last executing test programs: 2m19.590122221s ago: executing program 0 (id=19): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) r2 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r2, 0x10d, 0xdf, &(0x7f0000000000), &(0x7f0000000240)=0x4) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x44, r1, 0x1, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x185}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x9d}]}, 0x44}, 0x1, 0x0, 0x0, 0x45}, 0x0) 2m19.450058947s ago: executing program 0 (id=21): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), r2) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_GATEWAYS(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="01072fbd7000fcdbdfa50600000008000300", @ANYRES32=r4], 0x1c}, 0x1, 0x0, 0x0, 0x2000c810}, 0x4000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r2) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="3f9d00000000fedbdf000800000008000300", @ANYRES32=r5], 0x68}}, 0x10) 2m18.942045307s ago: executing program 0 (id=26): r0 = socket(0x2b, 0x80801, 0x1) r1 = socket$unix(0x1, 0x3, 0x0) recvmsg$unix(r1, &(0x7f0000000280)={&(0x7f0000000000)=@abs, 0x6e, &(0x7f0000000200)=[{&(0x7f0000000080)=""/75, 0x4b}, {&(0x7f0000000100)=""/23, 0x17}, {&(0x7f0000000140)=""/136, 0x88}], 0x3, &(0x7f0000000240)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}, 0x40002140) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000740)) socket(0x2b, 0x80801, 0x1) (async) socket$unix(0x1, 0x3, 0x0) (async) recvmsg$unix(r1, &(0x7f0000000280)={&(0x7f0000000000)=@abs, 0x6e, &(0x7f0000000200)=[{&(0x7f0000000080)=""/75, 0x4b}, {&(0x7f0000000100)=""/23, 0x17}, {&(0x7f0000000140)=""/136, 0x88}], 0x3, &(0x7f0000000240)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}, 0x40002140) (async) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000740)) (async) 2m18.767643085s ago: executing program 0 (id=31): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)="5c00000012006bab9e3fe3d86e17aa31070000007ea60864160af365da8fb21a38001d008fbd983247f07251ca60bc24eab556a71a251e6182949a3651f60a84c9f4d4938037e786a6d0bdd7fcf50e450998530000000080bcc7f874", 0x5c}], 0x1, 0x0, 0x0, 0x1f000008}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000002200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000040)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000020000000a00000008000300", @ANYRES32=r3, @ANYBLOB="0c04ebe656000200060000001ab73ab544ae24f1fee1547641d23022de12d705a5e10253aba6b273b72aafbbf40dab771212bfeb05a93ea8f61bfc3ebc7e3c7577998bd690ab1c37bf8306aba55f84fde21a72cd5ce4ba2d3119f23aadf551b3f8a2da532bf1ed07666c9fe9146c3c7a86f4a6f0c36c"], 0x28}}, 0x0) 2m18.489899576s ago: executing program 0 (id=33): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) (async) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) r2 = socket$inet6(0xa, 0x1, 0x8000000003c) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x8001000000000000, 0x40, 0x0, 0x0) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB="d8000000", @ANYRES16=0x0, @ANYBLOB="04002dbd7000f2dbdf254f0000000c00839ced540000680000004c007a8008000400000000181c000200134ecc4d908540c3c8630b918a29360800040004005111335ced5fd94e0800040009000000080004000300000048007a801400010003d869f47d8c428eaa74b31794b4b314b5000400000000000c0003004180081ee4f88f1a080004000c0000000c0003007858754e3c504054080004000800000004007a8020007a800800040005000000140002002929590c"], 0xd8}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) (async) sendmsg(r2, &(0x7f00000000c0)={0x0, 0x9521, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0x5dc}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) (async) r4 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) (async) ioctl$sock_inet6_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000600)) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000000)=0x20) (async) ioctl$EXT4_IOC_MOVE_EXT(r5, 0x40305829, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x4}) ioctl$sock_bt_hidp_HIDPCONNADD(r4, 0x400448c8, &(0x7f0000000340)={r0, r0, 0x8, 0x0, 0x0, 0x82, 0x4a, 0x15c2, 0x5886, 0x98, 0x0, 0x8, 'syz1\x00'}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) (async) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r8 = socket(0x1, 0x5, 0x5) ioctl$SIOCX25SCALLUSERDATA(r8, 0x89e5, &(0x7f0000000100)={0x55, "19b72b146be5d069c8b81a226973dd31d1deecf9d43ef22a5d6108a497bcef34dbdbb1fb6012db77a007b4aad9a9413954d96c451d7e0e913c6e12fb2b256d46082ac82b8f807ff1fac7b968d87fe2d09dcfe8cff31cf6506c92aa22866392315e69bffc74ae8b92b6741fd453a29ad3b0a3c912a62672550764c081ad6e20fd"}) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r7, 0x0) (async) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r4, 0x800448d3, &(0x7f0000000400)={@any, 0x96, 0x4, 0x1, 0x0, 0x6, "1fa031ef9d64630cfe3abd82a03a72f2736d923891c184d025bbffd4af2827b844c6436d170c6bf47e4226ef858fd1bdc16baa52a8010d7313b97f207b4db792dcc56e5219662d802b6e1af834a01bdbc7f7d7b424d30140908f9ed3a93a59eba3f959341f35d090229242093dad740200a05aa4ad594b64c26d126d16a306a5"}) (async) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1200000004000000040000001200000000000000", @ANYRES32, @ANYRESHEX, @ANYRES32=0x0, @ANYRESOCT=r3, @ANYRESHEX=r2], 0x50) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={r9, &(0x7f0000000200), &(0x7f0000000800)=@buf="d94d4472cad8e782f41c2a65632b7d93e5a5ba9dc0eee3eec141f2ea72ec925a32a287a30b4f1e55932c3a0a847258d82e8ea6410eccca55fb32250e3b87a689c82209e88965d3b9c122f29930b8564c86edeb43f35211404e1f0b53b4d1226f135bc630fe24971f90003bca982b1579946e7af0646d67199c5288cff937ba9b7efcb804dbb9504b0d5ca7002401a1414db04996be03bc3d387f49dbec64163963763833c1751c6cbcc5dc042f247057b6a210c28bd0da61f019f2fe3c43e62629c0107d19218a56ffadaea2d6c99f0cf86e"}, 0x20) (async) recvfrom$inet6(r6, &(0x7f0000004000)=""/4107, 0x100b, 0x10000, 0x0, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) socket$inet_mptcp(0x2, 0x1, 0x106) socket$inet6_tcp(0xa, 0x1, 0x0) 2m18.210474938s ago: executing program 0 (id=37): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0x40047438, 0x58e48e4c6b288518) r1 = socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz0\x00', 0x200002, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000340)={0x1d, r3, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r6, &(0x7f0000000040)="b3", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @private1}, 0x1c) shutdown(r6, 0x1) sendto$inet6(r6, &(0x7f00000009c0)="d6", 0x1, 0x4, &(0x7f0000000240)={0xa, 0x4e24, 0x800, @dev={0xfe, 0x80, '\x00', 0x10}, 0x4}, 0x1c) r7 = socket$kcm(0x21, 0x2, 0x2) sendmsg$inet(r7, &(0x7f0000002780)={0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)=[@ip_retopts={{0x10, 0x110, 0xc}}], 0x10}, 0x0) sendmsg$inet(r7, &(0x7f0000000300)={&(0x7f0000000100)={0x2, 0x4e22, @multicast2}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000140)="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", 0xfc}], 0x1, &(0x7f0000000380)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @remote, @loopback}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x9}}, @ip_retopts={{0x1c, 0x0, 0x7, {[@end, @rr={0x7, 0x3, 0x2b}, @ra={0x94, 0x4}, @noop, @noop]}}}], 0x58}, 0x4980) r8 = socket$inet6(0xa, 0x80803, 0x88) setsockopt$inet6_tcp_int(r8, 0x6, 0xc, &(0x7f0000000400)=0xf08f, 0x4) setsockopt$inet6_IPV6_XFRM_POLICY(r8, 0x29, 0x23, &(0x7f00000004c0)={{{@in6=@private0, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0xa, 0xa0}, {}, {0x0, 0x0, 0x0, 0x3}, 0x0, 0x1, 0x1}, {{@in=@empty}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r5, {0xfffd, 0x10}, {0x1, 0x1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x840) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$TUNSETOFFLOAD(r0, 0x40047438, 0x58e48e4c6b288518) (async) socket$nl_route(0x10, 0x3, 0x0) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz0\x00', 0x200002, 0x0) (async) socket$can_j1939(0x1d, 0x2, 0x7) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000000c0)={'vcan0\x00'}) (async) bind$can_j1939(r2, &(0x7f0000000340)={0x1d, r3, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) (async) socket$can_j1939(0x1d, 0x2, 0x7) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) (async) socket$inet6_sctp(0xa, 0x1, 0x84) (async) sendto$inet6(r6, &(0x7f0000000040)="b3", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @private1}, 0x1c) (async) shutdown(r6, 0x1) (async) sendto$inet6(r6, &(0x7f00000009c0)="d6", 0x1, 0x4, &(0x7f0000000240)={0xa, 0x4e24, 0x800, @dev={0xfe, 0x80, '\x00', 0x10}, 0x4}, 0x1c) (async) socket$kcm(0x21, 0x2, 0x2) (async) sendmsg$inet(r7, &(0x7f0000002780)={0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)=[@ip_retopts={{0x10, 0x110, 0xc}}], 0x10}, 0x0) (async) sendmsg$inet(r7, &(0x7f0000000300)={&(0x7f0000000100)={0x2, 0x4e22, @multicast2}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000140)="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", 0xfc}], 0x1, &(0x7f0000000380)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @remote, @loopback}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x9}}, @ip_retopts={{0x1c, 0x0, 0x7, {[@end, @rr={0x7, 0x3, 0x2b}, @ra={0x94, 0x4}, @noop, @noop]}}}], 0x58}, 0x4980) (async) socket$inet6(0xa, 0x80803, 0x88) (async) setsockopt$inet6_tcp_int(r8, 0x6, 0xc, &(0x7f0000000400)=0xf08f, 0x4) (async) setsockopt$inet6_IPV6_XFRM_POLICY(r8, 0x29, 0x23, &(0x7f00000004c0)={{{@in6=@private0, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0xa, 0xa0}, {}, {0x0, 0x0, 0x0, 0x3}, 0x0, 0x1, 0x1}, {{@in=@empty}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) (async) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r5, {0xfffd, 0x10}, {0x1, 0x1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x840) (async) 2m3.125966052s ago: executing program 32 (id=37): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0x40047438, 0x58e48e4c6b288518) r1 = socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz0\x00', 0x200002, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000340)={0x1d, r3, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r6, &(0x7f0000000040)="b3", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @private1}, 0x1c) shutdown(r6, 0x1) sendto$inet6(r6, &(0x7f00000009c0)="d6", 0x1, 0x4, &(0x7f0000000240)={0xa, 0x4e24, 0x800, @dev={0xfe, 0x80, '\x00', 0x10}, 0x4}, 0x1c) r7 = socket$kcm(0x21, 0x2, 0x2) sendmsg$inet(r7, &(0x7f0000002780)={0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)=[@ip_retopts={{0x10, 0x110, 0xc}}], 0x10}, 0x0) sendmsg$inet(r7, &(0x7f0000000300)={&(0x7f0000000100)={0x2, 0x4e22, @multicast2}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000140)="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", 0xfc}], 0x1, &(0x7f0000000380)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @remote, @loopback}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x9}}, @ip_retopts={{0x1c, 0x0, 0x7, {[@end, @rr={0x7, 0x3, 0x2b}, @ra={0x94, 0x4}, @noop, @noop]}}}], 0x58}, 0x4980) r8 = socket$inet6(0xa, 0x80803, 0x88) setsockopt$inet6_tcp_int(r8, 0x6, 0xc, &(0x7f0000000400)=0xf08f, 0x4) setsockopt$inet6_IPV6_XFRM_POLICY(r8, 0x29, 0x23, &(0x7f00000004c0)={{{@in6=@private0, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0xa, 0xa0}, {}, {0x0, 0x0, 0x0, 0x3}, 0x0, 0x1, 0x1}, {{@in=@empty}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r5, {0xfffd, 0x10}, {0x1, 0x1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x840) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$TUNSETOFFLOAD(r0, 0x40047438, 0x58e48e4c6b288518) (async) socket$nl_route(0x10, 0x3, 0x0) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz0\x00', 0x200002, 0x0) (async) socket$can_j1939(0x1d, 0x2, 0x7) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000000c0)={'vcan0\x00'}) (async) bind$can_j1939(r2, &(0x7f0000000340)={0x1d, r3, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) (async) socket$can_j1939(0x1d, 0x2, 0x7) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) (async) socket$inet6_sctp(0xa, 0x1, 0x84) (async) sendto$inet6(r6, &(0x7f0000000040)="b3", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @private1}, 0x1c) (async) shutdown(r6, 0x1) (async) sendto$inet6(r6, &(0x7f00000009c0)="d6", 0x1, 0x4, &(0x7f0000000240)={0xa, 0x4e24, 0x800, @dev={0xfe, 0x80, '\x00', 0x10}, 0x4}, 0x1c) (async) socket$kcm(0x21, 0x2, 0x2) (async) sendmsg$inet(r7, &(0x7f0000002780)={0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)=[@ip_retopts={{0x10, 0x110, 0xc}}], 0x10}, 0x0) (async) sendmsg$inet(r7, &(0x7f0000000300)={&(0x7f0000000100)={0x2, 0x4e22, @multicast2}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000140)="c6cc5072ba93f3e1d37eff09fb7164fb394d1bb2bddc838cf6272f88623980a7faec4aa0725af3937ff6ece0bea838c978a1357a015404eb1c1c0f26e74e73c90cc73096b448c9f7a6965fa053895c63c63a1438ac1ec0950730b2d25827f94fd85ca93e12e2aa2f1ccb1de8de4884268ec3d88d31bb2e672f6db56e6b11532ee6539d32d3a0ada4a76a3cfc2a54e0c2ec99150d12e7e19e250364e11ba8937895087f4223f88de9efe3e6239ca5b84c298a511ca3202bb61010c7352afd89c20efe3967884a5f9f1ab6344f69fd887949c3bc0b07c0f7082e3df08788c768f82b4626b587ae5d4c81f10fce98b4f41071a1c7ce4d34c2240da8a755", 0xfc}], 0x1, &(0x7f0000000380)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @remote, @loopback}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x9}}, @ip_retopts={{0x1c, 0x0, 0x7, {[@end, @rr={0x7, 0x3, 0x2b}, @ra={0x94, 0x4}, @noop, @noop]}}}], 0x58}, 0x4980) (async) socket$inet6(0xa, 0x80803, 0x88) (async) setsockopt$inet6_tcp_int(r8, 0x6, 0xc, &(0x7f0000000400)=0xf08f, 0x4) (async) setsockopt$inet6_IPV6_XFRM_POLICY(r8, 0x29, 0x23, &(0x7f00000004c0)={{{@in6=@private0, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0xa, 0xa0}, {}, {0x0, 0x0, 0x0, 0x3}, 0x0, 0x1, 0x1}, {{@in=@empty}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) (async) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r5, {0xfffd, 0x10}, {0x1, 0x1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x840) (async) 14.195033371s ago: executing program 2 (id=1582): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="240000001a00010000000000000000001c000000000000000000000408000100ff0001"], 0x24}}, 0x0) r1 = socket(0x1d, 0x6, 0x80000000) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f00000000c0)=0xffffffffffffffff, 0x4) r2 = socket$inet6(0xa, 0x2, 0x3a) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@bloom_filter={0x1e, 0x0, 0xca, 0x3, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x1d, 0xf, &(0x7f0000000000)=@ringbuf={{0x18, 0x2}, {{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0x2}, {}, {0x85, 0x0, 0x0, 0x31}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x6c}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) setsockopt$inet6_IPV6_PKTINFO(r2, 0x29, 0x32, &(0x7f0000000080)={@loopback, r4}, 0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000370000009501010000000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r4, 0xc, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 13.973109647s ago: executing program 2 (id=1586): r0 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000680)) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000009, 0x13, r1, 0xc252d000) r2 = socket$kcm(0x29, 0x2, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r2, 0x119, 0x1, &(0x7f0000000040)=0x7, 0x4) syz_emit_ethernet(0x4e, &(0x7f0000000b80)={@link_local, @empty, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "2c96ed", 0x18, 0x0, 0x0, @dev, @local, {[@hopopts={0x0, 0x2, '\x00', [@generic={0x7, 0x8, "846ddaa35696f9a4"}, @pad1, @generic={0x0, 0x1, '('}]}]}}}}}, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000700)={@broadcast, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x67, 0x0, @rand_addr, @broadcast}, @time_exceeded={0x21, 0x0, 0x0, 0x12, 0x0, 0x2802, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @rand_addr=0xe0000000}}}}}}, 0x0) socket$netlink(0x10, 0x3, 0x6) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@mpls_getroute={0xa0, 0x1a, 0x1, 0x0, 0x0, {}, [@RTA_NEWDST={0x84, 0x13, [{0x8, 0x0, 0x1}, {0x48}, {0x999f}, {}, {0xa67}, {0x9}, {0xa7}, {0x831}, {0x2}, {0x6, 0x0, 0x1}, {0x9, 0x0, 0x1}, {0x7, 0x0, 0x1}, {0x1, 0x0, 0x1}, {0x2}, {0xc}, {0x4, 0x0, 0x1}, {0xffb6b, 0x0, 0x1}, {0x5}, {0x101}, {}, {0x7}, {0x208}, {0x3, 0x0, 0x1}, {0x8}, {0x7}, {0xb, 0x0, 0x1}, {0x2}, {0x7f, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x8f, 0x0, 0x1}, {0xd4}, {0x6, 0x0, 0x1}]}]}, 0xa0}}, 0x4040) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r3, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000800000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="c29d0000000000000069a600000000000000000000000000000000bc"], 0x50) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0d0000000400000004000000", @ANYRES32=r5, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xf, &(0x7f0000000e80)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffd}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) bind$inet(r0, &(0x7f0000000640)={0x2, 0x4e22, @empty}, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x3c, 0x4, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8}, @NFTA_IMMEDIATE_DATA={0x18, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xd8}}, 0x40) r10 = syz_genetlink_get_family_id$devlink(&(0x7f00000021c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r8, &(0x7f00000022c0)={0x0, 0x0, &(0x7f0000002280)={&(0x7f0000002200)={0x3c, r10, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3f}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(r4, &(0x7f0000000600)={&(0x7f0000000400), 0xc, &(0x7f00000005c0)={&(0x7f0000000740)={0x138, r10, 0x1, 0x70bd2d, 0x35dfdbfd, {}, [{@pci={{0x8}, {0x11}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}]}, 0x138}, 0x1, 0x0, 0x0, 0x814}, 0x4008091) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x1, 0x7, 0x2261, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', r7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r11 = socket$phonet(0x23, 0x2, 0x1) ioctl$SIOCPNDELRESOURCE(r11, 0x89ee, &(0x7f0000000300)) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@bloom_filter={0x1e, 0xde8, 0x401, 0x4, 0x11001, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x1, 0x5, @void, @value, @value}, 0x50) 13.5964401s ago: executing program 2 (id=1591): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="4800000010004b0400000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b0001006272696467650000180002800a0014000180c2000002000006000900feffffff"], 0x48}}, 0x0) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000140)=ANY=[@ANYRES32=r0, @ANYRES32=r2, @ANYBLOB="02"], 0x10) (async, rerun: 64) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x3, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000630121000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async, rerun: 64) r3 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r3, 0x107, 0x12, 0x0, &(0x7f0000000180)) (async) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_subtree(r0, &(0x7f0000000180), 0x2, 0x0) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@cgroup=r4, 0x2, 0x0, 0x0, &(0x7f0000001440)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40) 13.085906819s ago: executing program 2 (id=1596): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000003, 0x44010, r0, 0x1c614000) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(0xffffffffffffffff, 0x0, 0x486, &(0x7f0000000280), &(0x7f00000002c0)=0xc) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev}, 0x2, 0x0, 0x3}}, 0x2e) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="012c2cbd70100800ff02ec00000008000a00040000000800e04853cf80a0a7eb1cdb10b6ba0c07e28770d158a52093f8f6ffff01"], 0x34}, 0x1, 0x0, 0x0, 0x24000881}, 0x200000b4) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x89ff, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) r7 = socket$packet(0x11, 0x2, 0x300) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r4) sendmsg$NL80211_CMD_GET_MPP(r4, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x20, r8, 0x400, 0x70bd26, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x20}, 0x1, 0x0, 0x0, 0x4040020}, 0x20000000) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r6, 0x107, 0x1, &(0x7f0000000240)={r9, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}}, 0x10) setsockopt$packet_tx_ring(r7, 0x107, 0xd, &(0x7f0000000200)=@req3={0x10000, 0x100000001, 0x10003, 0x1, 0x0, 0x0, 0xfffffffc}, 0x1c) ioctl$FS_IOC_GETFSUUID(r5, 0x80111500, &(0x7f00000000c0)) 12.623501585s ago: executing program 2 (id=1601): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x2, 0x4) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r1, &(0x7f00000028c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="28000000140001ec4a2cec481e43a50001"], 0x28}}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000080)={{{@in=@remote, @in=@empty}}, {{@in=@private}, 0x0, @in6=@private0}}, &(0x7f0000000180)=0xe8) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x6a4, @loopback, 0x80200008}, 0x1c) listen(r0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x2, 0x4) (async) socket$nl_sock_diag(0x10, 0x3, 0x4) (async) sendmsg$SOCK_DIAG_BY_FAMILY(r1, &(0x7f00000028c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="28000000140001ec4a2cec481e43a50001"], 0x28}}, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000080)={{{@in=@remote, @in=@empty}}, {{@in=@private}, 0x0, @in6=@private0}}, &(0x7f0000000180)=0xe8) (async) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x6a4, @loopback, 0x80200008}, 0x1c) (async) listen(r0, 0x0) (async) 5.137269045s ago: executing program 3 (id=1697): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$NFNL_MSG_COMPAT_GET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, 0x0, 0xb, 0x401, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFTA_COMPAT_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_COMPAT_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_COMPAT_TYPE={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x400c1) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000340), 0x4) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x400000008000f28, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'rose0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xf, "0000000000000000000100000e000058"}}}]}, 