last executing test programs: 2.094002601s ago: executing program 4 (id=892): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0xa, 0xa, 0x101, 0x0, 0x0, {}, [@NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x24}]}, 0x1c}, 0x1, 0x0, 0xa6ffffff, 0x400000c0}, 0x880) 1.874881966s ago: executing program 4 (id=896): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@mcast2, 0x10011, 0x1, 0x2, 0x2, 0xc}, 0x20) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) ioctl(r2, 0x8b32, &(0x7f0000000040)) ioctl$TUNSETLINK(r1, 0x400454cd, 0x7) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="d8000000180081064e81f782db4cb904021d0820fe067c05e8fe55a10a0005000140020003600e41b0000900ac0006fc1100000016000500014002000000035c3b61c1d67f6f94007174cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001b14d6d930dfe1d9d322fe7c4650b5b9bd6ee6f63f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b4ff010000000000000dd6e4edef3d93452a09004b43370e9703920723f97e46bb5c07540d3b", 0xd8}], 0x1}, 0x0) r4 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)='ns/pid_for_children\x00') r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000005c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010028bd7000010000000f000000080034000800030008000300", @ANYRES32=r7, @ANYBLOB="050033"], 0x2c}, 0x1, 0x0, 0x0, 0x24004040}, 0x80) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000100)) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)) ioctl$NS_GET_OWNER_UID(r4, 0xb704, 0x0) r8 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), 0xffffffffffffffff) 1.799900266s ago: executing program 3 (id=898): socket$unix(0x1, 0x5, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r2, 0x65, 0x2, &(0x7f0000000100)=0x5, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000180)={'vxcan1\x00', 0x0}) bind$can_raw(r2, &(0x7f0000000000)={0x1d, r3}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x21dfdbfb, {0x0, 0x0, 0x0, r3, {0x1, 0x6}, {0xffff, 0xb}, {0xc}}}, 0x24}}, 0x40) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x58}}, 0x0) 1.726844886s ago: executing program 2 (id=899): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x503, 0xfffffffe, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}}, 0x0) 1.440271897s ago: executing program 2 (id=901): r0 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 64) r1 = socket$inet_udplite(0x2, 0x2, 0x88) (async, rerun: 64) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r2, r3, 0x26, 0x0, @void}, 0x10) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], 0x0}, 0x94) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x2}, 0x94) (async) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000001100)={0x0, 0x0}, 0x8) r6 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000040)=r5, 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000440)={r6, r4}, 0xc) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="3400000013000500020000000200000007000000", @ANYRES32=r7, @ANYBLOB="004002000000000014001a80100005800c000280080001"], 0x34}}, 0x0) (async) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@newsa={0x150, 0x10, 0x713, 0x0, 0x0, {{@in=@loopback, @in=@multicast1}, {@in=@broadcast, 0x0, 0x33}, @in6=@loopback, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth={0x60, 0x1, {{'xcbc(aes)\x00'}, 0xc0, "008e948fe8a078aed61eafdf6c3ac48365183721a85750f1"}}]}, 0x150}}, 0x0) (async) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=ANY=[@ANYBLOB="600000000206010100000000000000000000000005000100070000000900020073797a300000e9ff1300078005001500fc000000080012400000000014000300686173683a69702c706f72742c69700005400500020000000500040000000000"], 0x60}}, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r10 = socket$nl_route(0x10, 0x3, 0x0) (async) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x14, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000ff7f00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000018010000252073250000000000202020"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r7, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000006d0001000000000000000000003c0000", @ANYRESHEX=r11, @ANYBLOB="0000000000000000180034801400"], 0x38}}, 0x0) (async, rerun: 64) r12 = accept4$ax25(0xffffffffffffffff, &(0x7f00000000c0)={{}, [@netrom, @rose, @remote, @default, @rose, @bcast, @null, @bcast]}, &(0x7f0000000140)=0x48, 0x0) (rerun: 64) ioctl$SIOCAX25NOUID(r12, 0x89e3, &(0x7f0000000280)=0x1) 1.350841235s ago: executing program 0 (id=902): bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x10, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x10, 0x48}, [@ldst={0x3, 0x0, 0x3, 0xa, 0x0, 0xfffffffffffffff8}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x8, 0xc3, &(0x7f0000000400)=""/198, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffff52}, 0x37) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x1a}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) (async) r0 = accept4$x25(0xffffffffffffffff, &(0x7f0000000000)={0x9, @remote}, &(0x7f00000000c0)=0x12, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vxcan1\x00'}) (async) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)="d80000001c0081044e81f782db44b9040a1d080214000000020003a118000c000300000000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000fdbccf137789dd5e3df5fc6047a353000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x400d0) 1.269568917s ago: executing program 1 (id=903): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'dummy0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x24, 0x25, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0x4, 0xffff}}}, 0x24}}, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x7, 0xb, &(0x7f0000000200)=@framed={{}, [@printk={@ld, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x19}}]}, &(0x7f0000000440)='syzkaller\x00'}, 0x90) (async) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) (async) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000940)=ANY=[@ANYBLOB="4400000011002901800000000000000007000000", @ANYRES32=r3, @ANYBLOB="00000000000000001c001a800800028004000500080000003e"], 0x44}}, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0xd, 0x9, &(0x7f00000000c0)=ANY=[@ANYBLOB="3808000000000000000000000000000085100000050000008500000088000000a700000000000000180000000100000000000000008994c07671ea0095000000000000009500000000000000"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x34}, 0x94) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0x6}) (async) ioctl(r5, 0x8b22, &(0x7f0000000040)) r6 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000180)=@hci={0x1f, 0x0, 0x3}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000200)="27050200340f14000600002fb96dbcf7060645f491bdd54ec5ff1144ee162fd4b8bf7256d882f600102c21880b000000000100405700000006000040000000000b60400df1d884bf37663919573c0942d9037dcb0544088c6db48f1b61ae6070dea1cce492889fafc85ce72b92ea239e355d17f66c7855946a12aa68ac359b6066fb212f6aab908c5d81908ac606ec87fa24ebd6abd3a394f085c22eff454d7773", 0xa1}, {&(0x7f00000002c0)="1c393502dda1a67d93b1ceccbe972c4fef9c33ecf2d824f3a33513f45f807ee4636aad1b45472bbdc8e3a2275f2587f0da0b3ae419bed996116448f90d113ce98aa985f379d729430858f5cb9a668a1800bf2354b33cdff83033de518580a3080d7f4cc2406e071138439e1566dd17983ee153ab672f362d3292e24a9952f18ec3d8b37bb3391096c1d4442a754899299321c03cbcfb98a26994b2a072c2b9d9c70d618145e5f61b050e40166d2ff57dcc008f24fd5339e7bc21e25863f80d2487c30b6bf781608a31d68e9319ab1712d8f5bdde849c040417c864cbfd3923dcb9fc6bdc2ea53334184b03efcb631dc68f0a7b6e13b80d4237120e32932ca4e2b50bad0a35496d36a191d91f03b477b9587bc0ba489932e34f819fa1524ebad53a3d94b46c6aeff4f421a067729fbb2862c09d337a75e0c8429d4bfe0dee2e1e23e8c22787178600ecca135623731e4701f35bd4e7c936a8ee27010000002328a5aba1161b05889b045696721c79bff0547efe051f3c5de77fdd3c77afd41a1a7747a982b7efb0d6bac7d3ad1f9b7c3a5a1448b35696f03bca1c875e346edc55b7a271c3e5f3c0df72c8e4d7cccfa2e9b598f0ae06efbc1a5d5bd91aed6b32deccf7755cef50fab72633c802533b9d94f17f9be978f2514c47671575ee528fbdddc6194328e605e4d10e293756d20eb8a545f2bfe48df5d1d98a270458392a0a57647dcb8ee005e78877a072d12d0429b9b9957a695c3289b4a59469691115e6ba204181708b9d1ae47418ed594b8128f20c100f5485a84e60d73ab818da73fab78caf42afd1f89cdb29dfdd6676c55ea00d35321bc4878170c62b056b4e03ae556ac804026cabcbc8e79e7a18f2f56442cd650aa2bc88f62ebb65bfafd3e5b4c62ac2e720ff0fdf03c46889df55ff91058319c953f90cd6e7f7b15d56a58ff6128357510c4c618aa25434881d58c39092969ba1f7c444465f16d1f2561991e357bda928f2a50422f774f318fb41169a0d0324a8efd19b940a17c28cda06b750cd02155dbdbd1dc695e190a997ae8f4bb8766983d8db8678a78ae8f044b868549e9c60f7ce25a36300ce07f306e75d285e914b3aec703969df969b81bcd3732736dd99fcab1944c751f8ef4c34cbb86d5f27ef9982be245949d5579b540750d1eac428b0cd2541295b577573b27e9ecac3934987e85b44bc85e6e307cf6f5683bf1c817369d556a368bc5560a1737aa2bec3cac4689e04fbe851ed4b6c1a355950522f8918af3855fe97ec285da15a20e8119483e7419fa2b0639d5add10b396a8033ec2b98d9a9fca3fc4202d0a6bcfa55798eacafa4c8efafb73a2ab89bb58b0c20364a6ad9c233dfb1bdbb87b8f91e3ab9790e876f906107183419aa7480e327388c01dc5f2d5bcb8a7565cddc4e1275741116416b66bf3adf9e7e31c3fc518740446ed2a394e7699baf9408c62b4c0e7a11dec8f4a67e78a3f00bedae9f55f36c52a1fd4ee3a8be7285f9ca898ee63d3718a7c4603bcb9a24537b34a41a6c0eee4cc609b014d3f4fb928aa7e3fa7a4f97dcef5c0e526b650284ffeda82f603ed9ea1eb6627d29d8bcd6c7e6fe128b1c4463b2cfe50c0ff9a46090635dde4b4d4a984e5a9088fa4d27b219628be8cdba7004d00985a73fb5b0b4b0f96844e73a8ff7884bdee1a0d6e62decfeebfb56351c135e6580fd61ea806ee553b8a4a04d44aa52645320cb73fe0c5f14a971d3b3f64c85f5ebaab5e1a061f5186050230286331048e43368e45cfc88e8f4d0d3b1b86b64d5394bc68c2b754389b3c18a45c1edb0496dd88cb3113bbdf1a0f127eb8cd52caf8da95b83d0decad3775b2f2e43776d0d32d447cdd0b267b32775e3473f51a233f8c91a4c07ad669da1844f3d9554f399d43ca1eda29c5c761b3936f845f0c4d1c090000004b5ab3291e06cd86de6116fc3236a11343d6f4ad02199717054ac15b0d0000000000007bd4bea33c0ca36e2c4209026849de21c1da1057f353cc824947d75119e4501b98cb9e621d0644e3f4a75353093557afcee7da41ad368fe1cbb426922772b9b262a861fbce9ae86d6e8c5a8de6a1e8f03456c0a354277a2f3ff46a62b6d6cdee4febf23e2350f94b47a05a4d0e7da37a2e97b899d92ca1f3bd1cded5588593e8bb99b9dce0731fa1174de14b63be2bf7e424f870551f213fab437aac092c2e9798959fa3616465e2b36fd49cc9af902d47debec02558c036ed991f1a3895b37cd70f3c405cca362c885542fd976e73be4cf7580a0c4d5a9527c77c189573e3be07ed15472f6b012939abb5be9f3e8a5b720307fb2dbca48b35d121702cfb6b3690559b08fbeb77d53d37582d7f44fe269ac51665632bf070cfc7445741b70306cb3f19b7fbecd19a78092dfd086a0da019734d95660ba4e5ce5bcf25f09403c32e3ec902f3717cca0eca25e791c2b8c2b8988645afa2446d5218abce136c0dbbafb95e4f4727a29cc567b3f73d5dbc1aeee746653a7f5c445add24a9c1b67d1bfeec85d2a6478e80c3acdb9439aa46c8cf14a98ffa89790ef7a94b3146088566812e28ccbafb466772b7fbb98dcf1e792eb6d0de0829c3c49c5ecdeea3e80017324a0fe724565c4e7a242764e9012442cae44b57c7121889c044be05b5eca70efb649bb528e751f072af93ae2c5053fdce196cce158136f904cf64f2cb8becc2d024f5ec32a38d78b87a4dfe7c53769dadef890efd160eb662cedb18a756aed83edfb9efbbb3648eb399e61f80077e64b95eae9d17083aed05cfc2e148621e36be1f41d373c721a11804fce269c688b0c647d6e1083e336d1f7f90a7a080a83397773cc351531070af5c1a1418f28dce95c01052a314a9ebe39cb9cddb8e7855e58c4a636b7f6250ecad312ede18664c03d92e330935295a35ea3e0306f25ca971300f782ae2f6e79a513732d22ef9b9bc41d17df3352a855cdd19b18f5abd6e6420f4f42f01750a64f6acdb6b46622fafebe3e913c64a1a6a59f980e97deae0dc83c12ccae6b430d7a28f21c3e0e38b32f3d5f1d44927fc34ed5c9ddb5be8eb936dbdcd327b63ea69d86c2da15cb834a18ee51a44f2da7b11d79486942fd04eade92fe5d93342970ca4cc73861b15facf97e9c53c15488c5630b17b9364c58652cfa6de0918327498ba8d6120d3be9139c51a6e9017525772397529ddd4fd1905614fd1cc7f1370a577ad10ec9ea742f9aedc9fee42c3df38f4b35ccb1cf8590eaf770b3f74af21f5119ac238e82e92c83321b06f106530abbbd321c3e1dc948accdc21a586ff37253ad1d0c5bfb51541f876be1b6e4f490046204b9edfe9a9721b9019a495d1efed10d4570f4c75ac56aa862f738b46cfe8899f6d92e862611b35be8931a2460dc646ed332b3046baf48613bbb543f4abda22d3d62a484665ba5bbf8fec1bb199b430a6e96cfad417a1644cc5f7f640004836c60f15a174eb7eb1750a71a141549f393c7d88b8729a33f841f7f8f2bd03dccaaa825f2e29105f6b4c11ac8e06bb3be9dfdecce66294a0be9dbc5f40123644fcac59ed0c968eb62fb14d111e900ad1c038f17d5471ab088f704de7db35753f818f55669a76e621b29d975253d177791e1434644a81b2b8bc4c8e147961b4f1b7f3e225571fecb10906957791b27d35a89e3ce84c91a2dc60aee44bd8f41eb7b5e171516ef34d8c7dbbc8122cdeffa51b5a393d2cae7f69826d342d4d81b58ca7ddb0e688a15b39a00ef1aed5db337d1ab87e86f835663a4968c8bf5afd7cf80549f42588d9b8ea04ff3d9eac2b8ffd1155a504230103a68bd8b3c416a10d76cee236442a68393896587bc66c01a5f7f411325578d023d7619a89d0bcbbacae99b925fb72994e1ef4240cddad2294a56bec6d6243b95b04345c215bd48a3aa89786ba39b40101015d8bd038c32a7b0eb02a4eb5a640371d9b4af540eb99a1e26547cc214da21e9538754a802972411a0bf416707b95457d0b77daac9bdf27a82b9aa7992ad1d3815f9a56a746eefa6f7e1913b6e3e859b2cc7797adcae825b7aad17c11e66597042c327a6473489a9664c5ce0ff8b1ecfb691daa0bd50c17f4597826553686bc2e6f52585ffdfae76e26691699141a698e5b517e02130587ee503c7b5f638cbf32166b0d4ebe9222b6c9d50fb3db9d1ab060c31aabeef52cd51e5cf485eecc741e37a47c4996068f1d4b25f182b9d7bee4bec5cb070d3cea2f9762a41bb8d9ec5896ebcb2b17ca82f29bcce456412d8ed531afda40d259fcb7794216b6a9a873b6c3c4493c0c6d3e6a4f81f3b40dcc745a4e2383c678c472b1d5bf3ff02992bfe893a5bc96824039da1ee3cf8593e7d616d62f6e3c3e2c4e0cc58d5445998cf5b1c91c2468b2571b118709668efbbe72911f1bfa96b97c32f71cd7071f4c729e88631a89b53dd4bae6ef9c4ed082916e267479195599e9871b26b92c6885ded29f990070fddc4d8535088ddc70d6e83f797b6fa2260a92602eb90800000001cb7394f0c90fb5913b2f8d8d24c8f1056920e1facbe643dd49d8983b277da7282a986c28d5468aed9a4730579a20346d35f78b6bd2cacb4b9237fbfb0b7a2314105ff3b074a0e340b904e715e99c501e1435c15eaa262893c2883c90f26d2ff91792d46e4d867b62570e0c1e4739b8ac4fff8f778960de1ae40d4c85c51e1c47040bb2caeaf0c71dbb67c30715b8c14d6921831d7678522eeed29444df421ee206ca3be20d1b5fd2d2baf832f097fef590290eea77f8f3ed00b39841421b61f1c0d01def54bec0348be2216a8dad60838f3ad3595a744edeb6202dbcbd9c73a126a79cbefa43c7db0493103c2aa8fecb5cde1773ad0cdd03f5b0cfb02706420be6fccad116e9140501df48cdbf725611b398eb2b9e93f8da49e601099e0b2e880a95525b5f3f2edd74ae9d664ab61634ab53a1e2f3bf56add0a7f09c16853814b03a4212b9a0119420948da26bb171b288a66a2f0a4063754c2910512aa1cead69b94b498b5d4c44ce0a4aaa7855ee1a3b7ca738756a00a435062ccb86a40cc01f666d372f323e087ef5db2bc2d17ed1f72db14c52ca6723ce92ada6ff0c4f498d42d4218a9f799a216facb7377a1532e0755b894bfc0ee99a4072ac54ee5727846631574f348bf650e7d54b0ef3a1b5cc8233e660a2f10800001f6c23e08ff0ddb488b95504fc42508449b8fdd70afb387016e8c9206482c334f37d26fa3bdb6063f8147db9363e22c4b43b89ba0f68d06641fc1eb74fec0be4f59a17b274e0db67b2c0398250da219c9caf7e0f6cb1f828b6f89a67c8cfd0fe0132bd94", 