last executing test programs: 1m55.841164165s ago: executing program 3 (id=1419): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x84, &(0x7f0000000300)={0x0, @in6={{0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, 0x90) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c0000001000010400000000000000000000000092a6e0e7f17de7c26f0cac3302424c6ecae25fa7e891c54200ee91846f1ac96830139b26459ce902c9bc0441c5588ff96bb8733ca18a7bcbfdcd9b55b3fa412d6eb4ce2ab6e36418dbfab54acb04b0f1beeb6c4144be31b6446bee83bf8a58d432", @ANYRESDEC=r1, @ANYRES32=r1], 0x3c}}, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={@fallback=r1, 0x4, 0x0, 0x3, &(0x7f00000000c0)=[0x0], 0x1, 0x0, &(0x7f0000000140)=[0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0], 0x0}, 0x40) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000900)={0x58, r4, 0x405, 0x70bd26, 0x25dfdbfc, {}, [{{0x8, 0x1, r5}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8}}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000405}, 0x2c040804) r6 = socket(0x15, 0x5, 0x0) recvmmsg(r6, &(0x7f0000004ec0)=[{{0x0, 0x0, 0x0}, 0x401}], 0x1, 0x40012160, 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=@delchain={0x104, 0x65, 0x2, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0x0, 0x6}}, [@filter_kind_options=@f_bpf={{0x8}, {0xd0, 0x2, [@TCA_BPF_CLASSID={0x8, 0x3, {0x2, 0xffe0}}, @TCA_BPF_FLAGS={0x8, 0x8, 0x1}, @TCA_BPF_FLAGS={0x8, 0x8, 0x1}, @TCA_BPF_FD={0x8}, @TCA_BPF_ACT={0xac, 0x1, [@m_xt={0xa8, 0xa, 0x0, 0x0, {{0x7}, {0x50, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x3}, @TCA_IPT_INDEX={0x8, 0x3, 0x2}, @TCA_IPT_INDEX={0x8, 0x3, 0x9}, @TCA_IPT_INDEX={0x8, 0x3, 0x9}, @TCA_IPT_TARG={0x2a, 0x6, {0x0, 'filter\x00', 0xc, 0x3}}]}, {0x32, 0x6, "b02aff89fcb734ba3a7e4bbe7dbf80c9a578cea6f50e70b62c55c42e0420d8c5c688a7cd0b82ff660cc3f662c705"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x79, 0x5}}]}, 0x104}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) r8 = socket(0x10, 0x803, 0x0) sendto(r8, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r8, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) r9 = getpid() syz_open_procfs$namespace(r9, &(0x7f0000000400)='ns/ipc\x00') sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000840)={0x14, 0x0, 0x1, 0x70bd27, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x24000001}, 0x20000084) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x3c, 0x0, 0x10, 0x70bd28, 0x25dfdbfb, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x7}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x8}, @L2TP_ATTR_FD={0x8}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x27}]}, 0x3c}, 0x1, 0x0, 0x0, 0x810}, 0x110) splice(r7, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffff8000, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000640)={[{0x2b, 'freezer'}]}, 0x9) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000003c0)={@ifindex=r5, 0xffffffffffffffff, 0x13, 0x2018, 0x0, @value, @void, @void, @void, r2}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000004000000000000000000000085000000ae00000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r10 = socket$inet(0x2, 0x1, 0x0) bind$inet(r10, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10) r11 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r11, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4) bind$inet(r11, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10) 1m54.999278788s ago: executing program 4 (id=1437): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002300)={r1, 0x18000000000002a0, 0xf, 0x0, &(0x7f0000000140)="b9ff0300600d698cff9e14f008004d", 0x0, 0xe00, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2000000}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) 1m54.859314608s ago: executing program 3 (id=1440): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000002040)={0x0, 0x0, &(0x7f0000002000)={&(0x7f0000001fc0)={0x1c, 0x4, 0x6, 0x101, 0x0, 0x1000000, {0xd, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x405}, 0x40004) 1m54.839088807s ago: executing program 4 (id=1441): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x3) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) syz_emit_ethernet(0x36, &(0x7f0000000140)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xffff}}}}}}, 0x0) syz_emit_ethernet(0x7a, &(0x7f0000000340)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x6c, 0xfffc, 0x0, 0xfd, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x16, 0x4, 0x2, 0x0, 0x0, {[@window={0x3, 0x3, 0x3}, @timestamp={0x8, 0xa, 0x200, 0xd}, @exp_smc={0xfe, 0x6}, @sack={0x5, 0x12, [0x5, 0x5, 0x1, 0x0]}, @md5sig={0x13, 0x12, "4d561d7ef6737b6a2efa8f86467f69a2"}, @timestamp={0x8, 0xa, 0x5, 0x8}]}}}}}}}, 0x0) 1m54.67926715s ago: executing program 3 (id=1444): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$inet(r0, &(0x7f00000003c0)={&(0x7f0000000040)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000000180)="18", 0x1}], 0x1}, 0x4008840) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000380)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}], 0x1c) setsockopt(r0, 0x84, 0x7f, &(0x7f0000000140)="0200000009800089", 0x8) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000240)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 1m54.663590961s ago: executing program 4 (id=1445): setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) splice(0xffffffffffffffff, &(0x7f0000000000)=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$kcm_KCM_RECV_DISABLE(r0, 0x6, 0x1, 0x0, 0x20000000) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="020a040007000000b6f1ffff0000854105001a000000000000d74619edc70000", @ANYRESOCT], 0x38}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e000000030000000000000405000600000000000a0000000000000400000000000000000000002100000000000100000000000002000100010000000000010200fd000005000500000000000a"], 0x70}}, 0x0) sendmmsg(r1, &(0x7f0000000180), 0x3ef, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000000c0)={{{@in=@empty, @in=@broadcast}}, {{@in6=@mcast1}, 0x0, @in=@multicast2}}, &(0x7f0000000000)=0xe8) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) setsockopt$bt_BT_POWER(r2, 0x112, 0x9, 0x0, 0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r4, 0x40047438, 0x58e48e4c6b288518) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000300)='cpuacct.usage_sys\x00', 0x0, 0x0) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, &(0x7f00000000c0)) ioctl$sock_inet6_tcp_SIOCATMARK(r6, 0x40047440, 0x0) r7 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r8 = getpid() r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r10, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r8}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) sendmsg$nl_route(r11, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=@can_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@CGW_DST_IF={0x8}, @CGW_SRC_IF={0x8}, @CGW_MOD_UID={0x8, 0xe, r12}, @CGW_MOD_SET={0x15, 0x4, {{{0x3, 0x1, 0x1, 0x1}, 0xa, 0x1, 0x0, 0x0, "0325175362eb4cf2"}, 0x4}}]}, 0x44}}, 0x0) r13 = getgid() r14 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$unix(r5, &(0x7f00000007c0)={&(0x7f0000000340)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f00000004c0)=[{&(0x7f00000003c0)="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", 0xfa}, {&(0x7f0000000540)="1d454359727bde9293181bce89d15f2a3e6e16c0ec0466d9f8af77ac67d1ba64381216800543fdc880e85c02c925294f1ac5467643189391814a32810c6008b6bffab3a9c15f8342cb98e8e1670e30812f2397199c76e7ab165e63b2efde5816e57a71b10aa94100358cfaff950e888f9bb893da9983bfd2f81e0d3611d1c9557de9d1376634db9d2d328ffdaa6684cd42758457e58f316aad2d569b7ccec03952e5b69e7da729304fdcbd1624d0d64553add0974cf5897ee09f80ff503f80088113c89117a635e9acf7c036f1585a53fb40278b2d00881b8f6a1fcfc76641e9af41a14827cc6926", 0xe8}, {&(0x7f0000000640)="1e4667280b984dfa012601c30b5f3eac4c60cc9c0e66cbee297658f579ee784d69dbd106e87d43bd0655fcefb4029822b18d3f666fb22b3d3f74ffaf942315c2dec21cfc71db68937698212b03d562e28d817970d1aca40f1c6500eec40a155b25fa2fef0b3b98f1d214dac563ae0b28856e7a24f6e62a40bd5f2c996e859b3547062225c9b25a87b2b28158e46c0bfab3d4eecc5c870c9af33beb7a34050fe0915fd0cb82bd240503854985", 0xac}], 0x3, &(0x7f0000000700)=[@rights={{0x18, 0x1, 0x1, [r7, r3]}}, @cred={{0x1c, 0x1, 0x2, {r8, r12, r13}}}, @rights={{0x14, 0x1, 0x1, [r3]}}, @rights={{0x1c, 0x1, 0x1, [r1, r4, r3]}}, @rights={{0x1c, 0x1, 0x1, [r14, r4, r1]}}], 0x90, 0x20040885}, 0x0) 1m54.208426752s ago: executing program 2 (id=1450): r0 = socket$inet6(0xa, 0x3, 0x4) (async) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$SO_TIMESTAMP(r1, 0x1, 0x1d, 0x0, &(0x7f0000000040)) (async) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e24, 0x8, @empty, 0xa}, 0x1c) (async) r2 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) connect$can_bcm(r2, &(0x7f00000000c0)={0x1d, r3}, 0x10) sendmsg$can_bcm(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="010000003d0800"/16, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x80}}, 0x0) (async) setsockopt$inet6_int(r0, 0x29, 0x10, &(0x7f0000000140)=0x8, 0x4) (async) sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 1m54.145492167s ago: executing program 2 (id=1452): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0xd, @loopback}, 0x1c) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000040000000160a01010000000000000000010000000900010073797a30000000000900020073797a3000000000140003"], 0xc8}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000280)={@mcast2, 0x800, 0x0, 0x2, 0x1}, 0x20) setsockopt$inet6_int(r1, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r1, &(0x7f0000000140)={&(0x7f0000000080)={0xa, 0x4e22, 0x80000, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000029000000360000000000000000000000e8000000000000002900000004000000"], 0x100}, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="140100001f0001000000000000000000060100800c0001"], 0x114}], 0x1}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_buf(r3, 0x1, 0x3b, 0xffffffffffffffff, &(0x7f00000003c0)) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0x68, 0x30, 0x9, 0x0, 0x0, {}, [{0x54, 0x1, [@m_bpf={0x50, 0x1, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x107}, @TCA_ACT_BPF_OPS={0x4}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000007b0130000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmmsg$inet6(r0, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="af", 0x34000}], 0x1}}], 0x1, 0x0) 1m53.976430269s ago: executing program 2 (id=1454): syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="6000000010000305000000000000000000010000", @ANYRES32=0x0, @ANYBLOB="20000000000000004000128008000100687372003400028008000200", @ANYRES32=r1, @ANYBLOB="050006000000000008000100", @ANYRES32=r3], 0x60}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 1m53.973089698s ago: executing program 0 (id=1455): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000002040)={0x0, 0x0, &(0x7f0000002000)={&(0x7f0000001fc0)={0x1c, 0x4, 0x6, 0x101, 0x0, 0x20000000, {0xd, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x405}, 0x40004) 1m53.861377569s ago: executing program 0 (id=1456): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@newtaction={0x74, 0x30, 0x1, 0x0, 0x0, {}, [{0x60, 0x1, [@m_mpls={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_MPLS_LABEL={0x8}, @TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x5}}, @TCA_MPLS_PROTO={0x6, 0x4, 0x8848}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x74}}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x3, &(0x7f0000000040)=@framed={{}, [], {0x95, 0x0, 0x700}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x22, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6}}, 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, r2, 0x0, 0x0, 0x0, 0x10, 0x9, @void, @value}, 0x94) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000080)="390000001300090468fe0700000000000000ff3f08000000480100100000000019002b000a0001000500000000000072080003000500000000", 0x39}], 0x1) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000040)={0x14, 0x0, 0x4, 0x70bd26}, 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r3) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r3) sendmsg$NL802154_CMD_NEW_INTERFACE(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000580)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000eeff110000000a0004007778616e3300000008001520", @ANYRES32, @ANYBLOB="080001"], 0x30}}, 0x0) syz_genetlink_get_family_id$nl80211(0x0, r0) 1m53.760180383s ago: executing program 2 (id=1457): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x3c, 0x4, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_CMP_OP={0x8}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_CMP_DATA={0x10, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0xc, 0x1, '\x00\x00\x00\x00\x00\x00\x00\x00'}]}, @NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}]}], {0x14}}, 0x90}}, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x1c, 0x2, 0x1, 0x201, 0x0, 0x0, {}, [@CTA_TUPLE_ORIG={0x4}, @CTA_FILTER={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x0) read(r3, &(0x7f00000003c0)=""/52, 0x34) r5 = socket(0x23, 0x6, 0xa3e) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x1) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r6, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@newlink={0x50, 0x10, 0x503, 0x0, 0x700, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @local}]}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x50}, 0x1, 0x0, 0x0, 0x800}, 0xc0b0) socket$netlink(0x10, 0x3, 0x0) (async) socket(0x10, 0x803, 0x0) (async) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x3c, 0x4, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_CMP_OP={0x8}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_CMP_DATA={0x10, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0xc, 0x1, '\x00\x00\x00\x00\x00\x00\x00\x00'}]}, @NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}]}], {0x14}}, 0x90}}, 0x0) (async) pipe(&(0x7f0000000040)) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPCTNL_MSG_CT_DELETE(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x1c, 0x2, 0x1, 0x201, 0x0, 0x0, {}, [@CTA_TUPLE_ORIG={0x4}, @CTA_FILTER={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async) read(r3, &(0x7f00000003c0)=""/52, 0x34) (async) socket(0x23, 0x6, 0xa3e) (async) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x1) (async) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r6, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) (async) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@newlink={0x50, 0x10, 0x503, 0x0, 0x700, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @local}]}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x50}, 0x1, 0x0, 0x0, 0x800}, 0xc0b0) (async) 1m53.679944015s ago: executing program 3 (id=1459): r0 = socket(0x2a, 0x2, 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r2) sendmsg$IEEE802154_START_REQ(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000010140)={0x3c, r3, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_CHANNEL={0x5}, @IEEE802154_ATTR_BCN_ORD={0x5}, @IEEE802154_ATTR_PAN_COORD={0x5}, @IEEE802154_ATTR_COORD_PAN_ID={0x6}, @IEEE802154_ATTR_SF_ORD={0x5}]}, 0x3c}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_audit(0x10, 0x3, 0x9) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x4000) sendmsg$NFT_BATCH(r4, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, 0x0, 0x0) socket$kcm(0x2, 0xa, 0x2) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000100)={'syztnl2\x00', r6, 0x0, 0x0, 0xff, 0x0, 0x1, @private2, @remote, 0x7, 0x80, 0x3, 0x10000}}) 1m53.560308989s ago: executing program 0 (id=1460): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@enum, @struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x0, [{0x0, 0x1}]}]}}, 0x0, 0x3e, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000003040)={r0, 0x0, &(0x7f0000002f80)=""/166}, 0x20) 1m53.529886949s ago: executing program 0 (id=1461): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r0) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r0) recvmmsg(r0, &(0x7f0000001240)=[{{0x0, 0x0, 0x0}, 0x101}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000440)=""/165, 0xa5}, {&(0x7f0000001c40)=""/4096, 0x1000}, {&(0x7f0000000340)=""/196, 0xc4}], 0x3}, 0x7}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f0000004c40)=""/4098, 0x1002}, {&(0x7f0000000240)=""/187, 0xbb}, {&(0x7f0000000540)=""/232, 0xe8}, {&(0x7f0000000100)=""/119, 0x77}, {&(0x7f0000003c40)=""/4092, 0xffc}, {&(0x7f0000001840)=""/105, 0x69}, {&(0x7f00000018c0)=""/147, 0x93}], 0x7}, 0x80000001}, {{0x0, 0x0, 0x0}, 0x5}], 0x5, 0x40008062, 0x0) 1m53.436363606s ago: executing program 4 (id=1463): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002380)=ANY=[@ANYBLOB="b702000006000000bfa300000000000007030000407effff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000496cf2827fb43a431ca7ebfcd0cd00006ed3d09a6175037958e271b60dedf8937f02008b6d83923dd29c034055d47dafe6c8dc3d5d78c07f34e4d5b3185b310efd4989147a00000000f110026e6d2ef831ab7ea0c34f17e3adeef3bb622003b538dfd8e012e71f6420b90adddff61b5b0a341a2d7cbdb90000bdb2ca76050000003a14817ac61e4dd11183a13477bf7e060e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132658555cf476619f28d9961b626c57c2691208171656d60a17e3c1c4b751ca532e6ea09c346df3d7cb4ebd31a08b32808b80200000000000000334d83239d1d2e9ff10ff2d27080e71113610e10c358e8327e7050b6c860dac12233f9a1fb9c2aec61ce63a38d316ef49b66d6e42fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a5f3d74ca891c4594e8a4399e01eadd3964663e88535c133f7130856f75643619f567d2e24f29e5dad9326edb697a6ea0182babc18cefd07e002cab5ebfcaad34732181feb215139f15eadddcb0c7cbe31fbae7c34d5ac5e7e64c21add9191eadd6e1795ad6a0f7f8cd3fccbdc3dec04b25dfc17975238345d4f71af35910b158e56657b7218baaa7cbf781c0a99bd50499ccff0f000000000000c7beba3da8223fe5308e4e2833baace04f4087c4f0da0d9a88f9dbb593ddeb3f0932a4d0175b889b8eccf707882042e716df9b57b290c661d4e85031086e97bcc5ca0e221a0e34323c129102b7b7a643e82e88a1940b3c02ed9c92d6f64b1282dc519b00159830d7617001154c46bd3ca96318c570f0721fc7aa2a580900000000000000b4f22cdf550ef091a78098534f0d973058594119d06d5ea9a8d085734000000000000000c12346e47ad97f4ead7cf754a52e4b2d0f22d428bd705414888700a30e2366c6a06b3367a389ca39059787790017b0689a1f3db9c24db65c1e00015c1d573dab18fd0600885f1ea8f2fd299fc3cdafda323e9c7080397bc49d70c060d57bc88fbe09baa058b040360ab9261503d2f363fb099408885afc2bf9a4f8c3506b669e889f5e4be1b8e0d634ebc1057b7e98186fc5141bd670dba6f43279f73db9dec75070cd9ab0fd969169ef6d2857b6bf955012cf7fe50d133da86e0477e42b98a6cc999dc21c3ef408e633dfa35f14d6e734837d365e63845f3c1092f8e34fc7eac9e8af3904ea0f3698cd9492794b82649b50d726bff873339c4cad4ead1348474250eda2c8067ab730c1d85969b95a2a5687f2ed690000522a0b7426000000000000000000000000000000000000000093fc7a82b98f99d9dedf7ba17f5f0b6d15e552fbd21f7eecff10243a43af03eea84c4304a5d3f93c02000000000000000043e1ed82b9aa0ae92a499984a009000000937523f5292d12659906005cde64f903c3415c458a2b32c2318f0858f19c6def80e1481e8e1c0098fc3f38b7a57211adb15d824cfdcf229628c0de49860a44286fe0e257cfa4ce50f3d10763d442824414a73c06837fe08de62f8710ca977960b74d0000ce73da6022a8671d1a3575b4e18c28c73203bf134686dd65808452cb6b76fcb134252c78de9b240de7b4cd015a77f76bb6470c05fc980b3d8f3f964f432a4bf6cddd6222c2da006b6fdb9c8468ae1d986a893b9519444d16a6dfa92c04331a6698507048fab5ae402acd05fe621f22712dfd09004770b4278fa14547d8ce3c21188e5e4e2baacd98e8e451d6aaaf090000006ed1d9018000008dd952595d78e9583bf4ea5de36099e3cddcb24ebb6eddb9e87c9ece87a42c0000abdfc6ea55887dfa18d0aea1b6eca5a883702b0bf3aeebb225895db90e237157a34e9f447237ea5b391bddd1290f7ce987a0e36b8e71b1779bbe95ffa9c3e0f6ba66e4d48e75253e3d633811e4b3220616aafbe7a3a18375ae593eb58fd500426286472466823cb8e1800aaaa0d9463c0c4ea5541a55df6eeffec0b66482228816cdfccb98374c644eea45de7867a0efbad0ab2bc33b350440a90b791b2b33f74a112a3b91b40bed8db2df8633207f8387e04ca52ab0f3f7b058b13523b896800b992972d9609551c27a5916ea16069c5bf55b98d926d3c27e7945b2999600000000f857bc1332d200194f658b930780603134ae6b7f5092772bd5d880dbe21b790c475b14b7fe4fe002dffd651faa79bb0cee0cdac23c3218f2ddaa6f7ba04b696a30d313bed30ba8f35569a9b07ee7308da09c01a4b827aa17bc2213fc1572b0204dd456b11a454d1f3f14179974aae624ea59500f5e048b2780666de81a040663c57f49af25be909984aea1b81f33426f86b4b941c08dfe2bc8ec246ec1aae120c42405e428923f3a83d9ba5c373f5e8a54120b451e2806370f1ed60c9fd5d9af4d16cb0f413c324da52d4bd2e01d3ac2d578d72e2d63322dfc9245ce3e3a097fb82f4e3b61a57094616020f72f1c55ee3d325c7496a7c2f10cfea516ae436751227378f00ca0f1f6c1dcf879700dd90b96a330f92bff736c83ca53e7f02b734d1a9292896f5d7f244bfab4946c7042e88206f641eafcc5b4ba7a7880533cdeac995d1caf6936f356ecf07a0084e7adc2dc12417997b03087c7b3b44b06f6158a2a18ce0e56ffbeb22f40521dd9972583d413098aa80db98ef324a2bfb7961c07b47521973cf0bb6f5530f6216b447b35d6e06b72b22b29de42bb1bc8ce0a0e3500000000000000000000000000b92eb197e4149627920000008000000000801792756f90b37f0858efc387f559203f314a4b0ed750fa72e5948ac3fe5921c14ef578d413e7b2a9e2f87f7b44949fe14c00000000000047030c09f62d444b4981db81799776eeb444000000009705fa8b56779bc876ad4f8d8c8e50815c4c3b27487996c09121caf47f76158362c74904f89cbc588aae84567a83571ff72bb65c082b5a8dee145ff221159aed2768edc05a3167d84205d5af86553c21e1f023a51c0e179fccfbc201982e3ddcaa45613899d19082453b180ca0c525b8d3cfaf7d0bcddeb5d5c7166038f276a92941393ba5e51f77172822bd903d9f8b436656771774ed88daab0d0cfdd1bf4d30ab566e1a4cb3ad66d830e10f7c1de13218aea21e7def613204c2b7c1ad48b01c208f4032e93408000000000000e96db049b92fc32ee34fe7a3419c8fbf03d61c159dc5864e030000a2c55b614d622b8de966c97e1940026f96db3c78ca18c9f08d1c47edf1a4d7298109f31b6078711ee72eacab84213bf50000000000000000000000000000001217887d0452aa6d26e4614d511710abeec84b78c027c160ba375dfa55a49b832ce4dfb91122193d514ed992c07f8cd6d897b314907e15642da228dbc03429e6e0e7ac118ed351c3b0c44bf5d8b58be573f8333aa8cc2ec5b5e305b3dee2562d415b4b9ed530797f55f9fe8510423409629a09000000000000009a35d9ca93e4b4591679547b8de8af1782451