last executing test programs: 4.582686066s ago: executing program 2 (id=1752): r0 = getpid() bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x10010000004e20}, 0x1c) syz_emit_ethernet(0x83, &(0x7f0000000500)=ANY=[@ANYRESDEC=r0], 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f0000000100)={0x0, 0x4100, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r2, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r0}}]}, 0x3c}}, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r4, 0xb3664000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, 0x0, 0x0) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x491, 0x0, 0x0) r7 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f0000000200), 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000540)=[@sack_perm], 0x1) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYRESOCT=r0], 0x0, 0x53, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) r9 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r9, 0x890b, &(0x7f0000000000)={r5}) r10 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r10, 0x0, 0x482, &(0x7f0000000180)=""/78, &(0x7f0000000040)=0x4e) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r3, r8}, 0x4c) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_START_P2P_DEVICE(r7, &(0x7f0000000440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x14, 0x0, 0x400, 0x70bd26, 0x25dfdbfe, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x40001}, 0x8485) r11 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r11, 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r7, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) 3.973929038s ago: executing program 4 (id=1757): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f00000002c0)=[@mss, @sack_perm, @timestamp, @sack_perm, @window={0x3, 0x8000, 0x800}, @window={0x3, 0x0, 0xfffc}, @timestamp, @timestamp], 0x8) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000060000000800000001"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x2, 0xc, 0x1400, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000d40)=ANY=[@ANYBLOB="180000000000e3ff000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r4}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x10, 0x4, 0x8, 0x8, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) socket$nl_rdma(0x10, 0x3, 0x14) socket$igmp6(0xa, 0x3, 0x2) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x80001, 0x0) socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x9c, &(0x7f0000000240)=[@in6={0xa, 0x4e23, 0x200, @mcast2, 0x8}, @in={0x2, 0x4e22, @multicast1}, @in6={0xa, 0x4e21, 0xa40, @remote, 0x2}, @in6={0xa, 0x4e20, 0x7f, @ipv4={'\x00', '\xff\xff', @empty}, 0x6}, @in6={0xa, 0x4e24, 0x2, @loopback, 0x7}, @in6={0xa, 0x4e22, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}, 0x3}]}, &(0x7f0000000140)=0x10) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r2, 0x84, 0x78, &(0x7f0000000300)=r5, 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6(0xa, 0x3, 0x87) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x19, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, [@call={0x85, 0x0, 0x0, 0x1000b4}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @cgroup_sockopt=0x15, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) close(0x3) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r6, &(0x7f0000000000), &(0x7f0000000500)=""/73}, 0x20) 3.689288005s ago: executing program 4 (id=1759): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0400000000000008000000000000"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) ppoll(&(0x7f0000000500)=[{r1}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x1, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000000)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x1, 0x7fffffff, 0x6}, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) connect$inet(r0, &(0x7f00000006c0)={0x2, 0x0, @empty}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000900)=0xffffffffffffffff, 0x4) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x80800) sendmsg$NFT_MSG_GETFLOWTABLE(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=ANY=[], 0x5f}, 0x1, 0x0, 0x0, 0x28000001}, 0x948be6b639037758) recvmsg(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000000)=""/27, 0x1b}], 0x1}, 0x2000) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000008c0)="d8000000180081000181f782db4cb904021d0800fd007c05e8fe50a10a001200014002020c600e41b0000900ac000a0501000000160012000a00ff150048035c3b61c1d67f6f94007134cf6efb8007a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5a02000000ca9ec855eff0eb3f365d3a71d95667daffffffffff1f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505dba36efab70cdb67e8d1cc5c7b06b1eab31f7b05da962834cedde6fdfcf45add8e51ff159ca9680d0", 0xd8}], 0x1}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000700)='cpuacct.usage_percpu\x00', 0x275a, 0x0) sendmsg$NFT_MSG_GETSET(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000200)=ANY=[@ANYBLOB="440000000a8465fd5076a4b8919a155bf3e70a01040000000000000000030010040800044000000000080003400000002608000c40000000010800084000000000080004400000000408000f4000007c0fe7b4b084a4ffb9d9440000"], 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x44) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$sock_int(r6, 0x1, 0x7, &(0x7f0000000280), 0x4) connect$inet(r6, &(0x7f0000000140)={0x2, 0x4e23, @private=0xa010101}, 0x10) 2.683202417s ago: executing program 4 (id=1766): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) unshare(0x62040200) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) write$tun(0xffffffffffffffff, &(0x7f0000000440)=ANY=[@ANYBLOB="00000000ffffffffffffaaaaaaaaaabb08004500002c00000000002f9078ac1c0001e000000100006558001890780400000000000000be04000000"], 0x3e) r1 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$int_in(r1, 0x5452, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r2}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r6, 0x0, 0x1, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) pselect6(0x40, &(0x7f00000001c0)={0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x5f8, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) vmsplice(r6, &(0x7f00000005c0)=[{&(0x7f0000000180)="04", 0x1}], 0x1, 0x6) ioctl$sock_inet_udp_SIOCINQ(r6, 0x541b, 0x0) write(r4, 0x0, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x22, &(0x7f0000000380)=0x1, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=ANY=[@ANYRES8=0x0, @ANYRES64=r3, @ANYRESHEX=r5, @ANYRESHEX=r4, @ANYRES8=r4, @ANYRES8=r2], 0x188}}, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r8, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r9, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) setsockopt$TIPC_SRC_DROPPABLE(r8, 0x10f, 0x8a, 0x0, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c00000037000b002dbd78000a000036d6ce1959880008000100", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x20000080) sendmsg$nl_xfrm(r7, &(0x7f0000000480)={0x0, 0x6535f20f43ca3a6d, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001030000000000000000fc0100000000000000000000000000003ed30000000000000000000000000000000000000000000002"], 0xb8}}, 0x0) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001b40)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="0100"/12], 0x14}}, 0x0) 2.498026079s ago: executing program 1 (id=1767): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18082000003000000000000000000400851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000000006600020000200000180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x700, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) 2.497389637s ago: executing program 2 (id=1768): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000004}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r4, 0x400448cc, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010000000000000000000800000008000300", @ANYRES32=r2, @ANYBLOB="7fdebf5f10a50eaf3717e835b74334cd87f04f05"], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) unshare(0x400) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f0000000180)=0x101d1, 0x4) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_MSG_GETRULE(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="2c000000070a01010000000000000000020000000956f05c7fae6d1871eced6030696b005b3a45607a3200000000ffff000073797a3000000000"], 0x2c}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="18030011000000cd00200000f3ffffff94000004000001ff"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xc, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000400)="b2", 0x1}, {&(0x7f0000000040)="000000070020ac", 0x7}], 0x2}, 0x0) r8 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$inet6_int(r8, 0x29, 0x46, 0x0, 0x0) connect$inet6(r8, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @loopback}, 0x62) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r9, 0x8933, &(0x7f0000000300)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="340000001a000100000000000000000002000000000000000000000008000100e0e0000108000300", @ANYRES32=r10], 0x34}}, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cgroup.kill\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x8, 0xe, &(0x7f0000000900)=ANY=[@ANYBLOB="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", @ANYRESHEX], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="10000000040000000400000001"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{r12}, &(0x7f0000000040), &(0x7f0000000a40)=r11}, 0x20) 2.302180551s ago: executing program 1 (id=1771): socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f00000009c0)=@assoc_value={0x0, 0x800}, 0x8) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c00"], 0x3c}}, 0x40000000) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 2.039677222s ago: executing program 0 (id=1773): socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000838500000004000000850000002a00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) (async, rerun: 32) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000340)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) (rerun: 32) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000003c0)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="1200000000000000c16de18c5564c5"], 0x20) (async) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) (async) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000240)=@o_path={&(0x7f0000000100)='./file0\x00', 0x0, 0x4018, r0}, 0x18) getpeername$packet(r1, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000480)=0x14) (async) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x3, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYBLOB="a519ff7886cf186d65d1ae43d7e480c564a89a3e4b7cb2579120ce8b7f06b6319d95b994390a617bc6262a435299044816fe73f5515b981fb5f2b55a5b3cdfab6bc5bd0bfb4ed5d8009e481fd6df331fed0901de7332cfcdb62cf8d234c9d3efe2573f48751e4dbd2a5e7b0ee188", @ANYRES64=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) socket$qrtr(0x2a, 0x2, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket(0x2b, 0x80801, 0x1) (async, rerun: 32) socket$alg(0x26, 0x5, 0x0) (async, rerun: 32) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="980000000000b90000000000000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r3}, 0x10) (async, rerun: 32) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_xfrm(0x10, 0x3, 0x6) socket$netlink(0x10, 0x3, 0x4) socket$nl_generic(0x10, 0x3, 0x10) socket$igmp(0x2, 0x3, 0x2) (async) socket$nl_rdma(0x10, 0x3, 0x14) socket$nl_xfrm(0x10, 0x3, 0x6) (async) socket$netlink(0x10, 0x3, 0x4) (async) socket$igmp(0x2, 0x3, 0x2) (async) socket$igmp6(0xa, 0x3, 0x2) 1.678037609s ago: executing program 1 (id=1774): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000003000000000000000000400851000000600000018020000", @ANYRES32, @ANYBLOB="000000000000000066000200002000001800a2ffffffffffffff0000000000009500040000000000360a020000000000180100002020782500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) 1.624465068s ago: executing program 3 (id=1776): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001000000000000000000e0000002000000000000000000000000ac0400aa00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a9000000000000000000000000000000fcffffffffffffff0000000000000000ffffffffffffffff070000000000000000000000000000000000000000000000000a000000000000000000000080400002000000000000080000000000000000000000000000000044000500fc000000000000000000000000000001000000033c00000000000000640101020000000000000000000000000200000004"], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000980)=ANY=[@ANYBLOB="ec000000210001000000000000000000fc0200000000000000000000000000006401010200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000009c001100be14140c0000000000000000000007007f000001000000000000000000000000fe880000000000000000000000000101fe8000000000000000000000000000aa3c0400000200000002000a0000000000000000000000ffff7f000001fc02000000000000000000000000000064010102000000000000000000000000fc0200008302000000000000000000003c04"], 0xec}, 0x1, 0x0, 0x0, 0x40000}, 0xd0) 1.552256598s ago: executing program 3 (id=1777): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r1, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r1], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) r3 = socket(0x10, 0x3, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0xffffffffffffffdb, 0x3, {0x6, 0x2}}}}]}, 0x44}}, 0x800) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001dc0)=@newtfilter={0x8c, 0x28, 0xd27, 0x1004001, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {}, {0x2, 0xb}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x5c, 0x2, [@TCA_CGROUP_ACT={0x34, 0x1, [@m_pedit={0x30, 0x1, 0x0, 0x0, {{0xa}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}, @TCA_CGROUP_EMATCHES={0x24, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x20, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x3, 0x3, 0x3}, {0xfffffff7, 0x3, 0xf, 0x7}}}]}]}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x810}, 0x48c0) r5 = socket$kcm(0x10, 0x0, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x4, 0x4, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000007c0)={{r6}, &(0x7f00000003c0), &(0x7f0000000780)}, 0x20) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) 1.433608942s ago: executing program 1 (id=1778): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-des3_ede-asm\x00'}, 0x58) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000007b00)=[{0x0, 0x0, &(0x7f00000022c0)=[{&(0x7f0000000f80)="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", 0x1000}, {&(0x7f0000000cc0)="87f63c67572b2eddb3bde1373f75e73ef4", 0x11}, {&(0x7f0000001f80)="83e0faee729b24eec849c8570b798e648255d7a9c95bd746464ebabfae7e32ee29d0b4f6da21", 0x26}, {&(0x7f0000001fc0)="8b4c465d671ab212be3d033c80c23a767fda1cfc485f1cc97158f25e8ba1670c91f6be8b36320ab9b35aa980af8bf89de00110414c3904f689cc403c6ce148c7172641f690efe3122a2b693063d4d014355883380e51895816ed75c4198b2ac131b558644adcc563e6f2b710a930d1f5792514eee76141a9ce1185e093ac4bd1a08d3fd0b9f7d82735ad71f56b86e421f82092a330e94926210dfd94c362ea1f86a049363c4630d14f30e0258c4f45ad269f972816e5466478d87c75b98f0ff86c466c75a251af900e98da3199331835df23ccb356ce0a8048a524c8a62dc14a766fffde535a5fb0102e38c8ac848a58e4689d455b52fe3f42", 0xf9}, {&(0x7f00000020c0)="96c4b6a3c7812bd58ef0481d7d619c1f1a171d76e5873ef5be7ff656338a011d9467c9b56060646eda8e055735f63fb8a728266c00577bb8e7f8e45d76aec08ec2b6fc7e4ed4d2f85079ec27fd6679cf154847e89c230814a537adc97cd91c73ff2d593af9bea2769c400b0c848555ad9265c549ae6d1a7b92665240144c55804f146a6b721ac876c0c95ee668cb11e46bae68a0f82d497d4b47a2b5fed503ea8b4c6bd7d103ac709641f546472a2ba50c2b3c9ba00c363beb25b3771a695ebac75fafd2a8f8c7aaadb7db65a96fbcbe5bc22d", 0xd3}, {&(0x7f00000021c0)="279219e7194df43554b78856a2b10039bd803c79b4e25e1ccfff24f97eeb0d49d1f15d41318ae27198c420f65308fc49006f16718f6d365e461ca6f4e57a4bb7f8b1d078084716152be47d19c87fa0f60e343226d72185113ebfffcba73f9d9e55a47e0111e6522369dbdd96f06f345763f4474b7a3a3420781b6508fc4b390d83512a3ea3bddcf4419b4a0342d334e281702f574a6c077f169d363aa4d81515baebd6b9097d6577e4e14ffa71563f6cf851ad9c1f069abdcc050b47b24b6c835b14afc5c0e8b3a8087ec5b37580c73923da6d2e59cde0680667", 0xda}], 0x6}, {0x0, 0x0, &(0x7f0000002600)=[{&(0x7f0000002340)="20990c34bcef453037ed6e51f9718117b0899969d17a08ea995529f8bde6af0bee61aa772f4f4f6ba694cdfdd1abe089f20e4ffb652ac03d6d779ad193dcee6a86a0d5f05cb192610e18058c56800e388e1380bbc297241365a47aa8937117555dd50746b3d400abb6ec51c1b82d9b027f0816e0f146c518964fa8a36daa65033da61fc6aadae4ecc0161dae9c7ca8ffdeb122148beb155f67efd5d8d29dbe47458abd8082f40ee01cabc4cd64e21142735c211e79135cb36779275b72d840ef26ae", 0xc2}, {&(0x7f0000002440)="9daa0500f0043979", 0x8}, {&(0x7f0000002480)="dc113e73a5308b09756772aeba25df4992fa96b45a4b8ebb08c600203f7cac8e9bedbd4e2d781dc60d9b11a3cf4ec9121af8d5a7fddc069418965a5fd3cbd8fbce2c1e928a6a81aaf6809bdb6c7403e76af19de6bf52c91c5404c843c033a77869d5c9768813bbfed4478dfb474ff6272ca70d24fe4fb50da8", 0x79}, {&(0x7f0000002500)="7e03722f60cce7001c02bdbe9daab911c3926b33eb062dea197c5f83c3384c726f3e1fce31c27f7703722fc3d9267e2ce84a46831ccdfc4c34a8cf1bbb4750e160eee7dfb720053c96a9fedd6bac2367808edaea30699394ad500b0cb370eb1ed842b42fd6b3c11bc69e9b03c596f77bc616b3894abb73364a5e91757be71a1d69a70b66c747348f35c79c76ac3f8da38e1e02968bc26362dd800d22fae5", 0x9e}, {&(0x7f00000025c0)="ae6c2bc4cd2fb72d76b197b853ff0da391", 0x11}], 0x5, &(0x7f0000002680), 0x0, 0x8000}, {0x0, 0x0, &(0x7f0000003a80)=[{&(0x7f0000002800)="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", 0x1000}, {&(0x7f0000003800)="aa93ea792f7685b0a0a831bb5be8cdb05807641a48144228f9c6b08ef395805c94fe29cb0bee0df96c89c66275d2d281d668ac0be4855f4fb94634e9a6d8bb78fd163776525a17c27fa706e45f022fcb83602ed061b11c12805c819ce4c8f3323118f21a2e535fae5c50f907d1d47eda0c6c0136d3370d391e7e0234dfaa326cfdfe78ceb3edf57c31fa1ee464a447620c13412e8a8a09a3504e284dba93c14f6cc02742407d87cbda3a88055d30c34c948d8694eaedee92e241477fcf40e5b9ab08815e65c92f4ab0734d0870d23fbe692b0f3f2d9228dfb26c2e387ff9e629", 0xe0}, {&(0x7f0000003900)="6893bc6ed5913ea77c86cf32409d4ac8dc28c43e567c197ff5", 0x19}, {&(0x7f0000003940)="6d21dd8f7d3ecbd11dfccd1f66f13f0ad7f9bfd99432a785dfe442087cee8f2c555cc1338036f2b130e8ebb2fc6b8e7da45893946e00a3a15cf0f65017c0c2727b359e5c966447dfdd7af4", 0x4b}, {&(0x7f00000039c0)="3b69f4ef750f3701bcd45384a0fac9948e06399862d7d408dc999b1e6bcec83435b68e2725c31921986e520d0665341f9c79f3ed3421afb7e674fea7f902c2fcfa11879a234d0eb87f", 0x49}, {&(0x7f0000003a40)="4eb088987ee55f288e4d740698e0200cdcd5b85eae9ca9001be7d4d782492534c348548db3105d0ea88a907edac7d23aa0c3a916f8cb81960cda7ee0", 0x3c}], 0x6, &(0x7f0000003b00)=ANY=[@ANYBLOB="d0000000000000001701000002000000b70000008186565d2e4ec97970be44ecec0422278563a1798c76b02bce5282db9c3231e16566420a7f88ac6fc46a64d08afc2ff2b1480e54032e110829a61417ddbcff797b077c23d3b8ce28b2c75f696241836db37f7863a31af3eaf00098a76ffc0367f4bbb4783e2531511db148fd0364bc8109802935bc6a04987f3587be57316b6788f49c1c1488d9ef3fae876c75fcb65b55b1613e5e41fd7c1fe84a049262cef9c25eb4914b8d50f0ce072e92dadbd368db06f11e505c9900000000001800000000000000170100000300000001000000000000001810000000000000170100000200000000100000e2a89ab7730f9dd299a068cf4266524232108bc84968bf565eae2523ab617c8d78ba8052e0cec1f23616273730a6762dcb1a290c8e1cca10de5ec88b14e5503dd5a3534965c9800fda8e6bd5dc3dbaa4791b26cdb96a4190f804fac8e73c3a2c6fe21924f1e64d9ef26b4bda4db6d6ba363e952a8f9f0d0f415ab158f7b3cc44aec2f12ec8000caf6f6ef3d65fc7500a08e94d473b8cffc70e5644f03f1ccf70bcedac66a2829a335b7dac6f6d38aea47fedc3eef51589ee0e7ae2ef9e791de4b11279cc975799f981d74b06a5bb2551d158c8fe7416d3616e21e6336650b704324ae5ddb79b1f747db3129a7aed7d14cb6550db59e9df21bff072a88b82d12ceb289d796d54efb82fa44d14f4b0222c7c2be404ac6285ad0a9b5c3d22c6064c0bc79e9102e2ca972a668abebfc9cc4b56adef37e107f3840c57ae958a3eacdc61eab7a3ff7b51ebbf96443c89bcde5300d29e65d000eccd1d920e5280198c6b2d129a0c2de1f88f05fe9cdbe8f41810e5ce90b5cdf1023472caee9500817a1f0fc3f2a6889d47979fbf35782a325390eec5bbbdaf5e0ce72e4fcf0096e55c078c8e40ab758a567938cc9a30dd443ef7f51f8e25f31832c602aeff880b9f698f09e630ce6e7dc2f9b278deb37a9ba80f96fa21cdd0c568a22328ec62e461ba9eccd8d5ecd22ce4fc1336815096a7d425b8b2c24881d18f09647e4bb90a77f0e4098719c91a7f1b303f70396facef3f52356b52d335d7588738652c0c6c261b8ab570c80018343c74ecb823c8b21e7c62a2bd29ddef43e047b613b18f502198c60db46281826e58e45314864170661115b768dcd5f35c1592f2f4ad7a6acd99c1fb9a8911756ed3866d866250b8d25cbf7cb8dbe474ec38563e2a22473d648291ca652171838ee4384a99011e3b77af463938cf81c352ae26f5674a495e7b6f2934420e2087306ee7769924ac3e518ad623b25bfa15b71a4e7d3394816d1771aeda0e447f0c40b725324d884d3fe25aa0cd9e11c06e7b8d035364d0d66647e057d28829eacddc74d71116fe4b2a356cc3881a201079d2f3f2525827c06c66178012641865cb1b05eb8711edb8f1b81b6fd2cd750edfa36d29aa2160d7e9c9d4f165ae37e92acfd0d95f836cd1c79177ede37e6f3c17eb96aa96d3ec89196a23aeac879be0780fb75efac8ad2c7cce36632c5e90bb6a619017d5c5bd11c34192fc3e55e24929e31545363f08a22a8cfa15ede09f3674fb1bdd22cac48417bf1f68871b49ddc63f8463bdc9e9e11109afd83eba9d02787713f190f92f8b5ce8531031f0dbcffd143e6dbc3aa4d4063cce6ffbd2a8df2174fd8b7a84eba5c6cabcb7e9bdbe88dc0e461f4d1a0e7d768627567c6ac411710e742aef20e289ceba016963c045995eb6122dc288dcfb08b9d8cf1c8d45d848dac4a327e0179431873df851c9c6959acf4b2cbfec880404aa5e0db0a18a0b7dfde10799879af9585b472456039ce38ca19c1fa289d4da7391d96aeb867c07af9271f4024be65133823044c6b86a4169fbe8a9e117238231ee90dc606fcf1cb208191cdc4581b7a36cb33feb4527aa3a8692cf870e3469010293c86890281721816b4daa624c74c94616af86b5e1b76bb06f0795459376a39321c126b0f83921a7873a776f583a03a9d0bd8da03b1f70d15b6605163a9ff26efd0b790dc5cf2b12a630616ab40ea29ffeca0a85e41d4df4fb6b12dcd5a477228a396fc4a233751565844a6f624be1f817f2bc9ddb47a05547bfc4f13f1e007d003aa2334108ec0cdc08950dd23a7777e30c112baecd09b7c23a3c4c8d55e6bc5d60abadc3dc4cb51dc95f546ef51c7558381bf421964b3523135422d4dadbb2fb14c367c30a5e1aa5f084735f3a2254e9abf2147049e4246a830b009711869f45b95fe6c9e3135dee3a0208d78fe9497fa24079d49b37b7f3a12ecafe736fbedc860d6054064ea8af3df1e8e51d32d6f4f876a07a53e6f25bcad1173314064133f92df5f2f8a3015b05da81cface1c742ce48c1917148d9058103249bd4093a0dfc1b1e5ca58100e9302bc328fee0846b3b605b57efb34057dd706a0cdf9a9cb4ebaaa9bb581868d11d36d661ec63968b1154b9a16973f978234d3351735591d156ac59a054bfb346d8b8f37d9c06548e312b7e023e1d2b79994339e1d87746e7dedeb90acf4106423dbf28f15320a273461e6a369fea92d56ae46dd1e47b44ccd5a2df0692a5c05f123337aba395dc1c5fd5080021c171476779606e68f4fa23063838edb924a9c791642295c898c3989782257c64b25e89ad268a0cdc3a47562f44cb84529819be8c28c9c357cfb7e33289a944e1a8ebc752c6c6c359af0b40df7ef2a829e558e65d15b86866973685fab298365cf38bab3c1dfe04009b71a3a33e18de437a62f5e2c785dc3f41bc7af84242c9972c13d0713f602c2a01734cd4cc897378711e8e0240bddfd625b14b3ba18b61260988706763c94d05808458b1c24df2c310fa34ef92a66e551d264e5ef7e77810251b194ceff3936f0a045f083ff14e2e51c35cdb03f74784787611f163c3d757c33c72551a94cc6976aadce30bc19eacb4501720da46b9b3dc933688737e27a6e8ed7f23047256