0xeba}], 0x2}, 0x8010) (async) r7 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) 1.147314007s ago: executing program 3 (id=904): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x804) 1.090950588s ago: executing program 2 (id=905): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x12) writev(r1, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80043f679a10ff3d425f9cc3f4ff7f4e32f61bcdf1e422000000000100804824cabecc4b381eaadc28f23457e792945f64009400050028925aaa000000c600000000000000feff2c707f8f00ff", 0x58}], 0x1) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)=ANY=[@ANYRES8=r0], 0x114}], 0x1}, 0x4004000) 1.090460038s ago: executing program 0 (id=906): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000000b00010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0xffffffff, {0x5}}, [@NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x20008000) 1.07564289s ago: executing program 4 (id=907): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=@setlink={0x28, 0x13, 0x1, 0x400000, 0x0, {0x0, 0x0, 0x0, r2, 0x0, 0x6c90}, [@IFLA_MASTER={0x8, 0xa, r2}]}, 0x28}, 0x1, 0x0, 0x0, 0xc0}, 0x40000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r3) sendmsg$NL80211_CMD_GET_COALESCE(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800df00", @ANYRES16=r4, @ANYBLOB="010029bd7000fedbdf256400000008000100000000000c0099000500000008000000"], 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) 1.009383096s ago: executing program 1 (id=908): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x10, 0x0, 0xfe, 0x4, 0x0, 0x1, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) 938.904125ms ago: executing program 3 (id=909): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x48001}, 0x0) 938.697625ms ago: executing program 4 (id=910): sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6(0xa, 0x2, 0x3a) sendto$inet6(r0, &(0x7f0000000080)="80", 0x1, 0xfa068fc268af028d, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x6, 0xe8c}, 0x10) socketpair$unix(0x1, 0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b7"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{}, &(0x7f0000000080), &(0x7f0000000240)=r1}, 0x20) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)={0x1c, 0x1, 0x1, 0x301, 0x0, 0x0, {0x0, 0x0, 0x5}, [@CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008004}, 0x8000) socket$nl_netfilter(0x10, 0x3, 0xc) openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x141140, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) close(0xffffffffffffffff) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x24}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000019800)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) 905.083259ms ago: executing program 2 (id=911): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x11, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}}, 0x0) 797.262444ms ago: executing program 1 (id=912): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) (async) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r2, 0x5}, 0x10) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000440), 0x60800, 0x0) (async, rerun: 32) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 32) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000100), 0x6a) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) (async, rerun: 64) r6 = socket$key(0xf, 0x3, 0x2) (rerun: 64) sendmsg$key(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)={0x2, 0xe, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, @sadb_address={0x3, 0x6}, @sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@mcast2, @in=@empty}}]}, 0x80}}, 0x0) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r5, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000280)={'ip_vti0\x00', &(0x7f00000004c0)={'tunl0\x00', 0x0, 0x80, 0x8, 0x4, 0x8, {{0x2e, 0x4, 0x1, 0x17, 0xb8, 0x65, 0x0, 0x0, 0x4, 0x0, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@cipso={0x86, 0x25, 0x3, [{0x6, 0xa, "85c155e0200a0693"}, {0x5, 0x3, "a2"}, {0x2, 0x12, "47bf96dcd268b08bbe9617d9676056ab"}]}, @timestamp={0x44, 0x28, 0xcd, 0x0, 0x6, [0xffffffff, 0x5, 0x4, 0x5, 0x5, 0x0, 0xffffffff, 0x4ae, 0x2]}, @timestamp_addr={0x44, 0xc, 0x41, 0x1, 0x0, [{@remote, 0x80000001}]}, @rr={0x7, 0x13, 0xf6, [@broadcast, @multicast2, @local, @dev={0xac, 0x14, 0x14, 0x18}]}, @rr={0x7, 0x1b, 0xd7, [@initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa, @local, @rand_addr=0x64010101, @private=0xa010102, @multicast2]}, @noop, @noop, @generic={0x7, 0x5, "38db56"}, @timestamp_prespec={0x44, 0x14, 0x77, 0x3, 0x1, [{@empty, 0x9}, {@private=0xa010100, 0xf235}]}, @end]}}}}}) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1f, 0x63f0, 0x4, 0xd6d, 0x1000, r1, 0x8, '\x00', r7, r5, 0x4, 0x3, 0x4}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r1}, &(0x7f0000000140), &(0x7f0000000180)=r0}, 0x20) (async) socket$alg(0x26, 0x5, 0x0) (async) close(r2) 796.736076ms ago: executing program 3 (id=913): r0 = socket$alg(0x26, 0x5, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r2, 0x84, 0x7, 0x0, &(0x7f00000000c0)) bind$alg(r0, &(0x7f0000000380)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha256\x00'}, 0x58) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000300)={'ip6_vti0\x00', &(0x7f0000000280)={'ip6gre0\x00', 0x0, 0x4, 0x5, 0x3b, 0x8f, 0x8, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x60, 0x1, 0x80000001, 0xffff2e8d}}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'ip6_vti0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000000080)=@getchain={0x24, 0x66, 0x301, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0x1}}}, 0x24}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'vxcan1\x00', 0x0}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r1, 0x58, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'batadv0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000600)={'syztnl1\x00', &(0x7f00000012c0)={'erspan0\x00', 0x0, 0x0, 0x8, 0x73, 0x8, {{0x28, 0x4, 0x0, 0x37, 0xa0, 0x67, 0x0, 0x9, 0x29, 0x0, @multicast1, @multicast1, {[@timestamp_addr={0x44, 0xc, 0x40, 0x1, 0x8, [{@loopback, 0x7}]}, @cipso={0x86, 0x64, 0xffffffffffffffff, [{0x7, 0x12, "fd684500"/16}, {0x7, 0x4, "a392"}, {0x0, 0x4, "9dc4"}, {0x5, 0x12, "daee3913301ec2919179dc0133e4f8e3"}, {0x2, 0x7, "5ee619db7f"}, {0x6, 0x10, "4a71a0911430dea02afe92c79344"}, {0x0, 0xc, "eff40d29a6f04d2cebb0"}, {0x5, 0xf, "c0273e2d73c323a34ba61c7f9f"}]}, @ra={0x94, 0x4, 0x1}, @rr={0x7, 0x17, 0xff, [@loopback, @local, @empty, @multicast2, @multicast2]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000740)={'syztnl0\x00', &(0x7f0000000640)={'syztnl0\x00', 0x0, 0x7800, 0x20, 0x7, 0xffffff54, {{0x2b, 0x4, 0x3, 0x4, 0xac, 0x65, 0x0, 0x0, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, {[@noop, @timestamp_prespec={0x44, 0x3c, 0x26, 0x3, 0x4, [{@remote, 0x3ff}, {@loopback, 0x5}, {@loopback, 0x4}, {@rand_addr=0x64010101, 0xffffff58}, {@local, 0x4e9ed402}, {@dev={0xac, 0x14, 0x14, 0x11}, 0x3ff}, {@private=0xa010102, 0x1}]}, @ra={0x94, 0x4, 0x1}, @noop, @timestamp_prespec={0x44, 0x1c, 0x18, 0x3, 0x5, [{@empty, 0x6}, {@dev={0xac, 0x14, 0x14, 0x27}}, {@multicast2, 0x3}]}, @noop, @generic={0x86, 0x9, "a73d4af6a439a8"}, @noop, @timestamp_prespec={0x44, 0x2c, 0x5, 0x3, 0x5, [{@rand_addr=0x64010101, 0x5}, {@broadcast, 0x3}, {@empty, 0x6}, {@private=0xa010102, 0xffffff80}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}]}]}}}}}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a40)={r1, 0xe0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000780)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, &(0x7f00000007c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000800)=[0x0], 0x0, 0x6d, &(0x7f0000000840)=[{}], 0x8, 0x10, &(0x7f0000000880), &(0x7f00000008c0), 0x8, 0xfa, 0x8, 0x8, &(0x7f0000000900)}}, 0x10) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000b80)={'syztnl1\x00', &(0x7f0000000a80)={'gretap0\x00', 0x0, 0x7800, 0x7, 0x0, 0x0, {{0x2b, 0x4, 0x3, 0x4, 0xac, 0x67, 0x0, 0x6, 0x29, 0x0, @broadcast, @remote, {[@lsrr={0x83, 0x1f, 0xa2, [@initdev={0xac, 0x1e, 0x1, 0x0}, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, @local, @multicast2, @multicast1]}, @lsrr={0x83, 0x7, 0x93, [@rand_addr=0x64010102]}, @noop, @timestamp={0x44, 0x1c, 0x1b, 0x0, 0x9, [0x16, 0x4, 0x0, 0xffff, 0x4, 0x3]}, @noop, @timestamp_addr={0x44, 0x54, 0x44, 0x1, 0x7, [{@local, 0x6}, {@rand_addr=0x64010100, 0xffff}, {@empty, 0x9}, {@local, 0x2}, {@local, 0xfff}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x2}, {@empty}, {@local, 0x1}, {@empty, 0xcf}, {@private=0xa010102, 0x77}]}]}}}}}) r14 = socket$packet(0x11, 0x3, 0x300) r15 = socket$nl_route(0x10, 0x3, 0x0) r16 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r16, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r16, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r15, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r17, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_route_sched(r15, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=@newqdisc={0x54, 0x24, 0xe0b, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r17, {0x0, 0x9}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x24, 0x2, {{0x1ff, 0x6, 0xfffffffd, 0x0, 0xfffffffd, 0x32d}, [@TCA_NETEM_ECN={0x8, 0x7, 0x1}]}}}]}, 0x54}}, 0x0) sendto$packet(r14, &(0x7f0000000580)="44c394f305916c4516999da20800", 0xe, 0x0, &(0x7f0000000440)={0x11, 0x0, r17, 0x1, 0x0, 0x6, @remote}, 0x14) getpeername$packet(r1, &(0x7f0000000bc0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000c00)=0x14) sendmsg$TEAM_CMD_OPTIONS_GET(r1, &(0x7f0000001280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001240)={&(0x7f0000000c40)={0x5c4, 0x0, 0x10, 0x70bd27, 0x25dfdbfb, {}, [{{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0xf0, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r5}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xffff}}}]}}, {{0x8}, {0xf4, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}]}}, {{0x8}, {0x110, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r10}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r11}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}]}}, {{0x8, 0x1, r12}, {0x1c4, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r13}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x74, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x44, 0x4, [{0xc000, 0x81, 0x81, 0x80000000}, {0x6, 0x81, 0x8, 0x9}, {0x5, 0x6a, 0x8, 0x3ff}, {0x10, 0x10, 0x6, 0x5}, {0x0, 0x2, 0x8, 0xd}, {0x8, 0xf, 0xe8, 0xd1}, {0x7, 0x8, 0x7}, {0x8, 0x10, 0x2, 0x8285}]}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8, 0x1, r17}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r18}}}]}}]}, 0x5c4}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000010) setsockopt$ALG_SET_AEAD_AUTHSIZE(r0, 0x117, 0x5, 0x0, 0xa) 718.826523ms ago: executing program 2 (id=914): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x10}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x80}, 0x40000100) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r10, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r9, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010028bd7000070000000200000008000100", @ANYRES32=r1], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) write$nci(r0, &(0x7f00000001c0)=ANY=[@ANYRES8=r11], 0x4) 574.777115ms ago: executing program 0 (id=915): ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, &(0x7f0000000140)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x7, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r1, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x40, 0x1404, 0x10, 0x70bd2b, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x4001) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x7, 0x4932, 0x7f, 0x0, 0x1}, 0x50) ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, &(0x7f0000000140)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x7, 0x4, 0x8, 0x8}, 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) socket$nl_rdma(0x10, 0x3, 0x14) (async) sendmsg$RDMA_NLDEV_CMD_DELLINK(r1, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x40, 0x1404, 0x10, 0x70bd2b, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x4001) (async) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x7, 0x4932, 0x7f, 0x0, 0x1}, 0x50) (async) 527.61387ms ago: executing program 1 (id=916): r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000bc0)="d8000000180081054e81f782db4cb904021d0800fe007c05e8fe55a10a0015000900142603600e12080005007f370401a8001600200004000400027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace801796ec4c2e98a61e284ce5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970392", 0xd8}], 0x1}, 0x0) sendmsg$alg(r2, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) recvmsg$can_raw(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/24, 0x18}], 0x1}, 0x100) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'batadv_slave_1\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=@bridge_setlink={0x20, 0x13, 0xa2f, 0x70bd2b, 0x4000000, {0x7, 0x0, 0x68, r4, 0x10940, 0x222e1}}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x8004) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000040)={0x1, 0x9, 0xe9b0, 0x5, 0x1}, 0x14) 510.994678ms ago: executing program 2 (id=917): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@mcast2, 0x10011, 0x1, 0x2, 0x2, 0xc}, 0x20) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) ioctl(r2, 0x8b32, &(0x7f0000000040)) ioctl$TUNSETLINK(r1, 0x400454cd, 