f7b8e1de508f1e9e525210d62bc850f8035040ad9e562be58797515b737bfb21d35ac560f99dbd18dad5e6345a464955e8141d75b6177e4fa176a020b0000000000006e76f0294fee7d19a0f327f8796d77b6e24b8df4bb438b527d10e657d49b844198ea9f93c4fd6fd2daa9bd87fd1e02ecc8075dca1280c201043257e9bd3c9a7aa150eb1711632b76d4dc0555d4bfcfd057980136d6e9000003b24fa300ef90bfe4ad364256937796f941c2faad94785f48777941f0cd3dba54ab6a5d5e91e90ac9ae994c3d4108b2fe7eca9413ac9bc138c74800487eb19c48db3f79be964808f109b5e36fc7fdd41def361427b6b9c118e5c9a0a1d5ca24886e33a7f81b2188ec75a5fc9302e3695bdcc9ab11201ef940569c995c21eeaefe2e8fc02e0433dc7371d1f72124ba263e554c30fdd7cd8c2da1e8706417da9ad8916551a1182fac08603dfc2f2279ba161c13984cd753b54a85e6f3010975e9ff51318b09fa13e2d38ce013aab41524c298c3719e31bcb1f102eaeee69a19e006bcdb1acc2664efa949a1a07bb3d7848d5e1381fbe63c522053a3bb32eb6345e10f7a12bf84e0e196a00833f464dd2f6547f14ebf137fce33efeb813211f31ff24d7dbb00f2574ccda59b3ea068fc2a18c37ee579f5a9ecc47da73684bcadd209ae5bbb7147df74d027d8d0adcdb54182c9de8053fc8b1b9d19c16c53d34db6e26f6a88d449f6abf3010100007e206a758a3f02816b4e097cfa3d46e45e7949c5b10691d49b9693a798a330a1ccb32d49772e80862df36dc0156b3f72cd85083f8e96ca1697457ec722766bd46ee2424975a38149bd57e5c0eb4087fc243e7e51b0aca9f0ab0668d7f2ee9ad9f267d8804417aa7e36a64d489bb84a1483fd3c3ecb024060002858cbb1f7708f5b41fca2fee7c03b1f862ce88dc313d913e041dd7583a1ac41c466757c5dd07ea2c5d62a000000000000000019a4e9a9c2cbc906f97fd6eb71b18d09a5df123ebbdb2827b43aed6a29e9942e402c1ae52e9cb98f3019d364fc21ea12023db91ced3c2f06550cef8a79ed39091e4776001187d0ab2f82478431d36470cc008d745ce8fd64c9aa64da230bb080945a557081b767beb75b1ea856a55c71b8fda672289aa6088630d48ac8039f19fec3acbcc5944a4e6fd44af8f10110db730a8d0d41b4ea36f9510f843a471963bd4621b9e43f08d341bb69df430ac6398c1b28bdd33b69b4b86d7c5f30cf728294e8ea1861ce50c367498945285f73c94d91210652eb4f3077cab6be2a3512eddbcb63d091d69fb1b26c8ada9a9f9355aea34fe55fd0d3011cb83ac03268dc66dd108a4e9944241e1d4ba69212ee0e7526e72c19346d08d3c3c82cb987f1bd2fd9ce2c88082ea23abbf23c6bd43fc9f9f8ea7656e25d3d73cd056b1f782de1fe349fc33546558366ed99940c0fda039272d277a3576d4e0469779d711e10b6bf040f7274fd9577c1c33326d2e60ee611ae226ef00e2944fb727832dc8dad36a6072aacfc4bcefb808ab7b3b95e0f60616320b2a9e1f8fac812daac9983639b35184803b7d192ce1f226e97fa23c37df95d067a54a8b412644cad9ecc251fbe418a81aaf00cc8d15758ff0eb885a40630396ba76b8fadc09e62ef70c8a0121e7e8322cb8bc0f50ad33a17143a29c14ecadd1b6244e31b888d8f3fa03208d3e9a4826a98f31995509015ebdc89f2f3106e54d5898d3758b9bfc9e4924e9cedf7f8fd584e7185703cc5f23741ffb480b5a87cd7efcceb409d354bdab211ebd50ab12b13c1b8ce93093a59a0f952153c2efd10e72ec9ee5fa2a00f9637851ddb81d059f9a363c4ada68dd25f19ee9e4841acee7c1b35ad6f9d54cf4939ce78a55a04e655d7746a3989c6f33b02f8497aacb6bfca7456111900000000000000000048d35af24acb66fdd4d1fb150138f0ee6abfc7049c94346868ed76d3a5df7335184386a5c532d425f1a098ff93efd05e5dd8b765121fbdfe5ef44f6472b939c31883f45889142e82086c2448da60d7a40774d71c2da2e7f6d4fe5d36923213cc7b7d71a1c90006e8f8d84953f284b0eb4366beff5df5595827dcd736e8cfab28cfa416e83c06213ca7fd21af56e3de1d80e77060447e20a8b317a4c06e24e99239824d08abf670a685bc46c8168bee4cfc30cc6d0dc030a592925bad3e0f805f0d4b2b600dc3f0c4c6f75bb4e49982f4198ac90ab77c5572c956d415858bad5ee117b3e5f1507bbd0d7a30388865deb11106a93225a81feb08f5"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002300)={r1, 0x18000000000002a0, 0xf, 0x0, &(0x7f0000000140)="b9ff0300600d698cff9e14f008004d", 0x0, 0xe00, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x8000000}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) 1m53.394061489s ago: executing program 3 (id=1464): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) r2 = accept4$packet(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000140)=0x14, 0x400) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000340)={0x1d, r5, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) sendmsg$nl_route(r3, 0x0, 0x10) sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r5, {0xfffd, 0xffeb}, {0x1, 0x1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x850) bind$packet(r2, &(0x7f0000000180)={0x11, 0x6, r5, 0x1, 0x1}, 0x14) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_getaddrlabel={0x24, 0x1a, 0x1, 0x0, 0x0, {0x2}, [@IFAL_LABEL={0x8, 0x2, 0x7}]}, 0x24}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="2400000001040102000000c9fd000000000000000800034000010000050001000162"], 0x24}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2400000001040500000000000000002c9654320006000640bff200000500010001"], 0x24}}, 0x20000020) 1m53.391325792s ago: executing program 2 (id=1465): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0xd, @loopback}, 0x1c) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000280)=@getae={0x188, 0x1f, 0x2, 0x70bd28, 0x25dfdbfe, {{@in6=@private1, 0x4d3, 0xa, 0x32}, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xffffff01, 0x3503}, [@coaddr={0x14, 0xe, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, @migrate={0x134, 0x11, [{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@empty, @in=@broadcast, @in=@multicast1, 0x2b, 0x3, 0x0, 0x3506, 0xa, 0xa}, {@in6=@empty, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in=@broadcast, @in6=@empty, 0x2b, 0x3, 0x0, 0x34ff, 0x2, 0xa}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@broadcast, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in6=@private2, 0x32, 0x2, 0x0, 0x0, 0x2, 0xa}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote, @in6=@mcast1, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x6c, 0x1, 0x0, 0x3501, 0x2, 0xa}]}]}, 0x188}, 0x1, 0x0, 0x0, 0x40000}, 0x4020000) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="af", 0x34000}], 0x1}}], 0x1, 0x0) 1m53.316203373s ago: executing program 0 (id=1466): socket$alg(0x26, 0x5, 0x0) (async) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x72) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x72) sendmsg$MPTCP_PM_CMD_REMOVE(r1, &(0x7f0000002b40)={0x0, 0x0, &(0x7f0000002b00)={&(0x7f0000002a80)={0x14, 0x0, 0x10, 0x70bd27, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x80c0}, 0x24008085) sendmsg$MPTCP_PM_CMD_REMOVE(r1, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={0x0, 0xeffd}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000022) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) sendmsg$NL80211_CMD_GET_WIPHY(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, r5, 0x100, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x31}, @void, @void}}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4010}, 0x4040805) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000480)=@newqdisc={0x48, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x2, 0x4, 0x4, 0x7f}}}}]}, 0x48}}, 0x44080) r6 = socket(0x10, 0x3, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) (async) r7 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'lo\x00'}) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000500)=@gettaction={0x3c, 0x32, 0x8, 0x70bd2b, 0x25dfdbfb, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0xfffffffc}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0x10, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)={0x1c, 0x2d, 0x1, 0x70bd26, 0x25dfdbfc, {0x4}, [@typed={0x5, 0xb, 0x0, 0x0, @str='\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) 1m53.315718136s ago: executing program 4 (id=1467): syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="6000000010000305000000000000000000040000", @ANYRES32=0x0, @ANYBLOB="20000000000000004000128008000100687372003400028008000200", @ANYRES32=r1, @ANYBLOB="050006000000000008000100", @ANYRES32=r3], 0x60}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 1m53.172535006s ago: executing program 3 (id=1469): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$inet(r0, &(0x7f00000003c0)={&(0x7f0000000040)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000000180)="18", 0x1}], 0x1}, 0x4008840) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000380)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}], 0x1c) setsockopt(r0, 0x84, 0x7f, &(0x7f0000000140)="0200000009800089", 0x8) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000240)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 1m52.954151081s ago: executing program 32 (id=1469): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$inet(r0, &(0x7f00000003c0)={&(0x7f0000000040)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000000180)="18", 0x1}], 0x1}, 0x4008840) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000380)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}], 0x1c) setsockopt(r0, 0x84, 0x7f, &(0x7f0000000140)="0200000009800089", 0x8) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000240)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 1m52.720955515s ago: executing program 2 (id=1471): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) (async) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000140)={0x5, 0x8, 0x5, 0x2, 0x0}, &(0x7f0000000180)=0x10) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)=@deltaction={0x78, 0x31, 0x100, 0x70bd25, 0x25dfdbfd, {}, [@TCA_ACT_TAB={0x44, 0x1, [{0x10, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0x201b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0xc, 0x204, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfffff56a}}, {0xc, 0x3, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x638a}}]}, @TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}]}, @TCA_ACT_TAB={0x10, 0x1, [{0xc, 0xe, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000}, 0x54) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYRES8=r2], 0x80}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x1e, 0x305, 0x0, 0x25dfdbfe, {}, [@typed={0x8, 0x0, 0x0, 0x0, @pid}]}, 0x1c}, 0x1, 0x8000000}, 0x0) (async) recvmmsg(r3, &(0x7f00000051c0)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x40, 0x0) (async) setsockopt$inet6_group_source_req(r3, 0x29, 0x2b, &(0x7f0000000740)={0x3, {{0xa, 0x4e23, 0x7, @loopback, 0x7}}, {{0xa, 0x4e21, 0xffff8001, @loopback, 0x2}}}, 0x108) (async) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000001c0)={r1, 0x80, 0x1, [0x200]}, 0xa) (async) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5", 0x4) (async) pipe(&(0x7f0000000480)) (async) r5 = accept4(r4, 0x0, 0x0, 0x80800) sendmmsg$alg(r5, &(0x7f0000000400)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40084}], 0x1, 0x0) (async) r6 = socket$inet6(0xa, 0x1, 0x0) (async) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f00000004c0)={0x500, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYRESOCT=r7, @ANYBLOB="165a07a4afed2159c7e240c76933b80a1c410677663b0a8f403dd67f0da6c9b795de7f342fefd83bcf70914692a3d4fd5ea5d92cd3a0d667d05ee794d31ce917dc3c54668739bfb3e8dafc80728a2651f0179ec06a87fe997f5a89c1f21b39ccaf9b90ff148bc5afa7b8a45c8d1a75abbded4c9ebcb5348c8481d85b90a382bf89afdb1297d47416312a2fd47303395c1c887ad25a970c4cf8b44df90bb2eb7fe64c034a437ccceef445bf47b679b10bb15f0d6e66bc", @ANYRES16=r7, @ANYBLOB="ce10af412806ca5190509312354cc983dba8c1d731c2e9e37bee5c15ef0148741c6272eb43970c6fc59bd6d2d96e07f85c9ed3a1c5e25e2ff6e8064f8c4ea6acfe814a6207a0979b1f65042fc4f1ca30038634eab5d389744a670174037c7dfa2a1f71d49f3e90ac0a879995db9d7600e46112e6cce5", @ANYRES32=r5], 0x50}}, 0x4044910) (async) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x8}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="0209000002"], 0x10}}, 0x0) (async) recvmsg(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000140)=""/68, 0x44}], 0x1}, 0x2041) (async) close(r7) (async) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r9, 0x29, 0x10, &(0x7f0000000180), 0x4) (async) getsockopt$inet6_int(r9, 0x29, 0x10, 0x0, &(0x7f0000000080)) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x2, 0x1, 0x10}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1m52.24454872s ago: executing program 33 (id=1471): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) (async) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000140)={0x5, 0x8, 0x5, 0x2, 0x0}, &(0x7f0000000180)=0x10) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)=@deltaction={0x78, 0x31, 0x100, 0x70bd25, 0x25dfdbfd, {}, [@TCA_ACT_TAB={0x44, 0x1, [{0x10, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0x201b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0xc, 0x204, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfffff56a}}, {0xc, 0x3, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x638a}}]}, @TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}]}, @TCA_ACT_TAB={0x10, 0x1, [{0xc, 0xe, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000}, 0x54) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYRES8=r2], 0x80}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x1e, 0x305, 0x0, 0x25dfdbfe, {}, [@typed={0x8, 0x0, 0x0, 0x0, @pid}]}, 0x1c}, 0x1, 0x8000000}, 0x0) (async) recvmmsg(r3, &(0x7f00000051c0)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x40, 0x0) (async) setsockopt$inet6_group_source_req(r3, 0x29, 0x2b, &(0x7f0000000740)={0x3, {{0xa, 0x4e23, 0x7, @loopback, 0x7}}, {{0xa, 0x4e21, 0xffff8001, @loopback, 0x2}}}, 0x108) (async) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000001c0)={r1, 0x80, 0x1, [0x200]}, 0xa) (async) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5", 0x4) (async) pipe(&(0x7f0000000480)) (async) r5 = accept4(r4, 0x0, 0x0, 0x80800) sendmmsg$alg(r5, &(0x7f0000000400)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40084}], 0x1, 0x0) (async) r6 = socket$inet6(0xa, 0x1, 0x0) (async) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f00000004c0)={0x500, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYRESOCT=r7, @ANYBLOB="165a07a4afed2159c7e240c76933b80a1c410677663b0a8f403dd67f0da6c9b795de7f342fefd83bcf70914692a3d4fd5ea5d92cd3a0d667d05ee794d31ce917dc3c54668739bfb3e8dafc80728a2651f0179ec06a87fe997f5a89c1f21b39ccaf9b90ff148bc5afa7b8a45c8d1a75abbded4c9ebcb5348c8481d85b90a382bf89afdb1297d47416312a2fd47303395c1c887ad25a970c4cf8b44df90bb2eb7fe64c034a437ccceef445bf47b679b10bb15f0d6e66bc", @ANYRES16=r7, @ANYBLOB="ce10af412806ca5190509312354cc983dba8c1d731c2e9e37bee5c15ef0148741c6272eb43970c6fc59bd6d2d96e07f85c9ed3a1c5e25e2ff6e8064f8c4ea6acfe814a6207a0979b1f65042fc4f1ca30038634eab5d389744a670174037c7dfa2a1f71d49f3e90ac0a879995db9d7600e46112e6cce5", @ANYRES32=r5], 0x50}}, 0x4044910) (async) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x8}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="0209000002"], 0x10}}, 0x0) (async) recvmsg(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000140)=""/68, 0x44}], 0x1}, 0x2041) (async) close(r7) (async) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r9, 0x29, 0x10, &(0x7f0000000180), 0x4) (async) getsockopt$inet6_int(r9, 0x29, 0x10, 0x0, &(0x7f0000000080)) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x2, 0x1, 0x10}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1m52.239583705s ago: executing program 0 (id=1473): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r2) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x20, r5, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001380)=@newtclass={0x3c, 0x28, 0x102, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0x9, 0xc}, {0xfff2, 0xffff}, {0x0, 0xb}}, [@TCA_RATE={0x6, 0x5, {0x3, 0x2}}, @TCA_RATE={0x6, 0x5, {0xfc, 0xf8}}, @TCA_RATE={0x6, 0x5, {0x4, 0x2}}]}, 0x7}, 0x1, 0x0, 0x0, 0x10}, 0x4000) 1m52.117865276s ago: executing program 34 (id=1473): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r2) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x20, r5, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001380)=@newtclass={0x3c, 0x28, 0x102, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0x9, 0xc}, {0xfff2, 0xffff}, {0x0, 0xb}}, [@TCA_RATE={0x6, 0x5, {0x3, 0x2}}, @TCA_RATE={0x6, 0x5, {0xfc, 0xf8}}, @TCA_RATE={0x6, 0x5, {0x4, 0x2}}]}, 0x7}, 0x1, 0x0, 0x0, 0x10}, 0x4000) 1m50.705735811s ago: executing program 4 (id=1476): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x17, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0xbb}]}, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x1000001, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd30", 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000c80)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x10, 0x2, 0xc, 0x6, 0x6, 0x7c0, 0x6, 0xfff]}}]}]}]}, 0x44}}, 0x0) 1m50.412744883s ago: executing program 35 (id=1476): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x17, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0xbb}]}, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x1000001, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd30", 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000c80)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x10, 0x2, 0xc, 0x6, 0x6, 0x7c0, 0x6, 0xfff]}}]}]}]}, 0x44}}, 0x0) 11.356345353s ago: executing program 5 (id=3014): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet_udp(0x2, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x3, 0xc, &(0x7f0000000c40)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000002300000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f00000000c0)=@req={0x7, 0xde5, 0x54c, 0x7}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="6800000010000100"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000480012800e0001006970366772657461700000003400028008000100", @ANYRES32, @ANYBLOB="14000600fe800000000000000000000000000015140007"], 0x68}}, 0x0) sendto$packet(r4, &(0x7f0000000180)="a6bea8a120e5f8320c30ce5086dda5e986f34c10d8c39c3002de8ec445ae083a4b7fc08a086fc691", 0x28, 0x0, &(0x7f0000000140)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @local}, 0x14) connect$pppl2tp(r1, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$netlink(0x10, 0x3, 0x10) r9 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r9, &(0x7f00000001c0)="c2", 0x1, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) shutdown(r9, 0x1) getsockopt$inet_sctp6_SCTP_STATUS(r9, 0x84, 0xe, &(0x7f0000000200)={0x0, 0x1, 0x7fff, 0x8, 0x95af, 0x461f, 0xfc, 0x8, {0x0, @in={{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x38}}}, 0xfffff7ac, 0x8, 0x9, 0x8001, 0xfffff193}}, &(0x7f0000000180)=0xb0) bind$netlink(r8, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r8, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r8, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000340)={'syztnl0\x00', &(0x7f00000001c0)={'syztnl2\x00', r6, 0x20, 0x20, 0x8c73, 0x8, {{0x15, 0x4, 0x3, 0x0, 0x54, 0x64, 0x0, 0x9, 0x2f, 0x0, @loopback, @local, {[@generic={0x89, 0x7, "2719d1f20d"}, @noop, @noop, @ssrr={0x89, 0x17, 0xf3, [@dev={0xac, 0x14, 0x14, 0x1f}, @local, @dev={0xac, 0x14, 0x14, 0x41}, @rand_addr=0x64010100, @broadcast]}, @timestamp={0x44, 0x20, 0x87, 0x0, 0x3, [0x9, 0x2, 0x1, 0x4, 0x0, 0x7, 0xffff8001]}]}}}}}) r11 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r10, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r11, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r12 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_DELETE(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x1c, r12, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}]}, 0x1c}}, 0x40) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000305000000000000000000cf0000", @ANYRES32=0x0, @ANYBLOB="03000000000000002000128008000100677265001400028008000600ac14144008000700e000030a08000a00", @ANYRES32], 0x48}}, 0x0) 9.630120685s ago: executing program 5 (id=3028): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="240000001a0001000000000000000000020000000000600000000000080009"], 0x24}}, 0x0) 9.513233088s ago: executing program 5 (id=3030): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f0000000bc0)=[{{&(0x7f00000000c0)={0xa, 0x4e20, 0x1, @local, 0x7}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000002700)="89", 0x1}], 0x1}}], 0x1, 0x24040040) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000080)=@sack_info={0x0, 0x8, 0x7ff}, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet_dccp(0x2, 0x6, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x1, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r3, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)=r4}, 0x20) r7 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r7, &(0x7f0000000380)={0x1d, r8, 0x2, {0x1, 0x0, 0x3}, 0xfd}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000940)={0xffffffffffffffff, 0xe0, &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000640)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4, &(0x7f0000000840)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x51, &(0x7f0000000740)=[{}], 0x8, 0x10, &(0x7f0000000680), &(0x7f00000007c0), 0x8, 0xf4, 0x8, 0x8, &(0x7f0000000800)}}, 0x10) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r11, 0x5, 0xe, 0x0, &(0x7f0000000280)="432275e2065074ef2415f73227b2", 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r12 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="0300000004966f49cfb7a6e7a800000000000000", @ANYRES32=0x1, @ANYBLOB="0500"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="05000000000000000100"/28], 0x50) sendmsg$NL80211_CMD_SET_WOWLAN(r1, &(0x7f0000000b40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000fc0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="000128bd7000ffdbdf254a000000080001007f00000008000300", @ANYRES32=0x0, @ANYBLOB="0c00990008000000680000002400758004000300040001000400060004050000000000000000030028ff648e425632b2"], 0x54}}, 0x4010) bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x5, 0x15, &(0x7f0000000280)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xbc61, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r6}}, @generic={0xa, 0x0, 0x0, 0x4, 0x5006c8bf}, @exit], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000004c0)='syzkaller\x00', 0x2, 0xbc, &(0x7f0000000500)=""/188, 0x40f00, 0x64, '\x00', r8, @fallback=0x9, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)={0x5, 0x1}, 