last executing test programs: 1m6.730107872s ago: executing program 0 (id=1785): socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x80001, 0x0) syz_init_net_socket$ax25(0x3, 0x5, 0xca) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000100000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f00000006c0)='percpu_alloc_percpu\x00', r1}, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6(0xa, 0x3, 0x87) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000070000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x19}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r2, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 1m6.267699679s ago: executing program 0 (id=1790): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) shutdown(r0, 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) socket$rxrpc(0x21, 0x2, 0xa) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x3) 1m5.935229788s ago: executing program 0 (id=1794): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8b30, &(0x7f00000000c0)={'wlan0\x00'}) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/time\x00') socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000001d000100000000000000000007000000", @ANYRES32=r4, @ANYBLOB="000096000a000200aaaaaaaaaa0c00000600060001000000"], 0x30}}, 0x0) 1m5.343675974s ago: executing program 0 (id=1799): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) write$tun(0xffffffffffffffff, 0x0, 0xfdef) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xb, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$tun(0xffffffffffffff9c, 0x0, 0x101000, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x20000}, 0x24}}, 0x0) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, 0x0) write$tun(r2, 0x0, 0x4d) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) socket$kcm(0x10, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x800, 0x4, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0xd}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x1, 0xfff3}, {}, {0x5}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x10, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x93}]}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x3}]}]}]}}]}, 0x54}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1m4.985397353s ago: executing program 0 (id=1803): r0 = socket$key(0xf, 0x3, 0x2) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@newlink={0x50, 0x10, 0x503, 0x0, 0x700, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @local}]}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0xdf}]}, 0x50}, 0x1, 0x0, 0x0, 0x800}, 0xc0b0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000d84000)={0xa, 0x2, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x9}, 0x1c) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="3801000010000100000000006989da80ffd67da300"/32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000010000000033000000ac1414aa0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff0000000000000004000000000000000000000000000000000000000000000000fcffffff00000000000000000000000004350000020001ff6000000000000000480001006469676573745f6e756c6c00"/240], 0x138}, 0x1, 0x0, 0x0, 0xc004}, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) mmap(&(0x7f0000a67000/0x2000)=nil, 0x2000, 0x100000c, 0x8031, 0xffffffffffffffff, 0x0) sendto$inet6(r3, &(0x7f00000013c0)="c5c6", 0x2, 0x814, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f00000001c0)={'wpan0\x00'}) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) close(r5) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYRES16, @ANYRES32=0x0, @ANYBLOB="08ca27815113fededbb16ac9103730dfc01c829dc72b0b76c399dd3085965db686035524822376845e159b5d9b8ebf7dc1cfba182330f0306fa6def864987d4498b1584a61b9ad427d0b1cad829c032f0bb10db9e241132fd83f8a1a120706c66c25b36611a12165d4fdd6eaa6dc31f402f4880ffc70123ed7136559efb469259bd4e7dae929f032ff1297877e2024270fcb678fb2ac7cfc9f657d3cc91b265b0cf36b98efc6bca61420a21665440aaf34a702d4ed3df36a12b647a50e0d789a06d9f8e481b3fc42bc7f52d266619151641ed33b588bdea2deb7df611831c695da90d75ebc351241d60810fd", @ANYRES8=r0, @ANYRES8=r0], 0x68}}, 0x0) 1m4.204332905s ago: executing program 0 (id=1807): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000001c0)=0x3) ioctl$PPPIOCGIDLE(r1, 0x8010743f, &(0x7f0000000100)) r2 = socket$can_j1939(0x1d, 0x2, 0x7) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f00000000c0)={'wg1\x00', 0x0}) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000140)={r4, 0x1, 0x6, @multicast}, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r6) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01400000000000000000067400062c00070073797352656d5f753a6f626a6563745f723a756465765f68656c7065725f657865635f743a733000080002000000e6ff07000700263a3a0914000600626f6e64300000000000000000000000080003"], 0x78}, 0x1, 0xffffffff00000003}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x6c, 0x4, 0x0, 0x1, [{0x68, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x58, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_EXPR={0x34, 0x5, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_LEN={0x5, 0x4, 0x1, 0x0, 0x56}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0xb9}, @NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x4}]}}}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xc0}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r8) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="cf0400000000000004001300000008000300", @ANYRES32=r10, @ANYBLOB="0400130006001200000000000600b500850100000a00060008021500000100000600bd00d1000000"], 0x44}}, 0x0) 1m3.655226226s ago: executing program 32 (id=1807): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000001c0)=0x3) ioctl$PPPIOCGIDLE(r1, 0x8010743f, &(0x7f0000000100)) r2 = socket$can_j1939(0x1d, 0x2, 0x7) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f00000000c0)={'wg1\x00', 0x0}) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000140)={r4, 0x1, 0x6, @multicast}, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r6) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01400000000000000000067400062c00070073797352656d5f753a6f626a6563745f723a756465765f68656c7065725f657865635f743a733000080002000000e6ff07000700263a3a0914000600626f6e64300000000000000000000000080003"], 0x78}, 0x1, 0xffffffff00000003}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x6c, 0x4, 0x0, 0x1, [{0x68, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x58, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_EXPR={0x34, 0x5, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_LEN={0x5, 0x4, 0x1, 0x0, 0x56}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0xb9}, @NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x4}]}}}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xc0}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r8) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="cf0400000000000004001300000008000300", @ANYRES32=r10, @ANYBLOB="0400130006001200000000000600b500850100000a00060008021500000100000600bd00d1000000"], 0x44}}, 0x0) 6.580899667s ago: executing program 1 (id=2156): socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, 0x0, 0x0) syz_init_net_socket$ax25(0x3, 0x5, 0xf0) socket$nl_route(0x10, 0x3, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x20) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_udp(0xa, 0x2, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000060002000100000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x54}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 6.292197732s ago: executing program 5 (id=2159): r0 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x50, 0x0, &(0x7f0000000000)) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000500)={&(0x7f0000000540)=@hci, 0x80, &(0x7f00000000c0)=[{&(0x7f00000003c0)=""/253, 0xfd}], 0x1}, 0x9e79461275f741f7) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/uts\x00') syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r3, 0x0, 0x0, 0x240007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) socket$can_bcm(0x1d, 0x2, 0x2) unshare(0x2a020480) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) bpf$LINK_DETACH(0x22, &(0x7f00000008c0)=r5, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000000040)=ANY=[@ANYBLOB="d8010000", @ANYRES16=r3, @ANYBLOB="010000000000fbdbdf25010000000800050001000000060006004e220000140002007767320000000000000000000000000024000300a0cb87"], 0x1d8}}, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}, {0xffffffffffffffff}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) syz_emit_ethernet(0x66, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60a24b9f00302b00fe8000000000000000000000bbfe8000000000000000000000000000aa3a020201"], 0x0) 6.025946174s ago: executing program 1 (id=2160): socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$kcm(0x10, 0x2, 0x4) socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001540)=[{&(0x7f00000001c0)="48000000140081fb7059ae08060c040002ff0f03900000000000000000006fabca3b4e7d06a6bd7c00000000030000068a562ad6e74703c48f93bc2a02000000461eb886a5e5", 0x46}], 0x1}, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$llc_int(r2, 0x10c, 0x8, &(0x7f0000000040), &(0x7f0000001880)=0x4) tee(r1, r1, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000000)="7800000018002507b9409b14ffff00000204be04020506050e0204094300080004000000040010000d0068d0bf46d32345653600648d0a0012000200000049935ade4a460c89b6ec0cff3959547f509058ba86c902000000004a32000400160005000a0000000000e000e218d1ddf66ed538f25232500000", 0x78, 0x0, 0x0, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r3, &(0x7f0000003a40)=[{{0x0, 0x0, 0x0}, 0xffff}], 0x1, 0x2b, 0x0) setsockopt$inet6_int(r3, 0x29, 0x4a, &(0x7f0000000040)=0x7, 0x4) setsockopt$inet6_int(r3, 0x29, 0x4, &(0x7f0000000000)=0x1, 0x4) sendto$inet6(r3, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) r4 = socket$inet6(0xa, 0x802, 0x0) connect$inet6(r4, &(0x7f0000001940)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}, 0x1c) bind$l2tp6(r4, &(0x7f0000000080)={0xa, 0x0, 0x108e, @empty, 0x3}, 0x20) 5.771065661s ago: executing program 5 (id=2163): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000380)={{0x6, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0xa}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = socket$inet6_dccp(0xa, 0x6, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f00000001c0)) bind$xdp(0xffffffffffffffff, &(0x7f0000000340)={0x2c, 0x1}, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={0x0}}, 0x4c001) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r3, &(0x7f00000000c0), 0x9) sendfile(r3, r2, 0x0, 0x10000) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001640)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f42fc3199f000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80af735ed41793bdf9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c712016219848624b87cec2dbc68223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f00001000000000eeff7c5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729eec082830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d424c14283a94395b64645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d620100000000000000494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88c3c44b3b7486f979e8a3174b531f573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867ec92d13a4fa4ae033a09673866cd779a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d93e1fe9b0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a0000000000000000000000000000002684c2d8eb8cac98930fa6a893ca44c0f64c07a87eb7b05f56ca6c70cb3a0eb328a15fe96a88235155e6d64bd434f641ddf9db2245e47e5904453577895dd81d"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000540)='rcu_utilization\x00', r5}, 0x10) r6 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x8, 0x3, 0x498, 0x320, 0xa, 0x148, 0x368, 0x60, 0x400, 0x2a8, 0x2a8, 0x400, 0x2a8, 0x3, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'bridge0\x00', 'rose0\x00'}, 0x0, 0x2f8, 0x368, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'veth1_to_team\x00', {0x0, 0x0, 0x2, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x8601, 0x6, './file0\x00'}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f2f7b9f28413d9d8ad470ad2b60c45cb4ea6e7bf902bdc2ff8a9304d9f655c746adc0bdc773506378bc2d27efd6abb05175089830cc46186074d7de46d5af300"}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@MARK={0x28}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x4f8) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{0x1}, 0x0, &(0x7f00000006c0)='%pK \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r7 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r7, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x54}, 0x10) 5.037208706s ago: executing program 2 (id=2169): socket$inet_udplite(0x2, 0x2, 0x88) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x45, 0x0, 0x1, 0x9}, {0x35, 0x0, 0x0, 0xffffffff}, {0x6}]}, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = epoll_create1(0x0) r3 = socket(0x1, 0x80802, 0x0) r4 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f0000000100)={0xa000000d}) epoll_pwait(r4, &(0x7f0000000080)=[{}], 0x1, 0x80000020, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, 0x0, 0x0) getsockopt$inet_sctp_SCTP_STATUS(r3, 0x84, 0xe, 0x0, 0x0) close(r4) shutdown(r3, 0x0) close(r2) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000400)={0x0, 0xf, 0x10}, 0xc) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r5) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)={0x40, r6, 0x1, 0x70bd27, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x1}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x40844) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, 0x0) sendmsg$nl_route_sched_retired(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000ec0)=@deltfilter={0x24, 0x2d, 0x1, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x9, 0x9}, {0x2, 0xe}, {0xfff9, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x41) 4.948027904s ago: executing program 1 (id=2170): socket$inet6_sctp(0xa, 0x1, 0x84) socket$vsock_stream(0x28, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000000000000002be16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f7535f7866907dc0200000000000000ae669e17fd6587d452d6453559c3421eed73d56615fe6c54c3b3ffe1b4ce25d7c983c044c03bf3a48dfe47ec9dd6c091c30b93bfae76d9ebacd3ed3e26e7a23129d6606fd28a69989d552af6bda9df2c3af36effff9af2551ce896165127cb3f011a7d06602e2fc40848228567ffb400000000003ed38ae89d24e1cebfba2f87925bfacba83109751fe6c05405d027edd68149ee99eef6a6992308a4fc0b7c70bc677d6dd4aed4af7500d7900a820b6347184e9a217b5614cd50cbe43a1ed2526814bc0000e9e086ce48e90defb6670c3df2624f56da648d28ad0a97aec7291c25447c106a99893e10db21901eb397b2f5fd71400fa7a050fbbef9e326ea27e513e96068fd1e8a43e89f9c85c822a961546ed5363c17ff1432d08806bc376e3e49ee52b59d13182e1f24ed200ada10eb1affb87ba55b2d72078e9f40b4ae7d01000000d11cd22c35d32940000088dde499000000fdffffff00000000000f000000ef0000000000000000000000000c52f4ebd2c893bb97a068bd10734a83584898eccb26f7b789cfc4cd995fa3e11a5c74c85404e2df3ad37b729ac83b0dcb4f48f3c3356b9997fc455a17690b6f7f9ccbe4b1701941b18aba6b16455a66c3b84b138efc20a546d3d5227e23b03f2a834391ade2ff3e93ee296c4082ee73e7c353312c9d75711ce1623e9c54bdff59d2a69dcb7d84c235b23a4480c2461b405cfd1a38992f295ad3adc94cd07c850d1ce6d0b2fea02c24e9280333152fb794e4ddea02017a6c139b50101caecaf2abc0847a1ff2f7fc3c2b99a96fc4275ad107274e2934a87a4ddcdb112754ca5bdec0ead14b6c0f19a43a2f05c7f0be31491eb8c9ff68236c8600040000000000000000000066e034c81c3cab64e4fc8dc55ce0ada18dcbf31c6e82893add3bee3e10fc873d1d922b0877cbcd95b839d3059d5140a1f742f6e75741e39e5cb6a193e06a1043375b0f61b5d4e17c81baa31b924d84f224baf1221c15fa12313ffbfa7c2730309f66705b71e6205e7cbf3643561eabb9a63fcd604d5cc27e1317ad94cf438d71873e540be16b6ca205081173bd03c4754fc4674812daab482fd390a1c903b5d28a1eb247b5837d7603b92495d5c569f6433c3fca5206cb0000003fdbbd3892c52c2e7612e05de32322e980a3d69931e2c9312dd517c96f2ee90362476ed853c4c9b7d4ebf13cbaa795860e92a3d7d004f2c491db38eb769f094d5d48b262cc35c40682138cf13a49aa9f27abec00002f01ba1251aaf2385416ca719300"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) socket$can_bcm(0x1d, 0x2, 0x2) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000001840)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1b}}, {}, [@snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x5}, {0x3, 0x3, 0x6, 0xa, 0xa}, {0x5, 0x1, 0xb, 0x8, 0xa, 0x4}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x0}, {}, {0x18, 0x2, 0x2, 0x0, r3}, {0x7, 0x0, 0xb, 0x2}, {0x46, 0x0, 0x0, 0x76}}], {{}, {0x6, 0x0, 0xb, 0x8}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x61, 0x11, 0x4}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) syz_init_net_socket$ax25(0x3, 0x2, 0x8) socket$alg(0x26, 0x5, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x20) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r5, &(0x7f0000000000), &(0x7f0000001240)=""/53}, 0x20) 4.735032606s ago: executing program 1 (id=2172): socket$inet6_udplite(0xa, 0x2, 0x88) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000540)={0x1c, r1, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x33}, @void}}}, 0x1c}}, 0x4000054) pipe(&(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r2, &(0x7f0000000200)=[{&(0x7f00000006c0)="e6", 0x1}], 0x1) writev(r2, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000780)="18943582cfc95a4c17de1524e11fa76ef3de37aa294129b5724faee81b4a4dfaf38ea0d1898a56e4606b0eb66c172bfe4a74249a4a1892e26e83ebddb30dc3da36d840eb2a8fa3242601623cacd868eb44e8404ef6d4be9abde6577533f15a8ae4862751092f90d2ef49fc3a1167bcca03427709f911fa58a13c192495baae341afe37c81c375382b33d27d2", 0x8c}, {&(0x7f0000000840)="05dedd1cf5a912d99e4887503ea2ae090f87bed8a5c47601276eceb374be0aadf4d797eaf590f3f15a75c5ffd55de9b4f353088573e5abea5dbde6f70426e0fa6cf00132cff410003b4cff2666b634fd0bc7b700caf45d51f9bb8637e97ef44ae89243a6d1629548cf9ea6d741a361d44e8a989f818bcd86f5cfd3c0c78f984de09e17b72b962ac5573b0dc52ec80f3864b0595f9008dcc1d17ea1b1bd5ecabee7e79dfa99ce85c9fb56214e7b8a82ddd4af7875a6d3115e6a91eec12c69f35edab787", 0xc3}, {&(0x7f0000002680)="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", 0xde8}], 0x4) socket$kcm(0x2c, 0x3, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x3, &(0x7f0000000040)=@framed={{0x45, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0xc8}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = socket$netlink(0x10, 0x3, 0x400000000000004) r4 = socket$xdp(0x2c, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x5c, r6, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_LISTEN_PORT={0x6}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x844}, 0x0) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80fae0090f000000000000a2bc5603ca00000f7f89000000200000004a2471083ec6811778581acb6c0101ff0000000309", 0x48}], 0x1) setsockopt$XDP_TX_RING(r4, 0x11b, 0x3, &(0x7f0000000040), 0x4) 4.676063883s ago: executing program 5 (id=2173): socket$inet6_udplite(0xa, 0x2, 0x88) socket(0x1d, 0x2, 0x6) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r0 = socket$inet6(0xa, 0x806, 0xfffffffd) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000000340)=0x8) listen(r0, 0x3) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_int(r3, 0x0, 0xa, &(0x7f00000010c0)=0xd, 0x3) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, @void, @value}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha1-avx2)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, 0x0, 0x0) r7 = accept4(r6, 0x0, 0x0, 0x80800) sendmmsg$alg(r7, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe1a}], 0x1, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x4924924924924b9, 0x0) accept(r7, &(0x7f0000000000)=@nfc_llcp, &(0x7f0000000100)=0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) ppoll(&(0x7f0000000500)=[{r4}], 0x1, 0x0, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000280)={&(0x7f0000000200)="207e47ace754310b14c8ed568ea36e3566ca25b0472ecbb5163f7e5a3ed9b98120172f47e8064ed28c17903c297aa1dfb00c926b5314fb5538064283e468baf6cf61cf970658962b80a6ed1f52b8", &(0x7f0000000540)=""/234, &(0x7f0000000440)="9d36a6eafbd5009005a0438cf8fe24f893224532362429e81b40fba3a050b59437574a8ca74654e1ca1cc2c9c7a1bd688a3fbeaebd077fde8baa77e5e4ce885fcad1d33403395c71d4dc47d7f3236ed5771b092b998fd57d4f9169f264b8c89edb4b4b2c547529faef51225d343cc207f7d45af24fe0a31baf0d3e7030cd4e629f2665e42e85b6f73a4efb555406d2e8a6187fc0b1337fcfa9189a8223da7bf7be9cb771de1d5e3982aed0", &(0x7f0000000180)="f4a48cf0f49b6a1cff7bdbe4370ce6c655", 0x1d50, r2, 0x4}, 0x38) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 4.158831002s ago: executing program 3 (id=2174): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b30, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge0\x00'}) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x30}}, 0x0) 4.074938447s ago: executing program 2 (id=2175): openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x80001, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6(0xa, 0x3, 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x3, &(0x7f0000001300)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0xe, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x16, 