0x48}}, 0x0) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x114, 0xe) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="00010000031401"], 0x100}, 0x1, 0x0, 0x0, 0x4040024}, 0x0) (async) sendmsg$NFNL_MSG_COMPAT_GET(r1, &(0x7f00000001c0)={&(0x7f0000000100), 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x0, 0xb, 0x401, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_COMPAT_TYPE={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8040}, 0x4005) 4.911945449s ago: executing program 3 (id=1699): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="b7020000000d0000bfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000006f6400000000000045040400010000001704000001000a00b7040000ff0100006a0a00fe0000000085000000bd000000b70000000000000095000000000000009e17f199a68b06d83298a8cdc21ce784909b849d5550ad857d0454d8877a6db61d69f2ffcaa10350e11cb97c8adf1bc9a0c4eeceb9971e43405d621ffbc9ce000000d8ca56b50d0c010d631f6dde53a9a53608c10556e5734eb84049761451ce540c772e2d9f8004e26f7fcc059c062234d5595f6fbaa187b81d1106000000000fd60000fd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d7e43c5cbd80450f859ce8122a79c3e40000b59b0fc46d6cec3c0802882add4e3179bd4a44f231b6d753a7be428ba953df4aece69311687f4122073a236c3a32efa04137d4524847d2638da3261c8162bb7c7824be6195a66d2e17e122040e1100000000928612a29fc691e4f1f7bd053abb885f39381f1759410b1059f05684261f332d606834669b49ec99320ca7712d7e79bd5bf5ed818ecc7640917f6a559a47db608fcf9f6c131b84e41c354c66838f72b9e12d36e996f316f0812ca83efb30c7f6c6d57c4a64590401eec22523dd712c680013e87f649a1ede7142ca9d5d8a8c9f9b440fe4331ad5532c74d9a31a5d737537f7a2caa30581253d14dd3e92af7dc836686365ae01bdec561c0402b67801267a8df97d2f85426a5963d4fa3e26cc05972c162f223f000000d999e80de00fcbcc02d0aed7bb8f7ba337d59c14f39dcd4aad4139ef6425a9367f1bd1467fc6b95a4df7669839771ce9d5788029901e5a79d8b9990ace8f74087f25ad50c46088000000008000"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000140)="a3", 0x2}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x19, 0x4, 0x8, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x1d, 0x4, &(0x7f00000000c0)=@raw=[@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}], &(0x7f0000000100)='GPL\x00', 0x100, 0x6a, &(0x7f0000000200)=""/106, 0x41000, 0x20, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x6, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000280)=[r1, r1, r1], &(0x7f00000002c0)=[{0x0, 0x1, 0xb, 0xa}], 0x10, 0x2, @void, @value}, 0x94) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000400)={0x0, 0x0}, 0x8) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000003c0)={@fallback=r1, r2, 0x19, 0x20, 0x0, @void, @void, @void, @value=r3}, 0x20) socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="0212f9020200000025ad7000fddbdf25"], 0x10}}, 0x8) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000020000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000fbffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000480)=r5, 0x4) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000440)={r5, r1}, 0xc) 4.749846508s ago: executing program 3 (id=1700): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) r1 = socket$inet6(0xa, 0x3, 0x2c) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x538, 0x3a0, 0x150, 0x150, 0x0, 0xf8010000, 0x468, 0x238, 0x238, 0x468, 0x238, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, [], [], 'team_slave_0\x00', 'hsr0\x00', {}, {}, 0x84}, 0x0, 0x338, 0x3a0, 0x0, {}, [@common=@inet=@sctp={{0x148}, {[], [], [], 0x2, [], 0x0, 0x4}}, @common=@inet=@sctp={{0x148}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}, {{@ipv6={@empty, @mcast1, [], [], 'batadv_slave_0\x00', 'veth1\x00'}, 0x0, 0xa8, 0xc8}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x598) syz_emit_ethernet(0x4a, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd604dd31800140600fc010000000000000000000000000002fe8000000000000000000000000000aa00004001", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='P'], 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="800000001000010400000000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="1220010000010000580012800b000100697036746e6c00004800028014001400ff02000000000000000000000000000108000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="060011224e2000000400130004000000060012004e23000008000100", @ANYRES32, @ANYBLOB="080003"], 0x80}}, 0x0) 4.374036115s ago: executing program 3 (id=1705): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="180000000000000000000000000000006112000000000000950000000000000051fa7824c74186dc02ec0696c37b64e3b24da3180100000005165c0f63cdc2e82818254950ee03568b8809a1ff4c7c4750eabfafcb9531b31e6a86827d1010c5a909ab98e00e19644a88e95ba26d1c9eecddb2d11c541418ceeb29b9b6829c6e433822bdb3cc85244aab60c1aae1314d7381fcfeb970bea672cf1e926f6a51479343144648a07a975bd89dc398712376610f6254f12495b4658319684387f6f3543205d4bc4ce05b8b961103673dff7f158052e62b20f05fd24108d8363d44fcd0f8f3647899762a17282a1914452d11f557c28f396eebdc858558db0276d14f9035f2b5f703e5be7e4acf8b78c2834ae5805fffee38a9a0033d520bcf6b08ede50899d4b9bdf85c71c5de2503dab358f42a2624c7daa9ed44039aab46419496362e54cfad05a0004ac71a003d7b85d07191bed4e5a890826300214146f7ed569985439baa355c2766dd056f5d79e454f3d873095e7a237bc06d035a8d601f21746d886419f38b34a495040000000071c2f0cce8c93cc17e9afa314fcb2ba15d646c66b0f65021829f87d988b4e2d71753b1549fa734f0b2e56dbd21ed2e09d0cddad721971637f384eed3034597c93e1c52f42cad0ed09c395dc6e9703660fefa1c80f467367c006f25caf0cbcefd13d68839893e39c588eb032905f91cafa4996dbf0c9be9654db05fb918086cc8228d02a3092c0830b8f587a5624515298b2d4eb2bde6f9a2eb83d53f717f13fa7552d92c51dbd32ea50c490ecd085d2811a7555c538cffffff7f00000000dd872244bfa64779e0f43a9c277e2910b7ccdc3d6726d34ad2101033a623ca2a49ad344884289130bc71cee2b7de62bf48129ae1af052a2d46a61625735a9eea7f793946b3229e861d8ea49806b3f7d4295f6b000000000000f337b1ceb2d8a65dcdcd895d7ba37098d2593fdaaef445af5bee02019c00000099b13ecda2a5b37de0519e974cba92ebaf0f701611a9b027ce04340bda4594cc9049c3f101629ab028145e004209ebe71a6fe84af50804000000000000004a27213354964e250a98fe357676f94b6947383e320fbb1118f586d5b9b1b977e1e1a4490ff67703a9b5900f8a6f8a805879dd91ec5ff435b219c53680c0ae04dcc4ef69b98fcb0d6b6a03a8b71a66b4e2876dc4b610444bf10000000000b046b6ae5d68156bcbd6d8793ade9a22ac8fc7857e5bbc14adc4e12b08f350c6789283b9990c72e64372a1f79769a8bdc632fc1a0b3417855d8b7d25ca4d404c23631ad3d2f55dcd385371c86170a4bca58c2b2b4eabc365f45bd10bb45b0c5bc354456a52be18d9b44014d20a3c51c8f013dade83562e73278662829e4f5a9ac00fd91178468c737f0872d97d38d11a176be5a0d7294c51eb161eddcfefa8837c7430721851ec2a107af0df6d43e732bbc01e76c66895eb85d36798d61622773591ee21ad9f6a1b73fa9cf3ffeb8a00b63af800a81d0fb8aa29df8b8ad6fbafefb5802a23cbdeeabceda5bfc5ff2fa5c1d61d04a1324794c6ed000696d9f04010c35474e690545c3d9bd836d4cef2585ba616e01c3d000000000000000000470ebc6f3453ecbf3047e4547d7632d3ad21798e730cb5d1da059b5bdb8107815dff995c0788906790406dfb4f8ee9f24ff94233e2e6e581e6e5de33a5f254c9a8b612547473c3001df3928dac9203b744619082421a8da7c00000000000000000000000000000018a73ef40cca690fb7595c6962984f8276677be6f66cbdbccf1896433808c9c84d74ac4a7c186a04a2250972f7acb156b21f9826b6acb7db32c4e3b3ec8b59fd972975edb1da872d81a35e4fda2f5cbde6b40bea20418c6e9dad30b791eea58f53e80fee4dd7fe08373ea2784fcd3a65261de71eb866458d2c22a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r1, r2, 0x2, 0x2, 0x0, @void, @value}, 0x10) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)={@cgroup=r3, 0xffffffffffffffff, 0x2, 0x0, 0x4000, @void, @value}, 0x10) sendmsg$kcm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000180)=[{0x10, 0x118, 0x2}, {0x60, 0x6, 0xa, "67d3bcae99eb2732a58dd2d95730c928e29a306877f6b2bf86a56341e2b9ea08fafd00e2d89d6c54d561ebe7d34e8d49e320a3d126eb423e387f9d1d78701f55d018a115cb008eab82ee"}, {0xd8, 0x0, 0x0, "e4094d309035e90f1995a5db7ca29336e3015b313bea49f938f0370114c0cd35de13a5cdd94afdc720c2cad181056265e94f6d50789cb906135e8554ad366bc341d691b408a8b222f292242655add4d0577b8c42a572807b786f3bb946d407ca49ae7017b1d00a4e8faa7ffe963fa5486d2beea789d44a6f343874859bde182744257497d5618aa3fabf968fe4728a4bb9d8e9ee99b9441c9d7e93af085d2001a79c98a33c38075ba005f9082951e9e57a89df74789b3549f2b9c2f36e825dcbd7679296a2"}, {0x78, 0x10a, 0x8, "ab3e8cbaee6214c50985ba7a9d507c92f7b4c7f2a95d2c2146eb12636bcaae5e2fa3ed1da4d146a6e769b328d3385842ab95c5ec0e260a014706c6f2ba7325e8839d0fe0299f3cf7ff6c5adbf078a8e5999c4a07c1e9c0b3ac37720b6774733d8feb89e3"}], 0x1c0}, 0x20008000) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000100)=@ieee802154={0x24, @long}, 0x80, &(0x7f0000000080)=[{&(0x7f00000006c0)="27050200590414000600002f1eafbcf706e10500000086ddffff1104ee1611d4b8bf4a82f618", 0x26}], 0x1}, 0x0) 4.17278886s ago: executing program 3 (id=1711): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x1a, &(0x7f0000000240)={0x1, 'veth0_to_team\x00'}, 0x18) (async) syz_emit_ethernet(0xbe, &(0x7f0000000480)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0xc8, 0x0, {0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @local, @dev, {[@cipso={0x86, 0x71, 0x0, [{0x0, 0xc, "e256b28c59881681fb52"}, {0x0, 0x9, "020007651442eb"}, {0x5, 0xe, "7434954373561de584b703c8"}, {0x0, 0x9, "e706d30bd224f8"}, {0x0, 0x7, "cfa11cab1a"}, {0x2, 0x10, "8475be675de6a70a05a0dc91e5c6"}, {0x0, 0xa, "6580a5e97612fe86"}, {0x0, 0x12, "73bc2300ad9d19a30000000000000000"}, {0x0, 0xc, "c8f46976e79e56c7a95e"}]}, @cipso={0x86, 0xc, 0x0, [{0x0, 0x6, "7f36c525"}]}]}}}}}}}, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000040)={r2, 0x7ff}, 0x8) 3.969845069s ago: executing program 3 (id=1713): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macsec0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_SCB={0x5, 0xb, 0x8e}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) accept(r3, 0x0, 0x0) ioctl$BTRFS_IOC_ADD_DEV(r0, 0x5000940a, &(0x7f00000007c0)={{r0}, "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"}) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000300)=@filter={'filter\x00', 0x42, 0x4, 0x348, 0xffffffff, 0xd8, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x2b0, 0x2b0, 0x2b0, 0xffffffff, 0x5, 0x0, {[{{@ip={@multicast2, @dev={0xac, 0x14, 0x14, 0x40}, 0x0, 0x0, 'netpci0\x00', 'nr0\x00'}, 0x74000002, 0x90, 0xd8, 0x1ba, {0x46010000, 0x2c000000000000}, [@common=@socket0={{0x20}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@ip={@empty, @loopback, 0xff000000, 0xffffffff, 'veth1\x00', 'wlan1\x00', {}, {0xff}, 0x4, 0x3, 0x8}, 0x287, 0xe0, 0x140, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x8, 0x96e3, 0x1, 0x1}}, @common=@unspec=@connlimit={{0x40}, {[0xffffff00, 0xffffffff, 0xffffff00, 0xff000000], 0x9, 0x0, {0x10000}}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @remote, 0x8, 0xb, [0x32, 0x20, 0x36, 0x16, 0x19, 0x14, 0x26, 0x26, 0xc, 0x30, 0xd, 0x36, 0x13, 0x11, 0x30, 0x31], 0x2, 0xfffffffe, 0x5c4}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3a8) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x2c, r7, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r8}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16e4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}]]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x20200, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r9, 0x6, 0x14, 0x0, &(0x7f0000000380)) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r10, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r10, 0xfff) syz_emit_ethernet(0x4e, &(0x7f0000000740)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "083ff2", 0x18, 0x6, 0x0, @remote, @local, {[], {{0xfffd, 0x4e23, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x4, 0x0, 0x9, {[@eol]}}}}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xc, 0x4, &(0x7f0000000140)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xb2}]}, &(0x7f0000000280)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) setsockopt$sock_int(r5, 0x1, 0x12, &(0x7f0000002040)=0xe5, 0x4) r11 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r11, 0x10e, 0xc, &(0x7f0000000040)={0x8604}, 0x10) sendmsg$nl_route(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@mpls_getroute={0x24, 0x1a, 0x9e8a232eead7ae69, 0x0, 0x0, {0x1c, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x4}, [@RTA_TTL_PROPAGATE={0x5, 0x1a, 0x9}]}, 0x24}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x17, 0x4, &(0x7f00000001c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffd}, [@call={0x85, 0x0, 0x0, 0xba}]}, &(0x7f0000000140)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 3.557922693s ago: executing program 2 (id=1601): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x2, 0x4) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r1, &(0x7f00000028c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="28000000140001ec4a2cec481e43a50001"], 0x28}}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000080)={{{@in=@remote, @in=@empty}}, {{@in=@private}, 0x0, @in6=@private0}}, &(0x7f0000000180)=0xe8) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x6a4, @loopback, 0x80200008}, 0x1c) listen(r0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x2, 0x4) (async) socket$nl_sock_diag(0x10, 0x3, 0x4) (async) sendmsg$SOCK_DIAG_BY_FAMILY(r1, &(0x7f00000028c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="28000000140001ec4a2cec481e43a50001"], 0x28}}, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000080)={{{@in=@remote, @in=@empty}}, {{@in=@private}, 0x0, @in6=@private0}}, &(0x7f0000000180)=0xe8) (async) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x6a4, @loopback, 0x80200008}, 0x1c) (async) listen(r0, 0x0) (async) 3.05336835s ago: executing program 5 (id=1719): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="e49d43085d52", 0x20) socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000100)={0x0, @local, @local}, &(0x7f00000000c0)=0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f0000000000), &(0x7f0000000080)=0xe) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f00000000c0)={0x2, &(0x7f0000000040)=[{0x30, 0x0, 0x0, 0x7fff}, {0x6}]}, 0x10) sendmsg$inet(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000001c0)="bde49a54", 0xe4bd}], 0x1}, 0x0) 2.781859386s ago: executing program 5 (id=1722): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001000)={&(0x7f0000000ec0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@enum={0x1}]}, {0x0, [0x5f, 0x2e, 0xe32b8cec5ab8c040]}}, 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c00000015000504e1ff4319918e00352d4e496b"], 0x2c}}, 0x60040050) 1.376016522s ago: executing program 5 (id=1727): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x13, r1, 0x0) ioctl$SIOCX25SFACILITIES(r0, 0x89e3, &(0x7f0000000000)={0x6c, 0x0, 0xa, 0x9, 0x6}) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r2, 0x0, 0xd1, &(0x7f0000000480)=0x8, 0x4) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r3, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x4c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_REVISION={0x5}]}, 0x4c}}, 0x0) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaa79ff030486dd601b8b97004d88"], 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x400, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x1000) 1.285335615s ago: executing program 4 (id=1728): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000200)=@newqdisc={0x88, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x3, [0xa, 0x9, 0xc, 0x8, 0x5, 0xb, 0x10, 0x5, 0xe, 0xf, 0xa, 0xf, 0x8, 0x7, 0x1, 0xf], 0x1, [0x5f1, 0x3, 0xdd64, 0x7, 0xfffa, 0x200, 0x5, 0xdb7, 0x9, 0x9d, 0xa, 0x5cb6, 0x4, 0x2, 0xd, 0xfbff], [0x0, 0x8, 0x4, 0x4, 0x6, 0x4, 0x2, 0x1, 0x4, 0xfffd, 0x2, 0x0, 0x5, 0x4d, 0x7, 0x3ff]}}}}]}, 0x88}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ES={0x5, 0xa, 0x17}]}}}]}, 0x3c}}, 0x0) (async) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f00000000c0)={0x1, [0x3]}, 0x6) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$inet(r1, &(0x7f0000000740)={&(0x7f0000000340)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xe}}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000640)="c17d1572dac6ce2792ed4de6d8d951b4a73670d8a6c96ff93f4af5818622badab42c561915749fb0ddc47120b84ef05ec21a0b2459f271e2407698c732696d7c0068d00a49edfda26dd7d7d04f9736b2d6a27a6ba27ce818e5b08220dd7aeb17ffeb148461a39103cd2534c8e6c9e913cbc396f0e9afe8ed710e000c0472d5fa441960b0d504da52a22d68a9db7cb2d617036963e7fe927f7c7429052c8b9e08892bbaccf2b84a8905ed630f80372e04bb15e8dfdf54bdf5a55769f850a7221c609942b634b72ce88a9c8cdae35a22ea040a723c2f34913a465215", 0xdb}, {&(0x7f00000004c0)="0db0b5c67d82db8c6899a4200f873d1a8ac30cd50521a89ba6dfd1ed32e99b85cba2eb6da467a614ba3224ab068ab36bb62f60ee9ca9e1c2c1335d9ca8bb902a7567dfe50b15e36730ffb8f21d49d6c99235e854881c410d2b50e4b2e5e045090bb88188d9c8600e98fb43873999ab54692c142cb6bf12fdba2654c5f2f3a7fd10286a", 0x83}, {&(0x7f0000000380)="c0d8a35e0f151ddff1e8de1f4326251f06692ea6a8c01c4b931aba2d43865150096207f38dead9fd5ba0b8a47aa8076f807484fc6530f49d390596dc14c148", 0x3f}], 0x3, &(0x7f0000000c00)=[@ip_ttl={{0x14, 0x0, 0x2, 0x2}}, @ip_ttl={{0x14, 0x0, 0x2, 0xc}}, @ip_ttl={{0x14, 0x0, 0x2, 0x2}}, @ip_ttl={{0x14, 0x0, 0x2, 0x2}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x1}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x101}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x3}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x2a}}}}], 0xe8}, 0x4000) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848370000005e120602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x20000800) r7 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r7, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0xfffffffe}, 0x1c) (async) sendto$inet6(r7, 0x0, 0x0, 0x4098884, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) (async) sendmmsg$inet6(r7, &(0x7f0000001440)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000080)="85", 0x1}, {&(0x7f0000000440)="a216c485b09810246e7a960a62884ad1af1871599eceeebd", 0x18}], 0x2}}, {{0x0, 0x0, &(0x7f0000001940)=[{&(0x7f0000005bc0)="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", 0x136}, {&(0x7f0000000800)="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", 0x1fe}, {&(0x7f00000005c0)="0ce32eab78ca3c4a7bc73e96c2990c9002babb5c34c1327440eabea6ae3692de3f41d3d9844da1b530df4dd239e13f15a6dda935ca94a167891f42edbfd16936c296e72222691c9fda05000000000000001ddad55470c0ac33967e5b3ec0e1b2a078bab634369f7773cad684cb3e9eed9cbbc67f0000", 0x76}, {&(0x7f0000000a00)="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", 0x1ea}], 0x4}}], 0x2, 0xc880) recvfrom(r7, &(0x7f0000001a80)=""/4096, 0x1000, 0x0, 0x0, 0x0) (async) sendto$inet6(r7, &(0x7f0000000040)='2', 0x1, 0x0, 0x0, 0x0) sendmsg$DEVLINK_CMD_RATE_SET(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)={0x70, 0x0, 0x1, 0x0, 0x0, {0x2c}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x58, 0x3}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x20}, @DEVLINK_ATTR_RATE_TX_MAX={0xc}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x70}, 0x1, 0x0, 0x0, 0x8011}, 0x8040) (async) r8 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r8, &(0x7f0000000300)={0x2, 0x4e22, @multicast1}, 0x10) (async) sendmsg$DEVLINK_CMD_RATE_NEW(r5, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x0, 0x8, 0x70bd27, 0x25dfdbfb, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48005}, 0x4080) 1.285000527s ago: executing program 1 (id=1729): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="340000001000390400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000040000140012800c0001006d6163767acc74617000040002807cdeeed47e1decdfa9c2373bcaace92267bf0b23ef086f5cd685c2255545b3d67c91ca5174c4f61a492215fcdb062fdb07d2622cbadffb0cad3beed3f6142318bd7bfd52fca91746089955bdcb3a985e847b46a2ee3451f7a0fb3f75cbad7d8e17c0b627d4a8831a49091983a3f5e01804b1a6a766f6d23a2721146b8636daea29c5664d27af03eaa7bbdaddf8a727e9c140104dc5e33b48e0dcf1240b748b3c13c7d724d3b0673d50c14bf4acdfcae3ab679be993ce07ae8602c61800"/229], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000240)={&(0x7f00000000c0)=@ipv6_newroute={0x64, 0x18, 0x20, 0x70bd27, 0x25dfdbff, {0xa, 0x14, 0x10, 0x7, 0xfc, 0x0, 0xc8, 0xa, 0x3200}, [@RTA_METRICS={0x46, 0x8, 0x0, 0x1, "8ea840f40ef63297fbc0de307f446eb445f399ebcb8f5ed3d4642d6cf0b0c4d220d8b49d19bb35de2a4b1b2097af97fd9d8c2887d4af9d9a8b677e2778dadb3cd969"}]}, 0x64}, 0x1, 0x0, 0x0, 0x844}, 0x4040014) 1.140416909s ago: executing program 5 (id=1730): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @lowpan={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x40}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x4, 0x2, 0x1, 0x58}], {0x95, 0x0, 0x700}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xc, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 1.046001448s ago: executing program 5 (id=1731): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000001b80)=@gcm_256={{0x303}, "e11fd25f228e7de8", "8452fe0e66fa615e00e1c0742c52d98f60149ba20f6258068c42e89f4175c12c", "8c11f4c2", "1bd80c52b34eb5b5"}, 0x38) r1 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r1, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e27, @loopback}, 0x10) getpeername$l2tp(r1, 0x0, &(0x7f0000000140)) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1400000010000107000000810000000003"], 0x14}}, 0x0) recvmmsg(r3, &(0x7f0000005680)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r3) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r3) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@bridge_getvlan={0x18, 0x72, 0x333, 0x6}, 0x18}}, 0x4) readv(r2, &(0x7f00000014c0)=[{&(0x7f0000000300)=""/4096, 0x1000}], 0x1) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x40, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x40}}, 0x20048000) 993.947546ms ago: executing program 4 (id=1732): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00005d3000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) mmap(&(0x7f000068d000/0x3000)=nil, 0x3000, 0x2000003, 0x12, 0xffffffffffffffff, 0x22ff1000) mmap(&(0x7f00004f1000/0x3000)=nil, 0x3000, 0x2000006, 0x12, 0xffffffffffffffff, 0x913e0000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000867000/0x2000)=nil, 0x2000, 0x0, 0x11, r2, 