0x8, 0x10, &(0x7f0000000600)={0x5, 0xe, 0x0, 0xe}, 0x10, r9, 0xffffffffffffffff, 0x4, &(0x7f0000000ac0)=[0xffffffffffffffff, r4, r12], &(0x7f0000000b00)=[{0x3, 0x1, 0xb, 0x4}, {0x3, 0x2, 0xd, 0x2}, {0x2, 0x3, 0x8, 0x7}, {0x1, 0x1, 0x2, 0x4}], 0x10, 0xe4, @void, @value}, 0x94) r13 = socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r13) sendmsg$TIPC_NL_BEARER_ENABLE(r13, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x24, r14, 0x1, 0x4000000, 0x0, {}, [@TIPC_NLA_BEARER={0x10, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xb, 0x1, @l2={'eth', 0x3a, 'lo\x00'}}]}]}, 0x24}}, 0x4000000) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) r16 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r16, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r15, @ANYBLOB="08002600901500000800570080"], 0x2c}}, 0x0) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000017000000003800000008000300", @ANYRES32=r15, @ANYBLOB="0c00580001"], 0x28}, 0x1, 0x0, 0x0, 0x600d0}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x89e2, &(0x7f0000000e40)={r7}) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r7, 0x84, 0x77, &(0x7f0000000e80)={0x0, 0x7, 0x9, [0x0, 0x5, 0x5, 0x9, 0x7, 0x7, 0x4, 0xfff0, 0x8000]}, &(0x7f0000000ec0)=0x1a) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r7, 0x84, 0x10, &(0x7f0000000f00)=@sack_info={r17, 0x4, 0xfffffe34}, &(0x7f0000000f40)=0xfffffffffffffe2e) 9.140044136s ago: executing program 5 (id=3032): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x80000001, 0x0, 0xffffffffffffffff, 0xfffffffc, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) socketpair(0x2c, 0x800, 0xffffffff, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) (async) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000e40)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="0200000002"], 0x10) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10) (async) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000e40)=ANY=[@ANYRES32=r4, @ANYRES32=r5], 0x10) (async) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@cgroup=r6, 0x2, 0x0, 0x400000, &(0x7f0000000200)=[0x0], 0x4000000000000017, 0x0, 0x0, 0x0, 0x0}, 0x40) (async) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f00000000c0)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000000)="6fcbe4b71b81f5dc07d8d71e579aab0840142c93ae24b846019164d5c2e4ba12911d5430e66c172920b92fff99450925", 0x30) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x15, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x101}, [@tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}}]}, &(0x7f0000000140)='syzkaller\x00', 0x8, 0x55, &(0x7f0000000180)=""/85, 0x83e00, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x6, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000240)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1], &(0x7f0000000280)=[{0x4, 0x4, 0xb, 0xa}, {0x0, 0x2, 0xb, 0xa}], 0x10, 0x4, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x23, &(0x7f0000000500)={0x0, r8, 0x0, 0xfffffffffffffffc}, 0x18) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r11, @ANYBLOB="080005"], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, &(0x7f0000000380)=0x0, &(0x7f00000003c0)=0x4) (async) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) (async) r14 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r14, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r14, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000180)={0x48, r13, 0x801, 0x0, 0x0, {{}, {@val={0x8, 0x3, r15}, @void}}, [@NL80211_ATTR_KEY={0x2c, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "4abee339084eeef16f162471f4"}, @NL80211_KEY_SEQ={0x4}, @NL80211_KEY_IDX={0x5}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}]}]}, 0x48}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0xc52b, '\x00', r12, r8, 0x5, 0x1, 0x5, 0x0, @void, @value, @void, @value}, 0x50) (async) syz_emit_ethernet(0x2e, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb080046000020000000000011907800d7b1cf024dd4a0a9595b000000000000000704040000004e2000089078"], 0x0) 9.014007488s ago: executing program 5 (id=3035): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000080), 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x2, 0x20}, &(0x7f0000000040)=0xc) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000180)={r2, 0x4}, 0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000100)={r2, 0x20, &(0x7f00000000c0)=[@in={0x2, 0x4e20, @rand_addr=0x64010102}, @in={0x2, 0x4e20, @multicast1}]}, &(0x7f0000000140)=0x10) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000640), 0x4) 8.483019528s ago: executing program 5 (id=3045): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r2 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), r0) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010025bd7000000000000100000008000100", @ANYRES32=r1, @ANYBLOB="400002803c"], 0x5c}, 0x1, 0xf000, 0x0, 0x3000000}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="540000010700042228bd700b00000000efff00f7", @ANYRES32=r1, @ANYBLOB="8000c40b08000d0008000000060005000200000008000f000000000005000c007f00000008000900fffeffff060005000300000008000a0000ff0700"], 0x54}, 0x1, 0xd, 0x0, 0x4008845}, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) unshare(0x2040400) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000000)) ioctl$PPPIOCSNPMODE(r3, 0x4008744b, &(0x7f00000000c0)) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wpan4\x00'}) 2.807032238s ago: executing program 1 (id=3098): socket$kcm(0x11, 0x200000000000002, 0x300) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) socket$kcm(0x11, 0x2, 0x300) 2.687205864s ago: executing program 7 (id=3101): r0 = socket$kcm(0x2, 0x1000000000000002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) setsockopt$sock_attach_bpf(r0, 0x88, 0x67, &(0x7f00000002c0)=r1, 0x4) sendmsg$inet(r0, &(0x7f0000000380)={&(0x7f0000000080)={0x2, 0x4e1f, @multicast2}, 0x10, 0x0, 0x0, &(0x7f00000000c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @multicast2}}}], 0x20}, 0x0) 2.616039531s ago: executing program 7 (id=3102): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xf, &(0x7f0000000380)=ANY=[@ANYBLOB="18ed49fe42237b0e8195f2e000000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = socket$kcm(0x11, 0x200000000000002, 0x300) r1 = socket$kcm(0x11, 0x2, 0x0) r2 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r2, 0x107, 0x12, &(0x7f00000000c0)=r1, 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0x12, &(0x7f0000000340)=r5, 0x4) 2.475904046s ago: executing program 7 (id=3105): r0 = socket$kcm(0x10, 0x2, 0x0) recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000003540)=""/102, 0x66}, {&(0x7f0000001040)=""/4069, 0xfe5}, {&(0x7f00000020c0)=""/4080, 0xff0}, {&(0x7f0000000880)=""/193, 0xc1}, {&(0x7f0000000440)=""/86, 0x56}, {&(0x7f0000000140)=""/85, 0x55}], 0x6}, 0x0) sendmsg$inet(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000fc0)="5c00000012006bab9a3fe3d86e17aa0a046b4877c4aaf68187bae53dca2ba35bda6a876c1d0048007ea608649e7524765f0ef82e3c0000a705259a3651f60a84c9f4d4938037e70e4509c5bb00000000e513aeac9bf2bee150d5fe86", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000e80)={0x0, 0x0, 0x0}, 0x40000002) 2.369194171s ago: executing program 8 (id=3107): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x26, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'wg2\x00', @multicast}) 1.092622712s ago: executing program 7 (id=3112): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000dc0)={&(0x7f0000000c80)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@const]}}, &(0x7f0000000200)=""/263, 0x26, 0x107, 0x1, 0x0, 0x0, @void, @value}, 0x20) 1.092446748s ago: executing program 8 (id=3113): r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="043900002000ef"], 0x33fe0) 1.067418398s ago: executing program 1 (id=3114): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x2d, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x0, 0xd, 0x8}, {0x10000002}], 0x10, 0x0, @void, @value}, 0x94) r0 = socket$kcm(0x10, 0x2, 0x4) close(r0) r1 = socket$kcm(0x2, 0x1, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r1, 0x84, 0x64, &(0x7f0000000000)=r4, 0x10) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000140)=[{&(0x7f00000005c0)="df", 0x1}], 0x1}, 0x0) sendmsg(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000580)="b6", 0x1}], 0x1}, 0x0) sendmsg$inet(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000700)="dbba", 0x2}], 0x1}, 0x0) 1.007961498s ago: executing program 8 (id=3116): r0 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r0, &(0x7f00000009c0)={&(0x7f00000000c0)={0x2, 0x4001, @empty}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x20044818) sendmsg$sock(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)='k', 0x1}], 0x1, &(0x7f00000001c0)=[@timestamping={{0x3f, 0x1, 0x25, 0x1}}], 0x18}, 0x4240) 908.544215ms ago: executing program 7 (id=3117): r0 = socket$kcm(0xa, 0x922000000003, 0x11) recvmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 848.422573ms ago: executing program 1 (id=3119): r0 = socket(0x26, 0x3, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0x1c, 0x1c, 0x3}, 0x1c) 804.454648ms ago: executing program 8 (id=3120): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x1, 0x4, 0x5, 0x0, 0x0, {0xa, 0x0, 0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x400c4}, 0x4000) 769.7777ms ago: executing program 1 (id=3121): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0x2}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000001c40)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x13, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x5014) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) r4 = gettid() ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000600)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010028bd7000ffdbdf251400000008000300", @ANYRES32=r5, @ANYBLOB="08001c00", @ANYRES32=r4], 0x24}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000000) 704.368844ms ago: executing program 8 (id=3123): r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x0, @hyper}, 0x10) 648.883184ms ago: executing program 8 (id=3125): r0 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f0000000080)='wg1\x00', 0x4) sendto$inet(r0, &(0x7f0000000040)="e5", 0xffffffe4, 0x60, 0x0, 0x0) 506.398842ms ago: executing program 6 (id=3128): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r0, &(0x7f0000000040)={0x23, 0x2e, 0x9}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r1, 0x0, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'netdevsim0\x00'}) bpf$MAP_CREATE(0x0, 0x0, 0x50) sendmsg$nl_route_sched_retired(r1, 0x0, 0x44090) socket(0x10, 0x3, 0x0) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0xffffffff}, 0x10) r4 = socket(0x1e, 0x4, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r5, &(0x7f0000000180)={0x0, 0xffffffffffffffad, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r6, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmsg$kcm(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000a80)=[{0x0}, {0x0}, {&(0x7f00000008c0)="2c83aa84cf5fe4d7dade16ecab3739093c85dd730a67880b9a4c94d4c17f9672ff0b0d56bdff6e47f73a7040960d2b549c7700c9968bec5f17dadeffbe008db8fe7a93c101a1f774f5520b491af2a108d9681c6aadb0364e1185c93403338ef338653a4a16034eae697763e312d310c6800e4490ae7a2534ae7cdb6b063c0493aeaa3b1187", 0x85}, {&(0x7f0000000b40)="afa2eaab9c79f40d1052a81e43025e22613c372462ed44b1c73cfdde2f0812af48b363018d142cc8f939b4bb434f11c0c96a38b0e5db83538610dfc4442cc056dd258627517f498ab9d138d2b870db7929dabeaccc0654a88ce492413ee0cb6313cbc2174e677d2feffb5b33b69e01c572259107cc5c29d42619743037ca49", 0x7f}, {&(0x7f0000000c40)="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", 0xc49}], 0x5}, 0x20000000) 432.455718ms ago: executing program 1 (id=3129): socket$kcm(0x10, 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x10d, 0x88, &(0x7f0000000200), &(0x7f0000000280)=0x1c) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x3c, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x7}]}}}]}, 0x3c}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x215}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x4c}, 0x1, 0xba01}, 0x0) 384.770429ms ago: executing program 6 (id=3130): socket$packet(0x11, 0x3, 0x300) r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000340)={0x1, 0x6d}, 0x8) sendmmsg$inet6(r0, &(0x7f0000001140)=[{{&(0x7f0000000040)={0xa, 0x4e21, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x4004000) 302.790043ms ago: executing program 6 (id=3131): r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f00000002c0)=0x8) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000000)={r2}, &(0x7f0000000080)=0x8) 184.627409ms ago: executing program 6 (id=3132): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x1c, 0x2, 0x1, 0x301, 0x0, 0x0, {0x2, 0x0, 0x1}, [@CTA_FILTER={0x4}, @CTA_TUPLE_ORIG={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) 158.472534ms ago: executing program 6 (id=3133): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x2}, 0x6) write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="010fa9"], 0x6) 104.666812ms ago: executing program 6 (id=3134): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x0, 0x10}, 0xc) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000180)="1a", 0x34000, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$sock(r0, 0x0, 0x0, 0x40000) 163.605µs ago: executing program 7 (id=3135): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001f80), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000001fc0)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r0, &(0x7f00000020c0)={0x0, 0x0, &(0x7f0000002080)={&(0x7f00000000c0)={0x28, r1, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}]}, 0x28}}, 0x0) 0s ago: executing program 1 (id=3136): r0 = socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a00100000000280", 0x2a}, {&(0x7f0000000400)="6a6f8e5e", 0x4}], 0x2}, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602240000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) kernel console output (not intermixed with test programs): atadv_slave_0 [ 214.224180][T10520] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.234121][T10520] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 214.244650][T10520] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.255657][T10520] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 214.288997][T10530] veth0_vlan: entered promiscuous mode [ 214.295499][T10520] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 214.308802][T10520] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.320607][T10520] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 214.347139][T10530] veth1_vlan: entered promiscuous mode [ 214.369954][T10520] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.382960][T10520] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.394112][T10520] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.402868][T10520] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.441944][T10550] veth0_vlan: entered promiscuous mode [ 214.483532][ T66] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 214.499020][ T66] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 214.519872][T10550] veth1_vlan: entered promiscuous mode [ 214.550328][T10530] veth0_macvtap: entered promiscuous mode [ 214.586635][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 214.602508][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 214.633147][T10530] veth1_macvtap: entered promiscuous mode [ 214.656539][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 214.673271][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 214.700602][T10530] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 214.717385][T10530] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.728720][T10530] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 214.749427][T10530] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.761235][T10530] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 214.772205][T10530] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.782149][T10530] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 214.794618][T10530] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.811963][T10530] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 214.841042][T10550] veth0_macvtap: entered promiscuous mode [ 214.855614][T10530] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 214.867341][T10530] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.877876][T10530] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 214.888451][T10530] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.899958][T10530] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 214.925833][T10550] veth1_macvtap: entered promiscuous mode [ 214.966659][T10530] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.966836][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 214.985004][T10530] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.011498][T10530] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.020788][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 215.028526][T10530] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.080048][T10550] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 215.116115][T10550] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.129931][T10550] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 215.141700][T10669] netlink: 'syz.6.1500': attribute type 11 has an invalid length. [ 215.143737][T10550] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.168708][T10550] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 215.170122][T10669] netlink: 'syz.6.1500': attribute type 4 has an invalid length. [ 215.181401][T10550] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.206154][T10550] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 215.213314][T10669] netlink: 224 bytes leftover after parsing attributes in process `syz.6.1500'. [ 215.220954][T10550] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.242038][T10550] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 215.257464][T10550] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.271203][T10550] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 215.319364][T10672] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1500'. [ 215.338152][T10550] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 215.356405][T10550] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.369363][T10550] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 215.380342][T10550] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.390289][T10550] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 215.401316][T10550] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.427585][T10550] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 215.486537][T10550] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.505502][T10550] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.533482][T10550] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.553357][T10550] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.693382][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 215.701240][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 215.812439][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 215.832249][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 215.967623][ T1160] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 216.015608][ T1160] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 216.139815][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 216.166925][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 216.599018][T10720] sch_tbf: burst 0 is lower than device bridge_slave_0 mtu (1514) ! [ 216.804561][T10734] netlink: 'syz.6.1521': attribute type 10 has an invalid length. [ 216.887794][T10742] netlink: 816 bytes leftover after parsing attributes in process `syz.1.1522'. [ 216.918069][T10734] team0: Device ipvlan1 failed to register rx_handler [ 217.081813][T10752] netlink: 'syz.7.1525': attribute type 1 has an invalid length. [ 217.355824][T10768] netlink: 'syz.5.1532': attribute type 1 has an invalid length. [ 217.414953][T10770] bond1 (unregistering): Released all slaves [ 217.482001][T10768] bond1 (unregistering): Released all slaves [ 217.700880][T10784] FAULT_INJECTION: forcing a failure. [ 217.700880][T10784] name failslab, interval 1, probability 0, space 0, times 0 [ 217.721169][T10784] CPU: 0 UID: 0 PID: 10784 Comm: syz.5.1534 Not tainted 6.15.0-rc2-syzkaller-00282-gd861a5dbb960 #0 PREEMPT(full) [ 217.721196][T10784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 217.721207][T10784] Call Trace: [ 217.721215][T10784] [ 217.721222][T10784] dump_stack_lvl+0x241/0x360 [ 217.721254][T10784] ? __pfx_dump_stack_lvl+0x10/0x10 [ 217.721280][T10784] ? __pfx__printk+0x10/0x10 [ 217.721309][T10784] ? __pfx___might_resched+0x10/0x10 [ 217.721331][T10784] should_fail_ex+0x424/0x570 [ 217.721363][T10784] should_failslab+0xac/0x100 [ 217.721383][T10784] kmem_cache_alloc_node_noprof+0x7d/0x3b0 [ 217.721408][T10784] ? __alloc_skb+0x1c2/0x480 [ 217.721437][T10784] __alloc_skb+0x1c2/0x480 [ 217.721462][T10784] ? tcp_call_bpf+0x2a4/0x630 [ 217.721490][T10784] ? __pfx___alloc_skb+0x10/0x10 [ 217.721518][T10784] ? __asan_memset+0x23/0x50 [ 217.721543][T10784] tcp_stream_alloc_skb+0x3d/0x310 [ 217.721564][T10784] tcp_connect+0x1203/0x4b20 [ 217.721619][T10784] ? __pfx_tcp_connect+0x10/0x10 [ 217.721647][T10784] ? inet6_hash_connect+0xe3/0x160 [ 217.721671][T10784] tcp_v6_connect+0x1387/0x1de0 [ 217.721700][T10784] ? __pfx_tcp_v6_connect+0x10/0x10 [ 217.721743][T10784] __inet_stream_connect+0x2a7/0xfb0 [ 217.721782][T10784] ? __local_bh_enable_ip+0x168/0x200 [ 217.721807][T10784] ? lockdep_hardirqs_on+0x9d/0x150 [ 217.721826][T10784] ? __pfx___inet_stream_connect+0x10/0x10 [ 217.721852][T10784] ? __local_bh_enable_ip+0x168/0x200 [ 217.721879][T10784] ? inet_stream_connect+0x50/0xa0 [ 217.721905][T10784] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 217.721943][T10784] inet_stream_connect+0x65/0xa0 [ 217.721974][T10784] __sys_connect+0x28c/0x2d0 [ 217.722000][T10784] ? __fget_files+0x2a/0x420 [ 217.722016][T10784] ? __pfx___sys_connect+0x10/0x10 [ 217.722063][T10784] __x64_sys_connect+0x7a/0x90 [ 217.722090][T10784] do_syscall_64+0xf3/0x210 [ 217.722109][T10784] ? clear_bhb_loop+0x45/0xa0 [ 217.722131][T10784] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.722148][T10784] RIP: 0033:0x7f87dc38e969 [ 217.722164][T10784] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 217.722179][T10784] RSP: 002b:00007f87dd231038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 217.722198][T10784] RAX: ffffffffffffffda RBX: 00007f87dc5b5fa0 RCX: 00007f87dc38e969 [ 217.722211][T10784] RDX: 0000000000000058 RSI: 00002000000001c0 RDI: 0000000000000004 [ 217.722222][T10784] RBP: 00007f87dd231090 R08: 0000000000000000 R09: 0000000000000000 [ 217.722233][T10784] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 217.722244][T10784] R13: 0000000000000000 R14: 00007f87dc5b5fa0 R15: 00007ffc39682908 [ 217.722271][T10784] [ 218.158432][T10790] x_tables: arp_tables: MARK.2 target: invalid size 8 (kernel) != (user) 0 [ 218.255632][T10794] FAULT_INJECTION: forcing a failure. [ 218.255632][T10794] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 218.268799][T10794] CPU: 0 UID: 0 PID: 10794 Comm: syz.7.1539 Not tainted 6.15.0-rc2-syzkaller-00282-gd861a5dbb960 #0 PREEMPT(full) [ 218.268826][T10794] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 218.268838][T10794] Call Trace: [ 218.268845][T10794] [ 218.268853][T10794] dump_stack_lvl+0x241/0x360 [ 218.268887][T10794] ? __pfx_dump_stack_lvl+0x10/0x10 [ 218.268913][T10794] ? __pfx__printk+0x10/0x10 [ 218.268952][T10794] should_fail_ex+0x424/0x570 [ 218.268985][T10794] _copy_from_iter+0x211/0x1c70 [ 218.269020][T10794] ? is_bpf_text_address+0x26/0x2a0 [ 218.269047][T10794] ? __pfx__copy_from_iter+0x10/0x10 [ 218.269067][T10794] ? 