0x0, 0x4, 0xffff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x4, 0x4, 0x9, 0x0, r0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socket$inet6_sctp(0xa, 0x801, 0x84) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x2b, 0x80801, 0x1) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socket$inet6(0xa, 0x3, 0x87) socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, [@call={0x85, 0x0, 0x0, 0xb4}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r1, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 3.9784104s ago: executing program 3 (id=2176): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000480), r1) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)={0x14, r2, 0x72b}, 0x14}}, 0x0) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$DCCPDIAG_GETSOCK(r4, &(0x7f0000002e40)={0x0, 0x0, &(0x7f0000002e00)={&(0x7f0000001a40)={0x50, 0x13, 0x1, 0x70bd2b, 0x25dfdbfd, {0x1d, 0x2, 0x1d, 0x0, {0x4e22, 0x4e20, [0x200, 0x0, 0x1, 0x8], [0x4, 0x81, 0xb3, 0xa0], 0x0, [0x1, 0x9]}, 0x0, 0xfffff2b5}, [@INET_DIAG_REQ_BYTECODE={0x4}]}, 0x50}, 0x1, 0x0, 0x0, 0x5880}, 0xc000) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000140), 0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[], 0x54}}, 0x0) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) accept(r0, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) mmap(&(0x7f000086c000/0x4000)=nil, 0x4000, 0x3000001, 0x8031, r6, 0xba283000) r7 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$EBT_SO_GET_INFO(r7, 0x0, 0x80, &(0x7f0000000000)={'filter\x00'}, &(0x7f0000000080)=0x78) getsockopt$EBT_SO_GET_ENTRIES(r7, 0x0, 0x81, &(0x7f00000003c0)={'nat\x00', 0x0, 0x3, 0x0, [0x5, 0x9, 0xfa, 0x6, 0x10000, 0x8001], 0x0, 0x0, 0x0}, &(0x7f0000000440)=0x78) close(0x4) 3.890128428s ago: executing program 2 (id=2177): r0 = getpid() bind$inet6(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[], 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000250000000e0001006e658264657673692d0000000f0002006e65746465ed73696d30000008008b009bffcc1d5db7308e46ed3dc9a7af5ac348e2b7e53817365cdb125ada9914cd672583d51ed84e78b960593e4a61bfcfa9cfd05fcef669be", @ANYRES32=r0, @ANYBLOB], 0x3c}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={0x0}, 0x18) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) socket$netlink(0x10, 0x3, 0x10) setsockopt$sock_int(r1, 0x1, 0x39, &(0x7f0000000200), 0x4) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$alg(0x26, 0x5, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r5, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r4, &(0x7f0000000800)={0xa0000006}) epoll_pwait(0xffffffffffffffff, &(0x7f0000000c80)=[{}, {}], 0x2, 0x0, 0x0, 0x0) bind$alg(r3, &(0x7f0000000080)={0x26, 'rng\x00', 0x0, 0x0, 'jitterentropy_rng\x00'}, 0x58) r6 = accept(r3, 0x0, 0x0) recvmsg(r6, &(0x7f000000b680)={0x0, 0x0, &(0x7f000000b600)=[{&(0x7f000000b4c0)=""/5, 0x5}], 0x1}, 0x0) 3.824085073s ago: executing program 4 (id=2178): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x8, 0x1c, 0x64, 0x0, 0x0, 0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}, @multicast1}, @address_request}}}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@type_tag={0x0, 0x0, 0x0, 0x12, 0x5}]}}, 0x0, 0x26, 0x0, 0x1, 0x3, 0x0, @void, @value}, 0x28) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@delchain={0x24, 0x2a, 0x7d1cdc3e828018e9, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x2}, {0x0, 0xffff}}}, 0x24}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f00000001c0)={0x3, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x28, 0x0, 0x0, 0x6ebf}, {0x6}]}, 0x10) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x1, 0x70fd2a, 0x25dfdbfc, {{}, {}, {0x8, 0x11, 0x1}}}, 0x24}}, 0x400c0d0) sendmmsg$unix(r5, &(0x7f00000000c0), 0x3f, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendto$inet6(r0, &(0x7f0000000300)="c4", 0x1, 0x0, &(0x7f00000004c0)={0xa, 0x4e23, 0x1, @dev={0xfe, 0x80, '\x00', 0xf}, 0x3}, 0x1c) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r5, 0x84009422, &(0x7f0000000500)={0x0, 0x0, {}, {}, {0x0, @struct}}) r7 = socket(0x28, 0x1, 0x0) connect$packet(r7, &(0x7f0000000100)={0x28, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) ioctl$sock_qrtr_TIOCOUTQ(r7, 0x5411, &(0x7f00000002c0)) socket$nl_netfilter(0x10, 0x3, 0xc) 3.730391079s ago: executing program 1 (id=2179): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f00000022c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040), 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r1, 0x0, 0x62, 0xfe, &(0x7f0000000140)="cb74445b7d4c0b24676c6c71ae37efcedaf40242309766deb4e793f90000000000000000dbc856cbc664650634231454ca2d8034c4ca29e0d99c3b6615e91835a600c08f989af45438a54981be310aad92ae545b1c961e5f3762a51fe4c736edec6f", &(0x7f0000000440)=""/254, 0x0, 0x0, 0x0, 0x194, 0x0, &(0x7f00000007c0)="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", 0x2, 0x0, 0x10000}, 0x50) sendmmsg$inet6(r0, &(0x7f0000001c80)=[{{&(0x7f0000000240)={0xa, 0x4e21, 0x8000001, @private0, 0x3}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000440)="14", 0x1}], 0x1}}, {{&(0x7f0000000300)={0xa, 0x4e24, 0x1, @dev={0xfe, 0x80, '\x00', 0x28}, 0x8}, 0x1c, &(0x7f0000000780)=[{&(0x7f0000000800)='M', 0x1}], 0x1}}], 0x2, 0x931766f6319eed40) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40100, 0x0) tee(r3, r3, 0x100000001, 0x6) ioctl$TUNSETLINK(r3, 0x400454cd, 0x30b) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xb, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000035090100000000009500000000070000b7020000000000007b9a00fe000000006609000003000000dbaaf0ff50000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffff670000000800000018290000", @ANYRES32=r4, @ANYBLOB="0000000004000000b7050000080000004608f0ff760000005e9200000000000056080000010000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback=0xd, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000140)=@generic={&(0x7f0000000040)='./file0\x00', 0x0, 0x18}, 0x18) shutdown(r0, 0x1) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r5, 0x84, 0x76, &(0x7f0000000000)={r7, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000540)={r7, @in6={{0xa, 0x4e24, 0x1, @empty, 0x4}}, 0xc5e1, 0x6, 0xf, 0x5, 0x0, 0x3, 0x5}, 0x9c) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r8, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="24000000030601020000000000000000050000010500010007000000050000000000000064f486546f2c6e0ad888609f1fb28abe8f3b522d180415b7798f90721b49dd2df4f22ca8c068af98756186e6e2910fe6d7838eef31023716ce398b321280a45fc172984326bb208ee130"], 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x20000080) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x83, &(0x7f00000002c0)=@assoc_value, &(0x7f0000000180)=0x8) 3.578529411s ago: executing program 2 (id=2180): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000300)={'ip6_vti0\x00', 0x0}) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) socket$kcm(0x2d, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x42) bpf$ENABLE_STATS(0x20, 0x0, 0x0) ioctl$sock_SIOCGSKNS(r0, 0x894c, 0x0) bind$xdp(0xffffffffffffffff, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x7e10c2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\b\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x3, &(0x7f0000000240)=@framed, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$kcm(0x2, 0x3, 0x2) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000008000f00fc00000018000180140002006e657464657673696d300000000000000800060000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES64=r2], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 3.555106748s ago: executing program 5 (id=2181): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_HEADER(r4, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000580)=ANY=[@ANYBLOB="400000000c06010800000000000000000700000405000100070000000500010007000000050001000700000005000100070000000900020073797a30000017ddebbe339dcf6f00008586e936b0591c5a702bceb10fb7f3d1d75d5ea762f0d460"], 0x40}, 0x1, 0x0, 0x0, 0x44}, 0x50) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000000000000000005000600010000000800090001000000050002"], 0x44}}, 0x0) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000400)="81b641f1f3843704b6", 0x9}], 0x1}, 0x48005) r6 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r6, &(0x7f0000000100)={0x1d, r7, 0x2, {0x0, 0xf0, 0x1}, 0xff}, 0x18) r8 = socket$kcm(0x10, 0x3, 0x10) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000ead248b804184a65a99154ae495d424d5c6b4c4ea85f91862962085ac77543632547f5065cb832cdbe2fac5b783f385053c5e1bac4b7bfc6d7c1cfb228bcb04482ae117acddca354d3defc9d25e32d14cc68a7a52c0b30ea4f4e38816b7aceeed6"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='contention_end\x00', r9}, 0x10) syz_emit_ethernet(0x76, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "f7d8ff", 0x40, 0x3c, 0x0, @local, @mcast2, {[@hopopts={0x0, 0x1ffffd7f, '\x00', [@hao={0xc9, 0x10, @rand_addr=' \x01\x00'}, @hao={0xc9, 0x10, @private0={0xfc, 0x0, '\x00', 0x1}}]}, @hopopts={0x0, 0x0, '\x00', [@generic={0x4, 0x0, "1cc189f4d48147c3d91cdc337ff4ad3bf86bbe429ac70924c72e43a7a69f813b5923485416db7c768b615a0ea16dc0845c205fc9a5064e40ae4811ff51dc50befd520b3ba8f2cb880a0dcb9573411c1937bceff896"}, @enc_lim={0x4, 0x1, 0x1}, @padn={0x1, 0x0, [0x0, 0x0, 0x0]}, @pad1]}, @dstopts={0x32, 0x0, '\x00', [@jumbo={0xc2, 0x4, 0x2}, @enc_lim]}], {0x0, 0x0, 0x10, 0x0, @gue={{0x2, 0x0, 0x1, 0x0, 0x0, @void}}}}}}}}, 0x0) sendmsg$kcm(r8, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000540)="1400000024000b94f01845288200eb141fb220cf", 0x14}], 0x1}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r7, {0xfffd, 0x10}, {0x1, 0x1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x840) 3.309247754s ago: executing program 2 (id=2182): r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x80000) syz_genetlink_get_family_id$fou(&(0x7f0000000040), r2) sendmsg$TIPC_NL_BEARER_ADD(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000700)=ANY=[], 0x180}, 0x1, 0x0, 0x0, 0x2}, 0x2404c011) sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x2c, 0x7, 0x6, 0x101, 0x0, 0x0, {0x3, 0x0, 0x9}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x40) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000340)=0x8000, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000200)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000001780)=0x100000, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r4}, 0x10) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000000)="5c00000015006b05c84e21000ab16d6e230675f802000200360002005817d30461bc24eeb556a705251e6182149a36c23d3b48dfd8cdbf9367b098fa51f60a64c9f408000000e786a6d0bdd70000b6c0504bb9189d9193e9bd1c1b78", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x400000000000004) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000280)={0xffffffff, {{0x2, 0x4e22, @empty}}}, 0x88) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="021800001400000000000000fdfffffe050006006c0000000a000000000000000000000000aa00000000000000000800120000000400feffffff0200000006000000000000000000000000000000fc010000000000000000ffffffff00010a010102000000000000000000000000050005000013b59f13f12002004fdb24d3453246ad0000000a004e2300000000fc0100"/176], 0xa0}}, 0x0) writev(r6, &(0x7f0000000100)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1) 3.024089883s ago: executing program 3 (id=2183): socket$inet6(0xa, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x2, 0x11, 0x15be, 0x5886, 0x801, 0x0, 0x8, 'syz0\x00'}) socket$xdp(0x2c, 0x3, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) socket$xdp(0x2c, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ppoll(&(0x7f0000000500), 0x0, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) write(0xffffffffffffffff, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) 2.878424816s ago: executing program 4 (id=2184): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) pipe(&(0x7f0000000040)={0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, 0x0) write$cgroup_type(r0, &(0x7f0000000040), 0x9) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket(0x2, 0x3, 0xff) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f00000000c0)={0x2, 0xfff9, @multicast1}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$inet6_IPV6_RTHDR(r2, 0x29, 0x39, &(0x7f00000002c0)=ANY=[@ANYBLOB="00020201"], 0x18) r3 = socket$packet(0x11, 0x3, 0x300) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'veth0_to_bond\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0xa, 0x2, 0x73) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0xc}, {0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x20040000) connect$vsock_stream(r1, &(0x7f0000000100)={0x28, 0x0, 0x2710, @local}, 0x10) 2.778856737s ago: executing program 1 (id=2185): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000380)={0xa, 0x14e24}, 0x1c) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000004e80)=@setlink={0x168, 0x13, 0x1, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2006, 0x300}, [@IFLA_MASTER={0x8}, @IFLA_PROTO_DOWN={0x5}, @IFLA_LINK={0x8}, @IFLA_IFNAME={0x14, 0x3, 'batadv0\x00'}, @IFLA_MASTER={0x8}, @IFLA_AF_SPEC={0xf4, 0x1a, 0x0, 0x1, [@AF_INET6={0xf0, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, @IFLA_INET6_ADDR_GEN_MODE={0x5}, @IFLA_INET6_TOKEN={0x14, 0x7, @remote}]}, @AF_INET6={0x0, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x0, 0x8, 0x4}, @IFLA_INET6_TOKEN={0x0, 0x7, @remote}, @IFLA_INET6_TOKEN={0x0, 0x7, @remote}, @IFLA_INET6_ADDR_GEN_MODE={0x0, 0x8, 0x19}, @IFLA_INET6_TOKEN={0x0, 0x7, @remote}, @IFLA_INET6_ADDR_GEN_MODE={0x0, 0x8, 0x24}, @IFLA_INET6_TOKEN={0x0, 0x7, @private0}]}, @AF_BRIDGE={0x4}, @AF_BRIDGE={0x4}, @AF_BRIDGE, @AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @loopback}]}, @AF_INET6={0x50, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5}, @IFLA_INET6_TOKEN={0x14, 0x7, @private2}, @IFLA_INET6_TOKEN={0x14, 0x7, @loopback}, @IFLA_INET6_TOKEN={0x14, 0x7, @dev}, @IFLA_INET6_ADDR_GEN_MODE={0x5}]}, @AF_BRIDGE={0x4}, @AF_BRIDGE={0x4}, @AF_INET={0x10, 0x2, 0x0, 0x1, {0xc, 0x1, 0x0, 0x1, [{0x8}]}}]}, @IFLA_TARGET_NETNSID={0x8, 0x2e, 0x4}, @IFLA_NUM_RX_QUEUES={0x8}, @IFLA_EXT_MASK={0x8}, @IFLA_PROMISCUITY={0x8}]}, 0x168}}, 0x0) socket$tipc(0x1e, 0x5, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) listen(r3, 0x6) socket$inet6_sctp(0xa, 0x5, 0x84) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) ppoll(&(0x7f0000000500)=[{r4}], 0x1, 0x0, 0x0, 0x0) r6 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r6, &(0x7f0000000340)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x0, @local}}, 0x24) listen(r6, 0x4) listen(r6, 0x0) connect$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000000c0)}], 0x1}}], 0x1, 0xc8040) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0) splice(r1, 0x0, r0, 0x0, 0x7ffff000, 0x6) 2.477241693s ago: executing program 5 (id=2186): setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000001f00)) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0xd, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'veth1\x00'}}, 0x1e) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x40a40, 0x0) ioctl$PPPIOCATTCHAN(r2, 0x40047438, &(0x7f0000000040)=0x2) r3 = socket$inet6(0xa, 0x6, 0x0) close(r3) bind$inet6(r3, &(0x7f0000000480)={0xa, 0x0, 0x0, @mcast1={0xff, 0x5}}, 0x1c) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0xfffffffe, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}, 0x7}, 0x1c) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'team_slave_1\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="800000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000005000128009000100766c616e00000000400002800600010000000000340003800c0001000ffe0000000000000c00010094040000000000000c00010000010000000000000c000100040000000000000008000500", @ANYRES32=r8, @ANYBLOB="080003"], 0x80}}, 0x8000) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffff, 0xd}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_MPU={0x8, 0xe, 0xc7}, @TCA_CAKE_RTT={0x8, 0x7, 0x5}]}}]}, 0x44}}, 0x0) ioctl$PPPIOCBRIDGECHAN(r2, 0x40047435, &(0x7f0000000200)=0x1) sendmmsg(r0, &(0x7f0000001640)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) 1.993516151s ago: executing program 3 (id=2187): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000200)={0x0, 0x20, &(0x7f00000000c0)={&(0x7f0000001440)={0x1c, r2, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r1}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 674.709287ms ago: executing program 4 (id=2188): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x3, &(0x7f0000000040)=@framed={{0x45, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0xc8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 672.482526ms ago: executing program 2 (id=2189): socket$inet6_udplite(0xa, 0x2, 0x88) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000540)={0x1c, r1, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x33}, @void}}}, 0x1c}}, 0x4000054) pipe(&(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r2, &(0x7f0000000200)=[{&(0x7f00000006c0)="e6", 0x1}], 0x1) writev(r2, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000780)="18943582cfc95a4c17de1524e11fa76ef3de37aa294129b5724faee81b4a4dfaf38ea0d1898a56e4606b0eb66c172bfe4a74249a4a1892e26e83ebddb30dc3da36d840eb2a8fa3242601623cacd868eb44e8404ef6d4be9abde6577533f15a8ae4862751092f90d2ef49fc3a1167bcca03427709f911fa58a13c192495baae341afe37c81c375382b33d27d2", 0x8c}, {&(0x7f0000000840)="05dedd1cf5a912d99e4887503ea2ae090f87bed8a5c47601276eceb374be0aadf4d797eaf590f3f15a75c5ffd55de9b4f353088573e5abea5dbde6f70426e0fa6cf00132cff410003b4cff2666b634fd0bc7b700caf45d51f9bb8637e97ef44ae89243a6d1629548cf9ea6d741a361d44e8a989f818bcd86f5cfd3c0c78f984de09e17b72b962ac5573b0dc52ec80f3864b0595f9008dcc1d17ea1b1bd5ecabee7e79dfa99ce85c9fb56214e7b8a82ddd4af7875a6d3115e6a91eec12c69f35edab787", 0xc3}, {&(0x7f0000002680)="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", 0xde8}], 0x4) socket$kcm(0x2c, 0x3, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x3, &(0x7f0000000040)=@framed={{0x45, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0xc8}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = socket$netlink(0x10, 0x3, 0x400000000000004) r4 = socket$xdp(0x2c, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x5c, r6, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_LISTEN_PORT={0x6}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x844}, 0x0) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80fae0090f000000000000a2bc5603ca00000f7f89000000200000004a2471083ec6811778581acb6c0101ff0000000309", 0x48}], 0x1) setsockopt$XDP_TX_RING(r4, 0x11b, 0x3, &(0x7f0000000040), 0x4) 588.577109ms ago: executing program 5 (id=2190): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$tipc(0x1e, 0x5, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socket$inet_sctp(0x2, 0x1, 0x84) listen(r0, 0xda90) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r5, @ANYBLOB="1f003300d000000008021100000108021100000050505050505000001502", @ANYRES8=r3], 0x3c}}, 0x10) 542.493501ms ago: executing program 4 (id=2191): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x48, &(0x7f0000000280)=[@in6={0xa, 0x4e21, 0x7ff, @private1={0xfc, 0x1, '\x00', 0x1}, 0xeb2}, @in={0x2, 0x4e20, @remote}, @in6={0xa, 0x4e21, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}, 0x2}]}, &(0x7f0000000180)=0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xa73}}}]}, 0x38}}, 0x24000098) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001300)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x0, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_IP_TTL_MASK={0x5, 0x53, 0xc}, @TCA_FLOWER_KEY_ENC_IP_TTL={0x5}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x804}, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) 417.387868ms ago: executing program 3 (id=2192): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r4) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r5) close(r4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r5, 0x8943, &(0x7f0000000100)={'syzkaller0\x00'}) ioctl$SIOCSIFHWADDR(r4, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @random="110000000002"}) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000064000000030a01010000000000000000010000000900030073797a300000000014000480080002400000000208000140000000000900010073797a300000000008000a40000000021c0008800c00024000000000000000000c0001"], 0xac}}, 0x0) close(r0) r6 = socket(0x2b, 0x80801, 0x1) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40000) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) 231.849205ms ago: executing program 4 (id=2193): socket$kcm(0x11, 0xa, 0x300) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000700000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sock_rcvqueue_full\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000000c0)='sock_rcvqueue_full\x00', r1, 0x0, 0x80000000000}, 0x18) socket$kcm(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) socket$rds(0x15, 0x5, 