0x7) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="d8000000180081064e81f782db4cb904021d0820fe067c05e8fe55a10a0005000140020003600e41b0000900ac0006fc1100000016000500014002000000035c3b61c1d67f6f94007174cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001b14d6d930dfe1d9d322fe7c4650b5b9bd6ee6f63f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b4ff010000000000000dd6e4edef3d93452a09004b43370e9703920723f97e46bb5c07540d3b", 0xd8}], 0x1}, 0x0) r4 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)='ns/pid_for_children\x00') r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000005c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010028bd7000010000000f000000080034000800030008000300", @ANYRES32=r7, @ANYBLOB="050033"], 0x2c}, 0x1, 0x0, 0x0, 0x24004040}, 0x80) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000100)) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)) ioctl$NS_GET_OWNER_UID(r4, 0xb704, 0x0) r8 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16, @ANYBLOB="01000000000000000000030000005800018044000400200001e6f8b1830149b12e00000001d900000000000000000000000100000000200002000a00000000000000fe800000000000000004000000000000000000000d0001007564703a73"], 0x6c}}, 0x0) 493.67408ms ago: executing program 4 (id=918): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x5, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000640)=@migrate={0x50, 0x21, 0x1, 0x0, 0x0, {{@in6=@private2, @in6=@local, 0xfffc, 0x0, 0x0, 0x0, 0xa, 0xe0, 0x80}, 0x2}}, 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x42000) 362.911831ms ago: executing program 0 (id=919): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x30, r1, 0x1, 0x70bd26, 0x0, {{}, {}, {0x14, 0x19, {0x3, 0x1, 0x1, 0x4100}}}}, 0x30}}, 0x4) 296.197727ms ago: executing program 4 (id=920): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'team_slave_1\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYRES16=0x0, @ANYRES8, @ANYRESDEC=r3], 0x134}, 0x1, 0x0, 0x0, 0x20000004}, 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x6c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast2}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x5}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x3}]}, 0x6c}}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) sendmsg$IPCTNL_MSG_CT_GET_DYING(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14, 0x6, 0x1, 0x101, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x2404c031}, 0x20000000) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r7, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r6, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r7, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) ioctl$SIOCSIFHWADDR(r8, 0xff01, 0x0) socket$kcm(0x10, 0x2, 0x0) r9 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r11, &(0x7f0000000100)={{0x3, @default, 0x1}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}, 0x48) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x0, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x1, 'syz1\x00', @default, 0x1, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}) setsockopt$ax25_SO_BINDTODEVICE(r11, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) ioctl$sock_netdev_private(r9, 0x8914, &(0x7f0000000000)) 268.302093ms ago: executing program 3 (id=921): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x1c, 0x3, 0x8, 0x5, 0x0, 0x0, {}, [@CTA_TIMEOUT_L4PROTO={0x5}]}, 0x1c}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$netlink(0x10, 0x3, 0x15) ioctl$sock_SIOCBRDELBR(r2, 0x89a2, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0x20, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0xc, 0x2, 0x0, 0x0, @str='nl80211\x00'}]}, 0x20}}, 0x0) recvmmsg(r1, &(0x7f0000000a40)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000240)=""/51, 0x33}, {&(0x7f0000001080)=""/4096, 0x1000}], 0x2}}, {{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000400)=""/203, 0xcb}, {&(0x7f0000002080)=""/4096, 0x1000}, {&(0x7f0000000280)=""/191, 0xbf}], 0x3}}, {{0x0, 0x0, 0x0}}], 0x3, 0x10000, 0x0) 114.966383ms ago: executing program 0 (id=922): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x10, 0x0, 0xfe, 0x4, 0x0, 0x1, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) 114.702518ms ago: executing program 1 (id=923): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2000) ioctl$TUNSETNOCSUM(r2, 0xff06, 0x110c2300fe) 96.809039ms ago: executing program 3 (id=924): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x71, 0x0, &(0x7f0000000440)=0x9b) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r2) sendmsg$NLBL_UNLABEL_C_LIST(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r3, 0x1}, 0x14}}, 0x0) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000040)={0x1, 0x3}, 0x4) (async) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0xa, 0x3, 0xff) connect$inet6(r8, &(0x7f0000000000)={0xa, 0x4e21, 0x10000002, @ipv4={'\x00', '\xff\xff', @empty}, 0x800100}, 0x1c) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=@ipv6_delroute={0x30, 0x19, 0x1, 0x70bd27, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1000}, [@RTA_GATEWAY={0x14, 0x5, @private1={0xfc, 0x1, '\x00', 0x1}}]}, 0x30}}, 0x0) (async) setsockopt$inet6_opts(r8, 0x29, 0x39, &(0x7f0000000240)=ANY=[@ANYBLOB="611404"], 0xa8) (async) sendmsg(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="720316b62f3f0f5eaf844553c94d9ab9ce204ceca4c692885ac23d53d12d9954c1d8dc25dad8c0ff", 0x28}], 0x1}, 0x20004080) (async) sendmsg(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000001c0)="5500000018007f5f00fe01b2a4a2809302060000ff41fd01040400000a00120002002800000019002d4400009b84136ef75afb83de066a5900e1baac341b61130000f2ff00000100"/85, 0x55}], 0x1, 0x0, 0x0, 0x7a000000}, 0x0) r10 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r10, 0x84, 0x4, 0x0, &(0x7f0000000380)) (async) setsockopt$packet_fanout_data(r6, 0x107, 0x16, 0x0, 0x0) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r5) (async) r11 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000280), r4) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r5, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0x20, r11, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x10) (async) r12 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r12, 0x107, 0x14, 0x0, 0x0) (async) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="000000007f1d361462e5e2148c9e3c24dfbb448193d1e590a86a4e89e3c38d8613617274885902ecd2582331c899b6385f68ef2a2bb5d25664dcc8d8d96a601ea537301f60fd888ab4afa8ba7a5be4e0bf79c0c8d8056203311c2a7037fbe6cfb3c7e6eca090b9b97a6d346b99a549ac3956935a2f59da6865d71e34e0a4d38b3655", @ANYRES16=r10, @ANYBLOB="0100000000000000000004740906"], 0x14}, 0x1, 0xffffffff00000003}, 0x0) (async) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r7, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000100)={0x48, 0x2, 0x8, 0x3, 0x0, 0x0, {0xf, 0x0, 0xa}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8808}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x15ae247b6c1ab78c}, @CTA_TIMEOUT_L3PROTO={0xfffffffffffffc76}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x20044010) 27.583503ms ago: executing program 1 (id=925): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x14, 0x2d, 0x9, 0x70bd27, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x400000000000000}, 0x84) 0s ago: executing program 0 (id=926): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000050000000900010073797a30000000002c000000030a05000000000000000000c40000000900010073797a30000000000900030073797a30000000004c000000060aad0000000000000000000500000008000b40000000000900010073797a30000000001c0004801b0001800d00010073796e70726f7879000000000400028008000b4000000003140000001100010000000000000000000000000a"], 0xc0}, 0x1, 0x0, 0x0, 0x8800}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newtaction={0x6c, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x58, 0x1, [@m_skbmod={0x54, 0x1, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0xffffffff, 0xffff, 0xffffffffffffffff, 0x7, 0xf}, 0xa}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000044}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{0x1}, &(0x7f0000000080), &(0x7f0000000100)}, 0x20) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x9, 0x5, 0x9fd, 0x84, 0x2000, 0xffffffffffffffff, 0xffffff9e}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r2}, 0x38) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000680), &(0x7f0000000540), 0x6c, r2}, 0x38) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000580)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x83, 0x83, 0x3, [@ptr={0x0, 0x0, 0x0, 0x2, 0x2}, @typedef={0x1, 0x0, 0x0, 0x8, 0x2}, @decl_tag={0x2, 0x0, 0x0, 0x11, 0x3, 0xffffffffffffffff}, @typedef={0xf, 0x0, 0x0, 0x8, 0x3}, @volatile={0x6, 0x0, 0x0, 0x9, 0x3}, @datasec={0x1, 0x1, 0x0, 0xf, 0x3, [{0x2, 0x6, 0x9d}], "c7cf77"}, @enum={0x2, 0x2, 0x0, 0x6, 0x4, [{0x3, 0x10001}, {0xc, 0x3}]}, @float={0x4, 0x0, 0x0, 0x10, 0x10}]}, {0x0, [0x5f]}}, &(0x7f0000000640)=""/228, 0x9f, 0xe4, 0x1, 0x5f, 0x10000}, 0x28) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r3) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f0000000080)=r3}, 0x20) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000007c0)={0x0, 0x4, 0x18}, 0xc) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000800)={0x0, 0x2, 0x10}, 0xc) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)={0x14, 0x0, 0x4}, 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f00000003c0), r5) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000fc0), r5) sendmsg$NL802154_CMD_SET_TX_POWER(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000040)={0x14, r6, 0x926fdb2c68a18847, 0x70bd2d, 0x0, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x24048001}, 0x44040) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r7, &(0x7f0000000200), 0xffffffc1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r7, 0x0) mmap(&(0x7f00007a6000/0x3000)=nil, 0x3000, 0x100000c, 0x22051, r7, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000004080)=@base={0x2, 0x4, 0x4, 0xbf22, 0x480}, 0x48) mmap(&(0x7f0000fa2000/0x4000)=nil, 0x4000, 0x2, 0x82011, r8, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.156' (ED25519) to the list of known hosts. [ 82.311884][ T5854] cgroup: Unknown subsys name 'net' [ 82.444594][ T5854] cgroup: Unknown subsys name 'cpuset' [ 82.453234][ T5854] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 84.118005][ T5854] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 86.650656][ T5866] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 86.661008][ T5866] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 86.668952][ T5866] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 86.688088][ T5866] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 86.705102][ T5866] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 86.834678][ T5866] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 86.842550][ T5866] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 86.850037][ T5866] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 86.862178][ T5866] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 86.869965][ T5866] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 86.925062][ T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 86.933013][ T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 86.941059][ T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 86.949316][ T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 86.959661][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 86.967477][ T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 87.034911][ T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 87.042761][ T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 87.045347][ T5877] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 87.060748][ T5877] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 87.068186][ T5877] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 87.075710][ T5877] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 87.083111][ T5877] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 87.091171][ T5877] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 87.101731][ T5866] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 87.474616][ T5864] chnl_net:caif_netlink_parms(): no params data found [ 87.759029][ T5868] chnl_net:caif_netlink_parms(): no params data found [ 87.868776][ T5864] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.876778][ T5864] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.886367][ T5864] bridge_slave_0: entered allmulticast mode [ 87.894650][ T5864] bridge_slave_0: entered promiscuous mode [ 87.954295][ T5864] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.963837][ T5864] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.975960][ T5864] bridge_slave_1: entered allmulticast mode [ 87.985384][ T5864] bridge_slave_1: entered promiscuous mode [ 88.048478][ T5864] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.059108][ T5871] chnl_net:caif_netlink_parms(): no params data found [ 88.101730][ T5864] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.124259][ T5872] chnl_net:caif_netlink_parms(): no params data found [ 88.141191][ T5874] chnl_net:caif_netlink_parms(): no params data found [ 88.153157][ T5868] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.160413][ T5868] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.168066][ T5868] bridge_slave_0: entered allmulticast mode [ 88.175624][ T5868] bridge_slave_0: entered promiscuous mode [ 88.229920][ T5868] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.237917][ T5868] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.245170][ T5868] bridge_slave_1: entered allmulticast mode [ 88.252892][ T5868] bridge_slave_1: entered promiscuous mode [ 88.261566][ T5864] team0: Port device team_slave_0 added [ 88.323671][ T5864] team0: Port device team_slave_1 added [ 88.357511][ T5868] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.404306][ T5868] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.486910][ T5864] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.494617][ T5864] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.520744][ T5864] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.534486][ T5864] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.542001][ T5864] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.568339][ T5864] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.594470][ T5868] team0: Port device team_slave_0 added [ 88.664504][ T5868] team0: Port device team_slave_1 added [ 88.672409][ T5871] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.679569][ T5871] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.687246][ T5871] bridge_slave_0: entered allmulticast mode [ 88.694952][ T5871] bridge_slave_0: entered promiscuous mode [ 88.703637][ T5871] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.711163][ T5871] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.718309][ T5871] bridge_slave_1: entered allmulticast mode [ 88.725843][ T5871] bridge_slave_1: entered promiscuous mode [ 88.733704][ T5872] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.740914][ T5872] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.748079][ T5872] bridge_slave_0: entered allmulticast mode [ 88.755349][ T5872] bridge_slave_0: entered promiscuous mode [ 88.762636][ T5874] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.769776][ T5874] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.777547][ T5874] bridge_slave_0: entered allmulticast mode [ 88.784790][ T5874] bridge_slave_0: entered promiscuous mode [ 88.791190][ T5875] Bluetooth: hci0: command tx timeout [ 88.832343][ T5872] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.839508][ T5872] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.847133][ T5872] bridge_slave_1: entered allmulticast mode [ 88.854454][ T5872] bridge_slave_1: entered promiscuous mode [ 88.874502][ T5874] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.881742][ T5874] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.888863][ T5874] bridge_slave_1: entered allmulticast mode [ 88.896914][ T5874] bridge_slave_1: entered promiscuous mode [ 88.940724][ T5875] Bluetooth: hci1: command tx timeout [ 88.971446][ T5864] hsr_slave_0: entered promiscuous mode [ 88.977825][ T5864] hsr_slave_1: entered promiscuous mode [ 88.985417][ T5868] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.992630][ T5868] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.018743][ T5868] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.029417][ T5875] Bluetooth: hci2: command tx timeout [ 89.037806][ T5871] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.049857][ T5872] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.062042][ T5872] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.086456][ T5874] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.096465][ T5868] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.103700][ T5868] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.129711][ T5868] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.148919][ T5871] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.181165][ T5875] Bluetooth: hci4: command tx timeout [ 89.181174][ T51] Bluetooth: hci3: command tx timeout [ 89.195790][ T5874] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.262259][ T5874] team0: Port device team_slave_0 added [ 89.270539][ T5874] team0: Port device team_slave_1 added [ 89.291683][ T5872] team0: Port device team_slave_0 added [ 89.366010][ T5871] team0: Port device team_slave_0 added [ 89.374865][ T5871] team0: Port device team_slave_1 added [ 89.383016][ T5872] team0: Port device team_slave_1 added [ 89.394318][ T5874] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.401575][ T5874] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.428044][ T5874] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.444506][ T5868] hsr_slave_0: entered promiscuous mode [ 89.450895][ T5868] hsr_slave_1: entered promiscuous mode [ 89.457056][ T5868] debugfs: 'hsr0' already exists in 'hsr' [ 89.463199][ T5868] Cannot create hsr debugfs directory [ 89.498122][ T5874] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.505397][ T5874] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.531866][ T5874] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.611155][ T5871] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.618119][ T5871] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.646742][ T5871] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.659026][ T5872] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.666226][ T5872] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.692508][ T5872] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.727330][ T5871] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.734665][ T5871] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.760884][ T5871] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.779842][ T5872] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.786871][ T5872] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.813045][ T5872] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.896326][ T5874] hsr_slave_0: entered promiscuous mode [ 89.903782][ T5874] hsr_slave_1: entered promiscuous mode [ 89.909808][ T5874] debugfs: 'hsr0' already exists in 'hsr' [ 89.915612][ T5874] Cannot create hsr debugfs directory [ 90.044320][ T5871] hsr_slave_0: entered promiscuous mode [ 90.051085][ T5871] hsr_slave_1: entered promiscuous mode [ 90.057375][ T5871] debugfs: 'hsr0' already exists in 'hsr' [ 90.063156][ T5871] Cannot create hsr debugfs directory [ 90.085573][ T5872] hsr_slave_0: entered promiscuous mode [ 90.092634][ T5872] hsr_slave_1: entered promiscuous mode [ 90.098772][ T5872] debugfs: 'hsr0' already exists in 'hsr' [ 90.104715][ T5872] Cannot create hsr debugfs directory [ 90.397534][ T5864] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 90.444014][ T5864] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 90.485714][ T5864] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 90.521223][ T5864] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 90.570225][ T5868] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 90.594690][ T5868] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 90.607052][ T5868] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 90.638281][ T5868] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 90.694495][ T5874] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 90.707954][ T5874] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 90.724946][ T5874] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 90.739714][ T5874] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 90.859774][ T5872] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 90.867871][ T5875] Bluetooth: hci0: command tx timeout [ 90.879102][ T5872] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 90.895461][ T5872] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 90.907746][ T5872] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 91.016857][ T5871] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 91.027314][ T5875] Bluetooth: hci1: command tx timeout [ 91.039273][ T5864] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.056728][ T5871] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 91.067251][ T5871] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 91.092316][ T5871] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 91.110907][ T5875] Bluetooth: hci2: command tx timeout [ 91.140218][ T5868] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.151696][ T5864] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.176621][ T3508] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.184027][ T3508] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.214187][ T3508] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.221333][ T3508] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.261365][ T5875] Bluetooth: hci3: command tx timeout [ 91.266848][ T5875] Bluetooth: hci4: command tx timeout [ 91.280390][ T5868] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.296271][ T5874] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.332115][ T3508] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.339216][ T3508] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.372595][ T5871] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.399890][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.407030][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.419847][ T5871] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.443983][ T5874] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.468928][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.476061][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.498885][ T5872] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.514376][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.521608][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.535835][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.542972][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.587316][ T1156] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.594514][ T1156] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.655119][ T5872] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.700434][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.707661][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.746593][ T1212] cfg80211: failed to load regulatory.db [ 91.772542][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.779713][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.987210][ T5864] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.009618][ T5872] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 92.201973][ T5864] veth0_vlan: entered promiscuous mode [ 92.248366][ T5864] veth1_vlan: entered promiscuous mode [ 92.347405][ T5864] veth0_macvtap: entered promiscuous mode [ 92.382005][ T5864] veth1_macvtap: entered promiscuous mode [ 92.419912][ T5864] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.439740][ T5868] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.468885][ T5864] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.509607][ T3508] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.534474][ T5874] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.549810][ T3508] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.586786][ T3508] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.599854][ T3508] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.617260][ T5871] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.778377][ T5872] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.806674][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.833037][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.915037][ T5874] veth0_vlan: entered promiscuous mode [ 92.934229][ T5874] veth1_vlan: entered promiscuous mode [ 92.942634][ T5875] Bluetooth: hci0: command tx timeout [ 92.947631][ T5871] veth0_vlan: entered promiscuous mode [ 92.958674][ T775] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.967449][ T775] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.029161][ T5871] veth1_vlan: entered promiscuous mode [ 93.048935][ T5864] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 93.099789][ T5872] veth0_vlan: entered promiscuous mode [ 93.106739][ T5875] Bluetooth: hci1: command tx timeout [ 93.127975][ T5871] veth0_macvtap: entered promiscuous mode [ 93.147893][ T5871] veth1_macvtap: entered promiscuous mode [ 93.181825][ T5875] Bluetooth: hci2: command tx timeout [ 93.189972][ T5981] tipc: Started in network mode [ 93.195800][ T5981] tipc: Node identity ac14140f, cluster identity 4711 [ 93.203596][ T5981] tipc: New replicast peer: 255.255.255.255 [ 93.210090][ T5981] tipc: Enabled bearer , priority 10 [ 93.223897][ T5868] veth0_vlan: entered promiscuous mode [ 93.237148][ T5874] veth0_macvtap: entered promiscuous mode [ 93.247784][ T5872] veth1_vlan: entered promiscuous mode [ 93.282273][ T5871] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.292624][ T5874] veth1_macvtap: entered promiscuous mode [ 93.318281][ T5871] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.327122][ T5868] veth1_vlan: entered promiscuous mode [ 93.342379][ T5875] Bluetooth: hci3: command tx timeout [ 93.342391][ T51] Bluetooth: hci4: command tx timeout [ 93.368587][ T775] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.379463][ T775] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.424387][ T5874] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.437247][ T775] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.459023][ T775] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.495130][ T5874] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.522639][ T5872] veth0_macvtap: entered promiscuous mode [ 93.583952][ T5985] sctp: [Deprecated]: syz.0.7 (pid 5985) Use of int in maxseg socket option. [ 93.583952][ T5985] Use struct sctp_assoc_value instead [ 93.591859][ T1167] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.611460][ T1167] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.621667][ T5868] veth0_macvtap: entered promiscuous mode [ 93.635188][ T5872] veth1_macvtap: entered promiscuous mode [ 93.668406][ T1167] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.693469][ T1167] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.729400][ T5868] veth1_macvtap: entered promiscuous mode [ 93.753928][ T5872] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.808372][ T5872] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.833787][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.866591][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.928885][ T775] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.957259][ T5868] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.986813][ T775] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.007677][ T5868] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.029484][ T3545] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.038781][ T3545] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.046876][ T775] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.059470][ T775] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.093169][ T775] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.103407][ T775] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.133178][ T775] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.147464][ T775] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.176203][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.201865][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.325317][ T1156] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.338952][ T5960] tipc: Node number set to 2886997007 [ 94.364621][ T1156] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.445873][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.468293][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.568530][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.605018][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.700070][ T3508] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.717895][ T3508] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.802442][ T1156] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.845862][ T1156] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.878364][ T6014] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 95.023441][ T51] Bluetooth: hci0: command tx timeout [ 95.191094][ T51] Bluetooth: hci1: command tx timeout [ 95.262332][ T51] Bluetooth: hci2: command tx timeout [ 95.405608][ T6039] netlink: 8 bytes leftover after parsing attributes in process `syz.2.22'. [ 95.421247][ T51] Bluetooth: hci4: command tx timeout [ 95.426778][ T51] Bluetooth: hci3: command tx timeout [ 95.536788][ T6043] netlink: 8 bytes leftover after parsing attributes in process `syz.0.23'. [ 95.678685][ T6046] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 95.966457][ T6059] netlink: 12 bytes leftover after parsing attributes in process `syz.2.29'. [ 95.975047][ T6061] netlink: 8 bytes leftover after parsing attributes in process `syz.3.30'. [ 96.017904][ T6062] netlink: 12 bytes leftover after parsing attributes in process `syz.2.29'. [ 96.087752][ T6062] Zero length message leads to an empty skb [ 96.099874][ T6065] sctp: [Deprecated]: syz.0.31 (pid 6065) Use of int in max_burst socket option. [ 96.099874][ T6065] Use struct sctp_assoc_value instead [ 96.673861][ T6080] warning: `syz.3.37' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 96.693404][ T6080] netlink: 4 bytes leftover after parsing attributes in process `syz.3.37'. [ 96.887738][ T6084] netlink: 196 bytes leftover after parsing attributes in process `syz.4.40'. [ 96.930018][ T6084] netlink: 196 bytes leftover after parsing attributes in process `syz.4.40'. [ 96.961245][ T6084] netlink: 19 bytes leftover after parsing attributes in process `syz.4.40'. [ 97.261672][ T6099] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 97.738046][ T6123] netlink: 8 bytes leftover after parsing attributes in process `syz.4.55'. [ 97.909542][ T6131] openvswitch: netlink: IPv4 frag type 255 is out of range max 2 [ 98.017386][ T6136] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 98.213552][ T6147] netlink: 'syz.0.63': attribute type 1 has an invalid length. [ 98.244055][ T6147] nbd: couldn't find device at index 1048576 [ 98.418235][ T6150] pimreg3: entered allmulticast mode [ 98.572377][ T6161] FAULT_INJECTION: forcing a failure. [ 98.572377][ T6161] name failslab, interval 1, probability 0, space 0, times 0 [ 98.595597][ T6163] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 98.642772][ T6161] CPU: 0 UID: 0 PID: 6161 Comm: syz.4.69 Not tainted syzkaller #0 PREEMPT(full) [ 98.642800][ T6161] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 98.642820][ T6161] Call Trace: [ 98.642828][ T6161] [ 98.642837][ T6161] dump_stack_lvl+0x189/0x250 [ 98.642868][ T6161] ? __pfx____ratelimit+0x10/0x10 [ 98.642897][ T6161] ? __pfx_dump_stack_lvl+0x10/0x10 [ 98.642922][ T6161] ? __pfx__printk+0x10/0x10 [ 98.642958][ T6161] ? __pfx___might_resched+0x10/0x10 [ 98.642983][ T6161] should_fail_ex+0x414/0x560 [ 98.643015][ T6161] should_failslab+0xa8/0x100 [ 98.643047][ T6161] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 98.643077][ T6161] ? __alloc_skb+0x112/0x2d0 [ 98.643112][ T6161] __alloc_skb+0x112/0x2d0 [ 98.643147][ T6161] netlink_sendmsg+0x5c6/0xb30 [ 98.643188][ T6161] ? __pfx_netlink_sendmsg+0x10/0x10 [ 98.643222][ T6161] ? aa_sock_msg_perm+0xf1/0x1d0 [ 98.643256][ T6161] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 98.643278][ T6161] ? __pfx_netlink_sendmsg+0x10/0x10 [ 98.643310][ T6161] __sock_sendmsg+0x21c/0x270 [ 98.643340][ T6161] ____sys_sendmsg+0x505/0x830 [ 98.643367][ T6161] ? __pfx_____sys_sendmsg+0x10/0x10 [ 98.643398][ T6161] ? import_iovec+0x74/0xa0 [ 98.643436][ T6161] ___sys_sendmsg+0x21f/0x2a0 [ 98.643458][ T6161] ? __pfx____sys_sendmsg+0x10/0x10 [ 98.643514][ T6161] ? __fget_files+0x2a/0x420 [ 98.643542][ T6161] ? __fget_files+0x3a0/0x420 [ 98.643582][ T6161] __x64_sys_sendmsg+0x19b/0x260 [ 98.643605][ T6161] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 98.643635][ T6161] ? __pfx_ksys_write+0x10/0x10 [ 98.643658][ T6161] ? rcu_is_watching+0x15/0xb0 [ 98.643717][ T6161] ? do_syscall_64+0xbe/0x3b0 [ 98.643768][ T6161] do_syscall_64+0xfa/0x3b0 [ 98.643797][ T6161] ? lockdep_hardirqs_on+0x9c/0x150 [ 98.643825][ T6161] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.643846][ T6161] ? clear_bhb_loop+0x60/0xb0 [ 98.643872][ T6161] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.643892][ T6161] RIP: 0033:0x7fe1dd78ebe9 [ 98.643917][ T6161] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 98.643935][ T6161] RSP: 002b:00007fe1de578038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 98.643956][ T6161] RAX: ffffffffffffffda RBX: 00007fe1dd9b5fa0 RCX: 00007fe1dd78ebe9 [ 98.643972][ T6161] RDX: 0000000000000000 RSI: 00002000000003c0 RDI: 0000000000000004 [ 98.643985][ T6161] RBP: 00007fe1de578090 R08: 0000000000000000 R09: 0000000000000000 [ 98.643997][ T6161] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 98.644009][ T6161] R13: 00007fe1dd9b6038 R14: 00007fe1dd9b5fa0 R15: 00007ffc927d8508 [ 98.644040][ T6161] [ 98.959293][ T6164] bridge_slave_0: left allmulticast mode [ 98.968675][ T6164] bridge_slave_0: left promiscuous mode [ 98.977778][ T6164] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.997462][ T6175] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 99.040718][ T6164] bridge_slave_1: left allmulticast mode [ 99.046487][ T6164] bridge_slave_1: left promiscuous mode [ 99.052354][ T6164] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.086647][ T6164] bond0: (slave bond_slave_0): Releasing backup interface [ 99.099171][ T6164] bond0: (slave bond_slave_1): Releasing backup interface [ 99.127383][ T6164] team0: Port device team_slave_0 removed [ 99.163108][ T6164] team0: Port device team_slave_1 removed [ 99.170076][ T6164] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 99.177959][ T6164] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 99.189268][ T6164] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 99.198826][ T6164] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 99.484166][ T6192] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 99.531089][ T6192] (unnamed net_device) (uninitialized): option min_links: invalid value (18446744073709551614) [ 99.565745][ T6192] (unnamed net_device) (uninitialized): option min_links: allowed values 0 - 2147483647 [ 99.613735][ T6197] tipc: Started in network mode [ 99.618639][ T6197] tipc: Node identity ac14140f, cluster identity 4711 [ 99.651503][ T6197] tipc: New replicast peer: 255.255.255.255 [ 99.678629][ T6197] tipc: Enabled bearer , priority 10 [ 99.697767][ T6192] syz.3.76 uses obsolete (PF_INET,SOCK_PACKET) [ 100.023226][ T6214] openvswitch: netlink: IPv4 frag type 255 is out of range max 2 [ 100.102724][ T6214] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 100.565623][ T6236] __nla_validate_parse: 8 callbacks suppressed [ 100.565641][ T6236] netlink: 4 bytes leftover after parsing attributes in process `syz.2.95'. [ 100.771181][ T5869] tipc: Node number set to 2886997007 [ 100.846639][ T6251] tipc: MTU too low for tipc bearer [ 101.359496][ T6283] tipc: Enabling of bearer rejected, already enabled [ 101.408114][ T6286] netlink: 4 bytes leftover after parsing attributes in process `syz.3.110'. [ 101.652365][ T6297] netlink: 'syz.2.115': attribute type 2 has an invalid length. [ 101.744880][ T6295] kthread_run failed with err -4 [ 101.754626][ T30] audit: type=1107 audit(1755691999.320:2): pid=6293 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 101.922006][ T6311] netlink: 'syz.2.119': attribute type 10 has an invalid length. [ 102.126683][ T6320] IPVS: length: 157 != 24 [ 102.131630][ T6311] bond0: (slave geneve1): Enslaving as an active interface with an up link [ 102.197329][ T6315] : entered promiscuous mode [ 102.415493][ T6336] netlink: 4 bytes leftover after parsing attributes in process `syz.1.126'. [ 102.430227][ T6337] tipc: Started in network mode [ 102.452990][ T6337] tipc: Node identity ac14140f, cluster identity 4711 [ 102.466175][ T6337] tipc: New replicast peer: 255.255.255.255 [ 102.492536][ T6337] tipc: Enabled bearer , priority 10 [ 102.538166][ T6344] raw_sendmsg: syz.0.128 forgot to set AF_INET. Fix it! [ 102.791915][ T6355] netlink: 8 bytes leftover after parsing attributes in process `syz.0.131'. [ 102.939189][ T6359] netlink: 20 bytes leftover after parsing attributes in process `syz.3.135'. [ 102.994365][ T6359] ieee802154 phy0 wpan0: encryption failed: -22 [ 103.199932][ T6375] netlink: 4 bytes leftover after parsing attributes in process `syz.4.140'. [ 103.431840][ T6384] FAULT_INJECTION: forcing a failure. [ 103.431840][ T6384] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 103.458247][ T6384] CPU: 1 UID: 0 PID: 6384 Comm: syz.3.142 Not tainted syzkaller #0 PREEMPT(full) [ 103.458274][ T6384] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 103.458287][ T6384] Call Trace: [ 103.458295][ T6384] [ 103.458304][ T6384] dump_stack_lvl+0x189/0x250 [ 103.458335][ T6384] ? __pfx____ratelimit+0x10/0x10 [ 103.458365][ T6384] ? __pfx_dump_stack_lvl+0x10/0x10 [ 103.458391][ T6384] ? __pfx__printk+0x10/0x10 [ 103.458422][ T6384] ? __might_fault+0xb0/0x130 [ 103.458466][ T6384] should_fail_ex+0x414/0x560 [ 103.458500][ T6384] _copy_from_user+0x2d/0xb0 [ 103.458526][ T6384] kstrtouint_from_user+0xc4/0x170 [ 103.458571][ T6384] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 103.458624][ T6384] proc_fail_nth_write+0x88/0x200 [ 103.458649][ T6384] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 103.458692][ T6384] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 103.458718][ T6384] vfs_write+0x27b/0xb30 [ 103.458763][ T6384] ? __pfx_vfs_write+0x10/0x10 [ 103.458790][ T6384] ? __fget_files+0x2a/0x420 [ 103.458822][ T6384] ? __fget_files+0x3a0/0x420 [ 103.458848][ T6384] ? __fget_files+0x2a/0x420 [ 103.458885][ T6384] ksys_write+0x145/0x250 [ 103.458908][ T6384] ? __fget_files+0x3a0/0x420 [ 103.458937][ T6384] ? __pfx_ksys_write+0x10/0x10 [ 103.458967][ T6384] ? do_syscall_64+0xbe/0x3b0 [ 103.458997][ T6384] do_syscall_64+0xfa/0x3b0 [ 103.459022][ T6384] ? lockdep_hardirqs_on+0x9c/0x150 [ 103.459046][ T6384] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.459064][ T6384] ? clear_bhb_loop+0x60/0xb0 [ 103.459087][ T6384] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.459104][ T6384] RIP: 0033:0x7f89b5f8d69f [ 103.459120][ T6384] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 103.459134][ T6384] RSP: 002b:00007f89b6d16030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 103.459153][ T6384] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f89b5f8d69f [ 103.459164][ T6384] RDX: 0000000000000001 RSI: 00007f89b6d160a0 RDI: 0000000000000003 [ 103.459175][ T6384] RBP: 00007f89b6d16090 R08: 0000000000000000 R09: 0000000000000000 [ 103.459186][ T6384] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 103.459196][ T6384] R13: 00007f89b61b6038 R14: 00007f89b61b5fa0 R15: 00007ffddf9707a8 [ 103.459226][ T6384] [ 103.566393][ T5951] tipc: Node number set to 2886997007 [ 103.632690][ T6387] netlink: 'syz.1.144': attribute type 4 has an invalid length. [ 103.836046][ T6387] netlink: 'syz.1.144': attribute type 10 has an invalid length. [ 104.332301][ T6423] netlink: 4 bytes leftover after parsing attributes in process `syz.3.155'. [ 104.385564][ T6420] netlink: 'syz.1.153': attribute type 83 has an invalid length. [ 104.899779][ T6441] netlink: 'syz.0.160': attribute type 3 has an invalid length. [ 105.558766][ T6468] netlink: 16 bytes leftover after parsing attributes in process `syz.1.168'. [ 105.615054][ T6469] netlink: 8 bytes leftover after parsing attributes in process `syz.1.168'. [ 106.476883][ T6502] netlink: 12 bytes leftover after parsing attributes in process `syz.0.178'. [ 106.723686][ T6507] netlink: 24 bytes leftover after parsing attributes in process `syz.3.180'. [ 106.787233][ T6511] netlink: 8 bytes leftover after parsing attributes in process `syz.3.180'. [ 106.851830][ T6510] netlink: 16 bytes leftover after parsing attributes in process `syz.0.182'. [ 107.011313][ T6519] netlink: 'syz.4.184': attribute type 16 has an invalid length. [ 107.065021][ T6515] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.092549][ T6515] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.221328][ T6531] netlink: 'syz.1.187': attribute type 1 has an invalid length. [ 107.229214][ T6525] netlink: 'syz.1.187': attribute type 1 has an invalid length. [ 107.367837][ T6525] 8021q: adding VLAN 0 to HW filter on device bond1 [ 107.501320][ T6540] tipc: Enabled bearer , priority 0 [ 107.539899][ T6540] syzkaller0: entered promiscuous mode [ 107.570734][ T6540] syzkaller0: entered allmulticast mode [ 107.703433][ T6540] tipc: Resetting bearer [ 107.786218][ T6539] tipc: Resetting bearer [ 107.856812][ T6539] tipc: Disabling bearer [ 107.899846][ T6551] (unnamed net_device) (uninitialized): option mode: invalid