last executing test programs: 2.638044834s ago: executing program 2 (id=1217): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000a40)=@newsa={0x10c, 0x10, 0x800, 0x0, 0x0, {{@in=@empty, @in6=@remote, 0x0, 0xfff7, 0x2000, 0x1, 0x0, 0x0, 0x0, 0x3b, 0x0, 0xffffffffffffffff}, {@in=@rand_addr=0x64010102, 0x3, 0x6c}, @in=@remote, {0x9, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4}, {0x0, 0x3, 0x40000000}, {}, 0x0, 0x0, 0x2, 0x0, 0x1}, [@XFRMA_IF_ID={0x8, 0x1f, 0x4}, @XFRMA_IF_ID={0xfffffffffffffd9c, 0x1f, 0x4}, @sec_ctx={0xc, 0x8, {0x8, 0x8, 0x0, 0x7}}]}, 0x10c}}, 0x40000) sendmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371400000069bd6efb2502eaf60d000300020400bf050005001201", 0x2e}], 0x1}, 0x48000) 2.282630473s ago: executing program 2 (id=1223): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x70, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_ID={0x8}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_COUNTERS={0x34, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_BYTES={0x4}]}]}], {0x14, 0x10}}, 0xb8}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf20000000000000160006003f1b48013d030100000000009500000000000000bc26000000000000bf67000000000000070600000fff07006702000003000000360600000ee600f0bf052000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a83683d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf5fe7030586"], &(0x7f0000000100)='GPL\x00'}, 0x48) 2.126341221s ago: executing program 0 (id=1227): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="380000000b060101000000000000000000000000100007800c00018008000140e0000002050001"], 0x38}}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x612400, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'veth0_to_batadv\x00', 0x20}) r3 = socket$kcm(0x10, 0x2, 0x4) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSGCAUSE(r4, 0x89e0, &(0x7f0000001700)) sendmsg$inet(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000280)="5c00000012006bab9e3fe3d86e6c1d000014a10dfe000000000004b68675f8001d000a00a0e69ee517d34460bc24eab556a705251e6182949a36c23d3b48dfd8cdbf9367b4fa51f60a64c9f4080003000601000004000200110000", 0x5b}, {&(0x7f0000000680)='\'', 0x1}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x0) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_WOWLAN(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100000000001621a35997a02257080001006300000008000300", @ANYRES32=r8], 0x24}}, 0x0) write$tun(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="00000019000303005a3c08000301bbbbbbbbbbbbbbbbbbbbbbbb000d0200000007020000c81fcd17ec803cbb43e3d31bb41a0ec606d2c8b8ac7bdf836d4cf2cd00ddd73e7f5f83a48ad36e1b07d51d201687b1bbafb4d181091d1aeedd73a5d1de87ffc7150074635846832de4bf6be2d1e7"], 0x64) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="380000000b060101000000000000000000000000100007800c00018008000140e0000002050001"], 0x38}}, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async) pipe(&(0x7f00000000c0)) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x612400, 0x0) (async) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'veth0_to_batadv\x00', 0x20}) (async) socket$kcm(0x10, 0x2, 0x4) (async) syz_init_net_socket$rose(0xb, 0x5, 0x0) (async) ioctl$SIOCRSGCAUSE(r4, 0x89e0, &(0x7f0000001700)) (async) sendmsg$inet(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000280)="5c00000012006bab9e3fe3d86e6c1d000014a10dfe000000000004b68675f8001d000a00a0e69ee517d34460bc24eab556a705251e6182949a36c23d3b48dfd8cdbf9367b4fa51f60a64c9f4080003000601000004000200110000", 0x5b}, {&(0x7f0000000680)='\'', 0x1}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x0) (async) socket$kcm(0x2, 0xa, 0x2) (async) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_GET_WOWLAN(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100000000001621a35997a02257080001006300000008000300", @ANYRES32=r8], 0x24}}, 0x0) (async) write$tun(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="00000019000303005a3c08000301bbbbbbbbbbbbbbbbbbbbbbbb000d0200000007020000c81fcd17ec803cbb43e3d31bb41a0ec606d2c8b8ac7bdf836d4cf2cd00ddd73e7f5f83a48ad36e1b07d51d201687b1bbafb4d181091d1aeedd73a5d1de87ffc7150074635846832de4bf6be2d1e7"], 0x64) (async) 2.077817689s ago: executing program 2 (id=1228): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000001c0)=0x2, 0x4) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000600)=""/4096, 0x830000, 0x3000, 0x10, 0x3}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f00000002c0)=0x10, 0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37, 0x0, 0x1}, 0x20) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000780)={0x0, 0x10, &(0x7f0000000300)=[@in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f00000007c0)=0x10) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f00000016c0)={0x0, @in={{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, &(0x7f0000000280)=0x90) r4 = bpf$MAP_CREATE(0xe4ffffff00000000, &(0x7f00000003c0)=ANY=[@ANYRES16=r3, @ANYRES8=r1, @ANYBLOB="01000000f06503cf403e0f1a78b59f1ee1db34c7d5ea7ad741449bac3a65893f99d67ca20b84aff5dc0c612dbb629dface0c74e852dbc7a8ff67cb1b50f96538bdb4274dc446fff200254658f52c0cc4064de8c3f2080934f9920488961e3fdb4f07402b363d00000000000000000000a504b1d048480de60bee5d4c2f6d087dba9950831b5409057b25ca2e30154a2f54d5195f0e392ecfe264062f62ad4ec549b69bcdcdf43a06f1d7ebe9d6d4798e8c895be9af83685adf2a46c4964fb7efadb37dd16085787c6a4ab2ca90c8a792fd22ad7d3d1da0eaba6d4b78c956a1e35b6772a2f0722dca38f961"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xf, &(0x7f0000000580)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000340)='syzkaller\x00', 0x9}, 0x90) 1.772065763s ago: executing program 0 (id=1232): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000180000003d030100000000009500f000000000006926000000000000bf67000000000000140600000fff07006706000020000000350200000ee60000bf25000000000000bd350000000000006507000002000000070700004c0000001f75000000000000bf54000000000000070400000400f9ffad53010000000000840400000000000014000000000000009500000000000000db13d5d8b740f2cdaabc8383c8f56b8c2b84a800ea6553f3ef4392b3815dcf00c3eebc52267b042d19d6e31e25e589d5f2692c75a547d6f186641ae8c557ccff3878a93b51a0389749df734f49ed5078b10f1e7f2b37626a3ace1ea89f7d2c570720a86853e26168761f0a53358f7ee2baa0e6a67a98a0d57ac09f36cfefbbc7492bbe7cdf64971a57fd64efd46c26"], &(0x7f0000000100)='GPL\x00'}, 0x48) r0 = socket$kcm(0x10, 0x2, 0x4) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000001c0)="39000000140081ae0000dc676f97daf01e2357f9ffffffffffffff0521018701546fabca1b4e8a06a6580e88370200c54c1960b89c40ebb373", 0x39}], 0x1}, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x1000001, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="440000001400030400000000000000542d"], 0x44}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000020000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000fbffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1.569467723s ago: executing program 1 (id=1236): r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f0000000000)={0x2, 0xaf2, 0xf, 0x1, 0x4, 0x0, [{0x8, 0x6, 0x2, '\x00', 0x200}, {0x8, 0x4, 0x8, '\x00', 0x3000}, {0xfffffffffffffffd, 0x49a2, 0x9, '\x00', 0x188}, {0xc652, 0x80000000, 0x7, '\x00', 0x1000}]}) r1 = accept4(r0, &(0x7f0000000100)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000180)=0x80, 0x0) connect$l2tp6(r1, &(0x7f00000001c0)={0xa, 0x0, 0x101, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x3ff, 0x2}, 0x20) connect$inet(r1, &(0x7f0000000200)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) (async) sendmsg$AUDIT_USER_TTY(r1, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0xdc, 0x464, 0x4, 0x70bd2a, 0x25dfdbfc, "746a852e7bfab4b3ae4bf3c2f1a9d91b4e119013cf2e4978571ab2e7a957b80d2a88c42d249c393e1caeaba5a77ef9052856e3122d77d7509c1eee5548665b618dcfc3aadf4baf67294a33ac3ca92a920cfcc76ffe4c173a64fa91c20279f2bf9336c0e352c9ba418591546f9c3c55dec480defade0ee33b4db860ec056854be2c964d5a4745b5f32a658f7e31b451bf9fd6e64a856550373e91528bb72d003a07424d307fe467e63b4110b8c9641e0b8c7199d1f47aac7bda11939d1d4868153277d328087b5c3800fde3", ["", "", "", ""]}, 0xdc}, 0x1, 0x0, 0x0, 0x48004}, 0x4000) (async) getpeername$l2tp6(r1, &(0x7f0000000400)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000440)=0x20) (async) r2 = accept4(r1, &(0x7f0000000480)=@xdp={0x2c, 0x0, 0x0}, &(0x7f0000000500)=0x80, 0x800) recvfrom$l2tp6(r2, &(0x7f0000000540)=""/139, 0x8b, 0x40000000, 0x0, 0x0) (async) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000680)=@nat={'nat\x00', 0x1b, 0x5, 0x570, 0x0, 0x160, 0xffffffff, 0x3b0, 0x290, 0x4a0, 0x4a0, 0xffffffff, 0x4a0, 0x4a0, 0x5, &(0x7f0000000600), {[{{@uncond, 0x0, 0x118, 0x160, 0x0, {}, [@common=@dst={{0x48}, {0x4, 0x1, 0x0, [0x8, 0x8, 0x3, 0x1, 0x7, 0xfff7, 0x3, 0x200, 0x9a5, 0xb, 0x4, 0x6, 0x4, 0x401, 0x0, 0xb], 0x9}}, @common=@icmp6={{0x28}, {0xe, "adae", 0x1}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x2, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4=@multicast2, @icmp_id=0x65, @icmp_id=0x68}}}, {{@uncond, 0x0, 0xd0, 0x130, 0x0, {}, [@common=@eui64={{0x28}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@private2, [0x0, 0xffffff00, 0xffffffff, 0xff], 0x4e23, 0x4e23, 0x4e24, 0x4e23, 0xb, 0x0, 0xffffff1f, 0x2, 0x101}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@icmp6={{0x28}, {0xc, "5ec9"}}, @common=@inet=@socket1={{0x28}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x0, 0x3, 0x5}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x1d, @ipv4=@multicast2, @ipv4=@broadcast, @port=0x4e24, @icmp_id=0x66}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5d0) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000cc0), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000d00)={'wpan4\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r4, &(0x7f0000000dc0)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x20021101}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x24, r5, 0x800, 0x70bd2d, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r6}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x50}, 0x40004) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000e40), r2) sendmsg$MPTCP_PM_CMD_REMOVE(r7, &(0x7f0000000f00)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e80)={0x38, r8, 0x4, 0x70bd2d, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xa4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x1}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x84840) r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000000f80), r4) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000fc0)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000001000)=0x0) sendmsg$NFC_CMD_DEP_LINK_UP(r4, &(0x7f00000010c0)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001080)={&(0x7f0000001040)={0x34, r9, 0x20, 0x70bd28, 0x25dfdbfd, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r10}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x1}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r11}, @NFC_ATTR_COMM_MODE={0x5, 0xa, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000090}, 0x10) (async) sendmsg(r2, &(0x7f0000001300)={&(0x7f0000001100)=@in={0x2, 0x4e23, @private=0xa010101}, 0x80, &(0x7f00000012c0)=[{&(0x7f0000001180)="2be64af07a39c983d87439ec37", 0xd}, {&(0x7f00000011c0)="c95ccfd15f474c6dd7fe3cdb8aa83ea4700c1d9a6ea419a1bb35ea32fa6ba6558a1bca0dd5c7bf77d49468e376464b3510b5e86c788c908e8132ed6bc21274cd8f82fd278f73314ea38e4f2b446f070c515d54f9c5ba13795719a2f8776eab9489dd980e31e55df93a610233c4f990d437b5ff2377831448f94c48a7ee76ed8e1f820419b889a6af5d1d83ecc0482dfce421c69031532953c5efd365d81ef2dc33e4b1303d9efbb3883c4e810338492ebf44a40a0a6f42702d7ddcc964c0cf1794721022617bea7698697025f36ae54798c71fb6eb53ce36d0725f8e5d220860ec3d992254f7fb597351970e98597cb91694df", 0xf3}], 0x2}, 0x40004) (async) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r7, 0x8008f511, &(0x7f0000001340)) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000001380)={'syzkaller1\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000001400)={'batadv_slave_0\x00', 0x0}) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r2, &(0x7f0000001540)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001500)={&(0x7f0000001440)={0xac, r8, 0x0, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x48, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r3}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r3}]}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r12}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x11}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010100}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0xac}, 0x1, 0x0, 0x0, 0x841}, 0x20000000) (async) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r2, 0x8982, &(0x7f0000001580)={0x7, 'netdevsim0\x00', {}, 0x8001}) (async) sendmsg$nl_route(r1, &(0x7f0000001680)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001640)={&(0x7f0000001600)=@getroute={0x14, 0x1a, 0x8, 0x70bd2a, 0x25dfdbfb, {}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x0) socket$nl_audit(0x10, 0x3, 0x9) (async) ioctl$F2FS_IOC_GET_COMPRESS_OPTION(r1, 0x8002f515, &(0x7f00000016c0)) 1.504436071s ago: executing program 1 (id=1237): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0xf1bd628cc8e38fab, &(0x7f0000002500)=ANY=[], &(0x7f0000000140)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) recvfrom(r1, 0x0, 0x0, 0x2000, 0x0, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYRESDEC=r1], 0x68}, 0x1, 0x0, 0x0, 0x8001}, 0x20004800) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = socket$kcm(0xa, 0x2, 0x0) r3 = socket(0x2, 0x80805, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000040)={0x84, @multicast2, 0x4e24, 0x3, 'rr\x00', 0x25, 0x80005, 0x6f}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000000)={{0x11, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x1, 0x8, 0x77}, {@private=0xa010101, 0x4e20, 0x10000, 0xf8}}, 0x44) sendmsg$sock(r2, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e1f, 0x0, @mcast2}, 0x80, 0x0, 0x0, &(0x7f0000000440)=[@txtime={{0x18, 0x1, 0x3d, 0x90e}}, @timestamping={{0x14, 0x1, 0x25, 0x3}}], 0x30}, 0x20008008) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x9, 0xc, &(0x7f0000000c00)=ANY=[@ANYRESOCT=r5, @ANYRES8=r2, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095fc9dd4812b7f54736ada91ef6b82f3c3fa24dca55ee265cabb8366561382fd433e2de276d03221a3734f77b65987ce1e14d3dc54df78d5c1912e308ef82de5d93b062e559d82dd650f08945c3a02534da26a3ca77c7699e63b4e22ff1ac2940a9fc3af599c590ee92de41caaa4b96bcd34"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000740)=ANY=[@ANYBLOB="200000006a000105fefdffff02dcdf25000000000000000008000500", @ANYRES32=0x0, @ANYBLOB="99ee5e068c4f16480186a76340bdd4926f8250e52a8753c282fb6cb440577101669da8ec18ac244e9eeca4be61cc286fe51700f779fc23910998aa5a5a790cd8b243c642598a8bc8441f3cb9b6d4ad64c382e0fb5c2d6b35782db8b06d181f757ac5fb57e147be753a007f4ffbcff02bba1f1e96f5ee2bca5c59218d327de98b7f529c1d2b6f66a5eafd276bbb62193a000000000000000000"], 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x20008000) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x5, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r9, &(0x7f00000000c0)={0x24, @long}, 0x8) r10 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000480), r3) sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000600)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000006c0)={&(0x7f0000000a00)=ANY=[@ANYBLOB="14010000b5745a8649746e9f5a35f869c2d2bf01da13c167bc711be6c72b0e6f363c3b67bfb66e99686d904c470c71beaf4e43bf31a1f408f4920e4fae364960b62c269f273de35178f0302ce29cc57e7c1b7017d797ed0d6c4965cda12a574d4a94a28d3b80dfaeab8376d94bcffc9df3c2a3b2d7777c1e959938703a894417fd8e1e2da0787e1fa1745d621c791ab506857d447fcc06993f32b1e2bfaf5798ff2aed1d7b01ecf6863a379ec644409f0467a70c2f2e18db17e748812b9565", @ANYRES16=r10, @ANYRES32=r0, @ANYRES32=r6, @ANYBLOB="06001d000600000006001a004e21000008001800ac1e0001"], 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x8008824) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000180)={0x0, @broadcast, @broadcast}, &(0x7f0000000200)=0xc) r12 = socket$kcm(0xa, 0x922000000003, 0x11) r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) r14 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r14, &(0x7f0000000200)={&(0x7f00000000c0)=@hci={0x1f, 0xdd86, 0x4}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000040)="623bed114d421d8b1c60ea4388a8", 0xe}], 0x1}, 0x20044001) setsockopt$sock_attach_bpf(r12, 0x1, 0x3e, &(0x7f0000000100)=r13, 0x4) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="955387c6301881e83dbfc4a92a348dfd68d20b8481a71cbcbdca03000000040000000400", @ANYRES32=r5, @ANYRES8=r1, @ANYRES32=r11, @ANYRES32=r13, @ANYBLOB="040003000000000000000000000000aa6b092d0d68b1004000"/35], 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r8, 0x2000002, 0xe, 0x0, &(0x7f00000001c0)="df12c9f7b9a6000f000000000000", 0x0, 0x80000084, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 1.460583864s ago: executing program 4 (id=1238): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r0, 0x7d4165c9) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) (async) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000680)={0xa, 0xffff, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4}, 0x1c) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) (async) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000400)={@in6={{0xa, 0x4e24, 0x91, @remote, 0x1}}, 0x0, 0x0, 0x32, 0x0, "0c9e089c1b4a04000bde79f04103c458187eb46c2d996aff287154e786455261c425a7519cc275d04e6205abd307a0c4fa3838bf399ad5bd35f21907c7988d1300"}, 0xd8) (async) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000500)={@in6={{0xa, 0x4e24, 0x0, @loopback, 0x2}}, 0x0, 0x0, 0x4, 0x0, "a1c1dd75a6843e10951cd4b347113e55eb499519becf7542c90bc21470e441225642855b5f2faed4a18d67efd5f2fdf98328de94410300"}, 0xd8) (async) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r6, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e21, 0x1, @mcast2, 0x4}}, 0x0, 0x0, 0x11, 0x0, "2b20a9a47cddc63b223be606d7fa19f22a369ae751de81ca4d11e10450d766feb63b382d54ba4bb57a219cad5ddfc1e4fe760a1ce2ca64196953e92a07b3937730a33b6deca160d8c2fbff48eb964283"}, 0xd8) listen(r6, 0x0) r7 = socket$netlink(0x10, 0x3, 0x8000000004) (async) r8 = socket$can_raw(0x1d, 0x3, 0x1) (async) r9 = socket(0x2a, 0x2, 0x0) getsockname$packet(r9, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000380)=@newtfilter={0x54, 0x2c, 0xd27, 0xffffffff, 0x0, {0x0, 0x0, 0x0, r10, {0x4, 0xffe0}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8847}, @TCA_FLOWER_KEY_MPLS_OPTS={0x18, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x14, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_DEPTH={0x5, 0x1, 0x2}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_TC={0x5}]}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x81}, 0x24000000) sendmsg$can_raw(r8, &(0x7f0000000600)={&(0x7f0000000180)={0x1d, r10}, 0x10, &(0x7f00000002c0)={&(0x7f0000000280)=@can={{0x2, 0x1, 0x1, 0x1}, 0x5, 0x1, 0x0, 0x0, "d3e353bb72dd5446"}, 0x10}, 0x1, 0x0, 0x0, 0x24004090}, 0x20008095) (async) writev(r7, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100080c10000000000000000000", 0x58}], 0x1) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{}, &(0x7f0000000040), &(0x7f00000000c0)}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000004000000000000000009500ffe000000000b00b14f837229af7cdde2dfd03a17509e792f63ee113242329a4b70e446b88a85902e704de09c949"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) 