0x0) pipe(&(0x7f0000000680)) socket$inet_mptcp(0x2, 0x1, 0x106) socket$packet(0x11, 0x3, 0x300) pipe(&(0x7f0000000140)) socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000000000000850000008600000018010000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) unshare(0x20040600) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 101.496615ms ago: executing program 3 (id=2194): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e23, 0x2, 'dh\x00', 0x1, 0x5, 0x4a}, 0x2c) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82187201, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x20) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x400448ca, 0x0) syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000100)=ANY=[@ANYBLOB="80000000080211000001080211000000080211000000000000e3ffffffffffff63822f07c13b1974f100010000060202020202020108"], 0x36) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r3, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000640)=ANY=[@ANYBLOB="fc000000", @ANYRES16=r4, @ANYBLOB="cf0400000000000000001300000008000300", @ANYRES32=r5], 0xfc}, 0x1, 0x0, 0x0, 0xc0}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000181000010000000000000000000000000a40000000060a010400000000000000000200050000000000000400000000000000796e7365740000180002800900010073797a30000000000800044000000000140000001100010000000000000000000000000a"], 0x68}}, 0x0) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB='D\x00\x00', @ANYRES16=r6], 0x44}}, 0x0) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8931, 0x0) setsockopt$CAN_RAW_JOIN_FILTERS(0xffffffffffffffff, 0x65, 0x6, 0x0, 0x0) ioctl$FS_IOC_GETFSLABEL(r7, 0x400452c8, &(0x7f0000000100)) 0s ago: executing program 4 (id=2195): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f0000001b40)={0x0, 0x0, &(0x7f0000001b00)={0x0}, 0x1, 0x0, 0x0, 0x20048040}, 0x4000) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) socket$packet(0x11, 0x3, 0x300) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_BT_SECURITY(r3, 0x112, 0x4, &(0x7f0000003000)={0x2}, 0x2) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000ec0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x5, 0xc6, &(0x7f0000000540)=""/198, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) ppoll(&(0x7f0000000500)=[{r4}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x1, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000000)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x1, 0x7fffffff}, 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETSNDBUF(r2, 0x400454d4, &(0x7f0000000340)=0x1) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close(r6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) kernel console output (not intermixed with test programs): ive control failed (result -107) [ 161.780853][ T7875] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 161.891548][ T7882] bond3: (slave veth7): Enslaving as an active interface with a down link [ 162.215089][ T7901] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input12 [ 163.026054][ T7928] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input13 [ 163.342997][ T7942] netlink: 2 bytes leftover after parsing attributes in process `syz.0.666'. [ 163.365836][ T7942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 163.392633][ T7943] netlink: 8 bytes leftover after parsing attributes in process `syz.1.665'. [ 163.397146][ T7942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.447406][ T7942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 163.515132][ T7942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.547994][ T7942] batadv_slave_1: entered promiscuous mode [ 164.592541][ T7983] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input14 [ 165.005436][ T7992] tipc: Started in network mode [ 165.010470][ T7992] tipc: Node identity 6, cluster identity 4711 [ 165.105501][ T7992] tipc: Node number set to 6 [ 165.121302][ T7997] netlink: 12 bytes leftover after parsing attributes in process `syz.0.684'. [ 165.146305][ T7993] netlink: 16 bytes leftover after parsing attributes in process `syz.2.685'. [ 165.706952][ T8010] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input15 [ 166.484904][ T8039] netlink: 4 bytes leftover after parsing attributes in process `syz.2.700'. [ 166.522513][ T8039] netlink: 4 bytes leftover after parsing attributes in process `syz.2.700'. [ 166.655690][ T12] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 166.978600][ T8049] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input16 [ 167.371783][ T8053] bridge0: port 4(gretap0) entered blocking state [ 167.380696][ T8053] bridge0: port 4(gretap0) entered disabled state [ 167.388330][ T8053] gretap0: entered allmulticast mode [ 167.407430][ T8053] gretap0: left allmulticast mode [ 167.921830][ T8077] batadv_slave_1: entered promiscuous mode [ 167.937764][ T13] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 168.478953][ T8089] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input17 [ 168.783961][ T8098] pimreg: entered allmulticast mode [ 168.918101][ T8090] pimreg: left allmulticast mode [ 168.946953][ T8105] netlink: 24 bytes leftover after parsing attributes in process `syz.1.721'. [ 168.963175][ T8103] tipc: Enabled bearer , priority 10 [ 169.256754][ T8114] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 169.766345][ T8128] netlink: 8 bytes leftover after parsing attributes in process `syz.3.728'. [ 171.144171][ T8173] netlink: 8 bytes leftover after parsing attributes in process `syz.0.746'. [ 171.349240][ T8176] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 171.358159][ T8176] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 171.367004][ T8176] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 171.375840][ T8176] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 171.420307][ T8176] vxlan0: entered promiscuous mode [ 171.427055][ T8176] vxlan0: entered allmulticast mode [ 171.433241][ T8176] bond0: (slave vxlan0): Enslaving as an active interface with an up link [ 171.478341][ T8182] bond_slave_0: entered promiscuous mode [ 171.484299][ T8182] bond_slave_1: entered promiscuous mode [ 171.501039][ T8182] macsec1: entered promiscuous mode [ 171.509140][ T8184] netlink: 8 bytes leftover after parsing attributes in process `syz.2.752'. [ 171.511025][ T8182] bond0: entered promiscuous mode [ 171.530774][ T8182] bond0: left promiscuous mode [ 171.550800][ T8182] bond_slave_0: left promiscuous mode [ 171.556309][ T8182] bond_slave_1: left promiscuous mode [ 171.661962][ T8189] netlink: 8 bytes leftover after parsing attributes in process `syz.1.753'. [ 171.690254][ T8189] netlink: 4 bytes leftover after parsing attributes in process `syz.1.753'. [ 171.749591][ T8189] netlink: 'syz.1.753': attribute type 1 has an invalid length. [ 171.763119][ T8189] netlink: 10 bytes leftover after parsing attributes in process `syz.1.753'. [ 171.786164][ T12] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 171.849525][ T5848] block nbd1: Receive control failed (result -107) [ 173.057756][ T1095] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 173.276463][ T8242] bridge0: entered promiscuous mode [ 173.282153][ T8242] vlan2: entered promiscuous mode [ 173.918833][ T8263] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input18 [ 174.186182][ T8269] bond0 (unregistering): left allmulticast mode [ 174.192495][ T8269] bond_slave_0: left allmulticast mode [ 174.198411][ T8269] bond_slave_1: left allmulticast mode [ 174.205149][ T8269] vxlan0: left allmulticast mode [ 174.210636][ T8269] bond0 (unregistering): left promiscuous mode [ 174.219588][ T8269] bond_slave_0: left promiscuous mode [ 174.225661][ T8269] bond_slave_1: left promiscuous mode [ 174.231480][ T8269] vxlan0: left promiscuous mode [ 174.244668][ T8269] bridge0: port 3(macvlan3) entered disabled state [ 174.262457][ T8269] team0: Port device macvlan2 removed [ 174.280360][ T8269] macvlan3 (unregistering): left allmulticast mode [ 174.287008][ T8269] macvlan3 (unregistering): left promiscuous mode [ 174.293550][ T8269] bridge0: port 3(macvlan3) entered disabled state [ 174.328470][ T8269] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 174.351126][ T8269] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 174.397602][ T8269] bond0 (unregistering): (slave vxlan0): Releasing backup interface [ 174.421540][ T8269] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 174.430957][ T8269] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 174.440073][ T8269] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 174.449039][ T8269] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 174.477190][ T8269] bond0 (unregistering): Released all slaves [ 174.618645][ T8278] netlink: 32 bytes leftover after parsing attributes in process `syz.3.786'. [ 174.627936][ T8278] netlink: 168 bytes leftover after parsing attributes in process `syz.3.786'. [ 174.639508][ T8278] netlink: 168 bytes leftover after parsing attributes in process `syz.3.786'. [ 174.661446][ T8278] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 176.039982][ T36] tipc: Subscription rejected, illegal request [ 176.300013][ T8337] netlink: 16 bytes leftover after parsing attributes in process `syz.1.804'. [ 176.318692][ T8337] netlink: 20 bytes leftover after parsing attributes in process `syz.1.804'. [ 176.381812][ T52] IPVS: starting estimator thread 0... [ 176.384557][ T8337] geneve2: entered allmulticast mode [ 176.479269][ T8341] IPVS: using max 25 ests per chain, 60000 per kthread [ 177.124705][ T8360] netlink: 'syz.1.816': attribute type 10 has an invalid length. [ 177.539581][ T1095] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 177.579195][ T8372] netlink: 24 bytes leftover after parsing attributes in process `syz.2.820'. [ 177.977745][ T8386] netlink: 16 bytes leftover after parsing attributes in process `syz.3.825'. [ 178.180721][ T12] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 178.354619][ T8370] RDS: rds_bind could not find a transport for ::ffff:172.20.20.187, load rds_tcp or rds_rdma? [ 178.368100][ T978] IPVS: starting estimator thread 0... [ 178.475840][ T8398] IPVS: using max 28 ests per chain, 67200 per kthread [ 178.909418][ T1095] IPVS: stop unused estimator thread 0... [ 179.574600][ T8427] tun0: tun_chr_ioctl cmd 2147767520 [ 180.439102][ T8446] netlink: 'syz.4.844': attribute type 1 has an invalid length. [ 180.501039][ T8446] bond0: entered promiscuous mode [ 180.506342][ T8446] bond_slave_0: entered promiscuous mode [ 180.513405][ T8446] bond_slave_1: entered promiscuous mode [ 180.520227][ T8446] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 180.530021][ T8446] bond4: (slave macvlan3): Enslaving as a backup interface with an up link [ 182.027459][ T8478] syzkaller0: entered promiscuous mode [ 182.032986][ T8478] syzkaller0: entered allmulticast mode [ 182.320529][ T8489] netlink: 8 bytes leftover after parsing attributes in process `syz.2.856'. [ 183.304292][ T5949] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 183.846845][ T8505] netlink: 8 bytes leftover after parsing attributes in process `syz.1.863'. [ 183.856098][ T8505] netlink: 8 bytes leftover after parsing attributes in process `syz.1.863'. [ 183.925653][ T8510] netlink: 8 bytes leftover after parsing attributes in process `syz.1.863'. [ 183.938491][ T1095] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 184.027155][ T8513] tipc: Enabled bearer , priority 10 [ 184.172136][ T8518] tipc: Started in network mode [ 184.195492][ T8518] tipc: Node identity 080211000001, cluster identity 4711 [ 184.202839][ T8518] tipc: Enabled bearer , priority 0 [ 184.250011][ T8525] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode [ 184.273951][ T8525] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode [ 184.302667][ T8529] syzkaller1: entered promiscuous mode [ 184.309239][ T8529] syzkaller1: entered allmulticast mode [ 185.315658][ T5891] tipc: Node number set to 134418688 [ 185.446764][ T8559] netlink: 'syz.2.880': attribute type 7 has an invalid length. [ 185.454480][ T8559] netlink: 8 bytes leftover after parsing attributes in process `syz.2.880'. [ 185.661622][ T8568] pimreg: entered allmulticast mode [ 185.670988][ T8571] tipc: Enabled bearer , priority 10 [ 185.691980][ T8564] pimreg: left allmulticast mode [ 185.900832][ T8578] netlink: 3 bytes leftover after parsing attributes in process `syz.0.897'. [ 185.946596][ T8578] batadv1: entered promiscuous mode [ 185.952003][ T8578] batadv1: entered allmulticast mode [ 185.997463][ T8583] netlink: 3 bytes leftover after parsing attributes in process `syz.0.897'. [ 186.054863][ T8583] batadv1: entered promiscuous mode [ 186.075279][ T8583] batadv1: entered allmulticast mode [ 186.574441][ T52] IPVS: starting estimator thread 0... [ 186.585695][ T8580] RDS: rds_bind could not find a transport for ::ffff:172.20.20.187, load rds_tcp or rds_rdma? [ 186.696507][ T8602] IPVS: using max 25 ests per chain, 60000 per kthread [ 186.954987][ T5952] IPVS: stop unused estimator thread 0... [ 186.982346][ T8614] netlink: 4 bytes leftover after parsing attributes in process `syz.2.894'. [ 187.061098][ T8616] IPVS: length: 78 != 8 [ 187.353926][ T8619] mac80211_hwsim hwsim5 syzkaller0: left promiscuous mode [ 187.361457][ T8619] mac80211_hwsim hwsim5 syzkaller0: left allmulticast mode [ 187.623589][ T8626] netlink: 12 bytes leftover after parsing attributes in process `syz.1.900'. [ 187.859346][ T8634] netlink: 40 bytes leftover after parsing attributes in process `syz.4.905'. [ 188.153217][ T5848] Bluetooth: hci2: link tx timeout [ 188.158915][ T5848] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 188.420467][ T1095] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 188.929877][ T8659] bpq0: entered promiscuous mode [ 188.934987][ T8659] bpq0: entered allmulticast mode [ 189.416913][ T8674] netlink: 16 bytes leftover after parsing attributes in process `syz.1.920'. [ 189.443209][ T8674] team0: entered promiscuous mode [ 189.448902][ T8674] team_slave_0: entered promiscuous mode [ 189.454938][ T8674] team_slave_1: entered promiscuous mode [ 189.469765][ T8674] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 189.484748][ T8674] team0: left promiscuous mode [ 189.497325][ T8674] team_slave_0: left promiscuous mode [ 189.503533][ T8674] team_slave_1: left promiscuous mode [ 189.697589][ T1155] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 189.857251][ T5893] IPVS: starting estimator thread 0... [ 189.863358][ T8663] RDS: rds_bind could not find a transport for ::ffff:172.20.20.187, load rds_tcp or rds_rdma? [ 189.955751][ T8690] IPVS: using max 27 ests per chain, 64800 per kthread [ 190.176553][ T5852] Bluetooth: hci2: command 0x0406 tx timeout [ 190.410868][ T8701] netlink: 'syz.4.925': attribute type 39 has an invalid length. [ 190.740056][ T1095] IPVS: stop unused estimator thread 0... [ 190.903951][ T8705] netlink: 32 bytes leftover after parsing attributes in process `syz.0.937'. [ 191.471717][ T8725] syzkaller1: entered promiscuous mode [ 191.477419][ T8725] syzkaller1: entered allmulticast mode [ 191.573061][ T8727] netlink: 16 bytes leftover after parsing attributes in process `syz.3.932'. [ 191.605674][ T8727] team0: entered promiscuous mode [ 191.611137][ T8727] team_slave_0: entered promiscuous mode [ 191.632843][ T8727] team_slave_1: entered promiscuous mode [ 191.654637][ T8727] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 191.672851][ T8727] team0: left promiscuous mode [ 191.679821][ T8727] team_slave_0: left promiscuous mode [ 191.691891][ T8727] team_slave_1: left promiscuous mode [ 191.941458][ T8729] netlink: 8 bytes leftover after parsing attributes in process `syz.2.933'. [ 191.958056][ T8729] netlink: 8 bytes leftover after parsing attributes in process `syz.2.933'. [ 192.036773][ T8730] netlink: 8 bytes leftover after parsing attributes in process `syz.2.933'. [ 192.518775][ T8747] netlink: 'syz.1.939': attribute type 1 has an invalid length. [ 192.750048][ T8749] bond0: entered promiscuous mode [ 192.755741][ T8749] bond0: entered allmulticast mode [ 192.762017][ T8749] 8021q: adding VLAN 0 to HW filter on device bond0 [ 192.839742][ T8750] ip6gretap1: entered promiscuous mode [ 192.850021][ T8750] ip6gretap1: entered allmulticast mode [ 192.857944][ T5949] bond0: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 192.871378][ T8750] bond0: (slave ip6gretap1): Enslaving as an active interface with an up link [ 192.960234][ T5893] IPVS: starting estimator thread 0... [ 192.971196][ T8732] RDS: rds_bind could not find a transport for ::ffff:172.20.20.187, load rds_tcp or rds_rdma? [ 193.005639][ T1155] bond0: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 193.065523][ T8756] IPVS: using max 27 ests per chain, 64800 per kthread [ 193.306094][ T8762] netlink: 32 bytes leftover after parsing attributes in process `syz.1.943'. [ 193.554055][ T53] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 193.731227][ T5949] IPVS: stop unused estimator thread 0... [ 194.211248][ T8788] netlink: 16 bytes leftover after parsing attributes in process `syz.4.950'. [ 194.257783][ T8788] team0: entered promiscuous mode [ 194.283315][ T8788] team_slave_0: entered promiscuous mode [ 194.299528][ T8788] team_slave_1: entered promiscuous mode [ 194.321838][ T8788] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 194.337691][ T8777] RDS: rds_bind could not find a transport for ::ffff:172.20.20.187, load rds_tcp or rds_rdma? [ 194.352917][ T8788] team0: left promiscuous mode [ 194.358039][ T52] IPVS: starting estimator thread 0... [ 194.363870][ T8788] team_slave_0: left promiscuous mode [ 194.377885][ T8788] team_slave_1: left promiscuous mode [ 194.435104][ T8795] netlink: 4 bytes leftover after parsing attributes in process `syz.2.951'. [ 194.455630][ T8794] IPVS: using max 26 ests per chain, 62400 per kthread [ 194.529768][ T8795] bridge_slave_1 (unregistering): left allmulticast mode [ 194.550866][ T8795] bridge_slave_1 (unregistering): left promiscuous mode [ 194.574016][ T8795] bridge0: port 2(bridge_slave_1) entered disabled state [ 195.167611][ T8810] netlink: 132 bytes leftover after parsing attributes in process `syz.4.956'. [ 195.215171][ T8812] netlink: 'syz.3.955': attribute type 1 has an invalid length. [ 195.333786][ T1108] IPVS: stop unused estimator thread 0... [ 195.334880][ T8813] batadv_slave_1: entered promiscuous mode [ 195.382596][ T8815] bond0: entered promiscuous mode [ 195.393158][ T8815] bond_slave_0: entered promiscuous mode [ 195.404788][ T8815] bond_slave_1: entered promiscuous mode [ 195.414345][ T8815] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 195.430297][ T8815] bond2: (slave macvlan2): Enslaving as a backup interface with an up link [ 195.456864][ T13] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 195.877287][ T8809] batadv_slave_1: left promiscuous mode [ 196.704881][ T8851] netlink: 12 bytes leftover after parsing attributes in process `syz.4.966'. [ 196.954237][ T8867] xt_hashlimit: size too large, truncated to 1048576 [ 196.998271][ T8869] netlink: 4 bytes leftover after parsing attributes in process `syz.2.974'. [ 197.257707][ T8876] netlink: 16 bytes leftover after parsing attributes in process `syz.4.977'. [ 197.278293][ T8876] netlink: 20 bytes leftover after parsing attributes in process `syz.4.977'. [ 197.427714][ T8879] netlink: 'syz.0.978': attribute type 27 has an invalid length. [ 197.552133][ T8879] bridge0: port 2(bridge_slave_1) entered disabled state [ 197.560005][ T8879] bridge0: port 1(bridge_slave_0) entered disabled state [ 197.732204][ T8879] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 197.803902][ T8879] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 197.816680][ T8879] batadv_slave_1: left promiscuous mode [ 198.003151][ T8879] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 198.084590][ T8879] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.108417][ T8879] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.123811][ T8879] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.134782][ T8879] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.147983][ T8879] geneve2: left allmulticast mode [ 198.170814][ T8879] bond1: left promiscuous mode [ 198.180280][ T8879] ip6gretap1: left promiscuous mode [ 198.185888][ T8879] bond1: left allmulticast mode [ 198.190895][ T8879] ip6gretap1: left allmulticast mode [ 198.283294][ T8884] 8021q: adding VLAN 0 to HW filter on device bond0 [ 198.294130][ T8884] 8021q: adding VLAN 0 to HW filter on device team0 [ 198.313172][ T8884] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 198.864268][ T8904] netlink: 24 bytes leftover after parsing attributes in process `syz.0.998'. [ 199.060241][ T8904] netlink: 24 bytes leftover after parsing attributes in process `syz.0.998'. [ 199.232679][ T8923] mac80211_hwsim hwsim9 syzkaller0: entered promiscuous mode [ 199.285703][ T8923] mac80211_hwsim hwsim9 syzkaller0: entered allmulticast mode [ 199.300052][ T1155] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 