0xffffffffa0003b40 [ 218.269084][T10794] ? is_bpf_text_address+0x288/0x2a0 [ 218.269108][T10794] ? is_bpf_text_address+0x26/0x2a0 [ 218.269135][T10794] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 218.269158][T10794] ? kernel_text_address+0xa7/0xe0 [ 218.269188][T10794] tun_get_user+0x269/0x47c0 [ 218.269233][T10794] ? aa_file_perm+0x139/0xf60 [ 218.269259][T10794] ? aa_file_perm+0x139/0xf60 [ 218.269284][T10794] ? aa_file_perm+0x3f1/0xf60 [ 218.269308][T10794] ? __pfx_tun_get_user+0x10/0x10 [ 218.269340][T10794] ? __lock_acquire+0xad5/0xd80 [ 218.269371][T10794] ? ref_tracker_alloc+0x316/0x4c0 [ 218.269392][T10794] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 218.269427][T10794] ? tun_get+0x1e/0x2f0 [ 218.269463][T10794] ? tun_get+0x1e/0x2f0 [ 218.269485][T10794] ? tun_get+0x27d/0x2f0 [ 218.269510][T10794] tun_chr_write_iter+0x10d/0x1f0 [ 218.269537][T10794] vfs_write+0x70f/0xd10 [ 218.269573][T10794] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 218.269599][T10794] ? __pfx_vfs_write+0x10/0x10 [ 218.269626][T10794] ? __fget_files+0x2a/0x420 [ 218.269645][T10794] ? __fget_files+0x2a/0x420 [ 218.269670][T10794] ksys_write+0x19d/0x2d0 [ 218.269696][T10794] ? __pfx_ksys_write+0x10/0x10 [ 218.269725][T10794] ? do_syscall_64+0xb6/0x210 [ 218.269747][T10794] do_syscall_64+0xf3/0x210 [ 218.269766][T10794] ? clear_bhb_loop+0x45/0xa0 [ 218.269787][T10794] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 218.269804][T10794] RIP: 0033:0x7f611298e969 [ 218.269818][T10794] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 218.269833][T10794] RSP: 002b:00007f61107f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 218.269852][T10794] RAX: ffffffffffffffda RBX: 00007f6112bb5fa0 RCX: 00007f611298e969 [ 218.269864][T10794] RDX: 000000000000fdef RSI: 0000200000000240 RDI: 0000000000000004 [ 218.269875][T10794] RBP: 00007f61107f6090 R08: 0000000000000000 R09: 0000000000000000 [ 218.269886][T10794] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 218.269896][T10794] R13: 0000000000000000 R14: 00007f6112bb5fa0 R15: 00007ffcbbd14328 [ 218.269923][T10794] [ 218.807255][T10812] FAULT_INJECTION: forcing a failure. [ 218.807255][T10812] name failslab, interval 1, probability 0, space 0, times 0 [ 218.853567][T10812] CPU: 0 UID: 0 PID: 10812 Comm: syz.1.1548 Not tainted 6.15.0-rc2-syzkaller-00282-gd861a5dbb960 #0 PREEMPT(full) [ 218.853599][T10812] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 218.853613][T10812] Call Trace: [ 218.853621][T10812] [ 218.853630][T10812] dump_stack_lvl+0x241/0x360 [ 218.853668][T10812] ? __pfx_dump_stack_lvl+0x10/0x10 [ 218.853710][T10812] ? __pfx__printk+0x10/0x10 [ 218.853754][T10812] ? __pfx___might_resched+0x10/0x10 [ 218.853777][T10812] should_fail_ex+0x424/0x570 [ 218.853809][T10812] should_failslab+0xac/0x100 [ 218.853831][T10812] kmem_cache_alloc_node_noprof+0x7d/0x3b0 [ 218.853852][T10812] ? __alloc_skb+0x1c2/0x480 [ 218.853892][T10812] __alloc_skb+0x1c2/0x480 [ 218.853922][T10812] ? __pfx___alloc_skb+0x10/0x10 [ 218.853956][T10812] netlink_sendmsg+0x638/0xcd0 [ 218.853991][T10812] ? __pfx_netlink_sendmsg+0x10/0x10 [ 218.854018][T10812] ? aa_sock_msg_perm+0x91/0x160 [ 218.854046][T10812] ? __pfx_netlink_sendmsg+0x10/0x10 [ 218.854066][T10812] __sock_sendmsg+0x221/0x270 [ 218.854090][T10812] ____sys_sendmsg+0x523/0x860 [ 218.854113][T10812] ? __pfx_____sys_sendmsg+0x10/0x10 [ 218.854126][T10812] ? __fget_files+0x2a/0x420 [ 218.854144][T10812] ? __fget_files+0x2a/0x420 [ 218.854168][T10812] __sys_sendmsg+0x271/0x360 [ 218.854190][T10812] ? __pfx___sys_sendmsg+0x10/0x10 [ 218.854253][T10812] ? do_syscall_64+0xb6/0x210 [ 218.854277][T10812] do_syscall_64+0xf3/0x210 [ 218.854296][T10812] ? clear_bhb_loop+0x45/0xa0 [ 218.854327][T10812] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 218.854345][T10812] RIP: 0033:0x7f2042f8e969 [ 218.854360][T10812] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 218.854376][T10812] RSP: 002b:00007f2043d96038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 218.854396][T10812] RAX: ffffffffffffffda RBX: 00007f20431b5fa0 RCX: 00007f2042f8e969 [ 218.854409][T10812] RDX: 0000000000040810 RSI: 0000200000000140 RDI: 0000000000000003 [ 218.854420][T10812] RBP: 00007f2043d96090 R08: 0000000000000000 R09: 0000000000000000 [ 218.854431][T10812] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 218.854441][T10812] R13: 0000000000000000 R14: 00007f20431b5fa0 R15: 00007fffa8526268 [ 218.854468][T10812] [ 218.857223][T10814] siw: device registration error -23 [ 219.635163][T10855] siw: device registration error -23 [ 219.644464][T10854] netlink: 'syz.8.1564': attribute type 1 has an invalid length. [ 219.689073][ T5896] IPVS: starting estimator thread 0... [ 219.813391][T10856] IPVS: using max 28 ests per chain, 67200 per kthread [ 219.864490][T10862] FAULT_INJECTION: forcing a failure. [ 219.864490][T10862] name failslab, interval 1, probability 0, space 0, times 0 [ 219.877477][T10862] CPU: 1 UID: 0 PID: 10862 Comm: syz.1.1567 Not tainted 6.15.0-rc2-syzkaller-00282-gd861a5dbb960 #0 PREEMPT(full) [ 219.877501][T10862] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 219.877512][T10862] Call Trace: [ 219.877519][T10862] [ 219.877527][T10862] dump_stack_lvl+0x241/0x360 [ 219.877560][T10862] ? __pfx_dump_stack_lvl+0x10/0x10 [ 219.877586][T10862] ? __pfx__printk+0x10/0x10 [ 219.877613][T10862] ? fib6_table_lookup+0xb98/0xbf0 [ 219.877639][T10862] should_fail_ex+0x424/0x570 [ 219.877668][T10862] ? __pfx_ip6_dst_gc+0x10/0x10 [ 219.877695][T10862] should_failslab+0xac/0x100 [ 219.877716][T10862] kmem_cache_alloc_noprof+0x78/0x390 [ 219.877734][T10862] ? dst_alloc+0x12b/0x190 [ 219.877753][T10862] ? __pfx_ip6_dst_gc+0x10/0x10 [ 219.877780][T10862] dst_alloc+0x12b/0x190 [ 219.877801][T10862] ip6_pol_route+0xb96/0x15f0 [ 219.877824][T10862] ? ip6_pol_route+0x192/0x15f0 [ 219.877844][T10862] ? __pfx_ip6_pol_route+0x10/0x10 [ 219.877872][T10862] ? __pfx_process_measurement+0x10/0x10 [ 219.877897][T10862] ? tomoyo_check_open_permission+0x209/0x4f0 [ 219.877924][T10862] fib6_rule_lookup+0x3c4/0x7a0 [ 219.877945][T10862] ? __pfx_ip6_pol_route_output+0x10/0x10 [ 219.877965][T10862] ? __pfx_fib6_rule_lookup+0x10/0x10 [ 219.877999][T10862] ? dev_get_by_index_rcu+0xef/0x110 [ 219.878019][T10862] ? ip6_route_output_flags+0x30/0x610 [ 219.878037][T10862] ? l3mdev_link_scope_lookup+0x112/0x1c0 [ 219.878061][T10862] ? ip6_route_output_flags+0x30/0x610 [ 219.878079][T10862] ip6_route_output_flags+0x38e/0x610 [ 219.878103][T10862] ip6_dst_lookup_tail+0x292/0x1510 [ 219.878127][T10862] ? is_bpf_text_address+0x26/0x2a0 [ 219.878154][T10862] ? 0xffffffffa0003b40 [ 219.878176][T10862] ? __pfx_ip6_dst_lookup_tail+0x10/0x10 [ 219.878197][T10862] ? kernel_text_address+0xa7/0xe0 [ 219.878223][T10862] ? _parse_integer_limit+0x1b4/0x200 [ 219.878248][T10862] ? kstrtoull+0x1d3/0x2f0 [ 219.878268][T10862] ip6_dst_lookup_flow+0xbb/0x180 [ 219.878293][T10862] ? __pfx_ip6_dst_lookup_flow+0x10/0x10 [ 219.878326][T10862] dccp_v6_connect+0xb01/0x14f0 [ 219.878355][T10862] ? __pfx_dccp_v6_connect+0x10/0x10 [ 219.878373][T10862] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 219.878423][T10862] __inet_stream_connect+0x2a7/0xfb0 [ 219.878463][T10862] ? __local_bh_enable_ip+0x168/0x200 [ 219.878488][T10862] ? lockdep_hardirqs_on+0x9d/0x150 [ 219.878508][T10862] ? __pfx___inet_stream_connect+0x10/0x10 [ 219.878532][T10862] ? __local_bh_enable_ip+0x168/0x200 [ 219.878559][T10862] ? inet_stream_connect+0x50/0xa0 [ 219.878586][T10862] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 219.878624][T10862] inet_stream_connect+0x65/0xa0 [ 219.878654][T10862] __sys_connect+0x28c/0x2d0 [ 219.878679][T10862] ? __fget_files+0x2a/0x420 [ 219.878696][T10862] ? __pfx___sys_connect+0x10/0x10 [ 219.878743][T10862] __x64_sys_connect+0x7a/0x90 [ 219.878769][T10862] do_syscall_64+0xf3/0x210 [ 219.878790][T10862] ? clear_bhb_loop+0x45/0xa0 [ 219.878811][T10862] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 219.878828][T10862] RIP: 0033:0x7f2042f8e969 [ 219.878843][T10862] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 219.878859][T10862] RSP: 002b:00007f2043d96038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 219.878877][T10862] RAX: ffffffffffffffda RBX: 00007f20431b5fa0 RCX: 00007f2042f8e969 [ 219.878891][T10862] RDX: 000000000000001c RSI: 0000200000000080 RDI: 0000000000000003 [ 219.878902][T10862] RBP: 00007f2043d96090 R08: 0000000000000000 R09: 0000000000000000 [ 219.878912][T10862] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 219.878922][T10862] R13: 0000000000000000 R14: 00007f20431b5fa0 R15: 00007fffa8526268 [ 219.878950][T10862] [ 220.372345][T10877] x_tables: duplicate underflow at hook 1 [ 220.410039][T10884] siw: device registration error -23 [ 220.413994][T10881] nbd: couldn't find device at index 65536 [ 220.427178][T10884] FAULT_INJECTION: forcing a failure. [ 220.427178][T10884] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 220.457852][T10881] Dead loop on virtual device ip6_vti0, fix it urgently! [ 220.460978][T10884] CPU: 1 UID: 0 PID: 10884 Comm: syz.7.1575 Not tainted 6.15.0-rc2-syzkaller-00282-gd861a5dbb960 #0 PREEMPT(full) [ 220.461005][T10884] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 220.461016][T10884] Call Trace: [ 220.461025][T10884] [ 220.461033][T10884] dump_stack_lvl+0x241/0x360 [ 220.461069][T10884] ? __pfx_dump_stack_lvl+0x10/0x10 [ 220.461096][T10884] ? __pfx__printk+0x10/0x10 [ 220.461135][T10884] should_fail_ex+0x424/0x570 [ 220.461169][T10884] _copy_from_iter+0x211/0x1c70 [ 220.461198][T10884] ? __build_skb_around+0x247/0x3d0 [ 220.461230][T10884] ? __alloc_skb+0x298/0x480 [ 220.461255][T10884] ? __pfx__copy_from_iter+0x10/0x10 [ 220.461281][T10884] ? __pfx___alloc_skb+0x10/0x10 [ 220.461309][T10884] ? skb_put+0x114/0x1f0 [ 220.461340][T10884] netlink_sendmsg+0x73c/0xcd0 [ 220.461376][T10884] ? __pfx_netlink_sendmsg+0x10/0x10 [ 220.461405][T10884] ? aa_sock_msg_perm+0x91/0x160 [ 220.461441][T10884] ? __pfx_netlink_sendmsg+0x10/0x10 [ 220.461463][T10884] __sock_sendmsg+0x221/0x270 [ 220.461488][T10884] ____sys_sendmsg+0x523/0x860 [ 220.461515][T10884] ? __pfx_____sys_sendmsg+0x10/0x10 [ 220.461530][T10884] ? __fget_files+0x2a/0x420 [ 220.461552][T10884] ? __fget_files+0x2a/0x420 [ 220.461579][T10884] __sys_sendmsg+0x271/0x360 [ 220.461602][T10884] ? __pfx___sys_sendmsg+0x10/0x10 [ 220.461670][T10884] ? do_syscall_64+0xb6/0x210 [ 220.461695][T10884] do_syscall_64+0xf3/0x210 [ 220.461716][T10884] ? clear_bhb_loop+0x45/0xa0 [ 220.461756][T10884] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 220.461776][T10884] RIP: 0033:0x7f611298e969 [ 220.461793][T10884] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 220.461810][T10884] RSP: 002b:00007f61107f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 220.461833][T10884] RAX: ffffffffffffffda RBX: 00007f6112bb5fa0 RCX: 00007f611298e969 [ 220.461847][T10884] RDX: 0000000000040810 RSI: 0000200000000140 RDI: 0000000000000003 [ 220.461861][T10884] RBP: 00007f61107f6090 R08: 0000000000000000 R09: 0000000000000000 [ 220.461874][T10884] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 220.461885][T10884] R13: 0000000000000000 R14: 00007f6112bb5fa0 R15: 00007ffcbbd14328 [ 220.461916][T10884] [ 220.618740][T10889] siw: device registration error -23 [ 220.687104][T10881] Dead loop on virtual device ip6_vti0, fix it urgently! [ 220.720278][T10881] Dead loop on virtual device ip6_vti0, fix it urgently! [ 220.723832][T10889] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1579'. [ 220.731391][T10881] Dead loop on virtual device ip6_vti0, fix it urgently! [ 220.750103][T10881] Dead loop on virtual device ip6_vti0, fix it urgently! [ 220.791571][T10881] Dead loop on virtual device ip6_vti0, fix it urgently! [ 220.823805][T10881] Dead loop on virtual device ip6_vti0, fix it urgently! [ 220.982079][T10894] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1579'. [ 221.013398][ T30] audit: type=1800 audit(1745493047.261:3): pid=10893 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.1578" name="cgroup.controllers" dev="tmpfs" ino=90 res=0 errno=0 [ 221.087291][T10908] netlink: 240 bytes leftover after parsing attributes in process `syz.1.1581'. [ 221.465608][T10932] FAULT_INJECTION: forcing a failure. [ 221.465608][T10932] name failslab, interval 1, probability 0, space 0, times 0 [ 221.478424][T10932] CPU: 1 UID: 0 PID: 10932 Comm: syz.6.1593 Not tainted 6.15.0-rc2-syzkaller-00282-gd861a5dbb960 #0 PREEMPT(full) [ 221.478450][T10932] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 221.478461][T10932] Call Trace: [ 221.478468][T10932] [ 221.478476][T10932] dump_stack_lvl+0x241/0x360 [ 221.478508][T10932] ? __pfx_dump_stack_lvl+0x10/0x10 [ 221.478533][T10932] ? __pfx__printk+0x10/0x10 [ 221.478562][T10932] ? __pfx___might_resched+0x10/0x10 [ 221.478585][T10932] should_fail_ex+0x424/0x570 [ 221.478618][T10932] should_failslab+0xac/0x100 [ 221.478638][T10932] kmem_cache_alloc_node_noprof+0x7d/0x3b0 [ 221.478658][T10932] ? __alloc_skb+0x1c2/0x480 [ 221.478688][T10932] __alloc_skb+0x1c2/0x480 [ 221.478713][T10932] ? dccp_feat_finalise_settings+0x34f/0x3e0 [ 221.478741][T10932] ? __pfx___alloc_skb+0x10/0x10 [ 221.478768][T10932] ? ip6_mtu+0x81/0x3f0 [ 221.478792][T10932] dccp_connect+0x3d9/0x870 [ 221.478822][T10932] dccp_v6_connect+0xd91/0x14f0 [ 221.478850][T10932] ? __pfx_dccp_v6_connect+0x10/0x10 [ 221.478868][T10932] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 221.478911][T10932] __inet_stream_connect+0x2a7/0xfb0 [ 221.478950][T10932] ? __local_bh_enable_ip+0x168/0x200 [ 221.478975][T10932] ? lockdep_hardirqs_on+0x9d/0x150 [ 221.478995][T10932] ? __pfx___inet_stream_connect+0x10/0x10 [ 221.479020][T10932] ? __local_bh_enable_ip+0x168/0x200 [ 221.479048][T10932] ? inet_stream_connect+0x50/0xa0 [ 221.479074][T10932] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 221.479111][T10932] inet_stream_connect+0x65/0xa0 [ 221.479141][T10932] __sys_connect+0x28c/0x2d0 [ 221.479166][T10932] ? __fget_files+0x2a/0x420 [ 221.479183][T10932] ? __pfx___sys_connect+0x10/0x10 [ 221.479230][T10932] __x64_sys_connect+0x7a/0x90 [ 221.479255][T10932] do_syscall_64+0xf3/0x210 [ 221.479275][T10932] ? clear_bhb_loop+0x45/0xa0 [ 221.479303][T10932] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.479320][T10932] RIP: 0033:0x7f3819f8e969 [ 221.479335][T10932] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 221.479351][T10932] RSP: 002b:00007f381ae25038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 221.479371][T10932] RAX: ffffffffffffffda RBX: 00007f381a1b5fa0 RCX: 00007f3819f8e969 [ 221.479385][T10932] RDX: 000000000000001c RSI: 0000200000000080 RDI: 0000000000000003 [ 221.479396][T10932] RBP: 00007f381ae25090 R08: 0000000000000000 R09: 0000000000000000 [ 221.479407][T10932] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 221.479417][T10932] R13: 0000000000000000 R14: 00007f381a1b5fa0 R15: 00007fff56360718 [ 221.479444][T10932] [ 221.855586][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 221.881464][T10943] veth1_macvtap: entered allmulticast mode [ 221.898566][T10934] veth0_to_bridge: entered promiscuous mode [ 221.942321][ T1148] bridge0: port 1(bridge_slave_0) entered disabled state [ 222.141330][T10956] netlink: 668 bytes leftover after parsing attributes in process `syz.8.1602'. [ 222.152120][T10956] netlink: 668 bytes leftover after parsing attributes in process `syz.8.1602'. [ 222.337421][T10967] siw: device registration error -23 [ 222.517002][T10981] FAULT_INJECTION: forcing a failure. [ 222.517002][T10981] name failslab, interval 1, probability 0, space 0, times 0 [ 222.571648][T10981] CPU: 0 UID: 0 PID: 10981 Comm: syz.6.1609 Not tainted 6.15.0-rc2-syzkaller-00282-gd861a5dbb960 #0 PREEMPT(full) [ 222.571679][T10981] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 222.571690][T10981] Call Trace: [ 222.571698][T10981] [ 222.571706][T10981] dump_stack_lvl+0x241/0x360 [ 222.571738][T10981] ? __pfx_dump_stack_lvl+0x10/0x10 [ 222.571763][T10981] ? __pfx__printk+0x10/0x10 [ 222.571792][T10981] ? __pfx___might_resched+0x10/0x10 [ 222.571813][T10981] should_fail_ex+0x424/0x570 [ 222.571845][T10981] should_failslab+0xac/0x100 [ 222.571865][T10981] __kmalloc_noprof+0xdf/0x4d0 [ 222.571883][T10981] ? tomoyo_realpath_from_path+0xc2/0x5e0 [ 222.571907][T10981] ? tomoyo_realpath_from_path+0xcf/0x5e0 [ 222.571938][T10981] tomoyo_realpath_from_path+0xcf/0x5e0 [ 222.571973][T10981] tomoyo_path_number_perm+0x245/0x790 [ 222.571999][T10981] ? tomoyo_path_number_perm+0x215/0x790 [ 222.572022][T10981] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 222.572050][T10981] ? ksys_write+0x24e/0x2d0 [ 222.572100][T10981] ? __lock_acquire+0xad5/0xd80 [ 222.572146][T10981] ? __fget_files+0x2a/0x420 [ 222.572163][T10981] ? __fget_files+0x2a/0x420 [ 222.572192][T10981] ? __fget_files+0x2a/0x420 [ 222.572215][T10981] security_file_ioctl+0xc6/0x2a0 [ 222.572237][T10981] __se_sys_ioctl+0x46/0x160 [ 222.572264][T10981] do_syscall_64+0xf3/0x210 [ 222.572285][T10981] ? clear_bhb_loop+0x45/0xa0 [ 222.572308][T10981] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.572327][T10981] RIP: 0033:0x7f3819f8e969 [ 222.572343][T10981] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 222.572360][T10981] RSP: 002b:00007f381ae04038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 222.572380][T10981] RAX: ffffffffffffffda RBX: 00007f381a1b6080 RCX: 00007f3819f8e969 [ 222.572394][T10981] RDX: 0000200000002280 RSI: 0000000000008914 RDI: 0000000000000007 [ 222.572406][T10981] RBP: 00007f381ae04090 R08: 0000000000000000 R09: 0000000000000000 [ 222.572418][T10981] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 222.572430][T10981] R13: 0000000000000000 R14: 00007f381a1b6080 R15: 00007fff56360718 [ 222.572459][T10981] [ 222.743875][T10992] netlink: 'syz.7.1616': attribute type 1 has an invalid length. [ 222.753815][T10981] ERROR: Out of memory at tomoyo_realpath_from_path. [ 222.877767][T10996] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1618'. [ 222.877852][T10994] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1617'. [ 222.900567][T10996] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1618'. [ 222.950598][T10996] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1618'. [ 222.988722][T10998] mac80211_hwsim hwsim15 ÿ: renamed from wlan1 (while UP) [ 223.070650][T11003] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1619'. [ 223.105622][T11003] netlink: 'syz.5.1619': attribute type 1 has an invalid length. [ 223.152762][T11003] netlink: 'syz.5.1619': attribute type 11 has an invalid length. [ 223.512584][T11026] netlink: 'syz.6.1627': attribute type 1 has an invalid length. [ 223.619740][T11030] xt_CT: You must specify a L4 protocol and not use inversions on it [ 224.400347][T11085] netlink: 'syz.5.1647': attribute type 11 has an invalid length. [ 224.614736][T11098] team0: entered promiscuous mode [ 224.621238][T11098] team_slave_0: entered promiscuous mode [ 224.627400][T11098] team_slave_1: entered promiscuous mode [ 224.645977][T11098] batadv_slave_1: entered promiscuous mode [ 224.814166][T11116] siw: device registration error -23 [ 225.276471][T11141] team0: entered promiscuous mode [ 225.282640][T11141] team_slave_0: entered promiscuous mode [ 225.289423][T11141] team_slave_1: entered promiscuous mode [ 225.309591][T11141] batadv_slave_1: entered promiscuous mode [ 225.324099][T11141] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 225.348560][T11141] Cannot create hsr debugfs directory [ 225.369031][T11146] dvmrp1: entered allmulticast mode [ 225.831870][T11176] x_tables: duplicate underflow at hook 3 [ 225.868176][T11180] netlink: 