ac209617be921610ed2d9e7adc744c9be6e0d7063431e606f670e6e304ddf1777b85f62443444602c81ad028e80295802952937f71246561cf87bb2c13affda39f0acbcca6994cb3a3fb4ddb4bc52601e5ad99b733f4ef3c8c4d4fdbf15eacc9ee06ddefe5e07c7b4ab9e2c6ad45f58eee491a14e41c12b316fa6d0324adc6f94bfe1d4387599749173fdb50c259257e5f00f56cc37447dc5a6acce8601973d1e51759aa793093830527658e4ae932762ecdc253a07353bf3b9c157c38142e7a778f2a23697d548df9110f4c450f17f274f37640bf6496e0016fa9a1cc4510d6e2202d61bb9a1f1cf0c0955aa82c7b81300001bc319dac2a11a62d7364542bba0e44adeae2e113d2e65a2fc53817810e5d00afc8423c95542d19a737bd165624132cc7b5e5ed3bb647fdb324a32ccf44981ef93d42ae7ae6ec5bf03a0c56d479fc6d1e6922512af80790e7ce604b5aa0387b262ba1ae9a6e751443b455ac338ff5e0d09fef6ce2a9613514e14013f47562b19e74720a5ce12ea94390ed3852d1c935a04a58afa0654c2fb9f92ced701dc902e150cc309d78f103072d17881c7e2e6b41d5eab51d71c1b3502afd1982da681c9c535d1167ef7791d3a1ab49ee3311a0716591b95196399d91f744bef06dbc330a2265ac46ebb90de1808ba63c42f3e7404a0c49d70f511ffeabe18925e6fc936c680247fc45257830fcbd71798101b558b27e7e8f6f3a0cda1d050bc281d735930ce1ca5a24f802747bb42caaf019615fb707338bc4a6f175823bb45dda9d893db819a9c59379846f093e38f938ba43fadc48034c269a3c721014520f875690a4a7dca178d1e0f40f0ad2d2a106c1cf92e5beb7be889b138e2029a148196fcde705d1d672d919471918be318b70fa58d5e2b8b80c25fbfed12b9282b87b245cb5116ebe1170ed085ccca82990102894ce87e919e441743edf53f23e89012bc72274cadaf2a9bf118e4289aae270e1450b8133da8db1a9595780e7a0d8dc7c2bb45581a46d6891a7a0b6a40ab73c6bda76917bfdf55e2b955da3d9b0249c42e85303bf542531791e085fc5555b0afd553ee59996cb016d8a077be5f0e8a84ec308f925d23eca0b4f881331348639100158fc8936575335074eb98bcc1e1ee490a11f1b9e148c344f9242c84b8b40fbcaebf95338c5b5530ede1835bab92938bc002c7af52e5dccc8b0d764400d1ecb037a8688f0735f2b10ba472154e1fe077097d521540ceca1424b4c3680c65c463683ccf30c8cb9d6cd6cbc458d76238ef3961890339ef980eb39dd8266fbb5e943c5d76399b61800d4d7bc1703cac98b4ebf703684875955b7f2340026cd7fe2fc6712e0ac8353dfd4f2cf557d2045227fba7e8c90bbbb5bece944b83972a1111c750c052209b9974aa0cca31528803f4c2a43c21975e66232c2752cf52e520783be3eb9dcc5e7e4ca4906784730c3269aa89cf700864392402cb2c4d323f948c0299ab2776878679d47cdd122a1426d1b24bea9d02110601787d95fc70e110624dbae68f3ad66ac32fb74cced3287d36732ee414f7eeb2d830a9c8aaf3bbade906e7eaa0965686aa7e6b6e227c1e4535e105c51e2156c62a08b6f74cc44fb5f66289e08ac18b2dd16c58600945b63e583ef9c75b8a0063e46d6aaf43fc6316789d0df1cdc5a3936f2fc4d3091ed52458deaa278dc6b970d10dfaa8fb90a8c981e337d27f50c226de4d81cd548403c4cc90138e853869d9bf9ecb100e1ee1a9ef862733699b5b7ba2c187cc771b497fdc62ee4ca1692f6c2f31649f6342550150ed4145ca65aea244186b5b3b5f75a1a29f88819ab8684f8730cd2b05bb81109321cdc7684b22f9de9c013539cb0a025fc15ab3e20e0f91f0854ebd7885e0d1ce4aca0bb9e2f4da6bebb618a846351fa5a289a028d252784b492c0ca27f82fdd114dcb840c50eb7535fef08d72578a7ee78a9451e9d471b8f3bb17ea6860d2e6ac5b9992a8364a74b059163b92ea298c0185443d1d394d0170588edd8cd4562dd17c43d53b6df4141d5f0b64ae69feed67b64ad44a3a2702e6ca618d3db0b955c0137293ec3c97a7c85801fe71b711fd30f355d133e1ad65b8310f9c9ca48673d096f445750d5d6a07b6323f76057d0e3411f2a6d59335a3f30a9ae2c3269ddac39e927d812f93ca99b02e4dc1feb19fd47e0b98e300b0a2177586dc8034d957813cd9349dfe6658eb436250d0a0da91c3b0a96c313f0d1b862e794cc63ec1bd9a091bcd48d97744c0d4f70100099e5a47276eb93185917f6933e757b9d76bd5b899e177c8750af1cdba0a08faeb1eca85ad44cc0a50e22ca2e8c3c4b06b9f4aa8813d0cb9613b0fffc08c3a8cabceed0a6a046ab4b99762fc8ab9de49a3f04e67afee37eb83e580fce5247c0414a8be60bfbe9253269b771fb9e9baa069488f5be6605439b3a5cfe89cad884e220418651c6455a8599e373337cccd436c177725cffc02eae6bfc32b3f32a3f8ff8a09636c0cace57b4ba340b2ab7205a86c07de132ecf010fc9289f403a2cd0156c2ac466176ee8183da3aa433fe7574d97cfd352a500a4066e957a344bcf1cbd81a358b9242cba3a995f459c43433eeb3ed2f336e74322e8f93a3402f5ea015d3c88eb7fd332603e9c6b5b0acb2b27511eac2f5b8415141baad2061ee69d4f13f194cd40b28dfe4c6e7efea06b65c00bf551e66224c97f3aedccedb63b607450909c6053c05decb3804463eb98159999c7b299aa26a399015f551e5d143e429a9e4b7602b27c5d12089912bdaf4c7434f1ba0b2c44cae33f9cd07610475b122ae73019f0374a28aa6b988a008616e82009b074ffaf0d8cf3cd4f914a725eb86df818fd690c193b37e8301cb911be784e2d5c86a642471ad98f68034c1659db0495d3bd29e8790a2812b0f300ce78dc8a6b2c3e37fa04aa80c006fbab42b09f694bc7c32824d9e2526c26c689d1e774a33151394dfe9a3a17a4a11678dcba49bbf972e4e6ddbdd6588bed44cee5b9109f3700277dfc5561f309351b89578d2ad8f1f32a3af36816c5bec2488cfb67d2296b73d1a7754f8c64a559c161f03b059b9db80190ce55088d5574fa6603029e360e2ba57b20083764f741195aed981e37f40fda08645700000000"], 0x1100, 0x8054}, {0x0, 0x0, &(0x7f0000005000)=[{&(0x7f0000004c00)="541cc6a93793ff776850f84f1bc56b3fb839d4f7c7b2758fb157fcf0ab64ba6a58163a13c1b60d131b796a63c72356cad94b29bc02a9bb60c8eca1f79d21b7e515413616d2210c8d1c4438956db551af22ec07b7c22493f1ba1d7d212caff7fa4ca0891d9be0a3d149a38da25e48b7f43dc779861db7e17096bf2b0ebfa1159765f82dc9e6ffad94be45fae41585bbe553c1eae162b5c2d88612b5decca0802b2d7efab6ce7ccafc663fece56d9f97b3795b71afdbc1a8c445d03a986f845a38f6935c182553ccc42cf5d4308926c4eaf605a52e2643", 0xd6}, {&(0x7f0000004d00)="e9d3f13e02c78977f051055fdabff9aa79ad8046d3d0534be48614ea3ce4236a5f1e7973d3fc87e76fa304e106423d9796e577c65fe50276bf8186b52ce5e6d98c197889089259f5f4994948574ed6e272b4e9a42ca81d56f12bd4ac8969a7be411d036526797427ee896b57a0f431627a68fe09a5bbc9a2c58daa4bc4db18b9600f1cd40a86c7bf6a4819e2aa54ade1f168a5cc974781fbd3b6713ea49117d0f8b119962b98493eb02631f315d0dfdaa2d96746a8d2325177b7a617145b343b008c14bea5eebf316a1ac6e5f8897f016e8bbf07df50742cfcf7d7413aa90834604396652ea5935fbc0b111826886b", 0xef}, {&(0x7f0000004e00)="1ceadbab21c2c87bd0bb57a505112b900e482ec7da63d2bfeeea20b65276cda6a949caef0b585caa61a497dae677a7ce0f745009ebdca272b0ecdb2f0f5d5ec7353e31954514e2d7752d4d7a13e50de671dc6cb8a76467fa872153e5e676a8e22205df7c8dc0f8f6387f5683f451037aec4d9c6ec178438a4a0ca19843b02398462ee7ef027adcbc9e18c6f8d88adcf459650e7c0fe5686fc53e4a3b4468b2af2be140493f0194610fcb", 0xaa}, {&(0x7f0000004ec0)="05dee2130a86", 0x6}, {&(0x7f0000004f00)="36e677284cb7ac903b5c783decf67194676c29daae7698cb7c9a7788fd8de873878d89c724a177787396faca0f5411ac3821dcea79e9439d7f90b76fffda9d14b51992b7e40bf2acc203a1df1d22e25ad84228c8fa971e2b18786abe00731019f09162cf68eb644a0c10a59404131b9c4db322a4acf83d642cac734ac9f61d8a531379de6e944125648c3cae0b0482474e524d71959f75df", 0x98}, {&(0x7f0000004fc0)="b9986a8cd870fbfdc9f911a609b93e7097a156afac099621ca8fe3d5cf49992125cc69f37d11fd56123e502d6eff83c1bf1defb9a6fe57", 0x37}], 0x6, &(0x7f0000002680)=ANY=[@ANYBLOB="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"], 0x88, 0x4000800}, {0x0, 0x0, &(0x7f0000005380)=[{&(0x7f0000005140)="cfe0d813337aa41c43c72fad0032d94ea33c5ad8888f6a0450d7147bf45204873f27cb3505255d4fb781d571cb27573649fbdceb5ddc99cd776661938109353e99d972c1047fbe129032c587d096a9762a9c2664d620ce4b82c34585b614991a2e2cfaacefecb3529a3e2219812a54b38777c9a269fbf26b549e633f525f6a73fa008cdf89b5e11365b92d545340b6546efe23d299c7869e5f7bba816cf8804281e15aa276f3e3ec14d7c1502873a2eded25c8d43d0ff812c809cc5c18af4450b6ff22616a04da3daf70", 0xca}, {&(0x7f0000005240)="920eeb1f6ee99d55e2302771f27559c8ee1177d70aa7beb3a52f18b0015a372ad35d00ea0f7f20f3a51523ae731c9c1c0e163499d6a49986f46ca98eb8dafa1cbcec8ac2a76ab4088c", 0x49}, {&(0x7f00000052c0)="52ad981cc671238ae7a50c88b371ab4d8fd8a8dd041d5bc1452ca917192fe45258190b574350a3eef58c1748d61986c3e9fac9ffaae4e3b431a4ee5b7b08bc9f79a54d155a5ecd17a2159afad0ebdea0946f7ea793ff130471c97a3ca75bb22c3852d73214e138be7a238ba50adb108e37f93b817b28640b192ba557f473e18675d31de5b50f1f40d2482fe33f5c8ab27a1707358e9c2d3bbe", 0x99}], 0x3, &(0x7f00000053c0)=[@iv={0xc0, 0x117, 0x2, 0xac, "e232611463a15111822e4a2c6179be03164b501bae6521d9ef2cdfba58a2be72a83b48f4b5475b07fdc677a2dbc57ad17e209e7ef0eab9a05baddaf057d4cafb81a47e6b3580e69c51177d7fa3b5653313681a1bf4909507f99c797335920e9818652af7dbbb61478e5217db08c3452bc38b21148741b895549fb82736c1e7e6458cc37386876b3889ddbee6719e5ae188aceadd16eb44e29765e33a560a75cfe6e149189cc374b3c48c45d7"}, @iv={0xb0, 0x117, 0x2, 0x98, "4b83cf26a67feea8020a727a9e2a65d53bb5b41064d0ab1a3e3bcfa7cf9f99f7133402a91eff8a4b2b349a6681673fd85377efca7b45b6b9c13d7dda3024160604144cfda4b48f2c3abb67371f50b28ade4ef700ce1ccfa9ca59366a3573023bd8eb044be33eb854d9884bd0b32854e512a2798aa37b18d91cda7c0b696f39b5232cd58f9c356b9bca062199116a6264d94d38a20b77702c"}, @assoc={0x18, 0x117, 0x4, 0x4}], 0x188, 0x84}, {0x0, 0x0, &(0x7f0000005700)=[{&(0x7f0000005580)="e14b061bfde4780fd0bd089c1f748aeaa781b578ef6dbd38ebb71e38e5e90398b8909ffc5d6bcc66d997e79fc3ee47e388554708fdb18c87c1", 0x39}, {&(0x7f00000055c0)="4806ec2d1fddb83bfe692ec3b30387c1dc66d4884d365b2f414d6449b1319e3167436cf11232e9af7f02529c1023cb8e5ded68ee07dc846779bee9cf7e4a6b4d0d01614f2d3a20c1b2ae5780c59c3c71b9ca25299a6df3e26b36ac2dd3a57db99913fe125d43dcd10232f03b902a73be76a7621be2ae3c23b0a7ddcfb568103ddc7ef820f11354acd676be0364734a9bb50c1ea37de4350621635de21b3c9900f27552448a", 0xa5}, {&(0x7f0000005680)="517c50c6ed16546540d799139d68fac83d9e3921e7a2113557584830e8f0010c464e344d9fdd7a8dfa7298ed13d178e6d55586368278f85090d4bbe5f1a4472d1bcb33370a6ad8bdb7d5d4bc3914", 0x4e}], 0x3, &(0x7f0000005740)=ANY=[@ANYBLOB="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"/4144], 0x1030, 0x40000}, {0x0, 0x0, &(0x7f00000078c0)=[{&(0x7f0000006780)="8cc9b71b620b7c71a95799532b910550e81c5dcfac", 0x15}, {&(0x7f00000067c0)="d0bfdc47bde352315513c6c3d2b8485785dce337c0b7748f9469eab655f491dd2379328d03930ce5541f337946e4478464cbf09a3b02c32f0a7591f5d90fae", 0x3f}, {&(0x7f0000006800)="dbc3b051043fb4192f3b9c415e9b3365005e7b890c8ffabb18b28c166bdbcca51d764bbe614caa0aa0105010361e225ed4ab20b6eba1f629d2cb4e10591dd6a5c24596912921dbeed7c25fb96132ec22cd59cb20d10434c04da831e1695e16213080e8941a326e7130bcc221b0d6dc951dc288d5ed264d2a11eac5c4199cf3f98ad86ce3ee3f9a6002f5a54dc2cca0c942b06b763a8728e672e0fdd30ce17e11cfaded141b5d8c1c1d642b12bc57dd88062b4cde06", 0xb5}, {&(0x7f00000068c0)="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", 0x1000}], 0x4, &(0x7f0000007900)=[@assoc={0x18, 0x117, 0x4, 0x800}, @assoc={0x18, 0x117, 0x4, 0x2}, @assoc={0x18, 0x117, 0x4, 0x8}, @assoc={0x18, 0x117, 0x4, 0x1}, @iv={0x60, 0x117, 0x2, 0x47, "0f3546af21adc6cad2b770a44803a6d3177ac5d080e128adb5d4dabf6dcdb543d78b83c63f333d5614d53db143120cca49fe5c3085781d3428ad8b7d152cc8b340279475be70fe"}, @op={0x18}], 0xd8, 0x24048010}, {0x0, 0x0, &(0x7f0000007ac0)=[{&(0x7f0000007a00)="93365e71a4fc2796", 0x8}, {&(0x7f0000007a40)="609c6349df88dc887f1e72a1a874c226c9d961f3678da154623d82ff6641a288783206a6daac4b7fe7d6098fb328722f096279c11d807d0c0d3ffbabfc89a969efe6f9a73a78a2a8f12828868ab36376841251469e61cf6a4eab", 0x5a}], 0x2}], 0x8, 0x20000000) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r5 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e20, 0xffffffff}, 0x1c) listen(r5, 0x80080400) r6 = socket$inet_dccp(0x2, 0x6, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r7 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmmsg$alg(r7, 0x0, 0x0, 0x0) connect$inet(r6, &(0x7f0000e5c000)={0x2, 0x4e20, @remote}, 0x10) getsockopt$inet_int(r6, 0x10d, 0x3c, &(0x7f0000000000), &(0x7f0000000280)=0x4) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a74000000060a0b04000000000000000002000008400004803c000180080001006c6f670030000280060004400001000008000340fffffffa0a0002407d5def2e21000000080003400000000406000140000100000900010073797a30000000000900020073797a320000000008000b400000000314000000110001"], 0x9c}}, 0x0) close(r4) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000f00)={{0x0, @loopback, 0x4e21, 0x0, 'none\x00', 0x2, 0x2, 0x2}, {@multicast2, 0x4e24, 0x0, 0x4, 0x5, 0x6}}, 0x44) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000780)={'syztnl2\x00', &(0x7f0000000540)={'ip6_vti0\x00', 0x0, 0x29, 0x5, 0xa5, 0x17cfe439, 0x30, @loopback, @local, 0x40, 0x1, 0x1, 0x7}}) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000d80)={0x0, @multicast2, @local}, &(0x7f0000000dc0)=0xc) sendmmsg$inet(r4, &(0x7f0000000e80)=[{{&(0x7f0000000280)={0x2, 0x4e22, @multicast1}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000600)="49401b5eba8e6a0aeeef7181afe401cc4fb88a093b01ed29d7849b4832afae2513535b8f1015e500c2f661d0bcfcf0aa0d1a7b34a8da53854a46ea7bc49267019c5250d8c5aa47013354fcb236609962af1e035d925df381649a333c4a807ed0567ac6062826c435920eaf1f8545379415891ea9b0c02b4817f4340e8586d1a82ba8df412c2969f8c0222f22711c12a8b7d876aa50e879effb716f4af0a13f25e6", 0xa1}, {&(0x7f00000006c0)="0ec6c8bd386f85782a061e0e39217f98eee3f9839a15f19b9e78c3a28709f3c592436e7b079507fe371e5c8b68f57fd686d11f5fdf2c826ffc80fe5693f579247d8ffd12a009bda1624db25a5e2038d93126509ee3dedc8defe83e2748932280c8ab72af6f52604e9ade0c8527252dbed3d72067f69b410186af2b620bcc72f4392998afbfcd50e4475894940a344a37c607f213dcccf93a91b9efb4c8e24adf441d2b3b", 0xa4}], 0x2, &(0x7f00000007c0)=[@ip_ttl={{0x14, 0x0, 0x2, 0x8}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x3}}, @ip_ttl={{0x14}}, @ip_ttl={{0x14, 0x0, 0x2, 0x5}}, @ip_ttl={{0x14, 0x0, 0x2, 0x8}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @broadcast, @local}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x5c000000}}, @ip_retopts={{0x10}}], 0xc0}}, {{&(0x7f0000000880)={0x2, 0x4e20, @empty}, 0x10, &(0x7f0000000d00)=[{&(0x7f0000000a00)="b5f5aa8302afe2bfddb8c0204440ea4e27bd16625e95c6b8524a5d6f0a61b06c67d105211ac87b8127f11daba258c174cd85ea0065fed010474bc9839ef2b9314ab811d44afeff9eafddf27c6ecdeecb5fdb1b268d018a71f6d6cf0a94c1519db73deb1aed1d256afeacc90c1576404d96ec6e7db671d06fd7d9e47426568ebc226a", 0x82}, {&(0x7f0000000ac0)="380db3d5db67fee89141a5454fcb2000947ff126e6ca47e3cf8ba6ba280fc9abcef89c596b43ceacb1d99485802bb648c6f6569ad8ca8aeb03c42b411543b5977597fe10d6d79a25bd4b25a4515456c8bf00326d62a739209c37d56d7688407e8f2897a1f3c5c7991bf3f662186b7f77ef675a7d415adecaff8f01b24ea8f9cf9a8c98c45295a4caf2276fb1d766c696aa66bb368808a89a333c5cbe71adb8a2837bc829f7582437c89a1ff1dffc0c3f29029c01bfe001a425f3", 0xba}, {&(0x7f00000008c0)="2363c40786da040cdd0df21afa4e3949ef2f31d667f41e8563c49bceac1b4dced79b24e49480eb1b545f07a7625a5b589f38cc487c46a2d8ddf05db3591e2a23db57bcdeba649257a28fe6d5c5e11d70056ea8406032e193ae3f1f5088dce747d57a4b62a04b641b", 0x68}, {&(0x7f0000000b80)="938e59f79f6f675e40d92ce791324bc1bf8ea68ebf12e4a5fd8fd9a1791de7b627452e96af0dda780a2f14ab80545feddb911840e0501d87025bdcc1b3584ded43bb17b287733125c78e05ca5bba76de373fa4641d708868b40e0c7c2ed9d858b0562980d47d1cf47b598babb33151bc9b9bc78da807c417ab156acf12b5237bd56d76997e726c8abf5e6865cacc3e85207b93052b20575e0f899b461f5f9879b0a433f8d96616c3b4eb9743806ed8743e9caf43e4ccf1df139545addea6a704861dd3d964313531ea9de7ca498b5fc0b713c92c6079ba0147caa337c0838049", 0xe0}, {&(0x7f0000000c80)="a4152440568cef01af5bdb4182a00610992e45506ca8de1010d3101d0c0e1be7b8026d627bd6d4", 0x27}, {&(0x7f0000000cc0)}], 0x6, &(0x7f0000000e00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r9, @private=0xa010101, @loopback}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x3}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0xf}}}}], 0x58}}], 0x2, 0x804) 1.433386558s ago: executing program 0 (id=1779): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x5}, [@call={0x85, 0x0, 0x0, 0x17}, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x7b}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="0000000000000000000051229dc9", 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000027020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_LOG_LEVEL={0x8, 0x5, 0x1, 0x0, 0x3ff}, @NFTA_LOG_PREFIX={0x6, 0x2, 0x1, 0x0, '}\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_LEAVE_MESH(r2, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r3, 0x200, 0x70bd27, 0x25dfdbff, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x4800) 1.4330585s ago: executing program 2 (id=1780): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="05000000050000000100000004"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x19, 0x4, 0x4, 0x9, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast2}, 0x10) sendmmsg$inet(r0, &(0x7f0000000480)=[{{&(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x39}}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)="e6", 0x1}], 0x1}}], 0x1, 0x24040890) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000140)=0xffff0000, 0x4) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) ppoll(&(0x7f0000000500)=[{r1}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 1.323590859s ago: executing program 3 (id=1781): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018100000", @ANYRES32=r0, @ANYBLOB="00000000000000006608000000000000180000180800000000000000000000009500000000000000c60a000000000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b502000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 1.159403967s ago: executing program 1 (id=1782): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r1) getsockname$packet(r1, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x1}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xe, 0x3}, {}, {0x5, 0xfff1}}}, 0x24}}, 0x40004) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) connect$inet(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r4, 0xfffffffc) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)={0x28, r7, 0x1, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xc}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x804) 994.101497ms ago: executing program 0 (id=1783): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYRES16=r0], 0x28}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0x400, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_SNOOPING={0x3}]}}}, @IFLA_MTU={0x8, 0x4, 0x200}]}, 0x44}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYRES16=r0], 0x28}}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0x400, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_SNOOPING={0x3}]}}}, @IFLA_MTU={0x8, 0x4, 0x200}]}, 0x44}}, 0x0) (async) 965.138813ms ago: executing program 3 (id=1784): socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f00000009c0)=@assoc_value={0x0, 0x800}, 0x8) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c00"], 0x3c}}, 0x41000000) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 870.112521ms ago: executing program 0 (id=1785): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x14, 0x3, 0x2, 0x301, 0x0, 0x0, {0x0, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x4004071}, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x44, 0x18, 0x1, 0x0, 0x0, {0xa, 0x37}, [@IFAL_ADDRESS={0x14, 0x5, @remote}, @IFAL_ADDRESS={0x8, 0x1, @mcast1}]}, 0x44}}, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) socket(0x21, 0x800, 0x6) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'macvlan0\x00', 0x0}) (async, rerun: 32) r5 = socket$netlink(0x10, 0x3, 0x0) (rerun: 32) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000001000030500000000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="154e011a010d62002c0012800b0001006d616373656300001c000280080005000300000005000c000600000005000c000100000008000500", @ANYRES32=r4], 0x54}}, 0x0) (async, rerun: 64) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newtaction={0x54, 0x30, 0x427, 0x0, 0x0, {}, [{0x40, 0x1, [@m_gact={0x3c, 0x1, 0x0, 0x0, {{0x9}, {0x10, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x1, 0x6, 0x6}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4004}, 0x0) (rerun: 64) 517.789212ms ago: executing program 3 (id=1786): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='mem_connect\x00', r1}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="6c000000020601000000000600000000000000000e0003006269746d61703a697000000005000400000000000900020073797a3100000000240007800c00028008"], 0x6c}}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000380)=@bpf_tracing={0x1a, 0x29, &(0x7f0000000a40)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000000600000083000000bf0000000000000055090100000000009500000000000000b7080000000000007b8af8ff000080fbb70800000b000010000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7", @ANYRES32, @ANYRESHEX=r2, @ANYBLOB="0000000000000101851000000700806bda108272c4afc335404356fdeec24ac26ccc61059adf5a0a4239203d3d983d0fc1781af26271f9d50eaa3100b711f43d1d11512180e507002c22dba5803435174b4e18ee69a7431f0612699d9cd0294974200403fd7c555dcc839154c43e7060d14252081f0f176760f97f2824fe4f394ddce073094fd118cf6e653ebd107a85b8474af21fcadd0f15653d247c2ee6940074f425f224050d0828a7cfbe7bd8136f00fb731e7bdbbffa7e9384c24d7d24de37e1171879313be47c470e207fac414032a2005d22f1a3895400"/229, @ANYRES32=0x1, @ANYBLOB="0000000000000000b70200000000000085000000860000001840000006000000000000000000000018"], 0x0, 0xe, 0x3b, &(0x7f0000000080)=""/59, 0x40f00, 0x1, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x169a0, 0xffffffffffffffff, 0x3, &(0x7f0000000300)=[r3, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, 0x1], &(0x7f0000000340)=[{0xffffffff, 0x4, 0x4, 0x6}, {0x4, 0x2, 0x8, 0x2}, {0x10000002, 0x2, 0xc, 0x3}], 0x10, 0x1, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000680)={r4, 0x0, 0x57, 0x6e, &(0x7f0000000440)="15d4c1407a94870044be5992470874d1d7a41e1d097d8ce769e885209198ec130244a28a252cf6490b531ec29e021ada67f8b0f7b2a1b08a500375e79aacf5f2cf2ea9ca26ac74eff182dce9872f8b1ae6cbb89cb5fef8", &(0x7f00000004c0)=""/110, 0x9, 0x0, 0x27, 0x0, &(0x7f0000000540)="a31b61a67eb50f6874312e2c7ac2f49727627a50383eeef9af526b75a049bb5b703b83d015af96", &(0x7f0000000580), 0x0, 0x0, 0x607}, 0x50) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r7 = accept4(r6, 0x0, 0x0, 0x800) sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r7, 0x0, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000009c0)={r4, 0xe0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, &(0x7f0000000740)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000780)=[0x0, 0x0], 0x0, 0xf8, &(0x7f00000007c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000800), &(0x7f0000000840), 0x8, 0x82, 0x8, 0x8, &(0x7f0000000880)}}, 0x10) connect$qrtr(0xffffffffffffffff, &(0x7f0000000040), 0xc) socket$qrtr(0x2a, 0x2, 0x0) read(0xffffffffffffffff, &(0x7f0000000180)=""/119, 0x77) setsockopt$packet_add_memb(r7, 0x107, 0x1, &(0x7f0000000a00)={r10, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}, 0x10) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r8, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r9, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 500.401487ms ago: executing program 4 (id=1787): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000980)=ANY=[@ANYBLOB="ec000000210001000000000000000000fc0200000000000000000000000000006401010200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000a801009c001100fc0000000000000000000000000000007f000001000000000000000000000000fe880000000000000000000000000101fe8000000000000000000000000000aa3c0400000200000002000a0000000000000000000000ffff7f000001fc02000000000000000000000000000064010102000000000000000000000000fc0200008302000000"], 0xec}, 0x1, 0x0, 0x0, 0x40000}, 0xd0) 478.166321ms ago: executing program 0 (id=1788): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001000000000000000000e0000002000000000000000000000000ac0400aa00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a9000000000000000000000000000000fcffffffffffffff0000000000000000ffffffffffffffff070000000000000000000000000000000000000000000000000a000000000000000000000080400002000000000000080000000000000000000000000000000044000500fc000000000000000000000000000001000000033c00000000000000640101020000000000000000000000000200000004"], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000980)=ANY=[@ANYBLOB="ec000000210001000000000000000000fc0200000000000000000000000000006401010200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000009c001100be14140c000000000000000000000a007f000001000000000000000000000000fe880000000000000000000000000101fe8000000000000000000000000000aa3c0400000200000002000a0000000000000000000000ffff7f000001fc02000000000000000000000000000064010102000000000000000000000000fc0200008302000000000000000000003c04"], 0xec}, 0x1, 0x0, 0x0, 0x40000}, 0xd0) 420.86664ms ago: executing program 2 (id=1789): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x401, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8, 0x1, @udp=r2}, @IFLA_GTP_FD1={0x8, 0x2, @udp=r1}]}}}]}, 0x40}}, 0x0) socket$inet6(0xa, 0x3, 0x84) syz_emit_ethernet(0x5e, &(0x7f00000004c0)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd603000bb00282b00fc020000000000000000000000000000fe8000000000000000000000000000aa87"], 0x0) r3 = socket(0x10, 0x3, 0xc) write(r3, &(0x7f0000000040)="effd00001000ff00fd4344c007110000f3050a00dbfd010000000001ffdf00", 0xfe00) 314.143116ms ago: executing program 4 (id=1790): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000003000000000000000000400851000000600000018020000", @ANYRES32, @ANYBLOB="000000000000000066000200002000001800b0ffffffffffffff0000000000009500040000000000360a020000000000180100002020782500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) 312.849813ms ago: executing program 0 (id=1791): socket$tipc(0x1e, 0x2, 0x0) unshare(0x6a040000) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r0 = socket(0x10, 0x3, 0x0) (async) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0xc, 0x2, [@TCA_PIE_TARGET={0x8}]}}]}, 0x38}}, 0x20048044) (async) ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f0000000100)='veth0_to_bond\x00') (async) connect$rose(r0, &(0x7f0000000000)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, 0x0, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @default]}, 0x40) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$IP6T_SO_GET_INFO(r3, 0x29, 0x40, &(0x7f0000000040)={'mangle\x00', 0x0, [0x81, 0x4000105, 0x9, 0x8001, 0x9]}, &(0x7f0000000400)=0x54) 204.127855ms ago: executing program 2 (id=1792): r0 = socket$inet_udp(0x2, 0x2, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000140)={'ip6gre0\x00', 0x0, 0x2f, 0x3, 0xe, 0x4, 0x61, @private0, @mcast2, 0x80, 0x700, 0x6}}) (async) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000780)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000740)={&(0x7f0000000500)=@deltclass={0x60, 0x29, 0x400, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0xfff3}, {0xfff1, 0x5}, {0x7, 0xa}}, [@tclass_kind_options=@c_mqprio={0xb}, @tclass_kind_options=@c_drr={{0x8}, {0xc, 0x2, @TCA_DRR_QUANTUM={0x8, 0x1, 0xf}}}, @tclass_kind_options=@c_mq={0x7}, @tclass_kind_options=@c_sfb={0x8}, @tclass_kind_options=@c_cake={0x9}]}, 0x60}, 0x1, 0x0, 0x0, 0x40}, 0x28060014) (async) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="190000000c000000080000000800000000020000", @ANYRES32=0x0, @ANYBLOB="ff7f00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000ffffffff000000000000000000000000000000000000000099dbf9adc7c1d2adfbbd0b0a0701048b25edabc3a72ad36cf674013f8f246ca65b5704118bf809aa3086135a3629203d2a3555d95382b4a73c5c7dd73ab0e79c59fe42c1002f921d591f35"], 0x50) (async) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, &(0x7f0000000580)={r4, @in={{0x2, 0x4e24, @remote}}, [0x9, 0x9, 0xfff, 0xfffffffffffffff8, 0x7800000000000000, 0x100000001, 0x8, 0x6, 0x6, 0xa39b, 0x8, 0x8000, 0xbe2b, 0x4, 0x5]}, &(0x7f00000004c0)=0x100) (async) r6 = socket$inet6(0xa, 0x80003, 0xff) (async) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000880)={&(0x7f0000000a40)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="200025bd7000ffdbdf253100000008005200", @ANYRES32=0x0, @ANYBLOB="968ad959451fe942cf167fb0a1824bc101d8fff8bb03c2df0a0b92ba820d283d8994b2ecfbabb73f77ddc7a329521184f1f02ddf50e0cacdb103685ec29427e11f4b9e22820a316cc13bfd16687730a9eb53194229bbb7325e07c5661bf8fcc1d7be45405c7033c1e460be8bea1141e8f9064a252eda520420de97042bf141a5086b1d06075b9ba8d3abea0be104566f15e70560023a93fb3548f3e1c88a245aa7f9cbea99bd74b1d9007536b7af3f"], 0x1c}, 0x1, 0x0, 0x0, 0x4840}, 0x400c0) setsockopt$inet6_int(r6, 0x29, 0x16, &(0x7f0000fcb000), 0x4) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a1a0000040000000600000005000000e0000000", @ANYRES32, @ANYBLOB='u\x00'/20, @ANYRES32=r7, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x0) (async) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r8, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) (async) r11 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r11, &(0x7f0000001600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44004}, 0x4004000) (async) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000200)={r5, 0x4, 0x401, 0x8, 0x1451, 0xe2b}, &(0x7f0000000240)=0x14) (async) bind$packet(r8, &(0x7f0000000000)={0x11, 0xf8, r10, 0x1, 0xe, 0x6, @multicast}, 0x14) r12 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r12, 0x28, 0x1, &(0x7f0000000240)=0x1c00000000000000, 0x8) (async) connect$vsock_stream(r12, &(0x7f0000001c80)={0x28, 0x0, 0x2710, @local}, 0x10) (async) socket$unix(0x1, 0x1, 0x0) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r13, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="a40000000002010400000000000000000a000000180001801400018008000100ffffffff08000200ac1414363c0003800c00028005000100000000002c00018014000300fc00000000000000000000000000000014000400fe8000000000000000000000000000bb3c0002800c00028005000100000000002c00018014000300fc02000000000000000000000000000014000400fe8000000000000000000000000000aa3ccd5f1fb89e2a614b08c5b466876d13066249ebf0efd30ea3380901caefa89ad7d1db8a4daff8a554b93bf3aead7b0118a71e3414ac36736f17d3603833892c228dca44ff7542df78d79adcbdf0531c296b7cddb1bcc4f5f6e2c08434cee49fcc1219b8a1d83db7539b3ad09d793dd0489c4b9d7791eab95d6f6457ebe24687a22332d2116792e000"/313], 0xa4}}, 0x0) (async) sendto$inet6(r8, &(0x7f0000000280)="02042c08ec074802010e0200c52cf7c20675e005b02f0800eb2b2ff0dac8897c6b112002faffffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0xfc13, 0x800, 0x0, 0x2f) 201.651964ms ago: executing program 3 (id=1793): getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)=ANY=[@ANYBLOB="48000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r3, @ANYBLOB="0a0001000000648a63ffdac0b2ffc742a61a2e86a02393f3de08"], 0x48}}, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r4, 0x0, 0x0, 0x0) readv(r1, &(0x7f0000000340)=[{&(0x7f0000000140)=""/54, 0x36}], 0x1) syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r5) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r6}, 0x10) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000040)={@private0, @dev={0xfe, 0x80, '\x00', 0x21}, @remote, 0x1, 0x3, 0x40, 0x0, 0x0, 0x10200}) sendmmsg$alg(r5, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe1a}], 0x1, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x4924924924924b9, 0x0) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x20000253) r7 = socket(0x10, 0x3, 0x0) ioctl$IMGETDEVINFO(r7, 0x80044944, &(0x7f0000000040)={0x101}) getpid() sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000003e00)=[{&(0x7f0000000200)={0x114, 0x2e, 0x1, 0x0, 0x0, "", [@nested={0x101, 0x17, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64=0x3}, @typed={0x14, 0x3, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe8101000000010000008b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd"]}]}, 0x114}, {0x0}], 0x2}, 0x0) 92.538608ms ago: executing program 4 (id=1794): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18082000003000000000000000000400851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000000006600020000200000180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x1100, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) 88.420792ms ago: executing program 1 (id=1795): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x6, 0x300, 0xfc}, 0x1c) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, 0xffffffffffffffff, 0x0) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async, rerun: 64) r2 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000340)=ANY=[@ANYBLOB="180000002c00010026bd"], 0x18}, 0x1, 0x0, 0x0, 0x404000c}, 0x40000) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)={'syztnl1\x00', 0x0, 0x0, 0x1, 0x2, 0x1064, {{0x9, 0x4, 0x3, 0x0, 0x24, 0x65, 0x0, 0x8, 0x29, 0x0, @empty, @local, {[@generic={0x86367fd98c17935e, 0xb, "a11bc17481c229ca96"}, @ra={0x94, 0x4}]}}}}}) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000340)={'ip6_vti0\x00', &(0x7f00000002c0)={'ip6_vti0\x00', 0x0, 0x29, 0x8, 0x7, 0x1, 0x42, @mcast1, @private0={0xfc, 0x0, '\x00', 0x1}, 0x10, 0x700, 0x8, 0x2}}) (async) getsockname$packet(r1, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r4 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 32) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r5, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) (async) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0x6}, {0xfff1, 0xffff}, {0x1b6dd91e85e94ce1}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) (async) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=@delchain={0x30, 0x2e, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xfff3, 0xffff}, {0x0, 0xe}}, [@filter_kind_options=@f_u32={{0x8}, {0x4}}]}, 0x30}}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$inet6_sctp(0xa, 0x801, 0x84) socket$inet_sctp(0x2, 0x5, 0x84) (async, rerun: 64) socket$inet6_sctp(0xa, 0x1, 0x84) (async, rerun: 64) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) socket$pppl2tp(0x18, 0x1, 0x1) (async) socket(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) 0s ago: executing program 2 (id=1796): socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f00000009c0)=@assoc_value={0x0, 0x800}, 0x8) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c00"], 0x3c}}, 0x100000000000000) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) kernel console output (not intermixed with test programs): batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.568820][ T5850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.595522][ T5850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.617117][ T5850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.630906][ T5850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.644539][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.735350][ T5951] netlink: 'syz.0.8': attribute type 10 has an invalid length. [ 95.773953][ T5948] bond0: (slave wlan1): Releasing backup interface [ 95.817069][ T5951] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 95.833968][ T5850] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.858673][ T5850] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.871095][ T5850] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.882990][ T5850] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.956341][ T1149] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.972800][ T1149] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.113624][ T1149] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.124086][ T1149] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.311120][ T1149] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.344818][ T1149] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.402125][ T5966] netlink: 'syz.0.9': attribute type 10 has an invalid length. [ 96.442765][ T5965] bond0: (slave wlan1): Releasing backup interface [ 96.484792][ T5966] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 96.509806][ T5970] netlink: 16 bytes leftover after parsing attributes in process `syz.1.10'. [ 96.635597][ T1149] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.654310][ T1149] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.715281][ T5972] bridge_slave_0: left allmulticast mode [ 96.735239][ T5972] bridge_slave_0: left promiscuous mode [ 96.763625][ T5975] netlink: 'syz.4.5': attribute type 10 has an invalid length. [ 96.789421][ T5972] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.839741][ T5972] bridge_slave_1: left allmulticast mode [ 96.857625][ T5972] bridge_slave_1: left promiscuous mode [ 96.871017][ T5972] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.934595][ T5972] bond0: (slave bond_slave_0): Releasing backup interface [ 96.991618][ T5972] bond0: (slave bond_slave_1): Releasing backup interface [ 97.035044][ T5972] team0: Port device team_slave_0 removed [ 97.052890][ T5972] team0: Port device team_slave_1 removed [ 97.059835][ T5972] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 97.070723][ T5972] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 97.081096][ T5972] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 97.085768][ T5985] syz.2.12 uses obsolete (PF_INET,SOCK_PACKET) [ 97.089946][ T5972] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 97.234007][ T5975] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 97.374934][ T5987] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12'. [ 97.470830][ T5989] ip6tnl1: entered promiscuous mode [ 97.490967][ T5989] ip6tnl1: entered allmulticast mode [ 97.512965][ T5989] team0: Device ip6tnl1 is of different type [ 97.830301][ T6002] netlink: 96 bytes leftover after parsing attributes in process `syz.1.13'. [ 98.022626][ T120] cfg80211: failed to load regulatory.db [ 98.408566][ T6026] sctp: [Deprecated]: syz.2.17 (pid 6026) Use of struct sctp_assoc_value in delayed_ack socket option. [ 98.408566][ T6026] Use struct sctp_sack_info instead [ 98.688231][ T6026] 8021q: adding VLAN 0 to HW filter on device bond1 [ 99.103006][ T6044] netlink: 136 bytes leftover after parsing attributes in process `syz.2.21'. [ 99.144417][ T6044] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 101.033854][ T6072] sctp: [Deprecated]: syz.3.24 (pid 6072) Use of struct sctp_assoc_value in delayed_ack socket option. [ 101.033854][ T6072] Use struct sctp_sack_info instead [ 101.138281][ T6070] xt_hashlimit: size too large, truncated to 1048576 [ 101.201006][ T6072] 8021q: adding VLAN 0 to HW filter on device bond1 [ 101.261056][ T6075] netlink: 8 bytes leftover after parsing attributes in process `syz.0.26'. [ 101.760397][ T6085] dccp_invalid_packet: P.type (CLOSE) not Data || [Data]Ack, while P.X == 0 [ 101.801091][ T6085] netlink: 8 bytes leftover after parsing attributes in process `syz.1.28'. [ 101.875900][ T6085] ip6tnl1: entered promiscuous mode [ 101.912131][ T6085] ip6tnl1: entered allmulticast mode [ 101.934003][ T6085] team0: Device ip6tnl1 is up. Set it down before adding it as a team port [ 102.526205][ T6100] netlink: 12 bytes leftover after parsing attributes in process `syz.2.32'. [ 102.603236][ T6104] netlink: 'syz.3.33': attribute type 1 has an invalid length. [ 103.585271][ T6121] netlink: 'syz.2.39': attribute type 8 has an invalid length. [ 103.626341][ T6120] netlink: 'syz.2.39': attribute type 8 has an invalid length. [ 104.252611][ T6139] netdevsim netdevsim2 netdevsim0: invalid flags given to default FDB implementation [ 104.491117][ T6143] netlink: 12 bytes leftover after parsing attributes in process `syz.1.45'. [ 104.530165][ T6147] netlink: 'syz.2.47': attribute type 21 has an invalid length. [ 104.561599][ T6147] netlink: 132 bytes leftover after parsing attributes in process `syz.2.47'. [ 104.562161][ T6143] netlink: 12 bytes leftover after parsing attributes in process `syz.1.45'. [ 104.591720][ T6147] netlink: 'syz.2.47': attribute type 1 has an invalid length. [ 104.637364][ T6147] netlink: 12 bytes leftover after parsing attributes in process `syz.2.47'. [ 104.708575][ T6141] Zero length message leads to an empty skb [ 105.278099][ T6161] netlink: 'syz.4.50': attribute type 10 has an invalid length. [ 105.287293][ T6158] bond0: (slave wlan1): Releasing backup interface [ 105.433888][ T6161] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 106.103638][ T6179] ipt_ECN: cannot use operation on non-tcp rule [ 106.947606][ T6197] pimreg: entered allmulticast mode [ 106.956428][ T6197] pimreg: left allmulticast mode [ 107.363481][ T6212] Bluetooth: MGMT ver 1.23 [ 107.442483][ T6205] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.618184][ T6214] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 107.801785][ T6205] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.152426][ T6205] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.427863][ T6205] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.524278][ T6231] netlink: 44 bytes leftover after parsing attributes in process `syz.2.67'. [ 108.554083][ T6231] netlink: 43 bytes leftover after parsing attributes in process `syz.2.67'. [ 108.582171][ T6231] netlink: 'syz.2.67': attribute type 5 has an invalid length. [ 108.609715][ T6231] netlink: 43 bytes leftover after parsing attributes in process `syz.2.67'. [ 108.961045][ T6236] netlink: 12 bytes leftover after parsing attributes in process `syz.1.69'. [ 108.975193][ T6205] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.025805][ T6205] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.044275][ T6241] xt_CT: You must specify a L4 protocol and not use inversions on it [ 109.195730][ T6205] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.301219][ T6205] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.518676][ T5843] Bluetooth: hci4: command 0x0405 tx timeout [ 110.609379][ T6269] netlink: 8 bytes leftover after parsing attributes in process `syz.4.76'. [ 110.658096][ T6269] netlink: 4 bytes leftover after parsing attributes in process `syz.4.76'. [ 110.699835][ T6269] netlink: 'syz.4.76': attribute type 1 has an invalid length. [ 110.762773][ T6269] netlink: 10 bytes leftover after parsing attributes in process `syz.4.76'. [ 110.850255][ T6277] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 110.949076][ T6277] netlink: 4 bytes leftover after parsing attributes in process `syz.0.78'. [ 111.814412][ T6292] netlink: 'syz.4.79': attribute type 2 has an invalid length. [ 111.868155][ T6292] netlink: 12 bytes leftover after parsing attributes in process `syz.4.79'. [ 112.548975][ T6310] x_tables: arp_tables: .0 target: invalid size 8 (kernel) != (user) 0 [ 113.074435][ T6315] netlink: 'syz.2.88': attribute type 10 has an invalid length. [ 113.103628][ T6326] bridge_slave_0: left allmulticast mode [ 113.110893][ T6326] bridge_slave_0: left promiscuous mode [ 113.134155][ T6326] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.225789][ T6326] bridge_slave_1: left allmulticast mode [ 113.247647][ T6326] bridge_slave_1: left promiscuous mode [ 113.261119][ T6326] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.333121][ T6326] bond0: (slave bond_slave_0): Releasing backup interface [ 113.396461][ T6326] bond0: (slave bond_slave_1): Releasing backup interface [ 113.431385][ T6326] team0: Port device team_slave_0 removed [ 113.450279][ T6326] team0: Port device team_slave_1 removed [ 113.457566][ T6326] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 113.468516][ T6326] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 113.480305][ T6326] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 113.489289][ T6326] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 113.576027][ T6315] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 114.506109][ T6374] netlink: 'syz.0.105': attribute type 10 has an invalid length. [ 114.656628][ T6370] bond0: (slave wlan1): Releasing backup interface [ 114.816729][ T6374] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 116.272560][ T6427] netlink: 96 bytes leftover after parsing attributes in process `syz.4.120'. [ 116.585513][ T6418] ip6gretap1: entered allmulticast mode [ 116.644844][ T6438] netlink: 76 bytes leftover after parsing attributes in process `syz.4.121'. [ 117.459612][ T6459] pimreg: entered allmulticast mode [ 117.472790][ T6461] pimreg: left allmulticast mode [ 117.596883][ T6464] dccp_invalid_packet: P.Data Offset(172) too large [ 117.874700][ T6470] netlink: 72 bytes leftover after parsing attributes in process `syz.0.131'. [ 118.019340][ T6477] xt_TCPMSS: Only works on TCP SYN packets [ 118.175203][ T6481] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 118.307156][ T6483] netlink: 20 bytes leftover after parsing attributes in process `syz.1.136'. [ 119.069721][ T6508] ieee802154 phy0 wpan0: encryption failed: -22 [ 119.089380][ T6508] netlink: 44 bytes leftover after parsing attributes in process `syz.1.144'. [ 119.269237][ T6516] netlink: 28 bytes leftover after parsing attributes in process `syz.4.147'. [ 119.288872][ T6516] netlink: 28 bytes leftover after parsing attributes in process `syz.4.147'. [ 119.649008][ T6529] netlink: 2 bytes leftover after parsing attributes in process `syz.0.151'. [ 120.932169][ T6574] netlink: 8 bytes leftover after parsing attributes in process `syz.0.164'. [ 120.973598][ T6574] netlink: 25 bytes leftover after parsing attributes in process `syz.0.164'. [ 121.198910][ T6584] netlink: 'syz.2.168': attribute type 7 has an invalid length. [ 121.396025][ T6595] __nla_validate_parse: 3 callbacks suppressed [ 121.396053][ T6595] netlink: 8 bytes leftover after parsing attributes in process `syz.4.171'. [ 121.405073][ T6590] can: request_module (can-proto-0) failed. [ 121.411694][ T6593] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 121.643492][ T6607] netlink: 104 bytes leftover after parsing attributes in process `syz.0.174'. [ 122.001247][ T6602] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 122.051954][ T6602] bond0 (unregistering): Released all slaves [ 122.435435][ T6606] netlink: 'syz.2.172': attribute type 6 has an invalid length. [ 122.912358][ T6646] netlink: 8 bytes leftover after parsing attributes in process `syz.1.185'. [ 122.934983][ T6647] netlink: 'syz.3.184': attribute type 33 has an invalid length. [ 122.944834][ T6647] netlink: 152 bytes leftover after parsing attributes in process `syz.3.184'. [ 122.955566][ T6646] netlink: 20 bytes leftover after parsing attributes in process `syz.1.185'. [ 123.005231][ T6649] netlink: 'syz.3.184': attribute type 9 has an invalid length. [ 123.014662][ T6646] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 123.025211][ T6646] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 123.035512][ T6646] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 123.045552][ T6646] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 123.348836][ T6655] netlink: 24 bytes leftover after parsing attributes in process `syz.1.187'. [ 123.500148][ T6658] bridge0: entered promiscuous mode [ 123.530830][ T6658] macvlan2: entered promiscuous mode [ 123.570529][ T6658] bridge0: port 3(macvlan2) entered blocking state [ 123.587949][ T6658] bridge0: port 3(macvlan2) entered disabled state [ 123.609663][ T6658] macvlan2: entered allmulticast mode [ 123.636437][ T6658] bridge0: entered allmulticast mode [ 123.696858][ T6658] macvlan2: left allmulticast mode [ 123.715200][ T6658] bridge0: left allmulticast mode [ 123.758649][ T6658] bridge0: left promiscuous mode [ 124.139583][ T6672] xt_CT: No such helper "syz1" [ 124.675780][ T6689] netlink: 20 bytes leftover after parsing attributes in process `syz.1.198'. [ 124.701338][ T6696] netlink: 4 bytes leftover after parsing attributes in process `syz.2.199'. [ 124.750737][ T6696] netlink: 4 bytes leftover after parsing attributes in process `syz.2.199'. [ 124.787291][ T6696] netlink: 4 bytes leftover after parsing attributes in process `syz.2.199'. [ 125.418060][ T6726] netlink: 'syz.1.205': attribute type 8 has an invalid length. [ 125.542382][ T6734] sctp: [Deprecated]: syz.0.207 (pid 6734) Use of struct sctp_assoc_value in delayed_ack socket option. [ 125.542382][ T6734] Use struct sctp_sack_info instead [ 126.146425][ T6745] batadv0: entered promiscuous mode [ 126.178592][ T6745] macvtap1: entered promiscuous mode [ 126.209645][ T6745] macvtap1: entered allmulticast mode [ 126.215318][ T6745] batadv0: entered allmulticast mode [ 126.260279][ T6745] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 126.385938][ T6752] bond0: entered promiscuous mode [ 126.392047][ T6752] bond0: entered allmulticast mode [ 126.399327][ T6752] 8021q: adding VLAN 0 to HW filter on device bond0 [ 126.541842][ T6757] __nla_validate_parse: 37 callbacks suppressed [ 126.541873][ T6757] netlink: 248 bytes leftover after parsing attributes in process `syz.3.215'. [ 128.038256][ T6805] SET target dimension over the limit! [ 128.098687][ T6810] netlink: 'syz.1.229': attribute type 1 has an invalid length. [ 128.108307][ T6809] netlink: 8 bytes leftover after parsing attributes in process `syz.3.228'. [ 128.127184][ T6809] netlink: 8 bytes leftover after parsing attributes in process `syz.3.228'. [ 128.137203][ T6810] netlink: 224 bytes leftover after parsing attributes in process `syz.1.229'. [ 128.303819][ T6828] netlink: 'syz.0.227': attribute type 1 has an invalid length. [ 128.937574][ T6801] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.948343][ T6801] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.960882][ T6801] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.971817][ T6801] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.173383][ T6805] 8021q: adding VLAN 0 to HW filter on device bond0 [ 129.189087][ T6805] 8021q: adding VLAN 0 to HW filter on device team0 [ 129.204648][ T6805] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 129.222689][ T6821] netlink: 44 bytes leftover after parsing attributes in process `syz.3.228'. [ 129.249758][ T6809] batadv0: entered promiscuous mode [ 129.250823][ T6805] syz.2.226 (6805) used greatest stack depth: 18840 bytes left [ 129.270150][ T6809] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 129.400609][ T6828] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 129.693525][ T6870] sctp: [Deprecated]: syz.1.235 (pid 6870) Use of struct sctp_assoc_value in delayed_ack socket option. [ 129.693525][ T6870] Use struct sctp_sack_info instead [ 129.931297][ T6868] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.354063][ T6878] 8021q: adding VLAN 0 to HW filter on device bond1 [ 130.708638][ T6868] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.883381][ T6868] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.952912][ T6898] IPVS: length: 78 != 8 [ 131.105226][ T6868] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.396766][ T6868] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.448106][ T6868] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.533265][ T6868] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.602633][ T6868] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.835809][ T6906] netlink: 8 bytes leftover after parsing attributes in process `syz.0.242'. [ 131.960082][ T6906] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.088939][ T6906] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.178619][ T6912] RDS: rds_bind could not find a transport for ::ffff:100.1.1.0, load rds_tcp or rds_rdma? [ 132.250977][ T6906] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.304632][ T6916] netlink: 12 bytes leftover after parsing attributes in process `syz.4.245'. [ 132.375820][ T6916] netlink: 12 bytes leftover after parsing attributes in process `syz.4.245'. [ 132.403321][ T6906] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.632163][ T6906] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.663779][ T6938] netlink: 24 bytes leftover after parsing attributes in process `syz.1.247'. [ 132.784524][ T6906] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.893646][ T6950] netlink: 'syz.4.248': attribute type 10 has an invalid length. [ 132.999528][ T6906] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.167106][ T6946] bond0: (slave wlan1): Releasing backup interface [ 133.342903][ T6906] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.620321][ T6976] netlink: 'syz.0.254': attribute type 1 has an invalid length. [ 133.676916][ T6976] netlink: 228 bytes leftover after parsing attributes in process `syz.0.254'. [ 133.734960][ T6973] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 133.848336][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.855592][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.975243][ T6983] netlink: 'syz.2.256': attribute type 10 has an invalid length. [ 134.017803][ T6983] netlink: 40 bytes leftover after parsing attributes in process `syz.2.256'. [ 134.047739][ T6983] dummy0: entered promiscuous mode [ 134.086914][ T6983] bridge0: port 1(dummy0) entered blocking state [ 134.130697][ T6983] bridge0: port 1(dummy0) entered disabled state [ 134.165886][ T6983] dummy0: entered allmulticast mode [ 134.218397][ T6983] bridge0: port 1(dummy0) entered blocking state [ 134.225529][ T6983] bridge0: port 1(dummy0) entered forwarding state [ 134.652996][ T7015] dummy0: left allmulticast mode [ 134.695383][ T7015] bridge0: port 1(dummy0) entered disabled state [ 134.698130][ T7019] netlink: 'syz.2.264': attribute type 10 has an invalid length. [ 134.773780][ T7015] bond0: (slave wlan1): Releasing backup interface [ 134.795127][ T7024] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 134.863408][ T7019] 8021q: adding VLAN 0 to HW filter on device bond0 [ 134.885847][ T7019] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 134.923334][ T7018] netlink: 'syz.3.265': attribute type 10 has an invalid length. [ 134.990979][ T7021] bridge_slave_0: left allmulticast mode [ 135.017149][ T7021] bridge_slave_0: left promiscuous mode [ 135.049141][ T7021] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.061658][ T7033] netlink: 'syz.4.268': attribute type 10 has an invalid length. [ 135.126270][ T7021] bridge_slave_1: left allmulticast mode [ 135.151800][ T7021] bridge_slave_1: left promiscuous mode [ 135.173932][ T7021] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.224139][ T7021] bond0: (slave bond_slave_0): Releasing backup interface [ 135.264799][ T7021] bond0: (slave bond_slave_1): Releasing backup interface [ 135.331165][ T7021] team0: Port device team_slave_0 removed [ 135.383010][ T7021] team0: Port device team_slave_1 removed [ 135.394107][ T7021] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 135.402960][ T7021] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 135.415498][ T7021] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 135.427596][ T7021] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 135.703517][ T7018] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 135.716981][ T7056] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 135.787306][ T7033] team0: Cannot enslave team device to itself [ 136.880957][ T7092] netlink: 'syz.2.279': attribute type 10 has an invalid length. [ 136.910135][ T7088] bond0: (slave wlan1): Releasing backup interface [ 136.963468][ T7092] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 137.115246][ T7096] batadv_slave_0: entered promiscuous mode [ 137.192926][ T7096] batadv_slave_0: left promiscuous mode [ 138.245496][ T7124] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.366217][ T7129] tipc: Started in network mode [ 138.388296][ T7129] tipc: Node identity 4, cluster identity 4711 [ 138.406215][ T7129] tipc: Node number set to 4 [ 138.444431][ T7143] netlink: 'syz.2.293': attribute type 1 has an invalid length. [ 138.455073][ T7143] netlink: 8 bytes leftover after parsing attributes in process `syz.2.293'. [ 138.477408][ T7136] netlink: 'syz.0.292': attribute type 10 has an invalid length. [ 138.511306][ T7141] bond0: (slave wlan1): Releasing backup interface [ 138.535686][ T7143] netlink: 20 bytes leftover after parsing attributes in process `syz.2.293'. [ 138.584794][ T7136] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 138.730818][ T7124] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.854316][ T7152] netlink: 'syz.2.295': attribute type 1 has an invalid length. [ 138.901769][ T7124] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.133977][ T7124] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.433522][ T7124] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.478585][ T7124] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.568503][ T7124] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.687205][ T7124] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.824703][ T6824] IPVS: starting estimator thread 0... [ 139.859410][ T7185] bridge: RTM_NEWNEIGH with invalid ether address [ 139.938592][ T7190] IPVS: using max 27 ests per chain, 64800 per kthread [ 141.106378][ T7240] delete_channel: no stack [ 141.115644][ T7234] bond2: entered allmulticast mode [ 141.568551][ T7261] netlink: 'syz.1.323': attribute type 1 has an invalid length. [ 141.591391][ T7253] syzkaller0: entered promiscuous mode [ 141.613538][ T7253] syzkaller0: entered allmulticast mode [ 142.265297][ T7281] sctp: [Deprecated]: syz.2.330 (pid 7281) Use of struct sctp_assoc_value in delayed_ack socket option. [ 142.265297][ T7281] Use struct sctp_sack_info instead [ 143.716542][ T7290] Bluetooth: MGMT ver 1.23 [ 143.798748][ T7293] netlink: 4 bytes leftover after parsing attributes in process `syz.4.332'. [ 145.228658][ T7281] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 145.243686][ T7291] geneve2: entered promiscuous mode [ 145.304337][ T7293] ipvlan2: entered promiscuous mode [ 145.320632][ T7293] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 145.349039][ T7293] team0: Device ipvlan2 is already an upper device of the team interface [ 145.836336][ T7321] netlink: 16 bytes leftover after parsing attributes in process `syz.4.341'. [ 145.848036][ T7316] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 145.862960][ T7316] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.015157][ T7316] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 146.033318][ T7316] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.148478][ T7316] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 146.181647][ T7316] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.191268][ T7315] netlink: 8 bytes leftover after parsing attributes in process `syz.3.338'. [ 146.235146][ T7327] netlink: 4232 bytes leftover after parsing attributes in process `syz.4.343'. [ 146.342185][ T7316] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 146.418124][ T7316] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.557285][ T7336] sctp: [Deprecated]: syz.4.346 (pid 7336) Use of struct sctp_assoc_value in delayed_ack socket option. [ 146.557285][ T7336] Use struct sctp_sack_info instead [ 146.972339][ T7330] 8021q: adding VLAN 0 to HW filter on device bond1 [ 147.296980][ T7316] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 147.330961][ T7316] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.394744][ T7362] netlink: 16 bytes leftover after parsing attributes in process `syz.4.352'. [ 147.456389][ T7366] netlink: 'syz.0.351': attribute type 10 has an invalid length. [ 147.465572][ T7362] netlink: 16 bytes leftover after parsing attributes in process `syz.4.352'. [ 147.604778][ T7361] bond0: (slave wlan1): Releasing backup interface [ 147.792612][ T7316] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 147.871758][ T7316] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.974323][ T7386] netlink: 20 bytes leftover after parsing attributes in process `syz.2.355'. [ 148.018485][ T7316] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 148.035251][ T7316] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.072310][ T7366] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 148.098736][ T7365] netlink: 4 bytes leftover after parsing attributes in process `syz.3.350'. [ 148.220611][ T7316] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 148.238007][ T7316] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.737618][ T7415] netlink: 8 bytes leftover after parsing attributes in process `syz.1.360'. [ 148.798215][ T7415] netlink: 52 bytes leftover after parsing attributes in process `syz.1.360'. [ 149.206198][ T7436] sctp: [Deprecated]: syz.3.363 (pid 7436) Use of struct sctp_assoc_value in delayed_ack socket option. [ 149.206198][ T7436] Use struct sctp_sack_info instead [ 149.473880][ T7441] netlink: 46 bytes leftover after parsing attributes in process `syz.2.366'. [ 149.616159][ T7436] 8021q: adding VLAN 0 to HW filter on device bond2 [ 150.044257][ T7460] netlink: 8 bytes leftover after parsing attributes in process `syz.3.369'. [ 150.205732][ T7460] bridge0: entered promiscuous mode [ 150.246386][ T7472] netlink: 16 bytes leftover after parsing attributes in process `syz.4.372'. [ 150.246799][ T7460] vlan2: entered promiscuous mode [ 150.432853][ T7472] nr4: entered allmulticast mode [ 150.514890][ T7484] netlink: 'syz.1.373': attribute type 10 has an invalid length. [ 151.509661][ T7515] sctp: [Deprecated]: syz.4.380 (pid 7515) Use of struct sctp_assoc_value in delayed_ack socket option. [ 151.509661][ T7515] Use struct sctp_sack_info instead [ 151.666175][ T7515] 8021q: adding VLAN 0 to HW filter on device bond1 [ 151.690631][ T7516] netlink: 4 bytes leftover after parsing attributes in process `syz.0.379'. [ 152.323003][ T7545] netlink: 16 bytes leftover after parsing attributes in process `syz.2.388'. [ 152.395492][ T7545] netlink: 'syz.2.388': attribute type 1 has an invalid length. [ 152.443368][ T7551] netlink: 16 bytes leftover after parsing attributes in process `syz.4.390'. [ 152.458381][ T7552] netlink: 48 bytes leftover after parsing attributes in process `syz.2.388'. [ 152.579782][ T7553] netlink: 16 bytes leftover after parsing attributes in process `syz.0.389'. [ 152.637025][ T7545] bond2: entered promiscuous mode [ 152.645432][ T7545] 8021q: adding VLAN 0 to HW filter on device bond2 [ 152.766355][ T7561] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 153.275705][ T7587] sctp: [Deprecated]: syz.1.396 (pid 7587) Use of struct sctp_assoc_value in delayed_ack socket option. [ 153.275705][ T7587] Use struct sctp_sack_info instead [ 153.490742][ T7600] netlink: 12 bytes leftover after parsing attributes in process `syz.4.398'. [ 153.513734][ T7587] 8021q: adding VLAN 0 to HW filter on device bond3 [ 153.885141][ T7610] netlink: 8 bytes leftover after parsing attributes in process `syz.1.401'. [ 154.761360][ T7645] __nla_validate_parse: 1 callbacks suppressed [ 154.761393][ T7645] netlink: 5 bytes leftover after parsing attributes in process `syz.3.410'. [ 154.995493][ T7653] netlink: 8 bytes leftover after parsing attributes in process `syz.0.413'. [ 155.518571][ T7674] netlink: 16 bytes leftover after parsing attributes in process `syz.4.418'. [ 155.981380][ T7698] sctp: [Deprecated]: syz.2.425 (pid 7698) Use of struct sctp_assoc_value in delayed_ack socket option. [ 155.981380][ T7698] Use struct sctp_sack_info instead [ 156.254353][ T7696] 8021q: adding VLAN 0 to HW filter on device bond2 [ 156.638816][ T7716] netlink: 16 bytes leftover after parsing attributes in process `syz.0.432'. [ 156.808074][ T7720] netlink: 'syz.2.433': attribute type 10 has an invalid length. [ 156.838464][ T7720] dummy0: left promiscuous mode [ 156.896818][ T7720] team0: Port device dummy0 added [ 157.134454][ T7734] netlink: 24 bytes leftover after parsing attributes in process `syz.0.435'. [ 157.318731][ T7726] netlink: 'syz.0.435': attribute type 1 has an invalid length. [ 157.381041][ T7726] batman_adv: batadv0: Adding interface: dummy0 [ 157.398695][ T7726] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 157.455730][ T7726] batman_adv: batadv0: Interface activated: dummy0 [ 158.061975][ T7763] netlink: 16 bytes leftover after parsing attributes in process `syz.4.445'. [ 158.310861][ T7775] netlink: 60 bytes leftover after parsing attributes in process `syz.0.447'. [ 158.335282][ T7767] netlink: 60 bytes leftover after parsing attributes in process `syz.0.447'. [ 158.746109][ T7786] tipc: Started in network mode [ 158.781834][ T7786] tipc: Node identity 0a4a32f5ee56, cluster identity 4711 [ 158.850737][ T7786] tipc: Enabled bearer , priority 0 [ 158.973157][ T7797] netlink: 52 bytes leftover after parsing attributes in process `syz.4.454'. [ 159.061438][ T7789] syzkaller0: entered promiscuous mode [ 159.085292][ T7789] syzkaller0: entered allmulticast mode [ 159.389697][ T7815] netlink: 16 bytes leftover after parsing attributes in process `syz.0.459'. [ 159.705008][ T7830] FAULT_INJECTION: forcing a failure. [ 159.705008][ T7830] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 159.736159][ T7829] sctp: [Deprecated]: syz.4.461 (pid 7829) Use of struct sctp_assoc_value in delayed_ack socket option. [ 159.736159][ T7829] Use struct sctp_sack_info instead [ 159.766197][ T7830] CPU: 0 UID: 0 PID: 7830 Comm: syz.0.464 Not tainted 6.14.0-syzkaller-13320-g420aabef3ab5 #0 PREEMPT(full) [ 159.766233][ T7830] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 159.766245][ T7830] Call Trace: [ 159.766253][ T7830] [ 159.766261][ T7830] dump_stack_lvl+0x241/0x360 [ 159.766301][ T7830] ? __pfx_dump_stack_lvl+0x10/0x10 [ 159.766324][ T7830] ? __pfx__printk+0x10/0x10 [ 159.766363][ T7830] should_fail_ex+0x424/0x570 [ 159.766389][ T7830] _copy_from_user+0x2d/0xb0 [ 159.766418][ T7830] copy_msghdr_from_user+0xb3/0x580 [ 159.766451][ T7830] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 159.766471][ T7830] ? __fget_files+0x2a/0x420 [ 159.766493][ T7830] ? __fget_files+0x2a/0x420 [ 159.766519][ T7830] do_recvmmsg+0x3bf/0xab0 [ 159.766552][ T7830] ? __pfx_do_recvmmsg+0x10/0x10 [ 159.766588][ T7830] ? rcu_read_lock_any_held+0xbb/0x160 [ 159.766613][ T7830] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 159.766639][ T7830] ? vfs_write+0xb29/0xd10 [ 159.766672][ T7830] ? ksys_write+0x24e/0x2d0 [ 159.766695][ T7830] ? __mutex_unlock_slowpath+0x229/0x800 [ 159.766727][ T7830] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 159.766746][ T7830] ? __fget_files+0x2a/0x420 [ 159.766781][ T7830] __x64_sys_recvmmsg+0x1ab/0x260 [ 159.766803][ T7830] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 159.766830][ T7830] ? do_syscall_64+0xb6/0x230 [ 159.766855][ T7830] do_syscall_64+0xf3/0x230 [ 159.766879][ T7830] ? clear_bhb_loop+0x45/0xa0 [ 159.766901][ T7830] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.766918][ T7830] RIP: 0033:0x7face698d169 [ 159.766937][ T7830] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 159.766952][ T7830] RSP: 002b:00007face7707038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 159.766975][ T7830] RAX: ffffffffffffffda RBX: 00007face6ba5fa0 RCX: 00007face698d169 [ 159.766988][ T7830] RDX: 0400000000000284 RSI: 0000200000000040 RDI: 0000000000000003 [ 159.767000][ T7830] RBP: 00007face7707090 R08: 0000000000000000 R09: 0000000000000000 [ 159.767011][ T7830] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 159.767021][ T7830] R13: 0000000000000000 R14: 00007face6ba5fa0 R15: 00007ffec900c698 [ 159.767066][ T7830] [ 159.813335][ T7835] netlink: 'syz.2.463': attribute type 10 has an invalid length. [ 159.834681][ T7833] netlink: 'syz.3.465': attribute type 10 has an invalid length. [ 159.926347][ T7828] team0: Port device dummy0 removed [ 160.044385][ T5893] tipc: Node number set to 3827053301 [ 160.151656][ T7828] bond0: (slave wlan1): Releasing backup interface [ 160.265718][ T7829] 8021q: adding VLAN 0 to HW filter on device bond2 [ 160.287342][ T7835] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 161.265802][ T7881] netlink: 16 bytes leftover after parsing attributes in process `syz.0.474'. [ 161.662366][ T7889] netlink: 16 bytes leftover after parsing attributes in process `syz.2.476'. [ 161.921670][ T7894] batman_adv: batadv0: Interface deactivated: dummy0 [ 161.980526][ T7894] batman_adv: batadv0: Removing interface: dummy0 [ 162.018992][ T7900] netlink: 'syz.0.478': attribute type 10 has an invalid length. [ 162.188086][ T7894] bond0: (slave wlan1): Releasing backup interface [ 162.254734][ T7900] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 162.887318][ T7931] netlink: 'syz.3.483': attribute type 4 has an invalid length. [ 162.978465][ T7928] netlink: 'syz.3.483': attribute type 4 has an invalid length. [ 163.011769][ T7931] netlink: 'syz.3.483': attribute type 4 has an invalid length. [ 163.216352][ T7940] netlink: 16 bytes leftover after parsing attributes in process `syz.3.485'. [ 163.741645][ T7959] netlink: 'syz.0.491': attribute type 10 has an invalid length. [ 163.828567][ T7955] bond0: (slave wlan1): Releasing backup interface [ 163.876519][ T7959] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 164.181483][ T7980] netlink: 16 bytes leftover after parsing attributes in process `syz.0.498'. [ 164.197265][ T7943] FAULT_INJECTION: forcing a failure. [ 164.197265][ T7943] name failslab, interval 1, probability 0, space 0, times 0 [ 164.215013][ T7943] CPU: 0 UID: 0 PID: 7943 Comm: syz.2.487 Not tainted 6.14.0-syzkaller-13320-g420aabef3ab5 #0 PREEMPT(full) [ 164.215058][ T7943] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 164.215070][ T7943] Call Trace: [ 164.215078][ T7943] [ 164.215087][ T7943] dump_stack_lvl+0x241/0x360 [ 164.215128][ T7943] ? __pfx_dump_stack_lvl+0x10/0x10 [ 164.215155][ T7943] ? __pfx__printk+0x10/0x10 [ 164.215180][ T7943] ? lockdep_hardirqs_on+0x9d/0x150 [ 164.215208][ T7943] ? __pfx___might_resched+0x10/0x10 [ 164.215237][ T7943] should_fail_ex+0x424/0x570 [ 164.215264][ T7943] should_failslab+0xac/0x100 [ 164.215296][ T7943] kmem_cache_alloc_noprof+0x78/0x390 [ 164.215323][ T7943] ? taskstats_exit+0x360/0xa60 [ 164.215347][ T7943] taskstats_exit+0x360/0xa60 [ 164.215368][ T7943] ? lockdep_hardirqs_on+0x9d/0x150 [ 164.215387][ T7943] ? seccomp_filter_release+0xf4/0x130 [ 164.215414][ T7943] do_exit+0x98f/0x27f0 [ 164.215447][ T7943] ? do_raw_spin_lock+0x151/0x370 [ 164.215478][ T7943] ? __pfx_do_exit+0x10/0x10 [ 164.215502][ T7943] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 164.215556][ T7943] do_group_exit+0x207/0x2c0 [ 164.215579][ T7943] ? _raw_spin_unlock_irq+0x23/0x50 [ 164.215597][ T7943] ? lockdep_hardirqs_on+0x9d/0x150 [ 164.215623][ T7943] get_signal+0x1696/0x1730 [ 164.215660][ T7943] ? __pfx_get_signal+0x10/0x10 [ 164.215690][ T7943] arch_do_signal_or_restart+0x98/0x840 [ 164.215722][ T7943] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 164.215762][ T7943] ? syscall_exit_to_user_mode+0xa3/0x340 [ 164.215788][ T7943] syscall_exit_to_user_mode+0xce/0x340 [ 164.215812][ T7943] do_syscall_64+0x100/0x230 [ 164.215836][ T7943] ? clear_bhb_loop+0x45/0xa0 [ 164.215858][ T7943] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.215874][ T7943] RIP: 0033:0x7ff2fc18d169 [ 164.215892][ T7943] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 164.215906][ T7943] RSP: 002b:00007ff2fcff6038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 164.215928][ T7943] RAX: fffffffffffffe00 RBX: 00007ff2fc3a5fa0 RCX: 00007ff2fc18d169 [ 164.215942][ T7943] RDX: 0400000000000284 RSI: 0000200000000040 RDI: 0000000000000003 [ 164.215955][ T7943] RBP: 00007ff2fcff6090 R08: 0000000000000000 R09: 0000000000000000 [ 164.215967][ T7943] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 164.215978][ T7943] R13: 0000000000000000 R14: 00007ff2fc3a5fa0 R15: 00007fffcf83de88 [ 164.216010][ T7943] [ 164.626517][ T7984] netlink: 'syz.1.500': attribute type 1 has an invalid length. [ 164.629589][ T7982] team0: Port device gtp0 added [ 164.674152][ T7988] netlink: 112 bytes leftover after parsing attributes in process `syz.3.502'. [ 164.951733][ T7994] netlink: 24 bytes leftover after parsing attributes in process `syz.3.504'. [ 165.013582][ T7997] netlink: 16 bytes leftover after parsing attributes in process `syz.4.505'. [ 165.049331][ T7994] netlink: 8 bytes leftover after parsing attributes in process `syz.3.504'. [ 165.080430][ T7994] netlink: 24 bytes leftover after parsing attributes in process `syz.3.504'. [ 165.088939][ T7997] netlink: 104 bytes leftover after parsing attributes in process `syz.4.505'. [ 165.160582][ T7999] netlink: 'syz.1.506': attribute type 10 has an invalid length. [ 165.690507][ T8024] netlink: 'syz.4.515': attribute type 11 has an invalid length. [ 165.718375][ T8024] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0001 with DS=0x2 [ 166.132381][ T8040] sctp: [Deprecated]: syz.0.521 (pid 8040) Use of struct sctp_assoc_value in delayed_ack socket option. [ 166.132381][ T8040] Use struct sctp_sack_info instead [ 166.369844][ T8038] 8021q: adding VLAN 0 to HW filter on device bond3 [ 166.732075][ T8058] __nla_validate_parse: 2 callbacks suppressed [ 166.732125][ T8058] netlink: 8 bytes leftover after parsing attributes in process `syz.1.524'. [ 167.106498][ T8073] netlink: 'syz.0.527': attribute type 10 has an invalid length. [ 167.278412][ T8064] bond0: (slave wlan1): Releasing backup interface [ 167.360418][ T8064] team0: Port device gtp0 removed [ 167.400525][ T8089] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 167.520785][ T8077] netlink: 12 bytes leftover after parsing attributes in process `syz.4.530'. [ 167.531558][ T8077] netlink: 16 bytes leftover after parsing attributes in process `syz.4.530'. [ 167.542144][ T8077] netlink: 12 bytes leftover after parsing attributes in process `syz.4.530'. [ 167.555317][ T8077] netlink: 16 bytes leftover after parsing attributes in process `syz.4.530'. [ 167.565675][ T8077] netlink: 5 bytes leftover after parsing attributes in process `syz.4.530'. [ 167.580802][ T8073] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 168.027338][ T8108] sctp: [Deprecated]: syz.2.535 (pid 8108) Use of struct sctp_assoc_value in delayed_ack socket option. [ 168.027338][ T8108] Use struct sctp_sack_info instead [ 168.353535][ T8105] 8021q: adding VLAN 0 to HW filter on device bond4 [ 168.621832][ T8126] veth1_to_bond: entered allmulticast mode [ 168.663662][ T8129] syzkaller1: entered promiscuous mode [ 168.970754][ T8146] netlink: 'syz.4.544': attribute type 10 has an invalid length. [ 169.026504][ T8143] veth1_to_bond: entered promiscuous mode [ 169.220796][ T8146] 8021q: adding VLAN 0 to HW filter on device bond0 [ 169.262343][ T8146] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 169.632625][ T8125] veth1_to_bond: left promiscuous mode [ 169.771726][ T8125] veth1_to_bond: left allmulticast mode [ 169.843139][ T8176] netlink: 16 bytes leftover after parsing attributes in process `syz.2.552'. [ 170.008086][ T8183] sctp: [Deprecated]: syz.1.553 (pid 8183) Use of struct sctp_assoc_value in delayed_ack socket option. [ 170.008086][ T8183] Use struct sctp_sack_info instead [ 170.115418][ T8183] 8021q: adding VLAN 0 to HW filter on device bond4 [ 170.942482][ T8226] netlink: 'syz.3.560': attribute type 10 has an invalid length. [ 171.144106][ T8235] netlink: 16 bytes leftover after parsing attributes in process `syz.1.565'. [ 171.210562][ T8221] bond0: (slave wlan1): Releasing backup interface [ 171.326211][ T8226] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 171.675411][ T8245] netlink: 'syz.3.569': attribute type 21 has an invalid length. [ 171.759724][ T8250] sctp: [Deprecated]: syz.0.568 (pid 8250) Use of struct sctp_assoc_value in delayed_ack socket option. [ 171.759724][ T8250] Use struct sctp_sack_info instead [ 172.045584][ T8248] 8021q: adding VLAN 0 to HW filter on device bond5 [ 172.098744][ T8255] veth1_macvtap: left promiscuous mode [ 172.126650][ T8255] macsec0: entered promiscuous mode [ 172.145014][ T8270] netlink: 8 bytes leftover after parsing attributes in process `syz.1.571'. [ 172.157781][ T8255] macsec0: entered allmulticast mode [ 172.209742][ T8263] veth1_macvtap: entered promiscuous mode [ 172.247707][ T8263] veth1_macvtap: entered allmulticast mode [ 172.257073][ T8263] macsec0: left promiscuous mode [ 172.273058][ T8263] macsec0: left allmulticast mode [ 172.303320][ T8263] veth1_macvtap: left allmulticast mode [ 172.683517][ T8291] netlink: 16 bytes leftover after parsing attributes in process `syz.4.577'. [ 172.872752][ T8297] bond0: (slave wlan1): Releasing backup interface [ 172.900334][ T8301] netlink: 'syz.2.579': attribute type 10 has an invalid length. [ 173.063606][ T8301] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 173.153355][ T8306] syzkaller0: left promiscuous mode [ 173.192366][ T8306] syzkaller0: left allmulticast mode [ 173.267728][ T8316] netlink: 'syz.3.585': attribute type 4 has an invalid length. [ 173.291721][ T8316] netlink: 'syz.3.585': attribute type 2 has an invalid length. [ 173.414678][ T8326] netlink: 4 bytes leftover after parsing attributes in process `syz.4.586'. [ 173.466405][ T8328] netlink: 12 bytes leftover after parsing attributes in process `syz.4.586'. [ 173.782481][ T8344] netlink: 16 bytes leftover after parsing attributes in process `syz.2.592'. [ 173.916490][ T48] IPVS: starting estimator thread 0... [ 173.972693][ T8358] pim6reg: entered allmulticast mode [ 174.048649][ T8357] IPVS: using max 28 ests per chain, 67200 per kthread [ 174.071038][ T8360] pim6reg: left allmulticast mode [ 174.153073][ T8366] netlink: 8 bytes leftover after parsing attributes in process `syz.4.597'. [ 174.179982][ T8366] netlink: 12 bytes leftover after parsing attributes in process `syz.4.597'. [ 174.333065][ T8366] vlan2: entered allmulticast mode [ 174.361832][ T8366] bridge_slave_0: entered allmulticast mode [ 174.432371][ T8372] netlink: 'syz.0.598': attribute type 10 has an invalid length. [ 174.561295][ T8377] bond0: (slave wlan1): Releasing backup interface [ 174.671350][ T8372] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 174.808506][ T8392] netlink: 'syz.1.600': attribute type 1 has an invalid length. [ 174.911721][ T8398] netlink: 'syz.3.602': attribute type 1 has an invalid length. [ 175.007093][ T8404] netlink: 248 bytes leftover after parsing attributes in process `syz.1.604'. [ 175.173819][ T8398] 8021q: adding VLAN 0 to HW filter on device bond3 [ 175.235226][ T8403] bond3: (slave ip6gretap1): making interface the new active one [ 175.258508][ T8403] bond3: (slave ip6gretap1): Enslaving as an active interface with an up link [ 175.311300][ T8415] netlink: 4 bytes leftover after parsing attributes in process `syz.0.603'. [ 175.565606][ T8423] netlink: 16 bytes leftover after parsing attributes in process `syz.4.606'. [ 175.751987][ T8411] bond0: (slave wlan1): Releasing backup interface [ 176.305081][ T8452] netlink: 'syz.4.613': attribute type 10 has an invalid length. [ 176.352143][ T8450] bond0: (slave wlan1): Releasing backup interface [ 176.383557][ T8452] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 177.109829][ T8478] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 177.227836][ T8478] __nla_validate_parse: 4 callbacks suppressed [ 177.227865][ T8478] netlink: 28 bytes leftover after parsing attributes in process `syz.3.618'. [ 177.545657][ T8496] netlink: 16 bytes leftover after parsing attributes in process `syz.2.621'. [ 178.306356][ T8521] netlink: 'syz.4.627': attribute type 10 has an invalid length. [ 178.321706][ T8517] bond0: (slave wlan1): Releasing backup interface [ 178.400512][ T8521] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 178.655908][ T8531] sctp: [Deprecated]: syz.1.629 (pid 8531) Use of struct sctp_assoc_value in delayed_ack socket option. [ 178.655908][ T8531] Use struct sctp_sack_info instead [ 178.956588][ T8528] 8021q: adding VLAN 0 to HW filter on device bond6 [ 179.346548][ T8557] netlink: 24 bytes leftover after parsing attributes in process `syz.4.634'. [ 179.656615][ T8569] netlink: 16 bytes leftover after parsing attributes in process `syz.1.636'. [ 180.152632][ T8590] netlink: 'syz.1.642': attribute type 1 has an invalid length. [ 180.272434][ T8590] 8021q: adding VLAN 0 to HW filter on device bond5 [ 180.399867][ T8596] 8021q: adding VLAN 0 to HW filter on device bond5 [ 180.417941][ T8597] netlink: 'syz.4.641': attribute type 10 has an invalid length. [ 180.439241][ T8596] bond5: (slave vcan1): The slave device specified does not support setting the MAC address [ 180.499977][ T8596] bond5: (slave vcan1): Error -95 calling set_mac_address [ 182.400339][ T8629] netlink: 32 bytes leftover after parsing attributes in process `syz.4.648'. [ 182.458540][ T8678] netlink: 16 bytes leftover after parsing attributes in process `syz.2.657'. [ 182.555701][ T8681] netlink: 16 bytes leftover after parsing attributes in process `syz.3.658'. [ 182.779183][ T8683] netlink: 'syz.0.659': attribute type 10 has an invalid length. [ 183.207296][ T8710] netlink: 12 bytes leftover after parsing attributes in process `syz.3.665'. [ 183.249232][ T8709] netlink: 'syz.3.665': attribute type 1 has an invalid length. [ 183.623756][ T8733] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 184.201820][ T8760] netlink: 4 bytes leftover after parsing attributes in process `syz.3.674'. [ 184.209477][ T8767] sctp: [Deprecated]: syz.0.675 (pid 8767) Use of struct sctp_assoc_value in delayed_ack socket option. [ 184.209477][ T8767] Use struct sctp_sack_info instead [ 184.478554][ T8779] netlink: 4 bytes leftover after parsing attributes in process `syz.3.674'. [ 184.528350][ T8778] netlink: 28 bytes leftover after parsing attributes in process `syz.4.671'. [ 184.732843][ T8764] 8021q: adding VLAN 0 to HW filter on device bond7 [ 184.884085][ C1] vcan0: j1939_session_tx_dat: 0xffff88807d113000: queue data error: -100 [ 185.075776][ T8794] netlink: 8 bytes leftover after parsing attributes in process `syz.0.677'. [ 185.151273][ T8796] bond0: (slave wlan1): Releasing backup interface [ 185.198051][ T8796] netlink: 'syz.2.679': attribute type 10 has an invalid length. [ 185.414713][ T8796] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 185.441216][ T8807] netlink: 'syz.1.681': attribute type 153 has an invalid length. [ 185.852859][ T8831] sctp: [Deprecated]: syz.3.688 (pid 8831) Use of struct sctp_assoc_value in delayed_ack socket option. [ 185.852859][ T8831] Use struct sctp_sack_info instead [ 185.945499][ T8834] netlink: 16 bytes leftover after parsing attributes in process `syz.0.689'. [ 186.095252][ T8826] 8021q: adding VLAN 0 to HW filter on device bond8 [ 186.381972][ T8859] netlink: 16 bytes leftover after parsing attributes in process `syz.2.695'. [ 186.647999][ T8874] netlink: 'syz.0.696': attribute type 10 has an invalid length. [ 186.837342][ T8875] syz.3.699 (8875) used greatest stack depth: 16312 bytes left [ 187.402171][ T8909] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 187.747027][ T8927] __nla_validate_parse: 4 callbacks suppressed [ 187.747057][ T8927] netlink: 788 bytes leftover after parsing attributes in process `syz.4.716'. [ 188.275991][ T8918] batadv0: left promiscuous mode [ 188.288944][ T8918] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.300293][ T8918] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.311732][ T8918] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.321202][ T8918] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.331315][ T8918] geneve2: left promiscuous mode [ 188.495424][ T8958] netlink: 28 bytes leftover after parsing attributes in process `syz.3.722'. [ 188.804447][ T8970] netlink: 4 bytes leftover after parsing attributes in process `syz.3.724'. [ 188.944979][ T8970] bond0: (slave wlan1): Releasing backup interface [ 189.102031][ T8983] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 189.224883][ T8987] netlink: 'syz.1.731': attribute type 1 has an invalid length. [ 189.306073][ T8994] netlink: 16 bytes leftover after parsing attributes in process `syz.0.733'. [ 189.354115][ T8987] bond6: entered promiscuous mode [ 189.360592][ T8987] 8021q: adding VLAN 0 to HW filter on device bond6 [ 189.430486][ T8992] bond6: (slave bridge1): making interface the new active one [ 189.441248][ T8992] bridge1: entered promiscuous mode [ 189.451975][ T8992] bond6: (slave bridge1): Enslaving as an active interface with an up link [ 189.463799][ T8996] netlink: 'syz.4.735': attribute type 4 has an invalid length. [ 189.829097][ T9023] x_tables: duplicate underflow at hook 2 [ 189.858493][ T9027] FAULT_INJECTION: forcing a failure. [ 189.858493][ T9027] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 189.873754][ T9027] CPU: 0 UID: 0 PID: 9027 Comm: syz.0.745 Not tainted 6.14.0-syzkaller-13320-g420aabef3ab5 #0 PREEMPT(full) [ 189.873787][ T9027] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 189.873799][ T9027] Call Trace: [ 189.873807][ T9027] [ 189.873816][ T9027] dump_stack_lvl+0x241/0x360 [ 189.873880][ T9027] ? __pfx_dump_stack_lvl+0x10/0x10 [ 189.873907][ T9027] ? __pfx__printk+0x10/0x10 [ 189.873946][ T9027] should_fail_ex+0x424/0x570 [ 189.873973][ T9027] _copy_from_iter+0x211/0x1c70 [ 189.874004][ T9027] ? __build_skb_around+0x247/0x3d0 [ 189.874034][ T9027] ? __alloc_skb+0x298/0x480 [ 189.874050][ T9027] ? __pfx__copy_from_iter+0x10/0x10 [ 189.874078][ T9027] ? __pfx___alloc_skb+0x10/0x10 [ 189.874099][ T9027] ? skb_put+0x114/0x1f0 [ 189.874122][ T9027] netlink_sendmsg+0x73c/0xcd0 [ 189.874165][ T9027] ? __pfx_netlink_sendmsg+0x10/0x10 [ 189.874195][ T9027] ? aa_sock_msg_perm+0x91/0x160 [ 189.874230][ T9027] ? __pfx_netlink_sendmsg+0x10/0x10 [ 189.874253][ T9027] __sock_sendmsg+0x221/0x270 [ 189.874281][ T9027] ____sys_sendmsg+0x523/0x860 [ 189.874313][ T9027] ? __pfx_____sys_sendmsg+0x10/0x10 [ 189.874330][ T9027] ? __fget_files+0x2a/0x420 [ 189.874353][ T9027] ? __fget_files+0x2a/0x420 [ 189.874381][ T9027] __sys_sendmsg+0x271/0x360 [ 189.874407][ T9027] ? __pfx___sys_sendmsg+0x10/0x10 [ 189.874487][ T9027] ? do_syscall_64+0xb6/0x230 [ 189.874513][ T9027] do_syscall_64+0xf3/0x230 [ 189.874536][ T9027] ? clear_bhb_loop+0x45/0xa0 [ 189.874558][ T9027] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.874576][ T9027] RIP: 0033:0x7face698d169 [ 189.874595][ T9027] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 189.874611][ T9027] RSP: 002b:00007face7707038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 189.874634][ T9027] RAX: ffffffffffffffda RBX: 00007face6ba5fa0 RCX: 00007face698d169 [ 189.874648][ T9027] RDX: 0000000000000080 RSI: 0000200000000100 RDI: 0000000000000003 [ 189.874660][ T9027] RBP: 00007face7707090 R08: 0000000000000000 R09: 0000000000000000 [ 189.874672][ T9027] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 189.874683][ T9027] R13: 0000000000000000 R14: 00007face6ba5fa0 R15: 00007ffec900c698 [ 189.874724][ T9027] [ 190.126961][ T9027] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 190.257662][ T9040] netlink: 'syz.0.747': attribute type 2 has an invalid length. [ 190.316263][ T9042] netlink: 16 bytes leftover after parsing attributes in process `syz.2.748'. [ 190.516490][ T9051] xt_CT: No such helper "pptp" [ 190.922956][ T9082] sctp: [Deprecated]: syz.1.757 (pid 9082) Use of struct sctp_assoc_value in delayed_ack socket option. [ 190.922956][ T9082] Use struct sctp_sack_info instead [ 190.935482][ T9080] netlink: 16 bytes leftover after parsing attributes in process `syz.0.761'. [ 191.106906][ T9072] 8021q: adding VLAN 0 to HW filter on device bond9 [ 191.153521][ T9093] netlink: 24 bytes leftover after parsing attributes in process `syz.4.762'. [ 191.385651][ T9103] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 191.435029][ T9103] netlink: 8 bytes leftover after parsing attributes in process `syz.0.767'. [ 191.450240][ T9104] netlink: 8 bytes leftover after parsing attributes in process `syz.1.765'. [ 191.460789][ T9103] bond0: option coupled_control: mode dependency failed, not supported in mode balance-rr(0) [ 191.467561][ T9104] netlink: 12 bytes leftover after parsing attributes in process `syz.1.765'. [ 191.733064][ T9119] netlink: 'syz.3.774': attribute type 1 has an invalid length. [ 191.833776][ T9127] pim6reg9: entered allmulticast mode [ 191.850243][ T9129] sctp: [Deprecated]: syz.2.775 (pid 9129) Use of struct sctp_assoc_value in delayed_ack socket option. [ 191.850243][ T9129] Use struct sctp_sack_info instead [ 191.863577][ T9130] x_tables: duplicate underflow at hook 2 [ 191.975313][ T9125] 8021q: adding VLAN 0 to HW filter on device bond10 [ 192.782357][ T9176] __nla_validate_parse: 3 callbacks suppressed [ 192.782385][ T9176] netlink: 16 bytes leftover after parsing attributes in process `syz.4.790'. [ 192.811884][ T9179] netlink: 16 bytes leftover after parsing attributes in process `syz.3.792'. [ 192.833332][ T9179] netlink: 8 bytes leftover after parsing attributes in process `syz.3.792'. [ 192.867824][ T9181] netlink: 4 bytes leftover after parsing attributes in process `syz.1.791'. [ 193.230429][ T9197] vlan1: entered promiscuous mode [ 193.239944][ T9197] vlan0: entered promiscuous mode [ 193.250054][ T9197] gretap0: entered promiscuous mode [ 193.403507][ T9209] netlink: 16 bytes leftover after parsing attributes in process `syz.2.804'. [ 193.479455][ T9215] netlink: 24 bytes leftover after parsing attributes in process `syz.4.805'. [ 193.589376][ T9221] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 193.661222][ T9221] netlink: 8 bytes leftover after parsing attributes in process `syz.2.807'. [ 193.814391][ T9226] netlink: 'syz.2.808': attribute type 4 has an invalid length. [ 193.842658][ T9226] netlink: 'syz.2.808': attribute type 4 has an invalid length. [ 193.939199][ T9228] netlink: 52 bytes leftover after parsing attributes in process `syz.3.809'. [ 194.788621][ T9256] netlink: 16 bytes leftover after parsing attributes in process `syz.2.816'. [ 195.308431][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 195.327562][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.404946][ T9281] netlink: 'syz.1.821': attribute type 10 has an invalid length. [ 195.484550][ T9279] bond6: (slave bridge1): Releasing backup interface [ 195.512942][ T9279] bridge1: left promiscuous mode [ 196.128720][ T9306] netlink: 16 bytes leftover after parsing attributes in process `syz.0.829'. [ 196.335187][ T9316] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 196.545152][ T9319] syzkaller1: entered promiscuous mode [ 196.557558][ T9319] syzkaller1: entered allmulticast mode [ 197.123369][ T9356] bond3: (slave ip6gretap1): Releasing active interface [ 197.276974][ T9362] 8021q: adding VLAN 0 to HW filter on device team0 [ 197.298832][ T9356] netlink: 'syz.3.837': attribute type 10 has an invalid length. [ 197.347342][ T9359] FAULT_INJECTION: forcing a failure. [ 197.347342][ T9359] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 197.402285][ T9362] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 197.500773][ T9359] CPU: 1 UID: 0 PID: 9359 Comm: syz.4.839 Not tainted 6.14.0-syzkaller-13320-g420aabef3ab5 #0 PREEMPT(full) [ 197.500809][ T9359] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 197.500821][ T9359] Call Trace: [ 197.500830][ T9359] [ 197.500838][ T9359] dump_stack_lvl+0x241/0x360 [ 197.500875][ T9359] ? __pfx_dump_stack_lvl+0x10/0x10 [ 197.500900][ T9359] ? __pfx__printk+0x10/0x10 [ 197.500936][ T9359] should_fail_ex+0x424/0x570 [ 197.500963][ T9359] _copy_to_user+0x31/0xb0 [ 197.500991][ T9359] simple_read_from_buffer+0xc4/0x170 [ 197.501024][ T9359] proc_fail_nth_read+0x1ef/0x260 [ 197.501048][ T9359] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 197.501070][ T9359] ? rw_verify_area+0x246/0x630 [ 197.501090][ T9359] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 197.501111][ T9359] vfs_read+0x21f/0xb90 [ 197.501136][ T9359] ? __pfx___mutex_lock+0x10/0x10 [ 197.501160][ T9359] ? __pfx_vfs_read+0x10/0x10 [ 197.501184][ T9359] ? __fget_files+0x2a/0x420 [ 197.501202][ T9359] ? __fget_files+0x39d/0x420 [ 197.501217][ T9359] ? __fget_files+0x2a/0x420 [ 197.501245][ T9359] ksys_read+0x19d/0x2d0 [ 197.501269][ T9359] ? __pfx_ksys_read+0x10/0x10 [ 197.501292][ T9359] ? do_syscall_64+0xb6/0x230 [ 197.501331][ T9359] do_syscall_64+0xf3/0x230 [ 197.501350][ T9359] ? clear_bhb_loop+0x45/0xa0 [ 197.501372][ T9359] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.501389][ T9359] RIP: 0033:0x7fdbe998bb7c [ 197.501407][ T9359] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 197.501423][ T9359] RSP: 002b:00007fdbea871030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 