1.384318597s ago: executing program 3 (id=1240): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000007919b800000000009500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x4, 0x98, &(0x7f00000000c0)=""/152}, 0x80) r0 = socket(0x2, 0x80805, 0x0) connect$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="60010000", @ANYRES16=r2, @ANYBLOB="010028bd7000fcdbdf25010000001400020077673000000000000000000000000000060006004e21000024000300a05ca84f6c9c8e3853e2fd7a70ae0fb20fa152600cb00845174f08076f8d784308000500000000000401088030000080060005000100000024000100d1732899f611cd8994034d7f413dc957630e5493c285aca40065cb6311be696bd000008024000100d1732899f611cd8994034d7f413dc957630e5493c285aca40065cb6311be696ba80004"], 0x160}, 0x1, 0x0, 0x0, 0x20048000}, 0x814) sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, r2, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x8080) 1.379097863s ago: executing program 4 (id=1241): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000000)={0x80000000, {{0xa, 0x4e21, 0x3296000, @loopback, 0x3}}, {{0xa, 0x0, 0xbffffffa, @dev={0xfe, 0x80, '\x00', 0x3e}}}}, 0x108) getsockopt$inet6_buf(r0, 0x29, 0x30, &(0x7f0000000000)=""/40, &(0x7f0000001000)=0xf9) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@dellink={0x44, 0x10, 0xc03, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_VER={0x5}, @IFLA_GRE_REMOTE={0x8, 0x7, @loopback}]}}}]}, 0x44}}, 0x0) 1.244655614s ago: executing program 4 (id=1242): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c0000001800010280000000fcdbdf250a148000ff01fd07"], 0x1c}}, 0x0) sendmmsg$alg(r1, &(0x7f00000000c0), 0x492492492492627, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000000061049500"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xbf, &(0x7f000000cf3d)=""/191, 0x41000, 0x40, '\x00', 0x0, @sk_msg}, 0x94) close(r4) r5 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r5, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000001f3721ee94b846824e00"/28], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r6}, &(0x7f0000000000), &(0x7f0000000080)=r4}, 0x20) bind$can_raw(r3, &(0x7f0000000000), 0x10) setsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, &(0x7f0000000140)=[{{}, {0x0, 0x0, 0x1, 0x1}}, {{}, {0x0, 0x0, 0x0, 0x1}}], 0x10) setsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, 0x0, 0x0) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)=ANY=[@ANYBLOB="300300002400010026bd7000fedbdf251f0300800c0001", @ANYRES64, @ANYRES8=0x0], 0x330}], 0x1}, 0x20040020) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000)={0x8, 'macsec0\x00', {'netpci0\x00'}}) r8 = socket$inet(0x2, 0x3, 0x30) getsockopt$inet_mreqsrc(r8, 0x0, 0x26, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000080)=0xc) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x4000010) r10 = socket$alg(0x26, 0x5, 0x0) bind$alg(r10, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sm3\x00'}, 0x58) setsockopt$ALG_SET_KEY(r10, 0x117, 0x1, 0x0, 0x0) getsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0x7, 0x0, &(0x7f00000005c0)) r11 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$PPPIOCGMRU(r11, 0x80047453, &(0x7f0000000040)) r12 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r0) sendmsg$IEEE802154_LLSEC_DEL_KEY(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="01022cbd7000fedbdf252800000005002e00e2000000fa0691030000005248da089bfa0c7dfc3fd00cf081ce819ff41163984fc84bd6e8d9ecb05eaf6ca8187ff90000000000"], 0x30}, 0x1, 0x0, 0x0, 0x42094}, 0x20004050) 1.244073478s ago: executing program 3 (id=1243): r0 = socket(0x10, 0x3, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @multicast2}, 0x2, 0x0, 0x4}}, 0x2e) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) close(r0) sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x40, r3, 0x1, 0x1070bd0c, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x79}]}, 0x40}, 0x1, 0x0, 0x0, 0x40811}, 0x20) r5 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r5, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}, 0x2}}, 0x26) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r9, {0xffe0, 0xfff1}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x9, 0x400, 0x20000008, 0x6, 0x7}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x1}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20000010}, 0x4040) sendmsg$nl_route(r0, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 1.155528415s ago: executing program 2 (id=1244): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010003b1528bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0400000000002000140012800900010076657468000000000400008008000300000000000500110001"], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 1.120720555s ago: executing program 4 (id=1245): r0 = epoll_create1(0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4c000000640001090000000000000000021800000000fd010000000008000100ac141400080005000a"], 0x4c}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x8004080) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000000000)=0x100405, 0x4) ppoll(&(0x7f0000000340)=[{r0, 0x4}, {r1, 0x1481}], 0x2, 0x0, 0x0, 0x0) 1.072407159s ago: executing program 3 (id=1246): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e00000004000000080000000b"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='contention_end\x00', r1}, 0x18) r2 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_SIOCADDRT(r2, 0x890b, &(0x7f0000000340)={0x0, @in={0x2, 0x4e20, @broadcast}, @l2={0x1f, 0x4, @any, 0x318, 0x2}, @xdp={0x2c, 0x5, 0x0, 0x2}, 0x5, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)='veth1\x00', 0x1, 0xa, 0x5}) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1802"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r4, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r3, 0x4010744d, &(0x7f0000000180)) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r5, &(0x7f0000000300)={0xa, 0x3, 0x8, @loopback, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f0000000080)=@gcm_256={{0x304}, "e740cda37176113e", "e72f7b3183b8b82309e356a4300d6f3384443d43e5c414357b1d255893258f1c", "b908a55e", "3f7b7fb3722852f4"}, 0x38) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_MSFILTER(r6, 0x29, 0x30, 0x0, 0x0) r7 = openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r7, &(0x7f0000000100)='freezer.self_freezing\x00', 0x0, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000b80)={@link_local, @empty, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "2c96ed", 0x18, 0x0, 0x0, @dev, @local, {[@hopopts={0x0, 0x2, '\x00', [@generic={0x7, 0x8, "846ddaa35696f9a4"}, @pad1, @generic={0x0, 0x1, '('}]}]}}}}}, 0x0) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f0000000000)=@gcm_256={{0x303}, "41328ac34a4ad2ba", "e8582491a0c4050000000000f6542a9b6800000000000000003967d2daa45b4e", "61241765", "89b06aff130000fd"}, 0x38) sendmsg$inet(r5, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)}, 0x44005) 1.016349129s ago: executing program 4 (id=1247): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000840)="2e00000010008188040f6fec59acbc0435a181003f00000000060000000000000e000d000d6ed60012801900121f", 0x2e}], 0x1}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x5c1200, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f00000001c0)={'erspan0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0xbc}, [@ldst={0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd96, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 956.536179ms ago: executing program 2 (id=1248): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r0) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c000000798621540bacc835b183c2459fe56dfe2374e36e3c31bc67e05e1070da4de6598f125646ead70a8f4ca63fe7c12f03581fa0f0d79d3178b153c055cd0874848932f998ab8a140079d3fd5c6b94b1b67e2b9c45a9346d290ee317f071bcb4c294b5fda0d656caf0d0b3f3cf4558d1748cbecca9d975f382149037b0d448cd5ce7225e5403d41f24201b4e93d578eba5390d6274706e5324e39d5d02e8ddc78bc2652c47a75f90abe69257829669b2a70fa46a28f845d8a1378c1a98314fc9be4d855372d5ccc0bbbe46aa348997121695d8d594f1080d99", @ANYRES16=r1, @ANYBLOB="010028bd7000fddbdf252e0000000a0001007770616e3000000005002b00000000000c00050000000000000000000600060001000000"], 0x3c}}, 0x40890) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, 0x0) pipe(0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f00000001c0)={0x735a, 0x101, 0xe, 0x7, 0x3, 0x9, 0x4, 0x7fff}, 0x20) syz_genetlink_get_family_id$nbd(&(0x7f0000000300), r0) sendmsg$NBD_CMD_DISCONNECT(r0, 0x0, 0x40440a0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000000)={r4, 0x4}, 0x8) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32, @ANYBLOB="000024000000000024001200140001006272696467655f736c617665800000000c000500080005"], 0x3}, 0x1, 0x0, 0x0, 0x8001}, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10d00, 0x0) r5 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) getsockname$packet(r6, 0x0, &(0x7f0000000300)) r7 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$SIOCNRDECOBS(r7, 0x89e2) 868.564817ms ago: executing program 4 (id=1249): ioctl$sock_netrom_SIOCDELRT(0xffffffffffffffff, 0x891e, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='bbr', 0x3) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5", 0x4) r2 = accept4(r1, 0x0, 0x0, 0x80800) sendmmsg$alg(r2, &(0x7f0000003780)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) r3 = socket$kcm(0xa, 0x3, 0x87) syz_emit_ethernet(0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB="bbbbbbbbbbbb0180c200000086dd600000000018870100000000000000000000ffffac141443ff020000000000000000000000000001", @ANYRESDEC=r3], 0x0) recvmsg$unix(r2, 0x0, 0x2041) r4 = socket$igmp(0x2, 0x3, 0x2) ioctl$SIOCGETVIFCNT(r4, 0x89e0, &(0x7f0000000980)) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)="d800000018008103e00312ba0d8105040a600300ff0f04d0067c55a1bc000900b80006990700000015000500fef32702d3001500030001400200000901ac040098007f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4098000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04000000730d7a5025ccca262f3d40fad95667e04adcdf634c1fff01e3bb9ad809d5e1cace81ed0b66bce0b42a9e1b518077c20708215c2c4b4ecbee5de6ccd40dd6e4edef3d93452a9230", 0xcb}], 0x1}, 0x48002) r6 = socket$can_raw(0x1d, 0x3, 0x1) sendmsg$can_raw(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@canfd={{0x3, 0x0, 0x1}, 0x23, 0x0, 0x0, 0x0, "7277095d3314fed0c9ede7098a388712c4bc4cf98f0d664bdef077a6b46067a0d0a3fc09c882ea73c38d5cfa036ef47ca37be70ad876afe11da7d5b529b5bd59"}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x2000) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, 0x0, 0x0) 867.298796ms ago: executing program 3 (id=1250): socket$packet(0x11, 0x3, 0x300) r0 = syz_init_net_socket$ax25(0x3, 0x2, 0xf0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x304) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x80000, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1e004, 0x0) close(r3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, &(0x7f0000000640)) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000a40)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000140)={'syzkaller0\x00', @random="371692e7f7ef"}) setsockopt$ax25_SO_BINDTODEVICE(r0, 0x101, 0x19, &(0x7f00000001c0)=@bpq0, 0x10) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000080)={r0}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r6, &(0x7f0000000200)=[{&(0x7f00000000c0)='X\x00', 0x2}], 0x1) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000000440)={'tunl0\x00', &(0x7f0000000340)={'ip_vti0\x00', 0x0, 0x1, 0x1, 0x3, 0x0, {{0x6, 0x4, 0x0, 0x30, 0x18, 0x65, 0x0, 0xa4, 0x29, 0x0, @empty, @rand_addr=0x64010100, {[@noop]}}}}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0x18, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000006000000000000001000000018110000", @ANYRES32, @ANYBLOB="004c6f991eb6395662ba010000000000000014000000b703000000000000fc890391440d45ba7afda95c3f8500000083000000bf090000000000005509010000000000950000000000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082000000bf91000000000000b7020000020000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000300)='GPL\x00', 0x2c52, 0x75, &(0x7f00000003c0)=""/117, 0x41100, 0x40, '\x00', r7, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000480)={0x3, 0x0, 0x5, 0x20000000}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000004c0)=[r5, r5, r6], &(0x7f0000000500)=[{0x2, 0x2, 0x7, 0x8}, {0x0, 0x5, 0x10, 0x6}], 0x10, 0x1}, 0x94) write$cgroup_subtree(r6, &(0x7f0000001200)=ANY=[], 0xfe33) r8 = accept4$rose(r4, &(0x7f0000000000)=@short={0xb, @remote, @bcast, 0x1, @rose}, &(0x7f00000000c0)=0x4d, 0x80000) r9 = socket$xdp(0x2c, 0x3, 0x0) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r9, 0xf507, 0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r10) socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_buf(r10, 0x6, 0x21, 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000002, 0x100010, r8, 0x834) 818.602169ms ago: executing program 0 (id=1251): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'erspan0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f00000000c0)=@newlink={0x48, 0x10, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x1}, @IFLA_GRE_ERSPAN_INDEX={0x8}]}}}]}, 0x48}}, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000000)={{{@in6=@loopback, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@private}}, &(0x7f0000000240)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000380)={{{@in=@multicast1, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}}}, &(0x7f0000000280)=0xe8) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=@updsa={0x1614, 0x1a, 0xb04, 0x70bd2d, 0x25dfdbfb, {{@in6=@private2, @in=@dev={0xac, 0x14, 0x14, 0xe}, 0x4e21, 0xf, 0x4e23, 0xfffc, 0x2, 0xa0, 0x80, 0x11, r3, r4}, {@in6=@private2, 0x4d6, 0x33}, @in6=@remote, {0x8a9b, 0x7, 0x5, 0xf, 0x0, 0x1, 0x2, 0x10001}, {0x68, 0xd, 0x0, 0x6}, {0x9, 0x3, 0x2}, 0x70bd2b, 0x3504, 0xa, 0x0, 0xd, 0x40}, [@policy={0xac, 0x7, {{@in=@private=0xa010100, @in6=@private0, 0x4e21, 0x0, 0x4e20, 0x80, 0x2, 0x0, 0x0, 0x5e, 0x0, r5}, {0x7fff, 0x3206, 0xa, 0x1, 0x1, 0x3, 0x6, 0xdc}, {0xffff, 0x8, 0xe71d, 0x7}, 0x2, 0x6e6bb0, 0x2, 0x539dba58b8492078, 0x2, 0x2}}, @tmpl={0xc4, 0x5, [{{@in=@rand_addr=0x64010100, 0x4d5, 0x33}, 0x2, @in6=@mcast2, 0x3504, 0x3, 0x3, 0x0, 0x4, 0x5, 0xa}, {{@in=@private=0xa010100, 0x4d3, 0x32}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x23}, 0x0, 0x4, 0x3, 0x81, 0xbea6, 0x800, 0x3}, {{@in6=@ipv4={'\x00', '\xff\xff', @empty}, 0x4d2, 0x2b}, 0xa, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3502, 0x2, 0x3, 0x9e, 0x2, 0x3, 0x2}]}, @algo_crypt={0x135, 0x2, {{'ctr-aes-neonbs-sync\x00'}, 0x768, "5362ad89cea837bc1fcbc08811d2ca994cb887e35c1e94ea3efba0c1fdc24523b24f80d3d653a411da6d38d484d53714230daec701e0c275497ec1452bb81a6ab0f6d3114b78803b469431bfb70175629251c32b4a69d60b95d2b8c9327a3b7dda0670302f5c255e6103b85b4ce4a9ae43538d4a650f2807d12a0fe3808ec8b464018804b627f28ffedb6003997847bd7ae40d7752f079f432737e3ba484cf4014265e941cb2e8e12384da0dd141fc060a17df4d9c2bb4d835f9e64efbd066caffedb9efc34eeb10585e54cd93cfcbff2a95d5ae563fa6ffa1be958f93502c7bf4c3216d71daa33b3cc7240b35"}}, @replay_val={0x10, 0xa, {0x70bd27, 0x70bd2d, 0x710}}, @algo_comp={0x107, 0x3, {{'lzjh\x00'}, 0x5f8, "25e19a41d022d80350e864bb0f91757d476e354fee931c80bdf18e501b03859fdd6eefc88410c4088b99cdb3689f21e33190b97ad4dee7be6e35d0054da6eb6678c2a922987896bf7879c9d14b35c858c8f50467331507b89b84fb84f804c1bdf28c8a1876fc44b4af8c122bf508ebefdb90e5ba7f32971db276e4166b4630b9479015fe6f36413d7f07f56e866cd978fa1c5c85756a29ff8e172d0166c547c1e25aca634a945a3cb686ef4dc822b3894312164c3c4e1e55cef5324c70843f"}}, @coaddr={0x14, 0xe, @in=@empty}, @algo_crypt={0xf4, 0x2, {{'ctr-cast6-avx\x00'}, 0x560, "8a51ee480a02135ad2b583b5a155209a55426416e7971f52b89a1294eca135ca7a49520f80dce1d6ae77718874a4dd53f338a7693ae607d7d8d36d4e7bb34af2987a387864d41ad4665dcbec4ea38d2ef652eacd5223fc139d6f28b0244dd778ef3718c6b9e131eab9db83595b62acca3819ee5437ac05bfc686de42a43e0fb26d7164a22f24e19776fa261f8e21b086f017f550699ac09eb4ec9cea14ba18e6c3f4a583bbb4d2aecbc57d17"}}, @algo_auth={0x1048, 0x1, {{'sha224-asm\x00'}, 0x8000, "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"}}, @coaddr={0x14, 0xe, @in=@empty}]}, 0x1614}}, 0x0) 768.07581ms ago: executing program 3 (id=1252): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_FAIL_OVER_MAC={0x5, 0xd, 0x3}]}}}]}, 0x3c}}, 0x4) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000100)={0x0, @in6={{0xa, 0x0, 0x0, @dev}}}, &(0x7f0000000000)=0x100) r1 = socket$inet(0x2, 0x3, 0x33) getsockopt$inet_mreqsrc(r1, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x8) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@dellink={0x28, 0x11, 0x101, 0x0, 0xfffffffe, {}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000080)={'sit0\x00', 0x0, 0x20, 0x700, 0x1ff, 0xe2d0, {{0x10, 0x4, 0x0, 0x30, 0x40, 0x64, 0x0, 0x4, 0x29, 0x0, @broadcast, @dev={0xac, 0x14, 0x14, 0x15}, {[@ssrr={0x89, 0x2b, 0x49, [@broadcast, @broadcast, @broadcast, @multicast2, @local, @dev={0xac, 0x14, 0x14, 0x26}, @remote, @broadcast, @broadcast, @local]}]}}}}}) sendmsg$nl_route(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=@ipv6_newaddrlabel={0x4c, 0x48, 0x100, 0x70bd28, 0x25dfdbfd, {0xa, 0x0, 0x0, 0x0, r3, 0x3}, [@IFAL_ADDRESS={0x14, 0x1, @dev={0xfe, 0x80, '\x00', 0x3d}}, @IFAL_ADDRESS={0x14, 0x1, @loopback}, @IFAL_LABEL={0x8, 0x2, 0x2}]}, 0x4c}}, 0x801) 708.762865ms ago: executing program 0 (id=1253): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1f, 0x2, &(0x7f0000000200)=@raw=[@call={0x85, 0x0, 0x0, 0x6b}, @exit], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90) ioctl$BTRFS_IOC_QUOTA_CTL(r0, 0xc0109428, &(0x7f00000000c0)={0x3, 0x10}) 662.83086ms ago: executing program 3 (id=1254): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r3) r4 = socket$unix(0x1, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x8000000, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x7, 0x6360, 0x5, 0xfffffffd, 0x6}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0xfffffffe, 0x1b6b}}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000000}, 0x884) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r7, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r7, 0x6, 0x1f, &(0x7f0000000540), 0x3c) getsockopt$inet6_tcp_int(r7, 0x6, 0x7, 0x0, &(0x7f00000003c0)) r8 = socket$pppl2tp(0x18, 0x1, 0x1) r9 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r8, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r9, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2}}, 0x2e) sendmsg$inet(r8, &(0x7f0000000880)={0x0, 0x0, 0x0}, 0x1) r10 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="d8000000100081044e81f782db44b904021d006a0f000000e8fe55a1290015000600142603600e120900040044000000a80016000a0003400260000000000000b94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a985162f7ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d3220a7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x60044804) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) r11 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x24, r12, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_TOKEN={0x8}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}]}, 0x24}}, 0x0) 660.95507ms ago: executing program 0 (id=1255): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x14, 0x4, 0x4, 0x22}, 0x48) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000040)=0xe5, 0x4) listen(r1, 0x0) (async) r2 = socket(0x2a, 0x2, 