'syz.8.1679': attribute type 1 has an invalid length. [ 225.954802][T11183] bond1: (slave wireguard0): The slave device specified does not support setting the MAC address [ 225.966391][T11183] bond1: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 225.981213][T11183] bond1: (slave wireguard0): making interface the new active one [ 225.989818][T11183] bond1: (slave wireguard0): Enslaving as an active interface with an up link [ 225.992714][T11189] __nla_validate_parse: 13 callbacks suppressed [ 225.992734][T11189] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1682'. [ 226.073154][T11178] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1680'. [ 226.093013][T11193] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1684'. [ 226.188725][T11189] team0: entered promiscuous mode [ 226.203474][T11189] team_slave_0: entered promiscuous mode [ 226.217122][T11189] team_slave_1: entered promiscuous mode [ 226.236985][T11189] batadv_slave_1: entered promiscuous mode [ 226.262556][T11189] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 226.286196][T11189] Cannot create hsr debugfs directory [ 226.430011][T11211] netlink: 'syz.6.1689': attribute type 10 has an invalid length. [ 226.438497][T11211] veth0_macvtap: left promiscuous mode [ 226.542346][T11216] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1691'. [ 226.619502][T11219] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1693'. [ 226.646059][T11214] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1690'. [ 226.663530][T11214] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 226.703874][T11224] netlink: 'syz.1.1694': attribute type 1 has an invalid length. [ 226.736552][T11214] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 226.746143][T11214] batadv_slave_1 (unregistering): left promiscuous mode [ 226.776616][T11226] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1695'. [ 226.827313][T11228] bond5: (slave wireguard4): The slave device specified does not support setting the MAC address [ 226.838163][T11228] bond5: (slave wireguard4): Setting fail_over_mac to active for active-backup mode [ 226.853386][T11228] bond5: (slave wireguard4): making interface the new active one [ 226.861778][T11228] bond5: (slave wireguard4): Enslaving as an active interface with an up link [ 226.988872][T11235] netlink: 'syz.1.1697': attribute type 10 has an invalid length. [ 227.030690][T11235] team0: Device hsr_slave_0 failed to register rx_handler [ 227.142948][T11240] FAULT_INJECTION: forcing a failure. [ 227.142948][T11240] name failslab, interval 1, probability 0, space 0, times 0 [ 227.160438][T11240] CPU: 1 UID: 0 PID: 11240 Comm: syz.6.1698 Not tainted 6.15.0-rc2-syzkaller-00282-gd861a5dbb960 #0 PREEMPT(full) [ 227.160465][T11240] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 227.160477][T11240] Call Trace: [ 227.160485][T11240] [ 227.160493][T11240] dump_stack_lvl+0x241/0x360 [ 227.160527][T11240] ? __pfx_dump_stack_lvl+0x10/0x10 [ 227.160560][T11240] ? __pfx__printk+0x10/0x10 [ 227.160589][T11240] ? __pfx___might_resched+0x10/0x10 [ 227.160610][T11240] should_fail_ex+0x424/0x570 [ 227.160642][T11240] should_failslab+0xac/0x100 [ 227.160662][T11240] __kmalloc_node_noprof+0xe7/0x4d0 [ 227.160682][T11240] ? qdisc_alloc+0x9a/0xa80 [ 227.160725][T11240] qdisc_alloc+0x9a/0xa80 [ 227.160758][T11240] qdisc_create_dflt+0x62/0x4b0 [ 227.160785][T11240] dev_activate+0x3c0/0x1240 [ 227.160821][T11240] ? __pfx_dev_activate+0x10/0x10 [ 227.160856][T11240] __dev_open+0x72c/0x900 [ 227.160886][T11240] ? __pfx___dev_open+0x10/0x10 [ 227.160921][T11240] __dev_change_flags+0x1e4/0x700 [ 227.160956][T11240] ? __pfx___dev_change_flags+0x10/0x10 [ 227.160997][T11240] ? dev_ioctl+0x7fd/0x1260 [ 227.161019][T11240] ? __pfx___mutex_lock+0x10/0x10 [ 227.161039][T11240] ? full_name_hash+0x93/0xe0 [ 227.161062][T11240] netif_change_flags+0x8b/0x1a0 [ 227.161093][T11240] dev_change_flags+0x146/0x270 [ 227.161124][T11240] dev_ioctl+0x80f/0x1260 [ 227.161152][T11240] sock_do_ioctl+0x22f/0x400 [ 227.161176][T11240] ? __pfx_sock_do_ioctl+0x10/0x10 [ 227.161202][T11240] ? __lock_acquire+0xad5/0xd80 [ 227.161240][T11240] sock_ioctl+0x644/0x900 [ 227.161264][T11240] ? __pfx_sock_ioctl+0x10/0x10 [ 227.161282][T11240] ? __fget_files+0x2a/0x420 [ 227.161300][T11240] ? __fget_files+0x2a/0x420 [ 227.161319][T11240] ? __fget_files+0x2a/0x420 [ 227.161342][T11240] ? __pfx_sock_ioctl+0x10/0x10 [ 227.161364][T11240] __se_sys_ioctl+0xf1/0x160 [ 227.161391][T11240] do_syscall_64+0xf3/0x210 [ 227.161411][T11240] ? clear_bhb_loop+0x45/0xa0 [ 227.161432][T11240] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 227.161450][T11240] RIP: 0033:0x7f3819f8e969 [ 227.161467][T11240] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 227.161483][T11240] RSP: 002b:00007f381ae25038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 227.161503][T11240] RAX: ffffffffffffffda RBX: 00007f381a1b5fa0 RCX: 00007f3819f8e969 [ 227.161517][T11240] RDX: 0000200000002280 RSI: 0000000000008914 RDI: 0000000000000007 [ 227.161529][T11240] RBP: 00007f381ae25090 R08: 0000000000000000 R09: 0000000000000000 [ 227.161541][T11240] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 227.161559][T11240] R13: 0000000000000000 R14: 00007f381a1b5fa0 R15: 00007fff56360718 [ 227.161588][T11240] [ 227.161598][T11240] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 227.509618][T11252] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1703'. [ 227.586509][T11255] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1705'. [ 227.600685][T11252] netlink: 56 bytes leftover after parsing attributes in process `syz.5.1703'. [ 227.802444][T11269] netlink: 'syz.8.1708': attribute type 1 has an invalid length. [ 227.894471][T11269] bond2: (slave wireguard1): The slave device specified does not support setting the MAC address [ 227.907265][T11269] bond2: (slave wireguard1): Setting fail_over_mac to active for active-backup mode [ 227.925446][T11269] bond2: (slave wireguard1): making interface the new active one [ 227.938680][T11269] bond2: (slave wireguard1): Enslaving as an active interface with an up link [ 227.951139][T11274] tipc: Enabling of bearer rejected, failed to enable media [ 228.002110][T11278] netlink: 'syz.6.1711': attribute type 10 has an invalid length. [ 228.070431][T11278] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 228.096037][T11282] (unnamed net_device) (uninitialized): up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 228.570460][T11308] netlink: 'syz.1.1723': attribute type 1 has an invalid length. [ 228.625077][T11308] bond6: (slave wireguard5): The slave device specified does not support setting the MAC address [ 228.635880][T11308] bond6: (slave wireguard5): Setting fail_over_mac to active for active-backup mode [ 228.648523][T11308] bond6: (slave wireguard5): making interface the new active one [ 228.657188][T11308] bond6: (slave wireguard5): Enslaving as an active interface with an up link [ 228.706046][T11273] delete_channel: no stack [ 229.257819][T11334] xt_CT: No such helper "pptp" [ 229.318924][T11341] netlink: 'syz.8.1734': attribute type 1 has an invalid length. [ 229.380653][T11344] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 229.397626][T11341] bond4: (slave wireguard2): The slave device specified does not support setting the MAC address [ 229.410447][T11341] bond4: (slave wireguard2): Setting fail_over_mac to active for active-backup mode [ 229.429684][T11341] bond4: (slave wireguard2): making interface the new active one [ 229.453908][T11341] bond4: (slave wireguard2): Enslaving as an active interface with an up link [ 229.462942][T11348] netlink: 'syz.7.1736': attribute type 2 has an invalid length. [ 229.516426][T11351] netlink: 'syz.6.1737': attribute type 1 has an invalid length. [ 229.732887][T11357] syzkaller0: refused to change device tx_queue_len [ 229.861003][T11369] 8021q: adding VLAN 0 to HW filter on device ipvlan0 [ 229.899986][ T82] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 229.908145][ T82] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 230.376889][T11401] sctp: [Deprecated]: syz.6.1757 (pid 11401) Use of int in maxseg socket option. [ 230.376889][T11401] Use struct sctp_assoc_value instead [ 230.609343][ T919] hid-generic 0005:0C45:0058.000E: item fetching failed at offset 0/1 [ 230.635023][ T919] hid-generic 0005:0C45:0058.000E: probe with driver hid-generic failed with error -22 [ 230.909774][T11428] team0: entered promiscuous mode [ 230.915354][T11428] team_slave_0: entered promiscuous mode [ 230.921294][T11428] team_slave_1: entered promiscuous mode [ 230.933694][T11428] batadv_slave_1: entered promiscuous mode [ 230.940340][T11428] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 230.953061][T11428] Cannot create hsr debugfs directory [ 231.003825][ T919] IPVS: starting estimator thread 0... [ 231.015650][T11434] __nla_validate_parse: 14 callbacks suppressed [ 231.015668][T11434] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1770'. [ 231.155401][T11435] IPVS: using max 27 ests per chain, 64800 per kthread [ 231.266557][T11441] lo speed is unknown, defaulting to 1000 [ 231.289535][T11453] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1774'. [ 231.353565][T11453] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1774'. [ 231.635446][T11469] siw: device registration error -23 [ 231.704437][T11476] siw: device registration error -23 [ 231.842116][T11483] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1783'. [ 231.971495][T11441] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1771'. [ 231.997211][T11441] netlink: 'syz.6.1771': attribute type 1 has an invalid length. [ 232.011051][T11492] bridge_slave_1: left allmulticast mode [ 232.023451][T11441] netlink: 'syz.6.1771': attribute type 2 has an invalid length. [ 232.043931][T11441] netlink: 'syz.6.1771': attribute type 1 has an invalid length. [ 232.045147][T11492] bridge_slave_1: left promiscuous mode [ 232.089091][T11492] bridge0: port 2(bridge_slave_1) entered disabled state [ 232.134795][T11492] team0: Port device team_slave_0 removed [ 232.156439][T11492] team0: Port device team_slave_1 removed [ 232.175755][T11492] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 232.183906][T11492] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 232.199986][T11492] bond1: (slave wireguard0): Releasing backup interface [ 232.218747][T11492] bond2: (slave wireguard1): Releasing backup interface [ 232.246109][T11492] bond0: (slave wireguard2): Releasing backup interface [ 232.264181][T11492] bond3: (slave wireguard3): Releasing backup interface [ 232.280414][T11492] bond5: (slave wireguard4): Releasing backup interface [ 232.307168][T11492] bond6: (slave wireguard5): Releasing backup interface [ 232.354798][T11451] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 232.645859][T11513] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1791'. [ 232.678203][T11513] netlink: 48 bytes leftover after parsing attributes in process `syz.6.1791'. [ 232.679753][T11515] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1793'. [ 232.718968][T11515] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1793'. [ 232.866026][T11523] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1794'. [ 233.295737][T11558] FAULT_INJECTION: forcing a failure. [ 233.295737][T11558] name failslab, interval 1, probability 0, space 0, times 0 [ 233.338305][T11558] CPU: 1 UID: 0 PID: 11558 Comm: syz.8.1804 Not tainted 6.15.0-rc2-syzkaller-00282-gd861a5dbb960 #0 PREEMPT(full) [ 233.338333][T11558] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 233.338345][T11558] Call Trace: [ 233.338352][T11558] [ 233.338366][T11558] dump_stack_lvl+0x241/0x360 [ 233.338400][T11558] ? __pfx_dump_stack_lvl+0x10/0x10 [ 233.338426][T11558] ? __pfx__printk+0x10/0x10 [ 233.338462][T11558] should_fail_ex+0x424/0x570 [ 233.338495][T11558] should_failslab+0xac/0x100 [ 233.338515][T11558] kmem_cache_alloc_node_noprof+0x7d/0x3b0 [ 233.338536][T11558] ? __alloc_skb+0x1c2/0x480 [ 233.338565][T11558] __alloc_skb+0x1c2/0x480 [ 233.338588][T11558] ? rtnl_prop_list_size+0x1e/0x1e0 [ 233.338614][T11558] ? __pfx___alloc_skb+0x10/0x10 [ 233.338640][T11558] ? if_nlmsg_size+0x5b9/0x820 [ 233.338659][T11558] ? if_nlmsg_size+0x5b9/0x820 [ 233.338682][T11558] rtmsg_ifinfo_build_skb+0x84/0x260 [ 233.338711][T11558] rtmsg_ifinfo+0x91/0x1b0 [ 233.338736][T11558] __dev_notify_flags+0xf9/0x410 [ 233.338768][T11558] ? __pfx___dev_notify_flags+0x10/0x10 [ 233.338791][T11558] ? __dev_change_flags+0x517/0x700 [ 233.338822][T11558] ? __pfx___dev_change_flags+0x10/0x10 [ 233.338848][T11558] ? dev_ioctl+0x7fd/0x1260 [ 233.338869][T11558] ? __pfx___mutex_lock+0x10/0x10 [ 233.338888][T11558] ? full_name_hash+0x93/0xe0 [ 233.338910][T11558] netif_change_flags+0xf0/0x1a0 [ 233.338941][T11558] dev_change_flags+0x146/0x270 [ 233.338972][T11558] dev_ioctl+0x80f/0x1260 [ 233.338998][T11558] sock_do_ioctl+0x22f/0x400 [ 233.339021][T11558] ? __pfx_sock_do_ioctl+0x10/0x10 [ 233.339046][T11558] ? __lock_acquire+0xad5/0xd80 [ 233.339082][T11558] sock_ioctl+0x644/0x900 [ 233.339103][T11558] ? __pfx_sock_ioctl+0x10/0x10 [ 233.339121][T11558] ? __fget_files+0x2a/0x420 [ 233.339138][T11558] ? __fget_files+0x2a/0x420 [ 233.339158][T11558] ? __fget_files+0x2a/0x420 [ 233.339179][T11558] ? __pfx_sock_ioctl+0x10/0x10 [ 233.339200][T11558] __se_sys_ioctl+0xf1/0x160 [ 233.339226][T11558] do_syscall_64+0xf3/0x210 [ 233.339245][T11558] ? clear_bhb_loop+0x45/0xa0 [ 233.339267][T11558] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.339284][T11558] RIP: 0033:0x7fbc66d8e969 [ 233.339300][T11558] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 233.339314][T11558] RSP: 002b:00007fbc67b69038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 233.339337][T11558] RAX: ffffffffffffffda RBX: 00007fbc66fb6080 RCX: 00007fbc66d8e969 [ 233.339350][T11558] RDX: 0000200000002280 RSI: 0000000000008914 RDI: 0000000000000007 [ 233.339366][T11558] RBP: 00007fbc67b69090 R08: 0000000000000000 R09: 0000000000000000 [ 233.339378][T11558] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 233.339388][T11558] R13: 0000000000000000 R14: 00007fbc66fb6080 R15: 00007ffc0b4d39c8 [ 233.339416][T11558] [ 233.702318][T11566] netlink: 'syz.7.1809': attribute type 1 has an invalid length. [ 233.770613][T11566] 8021q: adding VLAN 0 to HW filter on device bond1 [ 233.828995][T11566] 8021q: adding VLAN 0 to HW filter on device bond1 [ 233.839056][T11574] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 233.868171][T11566] bond1: (slave wireguard0): The slave device specified does not support setting the MAC address [ 233.902120][T11566] bond1: (slave wireguard0): Error -95 calling set_mac_address [ 234.228855][T11591] netlink: 'syz.7.1818': attribute type 10 has an invalid length. [ 234.293033][T11591] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 234.577587][T11603] syz_tun: entered promiscuous mode [ 234.599138][T11603] syz_tun: left promiscuous mode [ 234.622285][T11609] dccp_v4_rcv: dropped packet with invalid checksum [ 235.615360][T11663] "syz.7.1841" (11663) uses obsolete ecb(arc4) skcipher [ 235.972615][T11688] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.054467][T11691] __nla_validate_parse: 15 callbacks suppressed [ 236.054487][T11691] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1851'. [ 236.101614][T11691] bridge0: port 1(bridge_slave_0) entered disabled state [ 236.190404][T11691] bridge_slave_0 (unregistering): left allmulticast mode [ 236.202775][T11691] bridge_slave_0 (unregistering): left promiscuous mode [ 236.211688][T11691] bridge0: port 1(bridge_slave_0) entered disabled state [ 236.260249][T11688] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.290010][T11712] dvmrp0: entered allmulticast mode [ 236.439152][T11688] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.638491][T11688] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.795121][T11688] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.838102][T11688] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.899585][T11688] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.968321][T11688] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.654006][T11793] bond2: entered promiscuous mode [ 237.659290][T11793] bond2: entered allmulticast mode [ 237.665140][T11793] 8021q: adding VLAN 0 to HW filter on device bond2 [ 238.022062][T11822] netlink: 'syz.7.1891': attribute type 1 has an invalid length. [ 238.043847][T11822] netlink: 'syz.7.1891': attribute type 3 has an invalid length. [ 238.051608][T11822] netlink: 'syz.7.1891': attribute type 2 has an invalid length. [ 238.093421][T11822] netlink: 212 bytes leftover after parsing attributes in process `syz.7.1891'. [ 238.137285][T11827] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1894'. [ 238.259377][T11834] netlink: 'syz.6.1895': attribute type 2 has an invalid length. [ 238.276109][T11834] netlink: 1184 bytes leftover after parsing attributes in process `syz.6.1895'. [ 238.348676][T11840] team_slave_0 (unregistering): left promiscuous mode [ 238.371181][T11840] team0: Port device team_slave_0 removed [ 238.398758][T11835] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1896'. [ 238.416147][T11844] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 239.061383][T11850] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 239.191600][T11854] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1902'. [ 239.202089][T11854] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1902'. [ 239.214606][T11854] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1902'. [ 239.377671][T11863] openvswitch: netlink: Missing key (keys=40, expected=100) [ 239.389643][T11863] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1906'. [ 239.639315][T11881] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1910'. [ 239.665082][T11881] netlink: 'syz.1.1910': attribute type 1 has an invalid length. [ 239.704256][T11881] 8021q: adding VLAN 0 to HW filter on device bond7 [ 239.706592][T11883] netlink: 'syz.8.1912': attribute type 1 has an invalid length. [ 239.726220][T11876] ip6erspan0: entered promiscuous mode [ 239.741345][T11876] bond7: (slave ip6erspan0): making interface the new active one [ 239.752313][T11876] bond7: (slave ip6erspan0): Enslaving as an active interface with an up link [ 239.798735][T11876] vlan0: entered allmulticast mode [ 239.806241][T11876] bond7: entered allmulticast mode [ 239.811417][T11876] ip6erspan0: entered allmulticast mode [ 239.819478][T11876] bond7: (slave vlan0): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 239.907969][T11883] bond5: (slave wireguard3): The slave device specified does not support setting the MAC address [ 239.920237][T11883] bond5: (slave wireguard3): Setting fail_over_mac to active for active-backup mode [ 239.953536][T11883] bond5: (slave wireguard3): making interface the new active one [ 239.971285][T11883] bond5: (slave wireguard3): Enslaving as an active interface with an up link [ 240.051263][T11896] pim6reg: entered allmulticast mode [ 240.524837][T11922] veth0_virt_wifi: entered promiscuous mode [ 240.532184][T11923] netlink: 'syz.1.1921': attribute type 33 has an invalid length. [ 240.545352][T11922] bridge0: port 1(veth1_to_bridge) entered blocking state [ 240.552946][T11922] bridge0: port 1(veth1_to_bridge) entered disabled state [ 240.560920][T11922] veth1_to_bridge: entered allmulticast mode [ 240.571610][T11922] veth1_to_bridge: entered promiscuous mode [ 240.581922][T11922] bridge0: port 1(veth1_to_bridge) entered blocking state [ 240.589522][T11922] bridge0: port 1(veth1_to_bridge) entered forwarding state [ 240.661549][T11928] x_tables: duplicate underflow at hook 3 [ 240.855856][T11942] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 240.958162][T11948] openvswitch: netlink: Key 22 has unexpected len 2 expected 4 [ 241.258022][T11960] __nla_validate_parse: 3 callbacks suppressed [ 241.258045][T11960] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1929'. [ 241.586589][T11980] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 241.651058][T11985] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 241.685030][T11985] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.714855][T11989] netlink: 'syz.8.1937': attribute type 1 has an invalid length. [ 241.732979][T11985] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 241.780193][T11989] SET target dimension over the limit! [ 241.793324][T11985] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.828329][T11985] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 241.839678][T11985] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.857162][T11998] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1938'. [ 241.863774][T11985] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 241.879056][T11985] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.890786][T11985] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 241.910552][T11985] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.935111][T11997] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1940'. [ 242.147249][T12012] netlink: 14 bytes leftover after parsing attributes in process `syz.6.1942'. [ 242.282779][T12000] 8021q: VLANs not supported on syzkaller1 [ 242.302870][T12005] syzkaller1: entered promiscuous mode [ 242.321271][T12005] syzkaller1: entered allmulticast mode [ 242.636634][ T10] hid-generic 0005:10CF:5540.000F: item fetching failed at offset 0/2 [ 242.644633][T12037] netlink: 36 bytes leftover after parsing attributes in process `syz.7.1948'. [ 242.647131][ T10] hid-generic 0005:10CF:5540.000F: probe with driver hid-generic failed with error -22 [ 242.715478][T12045] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 243.341960][T12084] netlink: 'syz.6.1961': attribute type 1 has an invalid length. [ 