199.507486][ T8933] netlink: 16 bytes leftover after parsing attributes in process `syz.0.988'. [ 199.523948][ T8932] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode [ 199.533484][ T8932] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode [ 199.591777][ T8933] team0: entered promiscuous mode [ 199.604157][ T8933] team_slave_0: entered promiscuous mode [ 199.611107][ T8933] team_slave_1: entered promiscuous mode [ 199.624390][ T8933] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 199.656600][ T8933] team0: left promiscuous mode [ 199.661475][ T8933] team_slave_0: left promiscuous mode [ 199.668026][ T8933] team_slave_1: left promiscuous mode [ 199.852908][ T8942] netlink: 'syz.1.993': attribute type 11 has an invalid length. [ 199.894287][ T8942] netlink: 428 bytes leftover after parsing attributes in process `syz.1.993'. [ 201.162414][ T8976] netlink: 'syz.2.1019': attribute type 1 has an invalid length. [ 201.219850][ T8976] bond3: entered promiscuous mode [ 201.224960][ T8976] bond3: entered allmulticast mode [ 201.235653][ T53] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 201.235888][ T8976] 8021q: adding VLAN 0 to HW filter on device bond3 [ 201.389178][ T8976] ip6gretap0: entered promiscuous mode [ 201.395124][ T8976] ip6gretap0: entered allmulticast mode [ 201.402155][ T8976] bond3: (slave ip6gretap0): Enslaving as a backup interface with an up link [ 201.445465][ T5952] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 201.595628][ T5952] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 201.884057][ T8994] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1025'. [ 201.903836][ T8994] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1025'. [ 202.310075][ T9006] tipc: Enabled bearer , priority 0 [ 203.402321][ T9029] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1026'. [ 203.919838][ T9042] netlink: 19 bytes leftover after parsing attributes in process `syz.0.1031'. [ 204.535073][ T9048] netlink: 'syz.4.1033': attribute type 27 has an invalid length. [ 204.569439][ T9048] tipc: Resetting bearer [ 204.763235][ T9048] bridge0: port 1(bridge_slave_0) entered disabled state [ 205.159908][ T9048] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 205.180321][ T9048] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 205.539112][ T9048] vti0: left promiscuous mode [ 205.572127][ T9048] batadv_slave_0: left promiscuous mode [ 205.657575][ T9048] vlan2: left promiscuous mode [ 205.662532][ T9048] bond1: left promiscuous mode [ 205.678009][ T9048] ip6gretap1: left promiscuous mode [ 205.683574][ T9048] vlan2: left allmulticast mode [ 205.703658][ T9048] bond1: left allmulticast mode [ 205.712114][ T9048] ip6gretap1: left allmulticast mode [ 205.747987][ T9048] bond2: left promiscuous mode [ 205.762098][ T9048] batadv1: left promiscuous mode [ 205.767306][ T9048] batadv1: left allmulticast mode [ 205.773616][ T9048] batadv2: left promiscuous mode [ 205.778904][ T9048] batadv2: left allmulticast mode [ 205.803731][ T9048] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.812526][ T9048] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.824673][ T9048] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.833473][ T9048] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.842920][ T9048] geneve2: left allmulticast mode [ 205.854168][ T9048] bond0: left promiscuous mode [ 205.859441][ T9048] bond_slave_0: left promiscuous mode [ 205.865054][ T9048] bond_slave_1: left promiscuous mode [ 205.941170][ T9052] 8021q: adding VLAN 0 to HW filter on device bond0 [ 205.953549][ T9052] 8021q: adding VLAN 0 to HW filter on device team0 [ 205.972382][ T9052] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 206.341567][ T9081] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1043'. [ 206.398206][ T9080] vlan2: entered promiscuous mode [ 206.456652][ T9081] team0: entered promiscuous mode [ 206.462075][ T9081] team_slave_0: entered promiscuous mode [ 206.475542][ T9081] team_slave_1: entered promiscuous mode [ 206.484044][ T9081] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 206.499605][ T9081] team0: left promiscuous mode [ 206.512535][ T9081] team_slave_0: left promiscuous mode [ 206.524311][ T9081] team_slave_1: left promiscuous mode [ 206.783658][ T9087] netlink: 'syz.2.1047': attribute type 39 has an invalid length. [ 207.493021][ T9110] netlink: 19 bytes leftover after parsing attributes in process `syz.2.1053'. [ 208.098737][ T9119] xt_hashlimit: size too large, truncated to 1048576 [ 208.171513][ T9125] netlink: 'syz.0.1066': attribute type 1 has an invalid length. [ 208.350870][ T9125] 8021q: adding VLAN 0 to HW filter on device bond2 [ 208.444528][ T9130] ip6erspan0: entered promiscuous mode [ 208.533727][ T9133] netlink: 'syz.3.1058': attribute type 1 has an invalid length. [ 208.682424][ T9133] bond3: entered promiscuous mode [ 208.698971][ T9133] bond3: entered allmulticast mode [ 208.704549][ T9133] 8021q: adding VLAN 0 to HW filter on device bond3 [ 208.758444][ T9141] netlink: 'syz.2.1072': attribute type 1 has an invalid length. [ 208.808242][ T9137] netlink: 19 bytes leftover after parsing attributes in process `syz.1.1070'. [ 208.850710][ T9149] netlink: 'syz.3.1061': attribute type 39 has an invalid length. [ 208.863598][ T9141] 8021q: adding VLAN 0 to HW filter on device bond4 [ 208.882994][ T9143] vlan3: entered promiscuous mode [ 208.888398][ T9143] bond0: entered promiscuous mode [ 208.893518][ T9143] bond_slave_0: entered promiscuous mode [ 208.899894][ T9143] bond_slave_1: entered promiscuous mode [ 208.935232][ T9147] bond4: (slave ip6gretap1): making interface the new active one [ 208.943687][ T9147] bond4: (slave ip6gretap1): Enslaving as an active interface with an up link [ 209.063062][ T9141] vlan2: entered promiscuous mode [ 209.072955][ T9141] bond4: entered promiscuous mode [ 209.078825][ T9141] ip6gretap1: entered promiscuous mode [ 209.084636][ T9141] vlan2: entered allmulticast mode [ 209.104610][ T9141] bond4: entered allmulticast mode [ 209.119189][ T9153] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1063'. [ 209.133344][ T9141] ip6gretap1: entered allmulticast mode [ 211.619020][ T5841] Bluetooth: hci1: command 0x0406 tx timeout [ 211.619037][ T5152] Bluetooth: hci3: command 0x0406 tx timeout [ 211.619077][ T5152] Bluetooth: hci4: command 0x0406 tx timeout [ 212.567607][ T9181] netlink: 'syz.3.1075': attribute type 1 has an invalid length. [ 212.696382][ T9181] 8021q: adding VLAN 0 to HW filter on device bond4 [ 212.732733][ T9184] ip6erspan0: entered promiscuous mode [ 213.977482][ T9171] Set syz1 is full, maxelem 65536 reached [ 214.032248][ T9186] netlink: 'syz.4.1076': attribute type 1 has an invalid length. [ 214.070778][ T9186] bond5: entered promiscuous mode [ 214.076050][ T9186] bond5: entered allmulticast mode [ 214.086990][ T9186] 8021q: adding VLAN 0 to HW filter on device bond5 [ 214.123794][ T9186] ip6gretap2: entered promiscuous mode [ 214.154946][ T9186] ip6gretap2: entered allmulticast mode [ 214.168792][ T9186] bond5: (slave ip6gretap2): Enslaving as a backup interface with an up link [ 214.178875][ T53] bond5: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 214.206340][ T9190] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1078'. [ 214.339155][ T53] bond5: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 214.708462][ T9205] netlink: 'syz.0.1081': attribute type 1 has an invalid length. [ 214.785489][ T9209] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1080'. [ 214.794499][ T9209] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1080'. [ 214.865692][ T9205] 8021q: adding VLAN 0 to HW filter on device bond3 [ 214.892040][ T9209] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.936354][ T9209] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.966486][ T9209] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.990374][ T9209] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.005321][ T9209] geneve2: entered allmulticast mode [ 215.040313][ T9210] bond3: (slave veth5): Enslaving as an active interface with a down link [ 215.090736][ T9205] bond3: (slave dummy0): making interface the new active one [ 215.105733][ T9205] dummy0: entered promiscuous mode [ 215.111433][ T9205] bond3: (slave dummy0): Enslaving as an active interface with an up link [ 215.127420][ T9193] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1077'. [ 215.399013][ T9217] netlink: 'syz.1.1084': attribute type 27 has an invalid length. [ 215.504899][ T9217] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.512740][ T9217] bridge0: port 1(bridge_slave_0) entered disabled state [ 215.776176][ T9217] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 216.253310][ T9217] tipc: Resetting bearer [ 216.293005][ T9217] mac80211_hwsim hwsim5 syzkaller0: left promiscuous mode [ 216.352911][ T9217] mac80211_hwsim hwsim5 syzkaller0: left allmulticast mode [ 216.416878][ T9217] ip6erspan0: left promiscuous mode [ 216.439794][ T9217] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.463609][ T9217] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.493328][ T9217] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.512615][ T9217] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.540635][ T9217] geneve2: left allmulticast mode [ 216.560300][ T9217] bond0: left promiscuous mode [ 216.565124][ T9217] ip6gretap1: left promiscuous mode [ 216.596182][ T9217] bond0: left allmulticast mode [ 216.608466][ T9217] ip6gretap1: left allmulticast mode [ 216.803967][ T9221] 8021q: adding VLAN 0 to HW filter on device team0 [ 216.835374][ T9221] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 216.979046][ T5971] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 217.154785][ T9240] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1090'. [ 217.164490][ T5952] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 217.185341][ T9240] netlink: 'syz.3.1090': attribute type 7 has an invalid length. [ 217.193110][ T9240] netlink: 'syz.3.1090': attribute type 8 has an invalid length. [ 217.193970][ T9239] syzkaller1: entered promiscuous mode [ 217.237683][ T9240] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1090'. [ 217.247522][ T9239] syzkaller1: entered allmulticast mode [ 217.303010][ T9240] syz_tun: entered promiscuous mode [ 217.311974][ T9240] gretap0: entered promiscuous mode [ 217.326775][ T9240] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 217.345635][ T5971] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 217.363119][ T9240] Cannot create hsr debugfs directory [ 218.179047][ T5952] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 218.188752][ T5952] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 218.287121][ T9266] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1097'. [ 218.301555][ T9266] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1097'. [ 218.344005][ T5893] IPVS: starting estimator thread 0... [ 218.417756][ T9266] geneve2: entered allmulticast mode [ 218.445414][ T9268] IPVS: using max 27 ests per chain, 64800 per kthread [ 218.786012][ T9275] netlink: 'syz.2.1098': attribute type 1 has an invalid length. [ 218.904431][ T9277] ip6erspan0: entered promiscuous mode [ 218.971896][ T9275] 8021q: adding VLAN 0 to HW filter on device bond5 [ 219.137519][ T5888] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 219.160354][ T9284] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1100'. [ 219.191844][ T9284] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1100'. [ 219.534345][ T9290] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1117'. [ 219.599589][ T9290] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1117'. [ 219.726458][ T9281] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1099'. [ 220.098356][ T9302] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1109'. [ 220.136800][ T9302] netlink: 'syz.0.1109': attribute type 7 has an invalid length. [ 220.177558][ T9302] netlink: 'syz.0.1109': attribute type 8 has an invalid length. [ 220.212919][ T9302] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1109'. [ 220.532655][ T9315] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1127'. [ 220.584392][ T9315] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 220.604696][ T9315] bridge0: port 3(macvlan2) entered blocking state [ 220.623952][ T9315] bridge0: port 3(macvlan2) entered disabled state [ 220.643432][ T9315] macvlan2: entered allmulticast mode [ 220.665608][ T9315] bond0: entered allmulticast mode [ 220.683362][ T9315] bond_slave_0: entered allmulticast mode [ 220.700716][ T9315] bond_slave_1: entered allmulticast mode [ 220.726345][ T9315] macvlan2: entered promiscuous mode [ 220.740932][ T9315] bond0: entered promiscuous mode [ 220.757921][ T9315] bond_slave_0: entered promiscuous mode [ 220.779279][ T9315] bond_slave_1: entered promiscuous mode [ 220.805599][ T9315] bridge0: port 3(macvlan2) entered blocking state [ 220.812320][ T9315] bridge0: port 3(macvlan2) entered forwarding state [ 221.887165][ T9337] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1122'. [ 221.919466][ T9337] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1122'. [ 221.963104][ T9341] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1134'. [ 222.003220][ T9341] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1134'. [ 222.072024][ T9322] syz_tun: left promiscuous mode [ 222.255428][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 224.190000][ T9389] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 224.199113][ T9389] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 224.207926][ T9389] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 224.216695][ T9389] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 224.275008][ T9389] vxlan0: entered promiscuous mode [ 224.310219][ T9389] vxlan0: entered allmulticast mode [ 224.330538][ T9389] bond0: (slave vxlan0): Enslaving as an active interface with an up link [ 225.207298][ T9403] netlink: 'syz.3.1144': attribute type 27 has an invalid length. [ 225.260672][ T9403] tipc: Resetting bearer [ 225.412656][ T9403] bridge0: port 2(bridge_slave_1) entered disabled state [ 225.420431][ T9403] bridge0: port 1(bridge_slave_0) entered disabled state [ 225.800342][ T9403] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 225.839145][ T9403] batadv_slave_1: left promiscuous mode [ 226.158467][ T9403] veth5: left promiscuous mode [ 226.164393][ T9403] tipc: Resetting bearer [ 226.188214][ T9403] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode [ 226.203684][ T9403] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode [ 226.223699][ T9403] bond3: left promiscuous mode [ 226.229172][ T9403] bond3: left allmulticast mode [ 226.241847][ T9403] ip6erspan0: left promiscuous mode [ 226.252636][ T9403] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.267577][ T9403] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.279116][ T9403] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.291089][ T9403] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.301929][ T9403] geneve2: left allmulticast mode [ 226.380818][ T9406] 8021q: adding VLAN 0 to HW filter on device bond0 [ 226.397678][ T9406] 8021q: adding VLAN 0 to HW filter on device team0 [ 226.413950][ T9406] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 226.540795][ T9429] syzkaller0: entered promiscuous mode [ 226.552844][ T9429] syzkaller0: entered allmulticast mode [ 226.566492][ T9] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 226.764473][ T9] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 226.861951][ T5952] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 227.145605][ T1155] dummy0: left promiscuous mode [ 227.865156][ T9463] __nla_validate_parse: 5 callbacks suppressed [ 227.871681][ T9463] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1168'. [ 228.330994][ T9467] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1159'. [ 228.578669][ T9484] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1162'. [ 228.595319][ T9484] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1162'. [ 229.904185][ T5949] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 229.912345][ T5949] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 229.945318][ T9488] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1163'. [ 230.215418][ T9] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 230.655434][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 231.153264][ T9523] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1173'. [ 231.174043][ T9523] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1173'. [ 231.353726][ T9517] bond4: (slave macvlan3): Releasing backup interface [ 231.391012][ T9517] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 231.410284][ T9517] bond_slave_0: left promiscuous mode [ 231.431157][ T9517] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 231.452120][ T9517] bond_slave_1: left promiscuous mode [ 231.466494][ T9517] bond0 (unregistering): Released all slaves [ 231.774035][ T9532] netlink: 'syz.2.1178': attribute type 1 has an invalid length. [ 231.941936][ T9532] 8021q: adding VLAN 0 to HW filter on device bond6 [ 232.073828][ T9535] bond6: (slave veth11): Enslaving as an active interface with a down link [ 232.159083][ T9539] bond6: (slave dummy0): making interface the new active one [ 232.168117][ T9539] dummy0: entered promiscuous mode [ 232.173873][ T9539] bond6: (slave dummy0): Enslaving as an active interface with an up link [ 232.478827][ T9540] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1179'. [ 233.253638][ T9563] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1197'. [ 233.281841][ T9566] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input19 [ 233.367863][ T9567] batadv_slave_1: entered promiscuous mode [ 233.587846][ T9562] batadv_slave_1: left promiscuous mode [ 234.237668][ T9587] netlink: 'syz.2.1194': attribute type 27 has an invalid length. [ 234.255693][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 234.301871][ T9587] tipc: Resetting bearer [ 234.503711][ T9587] batadv_slave_1: left promiscuous mode [ 234.510359][ T9587] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 234.536326][ T9587] mac80211_hwsim hwsim9 syzkaller0: left promiscuous mode [ 234.543750][ T9587] mac80211_hwsim hwsim9 syzkaller0: left allmulticast mode [ 234.573398][ T9587] bond3: left promiscuous mode [ 234.600251][ T9587] ip6gretap0: left promiscuous mode [ 234.616107][ T9587] bond3: left allmulticast mode [ 234.621427][ T9587] ip6gretap0: left allmulticast mode [ 234.693230][ T9587] vlan2: left promiscuous mode [ 234.698868][ T9587] bond4: left promiscuous mode [ 234.708962][ T9587] ip6gretap1: left promiscuous mode [ 234.726203][ T9587] vlan2: left allmulticast mode [ 234.759454][ T9587] bond4: left allmulticast mode [ 234.788602][ T9587] ip6gretap1: left allmulticast mode [ 234.828414][ T9587] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.864164][ T9587] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.885305][ T9587] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.905476][ T9587] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.942473][ T9587] geneve2: left allmulticast mode [ 234.970988][ T9587] ip6erspan0: left promiscuous mode [ 235.217362][ T9591] 8021q: adding VLAN 0 to HW filter on device bond0 [ 235.268015][ T9591] 8021q: adding VLAN 0 to HW filter on device team0 [ 235.315798][ T9591] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 235.359088][ T9612] sit0: entered promiscuous mode [ 235.403166][ T9612] netlink: 'syz.3.1201': attribute type 1 has an invalid length. [ 235.411121][ T9612] netlink: 1 bytes leftover after parsing attributes in process `syz.3.1201'. [ 235.759398][ T9635] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input20 [ 235.889621][ T9640] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1207'. [ 235.955497][ T9640] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1207'. [ 236.035294][ T9640] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1207'. [ 236.045634][ T9640] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1207'. [ 236.172578][ T9643] xt_nfacct: accounting object `syz1' does not exists [ 237.520737][ T9676] netlink: 'syz.1.1219': attribute type 4 has an invalid length. [ 237.568796][ T9680] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1221'. [ 237.599349][ T9680] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1221'. [ 237.639422][ T9680] netlink: 'syz.4.1221': attribute type 1 has an invalid length. [ 237.661584][ T9680] netlink: 10 bytes leftover after parsing attributes in process `syz.4.1221'. [ 237.739520][ T55] block nbd2: Receive control failed (result -107) [ 237.832142][ T9692] xt_hashlimit: size too large, truncated to 1048576 [ 238.353462][ T9705] sit0: entered promiscuous mode [ 238.371529][ T9705] netlink: 'syz.1.1230': attribute type 1 has an invalid length. [ 238.389895][ T9705] netlink: 1 bytes leftover after parsing attributes in process `syz.1.1230'. [ 238.689555][ T9715] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1232'. [ 239.192849][ T9725] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 239.221449][ T9725] netdevsim netdevsim0 netdevsim0: left allmulticast mode [ 239.664227][ T9731] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap0 [ 239.679133][ T9731] ip6gretap0: entered promiscuous mode [ 239.684979][ T9731] vlan2: entered promiscuous mode [ 239.736112][ T9736] netlink: 'syz.0.1237': attribute type 27 has an invalid length. [ 239.927817][ T9739] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1238'. [ 239.931229][ T9736] bridge0: port 3(macvlan2) entered disabled state [ 239.950022][ T9739] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1238'. [ 239.979698][ T9739] netlink: 'syz.3.1238': attribute type 1 has an invalid length. [ 239.993377][ T9736] ip6erspan0: left promiscuous mode [ 239.996175][ T9739] netlink: 10 bytes leftover after parsing attributes in process `syz.3.1238'. [ 240.031261][ T9742] xt_hashlimit: size too large, truncated to 1048576 [ 240.042594][ T9736] bond0: left allmulticast mode [ 240.059211][ T9736] bond_slave_0: left allmulticast mode [ 240.066022][ T55] block nbd3: Receive control failed (result -107) [ 240.075366][ T9736] bond_slave_1: left allmulticast mode [ 240.084639][ T9736] vxlan0: left allmulticast mode [ 240.105516][ T9736] bond0: left promiscuous mode [ 240.114873][ T9736] bond_slave_0: left promiscuous mode [ 240.191788][ T9736] bond_slave_1: left promiscuous mode [ 240.232638][ T9736] vxlan0: left promiscuous mode [ 240.335545][ T9736] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 240.344546][ T9736] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 240.353703][ T9736] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 240.362670][ T9736] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 240.478478][ T9752] xt_hashlimit: max too large, truncated to 1048576 [ 240.671241][ T9737] 8021q: adding VLAN 0 to HW filter on device bond0 [ 240.679741][ T9737] 8021q: adding VLAN 0 to HW filter on device team0 [ 240.697373][ T9737] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 240.752183][ T9756] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1243'. [ 241.949127][ T9792] netlink: 'syz.4.1255': attribute type 27 has an invalid length. [ 241.987055][ T9792] tipc: Resetting bearer [ 242.144513][ T9792] bond5: left promiscuous mode [ 242.149746][ T9792] ip6gretap2: left promiscuous mode [ 242.155416][ T9792] bond5: left allmulticast mode [ 242.160399][ T9792] ip6gretap2: left allmulticast mode [ 242.317594][ T9794] 8021q: adding VLAN 0 to HW filter on device team0 [ 242.370278][ T9802] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1267'. [ 242.469042][ T9794] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 242.525403][ T9797] netlink: 'syz.3.1256': attribute type 15 has an invalid length. [ 242.797613][ T9815] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1260'. [ 242.815466][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 242.899944][ T9815] pim6reg9: entered allmulticast mode [ 243.681681][ T9843] macvlan2 (unregistering): left allmulticast mode [ 243.694768][ T9843] macvlan2 (unregistering): left promiscuous mode [ 243.705255][ T9843] bridge0: port 3(macvlan2) entered disabled state [ 243.744447][ T9843] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 243.761633][ T9843] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 243.777176][ T9843] bond0 (unregistering): (slave vxlan0): Releasing backup interface [ 243.777685][ T5852] Bluetooth: hci2: command 0x0406 tx timeout [ 243.801739][ T9843] bond0 (unregistering): Released all slaves [ 244.185722][ T9861] netlink: 'syz.0.1273': attribute type 15 has an invalid length. [ 244.380009][ T9874] ip6t_rpfilter: unknown options [ 244.472166][ T9876] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1288'. [ 244.621870][ T9880] vlan3: entered promiscuous mode [ 244.627127][ T9880] vlan2: entered promiscuous mode [ 244.632185][ T9880] gretap0: entered promiscuous mode [ 245.225910][ T9899] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1289'. [ 245.257046][ T9899] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap0 [ 245.278861][ T9899] ip6gretap0: entered promiscuous mode [ 245.288642][ T9899] vlan2: entered promiscuous mode [ 245.294149][ T9902] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1291'. [ 245.599669][ T9914] xt_policy: neither incoming nor outgoing policy selected [ 246.015418][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 246.332176][ T9933] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1301'. [ 246.505461][ T9935] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0 [ 246.520703][ T9935] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0 [ 246.521083][ T9933] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1301'. [ 246.549661][ T9935] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0 [ 246.564005][ T9935] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0 [ 246.590777][ T9935] bond5: (slave geneve3): Enslaving as an active interface with an up link [ 246.612164][ T9933] 8021q: adding VLAN 0 to HW filter on device bond5 [ 246.831933][ T9949] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1307'. [ 246.855260][ T9949] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1307'. [ 246.902800][ T9949] dummy0: entered promiscuous mode [ 246.932729][ T9949] dummy0: left promiscuous mode [ 247.182851][ T9965] tipc: Resetting bearer [ 247.205492][ T9965] tipc: Resetting bearer [ 247.222866][ T9960] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1311'. [ 247.277423][ T9960] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 247.403162][ T9977] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1315'. [ 248.253489][T10009] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1325'. [ 248.358365][T10017] bridge_slave_0: left allmulticast mode [ 248.364069][T10017] bridge_slave_0: left promiscuous mode [ 248.370557][T10017] bridge0: port 1(bridge_slave_0) entered disabled state [ 248.517423][T10023] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input21 [ 250.001851][T10049] __nla_validate_parse: 1 callbacks suppressed [ 250.001872][T10049] netlink: 26 bytes leftover after parsing attributes in process `syz.3.1337'. [ 251.233917][T10056] smc: net device bond0 applied user defined pnetid SYZ0 [ 251.266260][T10057] smc: net device bond0 erased user defined pnetid SYZ0 [ 251.361983][T10062] netlink: 368 bytes leftover after parsing attributes in process `syz.1.1341'. [ 251.371443][T10062] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1341'. [ 251.450941][T10068] smc: net device bond0 applied user defined pnetid SYZ0 [ 251.525035][T10068] smc: net device bond0 erased user defined pnetid SYZ0 [ 252.122983][T10087] bridge0: entered allmulticast mode [ 252.390531][T10098] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 252.886108][T10115] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1360'. [ 252.978959][T10115] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 253.817739][T10128] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1363'. [ 254.577016][T10131] xt_TCPMSS: Only works on TCP SYN packets [ 254.918985][T10137] vlan3: entered promiscuous mode [ 254.924144][T10137] team0: entered promiscuous mode [ 254.957933][T10142] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1369'. [ 254.986871][T10137] team_slave_0: entered promiscuous mode [ 254.993178][T10137] team_slave_1: entered promiscuous mode [ 255.236681][T10151] netlink: 'syz.2.1373': attribute type 1 has an invalid length. [ 255.386235][T10151] 8021q: adding VLAN 0 to HW filter on device bond7 [ 255.678085][T10160] bond7: (slave veth15): Enslaving as an active interface with a down link [ 255.786676][T10171] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1378'. [ 255.860707][T10151] bond7: (slave veth17): Enslaving as an active interface with a down link [ 255.917383][T10162] bond7: (slave vlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 256.201204][T10174] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap0 [ 256.320956][T10177] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap0 [ 256.594786][T10192] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1386'. [ 256.617591][T10192] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1386'. [ 256.655761][T10192] netlink: 'syz.0.1386': attribute type 1 has an invalid length. [ 256.689143][T10192] netlink: 10 bytes leftover after parsing attributes in process `syz.0.1386'. [ 256.729077][T10192] nbd: socks must be embedded in a SOCK_ITEM attr [ 256.740988][T10192] block nbd4: shutting down sockets [ 256.889708][T10209] netlink: 'syz.0.1392': attribute type 1 has an invalid length. [ 256.947611][T10209] 8021q: adding VLAN 0 to HW filter on device bond0 [ 256.993837][T10209] bond0: (slave veth7): Enslaving as an active interface with a down link [ 257.043204][T10214] netlink: 368 bytes leftover after parsing attributes in process `syz.3.1395'. [ 257.093109][T10214] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1395'. [ 257.118914][T10209] bond0: (slave veth9): Enslaving as an active interface with a down link [ 257.171787][T10219] bond0: (slave vlan4): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 257.359935][T10222] vlan2: entered promiscuous mode [ 257.388515][T10222] team0: entered promiscuous mode [ 257.399352][T10222] team_slave_0: entered promiscuous mode [ 257.425683][T10222] team_slave_1: entered promiscuous mode [ 257.489137][T10225] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1398'. [ 257.809550][T10231] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap0 [ 257.930836][T10229] syzkaller0: entered promiscuous mode [ 257.936931][T10229] syzkaller0: entered allmulticast mode [ 257.955792][T10233] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap0 [ 258.004716][T10237] macsec1: entered promiscuous mode [ 258.011942][T10237] team0: entered promiscuous mode [ 258.017583][T10237] team_slave_0: entered promiscuous mode [ 258.029055][T10237] team_slave_1: entered promiscuous mode [ 258.040850][T10237] team0: left promiscuous mode [ 258.046624][T10237] team_slave_0: left promiscuous mode [ 258.065800][T10237] team_slave_1: left promiscuous mode [ 258.222282][T10246] netlink: 'syz.1.1407': attribute type 12 has an invalid length. [ 258.238866][T10246] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1407'. [ 258.298442][T10248] netlink: 368 bytes leftover after parsing attributes in process `syz.2.1409'. [ 258.323373][T10244] smc: net device bond0 applied user defined pnetid SYZ0 [ 258.323797][T10252] xt_nat: multiple ranges no longer supported [ 258.341799][T10249] smc: net device bond0 erased user defined pnetid SYZ0 [ 258.348981][T10248] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1409'. [ 258.871837][T10267] bond_slave_0: entered allmulticast mode [ 260.095413][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 261.214598][T10325] __nla_validate_parse: 3 callbacks suppressed [ 261.214619][T10325] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1432'. [ 261.269059][T10328] netlink: 'syz.0.1431': attribute type 13 has an invalid length. [ 261.591468][T10336] netlink: 'syz.1.1434': attribute type 1 has an invalid length. [ 261.593226][T10338] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1433'. [ 261.639409][T10338] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1433'. [ 261.789827][T10342] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 261.804127][T10342] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 262.832452][T10370] netlink: 'syz.0.1452': attribute type 4 has an invalid length. [ 262.980693][T10374] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1445'. [ 263.013204][T10374] dummy0: entered promiscuous mode [ 263.024215][T10374] dummy0: left promiscuous mode [ 263.733045][T10397] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1451'. [ 263.967638][T10402] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1453'. [ 266.231578][T10453] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1469'. [ 266.531525][T10456] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1471'. [ 266.549343][T10456] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1471'. [ 266.551624][T10459] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1470'. [ 266.604287][T10456] dummy0: entered promiscuous mode [ 266.629437][T10456] dummy0: left promiscuous mode [ 267.408816][T10477] dummy0: entered promiscuous mode [ 267.451103][T10477] macsec1: entered promiscuous mode [ 267.504464][T10477] batman_adv: batadv0: Adding interface: macsec1 [ 267.544630][T10477] batman_adv: batadv0: The MTU of interface macsec1 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 267.651726][T10477] batman_adv: batadv0: Interface activated: macsec1 [ 267.938803][T10486] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input22 [ 268.214528][T10490] vlan3: entered promiscuous mode [ 268.235308][T10490] vlan2: entered promiscuous mode [ 268.432334][T10496] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1486'. [ 268.443213][T10494] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1485'. [ 268.519301][T10494] pim6reg9: entered allmulticast mode [ 269.158983][T10508] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1488'. [ 269.185970][T10508] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1488'. [ 269.226096][T10508] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:24) already exists on: macsec1 [ 269.277496][T10508] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.325709][T10508] dummy0: entered promiscuous mode [ 269.359470][T10508] dummy0: left promiscuous mode [ 269.999779][T10528] netlink: 'syz.1.1493': attribute type 13 has an invalid length. [ 270.392419][T10528] tipc: Resetting bearer [ 270.484877][T10528] batman_adv: batadv0: Interface deactivated: macsec1 [ 270.776592][T10547] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1496'. [ 271.889794][T10563] dummy0: entered promiscuous mode [ 271.901446][T10563] macsec1: entered promiscuous mode [ 271.921227][T10563] batman_adv: batadv0: Adding interface: macsec1 [ 271.929655][T10563] batman_adv: batadv0: The MTU of interface macsec1 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 271.955929][T10563] batman_adv: batadv0: Interface activated: macsec1 [ 272.476312][T10562] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1513'. [ 272.748350][T10579] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1503'. [ 272.758157][T10579] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1503'. [ 272.761087][T10575] vlan3: entered promiscuous mode [ 273.924098][T10606] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1517'. [ 273.987439][T10609] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1526'. [ 274.614668][T10610] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1518'. [ 274.870152][T10637] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1525'. [ 275.909573][T10660] netlink: 'syz.3.1531': attribute type 13 has an invalid length. [ 276.005894][T10660] tipc: Resetting bearer [ 276.247055][T10669] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1532'. [ 276.457975][T10660] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 276.475598][T10660] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 276.484928][T10660] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 276.495778][T10660] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 276.511904][T10660] batman_adv: batadv0: Interface deactivated: macsec1 [ 276.718948][T10660] syz.3.1531 (10660) used greatest stack depth: 18792 bytes left [ 277.139896][T10685] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1533'. [ 277.326245][T10688] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1534'. [ 277.765794][T10705] tipc: Failed to remove unknown binding: 66,1,1/415500686:3661051283/3661051285 [ 277.789079][T10705] tipc: Failed to remove unknown binding: 66,1,1/415500686:3661051283/3661051285 [ 277.809476][T10705] tipc: Failed to remove unknown binding: 66,1,1/415500686:3661051283/3661051285 [ 279.412841][T10746] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1567'. [ 279.789243][T10751] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 280.154574][T10759] sit0: left promiscuous mode [ 280.166450][T10759] macsec1: left promiscuous mode [ 280.695522][T10773] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1563'. [ 280.699149][T10774] sctp: [Deprecated]: syz.0.1561 (pid 10774) Use of struct sctp_assoc_value in delayed_ack socket option. [ 280.699149][T10774] Use struct sctp_sack_info instead [ 280.741423][T10775] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1562'. [ 280.752904][T10768] netlink: 'syz.0.1561': attribute type 1 has an invalid length. [ 280.880581][T10768] 8021q: adding VLAN 0 to HW filter on device bond1 [ 281.078091][T10774] bond1: (slave gretap1): making interface the new active one [ 281.130893][T10774] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 281.831353][T10816] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1574'. [ 282.099565][T10827] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1576'. [ 282.255357][ T5852] Bluetooth: hci2: command 0x0406 tx timeout [ 283.067232][T10849] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1580'. [ 283.204346][T10855] dummy0: entered promiscuous mode [ 283.603632][T10865] sctp: [Deprecated]: syz.2.1583 (pid 10865) Use of struct sctp_assoc_value in delayed_ack socket option. [ 283.603632][T10865] Use struct sctp_sack_info instead [ 283.692746][T10862] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 284.003332][T10867] syzkaller0: entered promiscuous mode [ 284.039936][T10867] syzkaller0: entered allmulticast mode [ 284.110128][T10885] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1587'. [ 285.735461][T10887] vlan0: entered promiscuous mode [ 285.810954][T10896] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 285.920255][T10897] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 285.969625][T10906] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input23 [ 286.280118][T10904] bond2: (slave macvlan2): Releasing backup interface [ 286.313675][T10904] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 286.336053][T10904] bond_slave_0: left promiscuous mode [ 286.350495][T10904] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 286.364512][T10904] bond_slave_1: left promiscuous mode [ 286.371132][T10904] bond0 (unregistering): Released all slaves [ 286.408219][T10922] ipvlan0: entered promiscuous mode [ 286.723488][T10937] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1605'. [ 287.010254][T10951] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1610'. [ 287.044343][T10951] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1610'. [ 287.057859][T10951] netlink: 'syz.2.1610': attribute type 1 has an invalid length. [ 287.108727][T10951] netlink: 10 bytes leftover after parsing attributes in process `syz.2.1610'. [ 287.260886][ T55] block nbd4: Receive control failed (result -107) [ 287.882810][T10983] netlink: 'syz.1.1620': attribute type 10 has an invalid length. [ 288.661398][T10975] netlink: 'syz.4.1618': attribute type 6 has an invalid length. [ 288.703120][T11012] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1626'. [ 289.096939][T11024] netlink: 'syz.3.1628': attribute type 15 has an invalid length. [ 289.241658][T11028] xt_hashlimit: size too large, truncated to 1048576 [ 289.326624][T11032] : renamed from bond0 [ 289.663449][T11042] bpq0: left promiscuous mode [ 289.675402][T11042] bpq0: left allmulticast mode [ 289.766872][T11050] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1633'. [ 289.894008][T11053] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 290.258927][T11067] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1638'. [ 290.464696][T11080] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1641'. [ 290.509564][T11083] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1642'. [ 290.543162][T11083] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1642'. [ 291.146286][T11102] bridge_slave_1: left allmulticast mode [ 291.185362][T11102] bridge_slave_1: left promiscuous mode [ 291.191223][T11102] bridge0: port 2(bridge_slave_1) entered disabled state [ 291.224175][T11102] bridge_slave_0: left allmulticast mode [ 291.237066][T11102] bridge_slave_0: left promiscuous mode [ 291.252665][T11102] bridge0: port 1(bridge_slave_0) entered disabled state [ 292.050682][T11139] __nla_validate_parse: 1 callbacks suppressed [ 292.050705][T11139] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1653'. [ 292.259511][T11144] netlink: 'syz.1.1654': attribute type 10 has an invalid length. [ 292.466426][T11144] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1654'. [ 292.584580][T11144] batman_adv: batadv0: Adding interface: virt_wifi0 [ 292.660200][T11144] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 292.755439][T11144] batman_adv: batadv0: Interface activated: virt_wifi0 [ 293.777829][T11201] netlink: 'syz.1.1667': attribute type 