0x0) bind$xdp(r2, &(0x7f00000000c0)={0x2c, 0x8, 0x0, 0x3c}, 0x10) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={r0, &(0x7f0000000580)="2bf60665fc3755f1e0e233997c4891685c10a5916e9a0355681e0df3ec2d321e48adf864d174da09c52dabdfcd004515e1b7ba23f5b5e5aa5c715a1544957da95dfa3c55eedec25089cf1cb45a5c0d722b92dc0ec2ff82d1e040489ccf6edbf728c7ce77f08416745099da8ced92bedbb385497bab70456aa351ec95ce1ab79114b3f3fda64d5f79753bd52013f6d6a3589ea5e791cf3a31ec45f4b76aaafccec13534558f10c8065159e3e912c0115097331ccb5f9edd", &(0x7f0000000240)=@udp=r2}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000900)={r0, &(0x7f00000008c0)}, 0x20) r3 = socket(0x10, 0x3, 0x0) (async, rerun: 64) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 64) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r5, &(0x7f0000004340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="310300209600000000000800006008ffff00b0513e08493296835a05d1e761a68e8401024d0c396c0400cf32e749baa4b20a28f4023826ddec6e97d88e43a515c35359ed7df489865cd0b284f48504b9e6f1db4e33d78a6fb23faf32fd84800f53c9168093e5a8d672444a5407e6c5f55f103e0000e557000000000000000000", @ANYRES32=r7, @ANYBLOB="08000600", @ANYRES32=0x0, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x4004844}, 0x0) (async) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000640)=ANY=[@ANYBLOB="14000000101c010000000000000000000000000a54000000060a010400000000000000000248b202be5f54f8f8b1d7700444d24c00000028fa0480240001800c000100626974776973650014000280080003210000000008000140000000000900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a"], 0x7c}}, 0x0) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ifreq(r8, 0x8937, &(0x7f0000000f00)={'team0\x00', @ifru_ivalue=0x6}) (async, rerun: 64) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000280)={0xffffffff}, 0x10) (async, rerun: 64) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="2800000042000b0026bd7000004000000302000008000200070000000a00018078a4490900000000"], 0x28}}, 0x4040080) (async) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="14eaff900ea2f673e1505cff1100010a100000006c45218302760c58"], 0x14}}, 0x0) r10 = socket$netlink(0x10, 0x3, 0xc) sendmsg$TIPC_NL_LINK_RESET_STATS(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000940)=ANY=[@ANYBLOB="54010000", @ANYRES16=0x0, @ANYBLOB="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"], 0x154}, 0x1, 0x0, 0x0, 0x24008010}, 0x20000040) (async, rerun: 64) sendmsg$IPSET_CMD_SWAP(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000060601"], 0x14}}, 0x810) (async, rerun: 64) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000711206000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r11 = socket$can_j1939(0x1d, 0x2, 0x7) close(r11) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r10) 512.386884ms ago: executing program 0 (id=1256): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000000)=0x0) bind$nfc_llcp(r1, &(0x7f0000001040)={0x27, r2, 0xffffffffffffffff, 0x5, 0x2, 0x0, "d32984bd1ca44c066af5160e961701a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000001200000000001900", 0x3c}, 0x60) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) bind$nfc_llcp(r3, &(0x7f00000000c0)={0x27, r2, 0x1, 0x4, 0x0, 0xff, "bac5115c7dad488702b535116fad55baf63cdd52fc30106310abb622a1c3c01c13c04df6b906288e64e96754059e65c39c5759b069d6e6d9589e5f2348878c", 0x24}, 0x60) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="cc000000", @ANYRES64=r5, @ANYBLOB="050000000000000000000f00000008000300", @ANYRES32=0x0, @ANYBLOB="55000e0080000000080211000000080211000001505050505050000000000000000000009d92fd67da8a"], 0xcc}}, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000480), r6) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f0000000040)=0x0) sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r8], 0x1c}}, 0x0) r9 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000711011000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r11 = bpf$ITER_CREATE(0x21, &(0x7f0000000340), 0x8) r12 = socket$inet6_sctp(0xa, 0x5, 0x84) r13 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r13, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r13, 0x84, 0x1d, &(0x7f0000000140), &(0x7f0000000240)=0x45) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r12, 0x84, 0x6d, &(0x7f0000000000), &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_RTOINFO(r11, 0x84, 0x0, &(0x7f0000000380)={0x0, 0x6, 0x1, 0x9}, 0x10) r14 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r6) r15 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0x8, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0xd}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r15, 0x2800000002000000, 0xe, 0x55, &(0x7f0000000140)="a06ad876d56a0064d082778c3938", &(0x7f0000000380)=""/85, 0x0, 0x4000000}, 0x28) ioctl$IOCTL_GET_NCIDEV_IDX(r9, 0x0, &(0x7f0000000040)=0x0) sendmsg$NFC_CMD_DEV_UP(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r14, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r16], 0x1c}}, 0x0) sendmsg$NFC_CMD_VENDOR(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000240)={0xc4, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@NFC_ATTR_VENDOR_SUBCMD={0x8, 0x1e, 0x10000}, @NFC_ATTR_VENDOR_ID={0x8, 0x1d, 0x1}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r2}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r8}, @NFC_ATTR_VENDOR_ID={0x8, 0x1d, 0x86c}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r16}, @NFC_ATTR_VENDOR_SUBCMD={0x8, 0x1e, 0xfffffffd}, @NFC_ATTR_VENDOR_DATA={0x77, 0x1f, "7c4ef6293f77d560b4b357596053e056723d1e1386ebff26710a4cc24b2cc0ef614c0e1a66d6cb1d78869200ac78e4ccc159cb9c745add21ae15c97ddae2837d14dab05a2d4440bae625167f1db4b939ef3d8b96e8f0ad8adbc1d8de8075dbdaddf2e291adf9531fd1da84cce94330ad92ebba"}]}, 0xc4}, 0x1, 0x0, 0x0, 0x8000}, 0x4010) 512.001834ms ago: executing program 1 (id=1257): r0 = socket(0x40000000015, 0x5, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x0, @none, 0x0, 0x1}, 0xe) setsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0xf, &(0x7f0000000140)=0x23, 0x4) bind$can_raw(r1, &(0x7f0000000080), 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={0x1, 0x58, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6tnl0\x00', r3, 0x4, 0x9, 0x4, 0x8001, 0x38, @private1={0xfc, 0x1, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x20, 0x700, 0xd1f, 0x401}}) setsockopt$CAN_RAW_ERR_FILTER(r1, 0x65, 0x2, &(0x7f0000000100)=0x5, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000180)={'vxcan1\x00', 0x0}) bind$can_raw(r1, &(0x7f0000000000)={0x1d, r4}, 0x10) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000080)={'syztnl2\x00', r4, 0x10, 0x20, 0x9, 0x6, {{0xb, 0x4, 0x1, 0x1d, 0x2c, 0x67, 0x0, 0xff, 0x2f, 0x0, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x42}, {[@cipso={0x86, 0x17, 0x2, [{0x6, 0xc, "175a19b003a4fd5e15db"}, {0x2, 0x2}, {0x2, 0x3, '\f'}]}]}}}}}) setsockopt$sock_int(r0, 0x1, 0x23, &(0x7f0000000000)=0x2, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x13, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="7a0a00ff000000007110760000000000950000000000000096bebdac226cf23a48b312840d54e83ededbad02cc720a13a063710c1f711aedb76b640943c3fdf882d3f92205ce00eaec0c21af2bd069bfda299a41b3968f"], &(0x7f0000000480)='syzkaller\x00'}, 0x80) bind$inet(r0, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) recvmmsg(r0, &(0x7f00000040c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f0000000040)='wg1\x00', 0x4) 297.008932ms ago: executing program 1 (id=1258): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010003b1528bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0400000000002100140012800900010076657468000000000400008008000300000000000500110001"], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 208.421564ms ago: executing program 1 (id=1259): getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000000)={0x0, @in6={{0xa, 0x4e21, 0x5, @remote, 0xfffff000}}, 0x5, 0x7, 0x1806adf2, 0x7, 0x9}, &(0x7f00000000c0)=0x98) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_DEL(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x20, 0x2, 0x9, 0x201, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x6}}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000881}, 0x4000000) r2 = socket$netlink(0x10, 0x3, 0x2) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r2, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800020}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x70, 0x1405, 0x800, 0x70bd2c, 0x25dfdbfb, "", [{{0x8, 0x1, 0x1}, {0x8}}, {{0x8}, {0x8, 0x3, 0x3}}, {{0x8}, {0x8, 0x3, 0x3}}, {{0x8}, {0x8}}, {{0x8}, {0x8, 0x3, 0x4}}, {{0x8, 0x1, 0x2}, {0x8, 0x3, 0x1}}]}, 0x70}, 0x1, 0x0, 0x0, 0x44800}, 0x4044080) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r2) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_PROBE_CLIENT(r2, &(0x7f0000000480)={&(0x7f0000000340), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x40, r3, 0x400, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x40}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000004c0)={'wlan0\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000500)={'syz_tun\x00', 0x800}) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000540)={r0, 0x1}, &(0x7f0000000580)=0x8) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r5, 0x84, 0x71, &(0x7f00000005c0)={r6, 0x100000}, &(0x7f0000000600)=0x8) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$NFT_MSG_GETFLOWTABLE(r2, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x20, 0x17, 0xa, 0x801, 0x0, 0x0, {}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x20008810}, 0x40) sendmsg$BATADV_CMD_TP_METER_CANCEL(r2, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x1c, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008004}, 0x1) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r2, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x14, r3, 0x200, 0x70bd25, 0x25dfdbff, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x1e, &(0x7f0000000940)=0x4, 0x4) r8 = accept4(r1, 0x0, &(0x7f0000000980), 0x80000) sendmsg$kcm(r8, &(0x7f0000001f80)={&(0x7f00000009c0)=@rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x5}, 0x80, &(0x7f0000000bc0)=[{&(0x7f0000000a40)="e3ea5c39ca36daf0cf219221afd0d79690502f971e8b3dabc64f498afe7fe9c7c9498c00193e9e6378dc832cc66c3d13a0f647e6922fefd775ec4544dfff2eb790675e863997bbeb5394615728b2642f349942dc2fa67b84f499dfe54136e81a5992526311d642866923cc84b4472cd6e042998a4d4977f662685934822a", 0x7e}, {&(0x7f0000000ac0)="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", 0xfc}], 0x2, &(0x7f0000000c00)=[{0x40, 0x10d, 0xba4, "bd70219c1b9d46553aac6dfbe21e663067a0316a69e02a936ebf46ae086adf0dd3ffaa5d107f89b520"}, {0xe8, 0x10c, 0x7, "37523a5777c9abf159261e8196e66b1a6a09d49ac13cefbb8820e27bdedb60daf091bb8aff1dee335b7ba7abb401af900531f9675c8cd170d10e3331935dc78748b8cf464b49ee48be5a9531346bfc534e8901b30315d0ce7c0648eed3dd7a5d6fea19b5ff5c0fe51abac1401fb5b69d89fbd2a9dc2c263ac49cc5e74b66b6978573265fcb32d23425cd697b91ae3e02d4279518d06ca04d7afffaf7499e3a5b9e46b8552b7851375025be3d583ba6bdf16e3abe9f9246e7d995e0f5b86d562ca8f2e03a5b48cec099d776130c6a599721ba86f0e19e1b"}, {0x98, 0x11, 0x4, "faa1d7dd1125ff025d3a47189597d4cbad450fd10ef3b3df8deeab15f6ed583daf74905ff7a7d4459e5be8fbe28f2d1ad1dd88a0eec00e5ab35aa0ac0b77670d1466dbf979ace6542bff3dcaab0a27d983766363b351dbc8aeb8d7e1df3524909d94dd264dbcede8d2d6b330fb0e6ef0ec8a751c2ac21a9e189234a30d466e391767a2e3eae0adbb"}, {0x1010, 0x10b, 0x5, "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"}, {0xa8, 0x10b, 0x3ff, "012c1aa04021b9aa38db5af12dabd9854a0882e303df9259706bfcdde7ce59e25d47085ac6c43f39cb080bbd140773210fe63788fb6b34638d07ad2a6781069a2244d5250783943ec42de129a5d87b09e52bd28a10ef483861a2d6fe23dc6c7c0c83c94cc81d294d1529be34b0a30c81678be321f5d59f9a85db3e85912737116aec5d3882c78840988de41d8de6b3b48cc313ea"}, {0xe8, 0x1e5, 0x80, "b1a4fc0d4eb1f02651bac4a9d5e5a2c91a86498ca9ef63a3d154db0b0d5da026cf95e9bf257906f8de8a7bb13114f9cadeb9b733631e5c4a67fb60cb683c67c08b44846625310c9f8d82de557d04389f0a7f14c54c00e6672b86545b3a983dd0539b3a7fde7992cce8bc1ddccd7567c19c9169dd99cdf8921d229209d2a1f88cb0788d54866321ed46027de04a8bed5030001de168cc486c2634be4afc8f593bef902dcd0a48edeb1201d72dd680d31e85c01d85515672a612eea1e6965f1d0aa8d0e4626a26619d36f0c02b1b88ef4c19497a3fa1b8cd36"}], 0x1360}, 0x90) sendmsg$NL80211_CMD_LEAVE_MESH(r8, &(0x7f0000002080)={&(0x7f0000001fc0)={0x10, 0x0, 0x0, 0x82210006}, 0xc, &(0x7f0000002040)={&(0x7f0000002000)={0x1c, r3, 0x400, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x48000}, 0x40) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r2, 0x8982, &(0x7f00000020c0)={0x0, 'veth1_to_hsr\x00', {0x4}}) getsockopt$inet_sctp6_SCTP_RTOINFO(r5, 0x84, 0x0, &(0x7f0000002100)={r0, 0x3, 0x5, 0xa0000}, &(0x7f0000002140)=0x10) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r8, 0x84, 0x7c, &(0x7f0000002180)={r9, 0x5, 0x7f}, &(0x7f00000021c0)=0x8) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000002280)={r5, 0x58, &(0x7f0000002200)}, 0x10) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = accept(r7, &(0x7f00000022c0)=@in={0x2, 0x0, @loopback}, &(0x7f0000002340)=0x80) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r8, 0x84, 0x7b, &(0x7f0000002380)={r9, 0x7}, &(0x7f00000023c0)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r11, 0x84, 0x7c, &(0x7f0000002400)={r12, 0x5, 0xd}, &(0x7f0000002440)=0x8) sendmsg$NL80211_CMD_SET_INTERFACE(r10, &(0x7f0000002580)={&(0x7f0000002480)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000002540)={&(0x7f0000002500)={0x38, r3, 0x400, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xc}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x40) 683.563µs ago: executing program 2 (id=1260): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000000), 0x4) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000048000000030a05020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a3000000000080007006e6174003c000000060a01040000000000000000010000001400048010000180090001006d6173710000000008000b40000000000900010073797a300000000014000000110001"], 0xcc}, 0x1, 0x0, 0x0, 0x880}, 0x0) (async) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 0s ago: executing program 1 (id=1261): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000180)={'bond0\x00', @ifru_names='rose0\x00'}) ioctl$sock_netdev_private(r0, 0x89fa, &(0x7f0000000000)="2226d345e1469117a45f45680b82b2006a9aa9ba4afca98e32d167df6bd6a053e4ba9416b17c700f5b37d68e5fca84303508d7eafe7ff621f806d7e075") ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f0000000040)) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.178' (ED25519) to the list of known hosts. [ 66.923717][ T5854] cgroup: Unknown subsys name 'net' [ 67.077683][ T5854] cgroup: Unknown subsys name 'cpuset' [ 67.086262][ T5854] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 68.504655][ T5854] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 70.880482][ T5872] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 70.896650][ T5872] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 70.899519][ T5877] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 70.912308][ T5877] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 70.912373][ T5872] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 70.920697][ T5877] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 70.934803][ T5877] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 70.943573][ T5877] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 70.951879][ T5877] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 70.970353][ T5877] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 70.978396][ T5877] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 70.983614][ T5883] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 70.989377][ T5877] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 70.995947][ T5883] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 71.002364][ T5877] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 71.013546][ T5187] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 71.015754][ T5883] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 71.022609][ T5187] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 71.032396][ T5884] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 71.037592][ T5187] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 71.051347][ T5187] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 71.058761][ T5884] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 71.078116][ T5884] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 71.115190][ T5884] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 71.124939][ T5884] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 71.300167][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.314923][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.641251][ T5874] chnl_net:caif_netlink_parms(): no params data found [ 71.709620][ T5865] chnl_net:caif_netlink_parms(): no params data found [ 71.739587][ T5864] chnl_net:caif_netlink_parms(): no params data found [ 71.942453][ T5867] chnl_net:caif_netlink_parms(): no params data found [ 71.960828][ T5873] chnl_net:caif_netlink_parms(): no params data found [ 72.058896][ T5874] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.066778][ T5874] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.074062][ T5874] bridge_slave_0: entered allmulticast mode [ 72.082161][ T5874] bridge_slave_0: entered promiscuous mode [ 72.148009][ T5874] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.155409][ T5874] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.162541][ T5874] bridge_slave_1: entered allmulticast mode [ 72.169701][ T5874] bridge_slave_1: entered promiscuous mode [ 72.205828][ T5864] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.212962][ T5864] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.220455][ T5864] bridge_slave_0: entered allmulticast mode [ 72.228454][ T5864] bridge_slave_0: entered promiscuous mode [ 72.256633][ T5874] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.265891][ T5865] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.273044][ T5865] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.281232][ T5865] bridge_slave_0: entered allmulticast mode [ 72.288368][ T5865] bridge_slave_0: entered promiscuous mode [ 72.297216][ T5865] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.304355][ T5865] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.311990][ T5865] bridge_slave_1: entered allmulticast mode [ 72.319202][ T5865] bridge_slave_1: entered promiscuous mode [ 72.330350][ T5864] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.337875][ T5864] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.345091][ T5864] bridge_slave_1: entered allmulticast mode [ 72.352015][ T5864] bridge_slave_1: entered promiscuous mode [ 72.365608][ T5874] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.457752][ T5874] team0: Port device team_slave_0 added [ 72.498921][ T5873] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.506409][ T5873] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.513834][ T5873] bridge_slave_0: entered allmulticast mode [ 72.521468][ T5873] bridge_slave_0: entered promiscuous mode [ 72.529255][ T5873] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.536445][ T5873] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.543578][ T5873] bridge_slave_1: entered allmulticast mode [ 72.551542][ T5873] bridge_slave_1: entered promiscuous mode [ 72.560053][ T5874] team0: Port device team_slave_1 added [ 72.568143][ T5865] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.581273][ T5867] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.588491][ T5867] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.595929][ T5867] bridge_slave_0: entered allmulticast mode [ 72.602841][ T5867] bridge_slave_0: entered promiscuous mode [ 72.612716][ T5864] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.624074][ T5864] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.673376][ T5865] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.697674][ T5867] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.704941][ T5867] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.712066][ T5867] bridge_slave_1: entered allmulticast mode [ 72.719805][ T5867] bridge_slave_1: entered promiscuous mode [ 72.751880][ T5874] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.758887][ T5874] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.784997][ T5874] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.835723][ T5873] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.848206][ T5873] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.858852][ T5874] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.866162][ T5874] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.892420][ T5874] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.906579][ T5865] team0: Port device team_slave_0 added [ 72.916156][ T5865] team0: Port device team_slave_1 added [ 72.936164][ T5864] team0: Port device team_slave_0 added [ 72.945015][ T5867] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.975211][ T5884] Bluetooth: hci1: command tx timeout [ 72.991613][ T5867] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.002706][ T5864] team0: Port device team_slave_1 added [ 73.037405][ T5873] team0: Port device team_slave_0 added [ 73.046475][ T5873] team0: Port device team_slave_1 added [ 73.055087][ T5884] Bluetooth: hci0: command tx timeout [ 73.067428][ T5865] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.074382][ T5865] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.101530][ T5865] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.134711][ T5884] Bluetooth: hci4: command tx timeout [ 73.135242][ T5882] Bluetooth: hci2: command tx timeout [ 73.172526][ T5865] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.181006][ T5865] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.207383][ T5865] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.218680][ T5882] Bluetooth: hci3: command tx timeout [ 73.245301][ T5864] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.252265][ T5864] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.278221][ T5864] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.320589][ T5874] hsr_slave_0: entered promiscuous mode [ 73.327477][ T5874] hsr_slave_1: entered promiscuous mode [ 73.336606][ T5867] team0: Port device team_slave_0 added [ 73.343055][ T5864] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.350060][ T5864] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.376546][ T5864] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.395777][ T5873] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.402750][ T5873] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.429208][ T5873] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.445945][ T5867] team0: Port device team_slave_1 added [ 73.482385][ T5873] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.489457][ T5873] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.515822][ T5873] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.552118][ T5867] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.559825][ T5867] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.586411][ T5867] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.634257][ T5867] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.641454][ T5867] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.667553][ T5867] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.692114][ T5865] hsr_slave_0: entered promiscuous mode [ 73.698765][ T5865] hsr_slave_1: entered promiscuous mode [ 73.705125][ T5865] debugfs: 'hsr0' already exists in 'hsr' [ 73.710930][ T5865] Cannot create hsr debugfs directory [ 73.770210][ T5864] hsr_slave_0: entered promiscuous mode [ 73.777506][ T5864] hsr_slave_1: entered promiscuous mode [ 73.783526][ T5864] debugfs: 'hsr0' already exists in 'hsr' [ 73.789398][ T5864] Cannot create hsr debugfs directory [ 73.817949][ T5873] hsr_slave_0: entered promiscuous mode [ 73.824146][ T5873] hsr_slave_1: entered promiscuous mode [ 73.830741][ T5873] debugfs: 'hsr0' already exists in 'hsr' [ 73.836531][ T5873] Cannot create hsr debugfs directory [ 74.015548][ T5867] hsr_slave_0: entered promiscuous mode [ 74.021767][ T5867] hsr_slave_1: entered promiscuous mode [ 74.028606][ T5867] debugfs: 'hsr0' already exists in 'hsr' [ 74.034347][ T5867] Cannot create hsr debugfs directory [ 74.412774][ T5874] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 74.439078][ T5874] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 74.450806][ T5874] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 74.481473][ T5874] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 74.543397][ T5865] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 74.560245][ T5865] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 74.577342][ T5865] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 74.600746][ T5865] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 74.672767][ T5873] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 74.687462][ T5873] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 74.698146][ T5873] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 74.707783][ T5873] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 74.816898][ T5864] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 74.832049][ T5864] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 74.842547][ T5864] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 74.882403][ T5864] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 74.956625][ T5867] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 74.969858][ T5867] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 74.981210][ T5867] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 74.993443][ T5867] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 75.053334][ T5874] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.060191][ T5882] Bluetooth: hci1: command tx timeout [ 75.134835][ T5882] Bluetooth: hci0: command tx timeout [ 75.141816][ T5874] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.153948][ T5865] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.183805][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.191123][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.215531][ T5882] Bluetooth: hci2: command tx timeout [ 75.220978][ T5882] Bluetooth: hci4: command tx timeout [ 75.262855][ T5873] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.273127][ T2934] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.280331][ T2934] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.295423][ T5882] Bluetooth: hci3: command tx timeout [ 75.321192][ T5865] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.337313][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.344420][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.366105][ T5873] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.396908][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.404059][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.420400][ T5864] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.448176][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.455337][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.479509][ T5864] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.492085][ T2993] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.499273][ T2993] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.511189][ T5867] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.558922][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.566126][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.622902][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.630090][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.654221][ T5867] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.722429][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.729660][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.762937][ T5873] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 75.774328][ T5873] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 75.816401][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.823510][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.843120][ T5865] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 75.951714][ T5874] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.153263][ T5874] veth0_vlan: entered promiscuous mode [ 76.237127][ T5874] veth1_vlan: entered promiscuous mode [ 76.438296][ T5873] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.469708][ T5865] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.480186][ T5874] veth0_macvtap: entered promiscuous mode [ 76.517588][ T5864] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.547390][ T5874] veth1_macvtap: entered promiscuous mode [ 76.703895][ T5874] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.725853][ T5867] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.746602][ T5864] veth0_vlan: entered promiscuous mode [ 76.753968][ T5874] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.801223][ T5865] veth0_vlan: entered promiscuous mode [ 76.813562][ T5864] veth1_vlan: entered promiscuous mode [ 76.826755][ T59] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.840316][ T59] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.869366][ T59] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.880209][ T59] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.915725][ T5865] veth1_vlan: entered promiscuous mode [ 76.998837][ T5864] veth0_macvtap: entered promiscuous mode [ 77.023803][ T5867] veth0_vlan: entered promiscuous mode [ 77.033214][ T5864] veth1_macvtap: entered promiscuous mode [ 77.092082][ T2934] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.102071][ T2934] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.108344][ T5873] veth0_vlan: entered promiscuous mode [ 77.122126][ T5867] veth1_vlan: entered promiscuous mode [ 77.135117][ T5882] Bluetooth: hci1: command tx timeout [ 77.143978][ T5864] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.158298][ T5865] veth0_macvtap: entered promiscuous mode [ 77.189583][ T5864] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.200629][ T5865] veth1_macvtap: entered promiscuous mode [ 77.215203][ T5882] Bluetooth: hci0: command tx timeout [ 77.223800][ T977] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.226460][ T5873] veth1_vlan: entered promiscuous mode [ 77.237438][ T977] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.273978][ T2993] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.284701][ T2993] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.304759][ T5882] Bluetooth: hci4: command tx timeout [ 77.305408][ T5884] Bluetooth: hci2: command tx timeout [ 77.324276][ T5865] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.342512][ T2993] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.355568][ T2993] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.362836][ T5874] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 77.381966][ T5884] Bluetooth: hci3: command tx timeout [ 77.417739][ T5865] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.453737][ T977] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.508760][ T977] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.531504][ T977] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.536274][ T5986] syz.1.2 uses obsolete (PF_INET,SOCK_PACKET) [ 77.550795][ T977] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.633827][ T977] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.644242][ T977] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.645549][ T5867] veth0_macvtap: entered promiscuous mode [ 77.671851][ T5873] veth0_macvtap: entered promiscuous mode [ 77.717132][ T5873] veth1_macvtap: entered promiscuous mode [ 77.751183][ T5867] veth1_macvtap: entered promiscuous mode [ 77.812389][ T977] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.829009][ T977] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.900925][ T5873] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.913778][ T2934] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.926523][ T2934] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.930771][ T5867] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.948210][ T5993] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7'. [ 77.968851][ T5867] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.989937][ T5873] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.094099][ T5993] tipc: Trying to set illegal importance in message [ 78.136164][ T2960] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.156305][ T2960] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.181574][ T2960] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.199489][ T2934] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.253604][ T5995] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.267330][ T5995] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.296850][ T2960] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.305192][ T2960] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.313033][ T2934] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.323845][ T5997] bridge0: port 3(syz_tun) entered blocking state [ 78.331735][ T5997] bridge0: port 3(syz_tun) entered disabled state [ 78.339985][ T5997] syz_tun: entered allmulticast mode [ 78.347980][ T5997] syz_tun: entered promiscuous mode [ 78.356668][ T5998] bond0: option ad_select: unable to set because the bond device is up [ 78.395046][ T2934] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.472771][ T2934] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.563059][ T2934] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.687911][ T2960] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.697211][ T2960] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.753843][ T2960] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.790035][ T2960] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.940444][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.970600][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.034290][ T2934] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.057576][ T2934] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.077552][ T6017] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 79.169595][ T6017] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 79.216640][ T5884] Bluetooth: hci1: command tx timeout [ 79.260148][ T6017] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 79.296790][ T5884] Bluetooth: hci0: command tx timeout [ 79.329477][ T6017] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13'. [ 79.381756][ T5884] Bluetooth: hci4: command tx timeout [ 79.381764][ T5882] Bluetooth: hci2: command tx timeout [ 79.458069][ T5884] Bluetooth: hci3: command tx timeout [ 79.753233][ T6057] netlink: 44 bytes leftover after parsing attributes in process `syz.2.22'. [ 79.944222][ T6065] Zero length message leads to an empty skb [ 79.985621][ T6065] netlink: 16 bytes leftover after parsing attributes in process `syz.4.25'. [ 80.009431][ T6065] netlink: 'syz.4.25': attribute type 16 has an invalid length. [ 80.021726][ T6065] netlink: 'syz.4.25': attribute type 3 has an invalid length. [ 80.030181][ T6065] netlink: 132 bytes leftover after parsing attributes in process `syz.4.25'. [ 80.161143][ T6076] netlink: 72 bytes leftover after parsing attributes in process `syz.4.25'. [ 80.182694][ T6076] netlink: 72 bytes leftover after parsing attributes in process `syz.4.25'. [ 80.302877][ T6077] sctp: [Deprecated]: syz.2.24 (pid 6077) Use of int in max_burst socket option. [ 80.302877][ T6077] Use struct sctp_assoc_value instead [ 80.334479][ T6086] netlink: 'syz.3.27': attribute type 1 has an invalid length. [ 80.387882][ T6090] netlink: 'syz.3.27': attribute type 10 has an invalid length. [ 80.459800][ T6086] netlink: 228 bytes leftover after parsing attributes in process `syz.3.27'. [ 80.520203][ T6086] netlink: 8 bytes leftover after parsing attributes in process `syz.3.27'. [ 80.523729][ T6090] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 80.776397][ T6108] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 80.830119][ T6109] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.33'. [ 81.065590][ T6114] tipc: Started in network mode [ 81.070633][ T6114] tipc: Node identity 5ae0a66e5c31, cluster identity 4711 [ 81.108959][ T6114] tipc: Enabled bearer , priority 0 [ 81.142805][ T6122] syzkaller0: entered promiscuous mode [ 81.161238][ T6122] syzkaller0: entered allmulticast mode [ 81.234639][ T6114] tipc: Resetting bearer [ 81.409725][ T6131] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 81.438529][ T6113] tipc: Resetting bearer [ 81.559717][ T6116] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 81.648082][ T6116] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 81.921186][ T6113] tipc: Disabling bearer [ 82.136640][ T5957] tipc: Node number set to 114402926 [ 83.064213][ T6171] __nla_validate_parse: 2 callbacks suppressed [ 83.064232][ T6171] netlink: 4 bytes leftover after parsing attributes in process `syz.1.47'. [ 83.206067][ T6187] syz.4.51: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 83.224017][ T6171] netlink: 'syz.1.47': attribute type 10 has an invalid length. [ 83.254177][ T6171] team0: Device veth1_macvtap failed to register rx_handler [ 83.266964][ T6187] CPU: 0 UID: 0 PID: 6187 Comm: syz.4.51 Not tainted syzkaller #0 PREEMPT(full) [ 83.266987][ T6187] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 83.267006][ T6187] Call Trace: [ 83.267014][ T6187] [ 83.267022][ T6187] dump_stack_lvl+0x189/0x250 [ 83.267061][ T6187] ? __pfx_dump_stack_lvl+0x10/0x10 [ 83.267083][ T6187] ? __pfx__printk+0x10/0x10 [ 83.267105][ T6187] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 83.267124][ T6187] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 83.267143][ T6187] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 83.267165][ T6187] warn_alloc+0x214/0x310 [ 83.267189][ T6187] ? stack_depot_save_flags+0x41b/0x860 [ 83.267217][ T6187] ? __pfx_warn_alloc+0x10/0x10 [ 83.267243][ T6187] ? kasan_save_track+0x4f/0x80 [ 83.267265][ T6187] ? xskq_create+0x56/0x170 [ 83.267280][ T6187] ? xsk_init_queue+0xb0/0x110 [ 83.267294][ T6187] ? xsk_setsockopt+0x4dc/0x8d0 [ 83.267314][ T6187] ? do_sock_setsockopt+0x17c/0x1b0 [ 83.267333][ T6187] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 83.267351][ T6187] ? do_syscall_64+0xfa/0x3b0 [ 83.267368][ T6187] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.267395][ T6187] __vmalloc_node_range_noprof+0x125/0x12f0 [ 83.267449][ T6187] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 83.267473][ T6187] ? xskq_create+0x56/0x170 [ 83.267493][ T6187] ? __kasan_kmalloc+0x93/0xb0 [ 83.267518][ T6187] vmalloc_user_noprof+0xad/0xf0 [ 83.267542][ T6187] ? xskq_create+0xbf/0x170 [ 83.267560][ T6187] xskq_create+0xbf/0x170 [ 83.267580][ T6187] xsk_init_queue+0xb0/0x110 [ 83.267598][ T6187] xsk_setsockopt+0x4dc/0x8d0 [ 83.267622][ T6187] ? __pfx_xsk_setsockopt+0x10/0x10 [ 83.267644][ T6187] ? __pfx_aa_sk_perm+0x10/0x10 [ 83.267673][ T6187] ? aa_sock_opt_perm+0xff/0x1b0 [ 83.267697][ T6187] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 83.267715][ T6187] ? __pfx_xsk_setsockopt+0x10/0x10 [ 83.267741][ T6187] do_sock_setsockopt+0x17c/0x1b0 [ 83.267764][ T6187] __x64_sys_setsockopt+0x13f/0x1b0 [ 83.267791][ T6187] do_syscall_64+0xfa/0x3b0 [ 83.267806][ T6187] ? lockdep_hardirqs_on+0x9c/0x150 [ 83.267824][ T6187] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.267840][ T6187] ? clear_bhb_loop+0x60/0xb0 [ 83.267860][ T6187] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.267877][ T6187] RIP: 0033:0x7ff33038eec9 [ 83.267901][ T6187] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 83.267914][ T6187] RSP: 002b:00007ff3311fd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 83.267934][ T6187] RAX: ffffffffffffffda RBX: 00007ff3305e5fa0 RCX: 00007ff33038eec9 [ 83.267946][ T6187] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000006 [ 83.267957][ T6187] RBP: 00007ff330411f91 R08: 0000000000000004 R09: 0000000000000000 [ 83.267967][ T6187] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 83.267978][ T6187] R13: 00007ff3305e6038 R14: 00007ff3305e5fa0 R15: 00007ffd61148988 [ 83.268008][ T6187] [ 83.269074][ T6187] Mem-Info: [ 83.625599][ T6187] active_anon:7615 inactive_anon:0 isolated_anon:0 [ 83.625599][ T6187] active_file:2564 inactive_file:39872 isolated_file:0 [ 83.625599][ T6187] unevictable:768 dirty:1488 writeback:0 [ 83.625599][ T6187] slab_reclaimable:10449 slab_unreclaimable:96933 [ 83.625599][ T6187] mapped:32222 shmem:3353 pagetables:1210 [ 83.625599][ T6187] sec_pagetables:0 bounce:0 [ 83.625599][ T6187] kernel_misc_reclaimable:0 [ 83.625599][ T6187] free:1310795 free_pcp:31600 free_cma:0 [ 83.741606][ T6187] Node 0 active_anon:32860kB inactive_anon:0kB active_file:10256kB inactive_file:159288kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:132988kB dirty:5944kB writeback:0kB shmem:14276kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12496kB pagetables:4480kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 83.802973][ T6187] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:8kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:160kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 83.864980][ T6187] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 83.920686][ T6187] lowmem_reserve[]: 0 2497 2499 2499 2499 [ 83.929075][ T6187] Node 0 DMA32 free:1345068kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:35960kB inactive_anon:0kB active_file:10256kB inactive_file:157720kB unevictable:1536kB writepending:5940kB present:3129332kB managed:2557412kB mlocked:0kB bounce:0kB free_pcp:88628kB local_pcp:51124kB free_cma:0kB [ 83.992734][ T6187] lowmem_reserve[]: 0 0 1 1 1 [ 84.002855][ T6187] Node 0 Normal free:12kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1568kB unevictable:0kB writepending:4kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:8kB free_cma:0kB [ 84.105748][ T6187] lowmem_reserve[]: 0 0 0 0 0 [ 84.110528][ T6187] Node 1 Normal free:3887852kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:8kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:24664kB local_pcp:14400kB free_cma:0kB [ 84.184632][ T6187] lowmem_reserve[]: 0 0 0 0 0 [ 84.190580][ T6187] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 84.192528][ T43] cfg80211: failed to load regulatory.db [ 84.304283][ T6187] Node 0 DMA32: 1553*4kB (UME) 299*8kB (UM) 56*16kB (UM) 93*32kB (UME) 9*64kB (UME) 5*128kB (UME) 2*256kB (UM) 2*512kB (ME) 2*1024kB (UE) 9*2048kB (M) 322*4096kB (M) = 1354620kB [ 84.348880][ T6187] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 84.403604][ T6187] Node 1 Normal: 211*4kB (UE) 60*8kB (UME) 42*16kB (UME) 35*32kB (UME) 15*64kB (UME) 8*128kB (UME) 3*256kB (UM) 2*512kB (M) 2*1024kB (ME) 0*2048kB 947*4096kB (M) = 3887852kB [ 84.413479][ T6219] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 84.481509][ T6187] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 84.522535][ T6213] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 84.547923][ T6187] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 84.567400][ T6227] netlink: 160 bytes leftover after parsing attributes in process `syz.1.59'. [ 84.597091][ T6187] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 84.606157][ T6213] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 84.664842][ T6213] netlink: 4 bytes leftover after parsing attributes in process `syz.2.55'. [ 84.694635][ T6187] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 84.748283][ T6187] 43898 total pagecache pages [ 84.753624][ T6187] 0 pages in swap cache [ 84.778509][ T6187] Free swap = 124996kB [ 84.782699][ T6187] Total swap = 124996kB [ 84.801353][ T6239] netlink: 16 bytes leftover after parsing attributes in process `syz.1.63'. [ 84.818319][ T6187] 2097051 pages RAM [ 84.826061][ T6187] 0 pages HighMem/MovableOnly [ 84.834708][ T6187] 425672 pages reserved [ 84.854669][ T6187] 0 pages cma reserved [ 85.072612][ T6256] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 85.263554][ T6266] netlink: 16 bytes leftover after parsing attributes in process `syz.3.67'. [ 85.299411][ T6268] netlink: 'syz.1.69': attribute type 6 has an invalid length. [ 85.365211][ T6268] netlink: 8 bytes leftover after parsing attributes in process `syz.1.69'. [ 85.410942][ T6272] netlink: 68 bytes leftover after parsing attributes in process `syz.0.70'. [ 85.411784][ T6273] netlink: 24 bytes leftover after parsing attributes in process `syz.2.71'. [ 85.832950][ T6294] netlink: 8 bytes leftover after parsing attributes in process `syz.0.74'. [ 85.885289][ T6294] netlink: 8 bytes leftover after parsing attributes in process `syz.0.74'. [ 85.894132][ T6294] netlink: 'syz.0.74': attribute type 12 has an invalid length. [ 85.901978][ T6294] netlink: 'syz.0.74': attribute type 11 has an invalid length. [ 86.486337][ T6321] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 86.578061][ T6321] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 86.698552][ T6345] tipc: Enabling of bearer rejected, failed to enable media [ 86.722737][ T6321] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 86.924519][ T6360] warning: `syz.3.87' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 87.526789][ T6387] 8021q: adding VLAN 0 to HW filter on device bond1 [ 87.562966][ T6390] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 87.913558][ T6417] delete_channel: no stack [ 87.925682][ T6416] netlink: 'syz.2.99': attribute type 1 has an invalid length. [ 88.086179][ T6428] __nla_validate_parse: 15 callbacks suppressed [ 88.086196][ T6428] netlink: 32 bytes leftover after parsing attributes in process `syz.0.102'. [ 88.174312][ T6420] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.182108][ T6420] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.195828][ T6434] Bluetooth: MGMT ver 1.23 [ 88.271030][ T6420] bridge_slave_0: left allmulticast mode [ 88.278952][ T6420] bridge_slave_0: left promiscuous mode [ 88.284818][ T6420] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.303625][ T6420] bridge_slave_1: left allmulticast mode [ 88.309419][ T6420] bridge_slave_1: left promiscuous mode [ 88.315621][ T6420] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.331905][ T6420] bond0: (slave bond_slave_0): Releasing backup interface [ 88.345903][ T6420] bond0: (slave bond_slave_1): Releasing backup interface [ 88.363319][ T6420] team0: Port device team_slave_0 removed [ 88.378554][ T6420] team0: Port device team_slave_1 removed [ 88.388561][ T6420] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 88.398523][ T6420] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 88.416106][ T6420] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 88.427612][ T6420] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 88.525635][ T6431] wireguard: wg2: Could not create IPv4 socket [ 88.553015][ T6435] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 88.767229][ T6451] netlink: 20 bytes leftover after parsing attributes in process `syz.3.108'. [ 88.833704][ T6453] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 88.850268][ T6453] netlink: 4 bytes leftover after parsing attributes in process `syz.4.109'. [ 88.879038][ T6441] mac80211_hwsim hwsim2 syzkaller0: entered promiscuous mode [ 88.887072][ T6441] mac80211_hwsim hwsim2 syzkaller0: entered allmulticast mode [ 88.896447][ T977] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.911050][ T977] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.972595][ T6456] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 89.018050][ T6451] 8021q: adding VLAN 0 to HW filter on device bond1 [ 89.051952][ T6449] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 89.125700][ T6449] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 89.149780][ T6449] netlink: 4 bytes leftover after parsing attributes in process `syz.0.106'. [ 89.186186][ T6453] macsec1: entered promiscuous mode [ 89.191495][ T6453] bridge0: entered promiscuous mode [ 89.208590][ T6453] macsec1: entered allmulticast mode [ 89.241876][ T6453] bridge0: entered allmulticast mode [ 89.265378][ T6453] bridge0: port 1(macsec1) entered blocking state [ 89.281648][ T6453] bridge0: port 1(macsec1) entered disabled state [ 89.289317][ T6472] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 89.303946][ T6453] bridge0: left allmulticast mode [ 89.310443][ T6453] bridge0: left promiscuous mode [ 89.333259][ T977] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.350578][ T6474] netlink: 116 bytes leftover after parsing attributes in process `syz.2.113'. [ 89.407710][ T977] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.455995][ T6477] netlink: 146780 bytes leftover after parsing attributes in process `syz.4.115'. [ 89.737699][ T6491] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 89.807256][ T6493] netlink: 16 bytes leftover after parsing attributes in process `syz.3.121'. [ 90.359103][ T6528] netlink: 12 bytes leftover after parsing attributes in process `syz.2.127'. [ 90.361312][ T6529] netlink: 8 bytes leftover after parsing attributes in process `syz.1.129'. [ 90.738677][ T6546] netlink: 'syz.0.132': attribute type 13 has an invalid length. [ 91.036145][ T6560] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 91.150115][ T6562] tipc: Enabled bearer , priority 0 [ 91.181802][ T6555] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 91.182330][ T6562] syzkaller0: entered promiscuous mode [ 91.250811][ T6562] syzkaller0: entered allmulticast mode [ 91.285513][ T6555] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 91.300732][ T6572] netlink: 'syz.2.138': attribute type 2 has an invalid length. [ 91.328886][ T6572] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.138'. [ 91.342716][ T6574] netlink: 'syz.0.139': attribute type 5 has an invalid length. [ 91.353567][ T6570] tipc: Resetting bearer [ 91.357132][ T6572] nbd: must specify a device to reconfigure [ 91.364647][ T6562] netlink: 'syz.3.136': attribute type 10 has an invalid length. [ 91.379410][ T6562] bridge0: port 4(team0) entered blocking state [ 91.390778][ T6562] bridge0: port 4(team0) entered disabled state [ 91.402339][ T6574] netlink: 'syz.0.139': attribute type 5 has an invalid length. [ 91.422327][ T6562] team0: entered allmulticast mode [ 91.431294][ T6574] netlink: 'syz.0.139': attribute type 5 has an invalid length. [ 91.444810][ T6562] team_slave_0: entered allmulticast mode [ 91.460436][ T6574] netlink: 'syz.0.139': attribute type 5 has an invalid length. [ 91.463107][ T6562] team_slave_1: entered allmulticast mode [ 91.513482][ T6562] team0: entered promiscuous mode [ 91.531344][ T6562] team_slave_0: entered promiscuous mode [ 91.540131][ T6574] netlink: 'syz.0.139': attribute type 5 has an invalid length. [ 91.553154][ T6562] team_slave_1: entered promiscuous mode [ 91.584343][ T6574] netlink: 'syz.0.139': attribute type 5 has an invalid length. [ 91.602353][ T6561] tipc: Resetting bearer [ 91.633641][ T6574] netlink: 'syz.0.139': attribute type 5 has an invalid length. [ 91.663562][ T6561] tipc: Disabling bearer [ 92.293395][ T6614] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 92.661314][ T6642] nbd: must specify a device to reconfigure [ 93.181048][ T6665] 8021q: adding VLAN 0 to HW filter on device bond1 [ 93.323299][ T6682] bond1: (slave veth3): Enslaving as an active interface with a down link [ 93.376657][ T6665] bond1: (slave veth0_to_bond): making interface the new active one [ 93.389285][ T6665] veth0_to_bond: entered promiscuous mode [ 93.396832][ T6665] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 93.810445][ T6707] __nla_validate_parse: 6 callbacks suppressed [ 93.810465][ T6707] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.170'. [ 93.844793][ T6707] nbd: must specify a device to reconfigure [ 94.217251][ T6723] (unnamed net_device) (uninitialized): option mode: invalid value (133) [ 94.228376][ T6723] xt_policy: too many policy elements [ 94.747033][ T6757] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.187'. [ 94.793653][ T6757] nbd: must specify a device to reconfigure [ 94.980395][ T6766] netlink: 4 bytes leftover after parsing attributes in process `syz.0.192'. [ 95.035957][ T6766] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 95.076457][ T6774] netlink: 24 bytes leftover after parsing attributes in process `syz.1.195'. [ 95.258711][ T6788] netlink: 256 bytes leftover after parsing attributes in process `syz.2.198'. [ 95.479538][ T6801] netlink: 48 bytes leftover after parsing attributes in process `syz.3.200'. [ 95.574079][ T6809] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.204'. [ 95.602153][ T6809] nbd: must specify a device to reconfigure [ 95.797686][ T6814] validate_nla: 36 callbacks suppressed [ 95.797702][ T6814] netlink: 'syz.0.205': attribute type 1 has an invalid length. [ 95.851381][ T6814] netlink: 224 bytes leftover after parsing attributes in process `syz.0.205'. [ 95.895158][ T6814] netlink: 8 bytes leftover after parsing attributes in process `syz.0.205'. [ 95.899727][ T6819] macvtap1: entered promiscuous mode [ 95.936280][ T6819] macvtap1: entered allmulticast mode [ 95.957951][ T6819] bond_slave_0: entered promiscuous mode [ 95.963829][ T6819] bond_slave_1: entered promiscuous mode [ 95.971739][ T6819] bond0: entered allmulticast mode [ 95.981442][ T6819] bond_slave_0: entered allmulticast mode [ 95.991863][ T6819] bond_slave_1: entered allmulticast mode [ 95.998198][ T6819] bond0: entered promiscuous mode [ 96.014806][ T6819] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 96.026840][ T6819] team0: Device macvtap1 failed to register rx_handler [ 96.046840][ T6819] bond0: left allmulticast mode [ 96.061292][ T6819] bond_slave_0: left allmulticast mode [ 96.073132][ T6819] bond_slave_1: left allmulticast mode [ 96.079889][ T6819] bond0: left promiscuous mode [ 96.086699][ T6819] bond_slave_0: left promiscuous mode [ 96.092209][ T6819] bond_slave_1: left promiscuous mode [ 96.561471][ T6853] netlink: 'syz.1.217': attribute type 2 has an invalid length. [ 96.604354][ T6853] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.217'. [ 96.638010][ T6853] nbd: must specify a device to reconfigure [ 96.889672][ T6870] netlink: 'syz.3.222': attribute type 10 has an invalid length. [ 96.930979][ T6870] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 97.475937][ T6901] ipvlan0: entered promiscuous mode [ 97.481537][ T6901] ipvlan0: entered allmulticast mode [ 97.490042][ T6901] bridge0: entered allmulticast mode [ 97.609973][ T6914] netlink: 'syz.0.238': attribute type 33 has an invalid length. [ 97.621981][ T6914] (unnamed net_device) (uninitialized): option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 97.856348][ T12] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.937220][ T6933] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 97.976732][ T6933] gretap1: entered promiscuous mode [ 97.997252][ T6933] gretap1: entered allmulticast mode [ 98.205289][ T6937] 8021q: adding VLAN 0 to HW filter on device bond1 [ 98.328798][ T6941] IPv6: NLM_F_CREATE should be specified when creating new route [ 98.562144][ T6972] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 98.591024][ T6972] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 99.217527][ T6960] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 99.397034][ T7000] __nla_validate_parse: 9 callbacks suppressed [ 99.397050][ T7000] netlink: 8 bytes leftover after parsing attributes in process `syz.3.260'. [ 99.472931][ T7001] netlink: 830 bytes leftover after parsing attributes in process `syz.0.261'. [ 99.570219][ T7006] netlink: 32 bytes leftover after parsing attributes in process `syz.0.261'. [ 99.599386][ T7008] ip_tunnel: non-ECT from 2.0.0.0 with TOS=0x3 [ 99.647516][ T7010] netlink: 20 bytes leftover after parsing attributes in process `syz.1.265'. [ 99.880288][ T7010] 8021q: adding VLAN 0 to HW filter on device bond2 [ 100.103772][ T7023] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 100.325987][ T7037] netlink: 132 bytes leftover after parsing attributes in process `syz.3.272'. [ 100.398402][ T7037] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.272'. [ 100.569598][ T7050] netlink: 20 bytes leftover after parsing attributes in process `syz.4.278'. [ 100.648066][ T7050] 8021q: adding VLAN 0 to HW filter on device bond1 [ 100.687760][ T7054] ip6gre1: entered allmulticast mode [ 100.826526][ T7066] openvswitch: netlink: Unknown key attributes 2 [ 100.850706][ T7067] netlink: 16 bytes leftover after parsing attributes in process `syz.1.283'. [ 100.865536][ T7066] bridge_slave_0: mtu less than device minimum [ 101.003468][ T7078] netlink: 248 bytes leftover after parsing attributes in process `syz.0.287'. [ 101.137022][ T7083] netlink: 'syz.1.288': attribute type 2 has an invalid length. [ 101.272559][ T7088] netlink: 24 bytes leftover after parsing attributes in process `syz.0.290'. [ 101.441290][ T7103] netlink: 'syz.3.292': attribute type 21 has an invalid length. [ 101.484904][ T7092] 8021q: adding VLAN 0 to HW filter on device bond2 [ 102.207902][ T7140] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.376359][ T7140] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.425830][ T7150] 8021q: adding VLAN 0 to HW filter on device bond3 [ 102.514284][ T7140] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.912401][ T12] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.963287][ T12] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.997587][ T12] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.021837][ T12] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.627704][ T977] veth0_to_bond: left promiscuous mode [ 125.711306][ T7245] __nla_validate_parse: 7 callbacks suppressed [ 125.711324][ T7245] netlink: 8 bytes leftover after parsing attributes in process `syz.2.318'. [ 125.982792][ T7257] syzkaller0: entered promiscuous mode [ 126.014593][ T7257] syzkaller0: entered allmulticast mode [ 126.073820][ T981] IPVS: starting estimator thread 0... [ 126.090764][ T7268] delete_channel: no stack [ 126.096792][ T7266] IPVS: set_ctl: invalid protocol: 135 172.30.0.3:20001 [ 126.161023][ T7268] bridge: RTM_NEWNEIGH with invalid ether address [ 126.176204][ T7267] IPVS: using max 28 ests per chain, 67200 per kthread [ 126.201061][ T7268] bridge: RTM_NEWNEIGH with invalid ether address [ 126.331666][ T7281] sctp: [Deprecated]: syz.2.329 (pid 7281) Use of int in max_burst socket option. [ 126.331666][ T7281] Use struct sctp_assoc_value instead [ 126.482829][ T7300] netlink: 'syz.3.334': attribute type 2 has an invalid length. [ 126.630836][ T7304] netlink: 8 bytes leftover after parsing attributes in process `syz.1.335'. [ 126.643041][ T7311] trusted_key: syz.2.337 sent an empty control message without MSG_MORE. [ 126.661594][ T7308] netlink: 28 bytes leftover after parsing attributes in process `syz.0.336'. [ 126.777324][ T7318] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 126.936212][ T7304] netlink: 8 bytes leftover after parsing attributes in process `syz.1.335'. [ 126.951273][ T7304] netlink: 8 bytes leftover after parsing attributes in process `syz.1.335'. [ 126.997878][ T7304] netlink: 8 bytes leftover after parsing attributes in process `syz.1.335'. [ 126.998033][ T7321] netlink: 8 bytes leftover after parsing attributes in process `syz.3.340'. [ 127.017949][ T7304] netlink: 8 bytes leftover after parsing attributes in process `syz.1.335'. [ 127.038802][ T7321] netlink: 4 bytes leftover after parsing attributes in process `syz.3.340'. [ 127.073491][ T7304] netlink: 8 bytes leftover after parsing attributes in process `syz.1.335'. [ 127.320638][ T7346] netlink: 'syz.3.347': attribute type 1 has an invalid length. [ 127.518831][ T7353] openvswitch: netlink: Unexpected mask (mask=40040, allowed=10048) [ 127.667639][ T7357] bridge_slave_1: left allmulticast mode [ 127.673343][ T7357] bridge_slave_1: left promiscuous mode [ 127.679228][ T7357] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.760526][ T7357] bridge_slave_0: left allmulticast mode [ 127.768477][ T7357] bridge_slave_0: left promiscuous mode [ 127.774371][ T7357] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.152347][ T7377] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 128.527885][ T7396] netlink: zone id is out of range [ 128.541026][ T7396] netlink: zone id is out of range [ 128.555823][ T7396] netlink: zone id is out of range [ 128.565030][ T7398] tipc: Enabled bearer , priority 0 [ 128.577782][ T7396] netlink: zone id is out of range [ 128.599416][ T7398] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode [ 128.607360][ T7396] netlink: zone id is out of range [ 128.612481][ T7396] netlink: zone id is out of range [ 128.638336][ T7398] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode [ 128.652818][ T7396] netlink: zone id is out of range [ 128.686988][ T7398] tipc: Resetting bearer [ 129.483122][ T7451] netlink: 'syz.2.380': attribute type 1 has an invalid length. [ 129.712597][ T7457] 8021q: adding VLAN 0 to HW filter on device bond4 [ 130.726961][ T7495] __nla_validate_parse: 75 callbacks suppressed [ 130.726979][ T7495] netlink: 40 bytes leftover after parsing attributes in process `syz.4.389'. [ 130.964175][ T7524] netlink: 20 bytes leftover after parsing attributes in process `syz.3.395'. [ 131.155389][ T7524] 8021q: adding VLAN 0 to HW filter on device bond2 [ 131.947327][ T7571] netlink: 24 bytes leftover after parsing attributes in process `syz.0.408'. [ 131.960817][ T7574] netlink: 20 bytes leftover after parsing attributes in process `syz.2.409'. [ 132.036659][ T7574] 8021q: adding VLAN 0 to HW filter on device bond2 [ 132.141369][ T7585] netlink: 8 bytes leftover after parsing attributes in process `syz.4.412'. [ 132.545253][ T7605] netlink: 8 bytes leftover after parsing attributes in process `syz.2.419'. [ 132.900054][ T7628] netlink: 8 bytes leftover after parsing attributes in process `syz.1.422'. [ 133.040472][ T7632] tun0: tun_chr_ioctl cmd 1074025675 [ 133.057117][ T7632] tun0: persist disabled [ 133.080024][ T7632] tun0: tun_chr_ioctl cmd 2148553947 [ 133.613713][ T7655] netlink: 8 bytes leftover after parsing attributes in process `syz.2.431'. [ 133.737025][ T7665] netlink: 104 bytes leftover after parsing attributes in process `syz.3.432'. [ 133.763399][ T7666] netlink: 16 bytes leftover after parsing attributes in process `syz.1.434'. [ 133.871222][ T7672] netlink: 'syz.2.431': attribute type 11 has an invalid length. [ 133.941840][ T7655] syzkaller0: entered promiscuous mode [ 133.973838][ T7655] syzkaller0: entered allmulticast mode [ 134.034903][ T7668] tipc: Started in network mode [ 134.057655][ T7668] tipc: Node identity , cluster identity 4711 [ 134.098387][ T7668] tipc: Failed to obtain node identity [ 134.122282][ T7668] tipc: Enabling of bearer rejected, failed to enable media [ 134.417911][ T7693] sctp: [Deprecated]: syz.0.440 (pid 7693) Use of int in max_burst socket option deprecated. [ 134.417911][ T7693] Use struct sctp_assoc_value instead [ 135.879491][ T7717] netlink: 248 bytes leftover after parsing attributes in process `syz.3.446'. [ 135.938445][ T7717] NCSI netlink: No device for ifindex 0 [ 136.059415][ T7726] netlink: 'syz.1.450': attribute type 1 has an invalid length. [ 136.151832][ T7729] netlink: 'syz.0.451': attribute type 1 has an invalid length. [ 136.177541][ T7729] netlink: 'syz.0.451': attribute type 1 has an invalid length. [ 136.208926][ T7737] netlink: 28 bytes leftover after parsing attributes in process `syz.4.454'. [ 136.213566][ T7726] bond3: entered promiscuous mode [ 136.262943][ T7726] 8021q: adding VLAN 0 to HW filter on device bond3 [ 136.286940][ T7743] netlink: 28 bytes leftover after parsing attributes in process `syz.4.454'. [ 136.368194][ T7736] 8021q: adding VLAN 0 to HW filter on device bond3 [ 136.392800][ T7736] bond3: (slave wireguard0): The slave device specified does not support setting the MAC address [ 136.420992][ T7736] bond3: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 136.461117][ T7736] bond3: (slave wireguard0): making interface the new active one [ 136.491798][ T7736] wireguard0: entered promiscuous mode [ 136.506168][ T7736] bond3: (slave wireguard0): Enslaving as an active interface with an up link [ 136.530865][ T7736] netlink: 12 bytes leftover after parsing attributes in process `syz.1.450'. [ 136.735962][ T5882] Bluetooth: hci3: command 0x0405 tx timeout [ 136.812768][ T7770] netlink: 'syz.3.459': attribute type 4 has an invalid length. [ 136.824432][ T7765] netlink: 8 bytes leftover after parsing attributes in process `syz.2.460'. [ 136.867847][ T7768] tipc: Enabling of bearer rejected, already enabled [ 137.389627][ T7807] netlink: 20 bytes leftover after parsing attributes in process `syz.1.470'. [ 137.545333][ T7807] 8021q: adding VLAN 0 to HW filter on device bond4 [ 137.691606][ T7821] netlink: 28 bytes leftover after parsing attributes in process `syz.3.474'. [ 137.738567][ T7828] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_team, syncid = 4, id = 0 [ 137.795712][ T7821] netlink: 4 bytes leftover after parsing attributes in process `syz.3.474'. [ 138.347454][ T7857] netlink: 8 bytes leftover after parsing attributes in process `syz.1.485'. [ 138.362344][ T7847] tipc: Started in network mode [ 138.385793][ T7847] tipc: Node identity d660cdbfdaa3, cluster identity 4711 [ 138.394105][ T7847] tipc: Enabled bearer , priority 0 [ 138.404169][ T7862] netlink: 20 bytes leftover after parsing attributes in process `syz.2.486'. [ 138.542263][ T7862] 8021q: adding VLAN 0 to HW filter on device bond3 [ 138.555902][ T7847] syzkaller0: entered promiscuous mode [ 138.561510][ T7847] syzkaller0: entered allmulticast mode [ 138.605385][ T7876] netlink: 'syz.0.491': attribute type 6 has an invalid length. [ 138.625160][ T7842] tipc: Resetting bearer [ 138.652587][ T7842] tipc: Disabling bearer [ 138.704297][ T7876] netlink: 'syz.0.491': attribute type 1 has an invalid length. [ 138.814715][ T5882] Bluetooth: hci3: command 0x0405 tx timeout [ 138.867850][ T7897] (unnamed net_device) (uninitialized): Unable to set down delay as MII monitoring is disabled [ 139.314840][ T7919] tipc: Started in network mode [ 139.324480][ T7919] tipc: Node identity 080211, cluster identity 4711 [ 139.342079][ T7919] tipc: Enabled bearer , priority 0 [ 139.366065][ T7919] sch_tbf: burst 127 is lower than device syzkaller0 mtu (313) ! [ 139.485542][ T7926] net_ratelimit: 18 callbacks suppressed [ 139.485560][ T7926] openvswitch: netlink: Message has 24 unknown bytes. [ 139.541483][ T7919] geneve2: entered promiscuous mode [ 139.548879][ T7926] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 139.576439][ T7919] geneve2: entered allmulticast mode [ 139.606261][ T977] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 139.635345][ T977] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 139.691479][ T7933] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 139.808898][ T977] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 139.834472][ T977] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 140.470388][ T9] tipc: Node number set to 134353152 [ 140.770337][ T7994] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.913286][ T7994] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.040580][ T8009] netlink: 'syz.2.526': attribute type 1 has an invalid length. [ 141.052381][ T7994] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.167296][ T8019] __nla_validate_parse: 4 callbacks suppressed [ 141.167377][ T8019] netlink: 12 bytes leftover after parsing attributes in process `syz.0.528'. [ 141.227160][ T8009] bond4: entered promiscuous mode [ 141.232791][ T8009] 8021q: adding VLAN 0 to HW filter on device bond4 [ 141.269999][ T8015] 8021q: adding VLAN 0 to HW filter on device bond5 [ 141.279402][ T8015] bond4: (slave bond5): making interface the new active one [ 141.286893][ T8015] bond5: entered promiscuous mode [ 141.292911][ T8015] bond4: (slave bond5): Enslaving as an active interface with an up link [ 141.319483][ T7994] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.515628][ T8034] netlink: 40 bytes leftover after parsing attributes in process `syz.1.532'. [ 141.530485][ T13] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.614221][ T49] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.636338][ T8040] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 141.692703][ T2993] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.769433][ T977] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.944352][ T8055] netlink: 8 bytes leftover after parsing attributes in process `syz.4.539'. [ 142.042575][ T8060] tipc: Started in network mode [ 142.049873][ T8060] tipc: Node identity ac1414aa, cluster identity 4711 [ 142.062719][ T8060] tipc: Enabling of bearer rejected, failed to enable media [ 142.262951][ T8071] netlink: 12 bytes leftover after parsing attributes in process `syz.4.544'. [ 142.665265][ T8097] netlink: 'syz.1.552': attribute type 6 has an invalid length. [ 142.861466][ T8109] netlink: 8 bytes leftover after parsing attributes in process `syz.4.554'. [ 143.144404][ T8115] netlink: 32 bytes leftover after parsing attributes in process `syz.4.556'. [ 143.266123][ T8121] netlink: 60 bytes leftover after parsing attributes in process `syz.2.559'. [ 143.269467][ T8118] mac80211_hwsim hwsim2 syzkaller0: left promiscuous mode [ 143.297712][ T8118] mac80211_hwsim hwsim2 syzkaller0: left allmulticast mode [ 143.318278][ T8125] netlink: 16 bytes leftover after parsing attributes in process `syz.2.559'. [ 143.548127][ T8131] vcan0: tx drop: invalid da for name 0x0000000000000001 [ 143.686934][ T8139] netlink: 88 bytes leftover after parsing attributes in process `syz.4.563'. [ 143.730578][ T8139] netlink: 24 bytes leftover after parsing attributes in process `syz.4.563'. [ 143.842178][ T8129] batadv_slave_1: entered promiscuous mode [ 143.850931][ T8129] batman_adv: batadv0: Adding interface: macsec2 [ 143.857473][ T8129] batman_adv: batadv0: The MTU of interface macsec2 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 143.891344][ T8149] netlink: 'syz.3.567': attribute type 83 has an invalid length. [ 143.904943][ T8129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 143.923926][ T8129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.932731][ T8149] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 143.944368][ T8129] batman_adv: batadv0: Interface activated: macsec2 [ 144.481126][ T8176] netlink: 'syz.1.575': attribute type 1 has an invalid length. [ 144.509686][ T8176] netlink: 'syz.1.575': attribute type 4 has an invalid length. [ 144.640512][ T8176] syz.1.575 (8176) used greatest stack depth: 17864 bytes left [ 145.116158][ T8208] team0: Device wireguard0 is of different type [ 145.494274][ T8229] openvswitch: netlink: IP tunnel dst address not specified [ 145.642389][ T8244] netlink: 'syz.3.598': attribute type 1 has an invalid length. [ 145.651633][ T8244] netlink: 'syz.3.598': attribute type 1 has an invalid length. [ 145.661358][ T8244] netlink: 'syz.3.598': attribute type 2 has an invalid length. [ 145.736946][ T8198] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 145.743347][ T8198] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 146.189974][ T8270] __nla_validate_parse: 8 callbacks suppressed [ 146.189990][ T8270] netlink: 8 bytes leftover after parsing attributes in process `syz.2.606'. [ 146.366485][ T8276] netlink: 8 bytes leftover after parsing attributes in process `syz.2.608'. [ 146.415531][ T8276] netlink: 20 bytes leftover after parsing attributes in process `syz.2.608'. [ 146.415629][ T8278] netlink: 8 bytes leftover after parsing attributes in process `syz.2.608'. [ 146.480973][ T8276] geneve3: entered promiscuous mode [ 146.505536][ T8278] netlink: 20 bytes leftover after parsing attributes in process `syz.2.608'. [ 146.524643][ T8276] geneve3: entered allmulticast mode [ 147.096765][ T8311] netlink: 'syz.4.617': attribute type 9 has an invalid length. [ 147.268000][ T8322] netlink: 124 bytes leftover after parsing attributes in process `syz.1.618'. [ 147.288626][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880554fa800: rx timeout, send abort [ 147.298525][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff8880554fa800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 147.345856][ T8319] bond0: (slave bond_slave_0): Releasing backup interface [ 147.454134][ T8319] bond0: (slave bond_slave_1): Releasing backup interface [ 147.594191][ T8319] team0: Port device team_slave_0 removed [ 147.654491][ T8319] team0: Port device team_slave_1 removed [ 147.681526][ T8319] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 147.722000][ T8319] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 147.771644][ T8319] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 147.838472][ T8319] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 147.890453][ T8346] netlink: 12 bytes leftover after parsing attributes in process `syz.3.628'. [ 147.965325][ T8319] bond3: (slave wireguard0): Releasing backup interface [ 147.972323][ T8319] wireguard0: left promiscuous mode [ 148.193573][ T8355] netlink: 'syz.2.631': attribute type 2 has an invalid length. [ 148.950449][ T8394] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 149.017644][ T8394] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 149.055638][ T8404] netlink: 12 bytes leftover after parsing attributes in process `syz.3.642'. [ 149.096621][ T8388] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 149.152272][ T8394] netlink: 4 bytes leftover after parsing attributes in process `syz.1.638'. [ 149.349038][ T8418] netlink: 'syz.2.646': attribute type 10 has an invalid length. [ 149.457448][ T8418] 8021q: adding VLAN 0 to HW filter on device team0 [ 149.508271][ T8418] bond0: (slave team0): Enslaving as an active interface with an up link [ 149.531539][ T8428] netlink: 8 bytes leftover after parsing attributes in process `syz.0.649'. [ 149.739320][ T8441] !€ÿ: renamed from bond_slave_0 (while UP) [ 150.239831][ T8473] openvswitch: netlink: Actions may not be safe on all matching packets [ 150.348343][ T8477] tipc: Enabled bearer , priority 0 [ 150.361027][ T8479] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 150.365731][ T8477] syzkaller0: entered promiscuous mode [ 150.401202][ T8477] syzkaller0: entered allmulticast mode [ 150.467168][ T8477] tipc: Resetting bearer [ 150.493632][ T8474] tipc: Resetting bearer [ 150.531566][ T8474] tipc: Disabling bearer [ 150.564462][ T8482] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 150.637027][ T8482] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 150.745243][ T8482] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 150.828185][ T8493] team0: Device gtp0 is of different type [ 151.049409][ T8503] netlink: 'syz.2.673': attribute type 9 has an invalid length. [ 151.381635][ T8521] __nla_validate_parse: 5 callbacks suppressed [ 151.381653][ T8521] netlink: 20 bytes leftover after parsing attributes in process `syz.4.680'. [ 151.475780][ T8521] 8021q: adding VLAN 0 to HW filter on device bond5 [ 151.478141][ T8526] netlink: 8 bytes leftover after parsing attributes in process `syz.1.683'. [ 151.567899][ T8528] syz.4.685 (8528) used obsolete PPPIOCDETACH ioctl [ 151.602087][ T8531] netlink: 10 bytes leftover after parsing attributes in process `syz.3.684'. [ 151.761445][ T8537] openvswitch: netlink: IPv4 frag type 255 is out of range max 2 [ 152.052985][ T8550] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 152.195459][ T8544] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 152.274731][ T8544] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 152.323166][ T8544] netlink: 4 bytes leftover after parsing attributes in process `syz.3.690'. [ 152.831343][ T8604] netlink: 24 bytes leftover after parsing attributes in process `syz.2.702'. [ 152.850769][ T8604] vxcan1: tx address claim with dlc 0 [ 152.862752][ T8604] netlink: 'syz.2.702': attribute type 30 has an invalid length. [ 152.875983][ T8604] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0) [ 152.918420][ T8608] netlink: 'syz.2.702': attribute type 2 has an invalid length. [ 152.936422][ T8604] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255 [ 152.954460][ T8608] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.702'. [ 152.982130][ T8611] delete_channel: no stack [ 152.999285][ T8612] IPv6: NLM_F_CREATE should be specified when creating new route [ 153.026014][ T8608] nbd: must specify a device to reconfigure [ 153.159365][ T8618] syzkaller1: entered promiscuous mode [ 153.168938][ T8618] syzkaller1: entered allmulticast mode [ 153.506337][ T8634] tipc: Enabled bearer , priority 0 [ 153.528865][ T8634] syzkaller0: entered promiscuous mode [ 153.547309][ T8634] syzkaller0: entered allmulticast mode [ 153.639393][ T8634] tipc: Resetting bearer [ 153.691231][ T8648] syz_tun: entered allmulticast mode [ 153.720641][ T8628] netlink: 'syz.3.710': attribute type 10 has an invalid length. [ 153.749383][ T8631] tipc: Resetting bearer [ 153.913882][ T8631] tipc: Disabling bearer [ 153.991982][ T8628] team0: Device veth1_macvtap failed to register rx_handler [ 154.019900][ T8669] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 154.120172][ T8653] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 154.205799][ T8653] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 154.222789][ T8653] netlink: 4 bytes leftover after parsing attributes in process `syz.2.714'. [ 154.381035][ T8645] syz_tun: left allmulticast mode [ 154.390121][ T8681] netlink: 'syz.3.718': attribute type 2 has an invalid length. [ 154.398303][ T8681] netlink: 'syz.3.718': attribute type 8 has an invalid length. [ 154.409806][ T8681] netlink: 132 bytes leftover after parsing attributes in process `syz.3.718'. [ 154.902735][ T8704] netlink: 4 bytes leftover after parsing attributes in process `syz.1.726'. [ 155.155426][ T8715] gtp0: entered promiscuous mode [ 155.182799][ T8715] gtp0: entered allmulticast mode [ 155.270570][ T8726] bridge1: entered promiscuous mode [ 155.293052][ T8726] bridge1: entered allmulticast mode [ 155.313181][ T8730] netlink: 20 bytes leftover after parsing attributes in process `syz.1.733'. [ 155.568368][ T8742] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 155.624897][ T8736] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 155.771762][ T8757] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 155.847922][ T8757] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 155.867220][ T8762] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 155.929836][ T8753] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 156.018900][ T8769] raw_sendmsg: syz.1.744 forgot to set AF_INET. Fix it! [ 156.681985][ T8805] Bluetooth: MGMT ver 1.23 [ 156.990815][ T8821] __nla_validate_parse: 3 callbacks suppressed [ 156.990831][ T8821] netlink: 8 bytes leftover after parsing attributes in process `syz.2.761'. [ 157.030095][ T8821] netlink: 4 bytes leftover after parsing attributes in process `syz.2.761'. [ 157.131623][ T977] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 157.158322][ T977] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 157.188826][ T977] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 157.200274][ T24] IPVS: starting estimator thread 0... [ 157.250265][ T8836] netlink: 'syz.3.762': attribute type 30 has an invalid length. [ 157.258382][ T977] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 157.297916][ T8840] netlink: 8 bytes leftover after parsing attributes in process `syz.3.762'. [ 157.329158][ T8832] IPVS: using max 32 ests per chain, 76800 per kthread [ 157.489598][ T8835] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 157.556695][ T8842] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 157.649597][ T8835] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 157.678686][ T8835] netlink: 4 bytes leftover after parsing attributes in process `syz.1.763'. [ 157.698669][ T8856] netlink: 'syz.0.768': attribute type 9 has an invalid length. [ 158.318524][ T8890] bridge_slave_0: left allmulticast mode [ 158.333108][ T8890] bridge_slave_0: left promiscuous mode [ 158.345723][ T8892] netlink: 58 bytes leftover after parsing attributes in process `syz.0.780'. [ 158.360436][ T8890] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.374103][ T8892] netlink: 4 bytes leftover after parsing attributes in process `syz.0.780'. [ 158.401906][ T8890] bridge_slave_1: left allmulticast mode [ 158.419115][ T8890] bridge_slave_1: left promiscuous mode [ 158.427217][ T8890] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.444029][ T8896] netlink: 'syz.1.782': attribute type 9 has an invalid length. [ 158.454080][ T8890] bond1: (slave veth0_to_bond): Releasing active interface [ 158.473216][ T8890] bond0: (slave 1!€ÿ): Releasing backup interface [ 158.489763][ T8890] bond0: (slave bond_slave_1): Releasing backup interface [ 158.508845][ T8890] team0: Port device team_slave_0 removed [ 158.520011][ T8890] team0: Port device team_slave_1 removed [ 158.526989][ T8890] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 158.534765][ T8890] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 158.543045][ T8890] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 158.551229][ T8890] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 158.570853][ T8890] bond1: (slave veth3): Releasing active interface [ 158.579847][ T8890] batman_adv: batadv0: Interface deactivated: macsec2 [ 158.589051][ T8890] batman_adv: batadv0: Removing interface: macsec2 [ 158.909054][ T8911] netlink: 44 bytes leftover after parsing attributes in process `syz.0.789'. [ 158.945013][ T8911] netlink: 43 bytes leftover after parsing attributes in process `syz.0.789'. [ 158.985062][ T8911] netlink: 'syz.0.789': attribute type 5 has an invalid length. [ 159.006972][ T8917] netlink: 8 bytes leftover after parsing attributes in process `syz.2.790'. [ 159.014719][ T8911] netlink: 43 bytes leftover after parsing attributes in process `syz.0.789'. [ 159.045022][ T8918] C: renamed from lo (while UP) [ 159.135046][ T8921] netlink: 'syz.1.792': attribute type 2 has an invalid length. [ 159.142721][ T8921] netlink: 'syz.1.792': attribute type 1 has an invalid length. [ 159.281786][ T8930] tipc: Can't bind to reserved service type 0 [ 159.539384][ T8945] netlink: 'syz.2.801': attribute type 1 has an invalid length. [ 159.539678][ T8947] 8021q: VLANs not supported on ip_vti0 [ 159.581457][ T8949] netlink: 'syz.1.802': attribute type 9 has an invalid length. [ 159.767897][ T8957] tipc: Started in network mode [ 159.783763][ T8957] tipc: Node identity , cluster identity 4711 [ 159.793859][ T8957] tipc: Failed to obtain node identity [ 159.803501][ T8957] tipc: Enabling of bearer rejected, failed to enable media [ 160.223717][ T8986] Driver unsupported XDP return value 0 on prog (id 243) dev N/A, expect packet loss! [ 160.567638][ T9002] netlink: 'syz.4.817': attribute type 10 has an invalid length. [ 161.447886][ T9051] vcan1: entered allmulticast mode [ 161.748994][ T9069] wg1: entered promiscuous mode [ 161.753906][ T9069] wg1: entered allmulticast mode [ 162.065500][ T9080] netlink: 'syz.1.836': attribute type 39 has an invalid length. [ 162.183071][ T9085] __nla_validate_parse: 12 callbacks suppressed [ 162.183088][ T9085] netlink: 8 bytes leftover after parsing attributes in process `syz.2.838'. [ 162.277407][ T9085] tipc: Enabling of bearer rejected, failed to enable media [ 162.448292][ T9089] netlink: 96 bytes leftover after parsing attributes in process `syz.1.840'. [ 162.665347][ T9098] netlink: 12 bytes leftover after parsing attributes in process `syz.4.844'. [ 162.699363][ T9102] netlink: 'syz.3.845': attribute type 9 has an invalid length. [ 163.256409][ T9123] netlink: 'syz.4.852': attribute type 7 has an invalid length. [ 163.270188][ T9126] netlink: 8 bytes leftover after parsing attributes in process `syz.1.854'. [ 163.308074][ T9128] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048) [ 163.310618][ T9126] netlink: 12 bytes leftover after parsing attributes in process `syz.1.854'. [ 163.378820][ T59] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 163.384675][ T9126] netlink: 8 bytes leftover after parsing attributes in process `syz.1.854'. [ 163.410394][ T6148] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 163.430486][ T9126] netlink: 12 bytes leftover after parsing attributes in process `syz.1.854'. [ 163.445400][ T6148] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 163.483215][ T9126] validate_nla: 1 callbacks suppressed [ 163.483233][ T9126] netlink: 'syz.1.854': attribute type 20 has an invalid length. [ 163.508017][ T6148] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 163.617835][ T9145] netlink: 8 bytes leftover after parsing attributes in process `syz.4.861'. [ 163.638152][ T9142] sit2: entered promiscuous mode [ 163.643129][ T9142] sit2: entered allmulticast mode [ 163.667571][ T9145] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (64) [ 164.008758][ T9172] netlink: 24 bytes leftover after parsing attributes in process `syz.4.869'. [ 164.962307][ T5957] IPVS: starting estimator thread 0... [ 165.018083][ T2993] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 165.036724][ T2993] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 165.053374][ T2993] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 165.065655][ T9208] IPVS: using max 31 ests per chain, 74400 per kthread [ 165.068595][ T2993] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 165.153580][ T9216] netlink: 8 bytes leftover after parsing attributes in process `syz.1.882'. [ 165.473697][ T9227] 8021q: adding VLAN 0 to HW filter on device bond7 [ 165.687000][ T9239] netlink: 'syz.0.890': attribute type 29 has an invalid length. [ 165.732355][ T9239] netlink: 'syz.0.890': attribute type 29 has an invalid length. [ 165.763540][ T9241] tipc: Started in network mode [ 165.779105][ T9241] tipc: Node identity 36beb7d09c93, cluster identity 4711 [ 165.801419][ T9241] tipc: Enabled bearer , priority 0 [ 165.832657][ T9244] netlink: 'syz.0.890': attribute type 29 has an invalid length. [ 165.841436][ T9248] netlink: 'syz.1.893': attribute type 1 has an invalid length. [ 165.848309][ T9244] netlink: 'syz.0.890': attribute type 29 has an invalid length. [ 165.858471][ T9248] netlink: 'syz.1.893': attribute type 11 has an invalid length. [ 165.865860][ T9246] syzkaller0: entered promiscuous mode [ 165.871985][ T9246] syzkaller0: entered allmulticast mode [ 165.917586][ T9241] tipc: Resetting bearer [ 166.023703][ T9240] tipc: Resetting bearer [ 166.091421][ T9240] tipc: Disabling bearer [ 166.415571][ T9265] tipc: Enabled bearer , priority 0 [ 166.443244][ T9265] syzkaller0: entered promiscuous mode [ 166.484639][ T9265] syzkaller0: entered allmulticast mode [ 166.558320][ T9265] tipc: Resetting bearer [ 166.579614][ T9264] tipc: Resetting bearer [ 166.678666][ T9264] tipc: Disabling bearer [ 166.928394][ T9295] 8021q: adding VLAN 0 to HW filter on device bond8 [ 167.093454][ T9315] netlink: 'syz.3.918': attribute type 2 has an invalid length. [ 167.139318][ T9315] netlink: 'syz.3.918': attribute type 1 has an invalid length. [ 167.790208][ T9332] netlink: 'syz.2.922': attribute type 1 has an invalid length. [ 168.075108][ T9338] __nla_validate_parse: 8 callbacks suppressed [ 168.075123][ T9338] netlink: 16 bytes leftover after parsing attributes in process `syz.2.925'. [ 168.183124][ T9348] netlink: 4 bytes leftover after parsing attributes in process `syz.3.927'. [ 168.225031][ T9348] netlink: 4 bytes leftover after parsing attributes in process `syz.3.927'. [ 168.436790][ T9370] netlink: 20 bytes leftover after parsing attributes in process `syz.2.935'. [ 168.524616][ T9364] openvswitch: netlink: Actions may not be safe on all matching packets [ 168.543451][ T9370] 8021q: adding VLAN 0 to HW filter on device bond9 [ 168.677825][ T9384] netlink: 12 bytes leftover after parsing attributes in process `syz.2.938'. [ 168.743383][ T9390] netlink: 20 bytes leftover after parsing attributes in process `syz.1.940'. [ 168.873422][ T9395] netlink: 44 bytes leftover after parsing attributes in process `syz.2.942'. [ 168.912221][ T9399] netlink: 48 bytes leftover after parsing attributes in process `syz.1.944'. [ 169.074059][ T9409] netlink: 8 bytes leftover after parsing attributes in process `syz.1.945'. [ 169.093070][ T9409] netlink: 12 bytes leftover after parsing attributes in process `syz.1.945'. [ 169.546650][ T9428] unsupported nla_type 52263 [ 169.995954][ T9454] netlink: 'syz.1.962': attribute type 1 has an invalid length. [ 170.003810][ T9456] tap0: tun_chr_ioctl cmd 2148553947 [ 170.024889][ T9454] netlink: 'syz.1.962': attribute type 4 has an invalid length. [ 170.039890][ T981] hid-generic 0005:16C0:5505.0001: item fetching failed at offset 0/1 [ 170.065521][ T981] hid-generic 0005:16C0:5505.0001: probe with driver hid-generic failed with error -22 [ 170.127715][ T9463] team0: Mode changed to "broadcast" [ 170.195313][ T981] IPVS: starting estimator thread 0... [ 170.304676][ T9471] IPVS: using max 31 ests per chain, 74400 per kthread [ 170.325446][ T9475] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 170.643263][ T9498] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 170.687446][ T9497] pim6reg: entered allmulticast mode [ 170.694675][ T9497] pim6reg: left allmulticast mode [ 170.855824][ T9504] bond3 (unregistering): Released all slaves [ 170.888346][ T9509] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 170.931691][ T9504] netlink: 'syz.3.977': attribute type 12 has an invalid length. [ 170.939875][ T9504] netlink: 'syz.3.977': attribute type 29 has an invalid length. [ 171.139066][ T9523] 8021q: adding VLAN 0 to HW filter on device bond11 [ 171.158855][ T9526] macvlan0: entered promiscuous mode [ 171.166262][ T9526] batadv_slave_0: entered promiscuous mode [ 171.338721][ T9533] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 171.927847][ T9565] netlink: 'syz.0.995': attribute type 1 has an invalid length. [ 171.973226][ T9569] bridge: RTM_NEWNEIGH with unconfigured vlan 3 on bridge_slave_0 [ 172.071988][ T9573] tipc: Enabling of bearer rejected, failed to enable media [ 172.849820][ T9596] tipc: Enabling of bearer rejected, already enabled [ 173.187073][ T9617] __nla_validate_parse: 16 callbacks suppressed [ 173.187093][ T9617] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1012'. [ 173.232572][ T9617] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073693036544) [ 173.286734][ T9617] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 173.318024][ T9622] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1013'. [ 173.630702][ T9634] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 174.687967][ T9689] netlink: 'syz.0.1033': attribute type 5 has an invalid length. [ 174.705887][ T9689] netlink: 140 bytes leftover after parsing attributes in process `syz.0.1033'. [ 174.824361][ T9692] (unnamed net_device) (uninitialized): option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 174.928732][ T9698] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1035'. [ 175.154230][ T9702] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1038'. [ 175.429539][ T9722] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1043'. [ 175.564697][ T9722] nbd0: detected capacity change from 0 to 127 [ 175.582661][ T5884] block nbd0: Receive control failed (result -104) [ 175.779993][ T9731] bond5: entered promiscuous mode [ 175.786367][ T9731] bond5: entered allmulticast mode [ 175.795352][ T9731] 8021q: adding VLAN 0 to HW filter on device bond5 [ 175.880741][ T9733] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not bonding slave [ 175.919800][ T9733] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1) [ 176.060819][ T9745] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1050'. [ 176.115489][ T9745] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1050'. [ 176.260244][ T9757] netlink: 108 bytes leftover after parsing attributes in process `syz.1.1053'. [ 176.301002][ T9757] openvswitch: netlink: Flow key attr not present in new flow. [ 176.682052][ T9775] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1056'. [ 176.815939][ T9780] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 177.044865][ T9766] netlink: 'syz.4.1056': attribute type 12 has an invalid length. [ 177.408068][ T9811] syzkaller1: entered promiscuous mode [ 177.413704][ T9811] syzkaller1: entered allmulticast mode [ 177.514227][ T9814] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 178.122369][ T9838] netlink: 'syz.0.1078': attribute type 1 has an invalid length. [ 178.163684][ T9838] block nbd1: not configured, cannot reconfigure [ 178.356037][ T9850] tipc: Enabled bearer , priority 0 [ 178.363552][ T9850] syzkaller0: entered promiscuous mode [ 178.433880][ T9850] syzkaller0: entered allmulticast mode [ 178.513415][ T9856] tipc: Resetting bearer [ 178.849809][ T9869] __nla_validate_parse: 5 callbacks suppressed [ 178.849826][ T9869] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1086'. [ 179.113476][ T9875] C: entered allmulticast mode [ 179.122276][ T9875] C: left allmulticast mode [ 179.203684][ T9849] tipc: Resetting bearer [ 179.268986][ T9882] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1091'. [ 179.283330][ T9849] tipc: Disabling bearer [ 179.309356][ T9884] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1090'. [ 179.504023][ T9892] IPv6: Can't replace route, no match found [ 179.545368][ T9894] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1094'. [ 179.862250][ T9908] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1098'. [ 179.875892][ T9911] delete_channel: no stack [ 180.071407][ T9919] netlink: 'syz.0.1102': attribute type 8 has an invalid length. [ 180.100597][ T9921] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1102'. [ 180.201459][ T9579] Set syz1 is full, maxelem 65536 reached [ 180.343608][ T9928] netlink: 'syz.0.1103': attribute type 5 has an invalid length. [ 180.399804][ T9928] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1103'. [ 180.489508][ T9939] tipc: Enabled bearer , priority 10 [ 180.549734][ T9945] netlink: 112 bytes leftover after parsing attributes in process `syz.4.1108'. [ 180.902522][ T9961] pim6reg1: entered promiscuous mode [ 180.937018][ T9961] pim6reg1: entered allmulticast mode [ 181.249557][ T9981] netlink: 'syz.0.1119': attribute type 7 has an invalid length. [ 181.272506][ T9981] : entered promiscuous mode [ 181.454260][ T9989] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1123'. [ 181.533358][ T9991] macsec3: entered promiscuous mode [ 181.539884][ T9991] macsec3: entered allmulticast mode [ 181.654251][ T9991] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1124'. [ 181.794328][T10011] FAULT_INJECTION: forcing a failure. [ 181.794328][T10011] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 181.874949][T10011] CPU: 0 UID: 0 PID: 10011 Comm: syz.4.1128 Not tainted syzkaller #0 PREEMPT(full) [ 181.874974][T10011] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 181.874984][T10011] Call Trace: [ 181.874999][T10011] [ 181.875006][T10011] dump_stack_lvl+0x189/0x250 [ 181.875030][T10011] ? __pfx____ratelimit+0x10/0x10 [ 181.875048][T10011] ? __pfx_dump_stack_lvl+0x10/0x10 [ 181.875066][T10011] ? __pfx__printk+0x10/0x10 [ 181.875099][T10011] should_fail_ex+0x414/0x560 [ 181.875126][T10011] _copy_to_user+0x31/0xb0 [ 181.875148][T10011] simple_read_from_buffer+0xe1/0x170 [ 181.875176][T10011] proc_fail_nth_read+0x1b3/0x220 [ 181.875198][T10011] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 181.875219][T10011] ? rw_verify_area+0x2a6/0x4d0 [ 181.875238][T10011] ? __lock_acquire+0xab9/0xd20 [ 181.875257][T10011] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 181.875277][T10011] vfs_read+0x200/0xa30 [ 181.875296][T10011] ? fdget_pos+0x247/0x320 [ 181.875315][T10011] ? __pfx___mutex_lock+0x10/0x10 [ 181.875335][T10011] ? __pfx_vfs_read+0x10/0x10 [ 181.875357][T10011] ? __fget_files+0x2a/0x420 [ 181.875374][T10011] ? __fget_files+0x3a0/0x420 [ 181.875387][T10011] ? __fget_files+0x2a/0x420 [ 181.875411][T10011] ksys_read+0x145/0x250 [ 181.875437][T10011] ? __pfx_ksys_read+0x10/0x10 [ 181.875454][T10011] ? rcu_is_watching+0x15/0xb0 [ 181.875477][T10011] ? do_syscall_64+0xbe/0x3b0 [ 181.875499][T10011] do_syscall_64+0xfa/0x3b0 [ 181.875515][T10011] ? lockdep_hardirqs_on+0x9c/0x150 [ 181.875531][T10011] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.875547][T10011] ? clear_bhb_loop+0x60/0xb0 [ 181.875568][T10011] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.875584][T10011] RIP: 0033:0x7ff33038d8dc [ 181.875599][T10011] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 181.875612][T10011] RSP: 002b:00007ff3311fd030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 181.875631][T10011] RAX: ffffffffffffffda RBX: 00007ff3305e5fa0 RCX: 00007ff33038d8dc [ 181.875643][T10011] RDX: 000000000000000f RSI: 00007ff3311fd0a0 RDI: 0000000000000003 [ 181.875653][T10011] RBP: 00007ff3311fd090 R08: 0000000000000000 R09: 0000000000000000 [ 181.875663][T10011] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 181.875672][T10011] R13: 00007ff3305e6038 R14: 00007ff3305e5fa0 R15: 00007ffd61148988 [ 181.875701][T10011] [ 183.076132][T10059] 8021q: adding VLAN 0 to HW filter on device bond0 [ 183.126475][T10059] 8021q: adding VLAN 0 to HW filter on device team0 [ 183.229751][T10059] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 183.307967][T10079] netlink: 'syz.2.1145': attribute type 8 has an invalid length. [ 184.066923][T10119] tipc: Enabled bearer , priority 0 [ 184.085466][T10119] syzkaller0: entered promiscuous mode [ 184.090995][T10119] syzkaller0: entered allmulticast mode [ 184.111389][T10121] __nla_validate_parse: 4 callbacks suppressed [ 184.111404][T10121] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1155'. [ 184.132686][T10121] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1155'. [ 184.178258][T10119] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 184.298465][T10119] tipc: Resetting bearer [ 184.345508][T10118] tipc: Resetting bearer [ 184.409797][T10137] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 184.430989][T10118] tipc: Disabling bearer [ 184.506366][T10126] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 184.594639][T10126] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 184.669177][T10126] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1156'. [ 185.116745][T10171] tipc: Enabled bearer , priority 10 [ 185.177721][T10174] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1166'. [ 185.261324][T10179] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1167'. [ 185.398053][T10186] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1170'. [ 185.639295][T10195] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1174'. [ 185.745275][T10203] : entered promiscuous mode [ 185.880116][T10214] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 185.956956][T10211] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 186.050205][T10211] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 186.071194][T10211] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1178'. [ 186.169465][T10229] netlink: 'syz.3.1183': attribute type 18 has an invalid length. [ 186.273872][T10232] tipc: Enabling of bearer rejected, already enabled [ 186.420317][T10236] pim6reg1: entered promiscuous mode [ 186.426489][T10236] pim6reg1: entered allmulticast mode [ 186.465982][T10238] netlink: 'syz.3.1187': attribute type 4 has an invalid length. [ 186.479927][T10238] netlink: 'syz.3.1187': attribute type 4 has an invalid length. [ 186.850344][T10260] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1197'. [ 186.877693][T10260] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1197'. [ 186.944849][T10260] vlan0: entered allmulticast mode [ 186.958995][T10260] gretap0: entered allmulticast mode [ 187.094424][T10274] netlink: 'syz.2.1199': attribute type 1 has an invalid length. [ 187.107112][T10274] netlink: 'syz.2.1199': attribute type 4 has an invalid length. [ 187.382372][T10283] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 187.440328][T10297] openvswitch: netlink: Message has -1 unknown bytes. [ 187.488273][T10283] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 187.591776][T10283] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 187.995482][T10334] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 188.020180][T10334] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 188.034031][T10334] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 188.050193][T10334] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 188.339825][T10351] netlink: 'syz.2.1223': attribute type 1 has an invalid length. [ 189.288245][T10418] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 189.295598][T10418] IPv6: NLM_F_CREATE should be set when creating new route [ 189.303056][T10418] IPv6: NLM_F_CREATE should be set when creating new route [ 189.310360][T10418] IPv6: NLM_F_CREATE should be set when creating new route [ 189.333686][T10418] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 189.346127][T10418] __nla_validate_parse: 9 callbacks suppressed [ 189.346141][T10418] netlink: 784 bytes leftover after parsing attributes in process `syz.4.1242'. [ 189.365172][T10418] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1242'. [ 189.556436][T10428] netlink: 'syz.4.1247': attribute type 13 has an invalid length. [ 189.565015][T10428] macvtap0: entered allmulticast mode [ 189.571067][T10428] macvtap0: refused to change device tx_queue_len [ 189.711515][T10435] mac80211_hwsim hwsim5 syzkaller0: left promiscuous mode [ 189.835406][T10442] (unnamed net_device) (uninitialized): option fail_over_mac: invalid value (3) [ 189.948199][T10451] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode [ 189.958233][T10451] netem: change failed [ 189.966263][T10451] netlink: 'syz.3.1254': attribute type 4 has an invalid length. [ 189.982991][T10451] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1254'. [ 190.038227][T10451] `: renamed from bond0 (while UP) [ 190.620959][T10483] [ 190.623335][T10483] ====================================================== [ 190.630363][T10483] WARNING: possible circular locking dependency detected [ 190.637393][T10483] syzkaller #0 Not tainted [ 190.641813][T10483] ------------------------------------------------------ [ 190.648830][T10483] syz.1.1261/10483 is trying to acquire lock: [ 190.654890][T10483] ffffffff8f68f778 (nr_node_list_lock){+...}-{3:3}, at: nr_rt_device_down+0xa9/0x720 [ 190.664407][T10483] [ 190.664407][T10483] but task is already holding lock: [ 190.671778][T10483] ffffffff8f68f718 (nr_neigh_list_lock){+...}-{3:3}, at: nr_rt_device_down+0x28/0x720 [ 190.681367][T10483] [ 190.681367][T10483] which lock already depends on the new lock. [ 190.681367][T10483] [ 190.691780][T10483] [ 190.691780][T10483] the existing dependency chain (in reverse order) is: [ 190.700887][T10483] [ 190.700887][T10483] -> #2 (nr_neigh_list_lock){+...}-{3:3}: [ 190.708813][T10483] lock_acquire+0x120/0x360 [ 190.713859][T10483] _raw_spin_lock_bh+0x36/0x50 [ 190.719169][T10483] nr_rt_ioctl+0x390/0xd50 [ 190.724122][T10483] sock_do_ioctl+0xd9/0x300 [ 190.729156][T10483] sock_ioctl+0x576/0x790 [ 190.734008][T10483] __se_sys_ioctl+0xfc/0x170 [ 190.739116][T10483] do_syscall_64+0xfa/0x3b0 [ 190.744134][T10483] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.750543][T10483] [ 190.750543][T10483] -> #1 (&nr_node->node_lock){+...}-{3:3}: [ 190.758522][T10483] lock_acquire+0x120/0x360 [ 190.763542][T10483] _raw_spin_lock_bh+0x36/0x50 [ 190.768823][T10483] nr_rt_ioctl+0x193/0xd50 [ 190.773754][T10483] sock_do_ioctl+0xd9/0x300 [ 190.778770][T10483] sock_ioctl+0x576/0x790 [ 190.783607][T10483] __se_sys_ioctl+0xfc/0x170 [ 190.788701][T10483] do_syscall_64+0xfa/0x3b0 [ 190.793735][T10483] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.800131][T10483] [ 190.800131][T10483] -> #0 (nr_node_list_lock){+...}-{3:3}: [ 190.807940][T10483] validate_chain+0xb9b/0x2140 [ 190.813208][T10483] __lock_acquire+0xab9/0xd20 [ 190.818390][T10483] lock_acquire+0x120/0x360 [ 190.823402][T10483] _raw_spin_lock_bh+0x36/0x50 [ 190.828680][T10483] nr_rt_device_down+0xa9/0x720 [ 190.834044][T10483] nr_device_event+0x137/0x150 [ 190.839314][T10483] notifier_call_chain+0x1b3/0x3e0 [ 190.844930][T10483] netif_close_many+0x29c/0x410 [ 190.850371][T10483] netif_close+0x158/0x210 [ 190.855287][T10483] dev_close+0x10a/0x220 [ 190.860043][T10483] bpq_device_event+0x377/0x6a0 [ 190.865396][T10483] notifier_call_chain+0x1b3/0x3e0 [ 190.871009][T10483] netif_close_many+0x29c/0x410 [ 190.876364][T10483] netif_close+0x158/0x210 [ 190.881291][T10483] dev_close+0x10a/0x220 [ 190.886036][T10483] bond_setup_by_slave+0x5f/0x3f0 [ 190.891570][T10483] bond_enslave+0x7a0/0x3a70 [ 190.896665][T10483] bond_do_ioctl+0x635/0x9b0 [ 190.901760][T10483] bond_siocdevprivate+0x17e/0x350 [ 190.907375][T10483] dev_ifsioc+0xb54/0xf00 [ 190.912240][T10483] dev_ioctl+0x84c/0x1150 [ 190.917070][T10483] sock_ioctl+0x719/0x790 [ 190.921909][T10483] __se_sys_ioctl+0xfc/0x170 [ 190.927003][T10483] do_syscall_64+0xfa/0x3b0 [ 190.932012][T10483] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.938415][T10483] [ 190.938415][T10483] other info that might help us debug this: [ 190.938415][T10483] [ 190.948620][T10483] Chain exists of: [ 190.948620][T10483] nr_node_list_lock --> &nr_node->node_lock --> nr_neigh_list_lock [ 190.948620][T10483] [ 190.962421][T10483] Possible unsafe locking scenario: [ 190.962421][T10483] [ 190.969853][T10483] CPU0 CPU1 [ 190.975197][T10483] ---- ---- [ 190.980552][T10483] lock(nr_neigh_list_lock); [ 190.985213][T10483] lock(&nr_node->node_lock); [ 190.992479][T10483] lock(nr_neigh_list_lock); [ 190.999662][T10483] lock(nr_node_list_lock); [ 191.004233][T10483] [ 191.004233][T10483] *** DEADLOCK *** [ 191.004233][T10483] [ 191.012355][T10483] 2 locks held by syz.1.1261/10483: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=-1 (errno 104: Connection reset by peer) [ 191.017532][T10483] #0: ffffffff8f53a088 (rtnl_mutex){+.+.}-{4:4}, at: dev_ioctl+0x83c/0x1150 [ 191.026309][T10483] #1: ffffffff8f68f718 (nr_neigh_list_lock){+...}-{3:3}, at: nr_rt_device_down+0x28/0x720 [ 191.036392][T10483] [ 191.036392][T10483] stack backtrace: [ 191.042269][T10483] CPU: 1 UID: 0 PID: 10483 Comm: syz.1.1261 Not tainted syzkaller #0 PREEMPT(full) [ 191.042287][T10483] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 191.042295][T10483] Call Trace: [ 191.042302][T10483] [ 191.042309][T10483] dump_stack_lvl+0x189/0x250 [ 191.042328][T10483] ? __pfx_dump_stack_lvl+0x10/0x10 [ 191.042343][T10483] ? __pfx__printk+0x10/0x10 [ 191.042361][T10483] ? print_lock_name+0xde/0x100 [ 191.042379][T10483] print_circular_bug+0x2ee/0x310 [ 191.042396][T10483] check_noncircular+0x134/0x160 [ 191.042412][T10483] validate_chain+0xb9b/0x2140 [ 191.042429][T10483] ? rt6_disable_ip+0x6b3/0x720 [ 191.042444][T10483] ? __lock_acquire+0xab9/0xd20 [ 191.042462][T10483] __lock_acquire+0xab9/0xd20 [ 191.042482][T10483] ? nr_rt_device_down+0xa9/0x720 [ 191.042499][T10483] lock_acquire+0x120/0x360 [ 191.042515][T10483] ? nr_rt_device_down+0xa9/0x720 [ 191.042537][T10483] ? nr_rt_device_down+0xa9/0x720 [ 191.042553][T10483] _raw_spin_lock_bh+0x36/0x50 [ 191.042572][T10483] ? nr_rt_device_down+0xa9/0x720 [ 191.042589][T10483] nr_rt_device_down+0xa9/0x720 [ 191.042606][T10483] ? do_raw_spin_unlock+0x122/0x240 [ 191.042624][T10483] nr_device_event+0x137/0x150 [ 191.042640][T10483] notifier_call_chain+0x1b3/0x3e0 [ 191.042657][T10483] netif_close_many+0x29c/0x410 [ 191.042674][T10483] ? __pfx_netif_close_many+0x10/0x10 [ 191.042688][T10483] ? bond_netdev_event+0x227/0xe80 [ 191.042705][T10483] netif_close+0x158/0x210 [ 191.042717][T10483] ? __pfx_netif_close+0x10/0x10 [ 191.042729][T10483] ? tun_device_event+0x77/0x1020 [ 191.042743][T10483] ? __pfx___neigh_ifdown+0x10/0x10 [ 191.042761][T10483] ? macsec_notify+0x104/0x660 [ 191.042778][T10483] dev_close+0x10a/0x220 [ 191.042793][T10483] bpq_device_event+0x377/0x6a0 [ 191.042807][T10483] notifier_call_chain+0x1b3/0x3e0 [ 191.042823][T10483] netif_close_many+0x29c/0x410 [ 191.042838][T10483] ? __pfx_netif_close_many+0x10/0x10 [ 191.042854][T10483] netif_close+0x158/0x210 [ 191.042866][T10483] ? __pfx_netif_close+0x10/0x10 [ 191.042879][T10483] ? do_raw_spin_lock+0x121/0x290 [ 191.042894][T10483] ? __local_bh_enable_ip+0x12d/0x1c0 [ 191.042908][T10483] ? lockdep_hardirqs_on+0x9c/0x150 [ 191.042922][T10483] dev_close+0x10a/0x220 [ 191.042937][T10483] bond_setup_by_slave+0x5f/0x3f0 [ 191.042958][T10483] bond_enslave+0x7a0/0x3a70 [ 191.042975][T10483] ? unwind_get_return_address+0x4d/0x90 [ 191.042997][T10483] ? __pfx_stack_trace_save+0x10/0x10 [ 191.043013][T10483] ? __pfx_bond_enslave+0x10/0x10 [ 191.043034][T10483] ? apparmor_capable+0x137/0x1b0 [ 191.043050][T10483] ? full_name_hash+0x92/0xe0 [ 191.043065][T10483] ? netdev_name_node_lookup+0xdf/0x120 [ 191.043084][T10483] bond_do_ioctl+0x635/0x9b0 [ 191.043100][T10483] ? __pfx_bond_do_ioctl+0x10/0x10 [ 191.043125][T10483] ? rcu_is_watching+0x15/0xb0 [ 191.043142][T10483] bond_siocdevprivate+0x17e/0x350 [ 191.043156][T10483] ? __pfx_bond_siocdevprivate+0x10/0x10 [ 191.043169][T10483] ? __lock_acquire+0xab9/0xd20 [ 191.043188][T10483] ? full_name_hash+0x92/0xe0 [ 191.043202][T10483] ? netdev_name_node_lookup+0xdf/0x120 [ 191.043220][T10483] dev_ifsioc+0xb54/0xf00 [ 191.043236][T10483] dev_ioctl+0x84c/0x1150 [ 191.043251][T10483] sock_ioctl+0x719/0x790 [ 191.043269][T10483] ? __pfx_sock_ioctl+0x10/0x10 [ 191.043286][T10483] ? __fget_files+0x3a0/0x420 [ 191.043298][T10483] ? __fget_files+0x2a/0x420 [ 191.043311][T10483] ? bpf_lsm_file_ioctl+0x9/0x20 [ 191.043327][T10483] ? __pfx_sock_ioctl+0x10/0x10 [ 191.043343][T10483] __se_sys_ioctl+0xfc/0x170 [ 191.043360][T10483] do_syscall_64+0xfa/0x3b0 [ 191.043374][T10483] ? lockdep_hardirqs_on+0x9c/0x150 [ 191.043387][T10483] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.043400][T10483] ? clear_bhb_loop+0x60/0xb0 [ 191.043415][T10483] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.043428][T10483] RIP: 0033:0x7f3c1278eec9 [ 191.043442][T10483] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 191.043453][T10483] RSP: 002b:00007f3c13567038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 191.043467][T10483] RAX: ffffffffffffffda RBX: 00007f3c129e5fa0 RCX: 00007f3c1278eec9 [ 191.043478][T10483] RDX: 0000200000000180 RSI: 00000000000089f0 RDI: 0000000000000004 [ 191.043487][T10483] RBP: 00007f3c12811f91 R08: 0000000000000000 R09: 0000000000000000 [ 191.043495][T10483] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 191.043503][T10483] R13: 00007f3c129e6038 R14: 00007f3c129e5fa0 R15: 00007fff5f864a38 [ 191.043518][T10483] [ 191.513789][T10483] 8021q: adding VLAN 0 to HW filter on device bond0 [ 191.523699][T10483] bond0: (slave rose0): Enslaving as an active interface with an up link [ 192.063793][ T49] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 192.084541][ T49] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.115066][ T49] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 192.203371][ T49] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 192.214878][ T49] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.227513][ T49] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 192.257267][ T5864] syz_tun (unregistering): left allmulticast mode [ 192.263784][ T5864] syz_tun (unregistering): left promiscuous mode [ 192.272239][ T5864] bridge0: port 3(syz_tun) entered disabled state [ 192.313036][ T49] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 192.323901][ T49] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.341122][ T49] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 192.419598][ T49] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 192.438895][ T49] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.451167][ T49] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 192.755120][ T49] bond0 (unregistering): Released all slaves [ 192.823149][ T49] bond1 (unregistering): Released all slaves [ 192.890416][ T49] bond2 (unregistering): Released all slaves [ 192.959081][ T49] bond3 (unregistering): Released all slaves [ 193.027357][ T49] bond4 (unregistering): Released all slaves [ 193.096801][ T49] bond5 (unregistering): Released all slaves [ 193.195256][ T49] tipc: Disabling bearer [ 193.208298][ T49] tipc: Left network mode [ 193.517608][ T49] macvlan0: left promiscuous mode [ 193.523130][ T49] batadv_slave_0: left promiscuous mode [ 193.530965][ T49] hsr_slave_0: left promiscuous mode [ 193.537083][ T49] hsr_slave_1: left promiscuous mode [ 193.544421][ T49] veth0_macvtap: left promiscuous mode [ 193.551541][ T49] veth1_vlan: left promiscuous mode [ 193.556949][ T49] veth0_vlan: left promiscuous mode [ 194.053528][ T49] IPVS: stop unused estimator thread 0... [ 194.123412][ T49] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.187906][ T49] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.242479][ T49] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.295732][ T49] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.397417][ T49] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 194.408667][ T49] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.472520][ T49] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 194.491610][ T49] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.542315][ T49] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 194.556561][ T49] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.609478][ T49] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 194.620427][ T49] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.723271][ T49] bridge_slave_1: left allmulticast mode [ 194.730244][ T49] bridge_slave_1: left promiscuous mode [ 194.738075][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.748851][ T49] bridge_slave_0: left allmulticast mode [ 194.755193][ T49] bridge_slave_0: left promiscuous mode [ 194.760999][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 195.107111][ T49] bond0 (unregistering): Released all slaves [ 195.178370][ T49] bond1 (unregistering): Released all slaves [ 195.469261][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 195.479079][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 195.489233][ T49] bond0 (unregistering): (slave team0): Releasing backup interface [ 195.498372][ T49] bond0 (unregistering): Released all slaves [ 195.569971][ T49] bond1 (unregistering): Released all slaves [ 195.641044][ T49] bond2 (unregistering): Released all slaves [ 195.709460][ T49] bond3 (unregistering): Released all slaves [ 195.720263][ T49] bond4 (unregistering): (slave bond5): Releasing backup interface [ 195.728232][ T49] bond5 (unregistering): left promiscuous mode [ 195.735149][ T49] bond4 (unregistering): Released all slaves [ 195.804356][ T49] bond5 (unregistering): Released all slaves [ 195.813186][ T49] bond6 (unregistering): Released all slaves [ 195.883399][ T49] bond7 (unregistering): Released all slaves [ 195.948224][ T49] bond8 (unregistering): Released all slaves [ 196.013617][ T49] bond9 (unregistering): Released all slaves [ 196.022246][ T49] bond10 (unregistering): Released all slaves [ 196.091255][ T49] bond11 (unregistering): Released all slaves [ 196.190939][ T49] : left promiscuous mode [ 196.238158][ T49] tipc: Left network mode [ 196.249009][ T49] tipc: Left network mode [ 196.503358][ T49] hsr_slave_0: left promiscuous mode [ 196.512516][ T49] hsr_slave_1: left promiscuous mode [ 196.520253][ T49] hsr_slave_0: left promiscuous mode [ 196.526358][ T49] hsr_slave_1: left promiscuous mode [ 196.538937][ T49] batadv_slave_1: left promiscuous mode [ 196.545481][ T49] veth1_macvtap: left promiscuous mode [ 196.550987][ T49] veth0_macvtap: left promiscuous mode [ 196.557589][ T49] veth1_vlan: left promiscuous mode [ 196.562874][ T49] veth0_vlan: left promiscuous mode [ 196.569117][ T49] veth1_macvtap: left promiscuous mode [ 196.575673][ T49] veth0_macvtap: left promiscuous mode [ 196.945606][ T49] team0 (unregistering): Port device team_slave_1 removed [ 196.967065][ T49] team0 (unregistering): Port device team_slave_0 removed [ 197.469086][ T49] IPVS: stop unused estimator thread 0...