0x1000) mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x13, r1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000002, 0x13, r3, 0x0) splice(0xffffffffffffffff, &(0x7f0000000000)=0x7f, r0, &(0x7f0000000040)=0x8, 0xe, 0xb) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv4_newrule={0x24, 0x20, 0x1, 0x0, 0x0, {}, [@FRA_GENERIC_POLICY=@FRA_IP_PROTO={0x5, 0x19, 0x3c}]}, 0x24}}, 0x48850) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r5, 0x0) 889.011209ms ago: executing program 1 (id=1733): r0 = socket$kcm(0x11, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r2, @ANYBLOB="00000000100000001c001a80", @ANYRES16=r3, @ANYRES32=r3], 0x44}}, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000100)=@ieee802154={0x24, @long}, 0x80, &(0x7f0000000080)=[{&(0x7f00000006c0)="27050200590414000600002f1eafbcf706e10500000086ddffff1104ee1611d4b8bf4a82f618", 0x26}], 0x1}, 0x0) 858.47946ms ago: executing program 4 (id=1734): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xf}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) syz_emit_ethernet(0x7a, &(0x7f0000000440)={@random="87b5d5ceaa8f", @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x16, 0x2, 0x0, 0x0, 0x1000, {[@mptcp=@ack={0x1e, 0x16, 0x8, 0x4, "af0b5c06a8bf463496147203e4f537af286b"}, @md5sig={0x13, 0x12, "2313a3101166d6c856214c013c019043"}, @generic={0x13, 0x2}, @sack={0x5, 0xe, [0x5, 0x3, 0x20]}, @sack={0x5, 0xa, [0xfffe, 0x8]}]}}}}}}}, 0x0) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r1, 0x1000000, 0x482, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000140), 0x1003}, 0x6d) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xe, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x4f}]}, &(0x7f0000000040)='GPL\x00', 0x3397, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, 0x1e, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 801.440843ms ago: executing program 5 (id=1735): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r0}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r1}, 0x8) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) listen(r3, 0x0) ioctl$SIOCX25SFACILITIES(r3, 0x89e3, &(0x7f0000000440)={0x4, 0x0, 0xa, 0xb, 0x20000}) close(r2) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r4, 0x107, 0x11, 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x6, 0x300, 0xfc}, 0x1c) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ppoll(&(0x7f00000000c0)=[{r1}, {r5}, {r3, 0x50}, {r0, 0x2}, {r4, 0x1000}, {r0, 0xc}], 0x6, 0x0, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x13, 0x8, 0x8, 0x0, 0x8, 0x1, 0xfffffffd, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000c80)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r6}, {}, {0x7, 0x0, 0xb, 0x2}, {0x85, 0x0, 0x0, 0x51}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f00000003c0)={r7, 0x0, 0x0}, 0x10) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001e40)={r6, &(0x7f0000000300), 0x0}, 0x20) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) r8 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r8, 0x1, 0x41, &(0x7f0000000340)=0x61ba, 0x4) setsockopt$inet6_int(r8, 0x29, 0x31, &(0x7f0000000000)=0xb2, 0x4) sendmmsg$inet6(r8, &(0x7f00000002c0)=[{{&(0x7f0000000b00)={0xa, 0x4e23, 0x6, @mcast2}, 0x1c, 0x0}}], 0x1, 0x40000) recvmmsg(r8, &(0x7f0000000040)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/32, 0x20}}], 0x1, 0x2043, 0x0) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r9, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r9, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) close(r9) socket$nl_generic(0x10, 0x3, 0x10) 657.070147ms ago: executing program 4 (id=1736): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) listen(r0, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000180)=0x200000000a) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x84}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) accept4$rose(r0, 0x0, 0x0, 0x0) 453.238573ms ago: executing program 1 (id=1737): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) setsockopt$bt_BT_FLUSHABLE(r3, 0x112, 0x8, &(0x7f00000000c0), 0x4) sendmsg$nl_route(r0, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@ipv6_newnexthop={0x30, 0x68, 0x1, 0x0, 0xfffffffe, {}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x2}, @NHA_ENCAP={0x8, 0x8, 0x0, 0x1, @MPLS_IPTUNNEL_DST={0x4}}, @NHA_OIF={0x8, 0x5, r1}]}, 0x30}}, 0x90) 341.77977ms ago: executing program 4 (id=1738): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x4, 0x4, &(0x7f0000000280)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x8c}, [@call={0x85, 0x0, 0x0, 0x6b}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) 212.89915ms ago: executing program 1 (id=1739): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendto$inet6(r0, &(0x7f0000000000)="3459e4a7c73af99e5d0e101118971a9c2efdb93fffeedaf653c5f345242f109f2c4b6d026ebf2a771ba7ba2ebc2cd30dda456d8e53ec03fae21ad3e7e1f4880b4d066303258032391fe09fe802395d0e435c57bbc173ef0213f9ccce6230a85bd913e9729f83e7a6f1738af2e2162e", 0x6f, 0x2000000, &(0x7f0000000080)={0xa, 0x4e24, 0x7, @loopback, 0x3}, 0x1c) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000000c0)=[@in={0x2, 0x4e24, @multicast1}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000100)={0x3, [0x0, 0x0, 0x0]}, &(0x7f0000000140)=0x10) r2 = accept$inet6(r1, 0x0, &(0x7f0000000180)) ioctl$sock_inet6_SIOCDELRT(r2, 0x890c, &(0x7f00000001c0)={@private1={0xfc, 0x1, '\x00', 0x1}, @mcast2, @local, 0x7, 0x324, 0x8, 0x100, 0x7, 0x63c5735e5793a67f}) setsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f0000000240), 0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000280)) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)={0x1b, 0x0, 0x0, 0x3, 0x0, r3, 0x795, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1, 0x5, 0x0, @void, @value, @void, @value}, 0x50) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000340), 0x4) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000380)={0x1b, 0x0, 0x0, 0x2, 0x0, r4, 0x5, '\x00', 0x0, r5, 0x1, 0x1, 0x5, 0x0, @void, @value, @void, @value}, 0x50) r7 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000440)=@o_path={&(0x7f0000000400)='./file0\x00', 0x0, 0x10, r1}, 0x18) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000680)={0xe, 0x0}, 0x8) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x6, &(0x7f00000006c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @map_idx={0x18, 0x9, 0x5, 0x0, 0x10}]}, &(0x7f0000000700)='syzkaller\x00', 0xec2c1aee, 0x41, &(0x7f0000000740)=""/65, 0x41000, 0x40, '\x00', 0x0, 0x25, r6, 0x8, &(0x7f00000007c0)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000800)={0x4, 0xb, 0x9, 0x6}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000840)=[r1, r6], &(0x7f0000000880)=[{0x1, 0x4, 0x9, 0xa}, {0x1, 0x3, 0xf, 0x5}], 0x10, 0x5, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0xe, 0x13, &(0x7f0000000480)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1e, 0x0, 0x0, 0x0, 0xfffff9ba}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @map_idx={0x18, 0xb, 0x5, 0x0, 0x5}, @call={0x85, 0x0, 0x0, 0x58}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000540)='syzkaller\x00', 0x1000, 0x5d, &(0x7f0000000580)=""/93, 0x41000, 0x78, '\x00', 0x0, @sk_skb=0x4, r5, 0x8, &(0x7f0000000600)={0xa, 0x2}, 0x8, 0x10, &(0x7f0000000640)={0x3, 0xd, 0x0, 0xea}, 0x10, r8, r9, 0x0, &(0x7f0000000980)=[r6, r6, r4, 0xffffffffffffffff, 0x1, r6], 0x0, 0x10, 0x40, @void, @value}, 0x94) readv(r7, &(0x7f0000000f40)=[{&(0x7f0000000a80)=""/7, 0x7}, {&(0x7f0000000ac0)=""/49, 0x31}, {&(0x7f0000000b00)=""/20, 0x14}, {&(0x7f0000000b40)=""/146, 0x92}, {&(0x7f0000000c00)=""/83, 0x53}, {&(0x7f0000000c80)=""/224, 0xe0}, {&(0x7f0000000d80)=""/8, 0x8}, {&(0x7f0000000dc0)=""/247, 0xf7}, {&(0x7f0000000ec0)=""/124, 0x7c}], 0x9) r10 = socket$unix(0x1, 0x5, 0x0) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000001080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_MPP(r4, &(0x7f0000001180)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001140)={&(0x7f00000010c0)={0x4c, r11, 0x1, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r12}, @val={0xc, 0x99, {0x6, 0x5e}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x4001) splice(r9, &(0x7f00000011c0)=0xe, r3, &(0x7f0000001200)=0x7, 0x4, 0x1) r13 = syz_genetlink_get_family_id$fou(&(0x7f0000001280), r1) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000001340)={&(0x7f0000001240), 0xc, &(0x7f0000001300)={&(0x7f00000012c0)={0x1c, r13, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e24}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000040}, 0x11) r14 = syz_genetlink_get_family_id$ipvs(&(0x7f00000013c0), r10) sendmsg$IPVS_CMD_SET_DEST(0xffffffffffffffff, &(0x7f0000001600)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000015c0)={&(0x7f0000001400)={0x198, r14, 0x20, 0x70bd2c, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x9}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}]}, @IPVS_CMD_ATTR_DEST={0x48, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x3}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x8}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@remote}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x708}, @IPVS_CMD_ATTR_DEST={0x50, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@local}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x800}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffff}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wrr\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x3}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x11}]}, @IPVS_CMD_ATTR_DAEMON={0x90, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip6gre0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'macvlan1\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @empty}}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x9}]}]}, 0x198}, 0x1, 0x0, 0x0, 0x40005}, 0x48000) r15 = socket$nl_generic(0x10, 0x3, 0x10) close(r15) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000001640)=[@in={0x2, 0x4e24, @local}, @in={0x2, 0x4e22, @empty}, @in={0x2, 0x4e21, @private=0xa010101}, @in={0x2, 0x4e23, @private=0xa010100}, @in6={0xa, 0x4e20, 0x5, @loopback, 0x7}, @in6={0xa, 0x4e21, 0x0, @loopback, 0x1}, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x35}}], 0x88) 178.67274ms ago: executing program 4 (id=1740): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x14, &(0x7f0000000080)={@empty, @random='\x00\x00\x00\x00C7', @val={@void, {0x8100, 0x0, 0x0, 0x2}}, {@generic={0x88f5, "1f77"}}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x200, 0x10060}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x1}]}, 0x3c}}, 0x0) 6.132861ms ago: executing program 1 (id=1741): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000071122c000000000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0) 0s ago: executing program 1 (id=1742): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000e42a8b6fe361171e7a2a00000000000000100000000e0001006e657464657675968a6d300000"], 0x34}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000000)=0x6, 0xa) bind$inet6(r4, &(0x7f0000f67fe4)={0xa, 0x4e20, 0xffffffff, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000000)=0x6, 0xa) bind$inet6(r5, &(0x7f0000f67fe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f00000001c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x3e, 0xb0, 0x64, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x1, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "197d25ab5c6cdbf01fe39863eb62f49000c3d6942a5e686ea59618aa7c984968", "12d234da810a504a6b0a4166eccca2e766c504479ebb08d334b334ee3d90b5ae5e1f8578858cec6b7f0937827e16b047", "3cec384575ba47e50f91fcc0eafcc824113d3c52b65c89357f4f3052", {"bd88a81b8301690b4baa4a55f96f03f3", "cc13d82e7d8ecbb5d90a4000d1d2d556"}}}}}}}, 0x0) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x28, r3, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x6e4c}]}, @TIPC_NLA_SOCK={0x4}, @TIPC_NLA_LINK={0x4}]}, 0x28}}, 0x24004080) sendmsg$TIPC_NL_KEY_FLUSH(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x5c, r3, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x4}, @TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xd}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8000}, 0x4048090) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.125' (ED25519) to the list of known hosts. [ 65.629074][ T5823] cgroup: Unknown subsys name 'net' [ 65.759249][ T5823] cgroup: Unknown subsys name 'cpuset' [ 65.767431][ T5823] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 67.141890][ T5823] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 69.496556][ T5836] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 69.505184][ T5836] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 69.531787][ T5848] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 69.540815][ T5848] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 69.549765][ T5848] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 69.557749][ T5848] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 69.566388][ T5848] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 69.574650][ T5848] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 69.585767][ T5848] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 69.593999][ T5848] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 69.596027][ T5851] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 69.601654][ T5848] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 69.615778][ T5854] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 69.624569][ T5848] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 69.631799][ T5848] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 69.632980][ T5852] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 69.646817][ T5851] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 69.667735][ T5851] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 69.684206][ T5852] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 69.697291][ T5852] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 69.704356][ T5851] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 69.725041][ T5851] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 69.739097][ T5844] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 69.747410][ T5851] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 69.755804][ T5851] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 70.230313][ T5833] chnl_net:caif_netlink_parms(): no params data found [ 70.358100][ T5840] chnl_net:caif_netlink_parms(): no params data found [ 70.464834][ T5837] chnl_net:caif_netlink_parms(): no params data found [ 70.532687][ T5839] chnl_net:caif_netlink_parms(): no params data found [ 70.568754][ T5838] chnl_net:caif_netlink_parms(): no params data found [ 70.682931][ T5833] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.690457][ T5833] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.698008][ T5833] bridge_slave_0: entered allmulticast mode [ 70.705261][ T5833] bridge_slave_0: entered promiscuous mode [ 70.713610][ T5833] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.720804][ T5833] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.727990][ T5833] bridge_slave_1: entered allmulticast mode [ 70.735732][ T5833] bridge_slave_1: entered promiscuous mode [ 70.877479][ T5840] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.885120][ T5840] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.892275][ T5840] bridge_slave_0: entered allmulticast mode [ 70.899783][ T5840] bridge_slave_0: entered promiscuous mode [ 70.911393][ T5837] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.918622][ T5837] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.926254][ T5837] bridge_slave_0: entered allmulticast mode [ 70.933150][ T5837] bridge_slave_0: entered promiscuous mode [ 70.943361][ T5833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.954087][ T5839] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.961219][ T5839] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.968606][ T5839] bridge_slave_0: entered allmulticast mode [ 70.975749][ T5839] bridge_slave_0: entered promiscuous mode [ 70.982950][ T5840] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.992004][ T5840] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.999238][ T5840] bridge_slave_1: entered allmulticast mode [ 71.007127][ T5840] bridge_slave_1: entered promiscuous mode [ 71.017944][ T5837] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.025307][ T5837] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.032829][ T5837] bridge_slave_1: entered allmulticast mode [ 71.040111][ T5837] bridge_slave_1: entered promiscuous mode [ 71.049116][ T5833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.072352][ T5839] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.079784][ T5839] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.087039][ T5839] bridge_slave_1: entered allmulticast mode [ 71.094103][ T5839] bridge_slave_1: entered promiscuous mode [ 71.174900][ T5840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.196728][ T5838] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.204768][ T5838] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.211904][ T5838] bridge_slave_0: entered allmulticast mode [ 71.219951][ T5838] bridge_slave_0: entered promiscuous mode [ 71.244900][ T5833] team0: Port device team_slave_0 added [ 71.264934][ T5840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.288275][ T5838] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.295707][ T5838] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.302811][ T5838] bridge_slave_1: entered allmulticast mode [ 71.310692][ T5838] bridge_slave_1: entered promiscuous mode [ 71.320066][ T5837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.333303][ T5833] team0: Port device team_slave_1 added [ 71.341516][ T5839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.376531][ T5837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.391323][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.401739][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.423115][ T5839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.435349][ T5840] team0: Port device team_slave_0 added [ 71.505836][ T5840] team0: Port device team_slave_1 added [ 71.514126][ T5838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.541437][ T5837] team0: Port device team_slave_0 added [ 71.548586][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.555900][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.581848][ T5833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.597306][ T5839] team0: Port device team_slave_0 added [ 71.605537][ T5838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.640921][ T5837] team0: Port device team_slave_1 added [ 71.663180][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.670311][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.696469][ T5833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.707738][ T5851] Bluetooth: hci0: command tx timeout [ 71.713519][ T5836] Bluetooth: hci4: command tx timeout [ 71.733990][ T5839] team0: Port device team_slave_1 added [ 71.752362][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.759450][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.786286][ T5836] Bluetooth: hci3: command tx timeout [ 71.786441][ T5836] Bluetooth: hci1: command tx timeout [ 71.797751][ T5840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.810942][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.818006][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.843964][ T5840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.863993][ T5851] Bluetooth: hci2: command tx timeout [ 71.896816][ T5838] team0: Port device team_slave_0 added [ 71.925482][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.932436][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.958486][ T5839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.970195][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.980120][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.008406][ T5837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.026652][ T5833] hsr_slave_0: entered promiscuous mode [ 72.033114][ T5833] hsr_slave_1: entered promiscuous mode [ 72.041720][ T5838] team0: Port device team_slave_1 added [ 72.075944][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.082906][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.109637][ T5839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.122482][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.129474][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.155489][ T5837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.204189][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.211155][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.237755][ T5838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.250453][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.257651][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.283686][ T5838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.383450][ T5837] hsr_slave_0: entered promiscuous mode [ 72.389772][ T5837] hsr_slave_1: entered promiscuous mode [ 72.396038][ T5837] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 72.403717][ T5837] Cannot create hsr debugfs directory [ 72.415935][ T5840] hsr_slave_0: entered promiscuous mode [ 72.422103][ T5840] hsr_slave_1: entered promiscuous mode [ 72.428596][ T5840] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 72.436212][ T5840] Cannot create hsr debugfs directory [ 72.496678][ T5839] hsr_slave_0: entered promiscuous mode [ 72.502888][ T5839] hsr_slave_1: entered promiscuous mode [ 72.509182][ T5839] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 72.516871][ T5839] Cannot create hsr debugfs directory [ 72.565857][ T5838] hsr_slave_0: entered promiscuous mode [ 72.572221][ T5838] hsr_slave_1: entered promiscuous mode [ 72.578701][ T5838] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 72.586374][ T5838] Cannot create hsr debugfs directory [ 73.068037][ T5833] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 73.089420][ T5833] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 73.107850][ T5833] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 73.123612][ T5833] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 73.160754][ T5840] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 73.170785][ T5840] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 73.184195][ T5840] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 73.210771][ T5840] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 73.277501][ T5839] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 73.289206][ T5839] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 73.299606][ T5839] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 73.324486][ T5839] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 73.392880][ T5838] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 73.410448][ T5838] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 73.423212][ T5838] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 73.458167][ T5838] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 73.532913][ T5837] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 73.547803][ T5837] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 73.559458][ T5837] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 73.582992][ T5837] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 73.629025][ T5833] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.672064][ T5840] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.702643][ T5833] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.723943][ T1149] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.731198][ T1149] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.768806][ T5840] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.778396][ T1149] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.785574][ T1149] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.794637][ T5851] Bluetooth: hci4: command tx timeout [ 73.800077][ T5851] Bluetooth: hci0: command tx timeout [ 73.834679][ T177] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.841819][ T177] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.864537][ T5851] Bluetooth: hci1: command tx timeout [ 73.865238][ T5836] Bluetooth: hci3: command tx timeout [ 73.918041][ T5839] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.929679][ T136] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.936856][ T136] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.954296][ T5836] Bluetooth: hci2: command tx timeout [ 73.999320][ T5838] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.022261][ T5839] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.086337][ T5838] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.099060][ T136] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.106233][ T136] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.130944][ T136] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.138128][ T136] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.158837][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.197923][ T136] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.205107][ T136] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.217729][ T136] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.224905][ T136] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.289724][ T5837] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.337315][ T136] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.344784][ T136] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.358819][ T136] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.366007][ T136] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.487998][ T5837] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 74.592596][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.628481][ T5840] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.783011][ T5840] veth0_vlan: entered promiscuous mode [ 74.852155][ T5840] veth1_vlan: entered promiscuous mode [ 74.877209][ T5833] veth0_vlan: entered promiscuous mode [ 74.937818][ T5833] veth1_vlan: entered promiscuous mode [ 74.961058][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.971417][ T5839] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.983050][ T5838] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.023681][ T5840] veth0_macvtap: entered promiscuous mode [ 75.073787][ T5840] veth1_macvtap: entered promiscuous mode [ 75.092939][ T5833] veth0_macvtap: entered promiscuous mode [ 75.149399][ T5833] veth1_macvtap: entered promiscuous mode [ 75.172597][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.183393][ T5839] veth0_vlan: entered promiscuous mode [ 75.198164][ T5837] veth0_vlan: entered promiscuous mode [ 75.231363][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.250830][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.268385][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.282046][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.298058][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.315283][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.327962][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.337129][ T5839] veth1_vlan: entered promiscuous mode [ 75.363834][ T5840] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.372870][ T5840] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.381715][ T5840] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.392991][ T5840] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.406330][ T5833] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.415825][ T5833] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.425352][ T5833] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.434471][ T5833] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.450587][ T5837] veth1_vlan: entered promiscuous mode [ 75.505265][ T5839] veth0_macvtap: entered promiscuous mode [ 75.552441][ T5839] veth1_macvtap: entered promiscuous mode [ 75.631112][ T136] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.641651][ T136] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.684857][ T5837] veth0_macvtap: entered promiscuous mode [ 75.691952][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.703118][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.713248][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.726280][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.737684][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.752845][ T54] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.762751][ T54] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.799331][ T5837] veth1_macvtap: entered promiscuous mode [ 75.815596][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.826297][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.837228][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.847841][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.859307][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.866742][ T5836] Bluetooth: hci4: command tx timeout [ 75.874435][ T5836] Bluetooth: hci0: command tx timeout [ 75.901373][ T5838] veth0_vlan: entered promiscuous mode [ 75.910127][ T5839] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.919290][ T5839] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.928082][ T5839] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.937412][ T5839] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.946674][ T5851] Bluetooth: hci1: command tx timeout [ 75.952567][ T5836] Bluetooth: hci3: command tx timeout [ 75.956593][ T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.968815][ T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.979747][ T54] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.988064][ T54] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.002327][ T5838] veth1_vlan: entered promiscuous mode [ 76.024407][ T5836] Bluetooth: hci2: command tx timeout [ 76.093825][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.119452][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.129361][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.139813][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.149862][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.160320][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.171744][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.202458][ T5840] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 76.203125][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.234489][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.245026][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.255538][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.266338][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.276879][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.288057][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.315776][ T5837] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.326727][ T5837] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.337862][ T5837] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.348236][ T5837] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.376362][ T136] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.387738][ T136] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.474912][ T54] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.498808][ T54] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.504842][ T5923] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2'. [ 76.547639][ T5838] veth0_macvtap: entered promiscuous mode [ 76.591568][ T5838] veth1_macvtap: entered promiscuous mode [ 76.682946][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.695643][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.706480][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.717082][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.732724][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.745561][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.747001][ T5929] netlink: 'syz.1.6': attribute type 4 has an invalid length. [ 76.757363][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.773528][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.786580][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.889553][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.904887][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.921215][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.938059][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.952570][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.965876][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.976079][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.988198][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.999558][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.014670][ T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.026247][ T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.052142][ T5838] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.066290][ T5838] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.078483][ T5838] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.087506][ T5838] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.264985][ T54] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.282700][ T54] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.430687][ T54] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.459616][ T54] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.502298][ T5953] netlink: 'syz.3.11': attribute type 1 has an invalid length. [ 77.509055][ T5944] warning: `syz.1.10' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 77.536674][ T5953] Zero length message leads to an empty skb [ 77.544708][ T5944] netlink: 24 bytes leftover after parsing attributes in process `syz.1.10'. [ 77.569144][ T5953] ip6erspan0: entered promiscuous mode [ 77.640746][ T177] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.649585][ T177] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.878867][ T5961] syz.3.12 uses obsolete (PF_INET,SOCK_PACKET) [ 77.946561][ T5851] Bluetooth: hci4: command tx timeout [ 77.952260][ T5836] Bluetooth: hci0: command tx timeout [ 78.024381][ T5851] Bluetooth: hci1: command tx timeout [ 78.029865][ T5836] Bluetooth: hci3: command tx timeout [ 78.105608][ T5836] Bluetooth: hci2: command tx timeout [ 78.129348][ T5971] ü: renamed from bridge_slave_0 (while UP) [ 78.268638][ T5975] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5'. [ 78.331321][ T5980] xt_HMARK: spi-set and port-set can't be combined [ 78.382298][ T5980] netlink: 4 bytes leftover after parsing attributes in process `syz.1.18'. [ 78.509632][ T5961] netlink: 36 bytes leftover after parsing attributes in process `syz.3.12'. [ 78.658617][ T5987] netlink: 76 bytes leftover after parsing attributes in process `syz.0.21'. [ 78.689878][ T5988] A link change request failed with some changes committed already. Interface veth1_to_team may have been left with an inconsistent configuration, please check. [ 78.691764][ T5993] netlink: 8 bytes leftover after parsing attributes in process `syz.4.20'. [ 78.720963][ T5993] netlink: 8 bytes leftover after parsing attributes in process `syz.4.20'. [ 79.245713][ T6017] netlink: 'syz.1.30': attribute type 1 has an invalid length. [ 79.263236][ T6020] netlink: 20 bytes leftover after parsing attributes in process `syz.4.28'. [ 79.330576][ T6017] ip6erspan0: entered promiscuous mode [ 79.397080][ T6022] netlink: 'syz.0.31': attribute type 29 has an invalid length. [ 79.425422][ T6022] netlink: 4 bytes leftover after parsing attributes in process `syz.0.31'. [ 79.823838][ T6044] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 79.832897][ T6044] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 79.841754][ T6044] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 79.850529][ T6044] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 79.927649][ T6044] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 79.936989][ T6044] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 79.946303][ T6044] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 79.955770][ T6044] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 80.205225][ T6061] netlink: 'syz.4.39': attribute type 21 has an invalid length. [ 80.551366][ T6074] netlink: 'syz.3.44': attribute type 1 has an invalid length. [ 80.597946][ T6074] ip6erspan0: entered promiscuous mode [ 80.622348][ T6079] IPVS: sync thread started: state = MASTER, mcast_ifn = vcan0, syncid = 2, id = 0 [ 80.626830][ T6078] vcan0: tx drop: invalid sa for name 0xfffffffffffffffc [ 80.886707][ T6090] IPv6: Can't replace route, no match found [ 81.110782][ T6096] netlink: 'syz.2.52': attribute type 8 has an invalid length. [ 81.121821][ T6096] xt_ecn: cannot match TCP bits for non-tcp packets [ 81.170931][ T6098] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 82.392049][ T6140] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 82.450825][ T6135] x_tables: duplicate underflow at hook 3 [ 82.477087][ T6135] __nla_validate_parse: 7 callbacks suppressed [ 82.477103][ T6135] netlink: 8 bytes leftover after parsing attributes in process `syz.3.62'. [ 82.494943][ T6135] netlink: 8 bytes leftover after parsing attributes in process `syz.3.62'. [ 82.512307][ T6135] netlink: 8 bytes leftover after parsing attributes in process `syz.3.62'. [ 82.521746][ T6135] netlink: 8 bytes leftover after parsing attributes in process `syz.3.62'. [ 82.535891][ T6135] netlink: 8 bytes leftover after parsing attributes in process `syz.3.62'. [ 82.551422][ T6135] netlink: 8 bytes leftover after parsing attributes in process `syz.3.62'. [ 82.572204][ T6135] netlink: 8 bytes leftover after parsing attributes in process `syz.3.62'. [ 82.588491][ T6135] netlink: 8 bytes leftover after parsing attributes in process `syz.3.62'. [ 82.599564][ T6135] netlink: 8 bytes leftover after parsing attributes in process `syz.3.62'. [ 82.611307][ T6135] netlink: 8 bytes leftover after parsing attributes in process `syz.3.62'. [ 82.745292][ T6150] nftables ruleset with unbound chain [ 82.818658][ T6150] openvswitch: netlink: Actions may not be safe on all matching packets [ 83.128735][ T6167] netlink: 'syz.4.70': attribute type 7 has an invalid length. [ 83.316685][ T6173] Cannot find set identified by id 0 to match [ 83.825703][ T6198] netlink: 'syz.4.77': attribute type 1 has an invalid length. [ 84.396928][ T6218] netlink: 'syz.3.83': attribute type 1 has an invalid length. [ 84.469619][ T6218] ip6erspan0: entered promiscuous mode [ 85.228352][ T6262] x_tables: duplicate underflow at hook 1 [ 85.301717][ T6265] netlink: 'syz.1.95': attribute type 29 has an invalid length. [ 85.313309][ T5836] Bluetooth: hci1: command tx timeout [ 85.441549][ T6268] dvmrp0: entered allmulticast mode [ 85.642654][ T6286] trusted_key: syz.3.100 sent an empty control message without MSG_MORE. [ 85.671473][ T6289] netlink: 'syz.4.102': attribute type 5 has an invalid length. [ 85.913822][ T6304] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (32767) [ 85.931781][ T6304] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255 [ 86.420568][ T6327] pimreg: entered allmulticast mode [ 86.575965][ T6327] bond3: entered promiscuous mode [ 86.750818][ T48] cfg80211: failed to load regulatory.db [ 86.808458][ T6348] sctp: [Deprecated]: syz.4.119 (pid 6348) Use of struct sctp_assoc_value in delayed_ack socket option. [ 86.808458][ T6348] Use struct sctp_sack_info instead [ 87.329992][ T6380] netlink: 'syz.3.128': attribute type 3 has an invalid length. [ 87.367510][ T6375] bond1 (unregistering): Released all slaves [ 87.807460][ T6392] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (18446744073709551615) [ 87.838033][ T6392] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535 [ 88.092470][ T6414] netlink: 'syz.1.136': attribute type 1 has an invalid length. [ 88.098542][ T6409] __nla_validate_parse: 77 callbacks suppressed [ 88.098559][ T6409] netlink: 12 bytes leftover after parsing attributes in process `syz.2.135'. [ 88.160533][ T6410] netlink: 12 bytes leftover after parsing attributes in process `syz.2.135'. [ 88.197332][ T6414] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 89.066586][ T6474] x_tables: duplicate underflow at hook 1 [ 89.892711][ T6516] Driver unsupported XDP return value 0 on prog (id 62) dev N/A, expect packet loss! [ 90.642416][ T6557] do_dccp_setsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 91.025295][ T6577] bond0: option mode: unable to set because the bond device has slaves [ 91.064170][ T6581] netlink: 'syz.3.182': attribute type 2 has an invalid length. [ 91.072567][ T6581] netlink: 'syz.3.182': attribute type 6 has an invalid length. [ 91.096333][ T6578] netlink: 8 bytes leftover after parsing attributes in process `syz.4.183'. [ 91.096839][ T6585] netlink: 4 bytes leftover after parsing attributes in process `syz.2.185'. [ 91.106384][ T6578] netlink: 4 bytes leftover after parsing attributes in process `syz.4.183'. [ 91.456221][ T6591] veth0: entered promiscuous mode [ 91.491036][ T6597] veth0: left promiscuous mode [ 91.513313][ T6602] Cannot find add_set index 65534 as target [ 91.578197][ T6603] netlink: 4 bytes leftover after parsing attributes in process `syz.3.189'. [ 91.590811][ T6603] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 91.624341][ T6609] netlink: 28 bytes leftover after parsing attributes in process `syz.1.190'. [ 91.673831][ T6612] netlink: 28 bytes leftover after parsing attributes in process `syz.1.190'. [ 91.724965][ T6614] netlink: 'syz.4.194': attribute type 1 has an invalid length. [ 91.787570][ T6614] 8021q: adding VLAN 0 to HW filter on device bond4 [ 91.836407][ T6623] netlink: 8 bytes leftover after parsing attributes in process `syz.1.195'. [ 91.888345][ T6624] netlink: 292 bytes leftover after parsing attributes in process `syz.1.195'. [ 91.898652][ T6614] bond4: (slave ip6erspan0): making interface the new active one [ 91.939907][ T6614] bond4: (slave ip6erspan0): Enslaving as an active interface with an up link [ 91.971287][ T6630] netlink: 'syz.2.196': attribute type 4 has an invalid length. [ 93.126381][ T6689] netlink: 24 bytes leftover after parsing attributes in process `syz.3.213'. [ 93.136669][ T6689] netlink: 16 bytes leftover after parsing attributes in process `syz.3.213'. [ 93.169736][ T6686] netlink: 8 bytes leftover after parsing attributes in process `syz.4.211'. [ 93.680390][ T6714] xt_hashlimit: overflow, rate too high: 0 [ 93.695185][ T6714] Cannot find set identified by id 752 to match [ 93.829025][ T6720] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 93.837923][ T6720] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 93.846898][ T6720] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 93.855853][ T6720] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 93.871225][ T6720] vxlan0: entered promiscuous mode [ 93.882585][ T6720] vxlan0: entered allmulticast mode [ 93.925111][ T13] Ignoring NSS change in VHT Operating Mode Notification from 08:02:11:00:00:00 with invalid nss 2 [ 94.478033][ T6749] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode [ 94.503014][ T6755] netlink: 12 bytes leftover after parsing attributes in process `syz.4.232'. [ 94.789724][ T6774] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 95.046021][ T6783] netlink: 20 bytes leftover after parsing attributes in process `syz.2.240'. [ 95.272805][ T6794] netlink: 56 bytes leftover after parsing attributes in process `syz.3.244'. [ 95.778017][ T56] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 95.791238][ T56] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 95.800059][ T56] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 95.808715][ T56] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 95.819188][ T56] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 95.851739][ T6825] netlink: 20 bytes leftover after parsing attributes in process `syz.4.255'. [ 96.217748][ T6848] netlink: 16 bytes leftover after parsing attributes in process `syz.2.261'. [ 96.449633][ T6819] chnl_net:caif_netlink_parms(): no params data found [ 96.462708][ T6864] openvswitch: netlink: Tunnel attr 0 has unexpected len 5 expected 8 [ 96.945854][ T6819] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.968976][ T6819] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.977819][ T6819] bridge_slave_0: entered allmulticast mode [ 96.986316][ T6819] bridge_slave_0: entered promiscuous mode [ 97.011659][ T6819] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.019311][ T6819] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.027072][ T6819] bridge_slave_1: entered allmulticast mode [ 97.035585][ T6819] bridge_slave_1: entered promiscuous mode [ 97.257351][ T6905] veth3: entered allmulticast mode [ 97.383473][ T6819] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 97.412579][ T6819] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 97.422830][ T6919] netlink: 12 bytes leftover after parsing attributes in process `syz.2.278'. [ 97.670653][ T6819] team0: Port device team_slave_0 added [ 97.749385][ T6819] team0: Port device team_slave_1 added [ 97.821065][ T6937] netlink: 32 bytes leftover after parsing attributes in process `syz.4.286'. [ 97.865777][ T5836] Bluetooth: hci5: command tx timeout [ 97.980277][ T6819] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 98.001683][ T6819] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 98.053697][ T6819] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 98.078061][ T6819] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 98.099344][ T6819] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 98.151165][ T6819] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 98.402785][ T6819] hsr_slave_0: entered promiscuous mode [ 98.424641][ T6819] hsr_slave_1: entered promiscuous mode [ 98.431250][ T6819] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 98.457846][ T6819] Cannot create hsr debugfs directory [ 98.480832][ T6972] __nla_validate_parse: 1 callbacks suppressed [ 98.480850][ T6972] netlink: 44 bytes leftover after parsing attributes in process `syz.1.297'. [ 98.505852][ T6972] netlink: 43 bytes leftover after parsing attributes in process `syz.1.297'. [ 98.520992][ T6972] netlink: 'syz.1.297': attribute type 5 has an invalid length. [ 98.530415][ T6972] netlink: 43 bytes leftover after parsing attributes in process `syz.1.297'. [ 98.687176][ T6970] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 98.719435][ T6964] netlink: 12 bytes leftover after parsing attributes in process `syz.3.294'. [ 99.146285][ T6996] netlink: 12 bytes leftover after parsing attributes in process `syz.1.305'. [ 99.198289][ T7000] netlink: 'syz.3.302': attribute type 23 has an invalid length. [ 99.252445][ T6988] syzkaller0: entered promiscuous mode [ 99.261921][ T6988] syzkaller0: entered allmulticast mode [ 99.360847][ T7001] netlink: 192 bytes leftover after parsing attributes in process `syz.4.306'. [ 99.954601][ T5836] Bluetooth: hci5: command tx timeout [ 100.717992][ T7021] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 100.988343][ T7038] tipc: Enabling of bearer rejected, failed to enable media [ 101.027098][ T7041] netlink: ct family unspecified [ 101.032090][ T7041] openvswitch: netlink: Actions may not be safe on all matching packets [ 101.050027][ T6819] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 101.063681][ T7042] netlink: ct family unspecified [ 101.069797][ T7042] openvswitch: netlink: Actions may not be safe on all matching packets [ 101.085779][ T6819] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 101.150656][ T6819] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 101.215790][ T6819] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 101.272410][ T7050] netlink: 16 bytes leftover after parsing attributes in process `syz.3.318'. [ 101.500286][ T7067] netlink: 8 bytes leftover after parsing attributes in process `syz.4.322'. [ 101.606733][ T6819] 8021q: adding VLAN 0 to HW filter on device bond0 [ 101.758238][ T7074] netlink: 28 bytes leftover after parsing attributes in process `syz.2.326'. [ 101.758648][ T7072] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 101.770718][ T7074] netlink: 'syz.2.326': attribute type 7 has an invalid length. [ 101.787592][ T7074] netlink: 'syz.2.326': attribute type 8 has an invalid length. [ 101.798849][ T7074] netlink: 4 bytes leftover after parsing attributes in process `syz.2.326'. [ 101.808613][ T7072] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 101.821230][ T7072] gretap1: entered promiscuous mode [ 101.828784][ T7072] gretap1: entered allmulticast mode [ 101.858480][ T7074] dummy0: entered promiscuous mode [ 101.871318][ T7074] dummy0: left promiscuous mode [ 101.940061][ T6819] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.002460][ T54] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.009701][ T54] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.029122][ T5836] Bluetooth: hci5: command tx timeout [ 102.031814][ T177] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.041710][ T177] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.547843][ T6819] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 102.644151][ T7101] xt_HMARK: spi-set and port-set can't be combined [ 102.811035][ T7103] bridge_slave_0: left allmulticast mode [ 102.820518][ T7103] bridge_slave_0: left promiscuous mode [ 102.831629][ T7103] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.880929][ T7103] bridge_slave_1: left allmulticast mode [ 102.903381][ T7103] bridge_slave_1: left promiscuous mode [ 102.912127][ T7103] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.940849][ T7103] bond0: (slave bond_slave_0): Releasing backup interface [ 102.958599][ T7103] bond0: (slave bond_slave_1): Releasing backup interface [ 103.010185][ T7103] team0: Port device team_slave_0 removed [ 103.073659][ T7103] team0: Port device team_slave_1 removed [ 103.100144][ T7103] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 103.127357][ T7103] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 103.140754][ T7103] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 103.174053][ T7103] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 103.230590][ T7103] bond4: (slave ip6erspan0): Releasing active interface [ 103.536665][ T7134] __nla_validate_parse: 3 callbacks suppressed [ 103.536684][ T7134] netlink: 16 bytes leftover after parsing attributes in process `syz.2.340'. [ 104.037131][ T7154] netlink: 13 bytes leftover after parsing attributes in process `syz.3.344'. [ 104.106368][ T5836] Bluetooth: hci5: command tx timeout [ 104.157731][ T6819] veth0_vlan: entered promiscuous mode [ 104.191978][ T6819] veth1_vlan: entered promiscuous mode [ 104.230980][ T7160] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 104.262718][ T7162] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 104.290708][ T7165] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 104.379126][ T6819] veth0_macvtap: entered promiscuous mode [ 104.408286][ T6819] veth1_macvtap: entered promiscuous mode [ 104.545243][ T6819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 104.579988][ T6819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.610632][ T6819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 104.642420][ T6819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.677336][ T6819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 104.702900][ T6819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.733237][ T6819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 104.773952][ T6819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.805477][ T6819] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 104.852950][ T6819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 104.886085][ T6819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.919884][ T6819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 104.951668][ T6819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.981759][ T6819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 105.014031][ T6819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.052024][ T6819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 105.065809][ T6819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.079226][ T6819] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 105.141394][ T6819] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.168128][ T6819] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.190128][ T6819] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.209375][ T6819] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.434399][ T7196] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 105.664654][ T177] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.698985][ T177] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.737304][ T7213] netlink: 23 bytes leftover after parsing attributes in process `syz.2.359'. [ 105.750912][ T7213] netlink: 23 bytes leftover after parsing attributes in process `syz.2.359'. [ 105.776760][ T7214] netlink: 'syz.3.361': attribute type 2 has an invalid length. [ 105.796145][ T7214] netlink: 4 bytes leftover after parsing attributes in process `syz.3.361'. [ 105.815425][ T54] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.836503][ T54] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.942126][ T7216] netlink: 'syz.1.362': attribute type 5 has an invalid length. [ 106.321902][ T7243] netlink: 'syz.2.368': attribute type 2 has an invalid length. [ 106.463006][ T7251] batman_adv: batadv0: Adding interface: dummy0 [ 106.483604][ T7251] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 106.543939][ T7251] batman_adv: batadv0: Interface activated: dummy0 [ 106.643499][ T7261] batadv0: mtu less than device minimum [ 106.679007][ T7261] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 106.691085][ T7261] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 106.702944][ T7261] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 106.714870][ T7261] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 106.726731][ T7261] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 106.738557][ T7261] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 106.826812][ T7251] macvlan3: entered promiscuous mode [ 106.847019][ T7251] macvlan3: entered allmulticast mode [ 106.858400][ T7251] batadv0: entered promiscuous mode [ 106.866312][ T7251] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 106.877870][ T7251] bond0: (slave macvlan3): Enslaving as an active interface with an up link [ 107.028442][ T7279] netlink: 40 bytes leftover after parsing attributes in process `syz.5.378'. [ 107.062103][ T7284] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_macvtap, syncid = 0, id = 0 [ 107.340217][ T7297] Cannot find del_set index 3 as target [ 108.889001][ T7376] netlink: 28 bytes leftover after parsing attributes in process `syz.5.407'. [ 108.925332][ T7376] sch_tbf: peakrate 7 is lower than or equals to rate 2147483647 ! [ 109.002907][ T7380] netlink: 8 bytes leftover after parsing attributes in process `syz.4.410'. [ 109.153417][ T7387] netlink: 232 bytes leftover after parsing attributes in process `syz.2.412'. [ 109.182664][ T7387] netlink: 12 bytes leftover after parsing attributes in process `syz.2.412'. [ 109.362194][ T7398] netlink: 'syz.4.415': attribute type 1 has an invalid length. [ 109.492138][ T7398] bond5: (slave ip6tnl1): The slave device specified does not support setting the MAC address [ 109.531407][ T7398] bond5: (slave ip6tnl1): Setting fail_over_mac to active for active-backup mode [ 109.605905][ T7398] bond5: (slave ip6tnl1): making interface the new active one [ 109.627234][ T7398] bond5: (slave ip6tnl1): Enslaving as an active interface with an up link [ 109.854131][ T7412] netlink: 256 bytes leftover after parsing attributes in process `syz.1.419'. [ 109.889401][ T7412] netlink: 4 bytes leftover after parsing attributes in process `syz.1.419'. [ 110.001480][ T7416] netlink: 4 bytes leftover after parsing attributes in process `syz.2.420'. [ 110.133436][ T7424] netlink: 224 bytes leftover after parsing attributes in process `syz.1.423'. [ 110.151859][ T7425] netlink: 'syz.3.424': attribute type 29 has an invalid length. [ 110.514353][ T7443] netlink: 11 bytes leftover after parsing attributes in process `syz.5.428'. [ 110.642558][ T7449] netlink: 8 bytes leftover after parsing attributes in process `syz.5.432'. [ 110.807412][ T7461] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 111.332687][ T7484] netlink: 'syz.2.443': attribute type 12 has an invalid length. [ 111.368680][ T7484] netlink: 'syz.2.443': attribute type 11 has an invalid length. [ 111.429039][ T7488] IPVS: Unknown mcast interface: pimreg [ 111.540496][ T5918] IPVS: starting estimator thread 0... [ 111.665882][ T7500] IPVS: using max 34 ests per chain, 81600 per kthread [ 111.754810][ T7510] netlink: 'syz.1.450': attribute type 2 has an invalid length. [ 111.788685][ T7510] bond0: entered promiscuous mode [ 111.797765][ T7510] bond_slave_0: entered promiscuous mode [ 111.803642][ T7510] bond_slave_1: entered promiscuous mode [ 111.858313][ T7510] bond0: left promiscuous mode [ 111.872556][ T7510] bond_slave_0: left promiscuous mode [ 111.894718][ T7510] bond_slave_1: left promiscuous mode [ 112.053565][ T7527] netlink: 'syz.1.457': attribute type 2 has an invalid length. [ 112.068370][ T7527] netlink: 'syz.1.457': attribute type 1 has an invalid length. [ 112.400927][ T7537] net_ratelimit: 14 callbacks suppressed [ 112.400945][ T7537] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 113.523178][ T7579] netlink: 'syz.1.475': attribute type 1 has an invalid length. [ 113.862876][ T7592] netlink: 'syz.5.481': attribute type 4 has an invalid length. [ 114.001066][ T7592] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.155034][ T7592] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.166163][ T7615] __nla_validate_parse: 8 callbacks suppressed [ 114.166180][ T7615] netlink: 72 bytes leftover after parsing attributes in process `syz.1.486'. [ 114.207234][ T7605] netlink: 20 bytes leftover after parsing attributes in process `syz.4.485'. [ 114.256065][ T7620] netlink: 40 bytes leftover after parsing attributes in process `syz.1.486'. [ 114.310266][ T7592] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.474352][ T7615] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.482083][ T7615] bridge0: port 1(ü) entered disabled state [ 114.592216][ T7592] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.716658][ T7639] netlink: 'syz.1.489': attribute type 29 has an invalid length. [ 114.750689][ T7641] netlink: 'syz.1.489': attribute type 29 has an invalid length. [ 114.777634][ T7639] netlink: 500 bytes leftover after parsing attributes in process `syz.1.489'. [ 114.874766][ T7639] unsupported nla_type 58 [ 114.930249][ T7639] netlink: 4 bytes leftover after parsing attributes in process `syz.1.489'. [ 114.950670][ T7592] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.056465][ T7592] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.173723][ T7592] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.291506][ T7592] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.581198][ T7680] gtp0: entered promiscuous mode [ 115.677354][ T7695] netlink: 44 bytes leftover after parsing attributes in process `syz.5.499'. [ 115.852756][ T7702] do_dccp_setsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 115.886086][ T7699] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 115.979305][ T7708] netlink: 'syz.2.504': attribute type 178 has an invalid length. [ 116.009440][ T7698] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 116.062003][ T7702] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 116.150601][ T7714] netlink: 36 bytes leftover after parsing attributes in process `syz.1.505'. [ 116.361954][ T7727] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 116.764488][ T7754] Bluetooth: MGMT ver 1.23 [ 117.142841][ T7781] netlink: 12 bytes leftover after parsing attributes in process `syz.1.520'. [ 117.193074][ T7781] tc_dump_action: action bad kind [ 117.364166][ T7789] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 117.395919][ T7791] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 117.628003][ T7807] netlink: 24 bytes leftover after parsing attributes in process `syz.1.526'. [ 117.680520][ T7811] netlink: 24 bytes leftover after parsing attributes in process `syz.5.525'. [ 118.930464][ T7881] openvswitch: netlink: Actions may not be safe on all matching packets [ 119.218155][ T7892] __nla_validate_parse: 6 callbacks suppressed [ 119.218172][ T7892] netlink: 48 bytes leftover after parsing attributes in process `syz.3.548'. [ 119.261124][ T7892] netlink: 44 bytes leftover after parsing attributes in process `syz.3.548'. [ 119.268299][ T7895] bridge0: port 1(syz_tun) entered blocking state [ 119.272538][ T7890] netlink: 148 bytes leftover after parsing attributes in process `syz.3.548'. [ 119.286573][ T7895] bridge0: port 1(syz_tun) entered disabled state [ 119.301432][ T7895] syz_tun: entered allmulticast mode [ 119.321268][ T7895] syz_tun: entered promiscuous mode [ 119.474260][ T7903] netlink: 56 bytes leftover after parsing attributes in process `syz.3.551'. [ 119.495361][ T7903] netlink: 56 bytes leftover after parsing attributes in process `syz.3.551'. [ 119.606713][ T7911] netlink: 4 bytes leftover after parsing attributes in process `syz.4.552'. [ 119.738054][ T7918] netlink: 32 bytes leftover after parsing attributes in process `syz.5.554'. [ 120.068202][ T7933] FAULT_INJECTION: forcing a failure. [ 120.068202][ T7933] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 120.126507][ T7933] CPU: 0 UID: 0 PID: 7933 Comm: syz.1.559 Not tainted 6.15.0-rc1-syzkaller-00141-gcfe82469a00f #0 PREEMPT(full) [ 120.126533][ T7933] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 120.126546][ T7933] Call Trace: [ 120.126554][ T7933] [ 120.126561][ T7933] dump_stack_lvl+0x241/0x360 [ 120.126604][ T7933] ? __pfx_dump_stack_lvl+0x10/0x10 [ 120.126628][ T7933] ? __pfx__printk+0x10/0x10 [ 120.126662][ T7933] should_fail_ex+0x424/0x570 [ 120.126685][ T7933] _copy_to_user+0x31/0xb0 [ 120.126711][ T7933] simple_read_from_buffer+0xc4/0x170 [ 120.126739][ T7933] proc_fail_nth_read+0x1ef/0x260 [ 120.126760][ T7933] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 120.126781][ T7933] ? rw_verify_area+0x246/0x630 [ 120.126799][ T7933] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 120.126817][ T7933] vfs_read+0x21f/0xb90 [ 120.126841][ T7933] ? __pfx___mutex_lock+0x10/0x10 [ 120.126863][ T7933] ? __pfx_vfs_read+0x10/0x10 [ 120.126885][ T7933] ? __fget_files+0x2a/0x420 [ 120.126902][ T7933] ? __fget_files+0x39d/0x420 [ 120.126916][ T7933] ? __fget_files+0x2a/0x420 [ 120.126940][ T7933] ksys_read+0x19d/0x2d0 [ 120.126961][ T7933] ? __pfx_ksys_read+0x10/0x10 [ 120.126984][ T7933] ? do_syscall_64+0xb6/0x230 [ 120.127003][ T7933] do_syscall_64+0xf3/0x230 [ 120.127018][ T7933] ? clear_bhb_loop+0x45/0xa0 [ 120.127034][ T7933] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.127050][ T7933] RIP: 0033:0x7f9ca598bb7c [ 120.127066][ T7933] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 120.127076][ T7933] RSP: 002b:00007f9ca67bb030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 120.127096][ T7933] RAX: ffffffffffffffda RBX: 00007f9ca5ba5fa0 RCX: 00007f9ca598bb7c [ 120.127106][ T7933] RDX: 000000000000000f RSI: 00007f9ca67bb0a0 RDI: 0000000000000004 [ 120.127113][ T7933] RBP: 00007f9ca67bb090 R08: 0000000000000000 R09: 0000000000000000 [ 120.127128][ T7933] R10: 0000000000000022 R11: 0000000000000246 R12: 0000000000000001 [ 120.127135][ T7933] R13: 0000000000000000 R14: 00007f9ca5ba5fa0 R15: 00007ffdf89d7e08 [ 120.127157][ T7933] [ 120.474586][ T7946] netlink: 165 bytes leftover after parsing attributes in process `syz.2.563'. [ 120.795930][ T7969] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 120.839910][ T7971] netlink: 12 bytes leftover after parsing attributes in process `syz.4.572'. [ 121.121985][ T7987] netlink: 24 bytes leftover after parsing attributes in process `syz.5.577'. [ 121.550201][ T8006] netlink: 'syz.2.582': attribute type 7 has an invalid length. [ 121.567154][ T8006] netlink: 'syz.2.582': attribute type 8 has an invalid length. [ 121.633567][ T8006] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:24) already exists on: dummy0 [ 121.683998][ T8006] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.715874][ T8006] dummy0: entered promiscuous mode [ 121.769795][ T8006] dummy0: left promiscuous mode [ 122.080654][ T8031] 8021q: VLANs not supported on lo [ 122.146965][ T8032] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input5 [ 122.213357][ T8038] 8021q: VLANs not supported on ip_vti0 [ 122.306212][ T8041] netlink: 'syz.4.591': attribute type 1 has an invalid length. [ 122.974772][ T8083] IPVS: set_ctl: invalid protocol: 58 224.0.0.2:20000 [ 123.008291][ T8083] lo speed is unknown, defaulting to 1000 [ 123.038180][ T8083] lo speed is unknown, defaulting to 1000 [ 123.063751][ T8086] IPVS: Unknown mcast interface: pim6reg0 [ 123.081662][ T8083] lo speed is unknown, defaulting to 1000 [ 123.140556][ T8083] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 123.166128][ T8083] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 123.255279][ T8083] lo speed is unknown, defaulting to 1000 [ 123.263491][ T8083] lo speed is unknown, defaulting to 1000 [ 123.271858][ T8083] lo speed is unknown, defaulting to 1000 [ 123.285551][ T8083] lo speed is unknown, defaulting to 1000 [ 123.353679][ T8083] lo speed is unknown, defaulting to 1000 [ 123.398106][ T8083] lo speed is unknown, defaulting to 1000 [ 123.711843][ T8114] netlink: 'syz.1.608': attribute type 10 has an invalid length. [ 123.747807][ T8114] batman_adv: batadv0: Interface deactivated: dummy0 [ 123.799336][ T8114] batman_adv: batadv0: Removing interface: dummy0 [ 123.866902][ T8114] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 123.928065][ T8122] geneve3: entered promiscuous mode [ 123.950357][ T8122] geneve3: entered allmulticast mode [ 124.248587][ T8138] __nla_validate_parse: 