243.383381][T12084] netlink: 'syz.6.1961': attribute type 2 has an invalid length. [ 243.402647][T12089] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1962'. [ 243.413693][T12084] netlink: 'syz.6.1961': attribute type 1 has an invalid length. [ 243.532606][T12091] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 243.607644][T12091] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 243.626533][T12091] batadv_slave_1 (unregistering): left promiscuous mode [ 243.698881][T12104] netlink: 'syz.5.1963': attribute type 10 has an invalid length. [ 243.752193][T12104] bond0: (slave ÿ): Enslaving as an active interface with an up link [ 243.911833][T12109] IPVS: ip_vs_edit_dest(): server weight less than zero [ 244.187666][T12124] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1974'. [ 244.321570][T12135] netlink: 'syz.8.1973': attribute type 1 has an invalid length. [ 244.360976][T12135] netlink: 'syz.8.1973': attribute type 10 has an invalid length. [ 244.387857][T12135] netlink: 192 bytes leftover after parsing attributes in process `syz.8.1973'. [ 244.861231][T12168] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1986'. [ 245.020528][T12181] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1990'. [ 245.332045][T12204] veth0: entered promiscuous mode [ 245.341217][T12201] veth0: left promiscuous mode [ 245.508914][T12217] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 245.667455][T12232] validate_nla: 2 callbacks suppressed [ 245.667474][T12232] netlink: 'syz.5.2007': attribute type 12 has an invalid length. [ 245.802224][T12240] netlink: 'syz.6.2008': attribute type 39 has an invalid length. [ 246.312209][T12259] __nla_validate_parse: 4 callbacks suppressed [ 246.312230][T12259] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2015'. [ 246.428138][T12272] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2013'. [ 246.513133][T12271] netlink: 160 bytes leftover after parsing attributes in process `syz.6.2017'. [ 246.954658][T12295] netlink: 'syz.8.2028': attribute type 4 has an invalid length. [ 246.988920][T12295] netlink: 17 bytes leftover after parsing attributes in process `syz.8.2028'. [ 246.992730][T12298] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2029'. [ 247.067937][T12303] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2030'. [ 247.098408][T12311] netlink: 'syz.5.2031': attribute type 1 has an invalid length. [ 247.107455][T12303] netlink: 'syz.7.2030': attribute type 1 has an invalid length. [ 247.125420][T12303] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2030'. [ 247.148470][T12303] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2030'. [ 247.465123][T12338] netlink: 'syz.1.2038': attribute type 2 has an invalid length. [ 247.513908][T12338] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2038'. [ 247.685537][T12347] bridge0: port 2(bridge_slave_1) entered disabled state [ 247.801889][T12360] x_tables: duplicate underflow at hook 1 [ 247.802082][T12347] veth0_to_bridge: left promiscuous mode [ 247.859309][T12347] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 247.878629][T12347] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 248.028898][T12347] netdevsim netdevsim5 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.037758][T12347] netdevsim netdevsim5 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.046358][T12347] netdevsim netdevsim5 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.055244][T12347] netdevsim netdevsim5 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.608806][T12401] bond0: entered promiscuous mode [ 248.621314][T12401] bond_slave_0: entered promiscuous mode [ 248.631155][T12401] bond_slave_1: entered promiscuous mode [ 248.642216][T12401] mac80211_hwsim hwsim17 wlan1: entered promiscuous mode [ 248.660611][T12401] batadv0: entered promiscuous mode [ 248.837898][T12401] 8021q: adding VLAN 0 to HW filter on device hsr2 [ 248.875500][T12401] bond0: left promiscuous mode [ 248.884659][T12401] bond_slave_0: left promiscuous mode [ 248.899085][T12401] bond_slave_1: left promiscuous mode [ 248.905819][T12401] mac80211_hwsim hwsim17 wlan1: left promiscuous mode [ 248.915531][T12401] batadv0: left promiscuous mode [ 249.018433][T12419] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2060'. [ 249.252467][T12432] netlink: 'syz.6.2065': attribute type 21 has an invalid length. [ 249.751552][T12461] lo speed is unknown, defaulting to 1000 [ 250.093542][T12475] netlink: 'syz.8.2079': attribute type 1 has an invalid length. [ 250.157560][T12470] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 250.282854][T12483] veth0: entered promiscuous mode [ 250.304662][T12483] veth0: left promiscuous mode [ 251.348644][T12536] __nla_validate_parse: 10 callbacks suppressed [ 251.348664][T12536] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2106'. [ 251.529166][T12533] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 251.697914][T12549] ip6t_srh: unknown srh match flags 4001 [ 251.704993][T12549] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2112'. [ 251.818397][T12554] netlink: 80 bytes leftover after parsing attributes in process `syz.1.2114'. [ 252.029619][T12569] unsupported nla_type 29335 [ 252.071159][T12569] 8021q: adding VLAN 0 to HW filter on device bond0 [ 252.117238][T12569] bond0: entered promiscuous mode [ 252.124826][T12569] bond_slave_0: entered promiscuous mode [ 252.154475][T12569] bond_slave_1: entered promiscuous mode [ 252.160272][T12569] mac80211_hwsim hwsim13 wlan1: entered promiscuous mode [ 252.199657][T12569] team0: Port device bond0 added [ 252.219387][T12576] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2121'. [ 252.253171][T12575] sctp: [Deprecated]: syz.1.2123 (pid 12575) Use of struct sctp_assoc_value in delayed_ack socket option. [ 252.253171][T12575] Use struct sctp_sack_info instead [ 252.394835][T12583] netlink: 'syz.6.2125': attribute type 3 has an invalid length. [ 252.421172][T12583] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2125'. [ 252.642178][T12599] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2130'. [ 252.806192][T12598] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 252.835287][T12607] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2134'. [ 252.995338][T12615] netlink: 'syz.7.2139': attribute type 7 has an invalid length. [ 253.149498][T12623] wireguard: wg1: Could not create IPv4 socket [ 253.488420][T12641] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2148'. [ 253.600313][T12654] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 254.099999][T12694] x_tables: duplicate underflow at hook 1 [ 254.222621][T12705] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2167'. [ 254.548639][T12724] netlink: 10 bytes leftover after parsing attributes in process `syz.6.2175'. [ 255.178945][T12771] bridge1: entered promiscuous mode [ 255.193422][T12771] bridge1: entered allmulticast mode [ 255.660166][T12796] netlink: 'syz.6.2196': attribute type 29 has an invalid length. [ 255.702415][T12806] netlink: 'syz.6.2196': attribute type 29 has an invalid length. [ 256.025656][T12824] netlink: 'syz.8.2207': attribute type 12 has an invalid length. [ 256.083342][T12831] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 256.426546][T12862] __nla_validate_parse: 8 callbacks suppressed [ 256.426565][T12862] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2216'. [ 256.542092][T12867] netlink: 'syz.8.2220': attribute type 1 has an invalid length. [ 256.556462][T12867] netlink: 244 bytes leftover after parsing attributes in process `syz.8.2220'. [ 256.632609][T12866] veth5: entered allmulticast mode [ 256.714285][T12870] netlink: 4552 bytes leftover after parsing attributes in process `syz.5.2221'. [ 256.759692][T12870] netlink: 4552 bytes leftover after parsing attributes in process `syz.5.2221'. [ 257.001108][T12858] infiniband syz0: set active [ 257.007203][T12858] infiniband syz0: added bond_slave_1 [ 257.014821][T12858] syz0: rxe_create_cq: returned err = -12 [ 257.020851][T12858] infiniband syz0: Couldn't create ib_mad CQ [ 257.027400][T12858] infiniband syz0: Couldn't open port 1 [ 257.107704][T12885] lo speed is unknown, defaulting to 1000 [ 257.128662][T12890] netlink: 40 bytes leftover after parsing attributes in process `syz.8.2227'. [ 257.130575][T12858] RDS/IB: syz0: added [ 257.159580][T12858] smc: adding ib device syz0 with port count 1 [ 257.184986][T12858] smc: ib device syz0 port 1 has pnetid [ 257.441640][T12906] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2232'. [ 257.763946][T12918] netlink: 810 bytes leftover after parsing attributes in process `syz.8.2236'. [ 258.315132][T12943] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2244'. [ 258.834421][T12971] netlink: 'syz.8.2252': attribute type 10 has an invalid length. [ 258.901637][T12971] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 258.939773][T12976] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2253'. [ 259.080609][T12979] netlink: 256 bytes leftover after parsing attributes in process `syz.8.2255'. [ 259.710056][T13009] nbd: couldn't find device at index 65536 [ 259.753575][T13009] netlink: 'syz.5.2264': attribute type 11 has an invalid length. [ 259.761509][T13009] netlink: 'syz.5.2264': attribute type 11 has an invalid length. [ 259.981309][T13022] dccp_invalid_packet: P.CsCov 4 exceeds packet length 28 [ 260.550683][T13044] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 261.611329][T13105] __nla_validate_parse: 12 callbacks suppressed [ 261.611350][T13105] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2299'. [ 261.981109][T13131] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2304'. [ 262.022876][T13124] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 262.171156][T13134] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 262.284017][T13146] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2311'. [ 262.381800][T13151] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2313'. [ 262.467001][T13154] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2315'. [ 262.621426][T13164] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2318'. [ 262.781976][T13170] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2320'. [ 262.791692][T13170] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2320'. [ 262.840981][T13172] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2322'. [ 262.922672][T13177] skbuff: bad partial csum: csum=65506/2 headroom=178 headlen=65526 [ 263.181374][T13189] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 263.263250][T13197] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2330'. [ 263.635874][T13223] xt_policy: output policy not valid in PREROUTING and INPUT [ 263.877612][T13235] veth1_macvtap: left promiscuous mode [ 263.898113][T13235] netlink: 'syz.8.2344': attribute type 4 has an invalid length. [ 264.162978][T13255] erspan0: mtu less than device minimum [ 264.402368][T13259] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 264.427430][T13276] C: renamed from lo (while UP) [ 264.441929][T13276] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 264.791975][T13294] netlink: 'syz.8.2366': attribute type 10 has an invalid length. [ 264.801100][T13294] veth0_macvtap: left promiscuous mode [ 265.053548][T13307] netlink: 'syz.8.2370': attribute type 1 has an invalid length. [ 265.076222][T13307] netlink: 'syz.8.2370': attribute type 10 has an invalid length. [ 265.533107][T13333] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 265.686946][T13356] netlink: 'syz.5.2388': attribute type 75 has an invalid length. [ 265.749943][T13358] wlan1: mtu less than device minimum [ 265.768073][T13358] team0: Device bond0 failed to change mtu [ 265.773473][T13364] netlink: 'syz.7.2391': attribute type 12 has an invalid length. [ 265.788200][T13364] netlink: 'syz.7.2391': attribute type 29 has an invalid length. [ 266.069626][T13374] xt_CT: No such helper "snmp_trap" [ 266.078207][ T66] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 266.089879][ T66] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.335747][ T66] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 266.368750][ T66] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.516083][ T66] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 266.546360][ T66] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.701717][T13412] tipc: Enabling not permitted [ 266.720710][T13412] tipc: Enabling of bearer rejected, failed to enable media [ 266.791838][ T66] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 266.816151][ T66] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.951002][T13424] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 267.041211][T13435] netlink: zone id is out of range [ 267.154265][T13440] sctp: [Deprecated]: syz.7.2414 (pid 13440) Use of struct sctp_assoc_value in delayed_ack socket option. [ 267.154265][T13440] Use struct sctp_sack_info instead [ 267.177733][ T66] bridge_slave_1: left allmulticast mode [ 267.186907][ T66] bridge_slave_1: left promiscuous mode [ 267.192675][ T66] bridge0: port 2(bridge_slave_1) entered disabled state [ 267.201286][T13440] sctp: [Deprecated]: syz.7.2414 (pid 13440) Use of struct sctp_assoc_value in delayed_ack socket option. [ 267.201286][T13440] Use struct sctp_sack_info instead [ 267.421230][ T66] bond4 (unregistering): (slave ip6erspan0): Releasing active interface [ 267.434888][ T66] ip6erspan0 (unregistering): left allmulticast mode [ 267.836040][ T66] bond0 (unregistering): Released all slaves [ 267.851644][ T66] bond1 (unregistering): (slave wireguard0): Releasing backup interface [ 267.861899][ T66] bond1 (unregistering): Released all slaves [ 267.893738][ T66] bond2 (unregistering): (slave wireguard1): Releasing backup interface [ 267.912409][ T66] bond2 (unregistering): Released all slaves [ 267.947141][ T66] bond3 (unregistering): (slave wireguard2): Releasing backup interface [ 267.957940][ T66] bond3 (unregistering): Released all slaves [ 268.056464][ T66] bond4 (unregistering): Released all slaves [ 268.072503][ T66] bond5 (unregistering): (slave wireguard3): Releasing backup interface [ 268.082016][ T66] bond5 (unregistering): Released all slaves [ 268.215563][ T66] tipc: Disabling bearer [ 268.224751][ T66] tipc: Left network mode [ 268.336197][T13484] __nla_validate_parse: 24 callbacks suppressed [ 268.336218][T13484] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2425'. [ 268.620954][T13504] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2431'. [ 268.648225][T13498] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 268.731295][T13508] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2433'. [ 269.107635][T13523] netlink: 48 bytes leftover after parsing attributes in process `syz.6.2437'. [ 269.532689][T13557] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2444'. [ 269.558767][ T66] team0: left promiscuous mode [ 269.565433][ T66] team_slave_0: left promiscuous mode [ 269.571055][ T66] team_slave_1: left promiscuous mode [ 269.609450][ T66] hsr_slave_0: left promiscuous mode [ 269.616980][ T66] hsr_slave_1: left promiscuous mode [ 269.622900][ T66] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 269.630732][ T66] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 269.650766][ T66] veth1_vlan: left promiscuous mode [ 269.656600][ T66] veth0_vlan: left promiscuous mode [ 270.014736][ T66] team0 (unregistering): Port device team_slave_1 removed [ 270.054850][ T66] team0 (unregistering): Port device team_slave_0 removed [ 270.189209][T13564] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2447'. [ 270.332750][T13564] team0: Device is already in use. [ 270.441534][T13566] netlink: 280 bytes leftover after parsing attributes in process `syz.8.2449'. [ 270.546367][T13575] tipc: Enabling of bearer rejected, failed to enable media [ 270.593296][T13569] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 270.881002][T13591] netlink: 104 bytes leftover after parsing attributes in process `syz.5.2457'. [ 271.265493][ T66] IPVS: stop unused estimator thread 0... [ 271.684903][T13621] nbd1: detected capacity change from 0 to 4096 [ 271.717574][ T5853] block nbd1: Receive control failed (result -32) [ 271.991348][T13636] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 272.304059][T13645] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2473'. [ 272.713600][T13668] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input10 [ 272.866990][T13671] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.880386][T13679] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2483'. [ 272.952384][T13681] 8021q: adding VLAN 0 to HW filter on device bond1 [ 272.977842][T13681] bond0: (slave bond1): Enslaving as an active interface with an up link [ 273.027536][T13671] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.041458][T13689] netlink: 'syz.7.2485': attribute type 10 has an invalid length. [ 273.151735][T13671] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.232425][T13695] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 273.247782][T13671] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.295940][T13701] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20000 [ 273.409979][T13709] netlink: 'syz.6.2493': attribute type 1 has an invalid length. [ 273.491139][T13714] __nla_validate_parse: 4 callbacks suppressed [ 273.491158][T13714] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2493'. [ 273.511905][T13708] xt_CT: No such helper "pptp" [ 273.521566][T13709] bond3: entered promiscuous mode [ 273.526915][T13709] bond3: entered allmulticast mode [ 273.549247][T13671] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.575477][T13716] syzkaller1: entered promiscuous mode [ 273.593928][T13716] syzkaller1: entered allmulticast mode [ 273.604742][T13713] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 40 [ 273.611606][T13671] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.630125][T13671] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.639513][T13718] x_tables: duplicate underflow at hook 1 [ 273.648771][T13671] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.913982][T13731] netlink: 'syz.6.2500': attribute type 1 has an invalid length. [ 273.944977][T13731] netlink: 244 bytes leftover after parsing attributes in process `syz.6.2500'. [ 274.110792][T13746] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2503'. [ 274.147391][T13754] netlink: 'syz.1.2503': attribute type 39 has an invalid length. [ 274.571156][T13777] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 274.621706][T13781] hsr0: entered promiscuous mode [ 274.644108][T13781] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2511'. [ 274.669804][T13781] hsr_slave_0: left promiscuous mode [ 274.682162][T13781] hsr_slave_1: left promiscuous mode [ 274.726709][T13781] hsr0 (unregistering): left promiscuous mode [ 274.765771][ T55] Bluetooth: hci4: command 0x0405 tx timeout [ 274.801417][T13784] netlink: 'syz.5.2514': attribute type 2 has an invalid length. [ 274.821840][T13791] netlink: 'syz.6.2516': attribute type 2 has an invalid length. [ 274.846938][T13791] tap0: tun_chr_ioctl cmd 1074025678 [ 274.852520][T13791] tap0: group set to 0 [ 275.167494][T13807] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2523'. [ 275.257705][T13810] netlink: 232 bytes leftover after parsing attributes in process `syz.1.2525'. [ 275.285011][T13810] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2525'. [ 275.464475][T13820] netlink: 'syz.7.2529': attribute type 1 has an invalid length. [ 275.476355][T13820] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 275.483673][T13820] IPv6: NLM_F_CREATE should be set when creating new route [ 275.622575][T13829] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 275.710276][T13832] netlink: 'syz.7.2533': attribute type 2 has an invalid length. [ 275.718741][T13832] netlink: 244 bytes leftover after parsing attributes in process `syz.7.2533'. [ 276.060808][T13846] netlink: 'syz.7.2537': attribute type 30 has an invalid length. [ 276.347109][T13856] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2540'. [ 276.748675][T13879] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 276.847326][T13892] netlink: 64 bytes leftover after parsing attributes in process `syz.5.2551'. [ 276.861150][T13892] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 276.877252][T13892] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 277.409122][T13920] netlink: 'syz.6.2564': attribute type 1 has an invalid length. [ 277.511151][T13929] bond4: (slave wireguard1): The slave device specified does not support setting the MAC address [ 277.523936][T13929] bond4: (slave wireguard1): Setting fail_over_mac to active for active-backup mode [ 277.575144][T13929] bond4: (slave wireguard1): making interface the new active one [ 277.586216][T13929] bond4: (slave wireguard1): Enslaving as an active interface with an up link [ 277.609547][T13923] netdevsim netdevsim7 netdevsim0: entered promiscuous mode [ 277.668275][T13936] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 277.702199][T13936] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 277.958714][T13959] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 278.164181][T13973] netlink: 'syz.6.2578': attribute type 1 has an invalid length. [ 278.277185][T13973] bond5: (slave wireguard2): The slave device specified does not support setting the MAC address [ 278.306411][T13973] bond5: (slave wireguard2): Setting fail_over_mac to active for active-backup mode [ 278.322873][T13973] bond5: (slave wireguard2): making interface the new active one [ 278.336396][T13973] bond5: (slave wireguard2): Enslaving as an active interface with an up link [ 278.630846][T13994] bridge0: port 2(bridge_slave_1) entered disabled state [ 278.646961][T14006] __nla_validate_parse: 3 