last executing test programs: 4.72497284s ago: executing program 2 (id=2009): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x75, 0x0, &(0x7f0000000080)) (async) connect$inet(r0, &(0x7f0000000340)={0x2, 0x4e24, @loopback}, 0x10) (async, rerun: 32) recvmmsg(r0, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000000c0)}}, {{0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000100)=""/227, 0xe3}, {0x0}], 0x2}, 0x8}], 0x2, 0x10122, 0x0) (rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f00000002c0)=ANY=[@ANYBLOB="050000000000000071117700000000008510000002000000850000005600000095000000000000009500a50500000000eefd02f7e4c7ef6bfd6b7e160d5a59898098d03978903a3ecb0443b5069f63b76ffe38996114079c34e953ab2fc1f800c7ff9cdad0b490700b4586082326cabc459587bf937e83c29ff4e4a47e30f1b31c886030af93d6bfa6aa21216810d61d6e970aa4c96e0f77e00ff165"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) 4.608001854s ago: executing program 2 (id=2011): socket$alg(0x26, 0x5, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x34, 0x3c, 0x107, 0x0, 0x0, {0x1, 0x7c}, [@nested={0x4, 0xfc}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x8, 0x2, 0x0, 0x1, [@nested={0x4, 0x72}]}, @typed={0x8, 0x5, 0x0, 0x0, @fd=r0}]}, 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0xc000) r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_LIST_RULES(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x10, 0x3f5, 0x20, 0x4, 0x25dfdbfe}, 0x10}, 0x1, 0x0, 0x0, 0x20000880}, 0x40000) 4.45965469s ago: executing program 2 (id=2015): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x2, 0x2, &(0x7f00000000c0)=ANY=[@ANYBLOB="85000000ae0000009500000000000000d295fc9a8d51ce91a6e14fa435fcecc84de2559e15b733e4fa389bd54e6d569151c673de3cdf7881f822a607bc60e50787cc01097593dcd21755bfd9e71ec654f8efabbc4565c9d323e7e9464389749e0671f9cf36240bf6d1e12ba8c631ff8a8c0cb8838cb75c74bccd4ecde7014b560b00000000"], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000040)={@private1}, &(0x7f0000000080)=0x14) r0 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000480)=@ethtool_ringparam={0x4, 0x0, 0x4, 0x8201, 0x0, 0x0, 0x2, 0x2fd, 0x100000}}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001300)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r3, {0xffff, 0x7}, {}, {0xa, 0x1}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8864}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000240)={'tunl0\x00', &(0x7f0000000180)={'syztnl2\x00', 0x0, 0x7800, 0x40, 0xffff, 0x3, {{0x1e, 0x4, 0x0, 0x3, 0x78, 0x68, 0x7, 0x0, 0x2f, 0x0, @multicast1, @private=0xa010102, {[@end, @timestamp_addr={0x44, 0x1c, 0x22, 0x1, 0x2, [{@multicast2, 0xda}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x9}, {@dev={0xac, 0x14, 0x14, 0x3e}}]}, @lsrr={0x83, 0x7, 0xa5, [@dev={0xac, 0x14, 0x14, 0x2e}]}, @timestamp_addr={0x44, 0x14, 0xc, 0x1, 0x1, [{@local, 0x7}, {@empty, 0x7}]}, @generic={0x94, 0x7, "a25a817f48"}, @timestamp_prespec={0x44, 0x24, 0x59, 0x3, 0x7, [{@broadcast, 0xa}, {@empty, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x9}, {@loopback, 0xe7}]}]}}}}}) syz_emit_ethernet(0x4c, &(0x7f00000001c0)=ANY=[@ANYBLOB="0180c20000006c06e3bcee5586dd6001010000161100fc020000000000000000000000000000fe8000000000000000000000000000aa00000e220006"], 0x0) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x84, 0x0, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x8040}, 0x811) 4.055861817s ago: executing program 2 (id=2022): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) syz_emit_ethernet(0x8e, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaa1acd1f78800d86dd608a37f200587300fe8000000000000000000000000000bbfe8000000000000000000000000000aa"], 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000006112000000000000950000000000000051fa7824c74186dc02ec0696c37b64e3b24da3180100000005345c0f63cdc2e82818254950ee03568b8809a1f04c7c4750eabfafcb9531b31e6a86827d1010c5a909ab98e00e19644a88e95ba26d1c9eecddb2d11c541418ceeb29b9b6829c6e433822bdb3cc85244aab66c1aae9314d7381fcfeb970bea672010000000000000043144648a07a975bd89dc398712376610faa54f12495b4659be8673086f6f3543205d4bc4ce05b8b961103673dff7f158052e62bfbdcddde6985f3f1ac5d9a94cc53207899762a07282a1914452d11858e795a3ca30a101af5574f9035f2b5f703e5be7e4acf8b78c2834ae5805fffee38a9a0033d520bcf6b08ede50899d4b9bdf85c71c5ed44039aab46419496362e54cfad05b4004ac71a003d7b85d07191bed4e5a8908263722d4146f7ed569985439baa355cf3d8731f5e7a237bc06d035a8d601f21746d880819f38b34a495040000000071c2f0cce8c93cc17e9afa314fcb2ba15d646c5b9f87d988c9fbd2b9d9b4e2d71753b1549fa734f0b2e5fcf9549804cddad721971637f9c9730a9cc384eed30345979db9c93e1c52f42cad0a4d4f9436d3f39b0ed09c395dc6e970366087a8e4daeeb1b017006f25caf0cbcefd13d68839893e39c588eb032905f91cafa4996dbf0cc8228d02a3092c0830b8f587a5624515298b2d4eb2bde6f9a2eb83d53f710c490ecd085d2811a7555c53030000007f00000000bfa6478eb96b079c277e2910b7ccdc3d672ed34aa65278c549e2abb549ad954884289130bc71cee2b7de62bf48129ae1af052a2d46a6165eb0954dac7265f1f425735acf6377793946b3229e861d8ea49806b3b533345d36ecef9df700000000f337b1ceb2d8a65dcdcd895d7ba37098d2593fdaaef445af5bee02019c000000aaae37f044bcadeb0f6846582b7653665aa336db9f0384d3c7ddf79c2e0000000000000000000000000000000000000000000000e154aa0d3e41986a668ee1e5ef93a8ceac75f44aae95e26742f895f287111f8ee86f7e3ffb63cfb0e345cf7fc63dd2b0d30977899c6f03640040af4db71f7452bfc79a05118d8bb42b63b195771e42f9942ec626bd4b5461b74324012164e8"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000ac0)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000006112000000000000950000000000000051fa7824c74186dc02ec0696c37b64e3b24da3180100000005345c0f63cdc2e82818254950ee03568b8809a1f04c7c4750eabfafcb9531b31e6a86827d1010c5a909ab98e00e19644a88e95ba26d1c9eecddb2d11c541418ceeb29b9b6829c6e433822bdb3cc85244aab66c1aae9314d7381fcfeb970bea672010000000000000043144648a07a975bd89dc398712376610faa54f12495b4659be8673086f6f3543205d4bc4ce05b8b961103673dff7f158052e62bfbdcddde6985f3f1ac5d9a94cc53207899762a07282a1914452d11858e795a3ca30a101af5574f9035f2b5f703e5be7e4acf8b78c2834ae5805fffee38a9a0033d520bcf6b08ede50899d4b9bdf85c71c5ed44039aab46419496362e54cfad05b4004ac71a003d7b85d07191bed4e5a8908263722d4146f7ed569985439baa355cf3d8731f5e7a237bc06d035a8d601f21746d880819f38b34a495040000000071c2f0cce8c93cc17e9afa314fcb2ba15d646c5b9f87d988c9fbd2b9d9b4e2d71753b1549fa734f0b2e5fcf9549804cddad721971637f9c9730a9cc384eed30345979db9c93e1c52f42cad0a4d4f9436d3f39b0ed09c395dc6e970366087a8e4daeeb1b017006f25caf0cbcefd13d68839893e39c588eb032905f91cafa4996dbf0cc8228d02a3092c0830b8f587a5624515298b2d4eb2bde6f9a2eb83d53f710c490ecd085d2811a7555c53030000007f00000000bfa6478eb96b079c277e2910b7ccdc3d672ed34aa65278c549e2abb549ad954884289130bc71cee2b7de62bf48129ae1af052a2d46a6165eb0954dac7265f1f425735acf6377793946b3229e861d8ea49806b3b533345d36ecef9df700000000f337b1ceb2d8a65dcdcd895d7ba37098d2593fdaaef445af5bee02019c000000aaae37f044bcadeb0f6846582b7653665aa336db9f0384d3c7ddf79c2e0000000000000000000000000000000000000000000000e154aa0d3e41986a668ee1e5ef93a8ceac75f44aae95e26742f895f287111f8ee86f7e3ffb63cfb0e345cf7fc63dd2b0d30977899c6f03640040af4db71f7452bfc79a05118d8bb42b63b195771e42f9942ec626bd4b5461b74324012164e8"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB="02"], 0x10) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000200), 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x13, &(0x7f00000005c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2d3, 0x0, 0x0, 0x0, 0x5}, [@map_val={0x18, 0xb, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x8}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @alu={0x7, 0x1, 0xd, 0x9, 0x2, 0x6}, @printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}, @btf_id={0x18, 0x7, 0x3, 0x0, 0xd}, @call={0x85, 0x0, 0x0, 0x99}]}, &(0x7f00000001c0)='GPL\x00', 0x5, 0x7c, &(0x7f0000000680)=""/124, 0x40f00, 0x10, '\x00', 0x0, 0x0, r6, 0x8, &(0x7f0000000700)={0x9, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000740)=[r1, r1, r1, r1, r1], &(0x7f0000000780)=[{0x4, 0x5, 0x5}, {0x3, 0x3, 0x0, 0x4}], 0x10, 0x7, @void, @value}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000f00)=ANY=[@ANYRES32=r5, @ANYRES32=r2, @ANYBLOB="02"], 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"/2574], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r8 = socket$kcm(0x2, 0x1, 0x0) r9 = socket$inet_dccp(0x2, 0x6, 0x0) r10 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$int_in(r10, 0x5421, &(0x7f0000000000)=0xfffffffffffffff9) listen(r10, 0x0) accept4(r10, 0x0, 0x0, 0x0) getsockopt$inet_int(r9, 0x10d, 0x93, 0x0, &(0x7f0000000080)) listen(r8, 0x200000fd) r11 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r11, 0x89e0, &(0x7f0000000040)={r8, r7}) getsockopt$bt_hci(r0, 0x84, 0x85, &(0x7f00000020c0)=""/4064, &(0x7f0000000000)=0xfe0) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FITRIM(r12, 0x40305829, 0x0) getsockopt$sock_buf(r0, 0x1, 0x1f, &(0x7f0000000040)=""/220, &(0x7f0000000140)=0xdc) 3.920604626s ago: executing program 2 (id=2024): r0 = socket$xdp(0x2c, 0x3, 0x0) (async) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f00000002c0)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'batadv_slave_1\x00', 0x0}) connect$qrtr(0xffffffffffffffff, &(0x7f0000000000)={0x2a, 0xffffffff, 0x4000}, 0xc) (async, rerun: 32) recvmmsg(0xffffffffffffffff, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0}, 0x7}], 0x1, 0x40010160, 0x0) (rerun: 32) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000200)={&(0x7f0000000000)=""/65, 0x228000, 0x800, 0x3, 0x1}, 0x20) (async, rerun: 64) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) (rerun: 64) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) (async) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r5, 0x84, 0x6, &(0x7f0000000380)={0x0, @in={{0x2, 0x4e22, @multicast1}}}, &(0x7f0000000040)=0x84) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) (async) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x10, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00', 0x0}) (async) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000300)=0x1, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r7}, 0x10) bind$xdp(r0, &(0x7f0000000240)={0x2c, 0x1, r2, 0x0, r3}, 0x60) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0xc, &(0x7f0000004940)=ANY=[@ANYBLOB="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", @ANYRESOCT, @ANYRESHEX=r0, @ANYRES8, @ANYRES16=r1, @ANYRES8=r7, @ANYRESHEX=r6, @ANYBLOB="c2ef80a290c6b5172f2e9519540cd1fc24984bb1aae18e850ab1cf737ce92bc2f3e9c643acda3e015235702be3a9c32942315a272b03c0d8a57bbfcb5a5e77a885f0cbf43a9fdb853497fa7f00f962cb7b2dfb93790ab6f0afe4352867a9405c7aabf7663ef394ed6735df279fbf871de85449c91d6f031187a39652b88a224f6ef7a737c16b74b939"], &(0x7f0000000540)='syzkaller\x00', 0x80, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYRES32=r2, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRESHEX=r3], 0x13c}, 0x1, 0x0, 0x0, 0x20004001}, 0x0) (async, rerun: 32) r9 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0e00000006000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB="feffffff0000d183788fc84ab1346170cf48ac3cf167000000001300000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) (async, rerun: 64) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x100000d, 0x3032, 0xffffffffffffffff, 0x0) (async, rerun: 64) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000002000000000000000000000300000000040000001f00ffff000000000000"], &(0x7f0000000f40)=""/4096, 0x32, 0x1000, 0x1, 0x0, 0x0, @void, @value}, 0x20) (async, rerun: 64) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64) sendmsg$IPCTNL_MSG_CT_GET(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000040)={0x30, 0x1, 0x1, 0x101, 0x0, 0x0, {0xa}, [@CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x468}]}, @CTA_TUPLE_ORIG={0x10, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}]}, 0x30}}, 0x0) (async) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r10, &(0x7f00000000c0), &(0x7f0000000000)=""/10, 0x2}, 0x20) (async, rerun: 32) bpf$MAP_GET_NEXT_KEY(0x3, &(0x7f00000001c0)={r10, &(0x7f0000000240), 0x0}, 0x20) (async, rerun: 32) sendmsg$nl_route(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="120000001a00d81d000000000000002093a14df86a39bcbfe494b265f4f09a3fdef5fb9699d18b116905cdb1ccbc1060ba46117ed86e2c9db60fcc4570ab1e2ba895dfbeed1ad5baa867f9433052d8edfb46653c13b092b4bd6e2e42c3831fbf15f1c2bc7ad0743aeb984267e4181f75d707b167fb4118d460f7336552a84b6921fcf7fd63102d220308c9189c5ce3000000000036ef21773a7f2c763ca1017b4e4bfb"], 0x1c}}, 0x20000000) 3.696016176s ago: executing program 2 (id=2027): r0 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$inet6_int(r0, 0x29, 0x17, &(0x7f0000000480)=0x5, 0x4) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000140)={0x1f, 0xffff, 0x3}, 0x6) write(r1, &(0x7f0000000000)="3b000300010000", 0x7) r2 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000340)={{{@in=@remote, @in=@local}}, {{@in6=@private2}, 0x0, @in6=@loopback}}, &(0x7f0000000440)=0xe8) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) sendmsg$netlink(r3, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000000c0)={0x3c, 0x2c, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid=r5}, @nested={0xb, 0x0, 0x0, 0x1, [@generic="976b6408686030"]}, @nested={0x18, 0x1, 0x0, 0x1, [@nested={0x11, 0x10d, 0x0, 0x1, [@generic="905176c518740da397a9423603"]}]}]}, 0x3c}], 0x1}, 0x0) getgid() ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000b40)) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000000000000ac1e000100000000000000000000000000000000000000000a00603000000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001400"/112], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_xfrm(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000000000000ac1e170100000000000000000000000000000000000000000a00400000000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000001000"/112], 0xb8}}, 0x0) 3.296286354s ago: executing program 1 (id=2030): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$SEG6(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r1, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000800)={0x2c, r2, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x7}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000800}, 0x8000) connect$phonet_pipe(r0, 0x0, 0x0) ioctl$SIOCPNENABLEPIPE(r0, 0x89ed, 0x500) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001ec0)={0x6, 0x4, &(0x7f0000001c00)=@framed={{}, [@ldst={0x1, 0x0, 0x4, 0x0, 0xa, 0xfe00}]}, &(0x7f0000001c40)='syzkaller\x00', 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 3.129128552s ago: executing program 1 (id=2033): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newlink={0x5c, 0x10, 0x401, 0x70bd26, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x28, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e21}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_LINK={0x8}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e23}]}}}]}, 0x5c}}, 0x0) r1 = socket(0x2, 0x5, 0x0) sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{&(0x7f0000002e40)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x880) sendmmsg$inet_sctp(r1, &(0x7f0000000bc0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000001c0)=[{0x0, 0x2}], 0x1, &(0x7f0000000140)=ANY=[@ANYBLOB="30000000000000008400000001000000000000000c0000000000000002002b0388edb6556900"/51, @ANYRES32=0x0], 0x30}], 0x1, 0x0) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000100)={'wg0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'ipvlan1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_GET(r1, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)={0x10c, r2, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}]}, @HEADER={0x88, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x10c}, 0x1, 0x0, 0x0, 0x20044850}, 0x40) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newlink={0x5c, 0x10, 0x401, 0x70bd26, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x28, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e21}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_LINK={0x8}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e23}]}}}]}, 0x5c}}, 0x0) (async) socket(0x2, 0x5, 0x0) (async) sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{&(0x7f0000002e40)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x880) (async) sendmmsg$inet_sctp(r1, &(0x7f0000000bc0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000001c0)=[{0x0, 0x2}], 0x1, &(0x7f0000000140)=ANY=[@ANYBLOB="30000000000000008400000001000000000000000c0000000000000002002b0388edb6556900"/51, @ANYRES32=0x0], 0x30}], 0x1, 0x0) (async) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000100)={'wg0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'ipvlan1\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00'}) (async) sendmsg$ETHTOOL_MSG_PAUSE_GET(r1, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)={0x10c, r2, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}]}, @HEADER={0x88, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x10c}, 0x1, 0x0, 0x0, 0x20044850}, 0x40) (async) 2.706153008s ago: executing program 1 (id=2038): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000100)={@loopback}, 0x14) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x4e}]}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)) r1 = socket$inet6(0xa, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'virt_wifi0\x00', 0x0}) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000080)={0x11, @private=0xa010100, 0x15, 0x0, 'wrr\x00', 0x39, 0x0, 0x20}, 0x2c) sendto$inet(r6, 0x0, 0x0, 0x200007fd, &(0x7f0000000180)={0x2, 0x14, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000300)=@newlink={0x7c, 0x10, 0x503, 0x70bd26, 0x0, {}, [@IFLA_LINKINFO={0x54, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x44, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x1}, @IFLA_VLAN_EGRESS_QOS={0x4}, @IFLA_VLAN_INGRESS_QOS={0x34, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7, 0xffffffff}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x3, 0xfffffffd}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xa5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1, 0x81}}]}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x7c}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r8, 0x400448df, &(0x7f00000002c0)) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x2c, 0x3, 0x1, 0x101, 0x0, 0x0, {0x2, 0x0, 0x4}, [@CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x2}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x1}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000041}, 0xc000) socket$alg(0x26, 0x5, 0x0) sendto$unix(0xffffffffffffffff, 0x0, 0x0, 0x800, 0x0, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000040)={@remote, r2}, 0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="7a0a00ff000000007110bc000000000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r9 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000002c0)={'virt_wifi0\x00'}) r10 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r10, &(0x7f0000000080), 0x10) sendmsg$can_bcm(r10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) sendmsg$can_bcm(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)={0x6, 0x0, 0x0, {0x0, 0xea60}, {0x77359400}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "1d0b6382972f4b8f"}}, 0x48}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) 2.567597306s ago: executing program 3 (id=2040): r0 = accept4$ax25(0xffffffffffffffff, &(0x7f0000000000)={{0x3, @default}, [@rose, @default, @bcast, @netrom, @rose, @bcast, @netrom, @netrom]}, &(0x7f0000000080)=0x48, 0x400) recvfrom$ax25(r0, &(0x7f00000000c0), 0x0, 0x40, &(0x7f0000000100)={{0x3, @default, 0x5}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x48) (async) recvfrom$ax25(r0, &(0x7f00000000c0), 0x0, 0x40, &(0x7f0000000100)={{0x3, @default, 0x5}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x48) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x28, 0x0, 0x0, 0x9, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x8, 0x64}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x40010) socket$packet(0x11, 0x2, 0x300) (async) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000002c0)="ceb876ec08d9c6b709c97ea43f908071345b29af60c568b1391a11e361b44ead6b708812cbe2d5867ee26cef64fc437769c7ca579c5251855d66dae2bef6a4017676f1a3186cc7227d2adda9d4e8c4bd45acd37157b0d25aa2fb40c0cacfb820a090e486270e7602fa9575c47515fc85153889fb5f4f823c11a9ecd517266f8b2114e3b537bcfd1f6901712a059d89ef385fb29a27f84c7f828b14dfca7605e606eb8f05b72ed1b85379b6d634444c2a659dd89b76555970699372e6bcf35d20844ca63a01d33218f0ce34", 0xcb) (async) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000002c0)="ceb876ec08d9c6b709c97ea43f908071345b29af60c568b1391a11e361b44ead6b708812cbe2d5867ee26cef64fc437769c7ca579c5251855d66dae2bef6a4017676f1a3186cc7227d2adda9d4e8c4bd45acd37157b0d25aa2fb40c0cacfb820a090e486270e7602fa9575c47515fc85153889fb5f4f823c11a9ecd517266f8b2114e3b537bcfd1f6901712a059d89ef385fb29a27f84c7f828b14dfca7605e606eb8f05b72ed1b85379b6d634444c2a659dd89b76555970699372e6bcf35d20844ca63a01d33218f0ce34", 0xcb) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000400), 0xffffffffffffffff) (async) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000400), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wpan3\x00'}) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000500)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r4, &(0x7f0000000640)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20604151}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x78, r5, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r10}]}, 0x78}, 0x1, 0x0, 0x0, 0x4020400}, 0x44880) (async) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r4, &(0x7f0000000640)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20604151}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x78, r5, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r10}]}, 0x78}, 0x1, 0x0, 0x0, 0x4020400}, 0x44880) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$batadv(&(0x7f00000006c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(r11, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x4c, r12, 0x800, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x18b6}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7fff}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x2}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1c9a69db}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40840}, 0x8000) openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000800)='memory.pressure\x00', 0x2, 0x0) (async) r13 = openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000800)='memory.pressure\x00', 0x2, 0x0) splice(r13, &(0x7f0000000840)=0x6, r3, &(0x7f0000000880)=0x8, 0x2, 0x1) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000029c0)=[{{&(0x7f00000008c0)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000002940)=[{&(0x7f0000000940)="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", 0x1000}, {&(0x7f0000001940)="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", 0x1000}], 0x2, &(0x7f0000002980)=[@rights={{0x14, 0x1, 0x1, [r2]}}], 0x18, 0x10}}], 0x1, 0x0) r14 = syz_genetlink_get_family_id$ipvs(&(0x7f0000002a40), r11) sendmsg$IPVS_CMD_NEW_SERVICE(r11, &(0x7f0000002c00)={&(0x7f0000002a00)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000002bc0)={&(0x7f0000002a80)={0x104, r14, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x48, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xe}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xf68}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_DAEMON={0x48, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x5}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'macvtap0\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7fff}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x64010100}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}]}, @IPVS_CMD_ATTR_DEST={0x30, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x8000}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@multicast2}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x5}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}]}, 0x104}, 0x1, 0x0, 0x0, 0x4090}, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r15 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000002c80), r4) (async) r16 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000002c80), r4) sendmsg$IEEE802154_SCAN_REQ(r15, &(0x7f0000002d80)={&(0x7f0000002c40)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000002d40)={&(0x7f0000002cc0)={0x4c, r16, 0x2, 0x70bd28, 0x25dfdbfd, {}, [@IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x6}, @IEEE802154_ATTR_DURATION={0x5, 0x15, 0x4}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x2}, @IEEE802154_ATTR_DURATION={0x5, 0x15, 0x36}, @IEEE802154_ATTR_DURATION={0x5}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0xf}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x60}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24008000}, 0x24040015) (async) sendmsg$IEEE802154_SCAN_REQ(r15, &(0x7f0000002d80)={&(0x7f0000002c40)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000002d40)={&(0x7f0000002cc0)={0x4c, r16, 0x2, 0x70bd28, 0x25dfdbfd, {}, [@IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x6}, @IEEE802154_ATTR_DURATION={0x5, 0x15, 0x4}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x2}, @IEEE802154_ATTR_DURATION={0x5, 0x15, 0x36}, @IEEE802154_ATTR_DURATION={0x5}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0xf}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x60}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24008000}, 0x24040015) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000002dc0)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r11, 0xd000943e, &(0x7f0000002fc0)={r17, 0x0, "7d9f6f973fe487a369c7e1f473cd608a95ab3d59ec7808c4d2153fd609e2456e10acfc021271694baf0cb795e4ad9c683424711554b84486a9a1c3c8adb8d14bf7827aba7ed05167f4da1c2a499b920db6f07fc44a3b9c382612dc894e7b63b684725828894f83b374df6a1aa3c8652092344717ac20b0bbd334363ab3e0d36b9772f0b7b501f465e9f31c5b08c6adc53564748fc6ac3b157b6fc5d3782c3ad5729775dba2aace08f654053a4705540cea706c66a44e26bffed75cf70f3943eda6015662c40b70b25c2abb5141bacb08b1d0cb32debfc183485e4199570001c8e04010b4165a03dcd91e9f1ead1d0ff908e7b411f153a61f2df406b12811a5b8", "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"}) recvfrom(r3, &(0x7f0000003fc0)=""/128, 0x80, 0x0, &(0x7f0000004040)=@pppol2tpv3={0x18, 0x1, {0x0, r11, {0x2, 0x4e23, @multicast1}, 0x0, 0x4, 0x2, 0x3}}, 0x80) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000040c0)={'veth0_to_bridge\x00'}) 1.405348782s ago: executing program 4 (id=2043): r0 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x1, 0x4000010, r0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0xa, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000073017f000000000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = socket(0x15, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'veth0\x00'}) setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, 0x0, 0x0) socket(0x10, 0x803, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r2, 0x84, 0x5, &(0x7f0000000300)={0x0, @in6={{0xa, 0x4e20, 0xfff, @private0={0xfc, 0x0, '\x00', 0xe2}, 0x56}}}, 0x84) r3 = socket$unix(0x1, 0x1, 0x0) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="ea54c3c7", @ANYRES16=r6, @ANYBLOB="0700000000000000000005000000180001801400020073797a5f74756e"], 0x40}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000200)={'wlan0\x00'}) sendmsg$netlink(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="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"/280], 0x118}], 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'team_slave_1\x00'}) setsockopt$netrom_NETROM_N2(r1, 0x103, 0x3, 0x0, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.numa_stat\x00', 0x26e1, 0x0) close(r7) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$inet6_dccp(0xa, 0x6, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)={0x58, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_NETMASK={0x5, 0x14, 0x5}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4004800}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) ioctl$SIOCSIFHWADDR(r7, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100"}) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000005, 0x3032, 0xffffffffffffffff, 0x0) 1.303172546s ago: executing program 3 (id=2044): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='2[\x00'/28], 0x48) r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, 0xfffffffffffffffe) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x3, 0x4, 0x4, 0x28, 0x10e, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_REG(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)=ANY=[@ANYRESHEX=r2, @ANYRES16=r1, @ANYBLOB="010000000000800000001a000000280022800414008004000080040000808341f1680200008014000080040000800400008004000080060021"], 0x44}}, 0x800) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_rose_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x3, @default, @netrom={'nr', 0x0}, 0x4, [@bcast, @bcast, @bcast, @default, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default]}) r4 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000300)={'wlan0\x00'}) r5 = socket$inet6(0xa, 0xa, 0x0) r6 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000001880)=@raw={'raw\x00', 0x3c1, 0x3, 0x380, 0x158, 0x111, 0x4b4, 0x158, 0xd4feffff, 0x2b0, 0x20a, 0x278, 0x2b0, 0x278, 0x3, 0x0, {[{{@ipv6={@empty, @empty, [], [], 'ipvlan0\x00', 'vlan1\x00'}, 0x7a, 0x118, 0x158, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x80000001, 0x80}}, @common=@unspec=@connlabel={{0x28}}]}, @common=@inet=@TCPOPTSTRIP={0x40}}, {{@ipv6={@mcast1, @private1, [], [], 'veth1_to_hsr\x00', 'pim6reg1\x00'}, 0x0, 0xf0, 0x158, 0x0, {}, [@common=@dst={{0x48}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3e0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x33, &(0x7f0000000000)={0x0, 0x0}, 0x10) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000680)={{0x2, 0x4e24, @broadcast}, {0x6}, 0x6c, {0x2, 0x4e21, @multicast1}, 'gretap0\x00'}) socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet6_int(r4, 0x29, 0x36, &(0x7f00000001c0), &(0x7f0000000280)=0x4) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x101, 0x0, 0x0, {}, [@NFTA_RULE_CHAIN={0x0, 0x2, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x88}, 0x1, 0x0, 0x0, 0x24004094}, 0x0) 1.302807889s ago: executing program 1 (id=2045): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000300)="d8000000180081034e81f783db4cb9040a1d020006007c09e8fc55a10a0015000400142603600e120800140000000401a80009000800024004000000035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300"/216, 0xd8}], 0x1}, 0x20048010) setsockopt$packet_int(r0, 0x107, 0x17, &(0x7f0000000080)=0x1, 0x4) syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) 1.082635597s ago: executing program 4 (id=2047): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r1, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) (async) connect$unix(r1, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) (async) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000002140)={'wlan0\x00', 0x0}) (async) r6 = socket(0x10, 0x803, 0x0) (async) r7 = syz_init_net_socket$x25(0x9, 0x5, 0x0) setsockopt$X25_QBITINCL(r7, 0x106, 0x1, 0x0, 0x0) (async) sendto(r6, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) (async) recvmmsg(r6, &(0x7f00000037c0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}], 0x1, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x0, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r4) sendmsg$NL80211_CMD_DEL_STATION(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000002200)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="290a29bd7000000000001400000008000300", @ANYRES32=r5, @ANYBLOB="060036"], 0x2c}}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) (async) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, 0x0, 0x0) (async) sendmmsg$unix(r2, &(0x7f00000bd000), 0x400000000000247, 0x0) r9 = accept(r0, 0x0, &(0x7f0000000140)) accept4$inet6(r9, 0x0, &(0x7f0000000180), 0x800) r10 = socket$unix(0x1, 0x2, 0x0) (async) r11 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_ENCAP(r11, 0x113, 0x1, &(0x7f0000000240), &(0x7f0000000280)=0x4) sendmsg$unix(r10, &(0x7f00000036c0)={&(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e, 0x0}, 0x40040) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000b40)=@newtaction={0xf58, 0x30, 0x25, 0x0, 0x0, {}, [{0xf44, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{}, 0x4}, [{}, {}, {}, {0x0, 0x0, 0x4000000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x100}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0xff}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x4}], [{}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}]}}]}, {0x4}, {0xc}, {0xc}}}, @m_bpf={0xf0, 0x2, 0x0, 0x0, {{0x8}, {0x17, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS={0x24, 0x4, [{0x1, 0xff, 0x4, 0x6}, {0x6, 0x9, 0x1, 0x3}, {0x8, 0xa, 0x9, 0xe5ad}, {0x2, 0xfd, 0x3, 0x7}]}]}, {0xa4, 0x6, "aef41341fdedc57514e9e6b7c9a7d6c6f2710911ea3f03808c1cd540f74547537bf4bd3de3af39a159c644fdacd41501de3816424920bd50948bb71277cbcb3af35a087dfca43335c1d1f7676239b2932026b5e5e0d02760eb4305f349000de9580b5ad411948e208801ff4e11df28aa70701228e871fa62bd8e1d2b3abd2494e13f35b5933263a1b9ee64b0161ef7cc4e38117db59c3db871f9eb7078642fdf"}, {0xc}, {0xc, 0x8, {0x3}}}}]}]}, 0xf58}}, 0x0) 975.835709ms ago: executing program 3 (id=2048): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet_dccp(0x2, 0x6, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_BEACON(r0, &(0x7f00000001c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x40010) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x80}]}, 0x2c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) socket$inet6(0xa, 0x800000000000002, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r7, 0x6, 0x14, &(0x7f0000000280)=0x2, 0xfffffd21) connect$inet6(r7, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendto$inet6(r7, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r7, 0x0) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="d80000001c0081044e81f782db44b9040a1d080214000000020003a118000c000300000000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x20000080) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r7, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000001380)=""/4080, 0xff0, 0x0, 0x0}, &(0x7f0000000000)=0x40) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r7, 0x6, 0x23, &(0x7f00000007c0)={&(0x7f0000ffd000/0x1000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1, 0x0}, &(0x7f0000000800)=0x40) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001440)={0x1c, r9, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r6}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 971.723282ms ago: executing program 1 (id=2049): r0 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r0, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) sendmsg$inet(r0, &(0x7f0000000fc0)={0x0, 0x0, 0x0}, 0x20000811) 968.391511ms ago: executing program 0 (id=2050): r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f00000004c0)=@in6={0x21, 0x1, 0xa, 0x1c, {0xa, 0x0, 0x0, @empty}}, 0x24) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000027c0)=ANY=[@ANYBLOB="38000000200001000000000000ee0000020000000000000000000000140003006c6f"], 0x38}}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) socket$rxrpc(0x21, 0x2, 0x2) (async) bind$rxrpc(r0, &(0x7f00000004c0)=@in6={0x21, 0x1, 0xa, 0x1c, {0xa, 0x0, 0x0, @empty}}, 0x24) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000027c0)=ANY=[@ANYBLOB="38000000200001000000000000ee0000020000000000000000000000140003006c6f"], 0x38}}, 0x0) (async) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) 848.785142ms ago: executing program 4 (id=2051): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={{0x14}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @range={{0xa}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_RANGE_SREG={0x8, 0x1, 0x1, 0x0, 0x12}, @NFTA_RANGE_OP={0xffffffffffffffd0}, @NFTA_RANGE_TO_DATA={0x4}, @NFTA_RANGE_FROM_DATA={0x8, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}]}]}}}, {0x0, 0x1, 0x0, 0x1, @meta={{}, @val={0x0, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x0, 0x1, 0x1, 0x0, 0xc}, @NFTA_META_DREG={0x0, 0x1, 0x1, 0x0, 0x17}, @NFTA_META_SREG={0x0, 0x3, 0x1, 0x0, 0x1}, @NFTA_META_SREG={0x0, 0x3, 0x1, 0x0, 0x13}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x88}}, 0x20000080) 749.324337ms ago: executing program 4 (id=2052): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0xfffffeff, @empty, 0x4000000}, 0x1c) connect$inet6(r0, &(0x7f0000000600)={0x2, 0x4e23, 0x0, @dev={0xfe, 0x80, '\x00', 0x38}, 0x4}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_NET_GET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@newlink={0x20, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xffffff81}}, 0x20}}, 0x0) recvmmsg(r1, &(0x7f0000000f00)=[{{0x0, 0x0, &(0x7f0000002e40)=[{&(0x7f0000000340)=""/25, 0x19}, {&(0x7f00000006c0)=""/106, 0x6a}, {&(0x7f0000000540)=""/137, 0x89}, {&(0x7f0000001b00)=""/4096, 0x1000}, {&(0x7f0000001a00)=""/126, 0x7e}, {&(0x7f0000002d40)=""/201, 0xc9}], 0x6}, 0xc}, {{0x0, 0x0, 0x0}, 0x24c9ddb}, {{0x0, 0x0, 0x0}, 0xf04}, {{0x0, 0x0, 0x0}, 0x1}], 0x4, 0x40000000, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24, 0x2, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x3}, 0x1c) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000380)=@newtclass={0x88, 0x28, 0x8, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x3, 0xfff3}, {0x0, 0xffff}, {0xfff2, 0xffe0}}, [@TCA_RATE={0x6, 0x5, {0x8, 0x40}}, @tclass_kind_options=@c_skbprio={0xc}, @tclass_kind_options=@c_sfb={0x8}, @tclass_kind_options=@c_taprio={0xb}, @tclass_kind_options=@c_red={0x8}, @tclass_kind_options=@c_prio={0x9}, @TCA_RATE={0x6, 0x5, {0x0, 0x8}}, @tclass_kind_options=@c_drr={{0x8}, {0xc, 0x2, @TCA_DRR_QUANTUM={0x8, 0x1, 0x6}}}, @tclass_kind_options=@c_taprio={0xb}]}, 0x88}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) r5 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r5, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e230e22ac14143e925aa80020007b00090080007f000001e809000000ff0000f03ac7102d000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) 691.958403ms ago: executing program 0 (id=2053): r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f0000002e00), &(0x7f0000000200), 0x8, 0x0, 0x8, 0x0, 0x0}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000100)={0x100043, 0x3, 0x3, 0x3}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x7, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={r3, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x7, 0x4, 0x418, 0x110, 0x110, 0x110, 0x330, 0x330, 0x330, 0x4, &(0x7f0000000040), {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x24}, @mac, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x4}}}, {{@arp={@local, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xff, 0x0, 0x6, 0xb, {@empty, {[0xff, 0x0, 0x0, 0xff]}}, {@empty, {[0x0, 0x0, 0x0, 0x0, 0xff, 0xff]}}, 0x9, 0x400, 0x6, 0x1, 0x2, 0x26, 'team0\x00', 'pim6reg\x00', {0xff}, {}, 0x0, 0x280}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@remote, @broadcast, @multicast1, 0x8}}}, {{@arp={@initdev={0xac, 0x1e, 0x1, 0x0}, @remote, 0xff000000, 0xff, 0x3, 0x1, {@mac=@multicast, {[0xff, 0x0, 0xff, 0x0, 0xff, 0xff]}}, {@mac=@broadcast, {[0xff, 0xff, 0x0, 0x0, 0xff]}}, 0x4, 0x5, 0x81, 0xfff, 0x7, 0x9, 'veth0_vlan\x00', 'ip6_vti0\x00', {}, {}, 0x0, 0x20}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @remote, @multicast1, 0x2, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x468) 634.29247ms ago: executing program 0 (id=2054): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000055c0), r0) sendmsg$IEEE802154_LLSEC_DEL_DEV(r0, &(0x7f0000005680)={0x0, 0x0, &(0x7f0000005640)={&(0x7f0000000480)={0x30, r1, 0x1, 0x45, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x11, 0x4, 0x2) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @rand_addr=0x64010101}, 0x10) sendmsg$nl_route(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40004}, [@IFLA_MTU={0x8, 0x4, 0x3f9}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 525.035987ms ago: executing program 3 (id=2055): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x3c, r3, 0x1, 0x0, 0x0, {0x2f}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async) sendmsg$DEVLINK_CMD_PORT_SET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x40, r3, 0x300, 0x70bd2b, 0x25dfdbfd, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x3}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) (async) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB='5\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002cbd7000fedbdf2514000000080002000800000018000180140002006e657464657673696d30000000000000"], 0x34}, 0x1, 0x0, 0x0, 0x7e86e368248eb16b}, 0x40080) 447.839273ms ago: executing program 0 (id=2056): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)={0x2c, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}]]}, 0x2c}}, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10) write(r1, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000000020000000000800040001000000", 0x24) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000001a0001000000000000000a00802020", @ANYRES32=0x0, @ANYBLOB="00040000"], 0x38}, 0x1, 0x0, 0x0, 0x40010}, 0x0) r5 = socket$kcm(0x10, 0x7, 0x0) r6 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$inet(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x50}], 0x10000000000001d9, 0x0, 0x0, 0x1f00c00e}, 0x0) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) recvfrom$inet6(r7, &(0x7f0000000400)=""/177, 0xb1, 0x12020, &(0x7f0000000040)={0xa, 0x4e23, 0x200, @local, 0x3}, 0x1c) r8 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r8, 0x110, 0x3, &(0x7f0000000080), 0x4) r9 = socket(0x23, 0x5, 0x0) getsockopt(r9, 0x0, 0x0, 0x0, 0x0) recvmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000004140)=[{&(0x7f0000000240)=""/209, 0xd1}], 0x1}, 0x0) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c0300001a"], 0x34c}}, 0x44) 412.742444ms ago: executing program 3 (id=2057): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0x10004, 0x6}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) 389.525699ms ago: executing program 4 (id=2058): syz_emit_ethernet(0x156, &(0x7f0000002100)={@multicast, @empty, @void, {@mpls_uc={0x8847, {[{0x1}, {0x32, 0x0, 0x1}, {0x8, 0x0, 0x1}, {0x80}, {0x0, 0x0, 0x1}], @ipv6=@generic={0x0, 0x6, "8e0371", 0x10c, 0x2e, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @local, {[@routing={0x2c, 0x8, 0x2, 0x66, 0x0, [@ipv4={'\x00', '\xff\xff', @private=0xa010100}, @rand_addr=' \x01\x00', @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}]}, @dstopts={0x8, 0x0, '\x00', [@padn={0x1, 0x3, [0x0, 0x0, 0x0]}]}, @hopopts={0x32, 0x5, '\x00', [@calipso={0x7, 0x28, {0x2, 0x8, 0x2f, 0x2, [0xfffffffffffffffb, 0xfffffffffffff0e3, 0x4000004, 0x9]}}, @pad1]}, @routing={0x8, 0x2, 0x2, 0x7f, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}]}], "f146c1c7672780e0ea06379dc1c5f7552c67bda292ae89bcfde7f1d860a1f3037cc6c3ab3da32057610fb2b1e6f938c1866cf93055d08c991e47c9da05ab8f2b754b50137d18edd2ca4591080432cc187b3a74cbe426845daad8b58124d010d5247fdfa5"}}}}}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=@ipv6_newroute={0x38, 0x18, 0x1, 0x70bd2c, 0x0, {}, [@RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @SEG6_LOCAL_ACTION={0x8, 0x1, 0x7}}]}, 0x38}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ppp={{0x8}, {0x39, 0x2, 0x0, 0x1, {0x8}}}}, @IFLA_NUM_TX_QUEUES={0x8}]}, 0x40}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000280)={'wlan0\x00'}) r5 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$sock_buf(r5, 0x1, 0x1c, 0x0, &(0x7f0000004880)) r6 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r6, &(0x7f0000000080)={0x0, 0xffffffffffffffd7, 0x0}, 0x0) sendmsg$NL80211_CMD_NEW_STATION(r4, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[], 0x6c}, 0x1, 0x0, 0x0, 0x4808c}, 0x0) r7 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x9, 0x3, 0x2b8, 0x0, 0xffffffff, 0xffffffff, 0x120, 0xffffffff, 0x220, 0xffffffff, 0xffffffff, 0x220, 0xffffffff, 0x3, &(0x7f0000000000), {[{{@uncond, 0x0, 0xc0, 0x120, 0x0, {}, [@common=@osf={{0x50}, {'syz1\x00', 0x0, 0x1, 0x0, 0x2}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x3, [0x0, 0x4, 0x6, 0x7, 0x4, 0x1], 0x0, 0x4}, {0x3, [0x5, 0xa, 0x5, 0x4, 0x4, 0x1], 0x0, 0x3}}}}, {{@uncond, 0x0, 0x98, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x1}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x6, 0x4, 0x1, 0x4, 'pptp\x00', 'syz1\x00', {0x2}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x318) syz_emit_ethernet(0x156, &(0x7f0000002100)={@multicast, @empty, @void, {@mpls_uc={0x8847, {[{0x1}, {0x32, 0x0, 0x1}, {0x8, 0x0, 0x1}, {0x80}, {0x0, 0x0, 0x1}], @ipv6=@generic={0x0, 0x6, "8e0371", 0x10c, 