10 has an invalid length. [ 293.815256][T11201] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1667'. [ 293.888160][T11201] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.923288][T11208] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1668'. [ 293.969938][T11201] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.016877][T11157] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1656'. [ 294.066713][T11201] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.093635][T11201] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.128920][T11201] geneve0: entered promiscuous mode [ 294.135932][T11201] team0: Port device geneve0 added [ 294.607230][T11216] smc: net device bond0 applied user defined pnetid SYZ0 [ 294.616153][T11219] smc: net device bond0 erased user defined pnetid SYZ0 [ 294.868425][T11243] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 295.312005][T11264] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1680'. [ 295.450475][T11271] netlink: 'syz.3.1681': attribute type 1 has an invalid length. [ 295.533811][T11271] bond0: entered promiscuous mode [ 295.594589][T11271] 8021q: adding VLAN 0 to HW filter on device bond0 [ 295.688201][T11274] 8021q: adding VLAN 0 to HW filter on device bond0 [ 295.705555][T11274] bond0: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 295.725248][T11274] bond0: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 295.758002][T11274] bond0: (slave ip6gre1): making interface the new active one [ 295.775359][T11274] ip6gre1: entered promiscuous mode [ 295.783828][T11274] bond0: (slave ip6gre1): Enslaving as an active interface with an up link [ 295.816053][T11276] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1683'. [ 296.608645][T11314] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 296.765680][T11318] netlink: 'syz.4.1694': attribute type 15 has an invalid length. [ 297.002388][T11331] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1696'. [ 297.191291][T11339] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1697'. [ 297.476803][T11339] bridge_slave_1: left allmulticast mode [ 297.482839][T11339] bridge_slave_1: left promiscuous mode [ 297.499890][T11339] bridge0: port 2(bridge_slave_1) entered disabled state [ 297.531602][T11339] bridge_slave_0: left allmulticast mode [ 297.543491][T11339] bridge_slave_0: left promiscuous mode [ 297.553399][T11339] bridge0: port 1(bridge_slave_0) entered disabled state [ 297.608367][T11339] bridge0 (unregistering): left promiscuous mode [ 297.762662][T11300] tipc: Enabling of bearer rejected, failed to enable media [ 297.820731][T11357] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap3 [ 297.865783][T11357] batman_adv: batadv0: Adding interface: ip6gretap3 [ 297.882437][T11357] batman_adv: batadv0: The MTU of interface ip6gretap3 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 297.933041][T11357] batman_adv: batadv0: Interface activated: ip6gretap3 [ 298.111245][T11364] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1704'. [ 298.247211][T11370] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1705'. [ 298.302378][T11370] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 298.352784][T11370] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 298.416928][T11376] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1707'. [ 298.438690][T11376] netlink: 'syz.1.1707': attribute type 1 has an invalid length. [ 298.776173][ T30] audit: type=1800 audit(1744426401.728:2): pid=11390 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1709" name="memory.events" dev="tmpfs" ino=1810 res=0 errno=0 [ 298.880372][ T30] audit: type=1804 audit(1744426401.758:3): pid=11390 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.1709" name="memory.events" dev="tmpfs" ino=1810 res=1 errno=0 [ 299.885577][T11416] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1714'. [ 300.141898][T11416] bridge_slave_1: left allmulticast mode [ 300.155243][T11416] bridge_slave_1: left promiscuous mode [ 300.161093][T11416] bridge0: port 2(bridge_slave_1) entered disabled state [ 300.216382][T11416] bridge_slave_0: left allmulticast mode [ 300.222087][T11416] bridge_slave_0: left promiscuous mode [ 300.256141][T11416] bridge0: port 1(bridge_slave_0) entered disabled state [ 300.547091][T11432] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input24 [ 300.573961][T11433] netlink: 'syz.1.1716': attribute type 15 has an invalid length. [ 300.963624][T11443] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode [ 300.989577][T11443] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode [ 301.040815][T11448] netlink: 'syz.0.1721': attribute type 10 has an invalid length. [ 301.050095][T11448] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1721'. [ 301.080977][T11448] batman_adv: batadv0: Adding interface: virt_wifi0 [ 301.101126][T11448] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 301.175367][T11448] batman_adv: batadv0: Interface activated: virt_wifi0 [ 301.438256][T11430] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1719'. [ 302.326457][T11475] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1728'. [ 302.358282][T11475] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1728'. [ 302.554309][T11486] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1728'. [ 302.575992][T11478] xt_hashlimit: size too large, truncated to 1048576 [ 302.629839][T11487] : renamed from bond0 (while UP) [ 303.045025][T11493] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1731'. [ 303.134328][T11493] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1731'. [ 304.125065][T11515] netlink: 'syz.2.1737': attribute type 16 has an invalid length. [ 304.161581][T11515] netlink: 'syz.2.1737': attribute type 17 has an invalid length. [ 304.197122][T11515] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 304.480576][T11530] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1741'. [ 304.494103][T11530] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1741'. [ 304.557292][T11530] netlink: 'syz.4.1741': attribute type 1 has an invalid length. [ 304.585257][T11530] netlink: 10 bytes leftover after parsing attributes in process `syz.4.1741'. [ 304.607195][T11535] netlink: 'syz.3.1742': attribute type 10 has an invalid length. [ 304.615083][T11535] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1742'. [ 304.722916][T11535] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.756313][T11535] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.797899][T11535] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.854258][T11535] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.914593][T11535] team0: Port device geneve0 added [ 304.938324][ T5852] block nbd5: Receive control failed (result -107) [ 305.241998][T11543] nlmon0: Master is either lo or non-ether device [ 305.340427][T11547] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1745'. [ 305.610300][T11558] netlink: 'syz.3.1748': attribute type 2 has an invalid length. [ 305.775375][ T5852] Bluetooth: hci2: command 0x0406 tx timeout [ 305.901084][T11568] IPVS: Error connecting to the multicast addr [ 306.608934][T11589] smc: net device bond0 applied user defined pnetid SYZ0 [ 306.658353][T11589] smc: net device bond0 erased user defined pnetid SYZ0 [ 306.719374][T11591] netlink: 'syz.2.1754': attribute type 1 has an invalid length. [ 306.921580][T11596] 8021q: adding VLAN 0 to HW filter on device bond8 [ 308.483956][T11658] xt_hashlimit: size too large, truncated to 1048576 [ 308.609615][T11653] : renamed from bond0 [ 308.678325][T11664] veth0_to_bond: entered promiscuous mode [ 308.744449][T11664] sit0: left promiscuous mode [ 308.776645][T11664] __nla_validate_parse: 5 callbacks suppressed [ 308.776664][T11664] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1783'. [ 308.936878][T11664] veth0_to_bond (unregistering): left promiscuous mode [ 309.224331][T11683] sctp: [Deprecated]: syz.3.1776 (pid 11683) Use of struct sctp_assoc_value in delayed_ack socket option. [ 309.224331][T11683] Use struct sctp_sack_info instead [ 309.277254][T11679] netlink: 'syz.3.1776': attribute type 1 has an invalid length. [ 309.393514][T11679] 8021q: adding VLAN 0 to HW filter on device bond2 [ 309.711236][T11705] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1778'. [ 310.101875][T11714] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1781'. [ 310.180181][T11721] team0: Port device team_slave_0 removed [ 310.275789][T11721] team0: Port device team_slave_1 removed [ 310.316141][T11721] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 310.390888][T11721] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.415333][T11721] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.435324][T11721] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.484934][T11721] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.542715][T11721] team0: Port device geneve0 removed [ 310.549367][T11721] bond1: (slave ip6gretap1): Releasing backup interface [ 310.571753][T11721] bond1: (slave ip6gretap1): the permanent HWaddr of slave - ba:92:1f:e1:17:d7 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 310.591849][T11721] bond1: (slave veth5): Releasing backup interface [ 310.602461][T11721] bond5: (slave geneve3): Releasing backup interface [ 310.614399][T11721] batman_adv: batadv0: Removing interface: macsec1 [ 310.624036][T11721] : (slave ip6gre1): Releasing backup interface [ 310.637360][T11721] ip6gre1: left promiscuous mode [ 310.993704][T11755] netlink: 'syz.4.1792': attribute type 4 has an invalid length. [ 311.398263][T11778] xt_socket: unknown flags 0x8 [ 311.699244][T11791] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1797'. [ 312.311211][T11818] netlink: 148 bytes leftover after parsing attributes in process `syz.2.1805'. [ 312.724613][T11814] netlink: 'syz.4.1804': attribute type 5 has an invalid length. [ 313.090202][T11842] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1808'. [ 314.367281][ T5852] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 314.376382][ T5852] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 314.387604][ T5852] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 314.399560][ T5852] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 314.410575][ T5852] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 314.711979][T11876] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1815'. [ 314.773923][T11879] netlink: 'syz.3.1817': attribute type 1 has an invalid length. [ 314.782702][T11879] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1817'. [ 314.825409][T11879] block nbd0: NBD_DISCONNECT [ 314.841003][T11879] block nbd0: Send disconnect failed -107 [ 314.860344][T11879] block nbd0: shutting down sockets [ 315.261804][T11864] chnl_net:caif_netlink_parms(): no params data found [ 315.467171][T11900] netlink: 5 bytes leftover after parsing attributes in process `syz.4.1821'. [ 315.480100][T11903] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input25 [ 315.792727][T11864] bridge0: port 1(bridge_slave_0) entered blocking state [ 315.814161][T11864] bridge0: port 1(bridge_slave_0) entered disabled state [ 315.843387][T11864] bridge_slave_0: entered allmulticast mode [ 315.859096][T11864] bridge_slave_0: entered promiscuous mode [ 315.872939][T11864] bridge0: port 2(bridge_slave_1) entered blocking state [ 315.888114][T11864] bridge0: port 2(bridge_slave_1) entered disabled state [ 315.899752][T11864] bridge_slave_1: entered allmulticast mode [ 315.917909][T11864] bridge_slave_1: entered promiscuous mode [ 316.202119][T11864] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 316.226014][T11940] tipc: Failed to remove unknown binding: 66,3,3/2130706433:2410472007/2410472008 [ 316.261547][T11864] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 316.497236][ T55] Bluetooth: hci4: command tx timeout [ 316.519443][T11864] team0: Port device team_slave_0 added [ 316.590938][T11864] team0: Port device team_slave_1 added [ 316.730174][T11864] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 316.748848][T11864] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 316.844643][T11864] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 316.915467][ T30] audit: type=1800 audit(1744426419.838:4): pid=11948 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1828" name="memory.events" dev="tmpfs" ino=1957 res=0 errno=0 [ 316.967948][T11864] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 316.974941][T11864] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 317.046589][T11864] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 317.322554][T11864] hsr_slave_0: entered promiscuous mode [ 317.355980][T11864] hsr_slave_1: entered promiscuous mode [ 317.361473][T11979] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1839'. [ 317.370846][T11864] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 317.385413][T11864] Cannot create hsr debugfs directory [ 317.402547][T11979] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1839'. [ 317.432948][T11979] netlink: 'syz.4.1839': attribute type 1 has an invalid length. [ 317.449200][T11979] netlink: 10 bytes leftover after parsing attributes in process `syz.4.1839'. [ 317.529681][ T55] block nbd0: Receive control failed (result -107) [ 317.549646][T11991] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1840'. [ 318.188543][T12012] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1846'. [ 318.544171][T11864] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 318.575440][ T5852] Bluetooth: hci4: command tx timeout [ 318.582424][T11864] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 318.677667][T11864] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 318.740228][T11864] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 318.983287][T12030] netlink: 'syz.1.1847': attribute type 3 has an invalid length. [ 319.142622][T11864] 8021q: adding VLAN 0 to HW filter on device bond0 [ 319.231428][T11864] 8021q: adding VLAN 0 to HW filter on device team0 [ 319.270327][T12033] bond6: (slave dummy0): Releasing active interface [ 319.280903][T12033] dummy0: left promiscuous mode [ 319.315787][T12033] bond0: (slave bond_slave_0): Releasing backup interface [ 319.326789][T12033] bond_slave_0: left promiscuous mode [ 319.334290][T12033] bond0: (slave bond_slave_1): Releasing backup interface [ 319.343616][T12033] bond_slave_1: left promiscuous mode [ 319.372165][T12033] team0: Port device team_slave_0 removed [ 319.410456][T12033] team0: Port device team_slave_1 removed [ 319.444284][T12033] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 319.478940][T12033] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 319.500161][T12033] bond0: (slave wlan1): Releasing backup interface [ 319.510990][T12033] mac80211_hwsim hwsim9 wlan1: left promiscuous mode [ 319.524497][T12033] bond2: (slave macvlan2): Releasing backup interface [ 319.534987][T12033] bond3: (slave ip6gretap0): Removing an active aggregator [ 319.544657][T12033] bond3: (slave ip6gretap0): Releasing backup interface [ 319.554022][T12033] bond4: (slave ip6gretap1): Releasing active interface [ 319.563935][T12033] bond6: (slave veth11): Releasing active interface [ 319.573262][T12033] bond7: (slave veth15): Releasing active interface [ 319.580577][T12033] bond7: (slave veth15): the permanent HWaddr of slave - 62:73:7f:78:2d:56 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 319.611020][T12033] bond7: (slave veth17): Releasing active interface [ 319.660053][ T1155] bridge0: port 1(bridge_slave_0) entered blocking state [ 319.667334][ T1155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 319.761787][ T5952] bridge0: port 2(bridge_slave_1) entered blocking state [ 319.769076][ T5952] bridge0: port 2(bridge_slave_1) entered forwarding state [ 320.016874][T12060] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input26 [ 320.476283][T12071] netlink: 'syz.1.1859': attribute type 4 has an invalid length. [ 320.655886][ T5852] Bluetooth: hci4: command 0x040f tx timeout [ 320.820724][T11864] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 321.948781][T12115] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1868'. [ 322.746049][ T55] Bluetooth: hci4: command 0x040f tx timeout [ 324.845605][ T55] Bluetooth: hci4: command 0x040f tx timeout [ 324.888925][T12120] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 324.991820][T11864] veth0_vlan: entered promiscuous mode [ 325.023768][T11864] veth1_vlan: entered promiscuous mode [ 325.100000][T11864] veth0_macvtap: entered promiscuous mode [ 325.129581][ T30] audit: type=1800 audit(1744426428.088:5): pid=12134 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1871" name="memory.events" dev="tmpfs" ino=1887 res=0 errno=0 [ 325.166700][T11864] veth1_macvtap: entered promiscuous mode [ 325.181013][ T30] audit: type=1804 audit(1744426428.138:6): pid=12134 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.1871" name="memory.events" dev="tmpfs" ino=1887 res=1 errno=0 [ 325.218585][T11864] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 325.274097][T11864] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 325.320436][T11864] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.345721][T11864] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.360496][T11864] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.369727][T11864] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.419218][T12142] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1877'. [ 325.580430][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 325.610573][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 325.679314][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 325.694792][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 325.856156][T12150] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1879'. [ 326.409680][T12165] bridge0: port 2(bridge_slave_1) entered disabled state [ 326.418279][T12165] bridge0: port 1(bridge_slave_0) entered disabled state [ 326.689154][T12174] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1887'. [ 326.734481][T12177] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1888'. [ 327.373753][T12193] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1892'. [ 327.404917][T12193] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1892'. [ 327.422316][T12193] vlan1: entered promiscuous mode [ 327.520335][T12197] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1894'. [ 327.647827][T12201] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1897'. [ 327.657131][T12201] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1897'. [ 327.672864][T12201] netlink: 'syz.3.1897': attribute type 1 has an invalid length. [ 327.682100][T12203] netlink: 88 bytes leftover after parsing attributes in process `syz.5.1896'. [ 327.791514][T12203] netlink: 'syz.5.1896': attribute type 2 has an invalid length. [ 327.804425][T12203] netlink: 'syz.5.1896': attribute type 1 has an invalid length. [ 328.259297][T12220] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1898'. [ 328.320528][T12222] RDS: rds_bind could not find a transport for fc00::1, load rds_tcp or rds_rdma? [ 328.352514][T12216] trusted_key: syz.2.1898 sent an empty control message without MSG_MORE. [ 328.466923][T12216] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1898'. [ 328.693808][T12215] syzkaller0: entered promiscuous mode [ 328.701601][T12215] syzkaller0: entered allmulticast mode [ 329.209248][T12239] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 330.782905][T12227] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 331.011574][T12252] netlink: 168 bytes leftover after parsing attributes in process `syz.5.1911'. [ 331.412726][T12252] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.634088][T12252] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.756069][T12279] batman_adv: batadv0: Adding interface: dummy0 [ 331.781265][T12279] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 331.822912][T12279] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 331.925950][T12252] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.125045][T12252] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.368363][T12252] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.508076][T12252] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.694482][T12252] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.780574][T12252] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 333.454635][T12329] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1926'. [ 333.473214][T12329] netlink: 31 bytes leftover after parsing attributes in process `syz.4.1926'. [ 333.524603][T12329] netlink: 'syz.4.1926': attribute type 3 has an invalid length. [ 333.535184][T12329] netlink: 'syz.4.1926': attribute type 2 has an invalid length. [ 333.542955][T12329] netlink: 31 bytes leftover after parsing attributes in process `syz.4.1926'. [ 333.857710][T12335] vlan3: entered promiscuous mode [ 333.862811][T12335] team0: entered promiscuous mode [ 334.032299][T12343] lo: entered allmulticast mode [ 334.252532][T12353] netlink: 'syz.2.1934': attribute type 4 has an invalid length. [ 334.706582][T12371] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input27 [ 334.732352][T12367] netlink: 'syz.5.1937': attribute type 1 has an invalid length. [ 334.848983][T12377] xt_hashlimit: size too large, truncated to 1048576 [ 336.208387][T12403] vlan3: entered promiscuous mode [ 336.417295][T12415] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 20001 - 0 [ 336.490790][T12415] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 20001 - 0 [ 336.523192][T12415] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 20001 - 0 [ 336.532516][T12424] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1948'. [ 336.548673][T12424] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1948'. [ 336.561935][T12415] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 20001 - 0 [ 336.683726][T12429] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1949'. [ 336.732977][T12429] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1949'. [ 336.785466][T12429] netlink: 'syz.1.1949': attribute type 1 has an invalid length. [ 336.793261][T12429] netlink: 10 bytes leftover after parsing attributes in process `syz.1.1949'. [ 336.892766][T12429] nbd: socks must be embedded in a SOCK_ITEM attr [ 336.934378][T12429] block nbd6: shutting down sockets [ 338.221432][T12500] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1966'. [ 338.289722][T12503] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1967'. [ 338.670191][T12512] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1970'. [ 339.485033][T12529] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1974'. [ 339.611072][T12535] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1976'. [ 339.792900][T12545] pimreg: entered allmulticast mode [ 339.901170][T12555] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1981'. [ 340.011918][T12549] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 340.030244][T12549] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 340.049568][T12549] bond0 (unregistering): Released all slaves [ 340.071897][T12545] pimreg: left allmulticast mode [ 341.518871][T12588] tipc: Resetting bearer [ 341.742986][T12588] batman_adv: batadv0: Interface deactivated: ip6gretap3 [ 341.790686][T12588] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 20001 - 0 [ 341.805848][T12588] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 20001 - 0 [ 341.814334][T12588] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 20001 - 0 [ 341.855403][T12588] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 20001 - 0 [ 341.977358][T12606] netlink: 'syz.2.1991': attribute type 1 has an invalid length. [ 343.404297][T12606] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 343.406152][T12607] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 343.531488][T12613] netlink: 'syz.5.1992': attribute type 1 has an invalid length. [ 343.555241][T12613] netlink: 224 bytes leftover after parsing attributes in process `syz.5.1992'. [ 344.129441][T12631] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 344.267757][T12638] Cannot find del_set index 4 as target [ 345.149448][T12650] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2003'. [ 345.242247][T12650] dummy0: entered promiscuous mode [ 345.355502][T12650] macvtap1: entered promiscuous mode [ 345.365923][T12650] macvtap1: entered allmulticast mode [ 345.395261][T12650] dummy0: entered allmulticast mode [ 345.767635][T12658] netlink: 88 bytes leftover after parsing attributes in process `syz.1.2005'. [ 345.779433][T12658] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2005'. [ 345.788955][T12658] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2005'. [ 345.805765][T12658] netlink: 80 bytes leftover after parsing attributes in process `syz.1.2005'. [ 345.872380][T12654] dummy0: left allmulticast mode [ 345.913353][T12654] dummy0: left promiscuous mode [ 346.123748][T12662] x_tables: duplicate entry at hook 2 [ 346.303073][T12660] ipvlan0: entered promiscuous mode [ 346.729887][T12673] netlink: 88 bytes leftover after parsing attributes in process `syz.5.2009'. [ 346.739312][T12673] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2009'. [ 346.750831][T12673] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2009'. [ 346.796128][T12673] netlink: 80 bytes leftover after parsing attributes in process `syz.5.2009'. [ 347.144684][T12693] netlink: 'syz.3.2014': attribute type 29 has an invalid length. [ 347.408612][T12673] x_tables: duplicate entry at hook 2 [ 348.069180][T12715] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2017'. [ 348.294768][T12722] netlink: 'syz.2.2021': attribute type 4 has an invalid length. [ 349.173929][T12742] bridge_slave_1: left allmulticast mode [ 349.185543][T12742] bridge_slave_1: left promiscuous mode [ 349.199158][T12742] bridge0: port 2(bridge_slave_1) entered disabled state [ 349.210911][T12742] bridge_slave_0: left allmulticast mode [ 349.234554][T12742] bridge_slave_0: left promiscuous mode [ 349.245783][T12742] bridge0: port 1(bridge_slave_0) entered disabled state [ 349.708497][T12749] syz.4.2024: vmalloc error: size 16777216, failed to allocated page array size 32768, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 349.753694][T12749] CPU: 0 UID: 0 PID: 12749 Comm: syz.4.2024 Not tainted 6.15.0-rc1-syzkaller-00209-gfaeefc173be4 #0 PREEMPT(full) [ 349.753727][T12749] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 349.753746][T12749] Call Trace: [ 349.753755][T12749] [ 349.753764][T12749] dump_stack_lvl+0x241/0x360 [ 349.753823][T12749] ? __pfx_dump_stack_lvl+0x10/0x10 [ 349.753856][T12749] ? __pfx__printk+0x10/0x10 [ 349.753886][T12749] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 349.753922][T12749] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 349.753962][T12749] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 349.753997][T12749] warn_alloc+0x27c/0x410 [ 349.754027][T12749] ? __pfx_warn_alloc+0x10/0x10 [ 349.754058][T12749] ? xp_create_and_assign_umem+0x17b/0xc60 [ 349.754087][T12749] ? __get_vm_area_node+0x1c8/0x2d0 [ 349.754118][T12749] ? __get_vm_area_node+0x25c/0x2d0 [ 349.754159][T12749] __vmalloc_node_range_noprof+0x634/0x1390 [ 349.754203][T12749] ? __lruvec_stat_mod_folio+0x7d/0x300 [ 349.754248][T12749] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 349.754269][T12749] ? __kasan_kmalloc_large+0x1a/0xa0 [ 349.754304][T12749] ? xp_create_and_assign_umem+0x17b/0xc60 [ 349.754334][T12749] __kvmalloc_node_noprof+0x3b2/0x5a0 [ 349.754367][T12749] ? xp_create_and_assign_umem+0x17b/0xc60 [ 349.754394][T12749] ? xp_create_and_assign_umem+0x17b/0xc60 [ 349.754430][T12749] xp_create_and_assign_umem+0x17b/0xc60 [ 349.754474][T12749] ? dev_get_by_index+0x23/0x2d0 [ 349.754507][T12749] xsk_bind+0x435/0xfb0 [ 349.754541][T12749] __sys_bind+0x1de/0x290 [ 349.754577][T12749] ? __pfx___sys_bind+0x10/0x10 [ 349.754637][T12749] __x64_sys_bind+0x7a/0x90 [ 349.754675][T12749] do_syscall_64+0xf3/0x230 [ 349.754703][T12749] ? clear_bhb_loop+0x45/0xa0 [ 349.754730][T12749] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 349.754757][T12749] RIP: 0033:0x7f596038d169 [ 349.754781][T12749] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 349.754801][T12749] RSP: 002b:00007f596120d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 349.754824][T12749] RAX: ffffffffffffffda RBX: 00007f59605a6320 RCX: 00007f596038d169 [ 349.754840][T12749] RDX: 0000000000000010 RSI: 0000200000000100 RDI: 0000000000000005 [ 349.754854][T12749] RBP: 00007f596040e990 R08: 0000000000000000 R09: 0000000000000000 [ 349.754867][T12749] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 349.754880][T12749] R13: 0000000000000001 R14: 00007f59605a6320 R15: 00007ffecc1fd038 [ 349.754916][T12749] [ 349.755044][T12749] Mem-Info: [ 350.234592][T12749] active_anon:7373 inactive_anon:0 isolated_anon:0 [ 350.234592][T12749] active_file:1391 inactive_file:38409 isolated_file:0 [ 350.234592][T12749] unevictable:1301 dirty:399 writeback:0 [ 350.234592][T12749] slab_reclaimable:10208 slab_unreclaimable:215757 [ 350.234592][T12749] mapped:33950 shmem:1437 pagetables:958 [ 350.234592][T12749] sec_pagetables:0 bounce:0 [ 350.234592][T12749] kernel_misc_reclaimable:0 [ 350.234592][T12749] free:1212099 free_pcp:3134 free_cma:0 [ 350.365308][T12749] Node 0 active_anon:29692kB inactive_anon:0kB active_file:5564kB inactive_file:153568kB unevictable:3668kB isolated(anon):0kB isolated(file):0kB mapped:135800kB dirty:1596kB writeback:0kB shmem:4212kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12688kB pagetables:3832kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 350.484093][T12749] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:68kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 350.564246][T12749] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 350.599341][T12749] lowmem_reserve[]: 0 2487 2487 2487 2487 [ 350.606942][T12749] Node 0 DMA32 free:927040kB boost:0kB min:34152kB low:42688kB high:51224kB reserved_highatomic:0KB active_anon:30884kB inactive_anon:0kB active_file:5564kB inactive_file:153468kB unevictable:3668kB writepending:1596kB present:3129332kB managed:2547224kB mlocked:2156kB bounce:0kB free_pcp:10900kB local_pcp:1132kB free_cma:0kB [ 350.644348][T12749] lowmem_reserve[]: 0 0 0 0 0 [ 350.649633][T12749] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:8kB inactive_anon:0kB active_file:0kB inactive_file:100kB unevictable:0kB writepending:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 350.713009][T12749] lowmem_reserve[]: 0 0 0 0 0 [ 350.731478][T12749] Node 1 Normal free:3905996kB boost:0kB min:55748kB low:69684kB high:83620kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:68kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 350.791199][T12749] lowmem_reserve[]: 0 0 0 0 0 [ 350.811987][T12749] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 350.841452][T12749] Node 0 DMA32: 104*4kB (ME) 398*8kB (UME) 487*16kB (UME) 1457*32kB (UME) 383*64kB (UME) 130*128kB (UME) 20*256kB (UME) 12*512kB (UME) 3*1024kB (UM) 3*2048kB (UM) 200*4096kB (UM) = 938848kB [ 350.891006][T12749] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 350.934817][T12749] Node 1 Normal: 225*4kB (UME) 49*8kB (UME) 42*16kB (UME) 197*32kB (UME) 88*64kB (UME) 35*128kB (UME) 10*256kB (UME) 10*512kB (UME) 5*1024kB (UM) 2*2048kB (UE) 945*4096kB (M) = 3905996kB [ 350.994610][T12749] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 351.015901][T12749] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 351.027942][T12749] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 351.037649][T12749] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 351.052367][T12749] 41237 total pagecache pages [ 351.057889][T12749] 0 pages in swap cache [ 351.062071][T12749] Free swap = 124996kB [ 351.066444][T12749] Total swap = 124996kB [ 351.070623][T12749] 2097051 pages RAM [ 351.074447][T12749] 0 pages HighMem/MovableOnly [ 351.079326][T12749] 428587 pages reserved [ 351.089428][T12749] 0 pages cma reserved [ 351.617921][T12787] __nla_validate_parse: 3 callbacks suppressed [ 351.617967][T12787] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2036'. [ 351.672781][T12787] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !寿$ULvyآDUDw}z [ 351.851247][T12794] wireguard0: entered promiscuous mode [ 351.858909][T12794] wireguard0: entered allmulticast mode [ 351.870082][T12798] netlink: 'syz.2.2039': attribute type 1 has an invalid length. [ 352.168321][T12804] netlink: del zone limit has 4 unknown bytes [ 352.228839][T12805] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2041'. [ 353.514210][T12851] sctp: [Deprecated]: syz.1.2049 (pid 12851) Use of struct sctp_assoc_value in delayed_ack socket option. [ 353.514210][T12851] Use struct sctp_sack_info instead [ 353.590194][T12852] dccp_close: ABORT with 36 bytes unread [ 353.629209][T12852] netlink: 'syz.5.2050': attribute type 1 has an invalid length. [ 353.823790][T12855] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 353.857523][T12855] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.868827][T12855] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.904322][T12855] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.933214][T12855] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.992162][T12855] tipc: Resetting bearer [ 354.012388][T12855] mac80211_hwsim hwsim5 syzkaller0: left promiscuous mode [ 354.032213][T12855] mac80211_hwsim hwsim5 syzkaller0: left allmulticast mode [ 354.111219][T12855] macsec1: left promiscuous mode [ 354.205004][T12852] 8021q: adding VLAN 0 to HW filter on device bond0 [ 354.400078][T12857] bond0: (slave veth3): Enslaving as an active interface with a down link [ 354.483079][T12861] vlan3: entered promiscuous mode [ 354.514786][T12881] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2054'. [ 354.942335][T12895] netlink: 'syz.4.2055': attribute type 1 has an invalid length. [ 355.056331][T12900] tipc: Started in network mode [ 355.091941][T12900] tipc: Node identity ac14140f, cluster identity 4711 [ 355.124775][T12900] tipc: New replicast peer: 255.255.255.255 [ 355.164106][T12900] tipc: Enabled bearer , priority 10 [ 355.204601][T12904] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2057'. [ 355.288128][T12904] tipc: Disabling bearer [ 355.387516][T12904] netlink: 5 bytes leftover after parsing attributes in process `syz.5.2057'. [ 355.477424][T12900] vxcan3: entered allmulticast mode [ 355.803351][T12929] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 355.831187][T12929] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2062'. [ 355.852920][T12929] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2062'. [ 356.008102][T12937] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2064'. [ 356.047538][T12929] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 356.215972][T12940] netlink: 'syz.3.2061': attribute type 2 has an invalid length. [ 356.267827][T12937] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2064'. [ 356.482220][T12951] vlan3: entered promiscuous mode [ 356.630518][T12956] bridge0: port 2(gretap0) entered blocking state [ 356.637592][T12956] bridge0: port 2(gretap0) entered disabled state [ 356.658753][T12956] gretap0: entered allmulticast mode [ 356.668083][T12956] gretap0: entered promiscuous mode [ 356.773537][T12961] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input28 [ 356.814920][T12960] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2070'. [ 357.103614][T12934] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2063'. [ 357.465976][T12975] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2072'. [ 358.036177][T12993] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2076'. [ 359.986465][T13024] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2086'. [ 360.461913][T13031] bridge0: entered allmulticast mode [ 360.604025][T13033] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2089'. [ 360.973404][T13048] netlink: 'syz.3.2093': attribute type 10 has an invalid length. [ 361.027195][T13048] dummy0: left promiscuous mode [ 361.167087][T13048] team0: Device dummy0 failed to register rx_handler [ 361.842478][T13063] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2097'. [ 361.876089][T13063] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 361.905287][T13063] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 362.090175][T13060] netlink: 'syz.1.2096': attribute type 4 has an invalid length. [ 362.416795][T13076] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2101'. [ 362.482538][T13076] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input29 [ 362.763294][T13081] netlink: 'syz.1.2102': attribute type 10 has an invalid length. [ 362.979266][T13087] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 363.052722][T13090] lo: entered allmulticast mode [ 363.067576][T13090] tunl0: entered allmulticast mode [ 363.080932][T13090] gre0: entered allmulticast mode [ 363.101332][T13090] erspan0: entered allmulticast mode [ 363.112411][T13090] ip_vti0: entered allmulticast mode [ 363.119598][T13090] ip6_vti0: entered allmulticast mode [ 363.125682][T13090] sit0: entered allmulticast mode [ 363.131028][T13090] ip6tnl0: entered allmulticast mode [ 363.138426][T13090] ip6gre0: entered allmulticast mode [ 363.144103][T13090] syz_tun: entered allmulticast mode [ 363.150307][T13090] ip6gretap0: entered allmulticast mode [ 363.156619][T13090] bridge0: entered allmulticast mode [ 363.169944][T13090] team0: entered allmulticast mode [ 363.175682][T13090] team_slave_0: entered allmulticast mode [ 363.195755][T13090] team_slave_1: entered allmulticast mode [ 363.201741][T13090] dummy0: entered allmulticast mode [ 363.208057][T13090] nlmon0: entered allmulticast mode [ 363.213525][T13090] caif0: entered allmulticast mode [ 363.219534][T13090] batadv0: entered allmulticast mode [ 363.225635][T13090] veth0: entered allmulticast mode [ 363.231227][T13090] veth1: entered allmulticast mode [ 363.269732][T13090] wg1: entered allmulticast mode [ 363.287867][T13090] wg2: entered allmulticast mode [ 363.293335][T13090] veth0_to_bridge: entered allmulticast mode [ 363.311127][T13090] veth0_to_bond: entered allmulticast mode [ 363.324937][T13090] bond_slave_0: entered allmulticast mode [ 363.331074][T13090] veth1_to_bond: entered allmulticast mode [ 363.338423][T13090] bond_slave_1: entered allmulticast mode [ 363.344478][T13090] veth0_to_team: entered allmulticast mode [ 363.352165][T13090] veth1_to_team: entered allmulticast mode [ 363.359243][T13090] veth0_to_batadv: entered allmulticast mode [ 363.365728][T13090] batadv_slave_0: entered allmulticast mode [ 363.372106][T13090] veth1_to_batadv: entered allmulticast mode [ 363.378870][T13090] batadv_slave_1: entered allmulticast mode [ 363.385294][T13090] xfrm0: entered allmulticast mode [ 363.391009][T13090] veth0_to_hsr: entered allmulticast mode [ 363.397155][T13090] hsr_slave_0: entered allmulticast mode [ 363.403177][T13090] veth1_to_hsr: entered allmulticast mode [ 363.409330][T13090] hsr_slave_1: entered allmulticast mode [ 363.415816][T13090] hsr0: entered allmulticast mode [ 363.421521][T13090] veth1_virt_wifi: entered allmulticast mode [ 363.428191][T13090] veth0_virt_wifi: entered allmulticast mode [ 363.434910][T13090] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 363.442814][T13090] veth1_macvtap: entered allmulticast mode [ 363.452885][T13090] veth0_macvtap: entered allmulticast mode [ 363.463302][T13090] macvtap0: entered allmulticast mode [ 363.473287][T13090] macsec0: entered allmulticast mode [ 363.482265][T13090] geneve0: entered allmulticast mode [ 363.491236][T13090] geneve1: entered allmulticast mode [ 363.500625][T13090] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode [ 363.512235][T13090] bridge1: entered allmulticast mode [ 363.521241][T13090] vti0: entered allmulticast mode [ 363.529721][T13090] syztnl0: entered allmulticast mode [ 363.686024][T13090] macvlan2: entered allmulticast mode [ 363.692545][T13090] veth2: entered allmulticast mode [ 363.704242][T13090] veth3: entered allmulticast mode [ 363.723754][T13090] bond1: entered allmulticast mode [ 363.741433][T13090] ip6gretap1: entered allmulticast mode [ 363.765054][T13090] vlan2: entered allmulticast mode [ 363.770680][T13090] bond2: entered allmulticast mode [ 363.780608][T13090] batadv1: entered allmulticast mode [ 363.891871][T13090] batadv2: entered allmulticast mode [ 363.934650][T13090] veth4: entered allmulticast mode [ 363.941205][T13090] veth5: entered allmulticast mode [ 363.954142][T13090] netdevsim netdevsim4 eth0: entered allmulticast mode [ 363.962651][T13090] netdevsim netdevsim4 eth1: entered allmulticast mode [ 363.973130][T13090] netdevsim netdevsim4 eth2: entered allmulticast mode [ 363.981349][T13090] netdevsim netdevsim4 eth3: entered allmulticast mode [ 363.989403][T13090] geneve2: entered allmulticast mode [ 363.994863][T13090] bond3: entered allmulticast mode [ 364.000393][T13090] veth6: entered allmulticast mode [ 364.005855][T13090] veth7: entered allmulticast mode [ 364.011128][T13090] bond4: entered allmulticast mode [ 364.016648][T13090] bridge2: entered allmulticast mode [ 364.022240][T13090] bond5: entered allmulticast mode [ 364.027481][T13090] ip6gretap2: entered allmulticast mode [ 364.033516][T13090] : entered allmulticast mode [ 364.038821][T13090] syztnl2: entered allmulticast mode [ 364.044632][T13090] bond0.0004: entered allmulticast mode [ 364.050395][T13090] syztnl1: entered allmulticast mode [ 364.057675][T13090] ip6gretap3: entered allmulticast mode [ 364.063389][T13090] vxlan1: entered allmulticast mode [ 364.069072][T13090] geneve3: entered allmulticast mode [ 364.225318][T13110] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2108'. [ 364.249790][T13112] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2109'. [ 364.399474][T13122] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2111'. [ 364.432223][T13122] veth0: entered promiscuous mode [ 