12 callbacks suppressed [ 124.248605][ T8138] netlink: 36 bytes leftover after parsing attributes in process `syz.3.615'. [ 124.358104][ T8141] netlink: 'syz.3.616': attribute type 5 has an invalid length. [ 124.481288][ T8147] netlink: 4 bytes leftover after parsing attributes in process `syz.4.618'. [ 124.703017][ T8153] veth1_macvtap: left promiscuous mode [ 124.760196][ T8153] macsec0: entered allmulticast mode [ 124.837546][ T8156] veth1_macvtap: entered promiscuous mode [ 124.844111][ T8156] veth1_macvtap: entered allmulticast mode [ 124.849967][ T8156] macsec0: left allmulticast mode [ 124.914954][ T8156] veth1_macvtap: left allmulticast mode [ 125.003777][ T8178] netlink: 8 bytes leftover after parsing attributes in process `syz.5.625'. [ 125.022805][ T8158] team0: Port device team_slave_0 removed [ 125.171897][ T8186] netlink: 12 bytes leftover after parsing attributes in process `syz.5.627'. [ 125.285091][ T8192] tipc: Enabling of bearer rejected, failed to enable media [ 125.312397][ T8173] lo speed is unknown, defaulting to 1000 [ 125.547789][ T8200] delete_channel: no stack [ 125.820326][ T8218] netlink: 32 bytes leftover after parsing attributes in process `syz.1.633'. [ 125.878729][ T8220] netlink: 'syz.3.635': attribute type 2 has an invalid length. [ 125.909816][ T8220] netlink: 188 bytes leftover after parsing attributes in process `syz.3.635'. [ 126.145832][ T8229] netlink: 8 bytes leftover after parsing attributes in process `syz.3.637'. [ 126.157269][ T8229] netlink: 4 bytes leftover after parsing attributes in process `syz.3.637'. [ 126.509658][ T8252] netlink: 4 bytes leftover after parsing attributes in process `syz.1.642'. [ 126.539184][ T8249] netlink: 112 bytes leftover after parsing attributes in process `syz.4.641'. [ 126.900699][ T8272] ip6t_srh: unknown srh match flags 4001 [ 127.256552][ T8296] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 127.371784][ T8302] bridge0: entered promiscuous mode [ 127.398974][ T8302] macvlan2: entered promiscuous mode [ 127.430761][ T8304] macvlan3: entered promiscuous mode [ 128.255530][ T8353] xt_TPROXY: Can be used only with -p tcp or -p udp [ 128.500542][ T8360] syzkaller1: entered promiscuous mode [ 128.528013][ T8360] syzkaller1: entered allmulticast mode [ 128.571374][ T8365] netlink: 'syz.2.666': attribute type 21 has an invalid length. [ 128.628918][ T8365] netlink: 'syz.2.666': attribute type 5 has an invalid length. [ 129.067109][ T8391] netlink: 'syz.5.673': attribute type 4 has an invalid length. [ 129.123260][ T8395] netlink: 'syz.5.673': attribute type 4 has an invalid length. [ 129.499679][ T8423] __nla_validate_parse: 3 callbacks suppressed [ 129.499697][ T8423] netlink: 8 bytes leftover after parsing attributes in process `syz.2.682'. [ 129.639595][ T8426] netlink: 8 bytes leftover after parsing attributes in process `syz.4.683'. [ 129.793590][ T8426] : entered promiscuous mode [ 129.852103][ T8428] lo speed is unknown, defaulting to 1000 [ 130.032318][ T8444] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 130.189869][ T8452] netlink: 'syz.5.689': attribute type 10 has an invalid length. [ 130.252879][ T8452] team0: Device veth1_macvtap failed to register rx_handler [ 130.642642][ T8479] netlink: 4 bytes leftover after parsing attributes in process `syz.5.695'. [ 131.326443][ T8528] netlink: 72 bytes leftover after parsing attributes in process `syz.1.704'. [ 131.371048][ T8528] netlink: 72 bytes leftover after parsing attributes in process `syz.1.704'. [ 131.390583][ T8528] netlink: 72 bytes leftover after parsing attributes in process `syz.1.704'. [ 131.654317][ T7776] tipc: Subscription rejected, illegal request [ 131.721242][ T8547] netlink: 72 bytes leftover after parsing attributes in process `syz.4.707'. [ 131.889371][ T8561] netlink: 4 bytes leftover after parsing attributes in process `syz.3.713'. [ 131.905429][ T8561] netlink: 4 bytes leftover after parsing attributes in process `syz.3.713'. [ 131.981721][ T8564] netlink: 72 bytes leftover after parsing attributes in process `syz.5.714'. [ 132.037659][ T8566] netlink: 'syz.3.715': attribute type 1 has an invalid length. [ 132.592371][ T8594] netlink: 'syz.4.721': attribute type 2 has an invalid length. [ 132.852172][ T8609] xt_policy: output policy not valid in PREROUTING and INPUT [ 133.965655][ T8668] netlink: 'syz.2.742': attribute type 1 has an invalid length. [ 133.973487][ T8668] netlink: 'syz.2.742': attribute type 2 has an invalid length. [ 134.159746][ T8678] netlink: 'syz.3.748': attribute type 27 has an invalid length. [ 134.597126][ T8702] dccp_invalid_packet: P.Data Offset(100) too large [ 135.240422][ T8741] __nla_validate_parse: 12 callbacks suppressed [ 135.240443][ T8741] netlink: 16 bytes leftover after parsing attributes in process `syz.3.768'. [ 135.292299][ T8749] netlink: 'syz.4.769': attribute type 4 has an invalid length. [ 135.309564][ T8749] netlink: 152 bytes leftover after parsing attributes in process `syz.4.769'. [ 135.339836][ T8749] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 135.621256][ T8761] netlink: 28 bytes leftover after parsing attributes in process `syz.5.774'. [ 135.803685][ T8771] netlink: 'syz.1.778': attribute type 1 has an invalid length. [ 135.804628][ T8770] tipc: Started in network mode [ 135.837895][ T8770] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711 [ 135.855651][ T8774] netlink: 28 bytes leftover after parsing attributes in process `syz.1.778'. [ 135.865492][ T8770] tipc: Enabled bearer , priority 10 [ 135.877035][ T8770] netlink: 24 bytes leftover after parsing attributes in process `syz.2.777'. [ 135.893010][ T8773] netlink: 8 bytes leftover after parsing attributes in process `syz.5.779'. [ 135.921233][ T8771] 8021q: adding VLAN 0 to HW filter on device bond2 [ 135.958801][ T8779] ip6erspan0: entered promiscuous mode [ 136.032397][ T8779] bond2: (slave ip6erspan0): making interface the new active one [ 136.055819][ T8779] bond2: (slave ip6erspan0): Enslaving as an active interface with an up link [ 136.139416][ T8770] netlink: 8 bytes leftover after parsing attributes in process `syz.2.777'. [ 136.188407][ T8770] netlink: 20 bytes leftover after parsing attributes in process `syz.2.777'. [ 136.246414][ T8795] netlink: 24 bytes leftover after parsing attributes in process `syz.5.785'. [ 136.296331][ T8794] netlink: 88 bytes leftover after parsing attributes in process `syz.1.784'. [ 136.845824][ T5946] tipc: Node number set to 4269801488 [ 136.886405][ T8824] netlink: 'syz.5.794': attribute type 10 has an invalid length. [ 137.008100][ T8824] team0: Port device geneve0 added [ 137.036373][ T8831] 8021q: VLANs not supported on tunl0 [ 137.690771][ T8866] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 138.422839][ T8915] netlink: 'syz.2.825': attribute type 178 has an invalid length. [ 139.176778][ T8960] netlink: 'syz.4.839': attribute type 1 has an invalid length. [ 139.443878][ T8974] RDS: rds_bind could not find a transport for ::ffff:172.30.0.6, load rds_tcp or rds_rdma? [ 139.459428][ T8968] 8021q: adding VLAN 0 to HW filter on device bond2 [ 139.563560][ T8978] A link change request failed with some changes committed already. Interface veth1_macvtap may have been left with an inconsistent configuration, please check. [ 139.632810][ T8978] netlink: 'syz.5.846': attribute type 7 has an invalid length. [ 139.673914][ T8978] netlink: 'syz.5.846': attribute type 8 has an invalid length. [ 139.774522][ T8980] syzkaller0: entered promiscuous mode [ 139.791543][ T8980] syzkaller0: entered allmulticast mode [ 139.808897][ T8978] team0: entered promiscuous mode [ 139.814715][ T8978] team_slave_0: entered promiscuous mode [ 139.821213][ T8978] team_slave_1: entered promiscuous mode [ 139.827628][ T8978] geneve0: entered promiscuous mode [ 139.835116][ T8978] bridge0: entered promiscuous mode [ 139.846655][ T8978] gretap0: entered promiscuous mode [ 139.882143][ T1149] syzkaller0: tun_net_xmit 48 [ 139.923708][ T8982] x_tables: duplicate underflow at hook 1 [ 140.159840][ T9006] SET target dimension over the limit! [ 141.304346][ T9004] vlan2: entered promiscuous mode [ 141.309620][ T9004] bridge_slave_0: entered promiscuous mode [ 141.319901][ T9004] vlan2: entered allmulticast mode [ 141.337920][ T9004] bridge_slave_0: entered allmulticast mode [ 141.396336][ T9019] __nla_validate_parse: 23 callbacks suppressed [ 141.396354][ T9019] netlink: 12 bytes leftover after parsing attributes in process `syz.2.858'. [ 141.594613][ T9027] netlink: 20 bytes leftover after parsing attributes in process `syz.1.861'. [ 141.652858][ T9027] netlink: 20 bytes leftover after parsing attributes in process `syz.1.861'. [ 141.667658][ T9031] IPVS: set_ctl: invalid protocol: 33 172.20.20.19:20002 [ 141.669872][ T7193] bond0: (slave bond_slave_0): link status definitely down, disabling slave [ 142.365764][ T9069] netlink: 'syz.5.872': attribute type 1 has an invalid length. [ 142.504633][ T9080] netlink: 128 bytes leftover after parsing attributes in process `syz.1.870'. [ 142.563232][ T9080] netlink: 20 bytes leftover after parsing attributes in process `syz.1.870'. [ 142.603650][ T9084] netlink: 12 bytes leftover after parsing attributes in process `syz.5.875'. [ 142.776948][ T9092] netlink: 48 bytes leftover after parsing attributes in process `syz.3.877'. [ 142.777874][ T9094] netlink: 48 bytes leftover after parsing attributes in process `syz.3.877'. [ 142.884545][ T9092] netlink: 'syz.3.877': attribute type 11 has an invalid length. [ 142.904121][ T9092] netlink: 224 bytes leftover after parsing attributes in process `syz.3.877'. [ 143.118129][ T9111] netlink: 44 bytes leftover after parsing attributes in process `syz.4.883'. [ 143.654304][ T9138] netlink: 'syz.3.891': attribute type 9 has an invalid length. [ 143.749149][ T9138] tipc: Enabling of bearer rejected, media not registered [ 144.236920][ T9161] sctp: [Deprecated]: syz.3.897 (pid 9161) Use of struct sctp_assoc_value in delayed_ack socket option. [ 144.236920][ T9161] Use struct sctp_sack_info instead [ 144.790245][ T9200] batman_adv: batadv0: Adding interface: dummy0 [ 144.830467][ T9200] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 144.865405][ T9200] batman_adv: batadv0: Interface activated: dummy0 [ 144.880268][ T9200] batadv0: mtu less than device minimum [ 144.912767][ T9200] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 144.924719][ T9200] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 144.936550][ T9200] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 144.948308][ T9200] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 144.960101][ T9200] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 144.971974][ T9200] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 144.983629][ T9200] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 144.995415][ T9200] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 144.998009][ T9208] sctp: [Deprecated]: syz.3.911 (pid 9208) Use of int in max_burst socket option. [ 144.998009][ T9208] Use struct sctp_assoc_value instead [ 145.007183][ T9200] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 145.061069][ T9201] macvlan0: entered promiscuous mode [ 145.084555][ T9201] macvlan0: entered allmulticast mode [ 145.091502][ T9201] batadv0: entered promiscuous mode [ 145.098256][ T9201] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 145.149681][ T9201] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 146.623061][ T9300] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 146.706428][ T9304] __nla_validate_parse: 8 callbacks suppressed [ 146.706447][ T9304] netlink: 8 bytes leftover after parsing attributes in process `syz.5.935'. [ 146.727698][ T977] IPVS: starting estimator thread 0... [ 146.728149][ T9304] netlink: 24 bytes leftover after parsing attributes in process `syz.5.935'. [ 146.819918][ T9311] netlink: 24 bytes leftover after parsing attributes in process `syz.4.940'. [ 146.830203][ T9307] IPVS: using max 35 ests per chain, 84000 per kthread [ 146.941123][ T9317] xt_TPROXY: Can be used only with -p tcp or -p udp [ 146.982349][ T9321] netlink: 'syz.1.943': attribute type 1 has an invalid length. [ 147.004285][ T9321] netlink: 8 bytes leftover after parsing attributes in process `syz.1.943'. [ 147.015466][ T9321] netlink: 12 bytes leftover after parsing attributes in process `syz.1.943'. [ 147.156567][ T9327] netlink: 12 bytes leftover after parsing attributes in process `syz.4.946'. [ 147.378624][ T9340] syzkaller0: entered promiscuous mode [ 147.387024][ T9340] syzkaller0: entered allmulticast mode [ 147.625006][ T56] Bluetooth: hci5: command 0x0405 tx timeout [ 147.705056][ T9351] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.952'. [ 149.099404][ T9364] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 149.116625][ T9364] macsec1: entered allmulticast mode [ 149.124605][ T9364] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 149.137424][ T9364] mac80211_hwsim hwsim6 wlan0: left allmulticast mode [ 149.148218][ T9364] mac80211_hwsim hwsim6 wlan0: left promiscuous mode [ 149.162905][ T9374] netlink: 4 bytes leftover after parsing attributes in process `syz.2.959'. [ 149.198389][ T9381] netlink: 8 bytes leftover after parsing attributes in process `syz.1.956'. [ 149.225737][ T9376] netlink: 16 bytes leftover after parsing attributes in process `syz.1.956'. [ 149.438942][ T9389] netlink: 'syz.4.963': attribute type 10 has an invalid length. [ 149.498684][ T9389] team0: Device veth0_macvtap failed to register rx_handler [ 149.525711][ T9395] netlink: 'syz.3.964': attribute type 1 has an invalid length. [ 149.567699][ T9397] xt_HMARK: spi-set and port-set can't be combined [ 149.780084][ T9405] bond1: entered promiscuous mode [ 149.785870][ T9405] bond1: entered allmulticast mode [ 150.150749][ T9423] tipc: Enabling of bearer rejected, failed to enable media [ 150.198594][ T9429] netlink: 'syz.3.975': attribute type 12 has an invalid length. [ 150.214307][ T9429] netlink: 'syz.3.975': attribute type 29 has an invalid length. [ 150.937934][ T5946] net_ratelimit: 12 callbacks suppressed [ 150.937953][ T5946] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:17 [ 151.130961][ T9481] sctp: [Deprecated]: syz.4.991 (pid 9481) Use of struct sctp_assoc_value in delayed_ack socket option. [ 151.130961][ T9481] Use struct sctp_sack_info instead [ 151.568998][ T9506] netlink: 'syz.2.999': attribute type 11 has an invalid length. [ 151.569242][ T9504] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 151.735247][ T9504] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 151.772723][ T9527] __nla_validate_parse: 12 callbacks suppressed [ 151.772741][ T9527] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1000'. [ 151.877420][ T9532] xt_TPROXY: Can be used only with -p tcp or -p udp [ 151.899877][ T9528] bridge2: entered allmulticast mode [ 152.139767][ T9538] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1006'. [ 152.240526][ T9546] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1009'. [ 152.462065][ T9555] vlan0: entered promiscuous mode [ 152.516802][ T9559] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1015'. [ 152.722555][ T9574] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 152.748908][ T9575] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 153.061139][ T9593] syz_tun: entered allmulticast mode [ 153.167969][ T9599] gtp0: entered promiscuous mode [ 153.199460][ T9599] gtp0: entered allmulticast mode [ 153.242914][ T9605] netlink: 788 bytes leftover after parsing attributes in process `syz.4.1029'. [ 153.441086][ T9609] syz_tun: left allmulticast mode [ 153.519353][ T9628] netlink: 'syz.1.1033': attribute type 4 has an invalid length. [ 154.050258][ T9653] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1042'. [ 154.171758][ T9662] netlink: 165 bytes leftover after parsing attributes in process `syz.2.1045'. [ 154.206504][ T9664] IPv6: sit2: Disabled Multicast RS [ 154.240510][ T9664] sit2: entered allmulticast mode [ 154.312618][ T9669] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1048'. [ 154.336394][ T9666] netlink: 'syz.3.1047': attribute type 1 has an invalid length. [ 154.364077][ T9666] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.1047'. [ 154.916962][ T9693] netlink: 'syz.5.1057': attribute type 1 has an invalid length. [ 154.973139][ T9697] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1059'. [ 154.989895][ T9693] 8021q: adding VLAN 0 to HW filter on device bond2 [ 155.037212][ T9703] bond2: (slave gretap1): making interface the new active one [ 155.118158][ T9703] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 156.122303][ T9776] netlink: 'syz.5.1080': attribute type 1 has an invalid length. [ 156.530794][ T9797] netlink: 'syz.4.1088': attribute type 10 has an invalid length. [ 156.626218][ T9797] team0: Port device geneve0 added [ 156.714233][ T9803] Bluetooth: MGMT ver 1.23 [ 156.799283][ T9807] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 157.048953][ T9818] netlink: 'syz.3.1098': attribute type 178 has an invalid length. [ 157.078150][ T9824] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 157.092359][ T5918] IPVS: starting estimator thread 0... [ 157.118497][ T9824] __nla_validate_parse: 9 callbacks suppressed [ 157.118514][ T9824] netlink: 100 bytes leftover after parsing attributes in process `syz.5.1099'. [ 157.204655][ T9825] IPVS: using max 32 ests per chain, 76800 per kthread [ 157.299704][ T9837] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1103'. [ 157.313566][ T9837] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1103'. [ 157.335552][ T9837] netlink: 'syz.2.1103': attribute type 1 has an invalid length. [ 157.343317][ T9837] netlink: 10 bytes leftover after parsing attributes in process `syz.2.1103'. [ 157.358315][ T9837] block nbd1: Unsupported socket: shutdown callout must be supported. [ 157.550396][ T9846] xt_CT: You must specify a L4 protocol and not use inversions on it [ 157.712703][ T9858] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 157.764910][ T9862] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1110'. [ 157.783450][ T9861] netlink: 'syz.5.1109': attribute type 4 has an invalid length. [ 157.805653][ T9862] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1110'. [ 158.526774][ T9903] netlink: 55 bytes leftover after parsing attributes in process `syz.4.1125'. [ 158.654787][ T9910] netdevsim netdevsim5 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 158.683750][ T9910] netdevsim netdevsim5 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 158.695898][ T9910] netdevsim netdevsim5 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 158.704398][ T9910] netdevsim netdevsim5 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 158.713055][ T9910] geneve2: entered promiscuous mode [ 158.727176][ T9910] geneve2: entered allmulticast mode [ 158.739678][ T9910] netdevsim netdevsim5 eth0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 158.770469][ T9910] netdevsim netdevsim5 eth1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 158.788489][ T9910] netdevsim netdevsim5 eth2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 158.801145][ T9910] netdevsim netdevsim5 eth3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 158.921042][ T9921] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1127'. [ 159.483130][ T9966] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 159.508678][ T9969] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1145'. [ 160.125566][ T9998] dccp_v4_rcv: dropped packet with invalid checksum [ 160.213302][T10002] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1157'. [ 160.282619][T10005] bond0: option mode: unable to set because the bond device has slaves [ 160.459302][T10014] veth1_macvtap: left promiscuous mode [ 160.484210][T10014] macsec0: entered promiscuous mode [ 160.584542][T10021] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 160.802985][T10031] @ÿŸÂnÖ8î·8: renamed from bond_slave_0 (while UP) [ 160.972784][T10045] netlink: 'syz.4.1172': attribute type 2 has an invalid length. [ 161.114610][T10049] x_tables: duplicate underflow at hook 2 [ 162.340746][T10107] __nla_validate_parse: 5 callbacks suppressed [ 162.340764][T10107] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1191'. [ 162.690376][T10130] xt_CONNSECMARK: invalid mode: 0 [ 162.966392][T10141] bridge0: port 2(gretap0) entered blocking state [ 163.004078][T10141] bridge0: port 2(gretap0) entered disabled state [ 163.016519][T10141] gretap0: entered allmulticast mode [ 163.043549][T10141] gretap0: entered promiscuous mode [ 163.183083][T10151] netlink: 'syz.2.1206': attribute type 7 has an invalid length. [ 163.253455][T10155] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1206'. [ 163.313517][T10157] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1208'. [ 163.326488][T10157] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1208'. [ 163.337442][T10157] netlink: 'syz.3.1208': attribute type 14 has an invalid length. [ 163.346385][T10157] netlink: 'syz.3.1208': attribute type 13 has an invalid length. [ 163.469742][T10165] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.1211'. [ 164.081223][T10202] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1221'. [ 164.678655][T10230] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1229'. [ 164.799198][T10234] netlink: 'syz.1.1231': attribute type 1 has an invalid length. [ 164.807051][T10234] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1231'. [ 165.375337][T10264] netlink: 5 bytes leftover after parsing attributes in process `syz.3.1238'. [ 165.386046][T10263] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1240'. [ 165.402564][T10264] 0ªÃøÂFNð¡: renamed from bond_slave_0 (while UP) [ 165.415833][T10264] 0ªÃøÂFNð¡: entered allmulticast mode [ 165.476153][T10263] vlan0: entered allmulticast mode [ 165.481334][T10263] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode [ 165.527256][T10267] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 165.765073][T10282] raw_sendmsg: syz.4.1245 forgot to set