0x2e, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @local, {[@routing={0x2c, 0x8, 0x2, 0x66, 0x0, [@ipv4={'\x00', '\xff\xff', @private=0xa010100}, @rand_addr=' \x01\x00', @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}]}, @dstopts={0x8, 0x0, '\x00', [@padn={0x1, 0x3, [0x0, 0x0, 0x0]}]}, @hopopts={0x32, 0x5, '\x00', [@calipso={0x7, 0x28, {0x2, 0x8, 0x2f, 0x2, [0xfffffffffffffffb, 0xfffffffffffff0e3, 0x4000004, 0x9]}}, @pad1]}, @routing={0x8, 0x2, 0x2, 0x7f, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}]}], "f146c1c7672780e0ea06379dc1c5f7552c67bda292ae89bcfde7f1d860a1f3037cc6c3ab3da32057610fb2b1e6f938c1866cf93055d08c991e47c9da05ab8f2b754b50137d18edd2ca4591080432cc187b3a74cbe426845daad8b58124d010d5247fdfa5"}}}}}}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00'}) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=@ipv6_newroute={0x38, 0x18, 0x1, 0x70bd2c, 0x0, {}, [@RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @SEG6_LOCAL_ACTION={0x8, 0x1, 0x7}}]}, 0x38}}, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ppp={{0x8}, {0x39, 0x2, 0x0, 0x1, {0x8}}}}, @IFLA_NUM_TX_QUEUES={0x8}]}, 0x40}}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000280)={'wlan0\x00'}) (async) socket$inet_smc(0x2b, 0x1, 0x0) (async) getsockopt$sock_buf(r5, 0x1, 0x1c, 0x0, &(0x7f0000004880)) (async) socket$kcm(0x21, 0x2, 0xa) (async) sendmsg$kcm(r6, &(0x7f0000000080)={0x0, 0xffffffffffffffd7, 0x0}, 0x0) (async) sendmsg$NL80211_CMD_NEW_STATION(r4, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[], 0x6c}, 0x1, 0x0, 0x0, 0x4808c}, 0x0) (async) socket$inet_dccp(0x2, 0x6, 0x0) (async) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x9, 0x3, 0x2b8, 0x0, 0xffffffff, 0xffffffff, 0x120, 0xffffffff, 0x220, 0xffffffff, 0xffffffff, 0x220, 0xffffffff, 0x3, &(0x7f0000000000), {[{{@uncond, 0x0, 0xc0, 0x120, 0x0, {}, [@common=@osf={{0x50}, {'syz1\x00', 0x0, 0x1, 0x0, 0x2}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x3, [0x0, 0x4, 0x6, 0x7, 0x4, 0x1], 0x0, 0x4}, {0x3, [0x5, 0xa, 0x5, 0x4, 0x4, 0x1], 0x0, 0x3}}}}, {{@uncond, 0x0, 0x98, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x1}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x6, 0x4, 0x1, 0x4, 'pptp\x00', 'syz1\x00', {0x2}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x318) (async) 191.775958ms ago: executing program 3 (id=2059): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x30004001) sendmsg(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000440)="a4368c65a4cfe9af5d5e5ca1f64da3a2d61cae37f2ccbc1aa63b66659c9d3211ccb9d594d4cac349e3e208a910d1b6a105c546e1aad3d9fb56f231818f0eb8a038ee59f80d43770cd63461f51902b6841fcb6cb17cc92cea0f222c906dc898b5afb115bd44b5cccccbc2f59218a33aa8a23e95cca3b3a0e0090b21ebf673", 0x7e}], 0x1}, 0x4000000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000000a0601010000000000000000000000000500ac7b07000000"], 0x1c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x5d, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c00000010004b0422000000000000007a000000", @ANYRESOCT=r2, @ANYBLOB="00800000000000005e576580ab73d05162726964676500001c00028008000400000000000800150000000000050016"], 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x0) r3 = socket(0x15, 0x5, 0x0) getsockopt$nfc_llcp(r3, 0x114, 0x271a, 0x0, 0x20000008) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000005c0)={0x60, r5, 0x405, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r6}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000411}, 0x44084) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000580), r3) sendmsg$ETHTOOL_MSG_COALESCE_SET(r4, &(0x7f0000000680)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x1c, r7, 0xa28f457ee4f0d099, 0x70bd2c, 0x25dfdbfc, {}, [@ETHTOOL_A_COALESCE_PKT_RATE_HIGH={0x8, 0x12, 0xba}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000800}, 0x80) r8 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000002c0)={'veth0_vlan\x00', 0x0}) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@newlink={0x2c, 0x10, 0x401, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r9, 0x2, 0x8a2}, [@IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x32}}]}, 0x2c}}, 0x8080) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r3, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x10, 0x140b, 0x4, 0x70bd28, 0x25dfdbfd}, 0x10}, 0x1, 0x0, 0x0, 0x804}, 0x20000010) r11 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000004c0)=@newqdisc={0xbc, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xfff3}}, [@TCA_RATE={0x6, 0x5, {0x4, 0x53}}, @TCA_RATE={0x6, 0x5, {0x6, 0x9}}, @TCA_STAB={0x58, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x3, 0x3, 0x2, 0x5, 0x2, 0x5, 0x10000, 0x3}}, {0xa, 0x2, [0x72, 0xff, 0x7]}}, {{0x1c, 0x1, {0x0, 0x4, 0x1, 0x25a, 0x0, 0x8, 0xfffffffb, 0x5}}, {0xe, 0x2, [0x2, 0x40, 0x81, 0xff, 0x5]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x81}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0xc}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x3}, @TCA_RATE={0x6, 0x5, {0x10, 0x5}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x6}, @TCA_RATE={0x6, 0x5, {0x2, 0x1}}]}, 0xbc}}, 0x14000) r12 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r12, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) getsockname$packet(r11, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r13, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000600)=@newtfilter={0x3c, 0x2c, 0xd27, 0x2, 0x0, {0x0, 0x0, 0x0, r13, {0xb, 0x9}, {}, {0x1c, 0xfff1}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x806}]}}]}, 0x3c}}, 0x0) r14 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r14, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmmsg$inet(r2, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) 182.03516ms ago: executing program 0 (id=2060): r0 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r1 = socket(0x10, 0x3, 0x0) (async, rerun: 32) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x7, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r4}, &(0x7f0000000040), &(0x7f0000000140)=r3}, 0x20) shutdown(r2, 0x1) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r6) (async) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0xd498, 0x8, 0x100}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f000000a500)=@newtfilter={0x30, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {}, {0xf}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}}, 0x0) 123.145088ms ago: executing program 4 (id=2061): socketpair(0x8b53b38ae0c5559d, 0x2, 0x2, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}]}, &(0x7f0000000180)=0x10) (async) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000000c0)={r3, @in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}, 0x0, 0x3}, &(0x7f00000001c0)=0x9c) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000100)={r3, @in6={{0xa, 0x4e21, 0x100, @mcast2, 0x2}}, 0x9, 0x0, 0x5, 0x8000, 0x61, 0x0, 0x5}, &(0x7f0000000080)=0x9c) (async) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f00000000c0)) (async) ioctl$sock_inet6_tcp_SIOCATMARK(r4, 0x4004743c, 0x0) 76.68715ms ago: executing program 1 (id=2062): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x3, @loopback}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x43, &(0x7f0000000140)=0x9, 0x4) sendto$inet6(r0, &(0x7f0000000040)='H', 0xffe0, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x9, @loopback}, 0x1c) 0s ago: executing program 0 (id=2063): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000004140)=[{&(0x7f0000000240)=""/209, 0xd1}], 0x1}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000140)=ANY=[@ANYRES16=r0, @ANYRESHEX=r1], 0x34c}}, 0x4000880) kernel console output (not intermixed with test programs): sim0: renamed from eth0 [ 88.300246][ T5837] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 88.330318][ T5837] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 88.345072][ T5837] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 88.362243][ T5845] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.412661][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.419968][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.445487][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.452749][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.496357][ T5839] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.544571][ T5839] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.581077][ T1147] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.588344][ T1147] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.620744][ T1147] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.627955][ T1147] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.657236][ T5840] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.700356][ T5838] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.750290][ T5840] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.763823][ T5838] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.806236][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.813522][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.825889][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.833208][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.864398][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.871641][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.885545][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.892739][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.023005][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.145802][ T5837] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.176376][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.183627][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.213629][ T5845] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.255794][ T1147] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.263023][ T1147] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.492299][ T5839] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.519592][ T5845] veth0_vlan: entered promiscuous mode [ 89.566136][ T5845] veth1_vlan: entered promiscuous mode [ 89.593836][ T5838] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.611484][ T5840] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.734439][ T5845] veth0_macvtap: entered promiscuous mode [ 89.759840][ T5845] veth1_macvtap: entered promiscuous mode [ 89.817718][ T5838] veth0_vlan: entered promiscuous mode [ 89.824930][ T5840] veth0_vlan: entered promiscuous mode [ 89.852654][ T5839] veth0_vlan: entered promiscuous mode [ 89.870936][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.885700][ T5838] veth1_vlan: entered promiscuous mode [ 89.901100][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.927411][ T5840] veth1_vlan: entered promiscuous mode [ 89.940294][ T5839] veth1_vlan: entered promiscuous mode [ 89.951975][ T5845] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.961845][ T5845] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.971384][ T5845] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.980818][ T5845] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.997647][ T5855] Bluetooth: hci0: command tx timeout [ 90.003142][ T5853] Bluetooth: hci1: command tx timeout [ 90.043163][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.078583][ T5855] Bluetooth: hci2: command tx timeout [ 90.084051][ T5855] Bluetooth: hci3: command tx timeout [ 90.090354][ T5853] Bluetooth: hci4: command tx timeout [ 90.120683][ T5838] veth0_macvtap: entered promiscuous mode [ 90.163609][ T5838] veth1_macvtap: entered promiscuous mode [ 90.175354][ T5840] veth0_macvtap: entered promiscuous mode [ 90.232522][ T5839] veth0_macvtap: entered promiscuous mode [ 90.244711][ T5840] veth1_macvtap: entered promiscuous mode [ 90.270919][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.286351][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.306248][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.346950][ T5839] veth1_macvtap: entered promiscuous mode [ 90.367417][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.383356][ T3022] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.392895][ T3022] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.402721][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.417982][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.452537][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.464779][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.475171][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.489284][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.500788][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.535769][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.547022][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.560547][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.571112][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.582681][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.593769][ T3450] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.596172][ T5838] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.605767][ T3450] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.621325][ T5838] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.630303][ T5838] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.639982][ T5838] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.657585][ T5840] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.666403][ T5840] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.678215][ T5840] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.687069][ T5840] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.735227][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.746080][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.758391][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.768928][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.778847][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.790860][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.804681][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.829592][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.842430][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.855451][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.866372][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.876735][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.888512][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.900839][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.944391][ T5845] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 90.958753][ T5839] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.977492][ T5839] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.986235][ T5839] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.995104][ T5839] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.092354][ T5837] veth0_vlan: entered promiscuous mode [ 91.143007][ T3022] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.153692][ T3022] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.227469][ T3022] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.238237][ T3022] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.250445][ T5837] veth1_vlan: entered promiscuous mode [ 91.317582][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.325454][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.381988][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.402078][ T5837] veth0_macvtap: entered promiscuous mode [ 91.410682][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.447062][ T5837] veth1_macvtap: entered promiscuous mode [ 91.478838][ T1007] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.488661][ T1007] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.634630][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.654517][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.668281][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.680933][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.694063][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.710975][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.746715][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.766560][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.800647][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.833159][ T3450] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.855508][ T975] cfg80211: failed to load regulatory.db [ 91.865453][ T3450] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.874340][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.916986][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.953050][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.995783][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.016563][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.042275][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.061392][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.072794][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.086120][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.088622][ T5853] Bluetooth: hci1: command tx timeout [ 92.100781][ T5837] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.106653][ T5855] Bluetooth: hci0: command tx timeout [ 92.123372][ T5837] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.152248][ T5837] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.161434][ T5853] Bluetooth: hci2: command tx timeout [ 92.167252][ T5853] Bluetooth: hci3: command tx timeout [ 92.172704][ T5853] Bluetooth: hci4: command tx timeout [ 92.175146][ T5837] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.619906][ T5953] syzkaller1: entered promiscuous mode [ 92.629302][ T5953] syzkaller1: entered allmulticast mode [ 92.647909][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.655790][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.708773][ T5961] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4'. [ 92.809919][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.858491][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.895165][ T5964] Bluetooth: MGMT ver 1.23 [ 93.248795][ T5971] netlink: 92 bytes leftover after parsing attributes in process `syz.3.15'. [ 93.755417][ T5991] syzkaller1: entered promiscuous mode [ 93.782350][ T5991] syzkaller1: entered allmulticast mode [ 94.054818][ T6000] IPVS: Error connecting to the multicast addr [ 94.239565][ T6004] syzkaller1: entered promiscuous mode [ 94.267891][ T6004] syzkaller1: entered allmulticast mode [ 94.297970][ T6007] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 94.627992][ T5969] Zero length message leads to an empty skb [ 94.659446][ T6021] netlink: 60 bytes leftover after parsing attributes in process `syz.0.30'. [ 94.714385][ T6023] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 94.988794][ T6031] netlink: 4 bytes leftover after parsing attributes in process `syz.1.33'. [ 95.458427][ T6046] netlink: 8 bytes leftover after parsing attributes in process `syz.1.39'. [ 95.496778][ T6046] netlink: 12 bytes leftover after parsing attributes in process `syz.1.39'. [ 95.534500][ T6052] netlink: 240 bytes leftover after parsing attributes in process `syz.2.37'. [ 95.782517][ T6057] syz.1.43 uses obsolete (PF_INET,SOCK_PACKET) [ 95.919394][ T6059] syzkaller1: entered promiscuous mode [ 95.945985][ T6059] syzkaller1: entered allmulticast mode [ 95.970658][ T6061] netlink: 132 bytes leftover after parsing attributes in process `syz.3.45'. [ 96.010589][ T6068] netlink: 36 bytes leftover after parsing attributes in process `syz.1.47'. [ 96.032726][ T6065] bond1: entered promiscuous mode [ 96.038215][ T6065] bond1: entered allmulticast mode [ 96.043854][ T6065] 8021q: adding VLAN 0 to HW filter on device bond1 [ 96.345479][ T6075] xt_bpf: check failed: parse error [ 96.806085][ T6093] warning: `syz.3.58' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 97.032355][ T6101] syzkaller1: entered promiscuous mode [ 97.071117][ T6104] RDS: rds_bind could not find a transport for ::ffff:10.1.1.1, load rds_tcp or rds_rdma? [ 97.089480][ T6101] syzkaller1: entered allmulticast mode [ 97.105454][ T6102] netlink: 24 bytes leftover after parsing attributes in process `syz.3.60'. [ 97.178847][ T6107] Cannot find add_set index 0 as target [ 97.966104][ T6143] FAULT_INJECTION: forcing a failure. [ 97.966104][ T6143] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 97.995984][ T6142] Bluetooth: MGMT ver 1.23 [ 98.013869][ T6132] syzkaller1: entered promiscuous mode [ 98.021422][ T6143] CPU: 1 UID: 0 PID: 6143 Comm: syz.1.69 Not tainted 6.14.0-syzkaller-13339-g29d261466fa6 #0 PREEMPT(full) [ 98.021450][ T6143] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 98.021468][ T6143] Call Trace: [ 98.021476][ T6143] [ 98.021485][ T6143] dump_stack_lvl+0x241/0x360 [ 98.021535][ T6143] ? __pfx_dump_stack_lvl+0x10/0x10 [ 98.021566][ T6143] ? __pfx__printk+0x10/0x10 [ 98.021611][ T6143] should_fail_ex+0x424/0x570 [ 98.021639][ T6143] _copy_from_user+0x2d/0xb0 [ 98.021670][ T6143] csum_and_copy_from_iter_full+0x1ec/0x21a0 [ 98.021699][ T6143] ? __phys_addr+0xba/0x170 [ 98.021737][ T6143] ? __kasan_kmalloc_large+0x8c/0xa0 [ 98.021774][ T6143] ? rcu_is_watching+0x15/0xb0 [ 98.021802][ T6143] ? __pfx_csum_and_copy_from_iter_full+0x10/0x10 [ 98.021824][ T6143] ? __kmalloc_node_track_caller_noprof+0x2b2/0x4d0 [ 98.021862][ T6143] ? __build_skb_around+0x247/0x3d0 [ 98.021904][ T6143] ip_generic_getfrag+0x151/0x320 [ 98.021930][ T6143] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 98.021954][ T6143] ? __lock_acquire+0xad5/0xd80 [ 98.021984][ T6143] __ip6_append_data+0x3acd/0x41b0 [ 98.022035][ T6143] ? __pfx_raw6_getfrag+0x10/0x10 [ 98.022078][ T6143] ? ip6_mtu+0x81/0x3f0 [ 98.022105][ T6143] ? __pfx___ip6_append_data+0x10/0x10 [ 98.022136][ T6143] ? ip6_setup_cork+0xaaf/0x11c0 [ 98.022172][ T6143] ip6_append_data+0x25f/0x380 [ 98.022207][ T6143] ? __pfx_raw6_getfrag+0x10/0x10 [ 98.022230][ T6143] rawv6_sendmsg+0x1855/0x23c0 [ 98.022287][ T6143] ? __pfx_rawv6_sendmsg+0x10/0x10 [ 98.022359][ T6143] ? sock_rps_record_flow+0x1a/0x410 [ 98.022387][ T6143] ? inet_sendmsg+0x330/0x390 [ 98.022415][ T6143] __sock_sendmsg+0x1a6/0x270 [ 98.022450][ T6143] ____sys_sendmsg+0x523/0x860 [ 98.022483][ T6143] ? __pfx_____sys_sendmsg+0x10/0x10 [ 98.022503][ T6143] ? __fget_files+0x2a/0x420 [ 98.022526][ T6143] ? __fget_files+0x2a/0x420 [ 98.022556][ T6143] __sys_sendmsg+0x271/0x360 [ 98.022585][ T6143] ? __pfx___sys_sendmsg+0x10/0x10 [ 98.022669][ T6143] ? do_syscall_64+0xb6/0x230 [ 98.022699][ T6143] do_syscall_64+0xf3/0x230 [ 98.022731][ T6143] ? clear_bhb_loop+0x45/0xa0 [ 98.022756][ T6143] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.022776][ T6143] RIP: 0033:0x7f51beb8d169 [ 98.022802][ T6143] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 98.022818][ T6143] RSP: 002b:00007f51be9f7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 98.022841][ T6143] RAX: ffffffffffffffda RBX: 00007f51beda5fa0 RCX: 00007f51beb8d169 [ 98.022856][ T6143] RDX: 0000000000000004 RSI: 00002000000000c0 RDI: 0000000000000003 [ 98.022868][ T6143] RBP: 00007f51be9f7090 R08: 0000000000000000 R09: 0000000000000000 [ 98.022881][ T6143] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 98.022892][ T6143] R13: 0000000000000000 R14: 00007f51beda5fa0 R15: 00007ffd768f16e8 [ 98.022923][ T6143] [ 98.040615][ T6132] syzkaller1: entered allmulticast mode [ 98.359836][ T6154] __nla_validate_parse: 2 callbacks suppressed [ 98.359858][ T6154] netlink: 20 bytes leftover after parsing attributes in process `syz.1.72'. [ 99.121435][ T6178] sctp: [Deprecated]: syz.3.80 (pid 6178) Use of struct sctp_assoc_value in delayed_ack socket option. [ 99.121435][ T6178] Use struct sctp_sack_info instead [ 99.440028][ T6199] netlink: 16 bytes leftover after parsing attributes in process `syz.2.85'. [ 99.651034][ T6217] IPVS: set_ctl: invalid protocol: 97 172.20.20.187:20001 [ 99.699613][ T6206] bond2: entered promiscuous mode [ 99.705974][ T6206] bond2: entered allmulticast mode [ 99.713034][ T6206] 8021q: adding VLAN 0 to HW filter on device bond2 [ 100.364077][ T6251] trusted_key: syz.0.94 sent an empty control message without MSG_MORE. [ 100.678475][ T6263] veth1_macvtap: left promiscuous mode [ 100.683173][ T6260] netlink: 8 bytes leftover after parsing attributes in process `syz.4.100'. [ 100.734026][ T6263] macsec0: entered allmulticast mode [ 100.740298][ T6267] netlink: 52 bytes leftover after parsing attributes in process `syz.4.100'. [ 100.854861][ T6260] vlan2: entered allmulticast mode [ 100.871318][ T6260] mac80211_hwsim hwsim10 wlan0: entered allmulticast mode [ 100.891124][ T6275] netlink: 24 bytes leftover after parsing attributes in process `syz.0.102'. [ 100.938062][ T6272] veth1_macvtap: entered promiscuous mode [ 100.958313][ T6272] veth1_macvtap: entered allmulticast mode [ 100.975960][ T6272] macsec0: left allmulticast mode [ 100.981693][ T6272] veth1_macvtap: left allmulticast mode [ 101.116717][ T6268] netlink: 24 bytes leftover after parsing attributes in process `syz.0.102'. [ 101.307441][ T6283] dvmrp0: entered allmulticast mode [ 101.412450][ T6291] netlink: 'syz.0.105': attribute type 1 has an invalid length. [ 102.028585][ T6313] netlink: 248 bytes leftover after parsing attributes in process `syz.4.110'. [ 102.740071][ T6338] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 103.135077][ T6355] netlink: 4 bytes leftover after parsing attributes in process `syz.3.118'. [ 103.215087][ T6344] bond3: entered promiscuous mode [ 103.379238][ T6307] netlink: 8 bytes leftover after parsing attributes in process `syz.1.107'. [ 103.407739][ T6344] bond3: entered allmulticast mode [ 103.427326][ T6359] sctp: [Deprecated]: syz.0.121 (pid 6359) Use of int in maxseg socket option. [ 103.427326][ T6359] Use struct sctp_assoc_value instead [ 103.444013][ T6344] 8021q: adding VLAN 0 to HW filter on device bond3 [ 103.454876][ T6307] netlink: 4 bytes leftover after parsing attributes in process `syz.1.107'. [ 103.526921][ T6307] netlink: 'syz.1.107': attribute type 15 has an invalid length. [ 103.631965][ T6359] sctp: [Deprecated]: syz.0.121 (pid 6359) Use of int in maxseg socket option. [ 103.631965][ T6359] Use struct sctp_assoc_value instead [ 103.960373][ T6369] netlink: 12 bytes leftover after parsing attributes in process `syz.0.125'. [ 103.991853][ T6365] netlink: 4 bytes leftover after parsing attributes in process `syz.3.122'. [ 104.168256][ T6375] netlink: 48 bytes leftover after parsing attributes in process `syz.2.127'. [ 104.216428][ T6375] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-tlb(5) [ 104.263971][ T6375] netlink: 20 bytes leftover after parsing attributes in process `syz.2.127'. [ 104.269164][ T6378] dccp_v6_rcv: dropped packet with invalid checksum [ 104.600768][ T6397] netlink: 'syz.2.132': attribute type 8 has an invalid length. [ 104.658483][ T6406] syz_tun: entered allmulticast mode [ 104.659685][ T6399] netlink: 4 bytes leftover after parsing attributes in process `syz.2.132'. [ 104.850300][ T6410] ip6gre1: entered allmulticast mode [ 105.117132][ T6423] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 105.221781][ T6402] syz_tun: left allmulticast mode [ 105.312597][ T6433] netlink: 44 bytes leftover after parsing attributes in process `syz.3.142'. [ 105.333750][ T6433] netlink: 43 bytes leftover after parsing attributes in process `syz.3.142'. [ 105.416256][ T6433] netlink: 'syz.3.142': attribute type 6 has an invalid length. [ 105.466889][ T6433] netlink: 'syz.3.142': attribute type 5 has an invalid length. [ 105.501454][ T6433] netlink: 43 bytes leftover after parsing attributes in process `syz.3.142'. [ 105.651988][ T6441] dccp_invalid_packet: pskb_may_pull failed [ 105.788975][ T6450] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 106.054635][ T6466] TCP: TCP_TX_DELAY enabled [ 106.305225][ T6477] C: renamed from lo (while UP) [ 106.355756][ T6477] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 106.427679][ T6490] netlink: 'syz.0.157': attribute type 2 has an invalid length. [ 106.562663][ T6496] netlink: 'syz.3.159': attribute type 4 has an invalid length. [ 106.837817][ T6511] netlink: 'syz.2.164': attribute type 10 has an invalid length. [ 106.862899][ T6511] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.871445][ T6511] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.909015][ T6511] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.916750][ T6511] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.924702][ T6511] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.931929][ T6511] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.944090][ T6511] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 106.959289][ T6520] veth0: entered promiscuous mode [ 107.048821][ T6518] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 107.097073][ T6513] veth0: left promiscuous mode [ 107.324563][ T6539] bond0: option mode: unable to set because the bond device has slaves [ 107.598657][ T6554] netlink: 'syz.4.179': attribute type 1 has an invalid length. [ 107.817882][ T6570] netlink: set zone limit has 8 unknown bytes [ 108.107283][ T6585] netlink: 'syz.4.189': attribute type 12 has an invalid length. [ 108.115325][ T6585] (unnamed net_device) (uninitialized): option primary_reselect: invalid value (255) [ 108.185381][ T6585] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 108.195838][ T6585] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 108.205961][ T6585] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 108.215790][ T6585] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 108.262433][ T6585] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 108.682072][ T6617] __nla_validate_parse: 14 callbacks suppressed [ 108.682107][ T6617] netlink: 14 bytes leftover after parsing attributes in process `syz.2.198'. [ 108.907597][ T6630] netlink: 'syz.4.205': attribute type 1 has an invalid length. [ 108.982581][ T6617] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 108.996270][ T6617] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 109.008652][ T6617] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 109.020732][ T6617] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.028070][ T6617] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.043171][ T6617] bond0 (unregistering): Released all slaves [ 109.117919][ T6634] 8021q: adding VLAN 0 to HW filter on device bond4 [ 109.204084][ T6637] bond0: entered promiscuous mode [ 109.209367][ T6637] bond_slave_0: entered promiscuous mode [ 109.215347][ T6637] bond_slave_1: entered promiscuous mode [ 109.222336][ T6637] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 109.234552][ T6637] bond4: (slave macvlan2): Enslaving as a backup interface with an up link [ 109.248342][ T6642] netlink: 4 bytes leftover after parsing attributes in process `syz.1.207'. [ 109.253890][ T6629] syzkaller1: entered promiscuous mode [ 109.289844][ T6629] syzkaller1: entered allmulticast mode [ 109.301848][ T6642] bridge_slave_1: left allmulticast mode [ 109.314146][ T6642] bridge_slave_1: left promiscuous mode [ 109.322197][ T6642] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.344031][ T6642] bridge_slave_0: left allmulticast mode [ 109.355456][ T6642] bridge_slave_0: left promiscuous mode [ 109.362268][ T6642] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.440861][ T6644] netlink: 24 bytes leftover after parsing attributes in process `syz.2.208'. [ 109.603177][ T6650] sctp: [Deprecated]: syz.2.210 (pid 6650) Use of struct sctp_assoc_value in delayed_ack socket option. [ 109.603177][ T6650] Use struct sctp_sack_info instead [ 110.270364][ T6687] vxcan1: tx address claim with different name [ 110.621522][ T6705] netlink: 12 bytes leftover after parsing attributes in process `syz.0.226'. [ 110.816979][ T6715] netlink: 24 bytes leftover after parsing attributes in process `syz.0.230'. [ 110.992265][ T6733] netlink: 8 bytes leftover after parsing attributes in process `syz.0.235'. [ 111.001503][ T6733] netlink: 72 bytes leftover after parsing attributes in process `syz.0.235'. [ 111.011354][ T6733] 8021q: VLANs not supported on tunl0 [ 111.260439][ T6746] netlink: 240 bytes leftover after parsing attributes in process `syz.0.237'. [ 111.279425][ T6739] x_tables: ip6_tables: MASQUERADE target: used from hooks INPUT, but only usable from POSTROUTING [ 111.365607][ T6750] netlink: 12 bytes leftover after parsing attributes in process `syz.2.241'. [ 111.643582][ T6767] bond0: (slave bond_slave_0): Releasing backup interface [ 111.661360][ T6767] bond0: (slave bond_slave_1): Releasing backup interface [ 111.689624][ T6767] team0: Port device team_slave_0 removed [ 111.703254][ T6767] team0: Port device team_slave_1 removed [ 111.710635][ T6767] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 111.718550][ T6767] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 111.735052][ T6767] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 111.745107][ T6767] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 111.758679][ T6770] Driver unsupported XDP return value 0 on prog (id 49) dev N/A, expect packet loss! [ 111.854630][ T6767] syz.1.246 (6767) used greatest stack depth: 19256 bytes left [ 112.235251][ T6782] netlink: 4 bytes leftover after parsing attributes in process `syz.1.253'. [ 113.284009][ T6844] xt_SECMARK: invalid mode: 0 [ 113.315162][ T6835] 8021q: adding VLAN 0 to HW filter on device bond1 [ 113.338603][ T6835] bond0: (slave bond1): Enslaving as an active interface with an up link [ 113.702671][ T6875] xt_l2tp: invalid flags combination: c [ 113.950472][ T6888] batman_adv: batadv0: Adding interface: dummy0 [ 113.971762][ T6897] FAULT_INJECTION: forcing a failure. [ 113.971762][ T6897] name failslab, interval 1, probability 0, space 0, times 0 [ 113.976947][ T6888] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 114.000695][ T6897] CPU: 0 UID: 0 PID: 6897 Comm: syz.0.286 Not tainted 6.14.0-syzkaller-13339-g29d261466fa6 #0 PREEMPT(full) [ 114.000728][ T6897] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 114.000742][ T6897] Call Trace: [ 114.000751][ T6897] [ 114.000761][ T6897] dump_stack_lvl+0x241/0x360 [ 114.000822][ T6897] ? __pfx_dump_stack_lvl+0x10/0x10 [ 114.000854][ T6897] ? __pfx__printk+0x10/0x10 [ 114.000891][ T6897] ? __pfx___might_resched+0x10/0x10 [ 114.000924][ T6897] should_fail_ex+0x424/0x570 [ 114.000954][ T6897] should_failslab+0xac/0x100 [ 114.000988][ T6897] kmem_cache_alloc_node_noprof+0x7d/0x3b0 [ 114.001021][ T6897] ? __alloc_skb+0x1c2/0x480 [ 114.001047][ T6897] __alloc_skb+0x1c2/0x480 [ 114.001068][ T6897] ? ip_generic_getfrag+0x1bf/0x320 [ 114.001096][ T6897] ? __pfx___alloc_skb+0x10/0x10 [ 114.001117][ T6897] ? __lock_acquire+0xad5/0xd80 [ 114.001149][ T6897] __ip6_append_data+0x2d15/0x41b0 [ 114.001204][ T6897] ? __pfx_raw6_getfrag+0x10/0x10 [ 114.001253][ T6897] ? __pfx___ip6_append_data+0x10/0x10 [ 114.001287][ T6897] ? ip6_setup_cork+0xaaf/0x11c0 [ 114.001325][ T6897] ip6_append_data+0x25f/0x380 [ 114.001362][ T6897] ? __pfx_raw6_getfrag+0x10/0x10 [ 114.001386][ T6897] rawv6_sendmsg+0x1855/0x23c0 [ 114.001442][ T6897] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 114.001479][ T6897] ? __pfx_rawv6_sendmsg+0x10/0x10 [ 114.001555][ T6897] ? sock_rps_record_flow+0x1a/0x410 [ 114.001584][ T6897] ? inet_sendmsg+0x330/0x390 [ 114.001614][ T6897] __sock_sendmsg+0x1a6/0x270 [ 114.001648][ T6897] ____sys_sendmsg+0x523/0x860 [ 114.001687][ T6897] ? __pfx_____sys_sendmsg+0x10/0x10 [ 114.001708][ T6897] ? __fget_files+0x2a/0x420 [ 114.001733][ T6897] ? __fget_files+0x2a/0x420 [ 114.001764][ T6897] __sys_sendmsg+0x271/0x360 [ 114.001801][ T6897] ? __pfx___sys_sendmsg+0x10/0x10 [ 114.001890][ T6897] ? do_syscall_64+0xb6/0x230 [ 114.001922][ T6897] do_syscall_64+0xf3/0x230 [ 114.001950][ T6897] ? clear_bhb_loop+0x45/0xa0 [ 114.001977][ T6897] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.001997][ T6897] RIP: 0033:0x7feba518d169 [ 114.002018][ T6897] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 114.002035][ T6897] RSP: 002b:00007feba60d4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 114.002060][ T6897] RAX: ffffffffffffffda RBX: 00007feba53a5fa0 RCX: 00007feba518d169 [ 114.002075][ T6897] RDX: 0000000000000004 RSI: 00002000000000c0 RDI: 0000000000000003 [ 114.002089][ T6897] RBP: 00007feba60d4090 R08: 0000000000000000 R09: 0000000000000000 [ 114.002103][ T6897] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 114.002116][ T6897] R13: 0000000000000000 R14: 00007feba53a5fa0 R15: 00007fff43520b48 [ 114.002150][ T6897] [ 114.181140][ T6903] xt_l2tp: invalid flags combination: c [ 114.184286][ T6888] batman_adv: batadv0: Interface activated: dummy0 [ 114.339272][ T6889] batadv0: mtu less than device minimum [ 114.346819][ T6889] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 114.358974][ T6889] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 114.371007][ T6889] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 114.383075][ T6889] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 114.395076][ T6889] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 114.407094][ T6889] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 114.419130][ T6889] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 114.431211][ T6889] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 114.443248][ T6889] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 114.586399][ T6912] netlink: 'syz.3.291': attribute type 1 has an invalid length. [ 114.601394][ T6912] __nla_validate_parse: 5 callbacks suppressed [ 114.601412][ T6912] netlink: 244 bytes leftover after parsing attributes in process `syz.3.291'. [ 114.634246][ T6912] netlink: 104 bytes leftover after parsing attributes in process `syz.3.291'. [ 114.868742][ T6932] netlink: 'syz.4.297': attribute type 23 has an invalid length. [ 114.921276][ T6935] FAULT_INJECTION: forcing a failure. [ 114.921276][ T6935] name failslab, interval 1, probability 0, space 0, times 0 [ 114.934244][ T6935] CPU: 0 UID: 0 PID: 6935 Comm: syz.3.298 Not tainted 6.14.0-syzkaller-13339-g29d261466fa6 #0 PREEMPT(full) [ 114.934271][ T6935] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 114.934284][ T6935] Call Trace: [ 114.934293][ T6935] [ 114.934301][ T6935] dump_stack_lvl+0x241/0x360 [ 114.934359][ T6935] ? __pfx_dump_stack_lvl+0x10/0x10 [ 114.934390][ T6935] ? __pfx__printk+0x10/0x10 [ 114.934419][ T6935] ? fib6_table_lookup+0xb98/0xbf0 [ 114.934457][ T6935] should_fail_ex+0x424/0x570 [ 114.934496][ T6935] should_failslab+0xac/0x100 [ 114.934527][ T6935] kmem_cache_alloc_node_noprof+0x7d/0x3b0 [ 114.934556][ T6935] ? __alloc_skb+0x1c2/0x480 [ 114.934581][ T6935] __alloc_skb+0x1c2/0x480 [ 114.934600][ T6935] ? ip6_pol_route+0x11f2/0x15f0 [ 114.934626][ T6935] ? __pfx___alloc_skb+0x10/0x10 [ 114.934642][ T6935] ? ip6_pol_route+0x192/0x15f0 [ 114.934668][ T6935] ? __pfx_ip6_pol_route+0x10/0x10 [ 114.934698][ T6935] alloc_skb_with_frags+0xc3/0x830 [ 114.934723][ T6935] ? ipv6_get_saddr_eval+0xbce/0xf50 [ 114.934749][ T6935] ? ipv6_dev_get_saddr+0x22a/0xc10 [ 114.934777][ T6935] sock_alloc_send_pskb+0x91c/0xa70 [ 114.934824][ T6935] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 114.934846][ T6935] ? rcuref_put+0x1e7/0x240 [ 114.934868][ T6935] ? __pfx_rcuref_put+0x10/0x10 [ 114.934907][ T6935] __ip6_append_data+0x2c4f/0x41b0 [ 114.934965][ T6935] ? __pfx_icmpv6_getfrag+0x10/0x10 [ 114.935011][ T6935] ? ip6_mtu+0x81/0x3f0 [ 114.935036][ T6935] ? __pfx___ip6_append_data+0x10/0x10 [ 114.935067][ T6935] ? ip6_setup_cork+0xaaf/0x11c0 [ 114.935103][ T6935] ip6_append_data+0x25f/0x380 [ 114.935138][ T6935] ? __pfx_icmpv6_getfrag+0x10/0x10 [ 114.935162][ T6935] icmp6_send+0x1764/0x23c0 [ 114.935184][ T6935] ? icmp6_send+0x281/0x23c0 [ 114.935228][ T6935] ? __pfx_icmp6_send+0x10/0x10 [ 114.935252][ T6935] ? __asan_memset+0x23/0x50 [ 114.935273][ T6935] ? xfrm_lookup_with_ifid+0x19e3/0x1f90 [ 114.935310][ T6935] ? __pfx_xfrm_lookup_with_ifid+0x10/0x10 [ 114.935334][ T6935] ? security_xfrm_decode_session+0x74/0x2b0 [ 114.935385][ T6935] ip6_link_failure+0x3c/0x4f0 [ 114.935405][ T6935] ? vti6_tnl_xmit+0x13ba/0x1be0 [ 114.935429][ T6935] ? __pfx_ip6_link_failure+0x10/0x10 [ 114.935453][ T6935] vti6_tnl_xmit+0x13c3/0x1be0 [ 114.935486][ T6935] ? is_bpf_text_address+0x26/0x2a0 [ 114.935520][ T6935] ? __pfx_validate_xmit_xfrm+0x10/0x10 [ 114.935541][ T6935] ? __pfx_vti6_tnl_xmit+0x10/0x10 [ 114.935591][ T6935] dev_hard_start_xmit+0x2d4/0x840 [ 114.935631][ T6935] __dev_queue_xmit+0x1b80/0x3f60 [ 114.935663][ T6935] ? __lock_acquire+0xad5/0xd80 [ 114.935691][ T6935] ? __dev_queue_xmit+0x2f9/0x3f60 [ 114.935720][ T6935] ? __pfx___dev_queue_xmit+0x10/0x10 [ 114.935747][ T6935] ? neigh_connected_output+0x1d5/0x450 [ 114.935775][ T6935] ? read_seqbegin+0x15c/0x2c0 [ 114.935799][ T6935] ? lockdep_hardirqs_on+0x9d/0x150 [ 114.935825][ T6935] ? read_seqbegin+0x202/0x2c0 [ 114.935850][ T6935] ? __kasan_kmalloc_large+0x8c/0xa0 [ 114.935878][ T6935] ? __pfx_read_seqbegin+0x10/0x10 [ 114.935906][ T6935] ? __lock_acquire+0xad5/0xd80 [ 114.935938][ T6935] ? neigh_connected_output+0x3a7/0x450 [ 114.935993][ T6935] ip6_finish_output2+0x1296/0x1750 [ 114.936027][ T6935] ? ip6_finish_output2+0x701/0x1750 [ 114.936065][ T6935] ? ip6_frag_next+0x6b5/0xc60 [ 114.936091][ T6935] ? __pfx_ip6_finish_output2+0x10/0x10 [ 114.936138][ T6935] ip6_fragment+0x1657/0x22d0 [ 114.936189][ T6935] ? __pfx_ip6_finish_output2+0x10/0x10 [ 114.936218][ T6935] ? __pfx_ip6_fragment+0x10/0x10 [ 114.936263][ T6935] ? ip6_mtu+0x81/0x3f0 [ 114.936290][ T6935] ? ip6_mtu+0x81/0x3f0 [ 114.936320][ T6935] ip6_finish_output+0x2bb/0x840 [ 114.936354][ T6935] ip6_send_skb+0x1b1/0x3b0 [ 114.936380][ T6935] ? ip6_send_skb+0xfd/0x3b0 [ 114.936412][ T6935] rawv6_push_pending_frames+0x7e8/0xa50 [ 114.936442][ T6935] ? ip6_append_data+0x25f/0x380 [ 114.936469][ T6935] ? __pfx_rawv6_push_pending_frames+0x10/0x10 [ 114.936498][ T6935] ? __pfx_raw6_getfrag+0x10/0x10 [ 114.936521][ T6935] rawv6_sendmsg+0x191c/0x23c0 [ 114.936568][ T6935] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 114.936620][ T6935] ? __pfx_rawv6_sendmsg+0x10/0x10 [ 114.936693][ T6935] ? sock_rps_record_flow+0x1a/0x410 [ 114.936722][ T6935] ? inet_sendmsg+0x330/0x390 [ 114.936749][ T6935] __sock_sendmsg+0x1a6/0x270 [ 114.936782][ T6935] ____sys_sendmsg+0x523/0x860 [ 114.936816][ T6935] ? __pfx_____sys_sendmsg+0x10/0x10 [ 114.936836][ T6935] ? __fget_files+0x2a/0x420 [ 114.936859][ T6935] ? __fget_files+0x2a/0x420 [ 114.936891][ T6935] __sys_sendmsg+0x271/0x360 [ 114.936921][ T6935] ? __pfx___sys_sendmsg+0x10/0x10 [ 114.937015][ T6935] ? do_syscall_64+0xb6/0x230 [ 114.937045][ T6935] do_syscall_64+0xf3/0x230 [ 114.937069][ T6935] ? clear_bhb_loop+0x45/0xa0 [ 114.937094][ T6935] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.937113][ T6935] RIP: 0033:0x7f231838d169 [ 114.937132][ T6935] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 114.937149][ T6935] RSP: 002b:00007f23191dc038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 114.937176][ T6935] RAX: ffffffffffffffda RBX: 00007f23185a5fa0 RCX: 00007f231838d169 [ 114.937190][ T6935] RDX: 0000000000000004 RSI: 00002000000000c0 RDI: 0000000000000003 [ 114.937203][ T6935] RBP: 00007f23191dc090 R08: 0000000000000000 R09: 0000000000000000 [ 114.937214][ T6935] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 114.937225][ T6935] R13: 0000000000000000 R14: 00007f23185a5fa0 R15: 00007fff78e70db8 [ 114.937258][ T6935] [ 115.593912][ T6938] xfrm1: entered allmulticast mode [ 115.734599][ T6947] netlink: 8 bytes leftover after parsing attributes in process `syz.4.303'. [ 115.882820][ T6955] netlink: 788 bytes leftover after parsing attributes in process `syz.2.309'. [ 116.105350][ T6955] netlink: 16 bytes leftover after parsing attributes in process `syz.2.309'. [ 116.168419][ T6955] netlink: 8 bytes leftover after parsing attributes in process `syz.2.309'. [ 116.664237][ T6992] netlink: 'syz.3.313': attribute type 31 has an invalid length. [ 116.767117][ T7004] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.317'. [ 116.783282][ T7005] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.317'. [ 116.817928][ T7002] veth3: entered allmulticast mode [ 116.939070][ T7015] Bluetooth: MGMT ver 1.23 [ 117.206414][ T7034] netlink: 'syz.4.325': attribute type 30 has an invalid length. [ 117.283819][ T7040] netlink: 'syz.1.327': attribute type 11 has an invalid length. [ 117.332182][ T7043] netlink: 'syz.1.327': attribute type 10 has an invalid length. [ 117.352299][ T7040] netlink: 224 bytes leftover after parsing attributes in process `syz.1.327'. [ 117.386133][ T7043] veth0_vlan: entered allmulticast mode [ 117.475252][ T7043] veth0_vlan: left promiscuous mode [ 117.489965][ T7054] netlink: 8 bytes leftover after parsing attributes in process `syz.2.333'. [ 117.513405][ T7043] veth0_vlan: entered promiscuous mode [ 117.555838][ T7043] team0: Device veth0_vlan failed to register rx_handler [ 120.619568][ T7164] netdevsim netdevsim0: Firmware load for '..' refused, path contains '..' component [ 120.884110][ T7167] bridge0: port 1(ipvlan0) entered blocking state [ 120.902438][ T7167] bridge0: port 1(ipvlan0) entered disabled state [ 120.930769][ T7167] ipvlan0: entered allmulticast mode [ 120.961296][ T7167] ipvlan0: left allmulticast mode [ 121.027835][ T7180] __nla_validate_parse: 4 callbacks suppressed [ 121.027859][ T7180] netlink: 24 bytes leftover after parsing attributes in process `syz.4.373'. [ 121.095495][ T7190] syzkaller1: entered promiscuous mode [ 121.105047][ T7190] syzkaller1: entered allmulticast mode [ 121.149752][ T7193] netlink: 4 bytes leftover after parsing attributes in process `syz.2.377'. [ 121.244327][ T7176] delete_channel: no stack [ 121.295809][ T7198] xt_TCPMSS: Only works on TCP SYN packets [ 121.430260][ T7207] 8021q: VLANs not supported on ip6_vti0 [ 121.457454][ T7209] batadv_slave_1: entered promiscuous mode [ 121.473385][ T7209] nbd: must specify at least one socket [ 121.639152][ T7208] batadv_slave_1: left promiscuous mode [ 122.250931][ T7257] net_ratelimit: 12 callbacks suppressed [ 122.250950][ T7257] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 3959 [ 122.511163][ T7275] netlink: 'syz.2.402': attribute type 10 has an invalid length. [ 122.514253][ T7273] netlink: 4 bytes leftover after parsing attributes in process `syz.4.400'. [ 122.533866][ T7275] batman_adv: batadv0: Adding interface: wlan0 [ 122.551147][ T7275] batman_adv: batadv0: The MTU of interface wlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 122.600790][ T7275] batman_adv: batadv0: Interface activated: wlan0 [ 122.621483][ T7275] batadv0: mtu less than device minimum [ 122.629220][ T7275] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 122.641098][ T7275] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 122.653009][ T7275] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 122.664997][ T7275] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 122.676988][ T7275] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 122.689013][ T7275] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 122.701002][ T7275] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 122.713175][ T7275] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 122.747813][ T7288] netlink: 8 bytes leftover after parsing attributes in process `syz.4.400'. [ 122.756710][ T7288] netlink: 24 bytes leftover after parsing attributes in process `syz.4.400'. [ 122.909252][ T7293] netlink: 'syz.0.405': attribute type 10 has an invalid length. [ 122.949917][ T7293] netlink: 40 bytes leftover after parsing attributes in process `syz.0.405'. [ 123.041198][ T7293] team0: Port device geneve0 added [ 123.422682][ T7325] netlink: 'syz.4.415': attribute type 3 has an invalid length. [ 123.452556][ T7327] netlink: 'syz.4.415': attribute type 3 has an invalid length. [ 123.899890][ T7351] netlink: 'syz.4.421': attribute type 1 has an invalid length. [ 123.908861][ T7351] netlink: 24 bytes leftover after parsing attributes in process `syz.4.421'. [ 124.052397][ T7356] netlink: 4 bytes leftover after parsing attributes in process `syz.1.424'. [ 124.425715][ T7382] GUP no longer grows the stack in syz.2.430 (7382): 200000006000-20000000a000 (200000005000) [ 124.444444][ T7382] CPU: 1 UID: 0 PID: 7382 Comm: syz.2.430 Not tainted 6.14.0-syzkaller-13339-g29d261466fa6 #0 PREEMPT(full) [ 124.444473][ T7382] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 124.444485][ T7382] Call Trace: [ 124.444494][ T7382] [ 124.444503][ T7382] dump_stack_lvl+0x241/0x360 [ 124.444554][ T7382] ? __pfx_dump_stack_lvl+0x10/0x10 [ 124.444583][ T7382] ? __pfx__printk+0x10/0x10 [ 124.444608][ T7382] ? find_vma+0xfa/0x170 [ 124.444652][ T7382] __get_user_pages+0x3b46/0x4180 [ 124.444726][ T7382] ? __pfx___get_user_pages+0x10/0x10 [ 124.444755][ T7382] ? __gup_longterm_locked+0xd86/0x1850 [ 124.444787][ T7382] ? __pfx_down_read_killable+0x10/0x10 [ 124.444818][ T7382] ? __lock_acquire+0xad5/0xd80 [ 124.444856][ T7382] __gup_longterm_locked+0xec1/0x1850 [ 124.444904][ T7382] ? try_get_folio+0xfd/0x6a0 [ 124.444926][ T7382] ? try_grab_folio_fast+0x1d6/0x500 [ 124.444945][ T7382] ? __pfx___gup_longterm_locked+0x10/0x10 [ 124.444986][ T7382] ? gup_fast_fallback+0x203f/0x2980 [ 124.445018][ T7382] gup_fast_fallback+0x2227/0x2980 [ 124.445083][ T7382] ? __pfx_gup_fast_fallback+0x10/0x10 [ 124.445174][ T7382] ? __lock_acquire+0xad5/0xd80 [ 124.445201][ T7382] ? is_valid_gup_args+0x124/0x200 [ 124.445235][ T7382] get_user_pages_fast+0xd2/0x160 [ 124.445270][ T7382] ? __pfx_get_user_pages_fast+0x10/0x10 [ 124.445303][ T7382] ? rcu_is_watching+0x15/0xb0 [ 124.445330][ T7382] ? trace_contention_end+0x3c/0x120 [ 124.445362][ T7382] __iov_iter_get_pages_alloc+0x39d/0xa90 [ 124.445404][ T7382] ? __se_sys_vmsplice+0x4bc/0x1430 [ 124.445440][ T7382] iov_iter_get_pages2+0xd1/0x130 [ 124.445473][ T7382] ? __pfx_iov_iter_get_pages2+0x10/0x10 [ 124.445515][ T7382] __se_sys_vmsplice+0x6c6/0x1430 [ 124.445572][ T7382] ? __pfx___se_sys_vmsplice+0x10/0x10 [ 124.445608][ T7382] ? handle_mm_fault+0x1830/0x1bf0 [ 124.445709][ T7382] ? do_syscall_64+0xb6/0x230 [ 124.445738][ T7382] do_syscall_64+0xf3/0x230 [ 124.445764][ T7382] ? clear_bhb_loop+0x45/0xa0 [ 124.445789][ T7382] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.445808][ T7382] RIP: 0033:0x7f6d1038d169 [ 124.445833][ T7382] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 124.445850][ T7382] RSP: 002b:00007f6d11114038 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 124.445880][ T7382] RAX: ffffffffffffffda RBX: 00007f6d105a6160 RCX: 00007f6d1038d169 [ 124.445895][ T7382] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000006 [ 124.445908][ T7382] RBP: 00007f6d1040e730 R08: 0000000000000000 R09: 0000000000000000 [ 124.445921][ T7382] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 124.445933][ T7382] R13: 0000000000000001 R14: 00007f6d105a6160 R15: 00007ffd752e4418 [ 124.445966][ T7382] [ 124.827242][ T7395] SET target dimension over the limit! [ 124.834179][ T7396] SET target dimension over the limit! [ 125.232282][ T7419] netlink: 12 bytes leftover after parsing attributes in process `syz.4.442'. [ 125.374880][ T7430] netlink: 24 bytes leftover after parsing attributes in process `syz.2.444'. [ 125.375729][ T7432] : renamed from bond0 (while UP) [ 126.311616][ T7474] __nla_validate_parse: 3 callbacks suppressed [ 126.311637][ T7474] netlink: 4552 bytes leftover after parsing attributes in process `syz.4.459'. [ 126.351990][ T7474] netlink: 4552 bytes leftover after parsing attributes in process `syz.4.459'. [ 126.371124][ T7483] netlink: 24 bytes leftover after parsing attributes in process `syz.4.459'. [ 126.994441][ T7517] netlink: 8 bytes leftover after parsing attributes in process `syz.3.471'. [ 127.788381][ T7576] tipc: Invalid UDP bearer configuration [ 127.788448][ T7576] tipc: Enabling of bearer rejected, failed to enable media [ 127.928591][ T7589] netlink: 4 bytes leftover after parsing attributes in process `syz.4.491'. [ 128.032540][ T7591] netlink: 'syz.3.492': attribute type 29 has an invalid length. [ 128.112348][ T7593] netlink: 'syz.3.492': attribute type 29 has an invalid length. [ 128.125462][ T7594] xt_connbytes: Forcing CT accounting to be enabled [ 128.212595][ T7594] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 128.246011][ T7610] netlink: 104 bytes leftover after parsing attributes in process `syz.2.496'. [ 128.332308][ T7614] netlink: 16 bytes leftover after parsing attributes in process `syz.0.497'. [ 128.408527][ T7614] netlink: 224 bytes leftover after parsing attributes in process `syz.0.497'. [ 128.684863][ T7627] bridge5: entered promiscuous mode [ 128.693280][ T7627] bridge5: entered allmulticast mode [ 128.698374][ T7628] netlink: 24 bytes leftover after parsing attributes in process `syz.2.502'. [ 128.749247][ T7628] net_ratelimit: 14 callbacks suppressed [ 128.749268][ T7628] batman_adv: batadv0: Local translation table size (104) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:2a [ 128.751682][ T7630] netlink: 16 bytes leftover after parsing attributes in process `syz.3.504'. [ 128.788903][ T7630] --map-set only usable from mangle table [ 128.822746][ T7628] 8021q: adding VLAN 0 to HW filter on device bond0 [ 129.006428][ T7628] batman_adv: batadv0: Interface deactivated: dummy0 [ 129.043987][ T7637] syz_tun: entered allmulticast mode [ 129.071818][ T7637] syz_tun: left allmulticast mode [ 129.083926][ T7637] x_tables: duplicate underflow at hook 2 [ 129.570874][ T7666] netlink: 'syz.1.513': attribute type 21 has an invalid length. [ 129.696370][ T6864] tipc: Subscription rejected, illegal request [ 129.701913][ T7677] hsr_slave_0: left promiscuous mode [ 129.736394][ T7677] hsr_slave_1: left promiscuous mode [ 129.868226][ T7688] do_dccp_setsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 129.909145][ T7692] do_dccp_setsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 129.964774][ T7686] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.972731][ T7686] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.285698][ T7711] netlink: 'syz.2.521': attribute type 1 has an invalid length. [ 130.454699][ T7724] netlink: 'syz.4.527': attribute type 3 has an invalid length. [ 130.559062][ T7724] syzkaller0: entered promiscuous mode [ 130.569813][ T7724] syzkaller0: entered allmulticast mode [ 131.361431][ T7757] IPVS: length: 8 != 1152 [ 132.258267][ T7773] __nla_validate_parse: 11 callbacks suppressed [ 132.258287][ T7773] netlink: 8 bytes leftover after parsing attributes in process `syz.0.541'. [ 132.299131][ T7780] vxcan1: entered allmulticast mode [ 132.316151][ T7778] netlink: 12 bytes leftover after parsing attributes in process `syz.2.542'. [ 132.340377][ T7780] netlink: 68 bytes leftover after parsing attributes in process `syz.1.537'. [ 132.494091][ T7787] netlink: 'syz.4.544': attribute type 5 has an invalid length. [ 132.592675][ T7789] netlink: 'syz.0.547': attribute type 13 has an invalid length. [ 132.621657][ T7789] veth0_macvtap: left promiscuous mode [ 132.634285][ T7789] macvtap0: entered allmulticast mode [ 132.699732][ T7789] macvtap0: refused to change device tx_queue_len [ 132.718069][ T7797] netlink: 4 bytes leftover after parsing attributes in process `syz.1.549'. [ 132.802094][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.810108][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.875529][ T7809] netlink: 388 bytes leftover after parsing attributes in process `syz.1.553'. [ 132.884074][ T7811] openvswitch: netlink: Flow key attribute not present in set flow. [ 133.033430][ T7817] netlink: 5 bytes leftover after parsing attributes in process `syz.3.555'. [ 133.078384][ T7817] 0FN: renamed from bond_slave_0 (while UP) [ 133.106400][ T7817] 0FN: entered allmulticast mode [ 133.503129][ T7841] netlink: 32 bytes leftover after parsing attributes in process `syz.3.562'. [ 133.548703][ T7846] netlink: 24 bytes leftover after parsing attributes in process `syz.4.565'. [ 133.622128][ T7842] tap0: tun_chr_ioctl cmd 1074025676 [ 133.627704][ T7842] tap0: owner set to 0 [ 133.694887][ T7853] netlink: 16 bytes leftover after parsing attributes in process `syz.3.566'. [ 133.864457][ T7862] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 134.035183][ T7871] syzkaller1: entered allmulticast mode [ 134.389920][ T7889] nbd0: detected capacity change from 0 to 4096 [ 134.411400][ T5853] block nbd0: Receive control failed (result -32) [ 134.493002][ T7899] netlink: 161716 bytes leftover after parsing attributes in process `syz.1.584'. [ 134.502817][ T7899] netlink: zone id is out of range [ 134.508181][ T7899] netlink: zone id is out of range [ 134.513411][ T7899] netlink: zone id is out of range [ 134.521156][ T7899] netlink: zone id is out of range [ 134.526399][ T7899] netlink: zone id is out of range [ 134.531775][ T7899] netlink: zone id is out of range [ 134.537139][ T7899] netlink: zone id is out of range [ 134.542284][ T7899] netlink: zone id is out of range [ 134.547593][ T7899] netlink: zone id is out of range [ 134.554595][ T7899] netlink: zone id is out of range [ 134.709845][ T7907] netlink: 'syz.1.587': attribute type 1 has an invalid length. [ 134.903149][ T7920] C: entered promiscuous mode [ 134.925222][ T7920] C: entered allmulticast mode [ 134.941444][ T7920] tunl0: entered promiscuous mode [ 134.947216][ T7920] tunl0: entered allmulticast mode [ 134.954893][ T7920] gre0: entered promiscuous mode [ 134.966070][ T7920] gre0: entered allmulticast mode [ 135.041514][ T7920] gretap0: entered promiscuous mode [ 135.050743][ T7920] gretap0: entered allmulticast mode [ 135.069715][ T7920] erspan0: entered promiscuous mode [ 135.075512][ T7920] erspan0: entered allmulticast mode [ 135.084633][ T7920] ip_vti0: entered promiscuous mode [ 135.090669][ T7920] ip_vti0: entered allmulticast mode [ 135.099400][ T7920] ip6_vti0: entered promiscuous mode [ 135.104946][ T7920] ip6_vti0: entered allmulticast mode [ 135.117561][ T7920] sit0: entered promiscuous mode [ 135.122809][ T7920] sit0: entered allmulticast mode [ 135.175580][ T7920] ip6tnl0: entered promiscuous mode [ 135.181266][ T7920] ip6tnl0: entered allmulticast mode [ 135.190212][ T7920] ip6gre0: entered promiscuous mode [ 135.195469][ T7920] ip6gre0: entered allmulticast mode [ 135.226336][ T7920] syz_tun: entered promiscuous mode [ 135.231757][ T7920] syz_tun: entered allmulticast mode [ 135.242525][ T7920] ip6gretap0: entered promiscuous mode [ 135.248584][ T7920] ip6gretap0: entered allmulticast mode [ 135.261199][ T7920] bridge0: port 2(bridge_slave_1) entered blocking state [ 135.268375][ T7920] bridge0: port 2(bridge_slave_1) entered forwarding state [ 135.275884][ T7920] bridge0: port 1(bridge_slave_0) entered blocking state [ 135.283127][ T7920] bridge0: port 1(bridge_slave_0) entered forwarding state [ 135.293178][ T7920] bridge0: entered promiscuous mode [ 135.298518][ T7920] bridge0: entered allmulticast mode [ 135.306328][ T7920] team0: entered promiscuous mode [ 135.311763][ T7920] team_slave_0: entered promiscuous mode [ 135.317772][ T7920] team_slave_1: entered promiscuous mode [ 135.323568][ T7920] team0: entered allmulticast mode [ 135.329437][ T7920] team_slave_0: entered allmulticast mode [ 135.335204][ T7920] team_slave_1: entered allmulticast mode [ 135.343664][ T7920] 8021q: adding VLAN 0 to HW filter on device team0 [ 135.351994][ T7920] dummy0: entered promiscuous mode [ 135.357690][ T7920] dummy0: entered allmulticast mode [ 135.364153][ T7920] batman_adv: batadv0: Interface activated: dummy0 [ 135.373733][ T7920] nlmon0: entered promiscuous mode [ 135.379171][ T7920] nlmon0: entered allmulticast mode [ 135.387616][ T7920] caif0: entered promiscuous mode [ 135.392748][ T7920] caif0: entered allmulticast mode [ 135.401269][ T7923] netlink: 'syz.4.592': attribute type 1 has an invalid length. [ 135.618755][ T7943] batman_adv: batadv0: Interface deactivated: wlan0 [ 135.788367][ T7943] batman_adv: batadv0: Removing interface: wlan0 [ 135.831918][ T7958] (unnamed net_device) (uninitialized): peer notification delay (1164) is not a multiple of miimon (100), value rounded to 1100 ms [ 135.889890][ T7958] bond6: entered promiscuous mode [ 135.895059][ T7958] bond6: entered allmulticast mode [ 135.903098][ T7958] 8021q: adding VLAN 0 to HW filter on device bond6 [ 135.994455][ T7969] syzkaller1: entered promiscuous mode [ 136.002287][ T7969] syzkaller1: entered allmulticast mode [ 136.298135][ T7979] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.305697][ T7979] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.906105][ T8011] batman_adv: batadv0: Adding interface: gretap1 [ 136.912819][ T8011] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 137.245354][ T8029] netlink: 'syz.1.624': attribute type 1 has an invalid length. [ 137.477173][ T8031] tipc: Invalid UDP bearer configuration [ 137.477250][ T8031] tipc: Enabling of bearer rejected, failed to enable media [ 137.571883][ T8043] __nla_validate_parse: 7 callbacks suppressed [ 137.571903][ T8043] netlink: 4 bytes leftover after parsing attributes in process `syz.3.625'. [ 138.118720][ T8061] netlink: 64 bytes leftover after parsing attributes in process `syz.2.632'. [ 138.342298][ T8077] Cannot find add_set index 0 as target [ 138.504187][ T8071] syz.0.633 (8071) used greatest stack depth: 18224 bytes left [ 138.626778][ T8093] netlink: 16 bytes leftover after parsing attributes in process `syz.0.640'. [ 138.639321][ T8093] sit0: entered promiscuous mode [ 138.644722][ T8093] netlink: 'syz.0.640': attribute type 1 has an invalid length. [ 138.653898][ T8093] netlink: 1 bytes leftover after parsing attributes in process `syz.0.640'. [ 138.959434][ T8105] netlink: 9 bytes leftover after parsing attributes in process `syz.2.645'. [ 138.970421][ T8105] 0: renamed from hsr_slave_1 (while UP) [ 138.980573][ T8105] 0: entered allmulticast mode [ 139.322489][ T8120] nbd: must specify at least one socket [ 139.331592][ T8118] nbd: must specify at least one socket [ 139.629761][ T8131] xt_CT: No such helper "pptp" [ 139.869809][ T8147] netlink: 24 bytes leftover after parsing attributes in process `syz.2.657'. [ 139.910486][ T8147] veth0: entered promiscuous mode [ 139.933902][ T8144] veth0: left promiscuous mode [ 139.960729][ T30] audit: type=1800 audit(1744261590.943:2): pid=8149 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.658" name="memory.events" dev="tmpfs" ino=702 res=0 errno=0 [ 140.061151][ T8149] xt_CT: No such helper "pptp" [ 140.453117][ T8178] netlink: 256 bytes leftover after parsing attributes in process `syz.1.665'. [ 140.591514][ T8188] dvmrp0: entered allmulticast mode [ 140.602976][ T8187] netlink: 8 bytes leftover after parsing attributes in process `syz.1.669'. [ 141.371739][ T8235] netlink: 404 bytes leftover after parsing attributes in process `syz.2.686'. [ 141.385858][ T8235] netlink: 28 bytes leftover after parsing attributes in process `syz.2.686'. [ 141.400523][ T8235] netlink: 'syz.2.686': attribute type 10 has an invalid length. [ 141.454053][ T8235] syz_tun: left allmulticast mode [ 141.629585][ T8244] netlink: 'syz.4.688': attribute type 1 has an invalid length. [ 141.972116][ T8258] : renamed from ipvlan0 [ 142.789648][ T8290] sit2: entered promiscuous mode [ 142.801025][ T8290] sit2: entered allmulticast mode [ 142.904409][ T8302] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 143.014135][ T8310] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 143.716223][ T8340] __nla_validate_parse: 5 callbacks suppressed [ 143.716243][ T8340] netlink: 8 bytes leftover after parsing attributes in process `syz.1.713'. [ 143.898296][ T8347] tipc: Started in network mode [ 143.903308][ T8347] tipc: Node identity cacafa6acc3e, cluster identity 4711 [ 143.911834][ T8347] tipc: Enabled bearer , priority 0 [ 144.021111][ T8347] tipc: Enabling of bearer rejected, already enabled [ 144.112098][ T8347] tipc: Disabling bearer [ 144.321561][ T8373] netlink: 68 bytes leftover after parsing attributes in process `syz.0.721'. [ 144.624928][ T8393] netlink: 'syz.1.727': attribute type 1 has an invalid length. [ 144.680712][ T8396] netlink: 40 bytes leftover after parsing attributes in process `syz.1.727'. [ 144.690365][ T8395] blkio.reset_stats is deprecated [ 144.742568][ T8393] netlink: 'syz.1.727': attribute type 21 has an invalid length. [ 144.784154][ T8393] netlink: 156 bytes leftover after parsing attributes in process `syz.1.727'. [ 145.023689][ T8422] netlink: 'syz.2.734': attribute type 1 has an invalid length. [ 145.123663][ T8421] delete_channel: no stack [ 145.289172][ T8433] netlink: 'syz.2.739': attribute type 8 has an invalid length. [ 145.498553][ T8446] netlink: 19 bytes leftover after parsing attributes in process `syz.0.743'. [ 145.939053][ T8473] Cannot find add_set index 0 as target [ 146.050241][ T8483] 8021q: VLANs not supported on sit0 [ 146.084591][ T8486] netlink: 'syz.2.756': attribute type 1 has an invalid length. [ 146.104045][ T8486] netlink: 228 bytes leftover after parsing attributes in process `syz.2.756'. [ 146.614478][ T5849] IPVS: starting estimator thread 0... [ 146.694319][ T8523] netlink: 24 bytes leftover after parsing attributes in process `syz.4.769'. [ 146.737077][ T8521] IPVS: using max 30 ests per chain, 72000 per kthread [ 146.944425][ T8537] netlink: 4 bytes leftover after parsing attributes in process `syz.1.771'. [ 147.204086][ T8547] netlink: 144 bytes leftover after parsing attributes in process `syz.2.775'. [ 147.230845][ T8545] netlink: 10 bytes leftover after parsing attributes in process `syz.1.774'. [ 147.304679][ T8550] x_tables: duplicate underflow at hook 1 [ 147.345105][ T8552] netlink: 'syz.2.777': attribute type 10 has an invalid length. [ 147.372635][ T8552] macvlan0: entered promiscuous mode [ 147.381410][ T8550] netlink: 'syz.0.776': attribute type 4 has an invalid length. [ 147.389410][ T8552] macvlan0: entered allmulticast mode [ 147.625101][ T8563] netlink: 'syz.2.781': attribute type 11 has an invalid length. [ 148.074398][ T5897] hid-multitouch 0005:0457:007F.0001: unknown main item tag 0x0 [ 148.103322][ T5897] hid-multitouch 0005:0457:007F.0001: hidraw0: BLUETOOTH HID v0.09 Device [syz1] on aa:aa:aa:aa:aa:aa [ 148.307380][ T8598] xt_cgroup: invalid path, errno=-2 [ 148.876152][ T8621] __nla_validate_parse: 2 callbacks suppressed [ 148.876173][ T8621] netlink: 8 bytes leftover after parsing attributes in process `syz.0.800'. [ 149.261623][ T8634] bridge0: port 1(bridge_slave_0) entered blocking state [ 149.268883][ T8634] bridge0: port 1(bridge_slave_0) entered forwarding state [ 149.728917][ T8654] net_ratelimit: 178 callbacks suppressed [ 149.728937][ T8654] dccp_invalid_packet: P.CsCov 4 exceeds packet length 28 [ 149.892785][ T8662] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 150.367600][ T8703] dccp_v6_rcv: dropped packet with invalid checksum [ 150.556354][ T8711] netlink: 204 bytes leftover after parsing attributes in process `syz.0.829'. [ 150.731529][ T8719] netlink: 'syz.3.830': attribute type 21 has an invalid length. [ 150.740154][ T8719] netlink: 132 bytes leftover after parsing attributes in process `syz.3.830'. [ 150.866338][ T8726] SET target dimension over the limit! [ 150.948072][ T8732] netlink: 12 bytes leftover after parsing attributes in process `syz.3.835'. [ 150.986148][ T8735] netlink: 'syz.0.837': attribute type 12 has an invalid length. [ 151.040668][ T8738] syzkaller1: entered promiscuous