364.440250][T13122] veth0: left promiscuous mode [ 364.468488][T13120] netlink: 452 bytes leftover after parsing attributes in process `syz.3.2112'. [ 365.221701][T13141] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2116'. [ 365.252514][T13141] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 365.275482][T13141] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 365.422749][T13151] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2118'. [ 365.456112][T13151] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2118'. [ 365.482946][T13151] netlink: 'syz.4.2118': attribute type 6 has an invalid length. [ 366.149454][T13171] netlink: 'syz.2.2124': attribute type 1 has an invalid length. [ 366.264821][T13171] 8021q: adding VLAN 0 to HW filter on device bond9 [ 366.574437][T13181] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2127'. [ 366.940125][T13192] netlink: 'syz.5.2130': attribute type 39 has an invalid length. [ 367.090887][T13188] __nla_validate_parse: 2 callbacks suppressed [ 367.090908][T13188] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2130'. [ 367.128537][T13199] team0: No ports can be present during mode change [ 367.199991][T13201] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2133'. [ 367.359473][T13208] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2136'. [ 367.368531][T13211] netlink: 'syz.5.2135': attribute type 11 has an invalid length. [ 367.382573][T13211] netlink: 224 bytes leftover after parsing attributes in process `syz.5.2135'. [ 367.388886][T13208] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2136'. [ 367.569972][T13219] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2137'. [ 367.656347][T13219] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 367.741563][T13219] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 367.771668][T13229] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2139'. [ 368.488359][T13252] netlink: 'syz.1.2142': attribute type 10 has an invalid length. [ 368.523376][T13222] unsupported nlmsg_type 40 [ 369.111622][T13273] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2147'. [ 369.183387][T13275] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2148'. [ 369.672063][T13298] raw_sendmsg: syz.2.2151 forgot to set AF_INET. Fix it! [ 369.727691][T13298] tipc: Resetting bearer [ 369.733283][T13298] tipc: Resetting bearer [ 369.814897][T13298] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 370.061257][T13312] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2153'. [ 370.156238][T13312] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 370.185483][T13312] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 370.528488][T13327] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 370.600977][T13329] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 372.343133][T13401] __nla_validate_parse: 6 callbacks suppressed [ 372.343156][T13401] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2172'. [ 372.377104][T13401] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 372.406061][T13401] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 373.213354][T13430] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2178'. [ 373.658900][T13447] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2181'. [ 374.243484][T13463] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2184'. [ 374.254424][T13464] netlink: 'syz.2.2182': attribute type 2 has an invalid length. [ 374.270073][T13464] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2182'. [ 374.295664][T13466] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2185'. [ 374.331075][ T12] bond1 (unregistering): (slave ip6gretap1): Removing an active aggregator [ 374.341565][ T12] bond1 (unregistering): (slave ip6gretap1): Releasing backup interface [ 374.983643][ T12] bond1 (unregistering): Released all slaves [ 375.133319][ T12] bond2 (unregistering): Released all slaves [ 375.234982][ T12] bond3 (unregistering): (slave veth5): Releasing active interface [ 375.243408][ T12] dummy0: entered promiscuous mode [ 375.253118][ T12] bond3 (unregistering): (slave dummy0): Releasing active interface [ 375.263316][ T12] bond3 (unregistering): Released all slaves [ 375.371095][ T12]  (unregistering): (slave veth7): Releasing active interface [ 375.380289][ T12]  (unregistering): (slave veth9): Releasing active interface [ 375.394319][ T12]  (unregistering): Released all slaves [ 375.412319][ T12] bond4 (unregistering): Released all slaves [ 375.441320][T13456] warn_alloc: 1 callbacks suppressed [ 375.441333][T13456] syz.2.2182: vmalloc error: size 16777216, failed to allocated page array size 32768, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 375.470767][T13456] CPU: 0 UID: 0 PID: 13456 Comm: syz.2.2182 Not tainted 6.15.0-rc1-syzkaller-00209-gfaeefc173be4 #0 PREEMPT(full) [ 375.470795][T13456] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 375.470805][T13456] Call Trace: [ 375.470811][T13456] [ 375.470817][T13456] dump_stack_lvl+0x241/0x360 [ 375.470845][T13456] ? __pfx_dump_stack_lvl+0x10/0x10 [ 375.470868][T13456] ? __pfx__printk+0x10/0x10 [ 375.470889][T13456] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 375.470914][T13456] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 375.470946][T13456] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 375.470980][T13456] warn_alloc+0x27c/0x410 [ 375.471007][T13456] ? __pfx_warn_alloc+0x10/0x10 [ 375.471035][T13456] ? xp_create_and_assign_umem+0x17b/0xc60 [ 375.471055][T13456] ? __get_vm_area_node+0x1c8/0x2d0 [ 375.471076][T13456] ? __get_vm_area_node+0x25c/0x2d0 [ 375.471104][T13456] __vmalloc_node_range_noprof+0x634/0x1390 [ 375.471143][T13456] ? __lruvec_stat_mod_folio+0x7d/0x300 [ 375.471194][T13456] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 375.471216][T13456] ? __kasan_kmalloc_large+0x1a/0xa0 [ 375.471251][T13456] ? xp_create_and_assign_umem+0x17b/0xc60 [ 375.471277][T13456] __kvmalloc_node_noprof+0x3b2/0x5a0 [ 375.471299][T13456] ? xp_create_and_assign_umem+0x17b/0xc60 [ 375.471318][T13456] ? xp_create_and_assign_umem+0x17b/0xc60 [ 375.471342][T13456] xp_create_and_assign_umem+0x17b/0xc60 [ 375.471371][T13456] ? dev_get_by_index+0x23/0x2d0 [ 375.471392][T13456] xsk_bind+0x435/0xfb0 [ 375.471415][T13456] __sys_bind+0x1de/0x290 [ 375.471439][T13456] ? __pfx___sys_bind+0x10/0x10 [ 375.471478][T13456] __x64_sys_bind+0x7a/0x90 [ 375.471500][T13456] do_syscall_64+0xf3/0x230 [ 375.471520][T13456] ? clear_bhb_loop+0x45/0xa0 [ 375.471538][T13456] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 375.471552][T13456] RIP: 0033:0x7f1bfef8d169 [ 375.471565][T13456] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 375.471578][T13456] RSP: 002b:00007f1bffd91038 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 375.471594][T13456] RAX: ffffffffffffffda RBX: 00007f1bff1a6160 RCX: 00007f1bfef8d169 [ 375.471605][T13456] RDX: 0000000000000010 RSI: 0000200000000100 RDI: 0000000000000003 [ 375.471614][T13456] RBP: 00007f1bff00e990 R08: 0000000000000000 R09: 0000000000000000 [ 375.471623][T13456] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 375.471631][T13456] R13: 0000000000000000 R14: 00007f1bff1a6160 R15: 00007ffdae5a28b8 [ 375.471655][T13456] [ 375.471660][T13456] Mem-Info: [ 375.737221][T13456] active_anon:7294 inactive_anon:0 isolated_anon:0 [ 375.737221][T13456] active_file:1391 inactive_file:38419 isolated_file:0 [ 375.737221][T13456] unevictable:768 dirty:300 writeback:0 [ 375.737221][T13456] slab_reclaimable:10641 slab_unreclaimable:195934 [ 375.737221][T13456] mapped:29983 shmem:1456 pagetables:977 [ 375.737221][T13456] sec_pagetables:0 bounce:0 [ 375.737221][T13456] kernel_misc_reclaimable:0 [ 375.737221][T13456] free:1233911 free_pcp:567 free_cma:0 [ 375.790955][T13456] Node 0 active_anon:29164kB inactive_anon:0kB active_file:5564kB inactive_file:153608kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:119932kB dirty:1232kB writeback:0kB shmem:4288kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12412kB pagetables:3908kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 375.824421][T13456] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:68kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 375.855824][T13456] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 375.883046][T13456] lowmem_reserve[]: 0 2487 2487 2487 2487 [ 375.888963][T13456] Node 0 DMA32 free:1015612kB boost:0kB min:34152kB low:42688kB high:51224kB reserved_highatomic:0KB active_anon:29240kB inactive_anon:0kB active_file:5564kB inactive_file:153508kB unevictable:1536kB writepending:1232kB present:3129332kB managed:2547224kB mlocked:0kB bounce:0kB free_pcp:2044kB local_pcp:1980kB free_cma:0kB [ 375.919932][T13456] lowmem_reserve[]: 0 0 0 0 0 [ 375.924712][T13456] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:8kB inactive_anon:0kB active_file:0kB inactive_file:100kB unevictable:0kB writepending:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 375.952322][T13456] lowmem_reserve[]: 0 0 0 0 0 [ 375.957876][T13456] Node 1 Normal free:3905996kB boost:0kB min:55748kB low:69684kB high:83620kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:68kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 375.987389][T13456] lowmem_reserve[]: 0 0 0 0 0 [ 375.992156][T13456] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 376.005052][T13456] Node 0 DMA32: 311*4kB (UME) 404*8kB (UME) 290*16kB (UM) 583*32kB (UME) 853*64kB (UME) 249*128kB (UME) 55*256kB (UME) 17*512kB (UME) 4*1024kB (UM) 3*2048kB (UM) 212*4096kB (UM) = 1015612kB [ 376.024331][T13456] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 376.036869][T13456] Node 1 Normal: 225*4kB (UME) 49*8kB (UME) 42*16kB (UME) 197*32kB (UME) 88*64kB (UME) 35*128kB (UME) 10*256kB (UME) 10*512kB (UME) 5*1024kB (UM) 2*2048kB (UE) 945*4096kB (M) = 3905996kB [ 376.056522][T13456] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 376.066990][T13456] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 376.076412][T13456] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 376.086059][T13456] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 376.095431][T13456] 41268 total pagecache pages [ 376.100110][T13456] 0 pages in swap cache [ 376.104255][T13456] Free swap = 124996kB [ 376.108614][T13456] Total swap = 124996kB [ 376.112781][T13456] 2097051 pages RAM [ 376.116709][T13456] 0 pages HighMem/MovableOnly [ 376.121412][T13456] 428587 pages reserved [ 376.125656][T13456] 0 pages cma reserved [ 376.230750][T13466] netlink: 168 bytes leftover after parsing attributes in process `syz.1.2185'. [ 376.249584][T13466] netlink: 168 bytes leftover after parsing attributes in process `syz.1.2185'. [ 376.276597][T13466] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 376.397497][T13479] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2189'. [ 376.416486][ T12] tipc: Left network mode [ 376.424801][T13479] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 376.455190][T13479] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 376.660769][ T36] Ignoring NSS change in VHT Operating Mode Notification from 08:02:11:00:00:00 with invalid nss 2 [ 376.694815][T13494] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode [ 376.734754][T13494] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode [ 376.744213][T13494] tipc: Resetting bearer [ 376.887760][ T12] hsr_slave_0: left promiscuous mode [ 376.930139][ T12] hsr_slave_1: left promiscuous mode [ 376.946642][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 376.957088][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 376.978298][ T12] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 376.993989][ T12] batman_adv: batadv0: Removing interface: virt_wifi0 [ 377.009301][ T12] [ 377.011695][ T12] ====================================================== [ 377.018723][ T12] WARNING: possible circular locking dependency detected [ 377.025741][ T12] 6.15.0-rc1-syzkaller-00209-gfaeefc173be4 #0 Not tainted [ 377.032838][ T12] ------------------------------------------------------ [ 377.039849][ T12] kworker/u8:0/12 is trying to acquire lock: [ 377.045827][ T12] ffff8880282dc768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_netdev_notifier_call+0x1b3/0x1430 [ 377.056457][ T12] [ 377.056457][ T12] but task is already holding lock: [ 377.063814][ T12] ffff88805ee96d30 (&dev_instance_lock_key#3){+.+.}-{4:4}, at: unregister_netdevice_many_notify+0x5a1/0x2510 [ 377.075427][ T12] [ 377.075427][ T12] which lock already depends on the new lock. [ 377.075427][ T12] [ 377.085825][ T12] [ 377.085825][ T12] the existing dependency chain (in reverse order) is: [ 377.094840][ T12] [ 377.094840][ T12] -> #3 (&dev_instance_lock_key#3){+.+.}-{4:4}: [ 377.103374][ T12] lock_acquire+0x116/0x2f0 [ 377.108398][ T12] __mutex_lock+0x1a5/0x10c0 [ 377.113510][ T12] xsk_bind+0x2fd/0xfb0 [ 377.118186][ T12] __sys_bind+0x1de/0x290 [ 377.123043][ T12] __x64_sys_bind+0x7a/0x90 [ 377.128069][ T12] do_syscall_64+0xf3/0x230 [ 377.133095][ T12] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 377.139508][ T12] [ 377.139508][ T12] -> #2 (&xs->mutex){+.+.}-{4:4}: [ 377.146719][ T12] lock_acquire+0x116/0x2f0 [ 377.151737][ T12] __mutex_lock+0x1a5/0x10c0 [ 377.156851][ T12] xsk_notifier+0xcf/0x230 [ 377.161792][ T12] notifier_call_chain+0x1a5/0x3f0 [ 377.167428][ T12] unregister_netdevice_many_notify+0x1572/0x2510 [ 377.174366][ T12] unregister_netdevice_queue+0x383/0x400 [ 377.180605][ T12] ppp_release+0xed/0x1f0 [ 377.185460][ T12] __fput+0x3e9/0x9f0 [ 377.189970][ T12] task_work_run+0x251/0x310 [ 377.195107][ T12] syscall_exit_to_user_mode+0x13f/0x340 [ 377.201264][ T12] do_syscall_64+0x100/0x230 [ 377.206376][ T12] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 377.212805][ T12] [ 377.212805][ T12] -> #1 (&net->xdp.lock){+.+.}-{4:4}: [ 377.220369][ T12] lock_acquire+0x116/0x2f0 [ 377.225390][ T12] __mutex_lock+0x1a5/0x10c0 [ 377.230501][ T12] xsk_notifier+0x8b/0x230 [ 377.235433][ T12] notifier_call_chain+0x1a5/0x3f0 [ 377.241060][ T12] unregister_netdevice_many_notify+0x1572/0x2510 [ 377.247992][ T12] unregister_netdevice_queue+0x383/0x400 [ 377.254233][ T12] _cfg80211_unregister_wdev+0x163/0x590 [ 377.260395][ T12] ieee80211_if_remove+0x25d/0x320 [ 377.266031][ T12] ieee80211_del_iface+0x19/0x30 [ 377.271487][ T12] cfg80211_remove_virtual_intf+0x23f/0x410 [ 377.277910][ T12] genl_rcv_msg+0xb38/0xf00 [ 377.282932][ T12] netlink_rcv_skb+0x208/0x480 [ 377.288219][ T12] genl_rcv+0x28/0x40 [ 377.292719][ T12] netlink_unicast+0x7f8/0x9a0 [ 377.298006][ T12] netlink_sendmsg+0x8c3/0xcd0 [ 377.303295][ T12] __sock_sendmsg+0x221/0x270 [ 377.308494][ T12] ____sys_sendmsg+0x523/0x860 [ 377.313775][ T12] __sys_sendmsg+0x271/0x360 [ 377.318887][ T12] do_syscall_64+0xf3/0x230 [ 377.323927][ T12] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 377.330351][ T12] [ 377.330351][ T12] -> #0 (&rdev->wiphy.mtx){+.+.}-{4:4}: [ 377.338089][ T12] validate_chain+0xa69/0x24e0 [ 377.343383][ T12] __lock_acquire+0xad5/0xd80 [ 377.348581][ T12] lock_acquire+0x116/0x2f0 [ 377.353621][ T12] __mutex_lock+0x1a5/0x10c0 [ 377.358752][ T12] cfg80211_netdev_notifier_call+0x1b3/0x1430 [ 377.365353][ T12] notifier_call_chain+0x1a5/0x3f0 [ 377.371004][ T12] __dev_close_many+0x15d/0x760 [ 377.376381][ T12] dev_close_many+0x250/0x4c0 [ 377.381583][ T12] unregister_netdevice_many_notify+0x628/0x2510 [ 377.388445][ T12] default_device_exit_batch+0x7ff/0x880 [ 377.394613][ T12] cleanup_net+0x8af/0xd60 [ 377.399562][ T12] process_scheduled_works+0xac3/0x18e0 [ 377.405627][ T12] worker_thread+0x870/0xd50 [ 377.410738][ T12] kthread+0x7b7/0x940 [ 377.415331][ T12] ret_from_fork+0x4b/0x80 [ 377.420267][ T12] ret_from_fork_asm+0x1a/0x30 [ 377.425547][ T12] [ 377.425547][ T12] other info that might help us debug this: [ 377.425547][ T12] [ 377.435771][ T12] Chain exists of: [ 377.435771][ T12] &rdev->wiphy.mtx --> &xs->mutex --> &dev_instance_lock_key#3 [ 377.435771][ T12] [ 377.449264][ T12] Possible unsafe locking scenario: [ 377.449264][ T12] [ 377.456707][ T12] CPU0 CPU1 [ 377.462080][ T12] ---- ---- [ 377.467449][ T12] lock(&dev_instance_lock_key#3); [ 377.472668][ T12] lock(&xs->mutex); [ 377.479186][ T12] lock(&dev_instance_lock_key#3); [ 377.486927][ T12] lock(&rdev->wiphy.mtx); [ 377.491438][ T12] [ 377.491438][ T12] *** DEADLOCK *** [ 377.491438][ T12] [ 377.499591][ T12] 5 locks held by kworker/u8:0/12: [ 377.504703][ T12] #0: ffff88801bef6148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x990/0x18e0 [ 377.515606][ T12] #1: ffffc90000117c60 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9cb/0x18e0 [ 377.526137][ T12] #2: ffffffff900f0910 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0x17c/0xd60 [ 377.535574][ T12] #3: ffffffff900fd448 (rtnl_mutex){+.+.}-{4:4}, at: default_device_exit_batch+0xde/0x880 [ 377.545622][ T12] #4: ffff88805ee96d30 (&dev_instance_lock_key#3){+.+.}-{4:4}, at: unregister_netdevice_many_notify+0x5a1/0x2510 [ 377.557658][ T12] [ 377.557658][ T12] stack backtrace: [ 377.563541][ T12] CPU: 0 UID: 0 PID: 12 Comm: kworker/u8:0 Not tainted 6.15.0-rc1-syzkaller-00209-gfaeefc173be4 #0 PREEMPT(full) [ 377.563560][ T12] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 377.563572][ T12] Workqueue: netns cleanup_net [ 377.563597][ T12] Call Trace: [ 377.563605][ T12] [ 377.563614][ T12] dump_stack_lvl+0x241/0x360 [ 377.563638][ T12] ? __pfx_dump_stack_lvl+0x10/0x10 [ 377.563660][ T12] ? __pfx__printk+0x10/0x10 [ 377.563682][ T12] ? print_lock+0x171/0x1a0 [ 377.563703][ T12] print_circular_bug+0x2e1/0x300 [ 377.563725][ T12] check_noncircular+0x142/0x160 [ 377.563747][ T12] validate_chain+0xa69/0x24e0 [ 377.563766][ T12] ? kvm_sched_clock_read+0x11/0x20 [ 377.563794][ T12] __lock_acquire+0xad5/0xd80 [ 377.563814][ T12] lock_acquire+0x116/0x2f0 [ 377.563832][ T12] ? cfg80211_netdev_notifier_call+0x1b3/0x1430 [ 377.563853][ T12] __mutex_lock+0x1a5/0x10c0 [ 377.563900][ T12] ? cfg80211_netdev_notifier_call+0x1b3/0x1430 [ 377.563920][ T12] ? __lock_acquire+0xad5/0xd80 [ 377.563939][ T12] ? cfg80211_netdev_notifier_call+0x1b3/0x1430 [ 377.563956][ T12] ? __pfx___mutex_lock+0x10/0x10 [ 377.563980][ T12] ? __lock_acquire+0xad5/0xd80 [ 377.564001][ T12] cfg80211_netdev_notifier_call+0x1b3/0x1430 [ 377.564022][ T12] ? __pfx_cfg80211_netdev_notifier_call+0x10/0x10 [ 377.564041][ T12] ? __lock_acquire+0xad5/0xd80 [ 377.564059][ T12] ? do_raw_spin_lock+0x151/0x370 [ 377.564095][ T12] ? inetdev_event+0x4fb/0x1740 [ 377.564117][ T12] ? igmp_netdev_event+0x7c/0x770 [ 377.564137][ T12] notifier_call_chain+0x1a5/0x3f0 [ 377.564161][ T12] __dev_close_many+0x15d/0x760 [ 377.564185][ T12] ? __mutex_lock+0x380/0x10c0 [ 377.564206][ T12] ? __pfx___dev_close_many+0x10/0x10 [ 377.564234][ T12] dev_close_many+0x250/0x4c0 [ 377.564260][ T12] ? __pfx_dev_close_many+0x10/0x10 [ 377.564281][ T12] ? __lock_acquire+0xad5/0xd80 [ 377.564302][ T12] unregister_netdevice_many_notify+0x628/0x2510 [ 377.564326][ T12] ? lockdep_hardirqs_on+0x9d/0x150 [ 377.564347][ T12] ? __local_bh_enable_ip+0x168/0x200 [ 377.564364][ T12] ? batadv_tt_local_remove+0x119/0x230 [ 377.564381][ T12] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 377.564398][ T12] ? batadv_tt_local_remove+0x119/0x230 [ 377.564414][ T12] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 377.564441][ T12] ? unregister_netdevice_queue+0x2c4/0x400 [ 377.564464][ T12] ? batadv_meshif_destroy_netlink+0x1e6/0x270 [ 377.564491][ T12] default_device_exit_batch+0x7ff/0x880 [ 377.564521][ T12] ? __pfx_default_device_exit_batch+0x10/0x10 [ 377.564547][ T12] ? __pfx_rdma_dev_exit_net+0x10/0x10 [ 377.564571][ T12] ? cfg802154_pernet_exit+0xc3/0xe0 [ 377.564587][ T12] ? __pfx_default_device_exit_batch+0x10/0x10 [ 377.564613][ T12] cleanup_net+0x8af/0xd60 [ 377.564640][ T12] ? __pfx_cleanup_net+0x10/0x10 [ 377.564670][ T12] ? process_scheduled_works+0x9cb/0x18e0 [ 377.564689][ T12] process_scheduled_works+0xac3/0x18e0 [ 377.564721][ T12] ? __pfx_process_scheduled_works+0x10/0x10 [ 377.564745][ T12] ? assign_work+0x367/0x3d0 [ 377.564765][ T12] worker_thread+0x870/0xd50 [ 377.564792][ T12] ? __kthread_parkme+0x1a8/0x200 [ 377.564814][ T12] ? __pfx_worker_thread+0x10/0x10 [ 377.564833][ T12] kthread+0x7b7/0x940 [ 377.564857][ T12] ? __pfx_worker_thread+0x10/0x10 [ 377.564882][ T12] ? __pfx_kthread+0x10/0x10 [ 377.564904][ T12] ? __pfx_kthread+0x10/0x10 [ 377.564926][ T12] ? __pfx_kthread+0x10/0x10 [ 377.564948][ T12] ? __pfx_kthread+0x10/0x10 [ 377.564971][ T12] ? _raw_spin_unlock_irq+0x23/0x50 [ 377.564987][ T12] ? lockdep_hardirqs_on+0x9d/0x150 [ 377.565006][ T12] ? __pfx_kthread+0x10/0x10 [ 377.565029][ T12] ret_from_fork+0x4b/0x80 [ 377.565047][ T12] ? __pfx_kthread+0x10/0x10 [ 377.565069][ T12] ret_from_fork_asm+0x1a/0x30 [ 377.565104][ T12] [ 377.974995][T13506] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 377.989029][T13506] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2194'. [ 378.622031][ T12] team0 (unregistering): Port device team_slave_1 removed [ 378.656568][ T12] team0 (unregistering): Port device team_slave_0 removed