197.501446][ T9359] RAX: ffffffffffffffda RBX: 00007fdbe9ba5fa0 RCX: 00007fdbe998bb7c [ 197.501459][ T9359] RDX: 000000000000000f RSI: 00007fdbea8710a0 RDI: 0000000000000004 [ 197.501470][ T9359] RBP: 00007fdbea871090 R08: 0000000000000000 R09: 0000000000000000 [ 197.501480][ T9359] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 197.501490][ T9359] R13: 0000000000000000 R14: 00007fdbe9ba5fa0 R15: 00007ffe51145f78 [ 197.501521][ T9359] [ 197.952182][ T9378] netlink: 16 bytes leftover after parsing attributes in process `syz.0.843'. [ 198.122137][ T9387] sctp: [Deprecated]: syz.1.842 (pid 9387) Use of struct sctp_assoc_value in delayed_ack socket option. [ 198.122137][ T9387] Use struct sctp_sack_info instead [ 198.286224][ T9383] 8021q: adding VLAN 0 to HW filter on device bond11 [ 198.757239][ T9417] xt_HMARK: spi-set and port-set can't be combined [ 198.807834][ T9422] xt_HMARK: spi-set and port-set can't be combined [ 198.866489][ T9424] netlink: 'syz.2.852': attribute type 3 has an invalid length. [ 199.155742][ T9439] netlink: 'syz.1.854': attribute type 10 has an invalid length. [ 199.565628][ T9461] netlink: 16 bytes leftover after parsing attributes in process `syz.0.860'. [ 199.586328][ T9462] sctp: [Deprecated]: syz.2.859 (pid 9462) Use of struct sctp_assoc_value in delayed_ack socket option. [ 199.586328][ T9462] Use struct sctp_sack_info instead [ 199.798851][ T9458] 8021q: adding VLAN 0 to HW filter on device bond12 [ 200.324449][ T9500] netlink: 9 bytes leftover after parsing attributes in process `syz.3.866'. [ 200.558548][ T9500] gretap0: entered promiscuous mode [ 200.814238][ T9531] netlink: 'syz.4.871': attribute type 10 has an invalid length. [ 200.887256][ T9533] netlink: 16 bytes leftover after parsing attributes in process `syz.0.872'. [ 200.908538][ T9527] bond0: (slave wlan1): Releasing backup interface [ 200.946093][ T9531] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 201.537182][ T9559] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 201.578330][ T9559] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 201.962791][ T9580] netlink: 'syz.1.879': attribute type 4 has an invalid length. [ 201.972582][ T9581] netlink: 'syz.1.879': attribute type 4 has an invalid length. [ 202.131893][ T9588] netlink: 'syz.4.878': attribute type 4 has an invalid length. [ 202.170921][ T9588] netlink: 'syz.4.878': attribute type 4 has an invalid length. [ 202.460134][ T9602] sctp: [Deprecated]: syz.0.883 (pid 9602) Use of struct sctp_assoc_value in delayed_ack socket option. [ 202.460134][ T9602] Use struct sctp_sack_info instead [ 202.570177][ T9602] netlink: 24 bytes leftover after parsing attributes in process `syz.0.883'. [ 202.602448][ T9605] netlink: 16 bytes leftover after parsing attributes in process `syz.2.884'. [ 202.774266][ T9615] bond0: (slave wlan1): Releasing backup interface [ 202.835842][ T9615] netlink: 'syz.2.886': attribute type 10 has an invalid length. [ 202.862331][ T9615] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 202.979079][ T9628] sctp: [Deprecated]: syz.0.887 (pid 9628) Use of struct sctp_assoc_value in delayed_ack socket option. [ 202.979079][ T9628] Use struct sctp_sack_info instead [ 203.158509][ T9637] netlink: 4 bytes leftover after parsing attributes in process `syz.1.890'. [ 203.174296][ T9624] 8021q: adding VLAN 0 to HW filter on device bond13 [ 203.351095][ T9645] netlink: 'syz.0.893': attribute type 9 has an invalid length. [ 203.480144][ T9656] netlink: 24 bytes leftover after parsing attributes in process `syz.2.895'. [ 203.718215][ T9670] netlink: 24 bytes leftover after parsing attributes in process `syz.0.897'. [ 203.790221][ T9662] netlink: 'syz.0.897': attribute type 23 has an invalid length. [ 203.871151][ T9678] netlink: 'syz.3.899': attribute type 10 has an invalid length. [ 204.182380][ T9687] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 204.254068][ T9698] sctp: [Deprecated]: syz.3.905 (pid 9698) Use of struct sctp_assoc_value in delayed_ack socket option. [ 204.254068][ T9698] Use struct sctp_sack_info instead [ 204.354322][ T9693] 8021q: adding VLAN 0 to HW filter on device bond14 [ 204.643745][ T9716] netlink: 'syz.2.910': attribute type 1 has an invalid length. [ 205.073679][ T9701] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.083707][ T9701] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.098265][ T9701] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.111516][ T9701] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.190667][ T9701] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 205.200993][ T9701] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 205.210387][ T9701] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 205.219753][ T9701] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 205.255063][ T9701] bond0: left promiscuous mode [ 205.261327][ T9701] bond0: left allmulticast mode [ 205.279750][ T9701] bond2: left allmulticast mode [ 205.312138][ T9701] bond6: left promiscuous mode [ 205.435721][ T9716] bond3: entered promiscuous mode [ 205.451365][ T9716] 8021q: adding VLAN 0 to HW filter on device bond3 [ 205.489366][ T9718] 8021q: adding VLAN 0 to HW filter on device bond3 [ 205.497366][ T9718] bond3: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 205.509783][ T9718] bond3: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 205.525013][ T9718] bond3: (slave ip6gre1): making interface the new active one [ 205.533238][ T9718] ip6gre1: entered promiscuous mode [ 205.540636][ T9718] bond3: (slave ip6gre1): Enslaving as an active interface with an up link [ 205.801785][ T9762] netlink: 24 bytes leftover after parsing attributes in process `syz.1.922'. [ 205.949557][ T9769] netlink: 256 bytes leftover after parsing attributes in process `syz.0.924'. [ 205.973010][ T9769] netlink: 64 bytes leftover after parsing attributes in process `syz.0.924'. [ 205.995517][ T9771] netlink: 8 bytes leftover after parsing attributes in process `syz.2.925'. [ 206.020438][ T9771] netlink: 8 bytes leftover after parsing attributes in process `syz.2.925'. [ 206.063562][ T9775] ip6gre2: entered allmulticast mode [ 206.204764][ T9780] RDS: rds_bind could not find a transport for ::ffff:10.1.1.2, load rds_tcp or rds_rdma? [ 206.325548][ T9783] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 206.432861][ T9789] netlink: 'syz.4.933': attribute type 21 has an invalid length. [ 206.453154][ T9789] netlink: 164 bytes leftover after parsing attributes in process `syz.4.933'. [ 206.928270][ T9804] netlink: 56 bytes leftover after parsing attributes in process `syz.2.937'. [ 206.998220][ T9818] netlink: 'syz.4.940': attribute type 10 has an invalid length. [ 207.081585][ T9815] bond0: (slave wlan1): Releasing backup interface [ 207.310831][ T9818] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 208.060045][ T9858] delete_channel: no stack [ 208.251223][ T9866] bond0: (slave wlan1): Releasing backup interface [ 208.287263][ T9877] netlink: 'syz.2.955': attribute type 10 has an invalid length. [ 208.289440][ T9875] sctp: [Deprecated]: syz.4.953 (pid 9875) Use of struct sctp_assoc_value in delayed_ack socket option. [ 208.289440][ T9875] Use struct sctp_sack_info instead [ 208.329175][ T9866] bond3: (slave ip6gre1): Releasing backup interface [ 208.348334][ T9866] ip6gre1: left promiscuous mode [ 208.459758][ T9872] bridge0: port 1(vlan2) entered blocking state [ 208.513801][ T9872] bridge0: port 1(vlan2) entered disabled state [ 208.559151][ T9872] vlan2: entered allmulticast mode [ 208.579717][ T9872] bridge0: entered allmulticast mode [ 208.633564][ T9872] vlan2: left allmulticast mode [ 208.675370][ T9872] bridge0: left allmulticast mode [ 208.739172][ T9877] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 211.569387][ T9903] __nla_validate_parse: 1 callbacks suppressed [ 211.569414][ T9903] netlink: 60 bytes leftover after parsing attributes in process `syz.1.961'. [ 211.652084][ T9900] netlink: 60 bytes leftover after parsing attributes in process `syz.1.961'. [ 211.719344][ T9910] netlink: 24 bytes leftover after parsing attributes in process `syz.2.965'. [ 211.893973][ T9918] netlink: 4 bytes leftover after parsing attributes in process `syz.1.969'. [ 212.074782][ T9929] sctp: [Deprecated]: syz.0.971 (pid 9929) Use of struct sctp_assoc_value in delayed_ack socket option. [ 212.074782][ T9929] Use struct sctp_sack_info instead [ 212.096888][ T9932] netlink: 'syz.4.970': attribute type 10 has an invalid length. [ 212.130124][ T9924] bond0: (slave wlan1): Releasing backup interface [ 212.218555][ T9932] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 212.721838][ T5848] Bluetooth: hci1: command 0x0406 tx timeout [ 212.721861][ T5856] Bluetooth: hci0: command 0x0406 tx timeout [ 212.721920][ T5848] Bluetooth: hci3: command 0x0406 tx timeout [ 212.741539][ T5852] Bluetooth: hci2: command 0x0406 tx timeout [ 212.968513][ T9955] netlink: 'syz.3.978': attribute type 9 has an invalid length. [ 212.982779][ T9955] netlink: 'syz.3.978': attribute type 6 has an invalid length. [ 213.002704][ T9955] netlink: 'syz.3.978': attribute type 7 has an invalid length. [ 213.031181][ T9955] netlink: 'syz.3.978': attribute type 8 has an invalid length. [ 213.421815][ T9980] netlink: 'syz.1.982': attribute type 10 has an invalid length. [ 213.538336][ T9989] netlink: 24 bytes leftover after parsing attributes in process `syz.2.985'. [ 213.580563][ T9989] netlink: 8 bytes leftover after parsing attributes in process `syz.2.985'. [ 213.643081][ T9989] netlink: 24 bytes leftover after parsing attributes in process `syz.2.985'. [ 213.664898][ T9985] netlink: 'syz.0.984': attribute type 10 has an invalid length. [ 214.119920][T10017] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 214.197592][T10017] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 214.345602][T10032] ip6erspan0: entered promiscuous mode [ 214.609240][T10046] bond0: (slave wlan1): Releasing backup interface [ 214.635237][T10046] netlink: 'syz.4.999': attribute type 10 has an invalid length. [ 214.652688][T10046] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 214.699869][T10051] trusted_key: syz.1.1000 sent an empty control message without MSG_MORE. [ 214.781138][T10052] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1000'. [ 214.865402][T10056] syzkaller0: entered promiscuous mode [ 214.872419][T10056] syzkaller0: entered allmulticast mode [ 215.049547][T10065] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1006'. [ 215.543253][T10082] netlink: 'syz.1.1010': attribute type 1 has an invalid length. [ 215.644222][T10087] sctp: [Deprecated]: syz.3.1011 (pid 10087) Use of struct sctp_assoc_value in delayed_ack socket option. [ 215.644222][T10087] Use struct sctp_sack_info instead [ 215.673084][T10090] bond0: (slave wlan1): Releasing backup interface [ 215.703279][T10090] netlink: 'syz.2.1012': attribute type 10 has an invalid length. [ 215.717285][T10090] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 215.741446][T10090] syzkaller0: left promiscuous mode [ 215.749502][T10090] syzkaller0: left allmulticast mode [ 215.910223][T10094] 8021q: adding VLAN 0 to HW filter on device bond0 [ 215.919938][T10094] 8021q: adding VLAN 0 to HW filter on device team0 [ 215.935167][T10094] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 216.219806][T10113] xfrm1: entered allmulticast mode [ 216.546734][T10126] bond0: (slave wlan1): Releasing backup interface [ 216.586614][T10128] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1027'. [ 216.623216][T10134] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 216.761778][T10144] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1033'. [ 216.893522][T10153] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1036'. [ 216.923531][T10155] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1037'. [ 216.952886][T10153] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1036'. [ 217.082802][T10162] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1039'. [ 217.550201][T10188] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1048'. [ 217.572739][T10193] bond0: (slave wlan1): Releasing backup interface [ 217.601191][T10186] validate_nla: 3 callbacks suppressed [ 217.601223][T10186] netlink: 'syz.2.1045': attribute type 10 has an invalid length. [ 217.700753][T10186] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 217.724799][T10201] xt_TPROXY: Can be used only with -p tcp or -p udp [ 217.941054][T10210] gtp1: entered promiscuous mode [ 217.948894][T10210] gtp1: entered allmulticast mode [ 219.326616][T10268] netlink: 'syz.3.1066': attribute type 10 has an invalid length. [ 219.564226][T10275] sctp: [Deprecated]: syz.0.1067 (pid 10275) Use of struct sctp_assoc_value in delayed_ack socket option. [ 219.564226][T10275] Use struct sctp_sack_info instead [ 219.987781][T10297] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1073'. [ 220.108507][T10297] 8021q: adding VLAN 0 to HW filter on device team1 [ 220.189564][T10313] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1074'. [ 220.244661][T10313] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1074'. [ 220.871858][T10336] sctp: [Deprecated]: syz.4.1082 (pid 10336) Use of struct sctp_assoc_value in delayed_ack socket option. [ 220.871858][T10336] Use struct sctp_sack_info instead [ 221.085537][T10339] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 221.700373][T10367] __nla_validate_parse: 4 callbacks suppressed [ 221.700404][T10367] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1092'. [ 221.797893][T10367] 8021q: adding VLAN 0 to HW filter on device team1 [ 222.036598][T10389] FAULT_INJECTION: forcing a failure. [ 222.036598][T10389] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 222.055874][T10389] CPU: 0 UID: 0 PID: 10389 Comm: syz.0.1097 Not tainted 6.14.0-syzkaller-13320-g420aabef3ab5 #0 PREEMPT(full) [ 222.055911][T10389] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 222.055923][T10389] Call Trace: [ 222.055932][T10389] [ 222.055940][T10389] dump_stack_lvl+0x241/0x360 [ 222.055987][T10389] ? __pfx_dump_stack_lvl+0x10/0x10 [ 222.056013][T10389] ? __pfx__printk+0x10/0x10 [ 222.056053][T10389] should_fail_ex+0x424/0x570 [ 222.056080][T10389] _copy_from_user+0x2d/0xb0 [ 222.056108][T10389] copy_msghdr_from_user+0xb3/0x580 [ 222.056142][T10389] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 222.056163][T10389] ? __fget_files+0x2a/0x420 [ 222.056186][T10389] ? __fget_files+0x2a/0x420 [ 222.056214][T10389] __sys_sendmmsg+0x361/0x7b0 [ 222.056248][T10389] ? __pfx___sys_sendmmsg+0x10/0x10 [ 222.056308][T10389] ? rcu_read_lock_any_held+0xbb/0x160 [ 222.056333][T10389] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 222.056359][T10389] ? vfs_write+0xb29/0xd10 [ 222.056392][T10389] ? ksys_write+0x24e/0x2d0 [ 222.056416][T10389] ? __mutex_unlock_slowpath+0x229/0x800 [ 222.056470][T10389] ? ksys_write+0x275/0x2d0 [ 222.056504][T10389] __x64_sys_sendmmsg+0xa0/0xb0 [ 222.056527][T10389] do_syscall_64+0xf3/0x230 [ 222.056549][T10389] ? clear_bhb_loop+0x45/0xa0 [ 222.056601][T10389] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.056620][T10389] RIP: 0033:0x7face698d169 [ 222.056639][T10389] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 222.056653][T10389] RSP: 002b:00007face7707038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 222.056676][T10389] RAX: ffffffffffffffda RBX: 00007face6ba5fa0 RCX: 00007face698d169 [ 222.056700][T10389] RDX: 0000000000000001 RSI: 0000200000002f00 RDI: 0000000000000003 [ 222.056711][T10389] RBP: 00007face7707090 R08: 0000000000000000 R09: 0000000000000000 [ 222.056723][T10389] R10: 0000000020004000 R11: 0000000000000246 R12: 0000000000000001 [ 222.056734][T10389] R13: 0000000000000000 R14: 00007face6ba5fa0 R15: 00007ffec900c698 [ 222.056765][T10389] [ 222.738512][T10408] netlink: 'syz.3.1102': attribute type 3 has an invalid length. [ 222.754904][T10408] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1102'. [ 222.825283][T10410] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1104'. [ 222.907245][T10410] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1104'. [ 223.021893][T10419] FAULT_INJECTION: forcing a failure. [ 223.021893][T10419] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 223.036194][T10419] CPU: 1 UID: 0 PID: 10419 Comm: syz.4.1108 Not tainted 6.14.0-syzkaller-13320-g420aabef3ab5 #0 PREEMPT(full) [ 223.036224][T10419] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 223.036234][T10419] Call Trace: [ 223.036241][T10419] [ 223.036249][T10419] dump_stack_lvl+0x241/0x360 [ 223.036284][T10419] ? __pfx_dump_stack_lvl+0x10/0x10 [ 223.036307][T10419] ? __pfx__printk+0x10/0x10 [ 223.036340][T10419] should_fail_ex+0x424/0x570 [ 223.036365][T10419] _copy_from_user+0x2d/0xb0 [ 223.036393][T10419] move_addr_to_kernel+0x7f/0x170 [ 223.036416][T10419] copy_msghdr_from_user+0x477/0x580 [ 223.036444][T10419] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 223.036463][T10419] ? __fget_files+0x2a/0x420 [ 223.036483][T10419] ? __fget_files+0x2a/0x420 [ 223.036510][T10419] __sys_sendmmsg+0x361/0x7b0 [ 223.036543][T10419] ? __pfx___sys_sendmmsg+0x10/0x10 [ 223.036626][T10419] ? rcu_read_lock_any_held+0xbb/0x160 [ 223.036652][T10419] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 223.036678][T10419] ? vfs_write+0xb29/0xd10 [ 223.036710][T10419] ? ksys_write+0x24e/0x2d0 [ 223.036730][T10419] ? __mutex_unlock_slowpath+0x229/0x800 [ 223.036779][T10419] ? ksys_write+0x275/0x2d0 [ 223.036809][T10419] __x64_sys_sendmmsg+0xa0/0xb0 [ 223.036830][T10419] do_syscall_64+0xf3/0x230 [ 223.036863][T10419] ? clear_bhb_loop+0x45/0xa0 [ 223.036885][T10419] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 223.036901][T10419] RIP: 0033:0x7fdbe998d169 [ 223.036919][T10419] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 223.036934][T10419] RSP: 002b:00007fdbea871038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 223.036956][T10419] RAX: ffffffffffffffda RBX: 00007fdbe9ba5fa0 RCX: 00007fdbe998d169 [ 223.036969][T10419] RDX: 0000000000000001 RSI: 0000200000002f00 RDI: 0000000000000003 [ 223.036979][T10419] RBP: 00007fdbea871090 R08: 0000000000000000 R09: 0000000000000000 [ 223.036989][T10419] R10: 0000000020004000 R11: 0000000000000246 R12: 0000000000000001 [ 223.037000][T10419] R13: 0000000000000000 R14: 00007fdbe9ba5fa0 R15: 00007ffe51145f78 [ 223.037028][T10419] [ 223.280026][T10421] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1109'. [ 223.471898][T10434] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1112'. [ 223.912788][T10456] FAULT_INJECTION: forcing a failure. [ 223.912788][T10456] name failslab, interval 1, probability 0, space 0, times 0 [ 223.927128][T10456] CPU: 1 UID: 0 PID: 10456 Comm: syz.3.1121 Not tainted 6.14.0-syzkaller-13320-g420aabef3ab5 #0 PREEMPT(full) [ 223.927160][T10456] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 223.927172][T10456] Call Trace: [ 223.927180][T10456] [ 223.927189][T10456] dump_stack_lvl+0x241/0x360 [ 223.927228][T10456] ? __pfx_dump_stack_lvl+0x10/0x10 [ 223.927255][T10456] ? __pfx__printk+0x10/0x10 [ 223.927287][T10456] ? __pfx___might_resched+0x10/0x10 [ 223.927319][T10456] should_fail_ex+0x424/0x570 [ 223.927346][T10456] should_failslab+0xac/0x100 [ 223.927376][T10456] __kmalloc_cache_noprof+0x73/0x370 [ 223.927404][T10456] ? tcp_sendmsg_fastopen+0x1d8/0x5d0 [ 223.927424][T10456] ? mptcp_sendmsg_fastopen+0x11f/0x570 [ 223.927450][T10456] tcp_sendmsg_fastopen+0x1d8/0x5d0 [ 223.927479][T10456] mptcp_sendmsg_fastopen+0x16f/0x570 [ 223.927510][T10456] mptcp_sendmsg+0x17a7/0x1a20 [ 223.927531][T10456] ? __pfx___might_resched+0x10/0x10 [ 223.927569][T10456] ? aa_sk_perm+0x96f/0xac0 [ 223.927599][T10456] ? __pfx_mptcp_sendmsg+0x10/0x10 [ 223.927617][T10456] ? sock_rps_record_flow+0x1a/0x410 [ 223.927642][T10456] ? inet_sendmsg+0x330/0x390 [ 223.927669][T10456] __sock_sendmsg+0x1a6/0x270 [ 223.927699][T10456] ____sys_sendmsg+0x523/0x860 [ 223.927731][T10456] ? __pfx_____sys_sendmsg+0x10/0x10 [ 223.927747][T10456] ? __fget_files+0x2a/0x420 [ 223.927770][T10456] ? __fget_files+0x2a/0x420 [ 223.927797][T10456] __sys_sendmmsg+0x3a0/0x7b0 [ 223.927844][T10456] ? __pfx___sys_sendmmsg+0x10/0x10 [ 223.927908][T10456] ? rcu_read_lock_any_held+0xbb/0x160 [ 223.927934][T10456] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 223.927962][T10456] ? vfs_write+0xb29/0xd10 [ 223.927997][T10456] ? ksys_write+0x24e/0x2d0 [ 223.928023][T10456] ? __mutex_unlock_slowpath+0x229/0x800 [ 223.928080][T10456] ? ksys_write+0x275/0x2d0 [ 223.928117][T10456] __x64_sys_sendmmsg+0xa0/0xb0 [ 223.928140][T10456] do_syscall_64+0xf3/0x230 [ 223.928163][T10456] ? clear_bhb_loop+0x45/0xa0 [ 223.928187][T10456] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 223.928205][T10456] RIP: 0033:0x7f424658d169 [ 223.928224][T10456] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 223.928240][T10456] RSP: 002b:00007f42473e5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 223.928262][T10456] RAX: ffffffffffffffda RBX: 00007f42467a5fa0 RCX: 00007f424658d169 [ 223.928276][T10456] RDX: 0000000000000001 RSI: 0000200000002f00 RDI: 0000000000000003 [ 223.928287][T10456] RBP: 00007f42473e5090 R08: 0000000000000000 R09: 0000000000000000 [ 223.928298][T10456] R10: 0000000020004000 R11: 0000000000000246 R12: 0000000000000001 [ 223.928309][T10456] R13: 0000000000000000 R14: 00007f42467a5fa0 R15: 00007ffd259db898 [ 223.928342][T10456] [ 224.336047][T10461] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1122'. [ 224.360775][T10461] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1122'. [ 224.431163][T10458] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1120'. [ 224.492122][T10458] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1120'. [ 224.834385][T10481] netlink: 'syz.2.1123': attribute type 10 has an invalid length. [ 224.893547][T10482] netlink: 'syz.1.1125': attribute type 10 has an invalid length. [ 224.946197][T10475] ipvlan0: entered promiscuous mode [ 224.986999][T10488] IPVS: sync thread started: state = MASTER, mcast_ifn = wg1, syncid = 262145, id = 0 [ 224.998383][T10475] IPVS: stopping master sync thread 10488 ... [ 225.595471][T10505] sctp: [Deprecated]: syz.1.1131 (pid 10505) Use of struct sctp_assoc_value in delayed_ack socket option. [ 225.595471][T10505] Use struct sctp_sack_info instead [ 225.771793][T10512] netlink: 'syz.0.1136': attribute type 1 has an invalid length. [ 226.012927][T10522] bond0: (slave wlan1): Releasing backup interface [ 226.072759][T10522] netlink: 'syz.2.1141': attribute type 10 has an invalid length. [ 226.152809][T10522] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 226.443720][T10546] sctp: [Deprecated]: syz.1.1148 (pid 10546) Use of struct sctp_assoc_value in delayed_ack socket option. [ 226.443720][T10546] Use struct