mode [ 151.047912][ T8738] syzkaller1: entered allmulticast mode [ 151.224713][ T8749] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 151.265303][ T8749] netlink: 4 bytes leftover after parsing attributes in process `syz.2.841'. [ 151.290664][ T8749] ieee802154 phy1 wpan1: encryption failed: -22 [ 151.465398][ T8769] netlink: 16 bytes leftover after parsing attributes in process `syz.2.845'. [ 151.551660][ T8772] netlink: 8 bytes leftover after parsing attributes in process `syz.4.848'. [ 151.568449][ T8775] netlink: 'syz.1.849': attribute type 10 has an invalid length. [ 151.742457][ T8781] 8021q: adding VLAN 0 to HW filter on device bond2 [ 151.781423][ T8793] netlink: 8 bytes leftover after parsing attributes in process `syz.3.853'. [ 151.798404][ T8781] bond0: (slave bond2): Enslaving as an active interface with an up link [ 152.077570][ T8800] netlink: 16 bytes leftover after parsing attributes in process `syz.0.854'. [ 152.118250][ T8804] syzkaller1: entered promiscuous mode [ 152.123897][ T8804] syzkaller1: entered allmulticast mode [ 152.430171][ T8821] veth0: entered promiscuous mode [ 152.437455][ T8821] netlink: 16 bytes leftover after parsing attributes in process `syz.2.863'. [ 152.453372][ T8820] veth0: left promiscuous mode [ 152.571688][ T8826] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 152.594082][ T8826] netlink: 'syz.4.865': attribute type 21 has an invalid length. [ 152.645932][ T8828] sctp: [Deprecated]: syz.2.866 (pid 8828) Use of int in maxseg socket option. [ 152.645932][ T8828] Use struct sctp_assoc_value instead [ 152.723151][ T8836] xt_hashlimit: size too large, truncated to 1048576 [ 153.159402][ T8855] syzkaller1: entered promiscuous mode [ 153.183929][ T8855] syzkaller1: entered allmulticast mode [ 184.643921][ T8880] __nla_validate_parse: 5 callbacks suppressed [ 184.643942][ T8880] netlink: 4 bytes leftover after parsing attributes in process `syz.3.883'. [ 184.654193][ T8885] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 184.698338][ T8887] netlink: 'syz.2.882': attribute type 11 has an invalid length. [ 184.714721][ T8887] netlink: 228 bytes leftover after parsing attributes in process `syz.2.882'. [ 184.883997][ T8899] netlink: 4 bytes leftover after parsing attributes in process `syz.3.889'. [ 184.981513][ T8903] syzkaller1: entered promiscuous mode [ 185.000908][ T8903] syzkaller1: entered allmulticast mode [ 185.041308][ T8905] vlan3: entered promiscuous mode [ 185.049743][ T8905] bridge0: entered promiscuous mode [ 185.070572][ T8909] netlink: 4 bytes leftover after parsing attributes in process `syz.1.893'. [ 185.286986][ T8916] netlink: 84 bytes leftover after parsing attributes in process `syz.1.896'. [ 185.375979][ T8924] netlink: 20 bytes leftover after parsing attributes in process `syz.3.894'. [ 185.407762][ T8925] sctp: [Deprecated]: syz.4.895 (pid 8925) Use of int in max_burst socket option deprecated. [ 185.407762][ T8925] Use struct sctp_assoc_value instead [ 185.495660][ T8929] ip6t_REJECT: ECHOREPLY is not supported [ 185.503675][ T8913] netlink: 4 bytes leftover after parsing attributes in process `syz.4.895'. [ 185.514234][ T8929] netlink: 4 bytes leftover after parsing attributes in process `syz.0.899'. [ 185.774312][ T8943] netlink: 'syz.0.899': attribute type 11 has an invalid length. [ 185.782812][ T8943] netlink: 224 bytes leftover after parsing attributes in process `syz.0.899'. [ 185.855924][ T8917] netlink: 44 bytes leftover after parsing attributes in process `syz.4.895'. [ 185.945883][ T8947] Unknown options in mask 1f4 [ 186.019221][ T8951] netlink: 'syz.1.903': attribute type 49 has an invalid length. [ 186.594098][ T8983] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 186.607703][ T8983] team0: Device ipvlan2 is already an upper device of the team interface [ 186.921302][ T9005] netlink: 'syz.1.921': attribute type 1 has an invalid length. [ 186.945742][ T9005] netlink: 'syz.1.921': attribute type 1 has an invalid length. [ 187.028665][ T9007] netlink: 'syz.3.922': attribute type 11 has an invalid length. [ 187.454469][ T9026] xt_CT: No such helper "pptp" [ 187.794377][ T9065] netlink: 'syz.3.940': attribute type 1 has an invalid length. [ 187.985571][ T9077] do_dccp_getsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 188.491717][ T9098] netlink: 'syz.4.950': attribute type 10 has an invalid length. [ 188.510857][ T9098] bridge0: port 2(bridge_slave_1) entered blocking state [ 188.518351][ T9098] bridge0: port 2(bridge_slave_1) entered forwarding state [ 188.525910][ T9098] bridge0: port 1(bridge_slave_0) entered blocking state [ 188.533112][ T9098] bridge0: port 1(bridge_slave_0) entered forwarding state [ 188.556127][ T9098] bridge0: entered promiscuous mode [ 188.565063][ T9098] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 188.789551][ T9113] bond0: (slave ip6_vti0): Error: Device type is different from other slaves [ 188.851058][ T9112] bond0: (slave ip6_vti0): Error: Device type is different from other slaves [ 189.081986][ T9131] IPVS: Unknown mcast interface: vcan0 [ 189.642902][ T9175] sch_tbf: burst 0 is lower than device team_slave_0 mtu (1514) ! [ 189.685277][ T9179] __nla_validate_parse: 18 callbacks suppressed [ 189.685299][ T9179] netlink: 40 bytes leftover after parsing attributes in process `syz.0.971'. [ 189.793899][ T9179] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 189.892210][ T9190] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 189.905073][ T9190] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 189.926027][ T9192] xt_l2tp: v2 tid > 0xffff: 150994944 [ 189.955262][ T9194] netlink: 872 bytes leftover after parsing attributes in process `syz.4.976'. [ 189.979140][ T9196] netlink: 'syz.0.977': attribute type 5 has an invalid length. [ 190.061307][ T9200] netlink: 4 bytes leftover after parsing attributes in process `syz.2.978'. [ 190.192825][ T9212] netlink: 4 bytes leftover after parsing attributes in process `syz.1.981'. [ 190.201777][ T9213] syzkaller0: entered allmulticast mode [ 190.318655][ T9217] syzkaller0 (unregistering): left allmulticast mode [ 190.353429][ T9227] IPVS: set_ctl: invalid protocol: 47 224.0.0.2:20001 [ 190.371347][ T9227] xt_bpf: check failed: parse error [ 190.553544][ T9240] netlink: 4 bytes leftover after parsing attributes in process `syz.2.989'. [ 191.150811][ T9280] netdevsim netdevsim2: Direct firmware load for . [ 191.150811][ T9280] failed with error -2 [ 191.186801][ T9280] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 191.186801][ T9280] [ 191.571624][ T9317] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1011'. [ 191.584239][ T9317] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1011'. [ 191.595572][ T9317] netlink: 46 bytes leftover after parsing attributes in process `syz.3.1011'. [ 191.639299][ T9317] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1011'. [ 191.715219][ T9323] xt_ecn: cannot match TCP bits for non-tcp packets [ 191.823177][ T9330] veth5: entered allmulticast mode [ 192.370067][ T9362] xt_policy: too many policy elements [ 192.516126][ T9372] ip6gre2: entered allmulticast mode [ 192.626893][ T9374] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1023'. [ 193.169994][ T9405] netlink: 'syz.4.1026': attribute type 11 has an invalid length. [ 193.482705][ T9420] netlink: 'syz.3.1028': attribute type 39 has an invalid length. [ 194.232049][ T9438] xt_hashlimit: size too large, truncated to 1048576 [ 194.244185][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.286227][ T9441] netlink: 'syz.3.1034': attribute type 12 has an invalid length. [ 194.336667][ T9441] netlink: 'syz.3.1034': attribute type 29 has an invalid length. [ 194.875049][ T9468] __nla_validate_parse: 6 callbacks suppressed [ 194.875069][ T9468] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1043'. [ 195.220429][ T9480] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1047'. [ 195.272765][ T9481] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1047'. [ 195.294273][ T9483] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1048'. [ 195.460433][ T9489] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1050'. [ 195.480951][ T9490] batman_adv: batadv0: Interface deactivated: dummy0 [ 195.508508][ T9490] batman_adv: batadv0: Removing interface: dummy0 [ 195.547012][ T9490] bridge_slave_0: left allmulticast mode [ 195.555684][ T9490] bridge_slave_0: left promiscuous mode [ 195.581739][ T9490] bridge0: port 1(bridge_slave_0) entered disabled state [ 195.595908][ T9490] bridge_slave_1: left allmulticast mode [ 195.612052][ T9490] bridge_slave_1: left promiscuous mode [ 195.621898][ T9490] bridge0: port 2(bridge_slave_1) entered disabled state [ 195.644860][ T9490] team_slave_0: left promiscuous mode [ 195.655295][ T9490] team_slave_0: left allmulticast mode [ 195.685511][ T9490] team0: Port device team_slave_0 removed [ 195.700485][ T9490] team_slave_1: left promiscuous mode [ 195.706394][ T9490] team_slave_1: left allmulticast mode [ 195.723489][ T9490] team0: Port device team_slave_1 removed [ 195.731357][ T9490] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 195.739575][ T9490] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 195.750906][ T9490] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 195.760390][ T9490] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 195.858320][ T9495] team0: Mode changed to "loadbalance" [ 196.086787][ T9518] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1056'. [ 196.714966][ T9548] netlink: 'syz.2.1068': attribute type 7 has an invalid length. [ 196.830285][ T9551] smc: net device bond0 applied user defined pnetid SYZ2 [ 196.870143][ T9551] smc: net device bond0 erased user defined pnetid SYZ2 [ 197.033050][ T9567] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 197.216796][ T9575] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1079'. [ 197.234463][ T9579] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1079'. [ 197.332081][ T9581] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1081'. [ 197.350195][ T9581] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1081'. [ 197.485215][ T9596] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 197.500078][ T9596] team0: Device ipvlan2 is already an upper device of the team interface [ 198.435972][ T9650] netdevsim netdevsim1 : renamed from netdevsim0 (while UP) [ 198.647518][ T9657] pimreg3: entered allmulticast mode [ 198.817052][ T9671] netlink: 'syz.3.1113': attribute type 11 has an invalid length. [ 198.851606][ T9671] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 198.869061][ T9673] bond0: option arp_validate: mode dependency failed, not supported in mode balance-tlb(5) [ 198.893096][ T9673] bond0: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5) [ 198.917418][ T9673] netlink: 'syz.2.1114': attribute type 10 has an invalid length. [ 199.285113][ T9695] netlink: 'syz.4.1121': attribute type 8 has an invalid length. [ 199.371414][ T9705] xt_recent: Unsupported userspace flags (00000042) [ 199.885500][ T9729] __nla_validate_parse: 5 callbacks suppressed [ 199.885520][ T9729] netlink: 830 bytes leftover after parsing attributes in process `syz.3.1132'. [ 199.920382][ T9728] netlink: 830 bytes leftover after parsing attributes in process `syz.3.1132'. [ 199.922018][ T9725] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1131'. [ 199.970873][ T9725] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1131'. [ 200.202702][ T9739] xt_limit: Overflow, try lower: 2147483649/128 [ 200.460190][ T9753] tipc: Started in network mode [ 200.482281][ T9753] tipc: Node identity ffffa848, cluster identity 4711 [ 200.506560][ T9753] tipc: Node number set to 4294944840 [ 200.768863][ T9776] sctp: [Deprecated]: syz.1.1145 (pid 9776) Use of int in max_burst socket option deprecated. [ 200.768863][ T9776] Use struct sctp_assoc_value instead [ 201.318935][ T9805] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1154'. [ 201.333412][ T9805] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1154'. [ 201.549049][ T9817] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1155'. [ 201.596622][ T9817] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1155'. [ 201.747242][ T9826] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1159'. [ 201.816126][ T9829] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1160'. [ 202.439640][ T9855] IPVS: Unknown mcast interface: pim6reg1 [ 202.461836][ T9858] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 202.581545][ T9860] sctp: [Deprecated]: syz.3.1170 (pid 9860) Use of struct sctp_assoc_value in delayed_ack socket option. [ 202.581545][ T9860] Use struct sctp_sack_info instead [ 203.241223][ T9893] netlink: 'syz.2.1178': attribute type 39 has an invalid length. [ 203.875461][ T9916] openvswitch: netlink: Key type 2310 is out of range max 32 [ 203.902169][ T9920] syz.4.1189: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 203.947925][ T9920] CPU: 1 UID: 0 PID: 9920 Comm: syz.4.1189 Not tainted 6.14.0-syzkaller-13339-g29d261466fa6 #0 PREEMPT(full) [ 203.947958][ T9920] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 203.947972][ T9920] Call Trace: [ 203.947980][ T9920] [ 203.947991][ T9920] dump_stack_lvl+0x241/0x360 [ 203.948032][ T9920] ? __pfx_dump_stack_lvl+0x10/0x10 [ 203.948064][ T9920] ? __pfx__printk+0x10/0x10 [ 203.948093][ T9920] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 203.948126][ T9920] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 203.948157][ T9920] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 203.948191][ T9920] warn_alloc+0x27c/0x410 [ 203.948212][ T9920] ? is_mmconf_reserved+0x3a1/0x3f0 [ 203.948236][ T9920] ? __vmalloc_node_range_noprof+0x108/0x1390 [ 203.948259][ T9920] ? __pfx_warn_alloc+0x10/0x10 [ 203.948281][ T9920] ? kasan_save_track+0x3f/0x80 [ 203.948304][ T9920] ? __kasan_kmalloc+0x9d/0xb0 [ 203.948330][ T9920] ? xsk_setsockopt+0x449/0x840 [ 203.948349][ T9920] ? do_sock_setsockopt+0x3b1/0x710 [ 203.948368][ T9920] ? __x64_sys_setsockopt+0x1ee/0x280 [ 203.948387][ T9920] ? do_syscall_64+0xf3/0x230 [ 203.948423][ T9920] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.948454][ T9920] __vmalloc_node_range_noprof+0x128/0x1390 [ 203.948507][ T9920] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 203.948533][ T9920] ? __kasan_kmalloc+0x9d/0xb0 [ 203.948565][ T9920] vmalloc_user_noprof+0x74/0x80 [ 203.948584][ T9920] ? xskq_create+0xb6/0x170 [ 203.948604][ T9920] xskq_create+0xb6/0x170 [ 203.948628][ T9920] xsk_init_queue+0xa1/0x100 [ 203.948652][ T9920] xsk_setsockopt+0x449/0x840 [ 203.948676][ T9920] ? __pfx_xsk_setsockopt+0x10/0x10 [ 203.948693][ T9920] ? __lock_acquire+0xad5/0xd80 [ 203.948714][ T9920] ? __pfx_aa_sk_perm+0x10/0x10 [ 203.948753][ T9920] ? aa_sock_opt_perm+0x79/0x120 [ 203.948787][ T9920] ? __pfx_xsk_setsockopt+0x10/0x10 [ 203.948806][ T9920] do_sock_setsockopt+0x3b1/0x710 [ 203.948833][ T9920] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 203.948851][ T9920] ? __fget_files+0x2a/0x420 [ 203.948875][ T9920] ? __fget_files+0x39d/0x420 [ 203.948892][ T9920] ? __fget_files+0x2a/0x420 [ 203.948920][ T9920] __x64_sys_setsockopt+0x1ee/0x280 [ 203.948948][ T9920] do_syscall_64+0xf3/0x230 [ 203.948974][ T9920] ? clear_bhb_loop+0x45/0xa0 [ 203.948999][ T9920] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.949019][ T9920] RIP: 0033:0x7f8780f8d169 [ 203.949037][ T9920] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 203.949054][ T9920] RSP: 002b:00007f8781e23038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 203.949076][ T9920] RAX: ffffffffffffffda RBX: 00007f87811a5fa0 RCX: 00007f8780f8d169 [ 203.949092][ T9920] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 203.949104][ T9920] RBP: 00007f878100e730 R08: 0000000000000004 R09: 0000000000000000 [ 203.949116][ T9920] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 203.949128][ T9920] R13: 0000000000000000 R14: 00007f87811a5fa0 R15: 00007ffd92708bd8 [ 203.949159][ T9920] [ 203.949167][ T9920] Mem-Info: [ 204.117075][ T9925] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 204.141666][ T9920] active_anon:3917 inactive_anon:0 isolated_anon:0 [ 204.141666][ T9920] active_file:1492 inactive_file:38345 isolated_file:0 [ 204.141666][ T9920] unevictable:3267 dirty:188 writeback:0 [ 204.141666][ T9920] slab_reclaimable:10241 slab_unreclaimable:100514 [ 204.141666][ T9920] mapped:31031 shmem:3899 pagetables:815 [ 204.141666][ T9920] sec_pagetables:0 bounce:0 [ 204.141666][ T9920] kernel_misc_reclaimable:0 [ 204.141666][ T9920] free:1338421 free_pcp:343 free_cma:0 [ 204.317410][ T9920] Node 0 active_anon:25568kB inactive_anon:0kB active_file:5968kB inactive_file:153308kB unevictable:4032kB isolated(anon):0kB isolated(file):0kB mapped:116624kB dirty:748kB writeback:0kB shmem:16260kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11736kB pagetables:3260kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 204.436570][ T9920] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 204.504866][ T9920] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 204.537569][ T9920] lowmem_reserve[]: 0 2487 2487 2487 2487 [ 204.550033][ T9933] netlink: 'syz.3.1192': attribute type 11 has an invalid length. [ 204.559028][ T9933] netlink: 'syz.3.1192': attribute type 11 has an invalid length. [ 204.577336][ T9920] Node 0 DMA32 free:1431572kB boost:0kB min:34152kB low:42688kB high:51224kB reserved_highatomic:0KB active_anon:18660kB inactive_anon:0kB active_file:5968kB inactive_file:153216kB unevictable:1632kB writepending:748kB present:3129332kB managed:2547248kB mlocked:4kB bounce:0kB free_pcp:12568kB local_pcp:388kB free_cma:0kB [ 204.615601][ T9920] lowmem_reserve[]: 0 0 0 0 0 [ 204.620900][ T9920] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:8kB inactive_anon:0kB active_file:0kB inactive_file:92kB unevictable:0kB writepending:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 204.648296][ T9920] lowmem_reserve[]: 0 0 0 0 0 [ 204.653085][ T9920] Node 1 Normal free:3902852kB boost:0kB min:55748kB low:69684kB high:83620kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 204.718446][ T9920] lowmem_reserve[]: 0 0 0 0 0 [ 204.729792][ T9941] vlan4: entered allmulticast mode [ 204.734970][ T9941] bond0: entered allmulticast mode [ 204.766601][ T9941] bond_slave_1: entered allmulticast mode [ 204.771284][ T9920] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 204.778040][ T9941] bond0: (slave vlan4): Opening slave failed [ 204.824061][ T9920] Node 0 DMA32: 26*4kB (UM) 128*8kB (UME) 77*16kB (UME) 196*32kB (UME) 235*64kB (UME) 83*128kB (UME) 35*256kB (UME) 14*512kB (UME) 3*1024kB (M) 5*2048kB (UME) 336*4096kB (UM) = 1439992kB [ 204.871250][ T9920] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 204.911866][ T9920] Node 1 Normal: 225*4kB (UME) 54*8kB (UME) 47*16kB (UME) 181*32kB (UME) 105*64kB (UME) 21*128kB (UME) 12*256kB (UME) 7*512kB (UM) 4*1024kB (UME) 4*2048kB (UE) 944*4096kB (UM) = 3902852kB [ 204.942387][ T9920] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 204.956303][ T9920] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 204.967096][ T9920] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 204.977336][ T9920] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 204.997145][ T9920] 42661 total pagecache pages [ 205.002667][ T9920] 0 pages in swap cache [ 205.006961][ T9920] Free swap = 124996kB [ 205.011556][ T9920] Total swap = 124996kB [ 205.069968][ T9920] 2097051 pages RAM [ 205.074042][ T9920] 0 pages HighMem/MovableOnly [ 205.115449][ T9920] 428581 pages reserved [ 205.149810][ T9920] 0 pages cma reserved [ 205.192776][ T9960] __nla_validate_parse: 6 callbacks suppressed [ 205.192806][ T9960] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1199'. [ 205.238569][ T9960] macvlan0: left promiscuous mode [ 205.254130][ T9960] macvlan0: left allmulticast mode [ 205.433628][ T9973] netlink: 'syz.1.1194': attribute type 10 has an invalid length. [ 205.847128][T10006] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1208'. [ 205.973540][T10011] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 206.021885][T10009] sch_tbf: burst 88 is lower than device veth7 mtu (1514) ! [ 206.210440][T10023] x_tables: unsorted underflow at hook 3 [ 206.231117][T10016] ipt_REJECT: ECHOREPLY no longer supported. [ 206.403965][T10031] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1215'. [ 206.419303][T10034] raw_sendmsg: syz.2.1216 forgot to set AF_INET. Fix it! [ 206.430804][T10033] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1216'. [ 206.562126][ T55] Bluetooth: hci2: command 0x0406 tx timeout [ 206.562134][ T5858] Bluetooth: hci3: command 0x0406 tx timeout [ 206.574545][ T5842] Bluetooth: hci1: command 0x0406 tx timeout [ 207.399592][T10107] netlink: 'syz.1.1231': attribute type 4 has an invalid length. [ 207.464353][T10111] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1233'. [ 207.564576][T10114] netlink: 176 bytes leftover after parsing attributes in process `syz.4.1234'. [ 207.597071][T10114] netlink: 176 bytes leftover after parsing attributes in process `syz.4.1234'. [ 207.848841][T10130] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 208.126717][T10143] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1241'. [ 208.156851][T10143] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 208.196714][T10148] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 208.205308][T10139] netlink: 'syz.2.1241': attribute type 10 has an invalid length. [ 208.301050][T10153] ieee802154 phy1 wpan1: encryption failed: -22 [ 208.384421][T10136] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 208.433054][T10157] xt_CT: You must specify a L4 protocol and not use inversions on it [ 208.437240][T10156] veth0_to_bridge: entered allmulticast mode [ 208.553832][T10164] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1249'. [ 208.961782][T10187] netlink: 'syz.4.1255': attribute type 10 has an invalid length. [ 208.974164][T10187] team0: Device ipvlan1 is VLAN challenged and team device has VLAN set up [ 209.125038][T10196] netlink: 'syz.4.1258': attribute type 20 has an invalid length. [ 209.137707][T10196] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1258'. [ 209.430410][T10217] lo speed is unknown, defaulting to 1000 [ 209.444850][T10217] lo speed is unknown, defaulting to 1000 [ 209.462629][T10217] lo speed is unknown, defaulting to 1000 [ 209.866318][ T5849] lo speed is unknown, defaulting to 1000 [ 209.875650][T10217] infiniband syz0: set down [ 