value (133) [ 108.063944][ T6559] netlink: 28 bytes leftover after parsing attributes in process `syz.1.199'. [ 108.928937][ T6599] netlink: 68 bytes leftover after parsing attributes in process `syz.1.215'. [ 109.427061][ T6612] netlink: 'syz.3.222': attribute type 33 has an invalid length. [ 109.481529][ T6616] netlink: 8 bytes leftover after parsing attributes in process `syz.0.221'. [ 109.568813][ T6612] (unnamed net_device) (uninitialized): option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 109.726900][ T6626] netlink: 'syz.4.226': attribute type 1 has an invalid length. [ 109.766467][ T6626] netlink: 17 bytes leftover after parsing attributes in process `syz.4.226'. [ 109.814438][ T6633] netlink: 'syz.1.229': attribute type 2 has an invalid length. [ 109.835344][ T6631] netlink: 8 bytes leftover after parsing attributes in process `syz.3.228'. [ 109.840591][ T6633] netlink: 'syz.1.229': attribute type 1 has an invalid length. [ 109.976402][ T6638] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 110.096722][ T6638] netlink: 'syz.4.230': attribute type 4 has an invalid length. [ 110.136422][ T6638] netlink: 'syz.4.230': attribute type 4 has an invalid length. [ 110.144389][ T6647] netlink: 'syz.1.233': attribute type 2 has an invalid length. [ 110.144409][ T6647] netlink: 'syz.1.233': attribute type 1 has an invalid length. [ 110.144422][ T6647] netlink: 'syz.1.233': attribute type 2 has an invalid length. [ 110.144453][ T6647] netlink: 'syz.1.233': attribute type 1 has an invalid length. [ 110.426544][ T6657] vlan2: entered allmulticast mode [ 110.444482][ T6657] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode [ 110.526028][ T6661] : entered promiscuous mode [ 110.926199][ T6678] __nla_validate_parse: 2 callbacks suppressed [ 110.926218][ T6678] netlink: 4 bytes leftover after parsing attributes in process `syz.0.243'. [ 110.991899][ T6674] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.242'. [ 111.163303][ T6680] syz.3.244 (6680) used greatest stack depth: 17864 bytes left [ 111.192859][ T6688] netlink: 24 bytes leftover after parsing attributes in process `syz.0.245'. [ 111.337886][ T6689] 8021q: adding VLAN 0 to HW filter on device bond1 [ 111.384117][ T6701] IPv6: NLM_F_CREATE should be specified when creating new route [ 111.393253][ T6701] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 111.400708][ T6701] IPv6: NLM_F_CREATE should be set when creating new route [ 111.408142][ T6701] IPv6: NLM_F_CREATE should be set when creating new route [ 111.415418][ T6701] IPv6: NLM_F_CREATE should be set when creating new route [ 111.649992][ T6701] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.682937][ T6711] netlink: 28 bytes leftover after parsing attributes in process `syz.4.250'. [ 111.708392][ T6711] netlink: 4 bytes leftover after parsing attributes in process `syz.4.250'. [ 111.946917][ T6701] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.019050][ T6719] netlink: 8 bytes leftover after parsing attributes in process `syz.3.254'. [ 112.039123][ T6721] netlink: 4 bytes leftover after parsing attributes in process `syz.4.255'. [ 112.067801][ T6723] netlink: 8 bytes leftover after parsing attributes in process `syz.1.256'. [ 112.099203][ T6701] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.238669][ T6725] openvswitch: netlink: Flow actions attr not present in new flow. [ 112.287562][ T6701] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.605402][ T1156] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.707788][ T1156] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.796215][ T1156] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.817454][ T6749] netlink: 16 bytes leftover after parsing attributes in process `syz.4.264'. [ 112.869411][ T3545] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.965483][ T6749] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 112.981602][ T6757] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.266'. [ 112.996675][ T6749] gretap1: entered promiscuous mode [ 113.013189][ T6749] gretap1: entered allmulticast mode [ 113.013610][ T6757] netlink: zone id is out of range [ 113.076264][ T6757] netlink: zone id is out of range [ 113.107131][ T6757] netlink: zone id is out of range [ 113.142878][ T6757] netlink: get zone limit has 8 unknown bytes [ 113.275865][ T6753] syzkaller0: entered promiscuous mode [ 113.300458][ T6753] syzkaller0: entered allmulticast mode [ 113.370757][ T6772] Bluetooth: MGMT ver 1.23 [ 113.381578][ T6758] bond2 (unregistering): Released all slaves [ 113.566168][ T6770] bond0: option fail_over_mac: unable to set because the bond device has slaves [ 114.859055][ T6830] validate_nla: 12 callbacks suppressed [ 114.859076][ T6830] netlink: 'syz.2.282': attribute type 194 has an invalid length. [ 115.505474][ T6829] macvlan2: entered promiscuous mode [ 115.532957][ T6829] macvlan2: entered allmulticast mode [ 115.539500][ T6829] veth1_to_bond: entered promiscuous mode [ 115.620636][ T6829] veth1_to_bond: entered allmulticast mode [ 115.672937][ T6829] team0: Port device macvlan2 added [ 116.026398][ T6844] __nla_validate_parse: 5 callbacks suppressed [ 116.026417][ T6844] netlink: 8 bytes leftover after parsing attributes in process `syz.4.288'. [ 116.096328][ T6851] netlink: 128 bytes leftover after parsing attributes in process `syz.3.291'. [ 117.813376][ T6908] netlink: 20 bytes leftover after parsing attributes in process `syz.4.312'. [ 118.162995][ T6919] IPv6: sit1: Disabled Multicast RS [ 118.490706][ T6933] sctp: [Deprecated]: syz.0.322 (pid 6933) Use of int in maxseg socket option. [ 118.490706][ T6933] Use struct sctp_assoc_value instead [ 118.817752][ T6949] netlink: 'syz.3.327': attribute type 4 has an invalid length. [ 118.834259][ T6933] team0 (unregistering): Port device team_slave_0 removed [ 118.902606][ T6933] team0 (unregistering): Port device team_slave_1 removed [ 119.200304][ T6958] netlink: 'syz.1.330': attribute type 39 has an invalid length. [ 119.493378][ T6968] veth0: entered promiscuous mode [ 119.596930][ T6968] veth0: left promiscuous mode [ 120.625495][ T7022] netlink: 16 bytes leftover after parsing attributes in process `syz.3.341'. [ 120.906045][ T7031] geneve3: entered promiscuous mode [ 120.930970][ T7031] geneve3: entered allmulticast mode [ 120.955198][ T3508] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 121.005367][ T3508] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 121.086962][ T7038] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.163395][ T3508] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 121.209773][ T7049] Bluetooth: MGMT ver 1.23 [ 121.817163][ T7072] netlink: 'syz.2.359': attribute type 2 has an invalid length. [ 122.008081][ T7078] syzkaller0: entered promiscuous mode [ 122.018217][ T7078] syzkaller0: entered allmulticast mode [ 122.413272][ T7096] netlink: 'syz.0.368': attribute type 4 has an invalid length. [ 122.507180][ T7100] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 122.546170][ T7100] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 122.561191][ T7100] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 122.653446][ T7038] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.664345][ T7038] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 122.691852][ T7108] wg1: entered promiscuous mode [ 122.696896][ T7108] wg1: entered allmulticast mode [ 122.741941][ T7038] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.752567][ T7038] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 122.854476][ T7038] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.872497][ T7038] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 123.018345][ T1167] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 19999 - 0 [ 123.032127][ T1167] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 123.074358][ T3508] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 19999 - 0 [ 123.084476][ T3508] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 123.127790][ T1167] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 19999 - 0 [ 123.148473][ T1167] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 123.186087][ T1167] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 19999 - 0 [ 123.211258][ T1167] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 123.223225][ T7118] netlink: 4 bytes leftover after parsing attributes in process `syz.2.376'. [ 123.366023][ T7122] netlink: 16 bytes leftover after parsing attributes in process `syz.1.379'. [ 123.528808][ T7122] netlink: 12 bytes leftover after parsing attributes in process `syz.1.379'. [ 123.812961][ T7144] netlink: 'syz.3.386': attribute type 39 has an invalid length. [ 123.934212][ T7152] ieee802154 phy0 wpan0: encryption failed: -90 [ 124.113796][ T7161] tipc: Enabled bearer , priority 10 [ 124.230775][ T7161] netlink: 'syz.0.388': attribute type 10 has an invalid length. [ 124.315951][ T7151] IPVS: set_ctl: invalid protocol: 33 172.30.2.1:20000 [ 124.353367][ T5951] IPVS: starting estimator thread 0... [ 124.362628][ T7161] bond0: (slave geneve1): Enslaving as an active interface with an up link [ 124.510702][ T7178] IPVS: using max 28 ests per chain, 67200 per kthread [ 124.612176][ T7188] netlink: 24 bytes leftover after parsing attributes in process `syz.1.396'. [ 124.985991][ T7204] netlink: 24 bytes leftover after parsing attributes in process `syz.1.401'. [ 125.093985][ T7215] netlink: 16 bytes leftover after parsing attributes in process `syz.4.405'. [ 125.260029][ T7224] veth0: entered promiscuous mode [ 125.471969][ T7219] veth0: left promiscuous mode [ 126.063130][ T7255] bond1: entered promiscuous mode [ 126.105516][ T7255] bond1: entered allmulticast mode [ 126.116952][ T7268] netlink: 'syz.4.418': attribute type 21 has an invalid length. [ 126.131901][ T7255] 8021q: adding VLAN 0 to HW filter on device bond1 [ 126.168087][ T7268] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 126.420181][ T7286] netlink: 24 bytes leftover after parsing attributes in process `syz.2.423'. [ 126.564323][ T7289] netlink: 8 bytes leftover after parsing attributes in process `syz.4.426'. [ 126.584687][ T7289] openvswitch: netlink: nsh attr 8196 is out of range max 3 [ 126.616183][ T7289] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 126.936941][ T7311] netlink: 8 bytes leftover after parsing attributes in process `syz.4.431'. [ 127.521737][ T7336] netlink: 80 bytes leftover after parsing attributes in process `syz.3.438'. [ 127.616975][ T7338] syzkaller1: entered promiscuous mode [ 127.643872][ T7338] syzkaller1: entered allmulticast mode [ 128.154959][ T7361] tipc: Started in network mode [ 128.159893][ T7361] tipc: Node identity 5a3e70a0f01c, cluster identity 4711 [ 128.167443][ T7361] tipc: Enabled bearer , priority 0 [ 128.180464][ T7361] syzkaller0: entered promiscuous mode [ 128.189365][ T7361] syzkaller0: entered allmulticast mode [ 128.309686][ T7361] tipc: Resetting bearer [ 128.341884][ T7357] tipc: Resetting bearer [ 128.423038][ T7371] __nla_validate_parse: 5 callbacks suppressed [ 128.423058][ T7371] netlink: 48 bytes leftover after parsing attributes in process `syz.1.446'. [ 128.446801][ T7357] tipc: Disabling bearer [ 128.460237][ T7375] netlink: 'syz.0.449': attribute type 6 has an invalid length. [ 128.477579][ T7375] netlink: 'syz.0.449': attribute type 6 has an invalid length. [ 128.536042][ T7377] netlink: 'syz.2.450': attribute type 12 has an invalid length. [ 128.552631][ T7379] netlink: 'syz.3.451': attribute type 4 has an invalid length. [ 128.577414][ T7377] netlink: 'syz.2.450': attribute type 29 has an invalid length. [ 128.645565][ T7373] netlink: 'syz.2.450': attribute type 3 has an invalid length. [ 128.667615][ T7377] netlink: 148 bytes leftover after parsing attributes in process `syz.2.450'. [ 128.674035][ T7373] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 128.685945][ T7377] netlink: 'syz.2.450': attribute type 2 has an invalid length. [ 128.695005][ T7377] netlink: 23 bytes leftover after parsing attributes in process `syz.2.450'. [ 128.967321][ T7395] netlink: 24 bytes leftover after parsing attributes in process `syz.0.457'. [ 129.038983][ T7402] netlink: 24 bytes leftover after parsing attributes in process `syz.0.457'. [ 129.208290][ T7413] tipc: Enabling of bearer rejected, already enabled [ 129.240076][ T7413] netlink: 24 bytes leftover after parsing attributes in process `syz.2.462'. [ 129.584943][ T5951] IPVS: starting estimator thread 0... [ 129.681226][ T7435] IPVS: using max 26 ests per chain, 62400 per kthread [ 129.821633][ C0] syz_tun: tun_net_xmit 42 [ 130.164588][ T7470] tipc: Enabling of bearer rejected, already enabled [ 130.195595][ T7470] netlink: 24 bytes leftover after parsing attributes in process `syz.0.479'. [ 130.729304][ T7498] netlink: 'syz.1.487': attribute type 1 has an invalid length. [ 130.773234][ T7498] netlink: 'syz.1.487': attribute type 2 has an invalid length. [ 130.822592][ T7498] netlink: 3988 bytes leftover after parsing attributes in process `syz.1.487'. [ 130.986258][ T7512] netlink: 'syz.3.491': attribute type 1 has an invalid length. [ 131.019648][ T7512] netlink: 224 bytes leftover after parsing attributes in process `syz.3.491'. [ 131.045793][ T7512] nbd: illegal input index 1048576 [ 131.066266][ T7516] tipc: Started in network mode [ 131.090745][ T7516] tipc: Node identity ac14140f, cluster identity 4711 [ 131.112443][ T7516] tipc: New replicast peer: 255.255.255.255 [ 131.129925][ T7516] tipc: Enabled bearer , priority 10 [ 131.160513][ T7518] netlink: 12 bytes leftover after parsing attributes in process `syz.4.494'. [ 131.289214][ T7518] 8021q: adding VLAN 0 to HW filter on device bond2 [ 131.404615][ T7519] 8021q: adding VLAN 0 to HW filter on device bond2 [ 131.435209][ T7519] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 131.460238][ T7519] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 131.580091][ T7529] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 131.598364][ T7529] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 