sctp_sack_info instead [ 226.732873][T10556] netlink: 'syz.4.1152': attribute type 3 has an invalid length. [ 226.917750][T10558] bridge0: port 1(macsec1) entered blocking state [ 226.925487][T10558] bridge0: port 1(macsec1) entered disabled state [ 226.937098][T10561] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input7 [ 226.939120][T10558] macsec1: entered allmulticast mode [ 226.965023][T10558] bridge0: entered allmulticast mode [ 226.989724][T10558] macsec1: left allmulticast mode [ 226.995398][T10558] bridge0: left allmulticast mode [ 227.185125][T10566] bond0: (slave wlan1): Releasing backup interface [ 227.384258][T10566] netlink: 'syz.2.1156': attribute type 10 has an invalid length. [ 227.471282][T10566] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 227.752082][T10586] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 228.071888][T10592] __nla_validate_parse: 4 callbacks suppressed [ 228.071916][T10592] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1164'. [ 228.438916][T10599] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1167'. [ 229.005592][T10629] netlink: 'syz.3.1173': attribute type 10 has an invalid length. [ 229.286808][T10647] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1180'. [ 229.296302][T10647] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1180'. [ 229.558375][T10657] syzkaller1: entered allmulticast mode [ 229.817226][T10666] netlink: 596 bytes leftover after parsing attributes in process `syz.4.1187'. [ 230.042746][T10673] bond0: (slave wlan1): Releasing backup interface [ 230.072980][T10679] netlink: 'syz.2.1189': attribute type 10 has an invalid length. [ 230.134273][T10679] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 230.295178][T10688] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1195'. [ 230.503621][T10708] xt_hashlimit: size too large, truncated to 1048576 [ 230.555013][T10709] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1200'. [ 231.254208][T10742] netlink: 'syz.3.1206': attribute type 10 has an invalid length. [ 231.276518][T10741] netlink: 'syz.4.1207': attribute type 10 has an invalid length. [ 231.322419][T10746] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1208'. [ 231.700492][T10758] 8021q: adding VLAN 0 to HW filter on device bond1 [ 231.731065][T10758] team0: Port device bond1 added [ 231.872056][T10763] netlink: 'syz.1.1214': attribute type 4 has an invalid length. [ 231.902493][T10763] netlink: 'syz.1.1214': attribute type 4 has an invalid length. [ 231.940839][T10776] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1216'. [ 232.498281][T10791] sctp: [Deprecated]: syz.0.1219 (pid 10791) Use of struct sctp_assoc_value in delayed_ack socket option. [ 232.498281][T10791] Use struct sctp_sack_info instead [ 232.817917][T10804] netlink: 830 bytes leftover after parsing attributes in process `syz.0.1223'. [ 232.942058][T10810] netlink: 'syz.1.1222': attribute type 10 has an invalid length. [ 233.136497][T10822] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1227'. [ 233.336311][ T5905] IPVS: starting estimator thread 0... [ 233.471441][T10836] IPVS: using max 28 ests per chain, 67200 per kthread [ 233.627939][T10850] sctp: [Deprecated]: syz.4.1235 (pid 10850) Use of struct sctp_assoc_value in delayed_ack socket option. [ 233.627939][T10850] Use struct sctp_sack_info instead [ 233.755775][T10856] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1236'. [ 233.786036][T10856] unsupported nlmsg_type 40 [ 233.828615][T10861] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1232'. [ 234.093445][T10871] bond0: (slave wlan1): Releasing backup interface [ 234.132750][T10871] netlink: 'syz.2.1241': attribute type 10 has an invalid length. [ 234.154267][T10871] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 234.394817][T10878] netlink: 'syz.0.1252': attribute type 10 has an invalid length. [ 234.496370][T10884] team0: Port device bond1 removed [ 234.711822][T10895] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1244'. [ 235.766133][T10924] xt_l2tp: unknown flags: 10 [ 236.841520][T10943] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1258'. [ 238.575718][T10962] pimreg: entered allmulticast mode [ 238.593625][T10963] pimreg: left allmulticast mode [ 238.674973][T10964] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1265'. [ 238.715832][T10971] netlink: 312 bytes leftover after parsing attributes in process `syz.1.1266'. [ 238.844377][T10980] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1268'. [ 239.300302][T11012] xt_CT: You must specify a L4 protocol and not use inversions on it [ 239.692776][T11035] bond0: (slave wlan1): Releasing backup interface [ 239.807765][T11035] netlink: 'syz.2.1284': attribute type 10 has an invalid length. [ 239.832034][T11035] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 239.893713][T11045] netlink: 'syz.3.1288': attribute type 3 has an invalid length. [ 240.228875][T11066] Illegal XDP return value 4294967274 on prog (id 408) dev N/A, expect packet loss! [ 240.420773][T11081] netlink: 'syz.0.1299': attribute type 10 has an invalid length. [ 240.489932][T11081] 8021q: adding VLAN 0 to HW filter on device team0 [ 240.511971][T11081] bond0: (slave team0): Enslaving as an active interface with an up link [ 240.521807][T11086] netlink: 'syz.2.1302': attribute type 12 has an invalid length. [ 240.532188][T11086] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1302'. [ 240.636172][T11092] sctp: [Deprecated]: syz.0.1303 (pid 11092) Use of struct sctp_assoc_value in delayed_ack socket option. [ 240.636172][T11092] Use struct sctp_sack_info instead [ 240.893836][T11102] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1307'. [ 240.903150][T11102] A link change request failed with some changes committed already. Interface veth0_macvtap may have been left with an inconsistent configuration, please check. [ 240.926483][T11103] xt_l2tp: unknown flags: 10 [ 241.020297][T11109] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1310'. [ 241.109143][T11110] xt_hashlimit: size too large, truncated to 1048576 [ 241.471091][T11128] xt_limit: Overflow, try lower: 167772/2147483648 [ 241.621287][T11133] sctp: [Deprecated]: syz.1.1318 (pid 11133) Use of struct sctp_assoc_value in delayed_ack socket option. [ 241.621287][T11133] Use struct sctp_sack_info instead [ 241.766801][T11133] 8021q: adding VLAN 0 to HW filter on device bond8 [ 241.798653][T11141] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1321'. [ 241.892820][T11148] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1323'. [ 242.286618][T11168] Cannot find add_set index 2 as target [ 242.320956][T11170] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1330'. [ 242.394178][T11168] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1330'. [ 243.018918][T11194] netlink: 'syz.0.1337': attribute type 12 has an invalid length. [ 243.695646][T11220] FAULT_INJECTION: forcing a failure. [ 243.695646][T11220] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 243.714643][T11220] CPU: 1 UID: 0 PID: 11220 Comm: syz.1.1346 Not tainted 6.14.0-syzkaller-13320-g420aabef3ab5 #0 PREEMPT(full) [ 243.714679][T11220] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 243.714689][T11220] Call Trace: [ 243.714697][T11220] [ 243.714705][T11220] dump_stack_lvl+0x241/0x360 [ 243.714746][T11220] ? __pfx_dump_stack_lvl+0x10/0x10 [ 243.714768][T11220] ? __pfx__printk+0x10/0x10 [ 243.714802][T11220] should_fail_ex+0x424/0x570 [ 243.714826][T11220] _copy_from_user+0x2d/0xb0 [ 243.714849][T11220] __sys_bpf+0x1c5/0x8b0 [ 243.714869][T11220] ? __pfx___sys_bpf+0x10/0x10 [ 243.714898][T11220] ? ksys_write+0x275/0x2d0 [ 243.714930][T11220] __x64_sys_bpf+0x7c/0x90 [ 243.714955][T11220] do_syscall_64+0xf3/0x230 [ 243.714976][T11220] ? clear_bhb_loop+0x45/0xa0 [ 243.714995][T11220] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 243.715014][T11220] RIP: 0033:0x7f59a498d169 [ 243.715033][T11220] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 243.715049][T11220] RSP: 002b:00007f59a5759038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 243.715072][T11220] RAX: ffffffffffffffda RBX: 00007f59a4ba5fa0 RCX: 00007f59a498d169 [ 243.715085][T11220] RDX: 0000000000000020 RSI: 0000200000000900 RDI: 0000000000000002 [ 243.715097][T11220] RBP: 00007f59a5759090 R08: 0000000000000000 R09: 0000000000000000 [ 243.715109][T11220] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 243.715120][T11220] R13: 0000000000000000 R14: 00007f59a4ba5fa0 R15: 00007ffd9d51b088 [ 243.715150][T11220] [ 243.901850][T11215] bridge0: port 1(gretap0) entered blocking state [ 243.913797][T11215] bridge0: port 1(gretap0) entered disabled state [ 243.922325][T11215] gretap0: entered allmulticast mode [ 244.272592][T11253] netlink: 'syz.1.1350': attribute type 10 has an invalid length. [ 244.645692][T11270] __nla_validate_parse: 3 callbacks suppressed [ 244.645720][T11270] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1358'. [ 244.715939][T11270] vti0: entered promiscuous mode [ 244.731142][T11275] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1359'. [ 244.740695][T11275] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1359'. [ 244.776758][T11281] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1362'. [ 245.005395][T11293] netlink: 'syz.4.1365': attribute type 4 has an invalid length. [ 245.023886][T11295] FAULT_INJECTION: forcing a failure. [ 245.023886][T11295] name failslab, interval 1, probability 0, space 0, times 0 [ 245.035660][T11293] netlink: 17 bytes leftover after parsing attributes in process `syz.4.1365'. [ 245.061188][T11295] CPU: 1 UID: 0 PID: 11295 Comm: syz.2.1366 Not tainted 6.14.0-syzkaller-13320-g420aabef3ab5 #0 PREEMPT(full) [ 245.061227][T11295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 245.061241][T11295] Call Trace: [ 245.061250][T11295] [ 245.061259][T11295] dump_stack_lvl+0x241/0x360 [ 245.061300][T11295] ? __pfx_dump_stack_lvl+0x10/0x10 [ 245.061327][T11295] ? __pfx__printk+0x10/0x10 [ 245.061359][T11295] ? __pfx___might_resched+0x10/0x10 [ 245.061390][T11295] should_fail_ex+0x424/0x570 [ 245.061419][T11295] should_failslab+0xac/0x100 [ 245.061448][T11295] __kmalloc_noprof+0xdf/0x4d0 [ 245.061475][T11295] ? bpf_test_init+0xc2/0x170 [ 245.061504][T11295] bpf_test_init+0xc2/0x170 [ 245.061534][T11295] bpf_prog_test_run_nf+0x346/0xbf0 [ 245.061561][T11295] ? __lock_acquire+0xad5/0xd80 [ 245.061597][T11295] ? __pfx_bpf_prog_test_run_nf+0x10/0x10 [ 245.061629][T11295] ? __fget_files+0x2a/0x420 [ 245.061651][T11295] ? __fget_files+0x39d/0x420 [ 245.061666][T11295] ? __fget_files+0x2a/0x420 [ 245.061689][T11295] ? __pfx_bpf_prog_test_run_nf+0x10/0x10 [ 245.061718][T11295] bpf_prog_test_run+0x2e4/0x360 [ 245.061746][T11295] __sys_bpf+0x4ee/0x8b0 [ 245.061769][T11295] ? __pfx___sys_bpf+0x10/0x10 [ 245.061804][T11295] ? ksys_write+0x275/0x2d0 [ 245.061852][T11295] __x64_sys_bpf+0x7c/0x90 [ 245.061883][T11295] do_syscall_64+0xf3/0x230 [ 245.061908][T11295] ? clear_bhb_loop+0x45/0xa0 [ 245.061932][T11295] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 245.061950][T11295] RIP: 0033:0x7ff2fc18d169 [ 245.061969][T11295] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 245.061986][T11295] RSP: 002b:00007ff2fcff6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 245.062009][T11295] RAX: ffffffffffffffda RBX: 00007ff2fc3a5fa0 RCX: 00007ff2fc18d169 [ 245.062023][T11295] RDX: 0000000000000050 RSI: 00002000000008c0 RDI: 000000000000000a [ 245.062036][T11295] RBP: 00007ff2fcff6090 R08: 0000000000000000 R09: 0000000000000000 [ 245.062048][T11295] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 245.062060][T11295] R13: 0000000000000000 R14: 00007ff2fc3a5fa0 R15: 00007fffcf83de88 [ 245.062093][T11295] [ 245.476930][T11313] netlink: 'syz.3.1368': attribute type 10 has an invalid length. [ 245.583910][T11319] sctp: [Deprecated]: syz.2.1371 (pid 11319) Use of struct sctp_assoc_value in delayed_ack socket option. [ 245.583910][T11319] Use struct sctp_sack_info instead [ 245.692581][T11323] FAULT_INJECTION: forcing a failure. [ 245.692581][T11323] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 245.725549][T11323] CPU: 1 UID: 0 PID: 11323 Comm: syz.1.1373 Not tainted 6.14.0-syzkaller-13320-g420aabef3ab5 #0 PREEMPT(full) [ 245.725585][T11323] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 245.725595][T11323] Call Trace: [ 245.725603][T11323] [ 245.725610][T11323] dump_stack_lvl+0x241/0x360 [ 245.725650][T11323] ? __pfx_dump_stack_lvl+0x10/0x10 [ 245.725677][T11323] ? __pfx__printk+0x10/0x10 [ 245.725719][T11323] should_fail_ex+0x424/0x570 [ 245.725747][T11323] _copy_from_user+0x2d/0xb0 [ 245.725775][T11323] kvmemdup_bpfptr_noprof+0x71/0x100 [ 245.726001][T11323] map_update_elem+0x251/0x6f0 [ 245.726031][T11323] __sys_bpf+0x780/0x8b0 [ 245.726053][T11323] ? __pfx___sys_bpf+0x10/0x10 [ 245.726084][T11323] ? ksys_write+0x275/0x2d0 [ 245.726121][T11323] __x64_sys_bpf+0x7c/0x90 [ 245.726148][T11323] do_syscall_64+0xf3/0x230 [ 245.726170][T11323] ? clear_bhb_loop+0x45/0xa0 [ 245.726190][T11323] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 245.726209][T11323] RIP: 0033:0x7f59a498d169 [ 245.726229][T11323] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 245.726246][T11323] RSP: 002b:00007f59a5759038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 245.726270][T11323] RAX: ffffffffffffffda RBX: 00007f59a4ba5fa0 RCX: 00007f59a498d169 [ 245.726285][T11323] RDX: 0000000000000020 RSI: 0000200000000900 RDI: 0000000000000002 [ 245.726298][T11323] RBP: 00007f59a5759090 R08: 0000000000000000 R09: 0000000000000000 [ 245.726310][T11323] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 245.726320][T11323] R13: 0000000000000000 R14: 00007f59a4ba5fa0 R15: 00007ffd9d51b088 [ 245.726351][T11323] [ 246.166700][T11338] bridge0: port 1(syz_tun) entered blocking state [ 246.179073][T11338] bridge0: port 1(syz_tun) entered disabled state [ 246.187757][T11338] syz_tun: entered allmulticast mode [ 246.196729][T11338] syz_tun: entered promiscuous mode [ 246.206969][T11342] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1380'. [ 246.526448][T11357] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1386'. [ 246.631221][T11360] netlink: 'syz.2.1387': attribute type 10 has an invalid length. [ 246.866773][T11375] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1392'. [ 246.889258][T11332] delete_channel: no stack [ 247.273092][T11398] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1398'. [ 247.343836][T11403] netlink: 'syz.4.1400': attribute type 10 has an invalid length. [ 247.502272][T11410] FAULT_INJECTION: forcing a failure. [ 247.502272][T11410] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 247.524691][T11410] CPU: 0 UID: 0 PID: 11410 Comm: syz.0.1402 Not tainted 6.14.0-syzkaller-13320-g420aabef3ab5 #0 PREEMPT(full) [ 247.524728][T11410] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 247.524739][T11410] Call Trace: [ 247.524747][T11410] [ 247.524755][T11410] dump_stack_lvl+0x241/0x360 [ 247.524800][T11410] ? __pfx_dump_stack_lvl+0x10/0x10 [ 247.524824][T11410] ? __pfx__printk+0x10/0x10 [ 247.524863][T11410] should_fail_ex+0x424/0x570 [ 247.524891][T11410] _copy_to_user+0x31/0xb0 [ 247.524920][T11410] simple_read_from_buffer+0xc4/0x170 [ 247.524949][T11410] proc_fail_nth_read+0x1ef/0x260 [ 247.524970][T11410] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 247.524990][T11410] ? rw_verify_area+0x246/0x630 [ 247.525009][T11410] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 247.525031][T11410] vfs_read+0x21f/0xb90 [ 247.525056][T11410] ? __pfx___mutex_lock+0x10/0x10 [ 247.525079][T11410] ? __pfx_vfs_read+0x10/0x10 [ 247.525104][T11410] ? __fget_files+0x2a/0x420 [ 247.525125][T11410] ? __fget_files+0x39d/0x420 [ 247.525138][T11410] ? __fget_files+0x2a/0x420 [ 247.525165][T11410] ksys_read+0x19d/0x2d0 [ 247.525189][T11410] ? __pfx_ksys_read+0x10/0x10 [ 247.525209][T11410] ? rcu_is_watching+0x15/0xb0 [ 247.525233][T11410] ? trace_sys_enter+0x25/0x120 [ 247.525262][T11410] do_syscall_64+0xf3/0x230 [ 247.525282][T11410] ? clear_bhb_loop+0x45/0xa0 [ 247.525302][T11410] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 247.525317][T11410] RIP: 0033:0x7face698bb7c [ 247.525334][T11410] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 247.525349][T11410] RSP: 002b:00007face7707030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 247.525370][T11410] RAX: ffffffffffffffda RBX: 00007face6ba5fa0 RCX: 00007face698bb7c [ 247.525382][T11410] RDX: 000000000000000f RSI: 00007face77070a0 RDI: 0000000000000004 [ 247.525394][T11410] RBP: 00007face7707090 R08: 0000000000000000 R09: 0000000000000000 [ 247.525405][T11410] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 247.525415][T11410] R13: 0000000000000000 R14: 00007face6ba5fa0 R15: 00007ffec900c698 [ 247.525452][T11410] [ 247.872902][T11418] FAULT_INJECTION: forcing a failure. [ 247.872902][T11418] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 247.888089][T11418] CPU: 1 UID: 0 PID: 11418 Comm: syz.0.1405 Not tainted 6.14.0-syzkaller-13320-g420aabef3ab5 #0 PREEMPT(full) [ 247.888123][T11418] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 247.888136][T11418] Call Trace: [ 247.888144][T11418] [ 247.888152][T11418] dump_stack_lvl+0x241/0x360 [ 247.888192][T11418] ? __pfx_dump_stack_lvl+0x10/0x10 [ 247.888216][T11418] ? __pfx__printk+0x10/0x10 [ 247.888258][T11418] should_fail_ex+0x424/0x570 [ 247.888286][T11418] _copy_from_user+0x2d/0xb0 [ 247.888313][T11418] kvmemdup_bpfptr_noprof+0x71/0x100 [ 247.888338][T11418] map_update_elem+0x4d0/0x6f0 [ 247.888367][T11418] __sys_bpf+0x780/0x8b0 [ 247.888383][T11418] ? __lock_acquire+0xad5/0xd80 [ 247.888405][T11418] ? __pfx___sys_bpf+0x10/0x10 [ 247.888450][T11418] ? rcu_is_watching+0x15/0xb0 [ 247.888480][T11418] __x64_sys_bpf+0x7c/0x90 [ 247.888522][T11418] do_syscall_64+0xf3/0x230 [ 247.888547][T11418] ? clear_bhb_loop+0x45/0xa0 [ 247.888571][T11418] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 247.888590][T11418] RIP: 0033:0x7face698d169 [ 247.888607][T11418] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 247.888624][T11418] RSP: 002b:00007face7707038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 247.888648][T11418] RAX: ffffffffffffffda RBX: 00007face6ba5fa0 RCX: 00007face698d169 [ 247.888663][T11418] RDX: 0000000000000020 RSI: 0000200000000900 RDI: 0000000000000002 [ 247.888674][T11418] RBP: 00007face7707090 R08: 0000000000000000 R09: 0000000000000000 [ 247.888687][T11418] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 247.888699][T11418] R13: 0000000000000000 R14: 00007face6ba5fa0 R15: 00007ffec900c698 [ 247.888731][T11418] [ 248.360627][T11434] netlink: 'syz.2.1410': attribute type 2 has an invalid length. [ 248.389661][T11434] netlink: 'syz.2.1410': attribute type 2 has an invalid length. [ 248.573454][T11449] netlink: 'syz.1.1413': attribute type 10 has an invalid length. [ 248.919366][T11468] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1419'. [ 249.284380][T11490] ip6tnl1: entered promiscuous mode [ 249.300763][T11490] ip6tnl1: entered allmulticast mode [ 249.318613][T11490] team0: Device ip6tnl1 is up. Set it down before adding it as a team port [ 249.414607][T11498] sctp: [Deprecated]: syz.0.1428 (pid 11498) Use of struct sctp_assoc_value in delayed_ack socket option. [ 249.414607][T11498] Use struct sctp_sack_info instead [ 249.543843][T11498] 8021q: adding VLAN 0 to HW filter on device bond2 [ 249.614639][T11504] netlink: 'syz.4.1430': attribute type 10 has an invalid length. [ 249.804961][T11518] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1434'. [ 250.250825][T11527] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1437'. [ 250.280127][T11527] netlink: 43 bytes leftover after parsing attributes in process `syz.0.1437'. [ 250.322416][T11527] netlink: 'syz.0.1437': attribute type 5 has an invalid length. [ 250.382268][T11527] netlink: 43 bytes leftover after parsing attributes in process `syz.0.1437'. [ 250.944527][T11569] netlink: 'syz.0.1443': attribute type 10 has an invalid length. [ 250.953822][T11568] sctp: [Deprecated]: syz.1.1442 (pid 11568) Use of struct sctp_assoc_value in delayed_ack socket option. [ 250.953822][T11568] Use struct sctp_sack_info instead [ 251.213938][T11561] 8021q: adding VLAN 0 to HW filter on device bond15 [ 251.455443][T11590] netlink: 'syz.0.1449': attribute type 1 has an invalid length. [ 251.465658][T11590] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1449'. [ 251.478064][T11590] nbd: couldn't find device at index 0 [ 251.511473][T11590] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1449'. [ 252.236300][T11627] netlink: 'syz.2.1459': attribute type 10 has an invalid length. [ 252.434432][T11632] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1461'. [ 252.462985][T11633] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1461'. [ 253.184664][T11664] netlink: 'syz.4.1471': attribute type 39 has an invalid length. [ 253.267192][T11673] netlink: 'syz.0.1470': attribute type 10 has an invalid length. [ 253.686913][T11689] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1476'. [ 254.112812][T11718] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 254.340121][T11736] netlink: 'syz.1.1485': attribute type 10 has an invalid length. [ 254.358891][T11735] netlink: 204 bytes leftover after parsing attributes in process `syz.4.1486'. [ 254.388490][T11735] netlink: 'syz.4.1486': attribute type 3 has an invalid length. [ 254.949657][T11759] Unknown status report in ack skb [ 254.979048][T11759] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1492'. [ 255.028620][T11759] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1492'. [ 255.078357][T11759] netlink: 176 bytes leftover after parsing attributes in process `syz.4.1492'. [ 255.131291][T11771] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1495'. [ 255.165749][T11771] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1495'. [ 255.201002][T11775] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1497'. [ 255.297241][T11777] netlink: 'syz.4.1498': attribute type 10 has an invalid length. [ 255.954192][T11807] netlink: 'syz.4.1505': attribute type 1 has an invalid length. [ 255.979737][T11807] netlink: 244 bytes leftover after parsing attributes in process `syz.4.1505'. [ 256.190406][T11818] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1507'. [ 256.727153][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.734201][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.831100][T11846] netlink: 'syz.0.1513': attribute type 10 has an invalid length. [ 258.128330][T11880] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1522'. [ 258.684613][T11894] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1524'. [ 258.913188][T11898] netlink: 'syz.2.1525': attribute type 10 has an