445][ T2004] ? __pfx_worker_thread+0x10/0x10 [ 353.694545][ T2004] ? __pfx_kthread+0x10/0x10 [ 353.699159][ T2004] ret_from_fork+0x514/0xb70 [ 353.703731][ T2004] ? __pfx_ret_from_fork+0x10/0x10 [ 353.708821][ T2004] ? __switch_to+0xc89/0x1420 [ 353.713527][ T2004] ? __pfx_kthread+0x10/0x10 [ 353.718102][ T2004] ret_from_fork_asm+0x1a/0x30 [ 353.722863][ T2004] [ 353.740764][ T2004] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 353.740799][ T2004] Buffer I/O error on dev nbd3, logical block 0, async page read [ 353.770117][T17385] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 353.782594][T17385] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 353.804538][T17385] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 353.807924][T17385] bond0 (unregistering): Released all slaves [ 353.809015][T17395] vcan0: tx drop: invalid sa for name 0x0000000000000003 [ 353.835789][ T4108] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 3 prio class 2 [ 353.835823][ T4108] Buffer I/O error on dev nbd3, logical block 1, async page read [ 353.835838][ T4108] Buffer I/O error on dev nbd3, logical block 2, async page read [ 353.835851][ T4108] Buffer I/O error on dev nbd3, logical block 3, async page read [ 353.851064][T17392] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3047'. [ 353.908038][ T4108] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 353.908074][ T4108] Buffer I/O error on dev nbd3, logical block 0, async page read [ 353.908088][ T4108] Buffer I/O error on dev nbd3, logical block 1, async page read [ 353.908100][ T4108] Buffer I/O error on dev nbd3, logical block 2, async page read [ 353.908111][ T4108] Buffer I/O error on dev nbd3, logical block 3, async page read [ 353.908263][ T4108] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 353.908283][ T4108] Buffer I/O error on dev nbd3, logical block 0, async page read [ 353.908294][ T4108] Buffer I/O error on dev nbd3, logical block 1, async page read [ 353.908390][ T4108] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 353.908503][ T4108] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 353.908872][ T4108] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 353.908998][ T4108] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 353.909163][ T4108] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 353.909226][T13277] ldm_validate_partition_table(): Disk read failed. [ 353.909325][ T4108] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 353.909633][T13277] Dev nbd3: unable to read RDB block 0 [ 353.947291][T13277] nbd3: unable to read partition table [ 353.987142][T13277] ldm_validate_partition_table(): Disk read failed. [ 353.987888][T13277] Dev nbd3: unable to read RDB block 0 [ 353.988319][T13277] nbd3: unable to read partition table [ 354.312656][T17374] C speed is unknown, defaulting to 1000 [ 354.313478][T17374] wg0 speed is unknown, defaulting to 1000 [ 354.340531][ T5629] Bluetooth: hci0: command tx timeout [ 354.615728][T17374] bridge0: port 1(bridge_slave_0) entered blocking state [ 354.615989][T17374] bridge0: port 1(bridge_slave_0) entered disabled state [ 354.616211][T17374] bridge_slave_0: entered allmulticast mode [ 354.616968][T17374] bridge_slave_0: entered promiscuous mode [ 354.646691][T17374] bridge0: port 2(bridge_slave_1) entered blocking state [ 354.646941][T17374] bridge0: port 2(bridge_slave_1) entered disabled state [ 354.647086][T17374] bridge_slave_1: entered allmulticast mode [ 354.647920][T17374] bridge_slave_1: entered promiscuous mode [ 354.706231][T17374] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 354.721199][T17374] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 354.761104][T17374] team0: Port device team_slave_0 added [ 354.764404][T17374] team0: Port device team_slave_1 added [ 354.790756][T17374] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 354.790773][T17374] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 354.790796][T17374] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 354.791938][T17374] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 354.791950][T17374] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 354.791973][T17374] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 354.819030][T17374] hsr_slave_0: entered promiscuous mode [ 354.819762][T17374] hsr_slave_1: entered promiscuous mode [ 354.820193][T17374] debugfs: 'hsr0' already exists in 'hsr' [ 354.820207][T17374] Cannot create hsr debugfs directory [ 354.975845][T17374] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 354.975879][T17374] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 354.975904][T17374] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.975927][T17374] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 355.034978][T17374] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 355.035018][T17374] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 355.035042][T17374] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.035066][T17374] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 355.108441][T17374] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 355.108474][T17374] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 355.108497][T17374] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.108520][T17374] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 355.184602][T17374] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 355.184635][T17374] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 355.184659][T17374] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.184682][T17374] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 355.285653][T17374] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 355.291372][T17374] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 355.292127][T17374] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 355.297717][T17374] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 355.298498][T17374] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 355.304488][T17374] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 355.305250][T17374] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 355.311944][T17374] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 355.388169][T17374] 8021q: adding VLAN 0 to HW filter on device bond0 [ 355.400255][T17374] 8021q: adding VLAN 0 to HW filter on device team0 [ 355.404670][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 355.404736][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 355.411815][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 355.411879][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 355.752540][T17374] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 355.794786][T17374] veth0_vlan: entered promiscuous mode [ 355.800377][T17374] veth1_vlan: entered promiscuous mode [ 355.822912][T17374] veth0_macvtap: entered promiscuous mode [ 355.826101][T17374] veth1_macvtap: entered promiscuous mode [ 355.837823][T17374] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 355.843392][T17374] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 355.882460][T13167] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.885403][ T1008] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.885455][ T1008] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.885484][ T1008] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.887429][T17374] ieee80211 phy33: Selected rate control algorithm 'minstrel_ht' [ 355.909509][T13167] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 355.909530][T13167] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 355.914733][T17374] ieee80211 phy34: Selected rate control algorithm 'minstrel_ht' [ 355.936388][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 355.936407][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 356.419029][ T5629] Bluetooth: hci0: command tx timeout [ 358.499585][ T5629] Bluetooth: hci0: command tx timeout [ 360.580285][ T5629] Bluetooth: hci0: command tx timeout