131.696100][ T7543] nbd: couldn't find device at index 1678288510 [ 132.120865][ T7570] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 132.230660][ T5952] tipc: Node number set to 2886997007 [ 132.414608][ T7581] tipc: New replicast peer: 255.255.255.255 [ 132.431341][ T7581] tipc: Enabled bearer , priority 10 [ 132.704929][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.711821][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.446162][ T7618] tipc: Enabling of bearer rejected, already enabled [ 133.462976][ T7618] __nla_validate_parse: 5 callbacks suppressed [ 133.462990][ T7618] netlink: 24 bytes leftover after parsing attributes in process `syz.3.528'. [ 133.538965][ T7622] validate_nla: 2 callbacks suppressed [ 133.538983][ T7622] netlink: 'syz.4.530': attribute type 8 has an invalid length. [ 133.551176][ T5869] tipc: Node number set to 2854383776 [ 133.565357][ T7625] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 133.601923][ T7625] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 134.136309][ T7659] tipc: Enabling of bearer rejected, already enabled [ 134.174970][ T7659] netlink: 24 bytes leftover after parsing attributes in process `syz.1.544'. [ 134.455031][ T7671] netlink: 'syz.0.549': attribute type 13 has an invalid length. [ 134.644458][ T7684] ksmbd: Unknown IPC event: 3, ignore. [ 134.674337][ T7687] netlink: 'syz.0.556': attribute type 1 has an invalid length. [ 134.756194][ T7687] bond1: (slave geneve3): making interface the new active one [ 134.764370][ T7687] bond1: (slave geneve3): Enslaving as an active interface with an up link [ 134.773317][ T3508] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 20004 - 0 [ 134.812061][ T3508] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 20004 - 0 [ 134.835429][ T3508] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 20004 - 0 [ 134.848337][ T3508] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 20004 - 0 [ 134.859143][ T7691] netlink: 24 bytes leftover after parsing attributes in process `syz.2.558'. [ 135.567410][ T7732] FAULT_INJECTION: forcing a failure. [ 135.567410][ T7732] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 135.590722][ T7732] CPU: 1 UID: 0 PID: 7732 Comm: syz.2.573 Not tainted syzkaller #0 PREEMPT(full) [ 135.590747][ T7732] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 135.590759][ T7732] Call Trace: [ 135.590767][ T7732] [ 135.590775][ T7732] dump_stack_lvl+0x189/0x250 [ 135.590812][ T7732] ? __pfx____ratelimit+0x10/0x10 [ 135.590839][ T7732] ? __pfx_dump_stack_lvl+0x10/0x10 [ 135.590862][ T7732] ? __pfx__printk+0x10/0x10 [ 135.590902][ T7732] should_fail_ex+0x414/0x560 [ 135.590933][ T7732] _copy_to_user+0x31/0xb0 [ 135.590957][ T7732] simple_read_from_buffer+0xe1/0x170 [ 135.590989][ T7732] proc_fail_nth_read+0x1b3/0x220 [ 135.591015][ T7732] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 135.591058][ T7732] ? rw_verify_area+0x2a6/0x4d0 [ 135.591083][ T7732] ? __lock_acquire+0xab9/0xd20 [ 135.591111][ T7732] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 135.591136][ T7732] vfs_read+0x200/0xa30 [ 135.591162][ T7732] ? fdget_pos+0x247/0x320 [ 135.591185][ T7732] ? __pfx___mutex_lock+0x10/0x10 [ 135.591215][ T7732] ? __pfx_vfs_read+0x10/0x10 [ 135.591244][ T7732] ? __fget_files+0x2a/0x420 [ 135.591280][ T7732] ? __fget_files+0x3a0/0x420 [ 135.591309][ T7732] ? __fget_files+0x2a/0x420 [ 135.591359][ T7732] ksys_read+0x145/0x250 [ 135.591384][ T7732] ? __fget_files+0x3a0/0x420 [ 135.591417][ T7732] ? __pfx_ksys_read+0x10/0x10 [ 135.591449][ T7732] ? do_syscall_64+0xbe/0x3b0 [ 135.591483][ T7732] do_syscall_64+0xfa/0x3b0 [ 135.591511][ T7732] ? lockdep_hardirqs_on+0x9c/0x150 [ 135.591538][ T7732] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.591559][ T7732] ? clear_bhb_loop+0x60/0xb0 [ 135.591585][ T7732] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.591605][ T7732] RIP: 0033:0x7fb64d58d5fc [ 135.591629][ T7732] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 135.591646][ T7732] RSP: 002b:00007fb64e394030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 135.591671][ T7732] RAX: ffffffffffffffda RBX: 00007fb64d7b5fa0 RCX: 00007fb64d58d5fc [ 135.591686][ T7732] RDX: 000000000000000f RSI: 00007fb64e3940a0 RDI: 0000000000000004 [ 135.591699][ T7732] RBP: 00007fb64e394090 R08: 0000000000000000 R09: 0000000000000000 [ 135.591711][ T7732] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 135.591722][ T7732] R13: 00007fb64d7b6038 R14: 00007fb64d7b5fa0 R15: 00007ffe13a05bb8 [ 135.591754][ T7732] [ 135.981070][ T7739] netlink: 24 bytes leftover after parsing attributes in process `syz.3.574'. [ 136.101779][ T7743] syzkaller0: entered promiscuous mode [ 136.109528][ T7743] syzkaller0: entered allmulticast mode [ 136.131952][ T7743] tipc: Enabled bearer , priority 0 [ 136.165491][ T7742] tipc: Resetting bearer [ 136.278204][ T7756] FAULT_INJECTION: forcing a failure. [ 136.278204][ T7756] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 136.294437][ T7756] CPU: 0 UID: 0 PID: 7756 Comm: syz.0.581 Not tainted syzkaller #0 PREEMPT(full) [ 136.294460][ T7756] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 136.294471][ T7756] Call Trace: [ 136.294478][ T7756] [ 136.294486][ T7756] dump_stack_lvl+0x189/0x250 [ 136.294513][ T7756] ? __pfx____ratelimit+0x10/0x10 [ 136.294537][ T7756] ? __pfx_dump_stack_lvl+0x10/0x10 [ 136.294558][ T7756] ? __pfx__printk+0x10/0x10 [ 136.294595][ T7756] should_fail_ex+0x414/0x560 [ 136.294624][ T7756] _copy_to_user+0x31/0xb0 [ 136.294647][ T7756] simple_read_from_buffer+0xe1/0x170 [ 136.294678][ T7756] proc_fail_nth_read+0x1b3/0x220 [ 136.294702][ T7756] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 136.294725][ T7756] ? rw_verify_area+0x2a6/0x4d0 [ 136.294747][ T7756] ? __lock_acquire+0xab9/0xd20 [ 136.294772][ T7756] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 136.294794][ T7756] vfs_read+0x200/0xa30 [ 136.294816][ T7756] ? fdget_pos+0x247/0x320 [ 136.294836][ T7756] ? __pfx___mutex_lock+0x10/0x10 [ 136.294863][ T7756] ? __pfx_vfs_read+0x10/0x10 [ 136.294888][ T7756] ? __fget_files+0x2a/0x420 [ 136.294919][ T7756] ? __fget_files+0x3a0/0x420 [ 136.294946][ T7756] ? __fget_files+0x2a/0x420 [ 136.294982][ T7756] ksys_read+0x145/0x250 [ 136.295008][ T7756] ? __pfx_ksys_read+0x10/0x10 [ 136.295037][ T7756] ? do_syscall_64+0xbe/0x3b0 [ 136.295068][ T7756] do_syscall_64+0xfa/0x3b0 [ 136.295091][ T7756] ? lockdep_hardirqs_on+0x9c/0x150 [ 136.295133][ T7756] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.295152][ T7756] ? clear_bhb_loop+0x60/0xb0 [ 136.295176][ T7756] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.295194][ T7756] RIP: 0033:0x7f78cff8d5fc [ 136.295212][ T7756] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 136.295228][ T7756] RSP: 002b:00007f78d0e00030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 136.295248][ T7756] RAX: ffffffffffffffda RBX: 00007f78d01b5fa0 RCX: 00007f78cff8d5fc [ 136.295262][ T7756] RDX: 000000000000000f RSI: 00007f78d0e000a0 RDI: 0000000000000004 [ 136.295273][ T7756] RBP: 00007f78d0e00090 R08: 0000000000000000 R09: 0000000000000000 [ 136.295285][ T7756] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 136.295296][ T7756] R13: 00007f78d01b6038 R14: 00007f78d01b5fa0 R15: 00007ffde142daf8 [ 136.295333][ T7756] [ 136.698449][ T7769] netlink: 16 bytes leftover after parsing attributes in process `syz.3.584'. [ 136.809815][ T7773] netlink: 4 bytes leftover after parsing attributes in process `syz.3.584'. [ 137.046080][ T7781] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 137.278663][ T7781] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 137.873448][ T7742] tipc: Disabling bearer [ 138.016730][ T7788] netlink: 32 bytes leftover after parsing attributes in process `syz.4.591'. [ 138.096419][ T7793] sctp: [Deprecated]: syz.4.591 (pid 7793) Use of struct sctp_assoc_value in delayed_ack socket option. [ 138.096419][ T7793] Use struct sctp_sack_info instead [ 138.124570][ T7792] syzkaller1: entered promiscuous mode [ 138.130502][ T7792] syzkaller1: entered allmulticast mode [ 138.229929][ T7797] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 138.497369][ T7810] tipc: Enabling of bearer rejected, failed to enable media [ 138.598798][ T7813] netlink: 20 bytes leftover after parsing attributes in process `syz.0.604'. [ 138.697928][ T7815] netlink: 'syz.3.603': attribute type 9 has an invalid length. [ 138.710362][ T7815] netlink: 32 bytes leftover after parsing attributes in process `syz.3.603'. [ 138.829789][ T7826] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 138.967574][ T7832] netlink: 4 bytes leftover after parsing attributes in process `syz.4.609'. [ 139.456470][ T7857] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.618'. [ 139.530535][ T7862] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 139.541950][ T7861] IPVS: sync thread started: state = BACKUP, mcast_ifn = vlan0, syncid = 3, id = 0 [ 139.637627][ T7864] netlink: 'syz.0.615': attribute type 13 has an invalid length. [ 139.690921][ T7864] netlink: 4 bytes leftover after parsing attributes in process `syz.0.615'. [ 139.767627][ T7864] netlink: 'syz.0.615': attribute type 13 has an invalid length. [ 139.775488][ T3482] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 139.775771][ T3482] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 139.775829][ T3482] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 139.804373][ T7864] netlink: 4 bytes leftover after parsing attributes in process `syz.0.615'. [ 139.852317][ T3482] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 139.962149][ T7886] sch_tbf: peakrate 7 is lower than or equals to rate 2147483647 ! [ 140.037079][ T7886] sch_tbf: peakrate 7 is lower than or equals to rate 2147483647 ! [ 140.064251][ T7889] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 140.381635][ T51] Bluetooth: hci4: command tx timeout [ 140.494859][ T7910] netlink: 20 bytes leftover after parsing attributes in process `syz.1.633'. [ 140.528094][ T7908] netlink: 'syz.1.633': attribute type 1 has an invalid length. [ 140.841926][ T7920] netlink: 24 bytes leftover after parsing attributes in process `syz.1.637'. [ 140.859640][ T7922] netlink: 'syz.2.638': attribute type 10 has an invalid length. [ 140.883560][ T7922] netlink: 40 bytes leftover after parsing attributes in process `syz.2.638'. [ 140.946030][ T7922] team0: Port device geneve0 added [ 141.080109][ T7927] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 141.189724][ T7932] netlink: 20 bytes leftover after parsing attributes in process `syz.4.641'. [ 141.580501][ T7951] 0ªî{X¹¦: renamed from gretap0 (while UP) [ 141.604246][ T7951] 0ªî{X¹¦: entered allmulticast mode [ 141.616253][ T7951] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 141.716681][ T7960] netlink: 'syz.3.650': attribute type 1 has an invalid length. [ 141.724563][ T7960] netlink: 'syz.3.650': attribute type 2 has an invalid length. [ 142.083695][ T7978] bond0: entered promiscuous mode [ 142.091038][ T7978] bond_slave_0: entered promiscuous mode [ 142.098108][ T7978] bond_slave_1: entered promiscuous mode [ 142.104588][ T7978] bond0: entered allmulticast mode [ 142.115844][ T7978] bond_slave_0: entered allmulticast mode [ 142.124533][ T7978] bond_slave_1: entered allmulticast mode [ 142.176108][ T24] IPVS: starting estimator thread 0... [ 142.182170][ T7981] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 142.270667][ T7987] IPVS: using max 26 ests per chain, 62400 per kthread [ 142.328879][ T7994] bridge0: port 1(bridge_slave_0) entered learning state [ 142.384665][ T7998] tipc: Enabling of bearer rejected, already enabled [ 142.556018][ T7997] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.564416][ T7997] bridge0: port 1(bridge_slave_0) entered blocking state [ 142.571681][ T7997] bridge0: port 1(bridge_slave_0) entered forwarding state [ 142.797143][ T8013] netlink: 'syz.3.665': attribute type 4 has an invalid length. [ 143.016910][ T8025] vlan2: entered allmulticast mode [ 143.042525][ T8025] bond0: entered allmulticast mode [ 143.100298][ T8030] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 143.282257][ T8036] tipc: Enabling of bearer rejected, already enabled [ 143.304417][ T8038] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 143.527650][ T8048] netlink: 'syz.2.681': attribute type 6 has an invalid length. [ 143.548809][ T8048] netlink: 'syz.2.681': attribute type 1 has an invalid length. [ 143.619707][ T8054] __nla_validate_parse: 9 callbacks suppressed [ 143.619726][ T8054] netlink: 12 bytes leftover after parsing attributes in process `syz.4.684'. [ 143.714658][ T8059] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 143.917482][ T8068] tipc: Enabling of bearer rejected, already enabled [ 143.946677][ T8068] netlink: 24 bytes leftover after parsing attributes in process `syz.2.691'. [ 144.019128][ T8074] netlink: 'syz.3.693': attribute type 21 has an invalid length. [ 144.033642][ T8073] netlink: 'syz.0.692': attribute type 4 has an invalid length. [ 144.048968][ T8074] netlink: 156 bytes leftover after parsing attributes in process `syz.3.693'. [ 144.115042][ T8074] netlink: 16 bytes leftover after parsing attributes in process `syz.3.693'. [ 144.272208][ T8096] IPVS: dh: SCTP 172.20.20.187:0 - no destination available [ 144.289925][ T24] IPVS: starting estimator thread 0... [ 144.390624][ T8097] IPVS: using max 27 ests per chain, 64800 per kthread [ 144.517948][ T775] nci: nci_ntf_packet: unknown ntf opcode 0x206 [ 144.560623][ T8115] netlink: 'syz.1.703': attribute type 4 has an invalid length. [ 144.619198][ T8118] netlink: 'syz.1.703': attribute type 4 has an invalid length. [ 144.673886][ T8115] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 145.236793][ T8131] netlink: 244 bytes leftover after parsing attributes in process `syz.3.707'. [ 145.927383][ T8151] block nbd1: server does not support multiple connections per device. [ 145.950172][ T8151] block nbd1: shutting down sockets [ 146.166407][ T8170] tipc: Enabling of