invalid length. [ 259.579908][T11924] netlink: zone id is out of range [ 259.585498][T11924] netlink: zone id is out of range [ 259.625251][T11924] netlink: zone id is out of range [ 259.631567][T11924] netlink: zone id is out of range [ 259.637827][T11924] netlink: zone id is out of range [ 259.643513][T11924] netlink: zone id is out of range [ 259.661206][T11924] netlink: zone id is out of range [ 259.683575][T11924] netlink: zone id is out of range [ 259.714634][T11924] netlink: zone id is out of range [ 259.738921][T11924] netlink: zone id is out of range [ 259.927810][T11938] netlink: 'syz.4.1537': attribute type 10 has an invalid length. [ 260.326834][T11955] veth0_to_bond: entered promiscuous mode [ 260.383695][T11955] __nla_validate_parse: 3 callbacks suppressed [ 260.383724][T11955] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1540'. [ 260.568661][T11955] veth0_to_bond (unregistering): left promiscuous mode [ 261.112530][T11973] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1544'. [ 261.180908][T11976] : entered promiscuous mode [ 261.191842][T11976] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1546'. [ 261.725928][T11997] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1550'. [ 261.760597][T11997] netlink: 'syz.1.1550': attribute type 10 has an invalid length. [ 262.115783][T12006] sctp: [Deprecated]: syz.2.1553 (pid 12006) Use of struct sctp_assoc_value in delayed_ack socket option. [ 262.115783][T12006] Use struct sctp_sack_info instead [ 262.168017][T12018] sctp: [Deprecated]: syz.1.1556 (pid 12018) Use of struct sctp_assoc_value in delayed_ack socket option. [ 262.168017][T12018] Use struct sctp_sack_info instead [ 262.182702][T12008] syzkaller0: entered promiscuous mode [ 262.216105][T12008] syzkaller0: entered allmulticast mode [ 262.306840][T12014] 8021q: adding VLAN 0 to HW filter on device bond16 [ 262.423545][T12024] netlink: 'syz.2.1557': attribute type 1 has an invalid length. [ 262.531574][T12030] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1558'. [ 262.822685][T12045] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1562'. [ 264.634769][T12053] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1563'. [ 264.704869][T12060] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1567'. [ 264.795916][T12066] af_packet: tpacket_rcv: packet too big, clamped from 1 to 4294967272. macoff=96 [ 264.877311][T12066] lo speed is unknown, defaulting to 1000 [ 264.917778][T12066] lo speed is unknown, defaulting to 1000 [ 264.929705][T12066] lo speed is unknown, defaulting to 1000 [ 264.946251][T12066] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 264.998455][T12066] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 265.051635][T12066] lo speed is unknown, defaulting to 1000 [ 265.070724][T12066] lo speed is unknown, defaulting to 1000 [ 265.085136][T12066] lo speed is unknown, defaulting to 1000 [ 265.094088][T12066] lo speed is unknown, defaulting to 1000 [ 265.109436][T12066] lo speed is unknown, defaulting to 1000 [ 265.415564][T12093] netlink: 248 bytes leftover after parsing attributes in process `syz.3.1576'. [ 265.425151][T12093] NCSI netlink: No device for ifindex 0 [ 265.645433][T12106] sctp: [Deprecated]: syz.3.1578 (pid 12106) Use of struct sctp_assoc_value in delayed_ack socket option. [ 265.645433][T12106] Use struct sctp_sack_info instead [ 265.752991][T12099] 8021q: adding VLAN 0 to HW filter on device bond17 [ 265.895331][T12114] vlan2: entered promiscuous mode [ 265.902691][T12114] bond0: entered promiscuous mode [ 266.229627][T12110] tipc: Started in network mode [ 266.235178][T12110] tipc: Node identity ac14140f, cluster identity 4711 [ 266.261468][T12110] tipc: New replicast peer: 255.255.255.255 [ 266.289497][T12110] tipc: Enabled bearer , priority 10 [ 266.594262][T12132] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1585'. [ 266.617199][T12134] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1587'. [ 266.922815][T12154] sctp: [Deprecated]: syz.3.1592 (pid 12154) Use of struct sctp_assoc_value in delayed_ack socket option. [ 266.922815][T12154] Use struct sctp_sack_info instead [ 266.990286][T12154] 8021q: adding VLAN 0 to HW filter on device bond5 [ 267.009756][T12162] netlink: 1 bytes leftover after parsing attributes in process `syz.1.1593'. [ 267.027682][T12162] geneve1: entered promiscuous mode [ 267.038256][T12162] netlink: 1 bytes leftover after parsing attributes in process `syz.1.1593'. [ 267.223779][T12171] lo speed is unknown, defaulting to 1000 [ 267.409435][ T5905] tipc: Node number set to 2886997007 [ 267.696770][T12185] lo speed is unknown, defaulting to 1000 [ 267.783217][T12188] netlink: 'syz.4.1600': attribute type 1 has an invalid length. [ 267.838523][T12188] 8021q: adding VLAN 0 to HW filter on device bond4 [ 267.910786][T12194] 8021q: adding VLAN 0 to HW filter on device bond4 [ 267.918717][T12194] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address [ 267.932846][T12194] bond4: (slave vxcan3): Error -95 calling set_mac_address [ 267.982357][T12193] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1601'. [ 268.343673][T12210] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1607'. [ 268.592005][T12223] netlink: 'syz.3.1609': attribute type 10 has an invalid length. [ 268.615945][T12223] team0: Port device dummy0 added [ 268.623534][T12205] lo speed is unknown, defaulting to 1000 [ 268.976441][T12233] netlink: 'syz.3.1613': attribute type 1 has an invalid length. [ 269.132484][T12231] lo speed is unknown, defaulting to 1000 [ 269.881332][T12269] netlink: 192 bytes leftover after parsing attributes in process `syz.2.1623'. [ 269.912320][T12270] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1624'. [ 270.011741][T12273] xt_connbytes: Forcing CT accounting to be enabled [ 270.031830][T12273] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'nat' [ 270.183966][T12282] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1636'. [ 270.245295][T12287] netlink: 'syz.4.1626': attribute type 1 has an invalid length. [ 270.275165][T12284] netlink: 'syz.1.1625': attribute type 3 has an invalid length. [ 270.434329][T12285] lo speed is unknown, defaulting to 1000 [ 270.626000][T12296] vlan3: entered promiscuous mode [ 270.631724][T12296] bond0: entered promiscuous mode [ 270.646278][T12296] team0: entered promiscuous mode [ 270.977997][T12311] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1637'. [ 271.214861][T12318] lo speed is unknown, defaulting to 1000 [ 271.216813][T12325] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1641'. [ 271.303078][T12325] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1641'. [ 271.512198][T12331] netlink: 'syz.4.1643': attribute type 1 has an invalid length. [ 271.546045][T12339] sctp: [Deprecated]: syz.3.1645 (pid 12339) Use of struct sctp_assoc_value in delayed_ack socket option. [ 271.546045][T12339] Use struct sctp_sack_info instead [ 271.752249][T12345] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1648'. [ 271.834944][T12335] 8021q: adding VLAN 0 to HW filter on device bond18 [ 272.503401][T12354] netlink: 'syz.4.1650': attribute type 10 has an invalid length. [ 272.529005][T12354] team0: Device dummy0 failed to register rx_handler [ 272.758183][T12359] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1651'. [ 272.832304][T12361] netlink: 176 bytes leftover after parsing attributes in process `syz.4.1652'. [ 272.837685][T12363] netlink: 176 bytes leftover after parsing attributes in process `syz.4.1652'. [ 273.413214][T12377] netlink: 'syz.1.1658': attribute type 11 has an invalid length. [ 273.434951][T12377] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1658'. [ 273.601448][T12380] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1659'. [ 273.663219][T12386] bridge: RTM_NEWNEIGH with invalid ether address [ 273.681660][T12386] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1661'. [ 273.860298][T12396] netlink: 'syz.2.1663': attribute type 10 has an invalid length. [ 273.877147][T12396] team0: Port device dummy0 added [ 274.074835][T12407] siw: device registration error -23 [ 274.085371][T12404] net_ratelimit: 18 callbacks suppressed [ 274.085400][T12404] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 275.117914][T12441] bridge: RTM_NEWNEIGH with invalid ether address [ 275.828987][T12451] lo speed is unknown, defaulting to 1000 [ 275.872552][T12461] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 276.153483][T12473] __nla_validate_parse: 67 callbacks suppressed [ 276.153514][T12473] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1686'. [ 276.190783][T12473] netlink: 'syz.3.1686': attribute type 30 has an invalid length. [ 276.251116][T12473] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 276.260037][T12473] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 276.268620][T12473] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 276.277802][T12473] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 276.359266][T12483] netlink: 'syz.0.1690': attribute type 2 has an invalid length. [ 276.412919][T12483] netlink: 92 bytes leftover after parsing attributes in process `syz.0.1690'. [ 276.530442][T12484] ipip0: entered promiscuous mode [ 276.536312][T12484] ipip0: entered allmulticast mode [ 277.542973][T12542] netlink: 'syz.0.1706': attribute type 3 has an invalid length. [ 277.552137][T12542] netlink: 'syz.0.1706': attribute type 1 has an invalid length. [ 277.821517][T12546] netlink: 'syz.3.1708': attribute type 11 has an invalid length. [ 277.857059][T12546] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1708'. [ 278.055613][T12555] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1713'. [ 278.392958][T12565] netlink: 'syz.0.1712': attribute type 21 has an invalid length. [ 278.462530][T12565] IPv6: NLM_F_CREATE should be specified when creating new route [ 278.476529][T12573] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1719'. [ 278.537129][T12580] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1720'. [ 278.678039][T12580] wireguard1: entered promiscuous mode [ 278.696270][T12580] wireguard1: entered allmulticast mode [ 279.061351][T12605] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1728'. [ 279.061368][T12607] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1729'. [ 279.113071][T12605] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1728'. [ 279.659649][T12630] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 279.696391][T12630] openvswitch: netlink: Actions may not be safe on all matching packets [ 279.838020][T12639] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1741'. [ 280.162367][T12636] lo speed is unknown, defaulting to 1000 [ 280.721881][T12675] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 281.239118][T12685] tap0: tun_chr_ioctl cmd 1074025678 [ 281.310484][T12685] tap0: group set to 0 [ 281.527508][T12693] __nla_validate_parse: 2 callbacks suppressed [ 281.527545][T12693] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1754'. [ 282.105950][T12703] lo speed is unknown, defaulting to 1000 [ 282.381846][T12719] pim6reg: entered allmulticast mode [ 282.526466][T12721] IPVS: length: 78 != 8 [ 282.615603][T12725] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 282.741655][T12731] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1762'. [ 282.888858][T12736] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 283.386486][T12745] lo speed is unknown, defaulting to 1000 [ 283.481350][T12755] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1768'. [ 283.599126][T12766] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1772'. [ 283.599356][T12752] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1768'. [ 283.673719][T12769] sctp: [Deprecated]: syz.1.1771 (pid 12769) Use of struct sctp_assoc_value in delayed_ack socket option. [ 283.673719][T12769] Use struct sctp_sack_info instead [ 283.971735][T12765] 8021q: adding VLAN 0 to HW filter on device bond19 [ 284.296596][T12788] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1777'. [ 284.869878][T12807] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1782'. [ 285.018211][T12813] sctp: [Deprecated]: syz.3.1784 (pid 12813) Use of struct sctp_assoc_value in delayed_ack socket option. [ 285.018211][T12813] Use struct sctp_sack_info instead [ 285.142354][T12813] 8021q: adding VLAN 0 to HW filter on device bond6 [ 285.151778][T12815] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1785'. [ 285.375427][T12823] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1786'. [ 285.466138][T12830] gtp1: entered promiscuous mode [ 285.491813][T12830] gtp1: entered allmulticast mode [ 285.526955][T12830] netlink: 'syz.2.1789': attribute type 1 has an invalid length. [ 285.641558][T12836] lo speed is unknown, defaulting to 1000 [ 285.706122][T12843] bridge0: port 1(batadv1) entered blocking state [ 285.724597][T12843] bridge0: port 1(batadv1) entered disabled state [ 285.732370][T12843] batadv1: entered allmulticast mode [ 285.746336][T12843] batadv1: entered promiscuous mode [ 285.915757][T12843] netlink: 'syz.3.1793': attribute type 1 has an invalid length. Connection to 10.128.0.70 closed by remote host. [ 285.977628][T12843] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1793'. [ 286.002271][T12854] sctp: [Deprecated]: syz.2.1796 (pid 12854) Use of struct sctp_assoc_value in delayed_ack socket option. [ 286.002271][T12854] Use struct sctp_sack_info instead [ 286.203941][ T1098] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 286.214642][ T1098] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 287.177992][ T5849] syz_tun (unregistering): left allmulticast mode [ 287.185246][ T5849] syz_tun (unregistering): left promiscuous mode [ 287.197353][ T5849] bridge0: port 1(syz_tun) entered disabled state [ 287.252662][ T1149] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.354910][ T1149] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.425040][ T1149] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.474151][ T1149] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.162198][ T1149] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 288.172187][ T1149] bond0 (unregistering): Released all slaves [ 288.300240][ T1149] bond1 (unregistering): Released all slaves [ 288.431131][ T1149] bond2 (unregistering): Released all slaves [ 288.447289][ T1149] bond3 (unregistering): Released all slaves [ 288.573734][ T1149] bond4 (unregistering): Released all slaves [ 288.908815][ T1149] hsr_slave_0: left promiscuous mode [ 288.915185][ T1149] hsr_slave_1: left promiscuous mode [ 288.933741][ T1149] batadv0: left allmulticast mode [ 288.942644][ T1149] batadv0: left promiscuous mode [ 288.948296][ T1149] veth1_macvtap: left promiscuous mode [ 288.954499][ T1149] veth0_macvtap: left promiscuous mode [ 288.960584][ T1149] veth1_vlan: left promiscuous mode [ 288.966340][ T1149] veth0_vlan: left promiscuous mode [ 289.071051][ T1149] [ 289.074027][ T1149] ====================================================== [ 289.081597][ T1149] WARNING: possible circular locking dependency detected [ 289.088877][ T1149] 6.14.0-syzkaller-13320-g420aabef3ab5 #0 Not tainted [ 289.096017][ T1149] ------------------------------------------------------ [ 289.103188][ T1149] kworker/u8:7/1149 is trying to acquire lock: [ 289.109453][ T1149] ffff8880602dce00 (team->team_lock_key#4){+.+.}-{4:4}, at: team_vlan_rx_kill_vid+0x36/0xe0 [ 289.120053][ T1149] [ 289.120053][ T1149] but task is already holding lock: [ 289.129220][ T1149] ffff88805f59cd30 (&dev_instance_lock_key#3){+.+.}-{4:4}, at: unregister_netdevice_many_notify+0x5a1/0x2510 [ 289.141996][ T1149] [ 289.141996][ T1149] which lock already depends on the new lock. [ 289.141996][ T1149] [ 289.153738][ T1149] [ 289.153738][ T1149] the existing dependency chain (in reverse order) is: [ 289.163768][ T1149] [ 289.163768][ T1149] -> #1 (&dev_instance_lock_key#3){+.+.}-{4:4}: [ 289.172764][ T1149] lock_acquire+0x116/0x2f0 [ 289.178261][ T1149] __mutex_lock+0x1a5/0x10c0 [ 289.183944][ T1149] dev_set_mtu+0x11c/0x270 [ 289.189601][ T1149] team_add_slave+0x83b/0x28b0 [ 289.194927][ T1149] do_set_master+0x579/0x730 [ 289.200277][ T1149] do_setlink+0x111d/0x43a0 [ 289.205978][ T1149] rtnl_newlink+0x17e2/0x1fe0 [ 289.212497][ T1149] rtnetlink_rcv_msg+0x80f/0xd70 [ 289.218607][ T1149] netlink_rcv_skb+0x208/0x480 [ 289.224783][ T1149] netlink_unicast+0x7f8/0x9a0 [ 289.230450][ T1149] netlink_sendmsg+0x8c3/0xcd0 [ 289.236368][ T1149] __sock_sendmsg+0x221/0x270 [ 289.241729][ T1149] ____sys_sendmsg+0x523/0x860 [ 289.247597][ T1149] __sys_sendmsg+0x271/0x360 [ 289.253141][ T1149] do_syscall_64+0xf3/0x230 [ 289.258683][ T1149] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 289.265630][ T1149] [ 289.265630][ T1149] -> #0 (team->team_lock_key#4){+.+.}-{4:4}: [ 289.274272][ T1149] validate_chain+0xa69/0x24e0 [ 289.279783][ T1149] __lock_acquire+0xad5/0xd80 [ 289.285714][ T1149] lock_acquire+0x116/0x2f0 [ 289.290927][ T1149] __mutex_lock+0x1a5/0x10c0 [ 289.296214][ T1149] team_vlan_rx_kill_vid+0x36/0xe0 [ 289.302048][ T1149] vlan_vid_del+0x483/0x770 [ 289.307178][ T1149] vlan_device_event+0x23c/0x1e00 [ 289.312742][ T1149] notifier_call_chain+0x1a5/0x3f0 [ 289.318604][ T1149] dev_close_many+0x33e/0x4c0 [ 289.324387][ T1149] unregister_netdevice_many_notify+0x628/0x2510 [ 289.331425][ T1149] default_device_exit_batch+0x7ff/0x880 [ 289.338247][ T1149] cleanup_net+0x8af/0xd60 [ 289.343966][ T1149] process_scheduled_works+0xac3/0x18e0 [ 289.351310][ T1149] worker_thread+0x870/0xd50 [ 289.356608][ T1149] kthread+0x7b7/0x940 [ 289.361589][ T1149] ret_from_fork+0x4b/0x80 [ 289.366990][ T1149] ret_from_fork_asm+0x1a/0x30 [ 289.373077][ T1149] [ 289.373077][ T1149] other info that might help us debug this: [ 289.373077][ T1149] [ 289.384402][ T1149] Possible unsafe locking scenario: [ 289.384402][ T1149] [ 289.392473][ T1149] CPU0 CPU1 [ 289.398939][ T1149] ---- ---- [ 289.404805][ T1149] lock(&dev_instance_lock_key#3); [ 289.410471][ T1149] lock(team->team_lock_key#4); [ 289.418476][ T1149] lock(&dev_instance_lock_key#3); [ 289.426577][ T1149] lock(team->team_lock_key#4); [ 289.431708][ T1149] [ 289.431708][ T1149] *** DEADLOCK *** [ 289.431708][ T1149] [ 289.440636][ T1149] 5 locks held by kworker/u8:7/1149: [ 289.446302][ T1149] #0: ffff88801bef6148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x990/0x18e0 [ 289.458211][ T1149] #1: ffffc90003b9fc60 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9cb/0x18e0 [ 289.469405][ T1149] #2: ffffffff900efe90 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0x17c/0xd60 [ 289.479943][ T1149] #3: ffffffff900fc9c8 (rtnl_mutex){+.+.}-{4:4}, at: default_device_exit_batch+0xde/0x880 [ 289.490611][ T1149] #4: ffff88805f59cd30 (&dev_instance_lock_key#3){+.+.}-{4:4}, at: unregister_netdevice_many_notify+0x5a1/0x2510 [ 289.503352][ T1149] [ 289.503352][ T1149] stack backtrace: [ 289.510134][ T1149] CPU: 1 UID: 0 PID: 1149 Comm: kworker/u8:7 Not tainted 6.14.0-syzkaller-13320-g420aabef3ab5 #0 PREEMPT(full) [ 289.510158][ T1149] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 289.510169][ T1149] Workqueue: netns cleanup_net [ 289.510195][ T1149] Call Trace: [ 289.510207][ T1149] [ 289.510216][ T1149] dump_stack_lvl+0x241/0x360 [ 289.510240][ T1149] ? __pfx_dump_stack_lvl+0x10/0x10 [ 289.510259][ T1149] ? __pfx__printk+0x10/0x10 [ 289.510279][ T1149] ? print_lock+0x171/0x1a0 [ 289.510297][ T1149] print_circular_bug+0x2e1/0x300 [ 289.510316][ T1149] check_noncircular+0x142/0x160 [ 289.510336][ T1149] validate_chain+0xa69/0x24e0 [ 289.510361][ T1149] __lock_acquire+0xad5/0xd80 [ 289.510378][ T1149] lock_acquire+0x116/0x2f0 [ 289.510392][ T1149] ? team_vlan_rx_kill_vid+0x36/0xe0 [ 289.510407][ T1149] ? _raw_spin_unlock_irqrestore+0xde/0x140 [ 289.510426][ T1149] __mutex_lock+0x1a5/0x10c0 [ 289.510442][ T1149] ? team_vlan_rx_kill_vid+0x36/0xe0 [ 289.510457][ T1149] ? debug_object_assert_init+0x30e/0x4d0 [ 289.510483][ T1149] ? team_vlan_rx_kill_vid+0x36/0xe0 [ 289.510495][ T1149] ? __pfx___mutex_lock+0x10/0x10 [ 289.510514][ T1149] ? addrconf_ifdown+0xbd8/0x1b10 [ 289.510534][ T1149] team_vlan_rx_kill_vid+0x36/0xe0 [ 289.510549][ T1149] vlan_vid_del+0x483/0x770 [ 289.510572][ T1149] vlan_device_event+0x23c/0x1e00 [ 289.510587][ T1149] ? br_device_event+0x28f/0xae0 [ 289.510606][ T1149] ? __pfx_phonet_device_notify+0x10/0x10 [ 289.510620][ T1149] ? __pfx_vlan_device_event+0x10/0x10 [ 289.510633][ T1149] ? __pfx_br_device_event+0x10/0x10 [ 289.510650][ T1149] ? raw_notifier+0x9d/0x740 [ 289.510667][ T1149] ? isotp_notifier+0xa4/0x6b0 [ 289.510681][ T1149] ? cgw_notifier+0xd8/0x3b0 [ 289.510692][ T1149] ? packet_notifier+0x76/0xa30 [ 289.510712][ T1149] notifier_call_chain+0x1a5/0x3f0 [ 289.510733][ T1149] dev_close_many+0x33e/0x4c0 [ 289.510754][ T1149] ? __pfx_dev_close_many+0x10/0x10 [ 289.510774][ T1149] unregister_netdevice_many_notify+0x628/0x2510 [ 289.510794][ T1149] ? lockdep_hardirqs_on+0x9d/0x150 [ 289.510810][ T1149] ? __local_bh_enable_ip+0x168/0x200 [ 289.510825][ T1149] ? batadv_tt_local_remove+0x119/0x230 [ 289.510840][ T1149] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 289.510853][ T1149] ? batadv_tt_local_remove+0x119/0x230 [ 289.510866][ T1149] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 289.510886][ T1149] ? unregister_netdevice_queue+0x2c4/0x400 [ 289.510903][ T1149] ? batadv_meshif_destroy_netlink+0x1e6/0x270 [ 289.510924][ T1149] default_device_exit_batch+0x7ff/0x880 [ 289.510946][ T1149] ? __pfx_default_device_exit_batch+0x10/0x10 [ 289.510966][ T1149] ? __pfx_rdma_dev_exit_net+0x10/0x10 [ 289.510987][ T1149] ? cfg802154_pernet_exit+0xc3/0xe0 [ 289.511000][ T1149] ? __pfx_default_device_exit_batch+0x10/0x10 [ 289.511020][ T1149] cleanup_net+0x8af/0xd60 [ 289.511041][ T1149] ? __pfx_cleanup_net+0x10/0x10 [ 289.511064][ T1149] ? process_scheduled_works+0x9cb/0x18e0 [ 289.511080][ T1149] process_scheduled_works+0xac3/0x18e0 [ 289.511104][ T1149] ? __pfx_process_scheduled_works+0x10/0x10 [ 289.511121][ T1149] ? assign_work+0x367/0x3d0 [ 289.511137][ T1149] worker_thread+0x870/0xd50 [ 289.511158][ T1149] ? __kthread_parkme+0x1a8/0x200 [ 289.511175][ T1149] ? __pfx_worker_thread+0x10/0x10 [ 289.511191][ T1149] kthread+0x7b7/0x940 [ 289.511209][ T1149] ? __pfx_worker_thread+0x10/0x10 [ 289.511225][ T1149] ? __pfx_kthread+0x10/0x10 [ 289.511242][ T1149] ? __pfx_kthread+0x10/0x10 [ 289.511260][ T1149] ? __pfx_kthread+0x10/0x10 [ 289.511277][ T1149] ? __pfx_kthread+0x10/0x10 [ 289.511294][ T1149] ? _raw_spin_unlock_irq+0x23/0x50 [ 289.511307][ T1149] ? lockdep_hardirqs_on+0x9d/0x150 [ 289.511322][ T1149] ? __pfx_kthread+0x10/0x10 [ 289.511340][ T1149] ret_from_fork+0x4b/0x80 [ 289.511356][ T1149] ? __pfx_kthread+0x10/0x10 [ 289.511374][ T1149] ret_from_fork_asm+0x1a/0x30 [ 289.511392][ T1149]