AF_INET. Fix it! [ 165.981413][T10295] netlink: 'syz.5.1247': attribute type 1 has an invalid length. [ 166.105957][ T56] Bluetooth: hci5: command 0x0405 tx timeout [ 166.869475][T10345] xt_bpf: check failed: parse error [ 167.413653][T10373] __nla_validate_parse: 10 callbacks suppressed [ 167.413671][T10373] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1271'. [ 167.431332][T10375] netem: change failed [ 167.459845][T10373] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 167.725604][T10386] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1277'. [ 167.992499][T10409] bridge_slave_0: left allmulticast mode [ 167.999353][T10409] bridge_slave_0: left promiscuous mode [ 168.006903][T10409] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.022803][T10409] bridge_slave_1: left allmulticast mode [ 168.030699][T10409] bridge_slave_1: left promiscuous mode [ 168.037250][T10409] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.051578][T10409] bond0: (slave 1@ÿŸÂnÖ8î·8): Releasing backup interface [ 168.068386][T10409] bond0: (slave bond_slave_1): Releasing backup interface [ 168.082953][T10409] team_slave_0: left promiscuous mode [ 168.103204][T10409] team0: Port device team_slave_0 removed [ 168.104158][T10415] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1285'. [ 168.115097][T10409] team_slave_1: left promiscuous mode [ 168.139922][T10409] team0: Port device team_slave_1 removed [ 168.148727][T10409] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 168.156806][T10409] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 168.167426][T10409] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 168.177713][T10409] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 168.192283][T10409] geneve0: left promiscuous mode [ 168.210477][T10409] team0: Port device geneve0 removed [ 168.222690][T10409] bond2: (slave gretap1): Releasing active interface [ 168.636520][T10428] netlink: 504 bytes leftover after parsing attributes in process `syz.1.1289'. [ 168.702841][T10439] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 168.840929][T10447] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1294'. [ 168.874428][T10447] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1294'. [ 169.005554][T10455] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1296'. [ 169.273003][T10447] team0 (unregistering): Port device team_slave_1 removed [ 169.324600][T10453] pimreg: entered allmulticast mode [ 169.331966][T10454] wg1: entered promiscuous mode [ 169.564452][T10482] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1301'. [ 169.752102][T10493] netlink: 'syz.5.1304': attribute type 1 has an invalid length. [ 169.778386][T10493] netlink: 224 bytes leftover after parsing attributes in process `syz.5.1304'. [ 169.799999][T10493] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1304'. [ 169.814503][T10487] syzkaller1: entered promiscuous mode [ 169.820007][T10487] syzkaller1: entered allmulticast mode [ 169.873129][T10487] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 170.452514][T10539] netlink: 'syz.1.1320': attribute type 10 has an invalid length. [ 170.713782][T10539] team0: Device ipvlan1 is up. Set it down before adding it as a team port [ 171.108610][T10563] netem: change failed [ 171.808708][T10608] tipc: MTU too low for tipc bearer [ 172.212751][T10640] veth0: entered promiscuous mode [ 172.224790][T10637] veth0: left promiscuous mode [ 172.372922][T10645] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 172.651885][T10664] pim6reg: entered allmulticast mode [ 172.692339][T10664] __nla_validate_parse: 8 callbacks suppressed [ 172.692356][T10664] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1358'. [ 172.724913][T10664] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1358'. [ 172.825748][T10673] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1361'. [ 173.153589][T10695] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 173.316101][ T5946] IPVS: starting estimator thread 0... [ 173.327944][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805cc5c400: rx timeout, send abort [ 173.337459][T10701] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 173.415421][T10704] IPVS: using max 28 ests per chain, 67200 per kthread [ 173.578777][T10727] ipt_REJECT: TCP_RESET invalid for non-tcp [ 173.828050][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805cc5cc00: rx timeout, send abort [ 173.836953][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805cc5c400: abort rx timeout. Force session deactivation [ 173.937944][T10735] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1379'. [ 173.959907][T10740] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1380'. [ 174.063144][T10746] netlink: 1 bytes leftover after parsing attributes in process `syz.2.1383'. [ 174.078632][T10748] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1383'. [ 174.336418][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805cc5cc00: abort rx timeout. Force session deactivation [ 191.327340][T10796] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1395'. [ 191.516819][T10811] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1402'. [ 191.856097][T10823] batadv_slave_1: entered promiscuous mode [ 191.866817][T10822] batadv_slave_1: left promiscuous mode [ 192.390877][T10837] netlink: 'syz.1.1410': attribute type 1 has an invalid length. [ 192.402409][T10837] netlink: 220 bytes leftover after parsing attributes in process `syz.1.1410'. [ 192.570964][T10845] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1412'. [ 192.681547][T10849] netlink: 'syz.3.1411': attribute type 13 has an invalid length. [ 192.704092][T10849] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1411'. [ 192.752639][T10849] net veth1_virt_wifi virt_wifi0: refused to change device tx_queue_len [ 192.878530][T10854] netlink: 'syz.1.1416': attribute type 21 has an invalid length. [ 192.902503][T10853] syzkaller1: entered promiscuous mode [ 192.939528][T10853] syzkaller1: entered allmulticast mode [ 193.744481][T10902] FAULT_INJECTION: forcing a failure. [ 193.744481][T10902] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 193.779839][T10902] CPU: 1 UID: 0 PID: 10902 Comm: syz.4.1430 Not tainted 6.15.0-rc1-syzkaller-00141-gcfe82469a00f #0 PREEMPT(full) [ 193.779884][T10902] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 193.779903][T10902] Call Trace: [ 193.779910][T10902] [ 193.779917][T10902] dump_stack_lvl+0x241/0x360 [ 193.779949][T10902] ? __pfx_dump_stack_lvl+0x10/0x10 [ 193.779983][T10902] ? __pfx__printk+0x10/0x10 [ 193.780020][T10902] should_fail_ex+0x424/0x570 [ 193.780043][T10902] _copy_from_user+0x2d/0xb0 [ 193.780068][T10902] copy_msghdr_from_user+0xb3/0x580 [ 193.780097][T10902] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 193.780116][T10902] ? __fget_files+0x2a/0x420 [ 193.780134][T10902] ? __fget_files+0x2a/0x420 [ 193.780159][T10902] __sys_sendmsg+0x20a/0x360 [ 193.780182][T10902] ? __pfx___sys_sendmsg+0x10/0x10 [ 193.780251][T10902] ? do_syscall_64+0xb6/0x230 [ 193.780275][T10902] do_syscall_64+0xf3/0x230 [ 193.780296][T10902] ? clear_bhb_loop+0x45/0xa0 [ 193.780315][T10902] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 193.780331][T10902] RIP: 0033:0x7fe29eb8d169 [ 193.780346][T10902] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 193.780359][T10902] RSP: 002b:00007fe29f9e8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 193.780378][T10902] RAX: ffffffffffffffda RBX: 00007fe29eda5fa0 RCX: 00007fe29eb8d169 [ 193.780389][T10902] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 193.780400][T10902] RBP: 00007fe29f9e8090 R08: 0000000000000000 R09: 0000000000000000 [ 193.780410][T10902] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 193.780420][T10902] R13: 0000000000000000 R14: 00007fe29eda5fa0 R15: 00007ffe709cf528 [ 193.780447][T10902] [ 193.999218][T10907] netlink: 204 bytes leftover after parsing attributes in process `syz.2.1433'. [ 194.071557][T10909] netlink: 'syz.5.1434': attribute type 1 has an invalid length. [ 194.133435][T10909] netlink: 244 bytes leftover after parsing attributes in process `syz.5.1434'. [ 194.493933][T10923] netlink: 'syz.5.1441': attribute type 10 has an invalid length. [ 194.534969][T10923] hsr0: entered promiscuous mode [ 194.559271][T10923] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 194.603756][T10923] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 194.633049][T10923] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 194.649284][T10931] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1442'. [ 194.696347][T10935] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1443'. [ 194.728910][T10935] unsupported nlmsg_type 40 [ 194.957059][T10940] netlink: 'syz.5.1444': attribute type 10 has an invalid length. [ 194.968894][T10943] FAULT_INJECTION: forcing a failure. [ 194.968894][T10943] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 195.032880][T10943] CPU: 1 UID: 0 PID: 10943 Comm: syz.2.1446 Not tainted 6.15.0-rc1-syzkaller-00141-gcfe82469a00f #0 PREEMPT(full) [ 195.032904][T10943] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 195.032914][T10943] Call Trace: [ 195.032921][T10943] [ 195.032929][T10943] dump_stack_lvl+0x241/0x360 [ 195.032959][T10943] ? __pfx_dump_stack_lvl+0x10/0x10 [ 195.032983][T10943] ? __pfx__printk+0x10/0x10 [ 195.033018][T10943] should_fail_ex+0x424/0x570 [ 195.033041][T10943] _copy_from_user+0x2d/0xb0 [ 195.033066][T10943] move_addr_to_kernel+0x7f/0x170 [ 195.033090][T10943] copy_msghdr_from_user+0x477/0x580 [ 195.033118][T10943] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 195.033137][T10943] ? __fget_files+0x2a/0x420 [ 195.033156][T10943] ? __fget_files+0x2a/0x420 [ 195.033180][T10943] __sys_sendmsg+0x20a/0x360 [ 195.033213][T10943] ? __pfx___sys_sendmsg+0x10/0x10 [ 195.033273][T10943] ? rcu_is_watching+0x15/0xb0 [ 195.033294][T10943] ? trace_sys_enter+0x25/0x120 [ 195.033318][T10943] do_syscall_64+0xf3/0x230 [ 195.033339][T10943] ? clear_bhb_loop+0x45/0xa0 [ 195.033359][T10943] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.033375][T10943] RIP: 0033:0x7fc0c7f8d169 [ 195.033389][T10943] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 195.033402][T10943] RSP: 002b:00007fc0c8e8c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 195.033420][T10943] RAX: ffffffffffffffda RBX: 00007fc0c81a5fa0 RCX: 00007fc0c7f8d169 [ 195.033432][T10943] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 195.033442][T10943] RBP: 00007fc0c8e8c090 R08: 0000000000000000 R09: 0000000000000000 [ 195.033451][T10943] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 195.033461][T10943] R13: 0000000000000000 R14: 00007fc0c81a5fa0 R15: 00007fff995c6f68 [ 195.033488][T10943] [ 195.321565][T10940] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 195.430192][T10953] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1451'. [ 195.616887][T10964] syzkaller0: entered allmulticast mode [ 195.778610][T10975] netlink: 'syz.1.1457': attribute type 2 has an invalid length. [ 195.961309][T10983] netlink: 'syz.3.1462': attribute type 1 has an invalid length. [ 196.290511][T11005] bridge0: port 2(bridge_slave_1) entered disabled state [ 196.299245][T11005] bridge0: port 1(bridge_slave_0) entered disabled state [ 196.346995][ T5846] Bluetooth: hci4: command 0x0406 tx timeout [ 196.353160][ T5852] Bluetooth: hci3: command 0x0406 tx timeout [ 196.353172][ T5854] Bluetooth: hci2: command 0x0406 tx timeout [ 196.739797][ T7776] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 196.766516][T11023] netlink: 'syz.5.1470': attribute type 39 has an invalid length. [ 196.772642][ T7776] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 197.140939][T11038] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 101 [ 197.209220][T11042] netlink: 'syz.5.1477': attribute type 28 has an invalid length. [ 197.221041][T11042] __nla_validate_parse: 3 callbacks suppressed [ 197.221056][T11042] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1477'. [ 197.447044][T11050] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1479'. [ 197.464112][T11050] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1479'. [ 197.788514][T11050] team0 (unregistering): Port device team_slave_0 removed [ 197.822072][T11050] team0 (unregistering): Port device team_slave_1 removed [ 197.937596][T11078] netlink: 576 bytes leftover after parsing attributes in process `syz.1.1486'. [ 198.683038][T11102] tun0: tun_chr_ioctl cmd 1074025675 [ 198.702108][T11102] tun0: persist disabled [ 198.708464][T11101] tun0: tun_chr_ioctl cmd 1074025675 [ 198.730530][T11101] tun0: persist disabled [ 198.894505][T11122] netlink: 192 bytes leftover after parsing attributes in process `syz.1.1497'. [ 198.928977][T11122] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1497'. [ 199.049876][T11129] FAULT_INJECTION: forcing a failure. [ 199.049876][T11129] name failslab, interval 1, probability 0, space 0, times 0 [ 199.068587][T11129] CPU: 0 UID: 0 PID: 11129 Comm: syz.3.1500 Not tainted 6.15.0-rc1-syzkaller-00141-gcfe82469a00f #0 PREEMPT(full) [ 199.068621][T11129] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 199.068630][T11129] Call Trace: [ 199.068637][T11129] [ 199.068644][T11129] dump_stack_lvl+0x241/0x360 [ 199.068675][T11129] ? __pfx_dump_stack_lvl+0x10/0x10 [ 199.068698][T11129] ? __pfx__printk+0x10/0x10 [ 199.068725][T11129] ? __pfx___might_resched+0x10/0x10 [ 199.068749][T11129] should_fail_ex+0x424/0x570 [ 199.068772][T11129] should_failslab+0xac/0x100 [ 199.068796][T11129] kmem_cache_alloc_node_noprof+0x7d/0x3b0 [ 199.068820][T11129] ? __alloc_skb+0x1c2/0x480 [ 199.068840][T11129] __alloc_skb+0x1c2/0x480 [ 199.068860][T11129] ? __pfx___alloc_skb+0x10/0x10 [ 199.068875][T11129] ? __lock_acquire+0xad5/0xd80 [ 199.068902][T11129] alloc_skb_with_frags+0xc3/0x830 [ 199.068935][T11129] sock_alloc_send_pskb+0x91c/0xa70 [ 199.068974][T11129] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 199.068999][T11129] ? dev_get_by_index+0x23/0x2d0 [ 199.069020][T11129] ? dev_get_by_index+0x23/0x2d0 [ 199.069044][T11129] packet_sendmsg+0x4322/0x6ed0 [ 199.069065][T11129] ? __lock_acquire+0xad5/0xd80 [ 199.069102][T11129] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 199.069137][T11129] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 199.069185][T11129] ? __pfx_packet_sendmsg+0x10/0x10 [ 199.069204][T11129] ? aa_sk_perm+0x96f/0xac0 [ 199.069233][T11129] ? __pfx_aa_sk_perm+0x10/0x10 [ 199.069253][T11129] ? __import_iovec+0x585/0x830 [ 199.069277][T11129] ? aa_sock_msg_perm+0x91/0x160 [ 199.069307][T11129] ? __pfx_packet_sendmsg+0x10/0x10 [ 199.069325][T11129] __sock_sendmsg+0x221/0x270 [ 199.069350][T11129] ____sys_sendmsg+0x523/0x860 [ 199.069374][T11129] ? __pfx_____sys_sendmsg+0x10/0x10 [ 199.069389][T11129] ? __fget_files+0x2a/0x420 [ 199.069408][T11129] ? __fget_files+0x2a/0x420 [ 199.069430][T11129] __sys_sendmsg+0x271/0x360 [ 199.069453][T11129] ? __pfx___sys_sendmsg+0x10/0x10 [ 199.069521][T11129] ? do_syscall_64+0xb6/0x230 [ 199.069545][T11129] do_syscall_64+0xf3/0x230 [ 199.069564][T11129] ? clear_bhb_loop+0x45/0xa0 [ 199.069584][T11129] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.069607][T11129] RIP: 0033:0x7f92d1f8d169 [ 199.069622][T11129] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 199.069634][T11129] RSP: 002b:00007f92d2ed3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 199.069652][T11129] RAX: ffffffffffffffda RBX: 00007f92d21a5fa0 RCX: 00007f92d1f8d169 [ 199.069664][T11129] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 199.069674][T11129] RBP: 00007f92d2ed3090 R08: 0000000000000000 R09: 0000000000000000 [ 199.069684][T11129] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 199.069694][T11129] R13: 0000000000000000 R14: 00007f92d21a5fa0 R15: 00007ffc164bdf08 [ 199.069718][T11129] [ 199.385635][ C0] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:17 [ 199.549147][T11133] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:24) already exists on: dummy0 [ 199.563914][T11133] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.851036][T11153] batman_adv: batadv0: Adding interface: dummy0 [ 199.860017][T11153] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 199.894669][T11153] batman_adv: batadv0: Interface activated: dummy0 [ 199.920609][T11136] sch_fq: defrate 0 ignored. [ 200.806086][T11210] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1525'. [ 200.844198][T11210] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1525'. [ 200.887301][T11221] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1529'. [ 200.898819][T11221] validate_nla: 1 callbacks suppressed [ 200.898835][T11221] netlink: 'syz.2.1529': attribute type 1 has an invalid length. [ 200.926965][T11221] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1529'. [ 201.148621][T11218] team_slave_0: entered promiscuous mode [ 201.168592][T11218] team_slave_0: entered allmulticast mode [ 201.211558][T11231] netlink: 'syz.4.1532': attribute type 33 has an invalid length. [ 201.303233][T11238] IPVS: Unknown mcast interface: ipvlan1 [ 201.529531][T11246] tipc: Started in network mode [ 201.548329][T11246] tipc: Node identity ac1414aa, cluster identity 4711 [ 201.555763][T11246] tipc: Enabling of bearer rejected, failed to enable media [ 201.577871][T11251] .: renamed from bond0 (while UP) [ 201.627419][T11253] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 201.691647][T11260] bridge0: port 2(bridge_slave_1) entered disabled state [ 201.699523][T11260] bridge0: port 1(bridge_slave_0) entered disabled state [ 201.724718][T11258] netlink: 'syz.5.1541': attribute type 1 has an invalid length. [ 201.900527][T11266] netlink: 'syz.1.1544': attribute type 39 has an invalid length. [ 202.006807][T11271] batadv3: entered allmulticast mode [ 202.286661][T11293] __nla_validate_parse: 10 callbacks suppressed [ 202.286680][T11293] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1551'. [ 202.337559][T11299] siw: device registration error -23 [ 202.361562][T11300] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1553'. [ 202.573259][T11312] netlink: 'syz.5.1558': attribute type 1 has an invalid length. [ 202.711663][T11312] 8021q: adding VLAN 0 to HW filter on device bond5 [ 203.118377][T11351] netlink: 'syz.4.1570': attribute type 3 has an invalid length. [ 203.143704][T11351] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.1570'. [ 203.440326][T11371] bridge2: the hash_elasticity option has been deprecated and is always 16 [ 203.460232][T11371] bridge2: entered promiscuous mode [ 203.467743][T11371] bridge2: entered allmulticast mode [ 203.487899][T11380] ipvlan0: entered promiscuous mode [ 203.491435][T11381] ipt_rpfilter: unknown options [ 203.493120][T11380] ipvlan0: entered allmulticast mode [ 203.509569][T11380] veth0_vlan: entered allmulticast mode [ 203.530475][T11365] lo speed is unknown, defaulting to 1000 [ 203.544384][T11373] block nbd1: server does not support multiple connections per device. [ 203.556499][T11373] block nbd1: shutting down sockets [ 203.842459][T11392] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 203.851572][T11392] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 203.860185][T11392] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 203.868892][T11392] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 204.093180][T11406] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1584'. [ 204.124718][T11409] x_tables: ip_tables: udp match: only valid for protocol 17 [ 204.191702][T11413] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1584'. [ 204.439062][T11422] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1589'. [ 204.452068][T11423] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1590'. [ 204.494168][T11422] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1589'. [ 204.504942][ C1] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:17 [ 204.559272][T11422] netlink: 'syz.1.1589': attribute type 15 has an invalid length. [ 204.570576][T11427] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1591'. [ 205.980328][T11473] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1605'. [ 206.632704][ T56] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 206.642125][ T56] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 206.650992][ T56] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 206.661515][ T56] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 206.671212][ T56] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 206.719189][T11495] lo speed is unknown, defaulting to 1000 [ 207.069737][T11504] xt_CT: No such helper "pptp" [ 207.165865][T11495] chnl_net:caif_netlink_parms(): no params data found [ 207.358821][T11532] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1620'. [ 207.457262][T11525] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 207.633022][T11495] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.664253][T11495] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.684139][T11495] bridge_slave_0: entered allmulticast mode [ 207.762250][T11554] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1626'. [ 207.771831][T11495] bridge_slave_0: entered promiscuous mode [ 207.795452][T11495] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.807207][T11495] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.815050][T11495] bridge_slave_1: entered allmulticast mode [ 207.823028][T11495] bridge_slave_1: entered promiscuous mode [ 207.844669][T11549] netlink: 'syz.5.1624': attribute type 11 has an invalid length. [ 207.999340][T11495] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 208.055417][T11495] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 208.156004][T11570] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1632'. [ 208.270750][T11495] team0: Port device team_slave_0 added [ 208.298369][T11495] team0: Port device team_slave_1 added [ 208.366405][T11584] netlink: 312 bytes leftover after parsing attributes in process `syz.5.1636'. [ 208.481202][T11495] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 208.500580][T11495] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 