bearer rejected, already enabled [ 146.231081][ T8171] netlink: 4 bytes leftover after parsing attributes in process `syz.2.719'. [ 146.362937][ T8174] team0: Mode changed to "loadbalance" [ 146.389919][ T8174] netlink: 2 bytes leftover after parsing attributes in process `syz.1.720'. [ 146.475065][ T8183] netlink: 8 bytes leftover after parsing attributes in process `syz.4.723'. [ 146.578281][ T8189] netlink: 44 bytes leftover after parsing attributes in process `syz.0.722'. [ 146.743544][ T8192] netlink: 4 bytes leftover after parsing attributes in process `syz.2.724'. [ 146.790436][ T8192] chnl_net:caif_netlink_parms(): no params data found [ 147.170384][ T8205] tipc: Enabling of bearer rejected, already enabled [ 147.567333][ T8226] netlink: 'syz.2.737': attribute type 26 has an invalid length. [ 147.599774][ T8226] netlink: 'syz.2.737': attribute type 26 has an invalid length. [ 147.842642][ T8239] tipc: Enabling of bearer rejected, already enabled [ 147.991010][ T8246] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 148.616769][ T8273] tipc: Enabling of bearer rejected, already enabled [ 148.658990][ T8273] __nla_validate_parse: 11 callbacks suppressed [ 148.659008][ T8273] netlink: 24 bytes leftover after parsing attributes in process `syz.3.756'. [ 148.770225][ T8278] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 148.859953][ T8283] netlink: 16 bytes leftover after parsing attributes in process `syz.0.760'. [ 149.132724][ T8294] vlan1: entered promiscuous mode [ 149.137904][ T8294] bridge0: entered promiscuous mode [ 149.482628][ T8314] netlink: 8 bytes leftover after parsing attributes in process `syz.0.771'. [ 149.520769][ T8316] netlink: 4 bytes leftover after parsing attributes in process `syz.3.773'. [ 149.547999][ T8323] netlink: 44 bytes leftover after parsing attributes in process `syz.0.771'. [ 149.696331][ T8331] tipc: Enabling of bearer rejected, already enabled [ 149.735833][ T8331] netlink: 24 bytes leftover after parsing attributes in process `syz.4.776'. [ 149.833614][ T8340] netlink: 4 bytes leftover after parsing attributes in process `syz.0.778'. [ 149.907811][ T8340] bridge_slave_1: left allmulticast mode [ 149.925042][ T8340] bridge_slave_1: left promiscuous mode [ 149.942142][ T8340] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.968426][ T8340] bridge_slave_0: left allmulticast mode [ 149.974378][ T8340] bridge_slave_0: left promiscuous mode [ 149.989632][ T8340] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.056077][ T8349] netlink: 'syz.2.783': attribute type 1 has an invalid length. [ 150.082968][ T8350] netlink: 'syz.2.783': attribute type 1 has an invalid length. [ 150.478498][ T8367] netlink: 4 bytes leftover after parsing attributes in process `syz.0.787'. [ 150.584850][ T8371] netlink: 36 bytes leftover after parsing attributes in process `syz.1.789'. [ 150.746896][ T8387] netlink: 36 bytes leftover after parsing attributes in process `syz.2.788'. [ 150.751493][ T6796] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x2 [ 151.215191][ T8413] netlink: 'syz.4.800': attribute type 23 has an invalid length. [ 151.240214][ T8403] hsr_slave_1 (unregistering): left promiscuous mode [ 151.277131][ T8407] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 152.013492][ T8451] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 152.154717][ T8455] netlink: 'syz.1.814': attribute type 5 has an invalid length. [ 152.194029][ T8455] geneve4: entered promiscuous mode [ 152.221495][ T8455] geneve4: entered allmulticast mode [ 152.261179][ T3508] netdevsim netdevsim1 eth0: set [1, 2] type 2 family 0 port 256 - 0 [ 152.277079][ T3508] netdevsim netdevsim1 eth1: set [1, 2] type 2 family 0 port 256 - 0 [ 152.305155][ T8470] syz_tun: tun_net_xmit 42 [ 152.412685][ T3508] netdevsim netdevsim1 eth2: set [1, 2] type 2 family 0 port 256 - 0 [ 152.435929][ T3508] netdevsim netdevsim1 eth3: set [1, 2] type 2 family 0 port 256 - 0 [ 153.265306][ T8512] netlink: 'syz.3.831': attribute type 12 has an invalid length. [ 153.290951][ T8512] netlink: 'syz.3.831': attribute type 29 has an invalid length. [ 153.350638][ C1] syz_tun: tun_net_xmit 42 [ 153.359170][ T8517] (unnamed net_device) (uninitialized): option packets_per_slave: mode dependency failed, not supported in mode active-backup(1) [ 153.683435][ T8536] netlink: 'syz.4.841': attribute type 5 has an invalid length. [ 153.692852][ T8530] netlink: 'syz.3.838': attribute type 1 has an invalid length. [ 153.703703][ T8530] nbd: error processing sock list [ 153.708860][ T8530] block nbd1: shutting down sockets [ 154.164789][ T8567] netlink: 'syz.4.849': attribute type 1 has an invalid length. [ 154.210443][ T8566] __nla_validate_parse: 17 callbacks suppressed [ 154.210461][ T8566] netlink: 40 bytes leftover after parsing attributes in process `syz.3.850'. [ 154.256957][ T8568] netlink: 8 bytes leftover after parsing attributes in process `syz.2.851'. [ 154.295999][ T8566] bridge0: port 2(bridge_slave_1) entered disabled state [ 154.304455][ T8566] bridge0: port 1(bridge_slave_0) entered disabled state [ 154.390623][ C1] syz_tun: tun_net_xmit 42 [ 155.012636][ T8606] veth1_to_bond: entered allmulticast mode [ 155.099833][ T8606] netlink: 4 bytes leftover after parsing attributes in process `syz.1.863'. [ 155.377175][ T8606] veth1_to_bond (unregistering): left allmulticast mode [ 155.745658][ T8627] netlink: 104 bytes leftover after parsing attributes in process `syz.1.870'. [ 156.013730][ T8639] netlink: 260 bytes leftover after parsing attributes in process `syz.0.873'. [ 156.037977][ T8639] netlink: 24 bytes leftover after parsing attributes in process `syz.0.873'. [ 156.065884][ T13] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 156.078711][ T8642] netlink: 24 bytes leftover after parsing attributes in process `syz.0.873'. [ 156.099057][ T13] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 156.134797][ T13] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 156.187840][ T13] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 156.399680][ T8660] netlink: 'syz.0.879': attribute type 1 has an invalid length. [ 156.428596][ T8660] netlink: 244 bytes leftover after parsing attributes in process `syz.0.879'. [ 156.492117][ T8666] netlink: 'syz.3.878': attribute type 5 has an invalid length. [ 157.125819][ T8696] dummy0: vlans aren't supported yet for dev_uc|mc_add() [ 157.159912][ T8697] netlink: 48 bytes leftover after parsing attributes in process `syz.3.886'. [ 157.224297][ T8697] netlink: 244 bytes leftover after parsing attributes in process `syz.3.886'. [ 158.039199][ T8744] netlink: 'syz.4.896': attribute type 5 has an invalid length. [ 158.358479][ T8759] netlink: 'syz.0.902': attribute type 12 has an invalid length. [ 159.218540][ T8812] netlink: 'syz.1.916': attribute type 21 has an invalid length. [ 159.283633][ T8818] netlink: 'syz.2.917': attribute type 5 has an invalid length. [ 159.644685][ T8827] [ 159.647061][ T8827] ====================================================== [ 159.654083][ T8827] WARNING: possible circular locking dependency detected [ 159.661116][ T8827] syzkaller #0 Not tainted [ 159.665541][ T8827] ------------------------------------------------------ [ 159.672583][ T8827] syz.4.920/8827 is trying to acquire lock: [ 159.678482][ T8827] ffffffff8f68d2b8 (nr_node_list_lock){+...}-{3:3}, at: nr_rt_device_down+0xa9/0x720 [ 159.687988][ T8827] [ 159.687988][ T8827] but task is already holding lock: [ 159.695351][ T8827] ffffffff8f68d258 (nr_neigh_list_lock){+...}-{3:3}, at: nr_rt_device_down+0x28/0x720 [ 159.704929][ T8827] [ 159.704929][ T8827] which lock already depends on the new lock. [ 159.704929][ T8827] [ 159.715359][ T8827] [ 159.715359][ T8827] the existing dependency chain (in reverse order) is: [ 159.724367][ T8827] [ 159.724367][ T8827] -> #2 (nr_neigh_list_lock){+...}-{3:3}: [ 159.732288][ T8827] lock_acquire+0x120/0x360 [ 159.737325][ T8827] _raw_spin_lock_bh+0x36/0x50 [ 159.742615][ T8827] nr_rt_ioctl+0x390/0xd50 [ 159.747571][ T8827] sock_do_ioctl+0xd9/0x300 [ 159.752599][ T8827] sock_ioctl+0x576/0x790 [ 159.757448][ T8827] __se_sys_ioctl+0xfc/0x170 [ 159.762561][ T8827] do_syscall_64+0xfa/0x3b0 [ 159.767596][ T8827] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.774009][ T8827] [ 159.774009][ T8827] -> #1 (&nr_node->node_lock){+...}-{3:3}: [ 159.782016][ T8827] lock_acquire+0x120/0x360 [ 159.787043][ T8827] _raw_spin_lock_bh+0x36/0x50 [ 159.792326][ T8827] nr_rt_ioctl+0x193/0xd50 [ 159.797296][ T8827] sock_do_ioctl+0xd9/0x300 [ 159.802320][ T8827] sock_ioctl+0x576/0x790 [ 159.807179][ T8827] __se_sys_ioctl+0xfc/0x170 [ 159.812288][ T8827] do_syscall_64+0xfa/0x3b0 [ 159.817326][ T8827] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.823743][ T8827] [ 159.823743][ T8827] -> #0 (nr_node_list_lock){+...}-{3:3}: [ 159.831574][ T8827] validate_chain+0xb9b/0x2140 [ 159.836856][ T8827] __lock_acquire+0xab9/0xd20 [ 159.842063][ T8827] lock_acquire+0x120/0x360 [ 159.847107][ T8827] _raw_spin_lock_bh+0x36/0x50 [ 159.852404][ T8827] nr_rt_device_down+0xa9/0x720 [ 159.857777][ T8827] nr_device_event+0x137/0x150 [ 159.863060][ T8827] notifier_call_chain+0x1b3/0x3e0 [ 159.868693][ T8827] __dev_notify_flags+0x18d/0x2e0 [ 159.874273][ T8827] netif_change_flags+0xe8/0x1a0 [ 159.879734][ T8827] dev_change_flags+0x130/0x260 [ 159.885114][ T8827] dev_ioctl+0x7b4/0x1150 [ 159.889970][ T8827] sock_do_ioctl+0x22c/0x300 [ 159.895083][ T8827] sock_ioctl+0x576/0x790 [ 159.899941][ T8827] __se_sys_ioctl+0xfc/0x170 [ 159.905053][ T8827] do_syscall_64+0xfa/0x3b0 [ 159.910093][ T8827] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.916527][ T8827] [ 159.916527][ T8827] other info that might help us debug this: [ 159.916527][ T8827] [ 159.926750][ T8827] Chain exists of: [ 159.926750][ T8827] nr_node_list_lock --> &nr_node->node_lock --> nr_neigh_list_lock [ 159.926750][ T8827] [ 159.940591][ T8827] Possible unsafe locking scenario: [ 159.940591][ T8827] [ 159.948033][ T8827] CPU0 CPU1 [ 159.953424][ T8827] ---- ---- [ 159.958787][ T8827] lock(nr_neigh_list_lock); [ 159.963469][ T8827] lock(&nr_node->node_lock); [ 159.970749][ T8827] lock(nr_neigh_list_lock); [ 159.977960][ T8827] lock(nr_node_list_lock); [ 159.982563][ T8827] [ 159.982563][ T8827] *** DEADLOCK *** [ 159.982563][ T8827] [ 159.990701][ T8827] 2 locks held by syz.4.920/8827: [ 159.995722][ T8827] #0: ffffffff8f537c08 (rtnl_mutex){+.+.}-{4:4}, at: dev_ioctl+0x7a4/0x1150 [ 160.004529][ T8827] #1: ffffffff8f68d258 (nr_neigh_list_lock){+...}-{3:3}, at: nr_rt_device_down+0x28/0x720 [ 160.014540][ T8827] [ 160.014540][ T8827] stack backtrace: [ 160.020423][ T8827] CPU: 0 UID: 0 PID: 8827 Comm: syz.4.920 Not tainted syzkaller #0 PREEMPT(full) [ 160.020441][ T8827] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 160.020451][ T8827] Call Trace: [ 160.020457][ T8827] [ 160.020464][ T8827] dump_stack_lvl+0x189/0x250 [ 160.020487][ T8827] ? __pfx_dump_stack_lvl+0x10/0x10 [ 160.020506][ T8827] ? __pfx__printk+0x10/0x10 [ 160.020533][ T8827] ? print_lock_name+0xde/0x100 [ 160.020557][ T8827] print_circular_bug+0x2ee/0x310 [ 160.020577][ T8827] check_noncircular+0x134/0x160 [ 160.020596][ T8827] validate_chain+0xb9b/0x2140 [ 160.020614][ T8827] ? rt6_disable_ip+0x6b3/0x720 [ 160.020639][ T8827] ? __lock_acquire+0xab9/0xd20 [ 160.020663][ T8827] __lock_acquire+0xab9/0xd20 [ 160.020688][ T8827] ? nr_rt_device_down+0xa9/0x720 [ 160.020705][ T8827] lock_acquire+0x120/0x360 [ 160.020728][ T8827] ? nr_rt_device_down+0xa9/0x720 [ 160.020749][ T8827] ? nr_rt_device_down+0xa9/0x720 [ 160.020766][ T8827] _raw_spin_lock_bh+0x36/0x50 [ 160.020795][ T8827] ? nr_rt_device_down+0xa9/0x720 [ 160.020811][ T8827] nr_rt_device_down+0xa9/0x720 [ 160.020828][ T8827] ? do_raw_spin_unlock+0x122/0x240 [ 160.020848][ T8827] nr_device_event+0x137/0x150 [ 160.020863][ T8827] notifier_call_chain+0x1b3/0x3e0 [ 160.020881][ T8827] __dev_notify_flags+0x18d/0x2e0 [ 160.020906][ T8827] ? __pfx___dev_notify_flags+0x10/0x10 [ 160.020928][ T8827] ? __dev_change_flags+0x4cc/0x6d0 [ 160.020943][ T8827] ? __pfx___dev_change_flags+0x10/0x10 [ 160.020956][ T8827] ? full_name_hash+0x92/0xe0 [ 160.020973][ T8827] netif_change_flags+0xe8/0x1a0 [ 160.020988][ T8827] dev_change_flags+0x130/0x260 [ 160.021012][ T8827] dev_ioctl+0x7b4/0x1150 [ 160.021034][ T8827] sock_do_ioctl+0x22c/0x300 [ 160.021053][ T8827] ? __pfx_sock_do_ioctl+0x10/0x10 [ 160.021070][ T8827] ? __lock_acquire+0xab9/0xd20 [ 160.021096][ T8827] sock_ioctl+0x576/0x790 [ 160.021119][ T8827] ? __pfx_sock_ioctl+0x10/0x10 [ 160.021136][ T8827] ? __fget_files+0x2a/0x420 [ 160.021158][ T8827] ? __fget_files+0x3a0/0x420 [ 160.021178][ T8827] ? __fget_files+0x2a/0x420 [ 160.021201][ T8827] ? bpf_lsm_file_ioctl+0x9/0x20 [ 160.021220][ T8827] ? __pfx_sock_ioctl+0x10/0x10 [ 160.021236][ T8827] __se_sys_ioctl+0xfc/0x170 [ 160.021255][ T8827] do_syscall_64+0xfa/0x3b0 [ 160.021276][ T8827] ? lockdep_hardirqs_on+0x9c/0x150 [ 160.021295][ T8827] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.021310][ T8827] ? clear_bhb_loop+0x60/0xb0 [ 160.021326][ T8827] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.021341][ T8827] RIP: 0033:0x7fe1dd78ebe9 [ 160.021354][ T8827] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 160.021369][ T8827] RSP: 002b:00007fe1de578038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 160.021384][ T8827] RAX: ffffffffffffffda RBX: 00007fe1dd9b5fa0 RCX: 00007fe1dd78ebe9 [ 160.021395][ T8827] RDX: 0000200000000000 RSI: 0000000000008914 RDI: 0000000000000010 [ 160.021405][ T8827] RBP: 00007fe1dd811e19 R08: 0000000000000000 R09: 0000000000000000 [ 160.021415][ T8827] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 160.021441][ T8827] R13: 00007fe1dd9b6038 R14: 00007fe1dd9b5fa0 R15: 00007ffc927d8508 [ 160.021459][ T8827] [ 160.350863][ T8843] __nla_validate_parse: 4 callbacks suppressed [ 160.350880][ T8843] netlink: 28 bytes leftover after parsing attributes in process `syz.0.926'. [ 160.367726][ T8843] netlink: 28 bytes leftover after parsing attributes in process `syz.0.926'.