209.897895][T10217] infiniband syz0: added lo [ 209.971239][T10247] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 210.141887][T10251] syzkaller0: entered promiscuous mode [ 210.155502][T10251] syzkaller0: entered allmulticast mode [ 210.180882][T10217] RDS/IB: syz0: added [ 210.185731][T10217] smc: adding ib device syz0 with port count 1 [ 210.215245][T10217] smc: ib device syz0 port 1 has pnetid [ 210.316041][ T24] lo speed is unknown, defaulting to 1000 [ 210.357776][T10217] lo speed is unknown, defaulting to 1000 [ 210.402120][T10266] __nla_validate_parse: 4 callbacks suppressed [ 210.402140][T10266] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1276'. [ 210.756241][T10275] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1278'. [ 210.768425][T10275] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1278'. [ 210.970523][T10217] lo speed is unknown, defaulting to 1000 [ 211.111045][T10290] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1284'. [ 211.135469][T10290] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1284'. [ 211.148799][T10292] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1285'. [ 211.178094][T10296] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1287'. [ 211.418573][T10217] lo speed is unknown, defaulting to 1000 [ 211.545881][T10316] netlink: 'syz.1.1293': attribute type 10 has an invalid length. [ 211.575016][T10316] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1293'. [ 211.661522][ T1147] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 211.686108][ T1147] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 211.794810][T10324] x_tables: ip6_tables: REDIRECT target: used from hooks INPUT, but only usable from PREROUTING/OUTPUT [ 211.949099][T10217] lo speed is unknown, defaulting to 1000 [ 212.128835][T10338] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1300'. [ 212.143632][T10338] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1300'. [ 212.275092][T10344] IPVS: length: 157 != 24 [ 212.354152][T10217] lo speed is unknown, defaulting to 1000 [ 212.678803][T10355] x_tables: duplicate underflow at hook 2 [ 212.699761][T10355] x_tables: duplicate underflow at hook 1 [ 212.830248][T10363] netlink: 'syz.0.1310': attribute type 11 has an invalid length. [ 213.027142][T10380] netlink: 'syz.4.1314': attribute type 15 has an invalid length. [ 213.164536][T10384] netlink: 'syz.0.1316': attribute type 39 has an invalid length. [ 213.341318][T10397] xt_policy: neither incoming nor outgoing policy selected [ 213.635790][T10412] netlink: 'syz.1.1325': attribute type 1 has an invalid length. [ 213.700022][T10415] xt_recent: hitcount (4294967295) is larger than allowed maximum (65535) [ 214.258966][T10448] netlink: 'syz.0.1338': attribute type 1 has an invalid length. [ 214.271369][T10450] netlink: 'syz.3.1340': attribute type 4 has an invalid length. [ 214.301032][T10447] netlink: 'syz.1.1339': attribute type 11 has an invalid length. [ 214.991483][T10488] netlink: 'syz.3.1352': attribute type 2 has an invalid length. [ 215.264980][T10510] IPVS: Error connecting to the multicast addr [ 215.503076][T10523] __nla_validate_parse: 16 callbacks suppressed [ 215.503096][T10523] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1363'. [ 215.525668][T10527] netlink: 'syz.0.1364': attribute type 29 has an invalid length. [ 215.533589][T10527] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1364'. [ 215.557116][T10527] netlink: 'syz.0.1364': attribute type 29 has an invalid length. [ 215.572499][T10527] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1364'. [ 215.592677][T10527] openvswitch: netlink: Key type 2822 is out of range max 32 [ 215.607295][T10527] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1364'. [ 215.747138][T10540] netlink: 228 bytes leftover after parsing attributes in process `syz.2.1367'. [ 215.946269][T10547] syzkaller0: entered promiscuous mode [ 215.952112][T10547] syzkaller0: entered allmulticast mode [ 215.967400][T10546] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1370'. [ 215.977415][T10546] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1370'. [ 216.416151][T10576] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1378'. [ 216.425260][T10576] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1378'. [ 217.492447][T10576] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 217.758130][T10591] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1384'. [ 217.807775][T10593] netlink: 'syz.2.1381': attribute type 1 has an invalid length. [ 217.867966][T10590] netlink: zone id is out of range [ 217.873145][T10590] netlink: zone id is out of range [ 217.878644][T10590] netlink: zone id is out of range [ 217.883798][T10590] netlink: zone id is out of range [ 217.896568][T10590] netlink: zone id is out of range [ 217.904195][T10590] netlink: zone id is out of range [ 217.927103][T10590] netlink: get zone limit has 8 unknown bytes [ 218.225041][T10621] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 218.240149][T10621] Cannot find del_set index 3 as target [ 218.842690][T10657] team0: mtu less than device minimum [ 219.014085][T10669] openvswitch: netlink: Missing key (keys=40, expected=80) [ 219.034719][T10669] netlink: 'syz.1.1405': attribute type 3 has an invalid length. [ 219.105476][T10672] bridge: RTM_NEWNEIGH with invalid ether address [ 219.431573][T10697] geneve2: entered promiscuous mode [ 219.437568][T10697] geneve2: entered allmulticast mode [ 219.473918][T10701] xt_hashlimit: overflow, try lower: 1125899906842624/8 [ 219.588202][T10710] netlink: 'syz.1.1416': attribute type 10 has an invalid length. [ 219.602123][T10710] veth0_vlan: left promiscuous mode [ 219.610370][T10710] veth0_vlan: entered promiscuous mode [ 219.624818][T10710] team0: Device veth0_vlan failed to register rx_handler [ 219.786000][T10723] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 220.119245][T10739] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !寿$ULvyآDUDw}z [ 220.144233][T10741] netlink: 'syz.2.1430': attribute type 5 has an invalid length. [ 220.543657][T10762] __nla_validate_parse: 97 callbacks suppressed [ 220.543674][T10762] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1438'. [ 220.654142][T10769] tap0: tun_chr_ioctl cmd 1074025672 [ 220.659683][T10762] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1438'. [ 220.669730][T10769] tap0: ignored: set checksum disabled [ 220.806396][T10783] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1447'. [ 220.820869][T10781] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1447'. [ 220.841413][T10777] netlink: 112 bytes leftover after parsing attributes in process `syz.1.1445'. [ 221.192149][T10802] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 221.625034][T10828] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1458'. [ 222.439618][T10869] netlink: 'syz.0.1470': attribute type 1 has an invalid length. [ 222.462205][T10868] netlink: 'syz.0.1470': attribute type 1 has an invalid length. [ 222.490617][T10870] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1470'. [ 222.931740][T10904] x_tables: duplicate underflow at hook 1 [ 222.942832][T10906] IPVS: set_ctl: invalid protocol: 60 100.1.1.2:20003 [ 223.011576][T10909] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1484'. [ 223.032573][T10909] bridge0: port 2(bridge_slave_1) entered disabled state [ 223.041967][T10909] bridge0: port 1(bridge_slave_0) entered disabled state [ 223.095468][T10916] @: renamed from bond_slave_0 (while UP) [ 223.320484][T10928] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1490'. [ 224.112758][T10975] syzkaller1: entered promiscuous mode [ 224.126915][T10976] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1506'. [ 224.138013][T10975] syzkaller1: entered allmulticast mode [ 224.275352][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880226ebc00: rx timeout, send abort [ 224.658846][T10998] lo speed is unknown, defaulting to 1000 [ 224.664709][T10998] lo speed is unknown, defaulting to 1000 [ 224.738751][T10998] lo speed is unknown, defaulting to 1000 [ 224.776808][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880226ea000: rx timeout, send abort [ 224.785818][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880226ebc00: abort rx timeout. Force session deactivation [ 224.801668][T10998] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 224.819759][T10998] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 224.894373][T10998] lo speed is unknown, defaulting to 1000 [ 224.931025][T10998] lo speed is unknown, defaulting to 1000 [ 224.938844][T11016] net_ratelimit: 1 callbacks suppressed [ 224.938862][T11016] openvswitch: netlink: Message has 8 unknown bytes. [ 224.989246][T10998] lo speed is unknown, defaulting to 1000 [ 225.032209][T10998] lo speed is unknown, defaulting to 1000 [ 225.066636][T10998] lo speed is unknown, defaulting to 1000 [ 225.285124][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880226ea000: abort rx timeout. Force session deactivation [ 225.362965][T11033] syzkaller1: entered promiscuous mode [ 225.368882][T11033] syzkaller1: entered allmulticast mode [ 225.452928][T11039] netlink: ct family unspecified [ 225.458142][T11039] openvswitch: netlink: Actions may not be safe on all matching packets [ 225.840714][T11060] __nla_validate_parse: 3 callbacks suppressed [ 225.840732][T11060] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1536'. [ 225.860302][T11059] x_tables: ip6_tables: TPROXY target: only valid in mangle table, not  [ 225.881026][T11058] IPVS: set_ctl: invalid protocol: 0 127.0.0.1:20000 [ 225.893157][T11060] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1536'. [ 226.009039][T11075] xt_l2tp: v2 tid > 0xffff: 150994944 [ 226.042336][T11077] syzkaller1: entered promiscuous mode [ 226.048175][T11077] syzkaller1: entered allmulticast mode [ 226.298027][T11086] netlink: 408 bytes leftover after parsing attributes in process `syz.0.1543'. [ 226.314366][T11092] netlink: 'syz.2.1546': attribute type 10 has an invalid length. [ 226.380948][T11095] netlink: 'syz.3.1547': attribute type 2 has an invalid length. [ 226.389147][T11095] netlink: 'syz.3.1547': attribute type 6 has an invalid length. [ 226.423068][T11096] netlink: 'syz.3.1547': attribute type 2 has an invalid length. [ 226.442851][T11096] netlink: 'syz.3.1547': attribute type 6 has an invalid length. [ 226.454593][T11098] bridge0: port 1(bridge_slave_0) entered blocking state [ 226.461783][T11098] bridge0: port 1(bridge_slave_0) entered forwarding state [ 226.641764][T11112] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1551'. [ 226.822644][T11117] xt_CT: No such helper "pptp" [ 227.051576][T11133] syzkaller1: entered promiscuous mode [ 227.064320][T11133] syzkaller1: entered allmulticast mode [ 227.198049][T11145] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1562'. [ 227.239871][T11145] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1562'. [ 227.263182][T11145] netlink: 'syz.2.1562': attribute type 12 has an invalid length. [ 227.285111][T11145] netlink: 'syz.2.1562': attribute type 11 has an invalid length. [ 227.505155][T11161] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 227.726198][T11180] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1572'. [ 227.793360][T11184] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1571'. [ 227.824343][T11182] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1571'. [ 227.915358][T11193] sctp: [Deprecated]: syz.0.1576 (pid 11193) Use of int in max_burst socket option. [ 227.915358][T11193] Use struct sctp_assoc_value instead [ 227.935758][T11193] sctp: [Deprecated]: syz.0.1576 (pid 11193) Use of int in max_burst socket option. [ 227.935758][T11193] Use struct sctp_assoc_value instead [ 227.990262][ T6856] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 228.017479][T11198] syzkaller1: entered promiscuous mode [ 228.023090][ T6856] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 228.030819][T11198] syzkaller1: entered allmulticast mode [ 228.120556][T11205] bond0: option ad_select: unable to set because the bond device is up [ 228.168753][T11211] xt_ipcomp: unknown flags B [ 228.181333][T11212] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1578'. [ 228.542384][T11236] gretap0: entered promiscuous mode [ 229.122955][T11266] vlan1: entered allmulticast mode [ 229.134119][ T24] af_packet: tpacket_rcv: packet too big, clamped from 80 to 4294967272. macoff=96 [ 229.146001][T11266] batadv0: entered allmulticast mode [ 229.275612][T11274] netlink: 'syz.0.1601': attribute type 10 has an invalid length. [ 229.369656][T11274] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 229.449508][T11274] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 229.727388][T11300] syzkaller1: entered promiscuous mode [ 229.732925][T11300] syzkaller1: entered allmulticast mode [ 230.053534][T11318] openvswitch: netlink: Actions may not be safe on all matching packets [ 230.197647][T11327] sctp: [Deprecated]: syz.3.1618 (pid 11327) Use of struct sctp_assoc_value in delayed_ack socket option. [ 230.197647][T11327] Use struct sctp_sack_info instead [ 230.770209][T11363] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 231.103127][T11382] netlink: 'syz.4.1635': attribute type 4 has an invalid length. [ 231.423717][T11391] netlink: 'syz.1.1638': attribute type 1 has an invalid length. [ 231.431581][T11391] __nla_validate_parse: 8 callbacks suppressed [ 231.431592][T11391] netlink: 228 bytes leftover after parsing attributes in process `syz.1.1638'. [ 231.709257][T11403] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1642'. [ 231.721240][T11403] netlink: 4388 bytes leftover after parsing attributes in process `syz.0.1642'. [ 231.902716][T11410] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1644'. [ 232.149200][T11420] bridge_slave_0: default FDB implementation only supports local addresses [ 232.259075][T11428] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1651'. [ 232.365619][T11433] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1654'. [ 232.379619][T11433] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1654'. [ 232.409826][T11433] netlink: 'syz.3.1654': attribute type 11 has an invalid length. [ 232.851136][T11459] netlink: 'syz.1.1663': attribute type 1 has an invalid length. [ 232.861184][T11459] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1663'. [ 232.877943][T11459] netlink: 'syz.1.1663': attribute type 1 has an invalid length. [ 232.886530][T11459] netlink: 'syz.1.1663': attribute type 11 has an invalid length. [ 232.919899][T11459] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1663'. [ 232.932829][T11466] bridge4: entered allmulticast mode [ 232.968931][T11466] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1665'. [ 233.434735][T11493] openvswitch: netlink: Missing key (keys=40, expected=100) [ 233.525103][T11491] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 233.551129][T11503] netlink: 'syz.4.1678': attribute type 4 has an invalid length. [ 233.831582][T11517] IPVS: set_ctl: invalid protocol: 0 100.1.1.0:20001 [ 233.845307][T11522] netlink: 'syz.2.1683': attribute type 1 has an invalid length. [ 233.868626][T11523] netlink: 'syz.0.1682': attribute type 10 has an invalid length. [ 234.536599][T11568] (unnamed net_device) (uninitialized): ARP target 1.0.0.0 is already present [ 234.560289][T11568] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (1) [ 234.906626][ T7699] hid (null): unknown global tag 0xe [ 235.005519][T11606] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6gretap0, syncid = 3, id = 0 [ 235.027681][T11604] IPVS: stopping backup sync thread 11606 ... [ 235.118000][T11609] netlink: 'syz.1.1704': attribute type 10 has an invalid length. [ 235.119661][T11604] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 235.125974][ T7701] IPVS: starting estimator thread 0... [ 235.183363][T11609] hsr0: entered promiscuous mode [ 235.219951][T11609] : (slave hsr0): The slave device specified does not support setting the MAC address [ 235.246543][T11611] IPVS: using max 28 ests per chain, 67200 per kthread [ 235.260629][T11609] hsr0: mtu greater than device maximum [ 235.283278][T11609] : (slave hsr0): Error -22 calling dev_set_mtu [ 235.344937][T11621] x_tables: duplicate underflow at hook 3 [ 235.643613][ T7700] IPVS: starting estimator thread 0... [ 235.736562][T11642] IPVS: using max 27 ests per chain, 64800 per kthread [ 235.785163][T11646] x_tables: arp_tables: MARK.2 target: invalid size 8 (kernel) != (user) 0 [ 235.864044][T11651] sctp: [Deprecated]: syz.0.1715 (pid 11651) Use of struct sctp_assoc_value in delayed_ack socket option. [ 235.864044][T11651] Use struct sctp_sack_info instead [ 236.461279][T11671] netlink: 'syz.1.1724': attribute type 30 has an invalid length. [ 236.489081][T11671] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0) [ 236.515360][T11671] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255 [ 236.681497][T11679] __nla_validate_parse: 10 callbacks suppressed [ 236.681519][T11679] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1727'. [ 236.733443][T11683] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1729'. [ 236.769266][T11679] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1727'. [ 236.821682][T11683] netlink: 'syz.3.1729': attribute type 2 has an invalid length. [ 236.843328][ T7699] hid-generic 0005:046D:0A0F.0002: unknown global tag 0xe [ 236.900866][ T7699] hid-generic 0005:046D:0A0F.0002: item 0 2 1 14 parsing failed [ 236.929650][ T7699] hid-generic 0005:046D:0A0F.0002: probe with driver hid-generic failed with error -22 [ 237.020118][T11699] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1734'. [ 237.027924][T11695] tipc: Started in network mode [ 237.034784][T11695] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711 [ 237.059458][T11695] tipc: Enabling of bearer rejected, failed to enable media [ 237.102623][T11703] sch_tbf: burst 0 is lower than device veth7 mtu (1514) ! [ 237.176698][T11706] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1736'. [ 237.185913][T11706] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1736'. [ 237.198099][T11706] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1736'. [ 237.207431][T11706] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1736'. [ 237.258136][T11706] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1736'. [ 237.293585][T11706] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1736'. [ 237.583568][T11722] bond4: entered allmulticast mode [ 237.589365][T11722] 8021q: adding VLAN 0 to HW filter on device bond4 [ 238.879722][ T5853] Bluetooth: hci4: command 0x0405 tx timeout [ 238.939628][T11738] C: renamed from lo [ 238.952505][T11738] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 238.984751][T11744] nbd: must specify an index to disconnect [ 239.342571][T11764] netlink: 'syz.2.1755': attribute type 12 has an invalid length. [ 239.487032][T11772] syzkaller1: entered promiscuous mode [ 239.500950][T11772] syzkaller1: entered allmulticast mode [ 239.511074][T11774] 0: renamed from hsr_slave_1 (while UP) [ 239.542131][T11774] 0: entered allmulticast mode [ 239.567133][T11774] A link change request failed with some changes committed already. Interface c0 may have been left with an inconsistent configuration, please check. [ 239.588275][T11776] 1: renamed from c0 (while UP) [ 239.595096][T11776] A link change request failed with some changes committed already. Interface c1 may have been left with an inconsistent configuration, please check. [ 239.608883][T11784] netlink: 'syz.3.1762': attribute type 11 has an invalid length. [ 239.624448][T11784] netlink: 'syz.3.1762': attribute type 11 has an invalid length. [ 240.040976][T11804] netlink: 'syz.3.1769': attribute type 1 has an invalid length. [ 240.062773][T11804] netlink: 'syz.3.1769': attribute type 4 has an invalid length. [ 240.160772][T11814] xt_socket: unknown flags 0x50 [ 240.791194][T11863] ksmbd: Unknown IPC event: 3, ignore. [ 241.128249][T11886] netlink: 'syz.0.1795': attribute type 1 has an invalid length. [ 241.334706][T11886] xt_CT: No such helper "pptp" [ 241.554833][T11917] bridge_slave_0: left allmulticast mode [ 241.568640][T11917] bridge0: port 1(bridge_slave_0) entered disabled state [ 241.610714][T11914] xt_CT: No such helper "pptp" [ 241.646761][T11917] bridge_slave_1: left allmulticast mode [ 241.652462][T11917] bridge_slave_1: left promiscuous mode [ 241.656183][T11925] xt_limit: Overflow, try lower: 2147483649/128 [ 241.690036][T11914] xt_CT: No such helper "pptp" [ 241.704358][T11917] bridge0: port 2(bridge_slave_1) entered disabled state [ 241.726308][T11917] bond0: (slave 00FN): Releasing backup interface [ 241.751752][T11914] xt_CT: No such helper "pptp" [ 241.766076][T11917] bond0: (slave bond_slave_1): Releasing backup interface [ 241.776124][T11917] bond_slave_1: left allmulticast mode [ 241.831180][T11917] team0: Port device team_slave_0 removed [ 241.841823][T11914] xt_CT: No such helper "pptp" [ 241.873996][T11917] team0: Port device team_slave_1 removed [ 241.911056][T11917] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 241.930608][T11917] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 241.940103][T11914] xt_CT: No such helper "pptp" [ 241.947192][T11917] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 241.954867][T11917] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 242.029755][T11914] xt_CT: No such helper "pptp" [ 242.031918][T11922] team0: Mode changed to "loadbalance" [ 242.123734][T11914] xt_CT: No such helper "pptp" [ 242.200539][T11914] xt_CT: No such helper "pptp" [ 242.326971][T11914] xt_CT: No such helper "pptp" [ 242.473648][T11965] __nla_validate_parse: 83 callbacks suppressed [ 242.473670][T11965] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1816'. [ 242.540165][T11965] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1816'. [ 242.812249][T12002] netlink: 71 bytes leftover after parsing attributes in process `syz.4.1825'. [ 242.865883][T12000] syzkaller0: entered promiscuous mode [ 242.893031][T12000] syzkaller0: entered allmulticast mode [ 243.052242][T12016] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1828'. [ 243.099342][T12022] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1829'. [ 243.174791][T12025] openvswitch: netlink: Actions may not be safe on all matching packets [ 244.375829][T12032] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1833'. [ 244.377933][T12029] openvswitch: netlink: Missing key (keys=40, expected=80) [ 244.406136][T12027] C speed is unknown, defaulting to 1000 [ 244.416835][T12029] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1831'. [ 244.475559][T12036] netlink: 'syz.0.1835': attribute type 9 has an invalid length. [ 244.488183][T12034] veth1_macvtap: left promiscuous mode [ 244.493980][T12036] netlink: 'syz.0.1835': attribute type 6 has an invalid length. [ 245.087972][T12072] netlink: 92 bytes leftover after parsing attributes in process `syz.1.1845'. [ 245.440841][T12087] delete_channel: no stack [ 245.462176][T12087] delete_channel: no stack [ 245.481900][T12087] delete_channel: no stack [ 245.489186][T12087] delete_channel: no stack [ 245.504096][T12087] delete_channel: no stack [ 245.510232][T12087] delete_channel: no stack [ 245.519950][T12087] delete_channel: no stack [ 245.524863][T12087] delete_channel: no stack [ 245.656783][T12107] netlink: 'syz.0.1853': attribute type 5 has an invalid length. [ 245.745754][T12103] C speed is unknown, defaulting to 1000 [ 245.745968][T12027] lo speed is unknown, defaulting to 1000 [ 246.204530][T12103] lo speed is unknown, defaulting to 1000 [ 247.060870][T12156] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1866'. [ 247.082063][T12154] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1866'. [ 247.100327][T12152] C speed is unknown, defaulting to 1000 [ 247.511233][T12170] netlink: 'syz.4.1870': attribute type 1 has an invalid length. [ 247.530192][T12170] netlink: 'syz.4.1870': attribute type 11 has an invalid length. [ 247.581396][T12170] __nla_validate_parse: 1 callbacks suppressed [ 247.581416][T12170] netlink: 220 bytes leftover after parsing attributes in process `syz.4.1870'. [ 247.773243][T12185] : (slave bond1): Releasing backup interface [ 247.841541][T12189] sctp: [Deprecated]: syz.4.1875 (pid 12189) Use of int in max_burst socket option. [ 247.841541][T12189] Use struct sctp_assoc_value instead [ 247.953463][T12191] netlink: 232 bytes leftover after parsing attributes in process `syz.3.1876'. [ 248.145051][T12152] lo speed is unknown, defaulting to 1000 [ 248.288893][T12210] netlink: 'syz.3.1882': attribute type 21 has an invalid length. [ 248.302078][T12210] netlink: 'syz.3.1882': attribute type 21 has an invalid length. [ 248.480772][T12226] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1887'. [ 249.474072][T12276] bond0: entered allmulticast mode [ 249.519458][T12279] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1901'. [ 249.558255][T12279] bridge_slave_1: left allmulticast mode [ 249.565007][T12279] bridge_slave_1: left promiscuous mode [ 249.580254][T12279] bridge0: port 2(bridge_slave_1) entered disabled state [ 249.790358][T12279] bridge_slave_0: left allmulticast mode [ 249.833947][T12279] bridge_slave_0: left promiscuous mode [ 249.857927][T12279] bridge0: port 1(bridge_slave_0) entered disabled state [ 250.345704][T12331] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 250.437697][T12326] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 251.519658][T12400] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 251.526386][T12402] sctp: [Deprecated]: syz.3.1940 (pid 12402) Use of struct sctp_assoc_value in delayed_ack socket option. [ 251.526386][T12402] Use struct sctp_sack_info instead [ 251.578064][T12406] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1942'. [ 251.687684][T12413] netlink: 'syz.2.1943': attribute type 11 has an invalid length. [ 251.777101][T12416] netlink: 'syz.0.1944': attribute type 1 has an invalid length. [ 251.804440][T12416] netlink: 1 bytes leftover after parsing attributes in process `syz.0.1944'. [ 251.902270][T12418] netlink: 'syz.4.1945': attribute type 21 has an invalid length. [ 251.912903][T12418] IPv6: NLM_F_CREATE should be specified when creating new route [ 251.939343][T12418] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 251.947139][T12418] IPv6: NLM_F_CREATE should be set when creating new route [ 251.954468][T12418] IPv6: NLM_F_CREATE should be set when creating new route [ 251.961832][T12418] IPv6: NLM_F_CREATE should be set when creating new route [ 252.060467][T12435] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1949'. [ 252.226605][T12441] netlink: 'syz.2.1953': attribute type 9 has an invalid length. [ 252.237444][T12441] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1953'. [ 252.243317][T12440] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 252.278328][T12443] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1954'. [ 252.305768][T12443] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1954'. [ 252.340246][T12445] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 252.471944][T12454] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 252.475480][T12450] netlink: 'syz.4.1957': attribute type 13 has an invalid length. [ 252.593613][T12462] ip6t_srh: unknown srh match flags 4001 [ 252.614317][T12467] (unnamed net_device) (uninitialized): option lp_interval: invalid value (0) [ 252.623934][T12467] (unnamed net_device) (uninitialized): option lp_interval: allowed values 1 - 2147483647 [ 252.651363][T12454] xt_ct_set_helper: 1 callbacks suppressed [ 252.651383][T12454] xt_CT: No such helper "pptp" [ 252.940536][T12487] __nla_validate_parse: 7 callbacks suppressed [ 252.940558][T12487] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1969'. [ 252.962574][T12487] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1969'. [ 253.009648][T12487] netlink: 256 bytes leftover after parsing attributes in process `syz.4.1969'. [ 253.129129][T12498] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1972'. [ 253.129609][T12497] netdevsim netdevsim4: Direct firmware load for . [ 253.129609][T12497] failed with error -2 [ 253.151059][T12497] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 253.151059][T12497] [ 253.350609][T12511] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1975'. [ 253.360728][T12511] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1975'. [ 253.371087][T12511] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1975'. [ 253.390181][T12512] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1976'. [ 253.434887][T12511] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1975'. [ 253.490016][T12511] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1975'. [ 253.734453][T12527] netlink: 'syz.2.1981': attribute type 2 has an invalid length. [ 253.782703][T12530] netlink: 'syz.0.1982': attribute type 23 has an invalid length. [ 253.867752][T12539] netlink: 'syz.3.1985': attribute type 12 has an invalid length. [ 253.894424][T12540] netlink: 'syz.3.1985': attribute type 12 has an invalid length. [ 254.592369][T12567] netlink: 'syz.0.1991': attribute type 3 has an invalid length. [ 254.609844][T12570] netlink: 'syz.0.1991': attribute type 3 has an invalid length. [ 255.332347][T12609] syzkaller0: entered promiscuous mode [ 255.346825][T12609] syzkaller0: entered allmulticast mode [ 255.500531][T12621] nbd: must specify at least one socket [ 255.543488][T12622] : entered promiscuous mode [ 255.654697][T12631] bridge0: port 1(gretap0) entered blocking state [ 255.665273][T12631] bridge0: port 1(gretap0) entered disabled state [ 255.676491][T12631] bridge0: port 1(gretap0) entered blocking state [ 255.683058][T12631] bridge0: port 1(gretap0) entered forwarding state [ 255.684863][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.878100][T12647] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.092198][T12653] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 256.104634][T12653] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 256.124472][T12653] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 256.134867][T12653] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 256.154529][T12653] geneve3: entered promiscuous mode [ 256.179001][T12653] geneve3: entered allmulticast mode [ 256.206388][T12653] netdevsim netdevsim3 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 256.221373][T12653] netdevsim netdevsim3 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 256.231347][T12653] netdevsim netdevsim3 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 256.245001][T12653] netdevsim netdevsim3 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 256.252061][T12663] xt_policy: output policy not valid in PREROUTING and INPUT [ 256.272949][T12663] xt_policy: output policy not valid in PREROUTING and INPUT [ 256.280831][T12663] xt_policy: output policy not valid in PREROUTING and INPUT [ 256.299735][T12663] xt_policy: output policy not valid in PREROUTING and INPUT [ 256.311307][T12663] xt_policy: output policy not valid in PREROUTING and INPUT [ 256.326011][T12663] xt_policy: output policy not valid in PREROUTING and INPUT [ 256.356758][T12663] xt_policy: output policy not valid in PREROUTING and INPUT [ 256.371618][T12663] xt_policy: output policy not valid in PREROUTING and INPUT [ 256.379887][T12663] xt_policy: output policy not valid in PREROUTING and INPUT [ 256.389102][T12663] xt_policy: output policy not valid in PREROUTING and INPUT [ 256.607135][T12671] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 256.621598][ T1007] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.759919][ T1007] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.887708][ T1007] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.958157][ T5152] Bluetooth: hci2: command 0x0406 tx timeout [ 257.060184][ T1007] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.382038][ T5853] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 257.392091][ T5853] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 257.400286][ T5853] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 257.410249][ T5853] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 257.418943][ T5853] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 257.585122][T12695] C speed is unknown, defaulting to 1000 [ 257.775521][ T1007] bridge0: port 1(gretap0) entered disabled state [ 258.260852][ T1007] dvmrp0 (unregistering): left allmulticast mode [ 258.607317][ T1007] bond0 (unregistering): Released all slaves [ 258.629218][T12695] lo speed is unknown, defaulting to 1000 [ 258.743951][ T1007] : left promiscuous mode [ 258.811008][T12732] netlink: 'syz.4.2043': attribute type 11 has an invalid length. [ 258.818954][T12732] __nla_validate_parse: 12 callbacks suppressed [ 258.818971][T12732] netlink: 228 bytes leftover after parsing attributes in process `syz.4.2043'. [ 258.886536][T12737] validate_nla: 2 callbacks suppressed [ 258.886557][T12737] netlink: 'syz.1.2045': attribute type 21 has an invalid length. [ 258.900021][T12738] xt_limit: Overflow, try lower: 2147483649/128 [ 258.901623][T12738] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2044'. [ 258.952530][T12737] netlink: 'syz.1.2045': attribute type 20 has an invalid length. [ 258.982688][T12737] IPv6: NLM_F_CREATE should be specified when creating new route [ 259.137510][T12746] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2047'. [ 259.179054][T12753] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2050'. [ 259.232193][T12758] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2050'. [ 259.262950][T12756] netlink: 'syz.3.2048': attribute type 12 has an invalid length. [ 259.284475][T12756] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2048'. [ 259.302375][T12761] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2051'. [ 259.513457][T12695] chnl_net:caif_netlink_parms(): no params data found [ 259.527225][ T5152] Bluetooth: hci1: command tx timeout [ 259.564993][T12769] gretap0: left promiscuous mode [ 259.781353][T12778] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2058'. [ 259.822319][T12776] netlink: 604 bytes leftover after parsing attributes in process `syz.0.2056'. [ 259.857012][T12778] x_tables: duplicate underflow at hook 3 [ 260.125070][ T1007] hsr_slave_0: left promiscuous mode [ 260.136206][ T1007] 0: left promiscuous mode [ 260.144015][ T1007] [ 260.146372][ T1007] ====================================================== [ 260.153398][ T1007] WARNING: possible circular locking dependency detected [ 260.160417][ T1007] 6.14.0-syzkaller-13339-g29d261466fa6 #0 Not tainted [ 260.167174][ T1007] ------------------------------------------------------ [ 260.174198][ T1007] kworker/u8:5/1007 is trying to acquire lock: [ 260.180353][ T1007] ffff888144f8a768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_netdev_notifier_call+0x1b3/0x1430 [ 260.190993][ T1007] [ 260.190993][ T1007] but task is already holding lock: [ 260.198360][ T1007] ffff88805cfdcd30 (&dev_instance_lock_key#3){+.+.}-{4:4}, at: unregister_netdevice_many_notify+0x5a1/0x2510 [ 260.209954][ T1007] [ 260.209954][ T1007] which lock already depends on the new lock. [ 260.209954][ T1007] [ 260.220377][ T1007] [ 260.220377][ T1007] the existing dependency chain (in reverse order) is: [ 260.229456][ T1007] [ 260.229456][ T1007] -> #3 (&dev_instance_lock_key#3){+.+.}-{4:4}: [ 260.237908][ T1007] lock_acquire+0x116/0x2f0 [ 260.242941][ T1007] __mutex_lock+0x1a5/0x10c0 [ 260.248058][ T1007] xsk_bind+0x2fd/0xfb0 [ 260.252775][ T1007] __sys_bind+0x1de/0x290 [ 260.257641][ T1007] __x64_sys_bind+0x7a/0x90 [ 260.262676][ T1007] do_syscall_64+0xf3/0x230 [ 260.267721][ T1007] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 260.274167][ T1007] [ 260.274167][ T1007] -> #2 (&xs->mutex){+.+.}-{4:4}: [ 260.281386][ T1007] lock_acquire+0x116/0x2f0 [ 260.286409][ T1007] __mutex_lock+0x1a5/0x10c0 [ 260.291540][ T1007] xsk_diag_dump+0x5be/0x19d0 [ 260.296741][ T1007] netlink_dump+0x678/0xeb0 [ 260.301767][ T1007] __netlink_dump_start+0x5a2/0x790 [ 260.307507][ T1007] xsk_diag_handler_dump+0x1de/0x270 [ 260.313319][ T1007] sock_diag_rcv_msg+0x3dc/0x5f0 [ 260.318779][ T1007] netlink_rcv_skb+0x208/0x480 [ 260.324083][ T1007] netlink_unicast+0x7f8/0x9a0 [ 260.329362][ T1007] netlink_sendmsg+0x8c3/0xcd0 [ 260.334665][ T1007] __sock_sendmsg+0x221/0x270 [ 260.339862][ T1007] sock_write_iter+0x2d9/0x3f0 [ 260.345142][ T1007] do_iter_readv_writev+0x71f/0x9d0 [ 260.351054][ T1007] vfs_writev+0x38d/0xbc0 [ 260.355908][ T1007] do_writev+0x1b8/0x360 [ 260.360668][ T1007] do_syscall_64+0xf3/0x230 [ 260.365690][ T1007] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 260.372098][ T1007] [ 260.372098][ T1007] -> #1 (&net->xdp.lock){+.+.}-{4:4}: [ 260.379657][ T1007] lock_acquire+0x116/0x2f0 [ 260.384678][ T1007] __mutex_lock+0x1a5/0x10c0 [ 260.389786][ T1007] xsk_notifier+0x8b/0x230 [ 260.394737][ T1007] notifier_call_chain+0x1a5/0x3f0 [ 260.400377][ T1007] unregister_netdevice_many_notify+0x1572/0x2510 [ 260.407327][ T1007] unregister_netdevice_queue+0x383/0x400 [ 260.413569][ T1007] _cfg80211_unregister_wdev+0x163/0x590 [ 260.419731][ T1007] ieee80211_if_remove+0x25d/0x320 [ 260.425365][ T1007] ieee80211_del_iface+0x19/0x30 [ 260.430823][ T1007] cfg80211_remove_virtual_intf+0x23f/0x410 [ 260.437239][ T1007] genl_rcv_msg+0xb38/0xf00 [ 260.442263][ T1007] netlink_rcv_skb+0x208/0x480 [ 260.447571][ T1007] genl_rcv+0x28/0x40 [ 260.452091][ T1007] netlink_unicast+0x7f8/0x9a0 [ 260.457377][ T1007] netlink_sendmsg+0x8c3/0xcd0 [ 260.462757][ T1007] __sock_sendmsg+0x221/0x270 [ 260.467959][ T1007] ____sys_sendmsg+0x523/0x860 [ 260.473243][ T1007] __sys_sendmsg+0x271/0x360 [ 260.478355][ T1007] do_syscall_64+0xf3/0x230 [ 260.483380][ T1007] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 260.489791][ T1007] [ 260.489791][ T1007] -> #0 (&rdev->wiphy.mtx){+.+.}-{4:4}: [ 260.497536][ T1007] validate_chain+0xa69/0x24e0 [ 260.502825][ T1007] __lock_acquire+0xad5/0xd80 [ 260.508023][ T1007] lock_acquire+0x116/0x2f0 [ 260.513048][ T1007] __mutex_lock+0x1a5/0x10c0 [ 260.518164][ T1007] cfg80211_netdev_notifier_call+0x1b3/0x1430 [ 260.524763][ T1007] notifier_call_chain+0x1a5/0x3f0 [ 260.530394][ T1007] __dev_close_many+0x15d/0x760 [ 260.535855][ T1007] dev_close_many+0x250/0x4c0 [ 260.541057][ T1007] unregister_netdevice_many_notify+0x628/0x2510 [ 260.548172][ T1007] default_device_exit_batch+0x7ff/0x880 [ 260.554332][ T1007] cleanup_net+0x8af/0xd60 [ 260.559275][ T1007] process_scheduled_works+0xac3/0x18e0 [ 260.565340][ T1007] worker_thread+0x870/0xd50 [ 260.570714][ T1007] kthread+0x7b7/0x940 [ 260.575310][ T1007] ret_from_fork+0x4b/0x80 [ 260.580246][ T1007] ret_from_fork_asm+0x1a/0x30 [ 260.585537][ T1007] [ 260.585537][ T1007] other info that might help us debug this: [ 260.585537][ T1007] [ 260.595760][ T1007] Chain exists of: [ 260.595760][ T1007] &rdev->wiphy.mtx --> &xs->mutex --> &dev_instance_lock_key#3 [ 260.595760][ T1007] [ 260.609256][ T1007] Possible unsafe locking scenario: [ 260.609256][ T1007] [ 260.616701][ T1007] CPU0 CPU1 [ 260.622066][ T1007] ---- ---- [ 260.627427][ T1007] lock(&dev_instance_lock_key#3); [ 260.632642][ T1007] lock(&xs->mutex); [ 260.639160][ T1007] lock(&dev_instance_lock_key#3); [ 260.646893][ T1007] lock(&rdev->wiphy.mtx); [ 260.651403][ T1007] [ 260.651403][ T1007] *** DEADLOCK *** [ 260.651403][ T1007] [ 260.659547][ T1007] 5 locks held by kworker/u8:5/1007: [ 260.664862][ T1007] #0: ffff88801bef6148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x990/0x18e0 [ 260.675754][ T1007] #1: ffffc90003737c60 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9cb/0x18e0 [ 260.686290][ T1007] #2: ffffffff900efe90 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0x17c/0xd60 [ 260.695698][ T1007] #3: ffffffff900fc9c8 (rtnl_mutex){+.+.}-{4:4}, at: default_device_exit_batch+0xde/0x880 [ 260.705715][ T1007] #4: ffff88805cfdcd30 (&dev_instance_lock_key#3){+.+.}-{4:4}, at: unregister_netdevice_many_notify+0x5a1/0x2510 [ 260.717734][ T1007] [ 260.717734][ T1007] stack backtrace: [ 260.723622][ T1007] CPU: 0 UID: 0 PID: 1007 Comm: kworker/u8:5 Not tainted 6.14.0-syzkaller-13339-g29d261466fa6 #0 PREEMPT(full) [ 260.723647][ T1007] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 260.723662][ T1007] Workqueue: netns cleanup_net [ 260.723700][ T1007] Call Trace: [ 260.723708][ T1007] [ 260.723716][ T1007] dump_stack_lvl+0x241/0x360 [ 260.723742][ T1007] ? __pfx_dump_stack_lvl+0x10/0x10 [ 260.723764][ T1007] ? __pfx__printk+0x10/0x10 [ 260.723789][ T1007] ? print_lock+0x171/0x1a0 [ 260.723809][ T1007] print_circular_bug+0x2e1/0x300 [ 260.723832][ T1007] check_noncircular+0x142/0x160 [ 260.723855][ T1007] validate_chain+0xa69/0x24e0 [ 260.723879][ T1007] ? unwind_next_frame+0xb8/0x23b0 [ 260.723899][ T1007] ? unwind_next_frame+0x1aa4/0x23b0 [ 260.723923][ T1007] __lock_acquire+0xad5/0xd80 [ 260.723943][ T1007] lock_acquire+0x116/0x2f0 [ 260.723958][ T1007] ? cfg80211_netdev_notifier_call+0x1b3/0x1430 [ 260.723989][ T1007] __mutex_lock+0x1a5/0x10c0 [ 260.724009][ T1007] ? cfg80211_netdev_notifier_call+0x1b3/0x1430 [ 260.724036][ T1007] ? validate_chain+0x8a7/0x24e0 [ 260.724055][ T1007] ? put_dec_trunc8+0x1fb/0x340 [ 260.724072][ T1007] ? cfg80211_netdev_notifier_call+0x1b3/0x1430 [ 260.724097][ T1007] ? __pfx___mutex_lock+0x10/0x10 [ 260.724125][ T1007] cfg80211_netdev_notifier_call+0x1b3/0x1430 [ 260.724163][ T1007] ? __pfx_cfg80211_netdev_notifier_call+0x10/0x10 [ 260.724188][ T1007] ? __lock_acquire+0xad5/0xd80 [ 260.724204][ T1007] ? do_raw_spin_lock+0x151/0x370 [ 260.724234][ T1007] ? inetdev_event+0x4fb/0x1740 [ 260.724252][ T1007] ? igmp_netdev_event+0x7c/0x770 [ 260.724268][ T1007] notifier_call_chain+0x1a5/0x3f0 [ 260.724289][ T1007] __dev_close_many+0x15d/0x760 [ 260.724309][ T1007] ? __mutex_lock+0x380/0x10c0 [ 260.724326][ T1007] ? ret_from_fork+0x4b/0x80 [ 260.724343][ T1007] ? __pfx___dev_close_many+0x10/0x10 [ 260.724366][ T1007] dev_close_many+0x250/0x4c0 [ 260.724388][ T1007] ? __pfx_dev_close_many+0x10/0x10 [ 260.724407][ T1007] ? __lock_acquire+0xad5/0xd80 [ 260.724424][ T1007] unregister_netdevice_many_notify+0x628/0x2510 [ 260.724446][ T1007] ? lockdep_hardirqs_on+0x9d/0x150 [ 260.724463][ T1007] ? __local_bh_enable_ip+0x168/0x200 [ 260.724478][ T1007] ? batadv_tt_local_remove+0x119/0x230 [ 260.724494][ T1007] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 260.724508][ T1007] ? batadv_tt_local_remove+0x119/0x230 [ 260.724527][ T1007] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 260.724551][ T1007] ? unregister_netdevice_queue+0x2c4/0x400 [ 260.724571][ T1007] ? batadv_meshif_destroy_netlink+0x1e6/0x270 [ 260.724593][ T1007] default_device_exit_batch+0x7ff/0x880 [ 260.724619][ T1007] ? __pfx_default_device_exit_batch+0x10/0x10 [ 260.724642][ T1007] ? __pfx_rdma_dev_exit_net+0x10/0x10 [ 260.724662][ T1007] ? cfg802154_pernet_exit+0xc3/0xe0 [ 260.724676][ T1007] ? __pfx_default_device_exit_batch+0x10/0x10 [ 260.724699][ T1007] cleanup_net+0x8af/0xd60 [ 260.724723][ T1007] ? __pfx_cleanup_net+0x10/0x10 [ 260.724748][ T1007] ? process_scheduled_works+0x9cb/0x18e0 [ 260.724765][ T1007] process_scheduled_works+0xac3/0x18e0 [ 260.724794][ T1007] ? __pfx_process_scheduled_works+0x10/0x10 [ 260.724814][ T1007] ? assign_work+0x367/0x3d0 [ 260.724832][ T1007] worker_thread+0x870/0xd50 [ 260.724855][ T1007] ? __kthread_parkme+0x1a8/0x200 [ 260.724874][ T1007] ? __pfx_worker_thread+0x10/0x10 [ 260.724891][ T1007] kthread+0x7b7/0x940 [ 260.724912][ T1007] ? __pfx_worker_thread+0x10/0x10 [ 260.724929][ T1007] ? __pfx_kthread+0x10/0x10 [ 260.724948][ T1007] ? __pfx_kthread+0x10/0x10 [ 260.724968][ T1007] ? __pfx_kthread+0x10/0x10 [ 260.724987][ T1007] ? __pfx_kthread+0x10/0x10 [ 260.725007][ T1007] ? _raw_spin_unlock_irq+0x23/0x50 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 260.725020][ T1007] ? lockdep_hardirqs_on+0x9d/0x150 [ 260.725037][ T1007] ? __pfx_kthread+0x10/0x10 [ 260.725057][ T1007] ret_from_fork+0x4b/0x80 [ 260.725072][ T1007] ? __pfx_kthread+0x10/0x10 [ 260.725091][ T1007] ret_from_fork_asm+0x1a/0x30 [ 260.725111][ T1007] [ 261.110357][T12806] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2059'. [ 261.242046][ T1007] veth1_macvtap: left promiscuous mode [ 261.256343][ T1007] veth0_macvtap: left promiscuous mode [ 261.268574][ T1007] veth1_vlan: left promiscuous mode [ 261.273847][ T1007] veth0_vlan: left promiscuous mode [ 261.453458][ T1007] pimreg3 (unregistering): left allmulticast mode [ 261.600315][ T5152] Bluetooth: hci1: command tx timeout [ 261.832800][T12695] bridge0: port 1(bridge_slave_0) entered blocking state [ 261.840666][T12695] bridge0: port 1(bridge_slave_0) entered disabled state [ 261.848596][T12695] bridge_slave_0: entered allmulticast mode [ 261.855202][T12695] bridge_slave_0: entered promiscuous mode [ 261.865836][T12803] netlink: 'syz.0.2063': attribute type 29 has an invalid length.