208.528347][T11495] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 208.555702][T11495] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 208.570049][T11495] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 208.630616][T11604] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1640'. [ 208.636237][T11495] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 208.650955][T11604] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1640'. [ 208.705823][T11604] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1640'. [ 208.754374][ T56] Bluetooth: hci1: command tx timeout [ 208.777241][ T56] block nbd1: Receive control failed (result -107) [ 208.799539][T11495] hsr_slave_0: entered promiscuous mode [ 208.806738][T11495] hsr_slave_1: entered promiscuous mode [ 208.813121][T11495] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 208.821108][T11495] Cannot create hsr debugfs directory [ 208.827036][T11604] nbd1: detected capacity change from 0 to 256 [ 208.848569][T10798] block nbd1: Dead connection, failed to find a fallback [ 208.856967][T10798] block nbd1: shutting down sockets [ 208.862532][T10798] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 208.884078][T10798] Buffer I/O error on dev nbd1, logical block 0, async page read [ 208.903176][T10798] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 208.916956][T10798] Buffer I/O error on dev nbd1, logical block 0, async page read [ 208.925368][T10798] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 208.936451][T10798] Buffer I/O error on dev nbd1, logical block 0, async page read [ 208.953172][T11612] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1643'. [ 208.954531][T10798] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 208.969241][T11612] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1643'. [ 208.981678][T10798] Buffer I/O error on dev nbd1, logical block 0, async page read [ 209.003229][T11612] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1643'. [ 209.006321][T10798] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 209.029131][T10798] Buffer I/O error on dev nbd1, logical block 0, async page read [ 209.041628][T10798] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 209.065164][T10798] Buffer I/O error on dev nbd1, logical block 0, async page read [ 209.073193][T10798] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 209.109245][T10798] Buffer I/O error on dev nbd1, logical block 0, async page read [ 209.181132][T10798] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 209.212055][T10798] Buffer I/O error on dev nbd1, logical block 0, async page read [ 209.222385][T10798] ldm_validate_partition_table(): Disk read failed. [ 209.247813][T10798] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 209.294209][T10798] Buffer I/O error on dev nbd1, logical block 0, async page read [ 209.322581][T10798] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 209.349090][T10798] Buffer I/O error on dev nbd1, logical block 0, async page read [ 209.379240][T10798] Dev nbd1: unable to read RDB block 0 [ 209.397880][T10798] nbd1: unable to read partition table [ 209.421792][T11495] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.450585][T10798] ldm_validate_partition_table(): Disk read failed. [ 209.460281][T10798] Dev nbd1: unable to read RDB block 0 [ 209.473316][T10798] nbd1: unable to read partition table [ 209.612276][T11495] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.793183][T11495] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.836765][T11648] xt_CT: No such helper "pptp" [ 209.972333][T11495] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.424284][T11672] netlink: 'syz.5.1660': attribute type 10 has an invalid length. [ 210.509084][T11672] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 210.557572][T11672] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 210.613624][T11495] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 210.680773][T11495] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 210.776687][T11495] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 210.816363][T11495] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 210.826024][ T56] Bluetooth: hci1: command tx timeout [ 211.089007][T11495] 8021q: adding VLAN 0 to HW filter on device bond0 [ 211.157388][T11712] set match dimension is over the limit! [ 211.165458][T11495] 8021q: adding VLAN 0 to HW filter on device team0 [ 211.257635][ T1149] bridge0: port 1(bridge_slave_0) entered blocking state [ 211.264847][ T1149] bridge0: port 1(bridge_slave_0) entered forwarding state [ 211.290720][ T1149] bridge0: port 2(bridge_slave_1) entered blocking state [ 211.297932][ T1149] bridge0: port 2(bridge_slave_1) entered forwarding state [ 211.313446][T11717] batadv_slave_1: entered promiscuous mode [ 211.374538][T11717] batadv_slave_1: entered allmulticast mode [ 211.756867][T11738] netlink: 'syz.3.1682': attribute type 1 has an invalid length. [ 211.898016][T11751] bridge2: the hash_elasticity option has been deprecated and is always 16 [ 211.919033][T11751] bridge2: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 212.086907][T11756] xt_CT: No such helper "pptp" [ 212.125114][T11495] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 212.332211][T11495] veth0_vlan: entered promiscuous mode [ 212.376293][T11495] veth1_vlan: entered promiscuous mode [ 212.452255][T11771] netlink: 'syz.3.1690': attribute type 10 has an invalid length. [ 212.475959][T11773] block nbd1: NBD_DISCONNECT [ 212.480910][T11773] block nbd1: Send disconnect failed -32 [ 212.501267][T11771] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 212.559663][T11495] veth0_macvtap: entered promiscuous mode [ 212.560003][T11779] __nla_validate_parse: 4 callbacks suppressed [ 212.560018][T11779] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1692'. [ 212.582054][T11778] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1690'. [ 212.597508][T11495] veth1_macvtap: entered promiscuous mode [ 212.675526][T11495] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 212.699539][T11495] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.710113][T11495] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 212.731383][T11495] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.750495][T11495] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 212.771520][T11495] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.786262][T11495] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 212.822758][T11786] netlink: 'syz.5.1695': attribute type 29 has an invalid length. [ 212.861086][T11495] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 212.904322][ T56] Bluetooth: hci1: command tx timeout [ 212.907751][T11495] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.939901][T11495] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 212.956169][T11495] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.967629][T11495] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 212.979313][T11495] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.991739][T11495] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 213.006954][T11795] netlink: 240 bytes leftover after parsing attributes in process `syz.3.1697'. [ 213.065843][T11495] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.080893][T11495] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.124332][T11495] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.147841][T11800] x_tables: duplicate underflow at hook 1 [ 213.148856][T11495] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.448083][T11807] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1701'. [ 213.455840][T11814] netlink: 'syz.3.1700': attribute type 20 has an invalid length. [ 213.469675][ T7776] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 213.489898][ T7776] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 213.504176][T11810] xt_CT: No such helper "pptp" [ 213.554780][T11807] tipc: Started in network mode [ 213.559673][T11807] tipc: Node identity , cluster identity 4711 [ 213.574272][T11807] tipc: Failed to set node id, please configure manually [ 213.581374][T11807] tipc: Enabling of bearer rejected, failed to enable media [ 213.637238][ T1149] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 213.674088][ T1149] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 214.178636][ T7193] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 214.189422][ T7193] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.365581][ T7193] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 214.384031][ T7193] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.574555][ T7193] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 214.597238][ T7193] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.617165][T11857] netlink: 9 bytes leftover after parsing attributes in process `syz.5.1718'. [ 214.664461][T11857] 0·: renamed from hsr_slave_1 (while UP) [ 214.696683][T11857] 0·: entered allmulticast mode [ 214.717738][T11857] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 214.850030][ T7193] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 214.892030][ T7193] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.020832][T11865] delete_channel: no stack [ 215.087684][ T5836] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 215.105383][ T5836] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 215.113265][ T5836] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 215.134468][ T5836] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 215.142923][ T5836] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 215.353203][ T7193] bridge_slave_1: left promiscuous mode [ 215.381966][ T7193] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.421077][ T7193] bridge_slave_0: left allmulticast mode [ 215.441371][ T7193] bridge_slave_0: left promiscuous mode [ 215.460569][ T7193] bridge0: port 1(bridge_slave_0) entered disabled state [ 215.903108][ T56] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 215.924100][ T56] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 215.932006][ T56] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 215.940261][ T56] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 215.948627][ T56] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 216.453449][ T7193] bond0 (unregistering): (slave 00ªÃøÂFNð¡): Releasing backup interface [ 216.465173][ T7193] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 216.480796][ T7193] bond0 (unregistering): Released all slaves [ 216.492964][ T7193] bond1 (unregistering): Released all slaves [ 216.590969][ T7193] bond2 (unregistering): Released all slaves [ 216.606165][T11875] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1722'. [ 216.629849][T11869] lo speed is unknown, defaulting to 1000 [ 216.818178][T11909] netlink: 'syz.4.1728': attribute type 10 has an invalid length. [ 216.842837][ T7193] tipc: Left network mode [ 216.843757][T11890] lo speed is unknown, defaulting to 1000 [ 216.853680][T11909] vlan0: entered allmulticast mode [ 216.859485][T11911] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1729'. [ 216.864736][T11909] veth0_vlan: entered allmulticast mode [ 216.910898][T11909] team0: Port device vlan0 added [ 217.234340][ T5836] Bluetooth: hci1: command tx timeout [ 217.832089][ T7193] hsr_slave_0: left promiscuous mode [ 217.881283][ T7193] hsr_slave_1: left promiscuous mode [ 217.916716][ T7193] batman_adv: batadv0: Interface deactivated: dummy0 [ 217.933251][ T7193] batman_adv: batadv0: Removing interface: dummy0 [ 217.941807][ T7193] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 217.955077][ T7193] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 217.969090][ T7193] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 217.984353][ T7193] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 217.998084][ T7193] [ 218.000432][ T7193] ====================================================== [ 218.007449][ T7193] WARNING: possible circular locking dependency detected [ 218.014478][ T7193] 6.15.0-rc1-syzkaller-00141-gcfe82469a00f #0 Not tainted [ 218.021591][ T7193] ------------------------------------------------------ [ 218.028614][ T7193] kworker/u8:8/7193 is trying to acquire lock: [ 218.034758][ T7193] ffff888027ba6768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_netdev_notifier_call+0x1b3/0x1430 [ 218.045361][ T7193] [ 218.045361][ T7193] but task is already holding lock: [ 218.052704][ T7193] ffff888035754d30 (&dev_instance_lock_key#3){+.+.}-{4:4}, at: unregister_netdevice_many_notify+0x5a1/0x2510 [ 218.064267][ T7193] [ 218.064267][ T7193] which lock already depends on the new lock. [ 218.064267][ T7193] [ 218.074652][ T7193] [ 218.074652][ T7193] the existing dependency chain (in reverse order) is: [ 218.083648][ T7193] [ 218.083648][ T7193] -> #3 (&dev_instance_lock_key#3){+.+.}-{4:4}: [ 218.092067][ T7193] lock_acquire+0x116/0x2f0 [ 218.097078][ T7193] __mutex_lock+0x1a5/0x10c0 [ 218.102175][ T7193] xsk_bind+0x2fd/0xfb0 [ 218.106833][ T7193] __sys_bind+0x1de/0x290 [ 218.111673][ T7193] __x64_sys_bind+0x7a/0x90 [ 218.116689][ T7193] do_syscall_64+0xf3/0x230 [ 218.121702][ T7193] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 218.128101][ T7193] [ 218.128101][ T7193] -> #2 (&xs->mutex){+.+.}-{4:4}: [ 218.135298][ T7193] lock_acquire+0x116/0x2f0 [ 218.140311][ T7193] __mutex_lock+0x1a5/0x10c0 [ 218.145412][ T7193] xsk_notifier+0xcf/0x230 [ 218.150333][ T7193] notifier_call_chain+0x1a5/0x3f0 [ 218.155952][ T7193] unregister_netdevice_many_notify+0x1572/0x2510 [ 218.162875][ T7193] rtnl_dellink+0x53c/0x8c0 [ 218.167886][ T7193] rtnetlink_rcv_msg+0x80f/0xd70 [ 218.173334][ T7193] netlink_rcv_skb+0x208/0x480 [ 218.178621][ T7193] netlink_unicast+0x7f8/0x9a0 [ 218.183915][ T7193] netlink_sendmsg+0x8c3/0xcd0 [ 218.189198][ T7193] __sock_sendmsg+0x221/0x270 [ 218.194385][ T7193] ____sys_sendmsg+0x523/0x860 [ 218.199657][ T7193] __sys_sendmsg+0x271/0x360 [ 218.204757][ T7193] do_syscall_64+0xf3/0x230 [ 218.209772][ T7193] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 218.216262][ T7193] [ 218.216262][ T7193] -> #1 (&net->xdp.lock){+.+.}-{4:4}: [ 218.223818][ T7193] lock_acquire+0x116/0x2f0 [ 218.228857][ T7193] __mutex_lock+0x1a5/0x10c0 [ 218.233963][ T7193] xsk_notifier+0x8b/0x230 [ 218.238886][ T7193] notifier_call_chain+0x1a5/0x3f0 [ 218.244509][ T7193] unregister_netdevice_many_notify+0x1572/0x2510 [ 218.251435][ T7193] unregister_netdevice_queue+0x383/0x400 [ 218.257663][ T7193] _cfg80211_unregister_wdev+0x163/0x590 [ 218.263810][ T7193] ieee80211_if_remove+0x25d/0x320 [ 218.269436][ T7193] ieee80211_del_iface+0x19/0x30 [ 218.274878][ T7193] cfg80211_remove_virtual_intf+0x23f/0x410 [ 218.281278][ T7193] genl_rcv_msg+0xb38/0xf00 [ 218.286293][ T7193] netlink_rcv_skb+0x208/0x480 [ 218.291570][ T7193] genl_rcv+0x28/0x40 [ 218.296056][ T7193] netlink_unicast+0x7f8/0x9a0 [ 218.301327][ T7193] netlink_sendmsg+0x8c3/0xcd0 [ 218.306610][ T7193] __sock_sendmsg+0x221/0x270 [ 218.311802][ T7193] ____sys_sendmsg+0x523/0x860 [ 218.317076][ T7193] __sys_sendmsg+0x271/0x360 [ 218.322177][ T7193] do_syscall_64+0xf3/0x230 [ 218.327196][ T7193] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 218.333603][ T7193] [ 218.333603][ T7193] -> #0 (&rdev->wiphy.mtx){+.+.}-{4:4}: [ 218.341339][ T7193] validate_chain+0xa69/0x24e0 [ 218.346612][ T7193] __lock_acquire+0xad5/0xd80 [ 218.351794][ T7193] lock_acquire+0x116/0x2f0 [ 218.356805][ T7193] __mutex_lock+0x1a5/0x10c0 [ 218.361900][ T7193] cfg80211_netdev_notifier_call+0x1b3/0x1430 [ 218.368482][ T7193] notifier_call_chain+0x1a5/0x3f0 [ 218.374111][ T7193] __dev_close_many+0x15d/0x760 [ 218.379471][ T7193] dev_close_many+0x250/0x4c0 [ 218.384661][ T7193] unregister_netdevice_many_notify+0x628/0x2510 [ 218.391507][ T7193] default_device_exit_batch+0x7ff/0x880 [ 218.397669][ T7193] cleanup_net+0x8af/0xd60 [ 218.402598][ T7193] process_scheduled_works+0xac3/0x18e0 [ 218.408652][ T7193] worker_thread+0x870/0xd50 [ 218.413750][ T7193] kthread+0x7b7/0x940 [ 218.418328][ T7193] ret_from_fork+0x4b/0x80 [ 218.423253][ T7193] ret_from_fork_asm+0x1a/0x30 [ 218.428522][ T7193] [ 218.428522][ T7193] other info that might help us debug this: [ 218.428522][ T7193] [ 218.438735][ T7193] Chain exists of: [ 218.438735][ T7193] &rdev->wiphy.mtx --> &xs->mutex --> &dev_instance_lock_key#3 [ 218.438735][ T7193] [ 218.452198][ T7193] Possible unsafe locking scenario: [ 218.452198][ T7193] [ 218.459631][ T7193] CPU0 CPU1 [ 218.464980][ T7193] ---- ---- [ 218.470325][ T7193] lock(&dev_instance_lock_key#3); [ 218.475516][ T7193] lock(&xs->mutex); [ 218.482002][ T7193] lock(&dev_instance_lock_key#3); [ 218.489707][ T7193] lock(&rdev->wiphy.mtx); [ 218.494297][ T7193] [ 218.494297][ T7193] *** DEADLOCK *** [ 218.494297][ T7193] [ 218.502434][ T7193] 5 locks held by kworker/u8:8/7193: [ 218.507699][ T7193] #0: ffff88801bef6148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x990/0x18e0 [ 218.518573][ T7193] #1: ffffc900034d7c60 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9cb/0x18e0 [ 218.529088][ T7193] #2: ffffffff900f0890 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0x17c/0xd60 [ 218.538476][ T7193] #3: ffffffff900fd3c8 (rtnl_mutex){+.+.}-{4:4}, at: default_device_exit_batch+0xde/0x880 [ 218.548469][ T7193] #4: ffff888035754d30 (&dev_instance_lock_key#3){+.+.}-{4:4}, at: unregister_netdevice_many_notify+0x5a1/0x2510 [ 218.560467][ T7193] [ 218.560467][ T7193] stack backtrace: [ 218.566339][ T7193] CPU: 0 UID: 0 PID: 7193 Comm: kworker/u8:8 Not tainted 6.15.0-rc1-syzkaller-00141-gcfe82469a00f #0 PREEMPT(full) [ 218.566355][ T7193] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 218.566365][ T7193] Workqueue: netns cleanup_net [ 218.566384][ T7193] Call Trace: [ 218.566391][ T7193] [ 218.566397][ T7193] dump_stack_lvl+0x241/0x360 [ 218.566417][ T7193] ? __pfx_dump_stack_lvl+0x10/0x10 [ 218.566433][ T7193] ? __pfx__printk+0x10/0x10 [ 218.566451][ T7193] ? print_lock+0x171/0x1a0 [ 218.566467][ T7193] print_circular_bug+0x2e1/0x300 [ 218.566484][ T7193] check_noncircular+0x142/0x160 [ 218.566502][ T7193] validate_chain+0xa69/0x24e0 [ 218.566518][ T7193] ? kvm_sched_clock_read+0x11/0x20 [ 218.566540][ T7193] __lock_acquire+0xad5/0xd80 [ 218.566556][ T7193] lock_acquire+0x116/0x2f0 [ 218.566568][ T7193] ? cfg80211_netdev_notifier_call+0x1b3/0x1430 [ 218.566585][ T7193] __mutex_lock+0x1a5/0x10c0 [ 218.566599][ T7193] ? cfg80211_netdev_notifier_call+0x1b3/0x1430 [ 218.566612][ T7193] ? validate_chain+0x8a7/0x24e0 [ 218.566626][ T7193] ? put_dec_trunc8+0x1fb/0x340 [ 218.566639][ T7193] ? cfg80211_netdev_notifier_call+0x1b3/0x1430 [ 218.566651][ T7193] ? __pfx___mutex_lock+0x10/0x10 [ 218.566672][ T7193] cfg80211_netdev_notifier_call+0x1b3/0x1430 [ 218.566687][ T7193] ? __pfx_cfg80211_netdev_notifier_call+0x10/0x10 [ 218.566701][ T7193] ? __lock_acquire+0xad5/0xd80 [ 218.566714][ T7193] ? do_raw_spin_lock+0x151/0x370 [ 218.566739][ T7193] ? inetdev_event+0x4fb/0x1740 [ 218.566754][ T7193] ? igmp_netdev_event+0x7c/0x770 [ 218.566768][ T7193] notifier_call_chain+0x1a5/0x3f0 [ 218.566786][ T7193] __dev_close_many+0x15d/0x760 [ 218.566802][ T7193] ? __mutex_lock+0x380/0x10c0 [ 218.566816][ T7193] ? ret_from_fork+0x4b/0x80 [ 218.566830][ T7193] ? __pfx___dev_close_many+0x10/0x10 [ 218.566850][ T7193] dev_close_many+0x250/0x4c0 [ 218.566868][ T7193] ? __pfx_dev_close_many+0x10/0x10 [ 218.566883][ T7193] ? __lock_acquire+0xad5/0xd80 [ 218.566898][ T7193] unregister_netdevice_many_notify+0x628/0x2510 [ 218.566915][ T7193] ? lockdep_hardirqs_on+0x9d/0x150 [ 218.566929][ T7193] ? __local_bh_enable_ip+0x168/0x200 [ 218.566943][ T7193] ? batadv_tt_local_remove+0x119/0x230 [ 218.566955][ T7193] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 218.566967][ T7193] ? batadv_tt_local_remove+0x119/0x230 [ 218.566979][ T7193] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 218.566998][ T7193] ? unregister_netdevice_queue+0x2c4/0x400 [ 218.567014][ T7193] ? batadv_meshif_destroy_netlink+0x1e6/0x270 [ 218.567033][ T7193] default_device_exit_batch+0x7ff/0x880 [ 218.567054][ T7193] ? __pfx_default_device_exit_batch+0x10/0x10 [ 218.567072][ T7193] ? __pfx_rdma_dev_exit_net+0x10/0x10 [ 218.567089][ T7193] ? cfg802154_pernet_exit+0xc3/0xe0 [ 218.567100][ T7193] ? __pfx_default_device_exit_batch+0x10/0x10 [ 218.567118][ T7193] cleanup_net+0x8af/0xd60 [ 218.567138][ T7193] ? __pfx_cleanup_net+0x10/0x10 [ 218.567159][ T7193] ? process_scheduled_works+0x9cb/0x18e0 [ 218.567172][ T7193] process_scheduled_works+0xac3/0x18e0 [ 218.567195][ T7193] ? __pfx_process_scheduled_works+0x10/0x10 [ 218.567212][ T7193] ? assign_work+0x367/0x3d0 [ 218.567226][ T7193] worker_thread+0x870/0xd50 [ 218.567245][ T7193] ? __kthread_parkme+0x1a8/0x200 [ 218.567261][ T7193] ? __pfx_worker_thread+0x10/0x10 [ 218.567275][ T7193] kthread+0x7b7/0x940 [ 218.567297][ T7193] ? __pfx_worker_thread+0x10/0x10 [ 218.567312][ T7193] ? __pfx_kthread+0x10/0x10 [ 218.567327][ T7193] ? __pfx_kthread+0x10/0x10 [ 218.567342][ T7193] ? __pfx_kthread+0x10/0x10 [ 218.567358][ T7193] ? __pfx_kthread+0x10/0x10 [ 218.567374][ T7193] ? _raw_spin_unlock_irq+0x23/0x50 [ 218.567386][ T7193] ? lockdep_hardirqs_on+0x9d/0x150 [ 218.567399][ T7193] ? __pfx_kthread+0x10/0x10 [ 218.567415][ T7193] ret_from_fork+0x4b/0x80 [ 218.567428][ T7193] ? __pfx_kthread+0x10/0x10 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 218.567443][ T7193] ret_from_fork_asm+0x1a/0x30 [ 218.567461][ T7193] [ 218.942992][ T5836] Bluetooth: hci3: command tx timeout [ 218.954904][T11963] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1742'. [ 219.036846][ T7193] veth0_macvtap: left promiscuous mode [ 219.093103][ T7193] pim6reg (unregistering): left allmulticast mode [ 219.314311][ T5836] Bluetooth: hci1: command tx timeout [ 219.799966][T11959] syz_tun (unregistering): left allmulticast mode [ 219.822959][T11959] syz_tun (unregistering): left promiscuous mode [ 219.851165][T11959] bridge0: port 1(syz_tun) entered disabled state [ 220.424100][ T6047] unregister_netdevice: waiting for vcan0 to become free. Usage count = 2