callbacks suppressed [ 278.646980][T14006] netlink: 36 bytes leftover after parsing attributes in process `syz.7.2587'. [ 278.958330][T14025] netlink: 'syz.1.2594': attribute type 1 has an invalid length. [ 279.123041][T14036] veth0_to_hsr: entered promiscuous mode [ 279.447192][T14029] veth0_to_hsr: left promiscuous mode [ 279.817097][T14071] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2605'. [ 280.130028][T14089] team0: Device vti0 is of different type [ 280.152779][T14086] netlink: 'syz.7.2609': attribute type 4 has an invalid length. [ 280.174805][T14086] IPVS: length: 157 != 24 [ 280.304815][T14094] netlink: 'syz.7.2613': attribute type 10 has an invalid length. [ 280.327581][T14094] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2613'. [ 280.346665][T14094] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2613'. [ 280.515145][T14104] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 280.525365][T14104] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 280.535256][T14104] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 280.544322][T14104] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 280.586635][T14104] vxlan0: entered promiscuous mode [ 280.595995][T14104] vxlan0: entered allmulticast mode [ 280.729830][T14126] netlink: 248 bytes leftover after parsing attributes in process `syz.6.2624'. [ 280.999773][T14146] xt_ecn: cannot match TCP bits for non-tcp packets [ 281.026195][T14144] netlink: 68 bytes leftover after parsing attributes in process `syz.6.2630'. [ 281.286145][T14162] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2634'. [ 281.392123][T14167] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2638'. [ 281.499032][T14174] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2643'. [ 281.542364][T14177] netlink: 'syz.7.2644': attribute type 1 has an invalid length. [ 281.612012][T14183] bond4: (slave wireguard0): The slave device specified does not support setting the MAC address [ 281.624078][T14183] bond4: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 281.660982][T14183] bond4: (slave wireguard0): making interface the new active one [ 281.688091][T14183] bond4: (slave wireguard0): Enslaving as an active interface with an up link [ 281.706157][T14193] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2646'. [ 281.898238][T14205] xt_CT: You must specify a L4 protocol and not use inversions on it [ 282.461397][T14238] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 282.526222][T14238] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 282.556030][T14238] batadv_slave_1 (unregistering): left promiscuous mode [ 282.948232][T14265] sctp: [Deprecated]: syz.1.2671 (pid 14265) Use of struct sctp_assoc_value in delayed_ack socket option. [ 282.948232][T14265] Use struct sctp_sack_info instead [ 283.187781][T14282] netlink: 'syz.1.2675': attribute type 13 has an invalid length. [ 283.438486][T14297] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 283.448753][T14297] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 283.665750][T14311] netlink: 'syz.5.2687': attribute type 1 has an invalid length. [ 283.841203][T14314] bond2: (slave wireguard0): The slave device specified does not support setting the MAC address [ 283.853271][T14314] bond2: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 283.915000][T14314] bond2: (slave wireguard0): making interface the new active one [ 283.945506][T14314] bond2: (slave wireguard0): Enslaving as an active interface with an up link [ 284.031974][T14326] __nla_validate_parse: 8 callbacks suppressed [ 284.031996][T14326] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2694'. [ 284.051113][T14326] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2694'. [ 284.174193][T14337] netlink: 88 bytes leftover after parsing attributes in process `syz.7.2696'. [ 284.381685][T14347] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2701'. [ 284.417770][T14347] netlink: 4388 bytes leftover after parsing attributes in process `syz.8.2701'. [ 284.471623][T14351] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2702'. [ 284.808279][T14368] netlink: 'syz.7.2707': attribute type 1 has an invalid length. [ 284.947017][ T5931] IPVS: starting estimator thread 0... [ 284.975163][T14375] bond5: (slave wireguard1): The slave device specified does not support setting the MAC address [ 285.004976][T14375] bond5: (slave wireguard1): Setting fail_over_mac to active for active-backup mode [ 285.043120][T14375] bond5: (slave wireguard1): making interface the new active one [ 285.053289][T14381] IPVS: using max 28 ests per chain, 67200 per kthread [ 285.060401][T14375] bond5: (slave wireguard1): Enslaving as an active interface with an up link [ 285.128141][T14395] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2713'. [ 285.139135][T14396] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2713'. [ 285.193839][T14400] FAULT_INJECTION: forcing a failure. [ 285.193839][T14400] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 285.211014][T14400] CPU: 1 UID: 0 PID: 14400 Comm: syz.5.2714 Not tainted 6.15.0-rc2-syzkaller-00282-gd861a5dbb960 #0 PREEMPT(full) [ 285.211044][T14400] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 285.211056][T14400] Call Trace: [ 285.211064][T14400] [ 285.211073][T14400] dump_stack_lvl+0x241/0x360 [ 285.211110][T14400] ? __pfx_dump_stack_lvl+0x10/0x10 [ 285.211140][T14400] ? __pfx__printk+0x10/0x10 [ 285.211182][T14400] should_fail_ex+0x424/0x570 [ 285.211219][T14400] _copy_from_user+0x2d/0xb0 [ 285.211246][T14400] copy_msghdr_from_user+0xb3/0x580 [ 285.211278][T14400] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 285.211301][T14400] ? __fget_files+0x2a/0x420 [ 285.211323][T14400] ? __fget_files+0x2a/0x420 [ 285.211352][T14400] __sys_sendmmsg+0x361/0x7b0 [ 285.211384][T14400] ? __pfx___sys_sendmmsg+0x10/0x10 [ 285.211441][T14400] ? rcu_read_lock_any_held+0xbb/0x160 [ 285.211464][T14400] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 285.211489][T14400] ? vfs_write+0xb29/0xd10 [ 285.211528][T14400] ? ksys_write+0x24e/0x2d0 [ 285.211559][T14400] ? __mutex_unlock_slowpath+0x229/0x800 [ 285.211617][T14400] ? ksys_write+0x275/0x2d0 [ 285.211656][T14400] __x64_sys_sendmmsg+0xa0/0xb0 [ 285.211679][T14400] do_syscall_64+0xf3/0x210 [ 285.211701][T14400] ? clear_bhb_loop+0x45/0xa0 [ 285.211725][T14400] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 285.211745][T14400] RIP: 0033:0x7f87dc38e969 [ 285.211763][T14400] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 285.211780][T14400] RSP: 002b:00007f87dd231038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 285.211803][T14400] RAX: ffffffffffffffda RBX: 00007f87dc5b5fa0 RCX: 00007f87dc38e969 [ 285.211817][T14400] RDX: 0492492492492627 RSI: 00002000000000c0 RDI: 0000000000000004 [ 285.211832][T14400] RBP: 00007f87dd231090 R08: 0000000000000000 R09: 0000000000000000 [ 285.211844][T14400] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 285.211857][T14400] R13: 0000000000000000 R14: 00007f87dc5b5fa0 R15: 00007ffc39682908 [ 285.211888][T14400] [ 286.027286][T14424] netlink: 'syz.6.2723': attribute type 1 has an invalid length. [ 286.156847][T14429] bond6: (slave wireguard3): The slave device specified does not support setting the MAC address [ 286.209388][T14429] bond6: (slave wireguard3): Setting fail_over_mac to active for active-backup mode [ 286.234419][T14429] bond6: (slave wireguard3): making interface the new active one [ 286.242881][T14429] bond6: (slave wireguard3): Enslaving as an active interface with an up link [ 286.259477][T14438] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2727'. [ 286.418256][T14451] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2730'. [ 286.673023][T14465] tipc: Started in network mode [ 286.679574][T14465] tipc: Node identity , cluster identity 4711 [ 286.686180][T14465] tipc: Failed to set node id, please configure manually [ 286.694054][T14465] tipc: Enabling of bearer rejected, failed to enable media [ 286.912756][T14476] netlink: 'syz.1.2741': attribute type 1 has an invalid length. [ 286.984168][T14481] netlink: 'syz.8.2743': attribute type 13 has an invalid length. [ 287.017907][T14481] netlink: 'syz.8.2743': attribute type 58 has an invalid length. [ 287.074577][T14484] bond10: (slave wireguard6): The slave device specified does not support setting the MAC address [ 287.115065][T14484] bond10: (slave wireguard6): Setting fail_over_mac to active for active-backup mode [ 287.155920][T14484] bond10: (slave wireguard6): making interface the new active one [ 287.184048][T14484] bond10: (slave wireguard6): Enslaving as an active interface with an up link [ 287.761489][T14533] FAULT_INJECTION: forcing a failure. [ 287.761489][T14533] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 287.781954][T14532] netlink: 'syz.6.2761': attribute type 1 has an invalid length. [ 287.791894][T14517] syzkaller0: entered promiscuous mode [ 287.798431][T14533] CPU: 0 UID: 0 PID: 14533 Comm: syz.8.2760 Not tainted 6.15.0-rc2-syzkaller-00282-gd861a5dbb960 #0 PREEMPT(full) [ 287.798458][T14533] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 287.798470][T14533] Call Trace: [ 287.798478][T14533] [ 287.798485][T14533] dump_stack_lvl+0x241/0x360 [ 287.798514][T14533] ? __pfx_dump_stack_lvl+0x10/0x10 [ 287.798536][T14533] ? __pfx__printk+0x10/0x10 [ 287.798567][T14533] should_fail_ex+0x424/0x570 [ 287.798595][T14533] _copy_from_iter+0x211/0x1c70 [ 287.798618][T14533] ? __build_skb_around+0x247/0x3d0 [ 287.798644][T14533] ? __alloc_skb+0x298/0x480 [ 287.798664][T14533] ? __pfx__copy_from_iter+0x10/0x10 [ 287.798684][T14533] ? __pfx___alloc_skb+0x10/0x10 [ 287.798715][T14533] ? skb_put+0x114/0x1f0 [ 287.798739][T14533] netlink_sendmsg+0x73c/0xcd0 [ 287.798769][T14533] ? __pfx_netlink_sendmsg+0x10/0x10 [ 287.798792][T14533] ? aa_sock_msg_perm+0x91/0x160 [ 287.798815][T14533] ? __pfx_netlink_sendmsg+0x10/0x10 [ 287.798833][T14533] __sock_sendmsg+0x221/0x270 [ 287.798854][T14533] ____sys_sendmsg+0x523/0x860 [ 287.798875][T14533] ? __pfx_____sys_sendmsg+0x10/0x10 [ 287.798888][T14533] ? __fget_files+0x2a/0x420 [ 287.798905][T14533] ? __fget_files+0x2a/0x420 [ 287.798926][T14533] __sys_sendmmsg+0x3a0/0x7b0 [ 287.798949][T14533] ? __pfx___sys_sendmmsg+0x10/0x10 [ 287.798989][T14533] ? rcu_read_lock_any_held+0xbb/0x160 [ 287.799007][T14533] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 287.799025][T14533] ? vfs_write+0xb29/0xd10 [ 287.799053][T14533] ? ksys_write+0x24e/0x2d0 [ 287.799077][T14533] ? __mutex_unlock_slowpath+0x229/0x800 [ 287.799115][T14533] ? ksys_write+0x275/0x2d0 [ 287.799144][T14533] __x64_sys_sendmmsg+0xa0/0xb0 [ 287.799160][T14533] do_syscall_64+0xf3/0x210 [ 287.799177][T14533] ? clear_bhb_loop+0x45/0xa0 [ 287.799195][T14533] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 287.799210][T14533] RIP: 0033:0x7fbc66d8e969 [ 287.799222][T14533] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 287.799236][T14533] RSP: 002b:00007fbc67b8a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 287.799253][T14533] RAX: ffffffffffffffda RBX: 00007fbc66fb5fa0 RCX: 00007fbc66d8e969 [ 287.799264][T14533] RDX: 0492492492492627 RSI: 00002000000000c0 RDI: 0000000000000004 [ 287.799274][T14533] RBP: 00007fbc67b8a090 R08: 0000000000000000 R09: 0000000000000000 [ 287.799284][T14533] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 287.799293][T14533] R13: 0000000000000000 R14: 00007fbc66fb5fa0 R15: 00007ffc0b4d39c8 [ 287.799316][T14533] [ 288.072292][T14517] syzkaller0: entered allmulticast mode [ 288.285759][T14540] bond7: (slave wireguard4): The slave device specified does not support setting the MAC address [ 288.302242][T14540] bond7: (slave wireguard4): Setting fail_over_mac to active for active-backup mode [ 288.364685][T14540] bond7: (slave wireguard4): making interface the new active one [ 288.375456][T14540] bond7: (slave wireguard4): Enslaving as an active interface with an up link [ 288.712192][T14575] FAULT_INJECTION: forcing a failure. [ 288.712192][T14575] name failslab, interval 1, probability 0, space 0, times 0 [ 288.730327][T14575] CPU: 1 UID: 0 PID: 14575 Comm: syz.8.2774 Not tainted 6.15.0-rc2-syzkaller-00282-gd861a5dbb960 #0 PREEMPT(full) [ 288.730354][T14575] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 288.730382][T14575] Call Trace: [ 288.730389][T14575] [ 288.730397][T14575] dump_stack_lvl+0x241/0x360 [ 288.730449][T14575] ? __pfx_dump_stack_lvl+0x10/0x10 [ 288.730476][T14575] ? __pfx__printk+0x10/0x10 [ 288.730502][T14575] ? __lock_acquire+0xad5/0xd80 [ 288.730540][T14575] should_fail_ex+0x424/0x570 [ 288.730575][T14575] should_failslab+0xac/0x100 [ 288.730598][T14575] kmem_cache_alloc_noprof+0x78/0x390 [ 288.730618][T14575] ? skb_clone+0x20c/0x390 [ 288.730643][T14575] skb_clone+0x20c/0x390 [ 288.730665][T14575] __netlink_deliver_tap+0x3c4/0x7f0 [ 288.730702][T14575] ? netlink_deliver_tap+0x2e/0x1b0 [ 288.730725][T14575] netlink_deliver_tap+0x19d/0x1b0 [ 288.730751][T14575] netlink_unicast+0x7c6/0x9a0 [ 288.730781][T14575] ? __pfx_netlink_unicast+0x10/0x10 [ 288.730805][T14575] ? skb_put+0x114/0x1f0 [ 288.730838][T14575] netlink_sendmsg+0x8c3/0xcd0 [ 288.730876][T14575] ? __pfx_netlink_sendmsg+0x10/0x10 [ 288.730905][T14575] ? aa_sock_msg_perm+0x91/0x160 [ 288.730936][T14575] ? __pfx_netlink_sendmsg+0x10/0x10 [ 288.730959][T14575] __sock_sendmsg+0x221/0x270 [ 288.730985][T14575] ____sys_sendmsg+0x523/0x860 [ 288.731013][T14575] ? __pfx_____sys_sendmsg+0x10/0x10 [ 288.731029][T14575] ? __fget_files+0x2a/0x420 [ 288.731050][T14575] ? __fget_files+0x2a/0x420 [ 288.731078][T14575] __sys_sendmmsg+0x3a0/0x7b0 [ 288.731117][T14575] ? __pfx___sys_sendmmsg+0x10/0x10 [ 288.731173][T14575] ? rcu_read_lock_any_held+0xbb/0x160 [ 288.731195][T14575] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 288.731220][T14575] ? vfs_write+0xb29/0xd10 [ 288.731257][T14575] ? ksys_write+0x24e/0x2d0 [ 288.731287][T14575] ? __mutex_unlock_slowpath+0x229/0x800 [ 288.731338][T14575] ? ksys_write+0x275/0x2d0 [ 288.731385][T14575] __x64_sys_sendmmsg+0xa0/0xb0 [ 288.731406][T14575] do_syscall_64+0xf3/0x210 [ 288.731427][T14575] ? clear_bhb_loop+0x45/0xa0 [ 288.731450][T14575] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 288.731468][T14575] RIP: 0033:0x7fbc66d8e969 [ 288.731485][T14575] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 288.731501][T14575] RSP: 002b:00007fbc67b8a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 288.731522][T14575] RAX: ffffffffffffffda RBX: 00007fbc66fb5fa0 RCX: 00007fbc66d8e969 [ 288.731536][T14575] RDX: 0492492492492627 RSI: 00002000000000c0 RDI: 0000000000000004 [ 288.731549][T14575] RBP: 00007fbc67b8a090 R08: 0000000000000000 R09: 0000000000000000 [ 288.731561][T14575] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 288.731583][T14575] R13: 0000000000000000 R14: 00007fbc66fb5fa0 R15: 00007ffc0b4d39c8 [ 288.731611][T14575] [ 289.478651][T14595] netlink: 'syz.1.2781': attribute type 10 has an invalid length. [ 290.348448][T14575] netdevsim netdevsim8 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 290.356821][T14575] netdevsim netdevsim8 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 290.365874][T14575] netdevsim netdevsim8 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 290.374728][T14575] netdevsim netdevsim8 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 290.383598][T14575] vxlan0: entered promiscuous mode [ 290.388914][T14575] vxlan0: entered allmulticast mode [ 290.417248][T14601] __nla_validate_parse: 5 callbacks suppressed [ 290.417264][T14601] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2782'. [ 290.434138][T14595] batman_adv: batadv0: Adding interface: wlan0 [ 290.440370][T14595] batman_adv: batadv0: The MTU of interface wlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 290.467042][T14595] batman_adv: batadv0: Interface activated: wlan0 [ 291.121081][T14640] unsupported nlmsg_type 40 [ 291.328686][T14651] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 291.345940][T14655] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2799'. [ 291.567320][T14666] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2806'. [ 291.581142][T14666] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2806'. [ 291.811612][T14680] netlink: 'syz.5.2812': attribute type 9 has an invalid length. [ 291.845489][T14680] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2812'. [ 292.174184][T14701] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2817'. [ 292.380979][T14708] netlink: 'syz.6.2821': attribute type 33 has an invalid length. [ 292.426162][T14708] netlink: 'syz.6.2821': attribute type 1 has an invalid length. [ 292.464640][T14712] syz_tun: entered promiscuous mode [ 292.855139][T14740] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2834'. [ 292.952296][T14744] netlink: 'syz.5.2836': attribute type 11 has an invalid length. [ 293.218749][T14763] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2844'. [ 293.272911][T14763] bridge0: port 1(veth1_to_bridge) entered disabled state [ 293.464703][T14782] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2850'. [ 293.492728][T14776] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2850'. [ 293.506231][T14786] netlink: 'syz.5.2852': attribute type 1 has an invalid length. [ 293.514787][T14786] netlink: 'syz.5.2852': attribute type 11 has an invalid length. [ 294.322698][T14834] Unknown options in mask 1f4 [ 294.573121][T14854] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 0 [ 294.810075][T14868] netlink: 'syz.5.2884': attribute type 1 has an invalid length. [ 294.891245][T14872] netlink: 'syz.1.2885': attribute type 1 has an invalid length. [ 294.971109][T14868] bond3: (slave wireguard1): The slave device specified does not support setting the MAC address [ 294.987538][T14868] bond3: (slave wireguard1): Setting fail_over_mac to active for active-backup mode [ 295.032481][T14868] bond3: (slave wireguard1): making interface the new active one [ 295.052092][T14868] bond3: (slave wireguard1): Enslaving as an active interface with an up link [ 295.126748][T14890] Bluetooth: MGMT ver 1.23 [ 295.235850][T14898] FAULT_INJECTION: forcing a failure. [ 295.235850][T14898] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 295.274554][T14898] CPU: 0 UID: 0 PID: 14898 Comm: syz.1.2892 Not tainted 6.15.0-rc2-syzkaller-00282-gd861a5dbb960 #0 PREEMPT(full) [ 295.274583][T14898] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 295.274596][T14898] Call Trace: [ 295.274603][T14898] [ 295.274611][T14898] dump_stack_lvl+0x241/0x360 [ 295.274647][T14898] ? __pfx_dump_stack_lvl+0x10/0x10 [ 295.274675][T14898] ? __pfx__printk+0x10/0x10 [ 295.274715][T14898] should_fail_ex+0x424/0x570 [ 295.274749][T14898] _copy_from_user+0x2d/0xb0 [ 295.274776][T14898] copy_msghdr_from_user+0xb3/0x580 [ 295.274805][T14898] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 295.274832][T14898] ? __fget_files+0x2a/0x420 [ 295.274855][T14898] ? __fget_files+0x2a/0x420 [ 295.274882][T14898] __sys_sendmsg+0x20a/0x360 [ 295.274906][T14898] ? __pfx___sys_sendmsg+0x10/0x10 [ 295.274977][T14898] ? do_syscall_64+0xb6/0x210 [ 295.275001][T14898] do_syscall_64+0xf3/0x210 [ 295.275022][T14898] ? clear_bhb_loop+0x45/0xa0 [ 295.275044][T14898] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 295.275063][T14898] RIP: 0033:0x7f2042f8e969 [ 295.275079][T14898] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 295.275095][T14898] RSP: 002b:00007f2043d96038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 295.275114][T14898] RAX: ffffffffffffffda RBX: 00007f20431b5fa0 RCX: 00007f2042f8e969 [ 295.275128][T14898] RDX: 0000000000000000 RSI: 0000200000000440 RDI: 0000000000000003 [ 295.275140][T14898] RBP: 00007f2043d96090 R08: 0000000000000000 R09: 0000000000000000 [ 295.275151][T14898] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 295.275162][T14898] R13: 0000000000000000 R14: 00007f20431b5fa0 R15: 00007fffa8526268 [ 295.275190][T14898] [ 295.467632][T14896] __nla_validate_parse: 72 callbacks suppressed [ 295.467650][T14896] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2894'. [ 295.847016][T14925] netlink: 'syz.1.2902': attribute type 32 has an invalid length. [ 295.893961][T14926] netlink: 32 bytes leftover after parsing attributes in process `syz.7.2901'. [ 295.923854][T14926] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2901'. [ 296.727900][T14987] netlink: 'syz.1.2928': attribute type 28 has an invalid length. [ 296.736229][T14987] netlink: 'syz.1.2928': attribute type 3 has an invalid length. [ 296.744247][T14987] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2928'. [ 296.815436][T14991] netlink: 'syz.8.2929': attribute type 1 has an invalid length. [ 296.933765][T14999] netlink: 'syz.5.2932': attribute type 178 has an invalid length. [ 297.168116][T15015] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2937'. [ 297.581398][T15046] netlink: 40 bytes leftover after parsing attributes in process `syz.8.2948'. [ 297.794175][T15058] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 297.974274][T15069] FAULT_INJECTION: forcing a failure. [ 297.974274][T15069] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 297.994113][T15069] CPU: 1 UID: 0 PID: 15069 Comm: syz.8.2958 Not tainted 6.15.0-rc2-syzkaller-00282-gd861a5dbb960 #0 PREEMPT(full) [ 297.994139][T15069] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 297.994151][T15069] Call Trace: [ 297.994158][T15069] [ 297.994166][T15069] dump_stack_lvl+0x241/0x360 [ 297.994198][T15069] ? __pfx_dump_stack_lvl+0x10/0x10 [ 297.994225][T15069] ? __pfx__printk+0x10/0x10 [ 297.994261][T15069] should_fail_ex+0x424/0x570 [ 297.994292][T15069] _copy_from_iter+0x211/0x1c70 [ 297.994319][T15069] ? __build_skb_around+0x247/0x3d0 [ 297.994348][T15069] ? __alloc_skb+0x298/0x480 [ 297.994372][T15069] ? __pfx__copy_from_iter+0x10/0x10 [ 297.994396][T15069] ? __pfx___alloc_skb+0x10/0x10 [ 297.994422][T15069] ? skb_put+0x114/0x1f0 [ 297.994452][T15069] netlink_sendmsg+0x73c/0xcd0 [ 297.994486][T15069] ? __pfx_netlink_sendmsg+0x10/0x10 [ 297.994513][T15069] ? aa_sock_msg_perm+0x91/0x160 [ 297.994541][T15069] ? __pfx_netlink_sendmsg+0x10/0x10 [ 297.994561][T15069] __sock_sendmsg+0x221/0x270 [ 297.994585][T15069] ____sys_sendmsg+0x523/0x860 [ 297.994618][T15069] ? __pfx_____sys_sendmsg+0x10/0x10 [ 297.994633][T15069] ? __fget_files+0x2a/0x420 [ 297.994654][T15069] ? __fget_files+0x2a/0x420 [ 297.994679][T15069] __sys_sendmsg+0x271/0x360 [ 297.994700][T15069] ? __pfx___sys_sendmsg+0x10/0x10 [ 297.994765][T15069] ? do_syscall_64+0xb6/0x210 [ 297.994787][T15069] do_syscall_64+0xf3/0x210 [ 297.994806][T15069] ? clear_bhb_loop+0x45/0xa0 [ 297.994827][T15069] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 297.994844][T15069] RIP: 0033:0x7fbc66d8e969 [ 297.994859][T15069] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 297.994874][T15069] RSP: 002b:00007fbc67b8a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 297.994893][T15069] RAX: ffffffffffffffda RBX: 00007fbc66fb5fa0 RCX: 00007fbc66d8e969 [ 297.994906][T15069] RDX: 0000000000000000 RSI: 0000200000000440 RDI: 0000000000000003 [ 297.994917][T15069] RBP: 00007fbc67b8a090 R08: 0000000000000000 R09: 0000000000000000 [ 297.994928][T15069] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 297.994938][T15069] R13: 0000000000000000 R14: 00007fbc66fb5fa0 R15: 00007ffc0b4d39c8 [ 297.994965][T15069] [ 298.457281][T15089] IPv6: NLM_F_CREATE should be specified when creating new route [ 298.504965][T15089] netlink: 'syz.7.2965': attribute type 39 has an invalid length. [ 298.580409][T15091] netlink: 52 bytes leftover after parsing attributes in process `syz.6.2966'. [ 298.844215][T15098] sctp: [Deprecated]: syz.5.2969 (pid 15098) Use of int in max_burst socket option deprecated. [ 298.844215][T15098] Use struct sctp_assoc_value instead [ 298.953724][T15103] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2971'. [ 299.006321][ T55] Bluetooth: hci4: command 0x0405 tx timeout [ 299.031975][ T55] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 299.050337][ T55] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 299.061007][ T55] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 299.073479][ T55] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 299.085587][ T55] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 299.138479][ T5839] syz_tun (unregistering): left promiscuous mode [ 299.315711][T15121] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 299.328858][T15106] lo speed is unknown, defaulting to 1000 [ 299.451864][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 299.477572][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.521417][T15126] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2978'. [ 299.532399][T15126] bridge0: port 2(bridge_slave_1) entered disabled state [ 299.540803][T15126] bridge0: port 1(bridge_slave_0) entered disabled state [ 299.624842][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 299.649998][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.771864][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 299.791056][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.891811][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 299.908016][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.064907][T15150] lo speed is unknown, defaulting to 1000 [ 300.732399][ T12] veth1_to_bridge: left allmulticast mode [ 300.740938][ T12] veth1_to_bridge: left promiscuous mode [ 300.761222][ T12] bridge0: port 1(veth1_to_bridge) entered disabled state [ 300.946908][T15181] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 301.078224][T15192] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2997'. [ 301.112219][ T12] bond7 (unregistering): (slave ip6erspan0): Releasing active interface [ 301.127180][ T12] ip6erspan0 (unregistering): left allmulticast mode [ 301.164789][ T5853] Bluetooth: hci5: command tx timeout [ 301.259480][ T12] dvmrp0 (unregistering): left allmulticast mode [ 301.477478][ T12] bond1 (unregistering): Released all slaves [ 301.495146][ T12] bond2 (unregistering): Released all slaves [ 301.518636][ T12] bond0 (unregistering): Released all slaves [ 301.549138][ T12] bond3 (unregistering): Released all slaves [ 301.574955][ T12] bond4 (unregistering): Released all slaves [ 301.596453][ T12] bond5 (unregistering): Released all slaves [ 301.630289][ T12] bond6 (unregistering): Released all slaves [ 301.737418][ T12] bond7 (unregistering): Released all slaves [ 301.751485][ T12] bond8 (unregistering): Released all slaves [ 301.765313][ T12] bond9 (unregistering): Released all slaves [ 301.779787][ T12] bond10 (unregistering): (slave wireguard6): Releasing backup interface [ 301.790777][ T12] bond10 (unregistering): Released all slaves [ 301.811416][T15152] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-": -EINTR [ 301.824841][T15106] chnl_net:caif_netlink_parms(): no params data found [ 301.991692][T15208] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 302.022358][ T12] tipc: Left network mode [ 302.342724][T15230] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 302.403596][T15106] bridge0: port 1(bridge_slave_0) entered blocking state [ 302.429811][T15106] bridge0: port 1(bridge_slave_0) entered disabled state [ 302.446153][T15106] bridge_slave_0: entered allmulticast mode [ 302.477113][T15106] bridge_slave_0: entered promiscuous mode [ 302.486829][T15106] bridge0: port 2(bridge_slave_1) entered blocking state [ 302.494600][T15106] bridge0: port 2(bridge_slave_1) entered disabled state [ 302.501831][T15106] bridge_slave_1: entered allmulticast mode [ 302.514982][T15106] bridge_slave_1: entered promiscuous mode [ 302.531259][ T12] batman_adv: batadv0: Interface deactivated: wlan0 [ 302.638843][ T12] batman_adv: batadv0: Removing interface: wlan0 [ 302.788228][T15106] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 302.833767][T15106] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 303.035079][T15106] team0: Port device team_slave_0 added [ 303.087387][T15106] team0: Port device team_slave_1 added [ 303.247866][T15264] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3015'. [ 303.257757][ T5853] Bluetooth: hci5: command tx timeout [ 303.337970][ T12] hsr_slave_0: left promiscuous mode [ 303.350859][ T12] 0·: left promiscuous mode [ 303.371786][ T12] veth1_macvtap: left promiscuous mode [ 304.048392][T15106] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 304.055659][T15106] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 304.084577][T15106] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 304.138261][T15106] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 304.147287][T15106] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 304.177552][T15106] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 304.372961][T15106] hsr_slave_0: entered promiscuous mode [ 304.385196][T15106] hsr_slave_1: entered promiscuous mode [ 304.392099][T15285] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 304.788978][T15298] netlink: zone id is out of range [ 304.797582][T15298] netlink: zone id is out of range [ 304.806652][T15298] netlink: zone id is out of range [ 304.811879][T15298] netlink: zone id is out of range [ 304.823652][T15298] netlink: zone id is out of range [ 304.829206][T15298] netlink: zone id is out of range [ 304.841591][T15298] netlink: zone id is out of range [ 304.844884][T15302] netlink: 'syz.6.3029': attribute type 11 has an invalid length. [ 304.855401][T15298] netlink: zone id is out of range [ 304.855414][T15298] netlink: zone id is out of range [ 304.866701][T15298] netlink: zone id is out of range [ 304.893468][T15302] netlink: 224 bytes leftover after parsing attributes in process `syz.6.3029'. [ 304.993349][T15301] tipc: Enabling not permitted [ 305.001295][T15301] tipc: Enabling of bearer rejected, failed to enable media [ 305.051750][ T12] IPVS: stop unused estimator thread 0... [ 305.273093][T15314] sctp: [Deprecated]: syz.8.3033 (pid 15314) Use of struct sctp_assoc_value in delayed_ack socket option. [ 305.273093][T15314] Use struct sctp_sack_info instead [ 305.323929][ T5853] Bluetooth: hci5: command tx timeout [ 305.323964][T15106] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 305.401712][T15106] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 305.422619][T15106] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 305.448947][T15106] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 305.547149][T15329] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 305.649917][T15106] 8021q: adding VLAN 0 to HW filter on device bond0 [ 305.717233][T15106] 8021q: adding VLAN 0 to HW filter on device team0 [ 305.738835][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 305.746014][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 305.808101][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 305.815306][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 306.192782][T15350] rdma_rxe: rxe_newlink: failed to add bond_slave_1 [ 306.204823][ T1148] bridge_slave_1: left promiscuous mode [ 306.210573][ T1148] bridge0: port 2(bridge_slave_1) entered disabled state [ 306.285141][ T1148] bridge_slave_0: left allmulticast mode [ 306.301266][ T1148] bridge_slave_0: left promiscuous mode [ 306.308105][ T1148] bridge0: port 1(bridge_slave_0) entered disabled state [ 306.558520][ T55] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 306.568824][ T55] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 306.578137][ T55] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 306.588231][ T55] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 306.597822][ T55] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 306.687017][ T1148] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 306.698182][ T1148] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 306.708895][ T1148] bond0 (unregistering): (slave ÿ): Releasing backup interface [ 306.718521][ T1148] bond0 (unregistering): (slave bond1): Releasing backup interface [ 306.728165][ T1148] bond0 (unregistering): Released all slaves [ 306.815653][ T1148] bond1 (unregistering): Released all slaves [ 306.830407][ T1148] bond2 (unregistering): (slave wireguard0): Releasing backup interface [ 306.840291][ T1148] bond2 (unregistering): Released all slaves [ 306.857506][ T1148] bond3 (unregistering): (slave wireguard1): Releasing backup interface [ 306.867316][ T1148] bond3 (unregistering): Released all slaves [ 306.991106][T15106] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 307.060904][T15366] veth0: entered promiscuous mode [ 307.143962][T15366] geneve2: entered promiscuous mode [ 307.149221][T15366] geneve2: entered allmulticast mode [ 307.211967][T15373] netlink: 'syz.8.3054': attribute type 1 has an invalid length. [ 307.251221][T15375] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 307.291135][T15364] veth0: left promiscuous mode [ 307.364729][T15373] 8021q: adding VLAN 0 to HW filter on device bond7 [ 307.399016][T15377] bond7: (slave veth5): Enslaving as an active interface with a down link [ 307.408738][ T5853] Bluetooth: hci5: command tx timeout [ 307.414807][T15106] veth0_vlan: entered promiscuous mode [ 307.471360][T15106] veth1_vlan: entered promiscuous mode [ 307.522350][T15106] veth0_macvtap: entered promiscuous mode [ 307.598798][T15106] veth1_macvtap: entered promiscuous mode [ 307.794371][ T1148] team0: left promiscuous mode [ 307.799193][ T1148] team_slave_1: left promiscuous mode [ 307.815848][ T1148] batadv_slave_1: left promiscuous mode [ 307.852536][ T1148] hsr_slave_0: left promiscuous mode [ 307.971459][T15400] netlink: 203516 bytes leftover after parsing attributes in process `syz.8.3060'. [ 308.207403][ T1148] hsr_slave_1: left promiscuous mode [ 308.664801][ T1148] team0 (unregistering): Port device team_slave_1 removed [ 308.696658][ T5853] Bluetooth: hci0: command tx timeout [ 308.930617][T15395] bond0: (slave dummy0): Releasing backup interface [ 308.948461][T15395] batman_adv: batadv0: Adding interface: dummy0 [ 308.956405][T15395] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 308.985493][T15395] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 309.024410][T15402] bridge_slave_0: left allmulticast mode [ 309.030133][T15402] bridge_slave_0: left promiscuous mode [ 309.039684][T15402] bridge0: port 1(bridge_slave_0) entered disabled state [ 309.064813][T15402] bridge_slave_1: left allmulticast mode [ 309.070516][T15402] bridge_slave_1: left promiscuous mode [ 309.076980][T15402] bridge0: port 2(bridge_slave_1) entered disabled state [ 309.093378][T15402] bond0: (slave bond_slave_0): Releasing backup interface [ 309.130465][T15402] bond0: (slave bond_slave_1): Releasing backup interface [ 309.144514][T15402] team_slave_0: left promiscuous mode [ 309.162769][T15402] team0: Port device team_slave_0 removed [ 309.169628][T15402] team_slave_1: left promiscuous mode [ 309.185210][T15402] team0: Port device team_slave_1 removed [ 309.191544][T15402] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 309.199706][T15402] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 309.216337][T15402] bond0: (slave wlan1): Releasing backup interface [ 309.241604][T15402] bond4: (slave wireguard0): Releasing backup interface [ 309.259615][T15402] bond5: (slave wireguard1): Releasing backup interface [ 309.270001][T15403] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 309.271359][T15106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 309.294584][T15106] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 309.305386][T15106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 309.316590][T15106] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 309.329114][T15106] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 309.377355][ T5924] syz0: Port: 1 Link DOWN [ 309.389030][T15106] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 309.426227][T15106] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.436298][T15106] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.446844][T15106] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.462208][T15106] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.730744][T15362] chnl_net:caif_netlink_parms(): no params data found [ 309.748492][ T82] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 309.781372][ T82] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 309.911544][ T82] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 309.937181][ T82] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 310.102451][T15362] bridge0: port 1(bridge_slave_0) entered blocking state [ 310.134564][T15362] bridge0: port 1(bridge_slave_0) entered disabled state [ 310.141793][T15362] bridge_slave_0: entered allmulticast mode [ 310.174854][T15362] bridge_slave_0: entered promiscuous mode [ 310.185985][T15443] batman_adv: batadv0: Removing interface: dummy0 [ 310.215425][T15443] bridge_slave_0: left allmulticast mode [ 310.221273][T15443] bridge_slave_0: left promiscuous mode [ 310.231834][T15443] bridge0: port 1(bridge_slave_0) entered disabled state [ 310.249385][T15443] bridge_slave_1: left allmulticast mode [ 310.256617][T15443] bridge_slave_1: left promiscuous mode [ 310.262404][T15443] bridge0: port 2(bridge_slave_1) entered disabled state [ 310.279347][T15443] bond0: (slave bond_slave_0): Releasing backup interface [ 310.291676][T15443] bond0: (slave bond_slave_1): Releasing backup interface [ 310.301896][T15443] team_slave_0: left promiscuous mode [ 310.318592][T15443] team0: Port device team_slave_0 removed [ 310.326144][T15443] team_slave_1: left promiscuous mode [ 310.340537][T15443] team0: Port device team_slave_1 removed [ 310.346957][T15443] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 310.354808][T15443] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 310.370941][T15443] bond1: (slave wireguard0): Releasing backup interface [ 310.381603][T15443] bond2: (slave wireguard1): Releasing backup interface [ 310.401468][T15443] bond4: (slave wireguard2): Releasing backup interface [ 310.412712][T15443] bond5: (slave wireguard3): Releasing backup interface [ 310.438313][T15443] bond7: (slave veth5): Releasing active interface [ 310.480302][T15447] team0: Mode changed to "roundrobin" [ 310.487955][T15447] team0: Mode changed to "broadcast" [ 310.494288][T15362] bridge0: port 2(bridge_slave_1) entered blocking state [ 310.502574][T15362] bridge0: port 2(bridge_slave_1) entered disabled state [ 310.527649][T15362] bridge_slave_1: entered allmulticast mode [ 310.541459][T15362] bridge_slave_1: entered promiscuous mode [ 310.640798][T15362] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 310.657349][T15362] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 310.717580][T15362] team0: Port device team_slave_0 added [ 310.763990][ T5853] Bluetooth: hci0: command tx timeout [ 310.798786][T15362] team0: Port device team_slave_1 added [ 310.911499][T15362] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 310.943257][T15362] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 310.995919][T15362] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 311.011605][T15362] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 311.087866][T15362] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 311.164621][T15362] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 311.208186][T15486] netlink: 'syz.1.3088': attribute type 21 has an invalid length. [ 311.220707][T15486] netlink: 'syz.1.3088': attribute type 15 has an invalid length. [ 311.230943][T15486] netlink: 156 bytes leftover after parsing attributes in process `syz.1.3088'. [ 311.420427][T15362] hsr_slave_0: entered promiscuous mode [ 311.445918][T15362] hsr_slave_1: entered promiscuous mode [ 311.466540][T15362] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 311.490740][T15362] Cannot create hsr debugfs directory [ 311.676624][T15506] syzkaller0: entered promiscuous mode [ 311.692378][T15506] syzkaller0: entered allmulticast mode [ 311.705533][T15511] netlink: 60 bytes leftover after parsing attributes in process `syz.6.3099'. [ 311.716892][T15508] netlink: 60 bytes leftover after parsing attributes in process `syz.6.3099'. [ 311.727540][T15515] netlink: 60 bytes leftover after parsing attributes in process `syz.6.3099'. [ 312.845839][ T5853] Bluetooth: hci0: command tx timeout [ 313.089193][T15529] netlink: 60 bytes leftover after parsing attributes in process `syz.7.3105'. [ 313.100104][T15528] wg2: entered promiscuous mode [ 313.113783][T15528] wg2: entered allmulticast mode [ 313.812490][T15576] tipc: Started in network mode [ 313.817685][T15576] tipc: Node identity 4, cluster identity 4711 [ 313.829570][T15576] tipc: Node number set to 4 [ 313.855682][T15578] bridge_slave_0: left allmulticast mode [ 313.861442][T15578] bridge_slave_0: left promiscuous mode [ 313.868188][T15578] bridge0: port 1(bridge_slave_0) entered disabled state [ 313.885946][T15578] bridge_slave_1: left allmulticast mode [ 313.891718][T15578] bridge_slave_1: left promiscuous mode [ 313.899102][T15578] bridge0: port 2(bridge_slave_1) entered disabled state [ 313.916446][T15578] bond0: (slave bond_slave_0): Releasing backup interface [ 313.929642][T15578] bond0: (slave bond_slave_1): Releasing backup interface [ 313.955478][T15578] team0: Port device team_slave_0 removed [ 313.971819][T15578] team0: Port device team_slave_1 removed [ 313.979509][T15578] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 313.987574][T15578] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 314.001642][T15578] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 314.010311][T15578] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 314.099618][T15582] vlan2: entered allmulticast mode [ 314.109558][T15582] bond0: entered allmulticast mode [ 314.116980][T15582] bridge0: port 1(vlan2) entered blocking state [ 314.130143][T15582] bridge0: port 1(vlan2) entered disabled state [ 314.145348][T15582] vlan2: entered promiscuous mode [ 314.150418][T15582] bond0: entered promiscuous mode [ 314.175747][T15362] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 314.197103][T15362] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 314.223004][T15362] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 314.241275][T15362] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 314.335402][T15596] netlink: 'syz.1.3136': attribute type 10 has an invalid length. [ 314.378045][T15596] team0: Port device netdevsim0 added [ 314.385007][T15599] netlink: 'syz.1.3136': attribute type 10 has an invalid length. [ 314.405482][ T66] [ 314.407829][ T66] ====================================================== [ 314.414850][ T66] WARNING: possible circular locking dependency detected [ 314.421857][ T66] 6.15.0-rc2-syzkaller-00282-gd861a5dbb960 #0 Not tainted [ 314.428953][ T66] ------------------------------------------------------ [ 314.435959][ T66] kworker/u8:4/66 is trying to acquire lock: [ 314.441926][ T66] ffff88805bcf8e00 (team->team_lock_key#10){+.+.}-{4:4}, at: team_port_change_check+0x51/0x1e0 [ 314.452292][ T66] [ 314.452292][ T66] but task is already holding lock: [ 314.459647][ T66] ffff88806a734d30 (&dev_instance_lock_key#20){+.+.}-{4:4}, at: __linkwatch_run_queue+0x616/0x940 [ 314.470260][ T66] [ 314.470260][ T66] which lock already depends on the new lock. [ 314.470260][ T66] [ 314.480647][ T66] [ 314.480647][ T66] the existing dependency chain (in reverse order) is: [ 314.489646][ T66] [ 314.489646][ T66] -> #1 (&dev_instance_lock_key#20){+.+.}-{4:4}: [ 314.498157][ T66] lock_acquire+0x116/0x2f0 [ 314.503181][ T66] __mutex_lock+0x1a5/0x10c0 [ 314.508326][ T66] dev_set_mtu+0x11c/0x270 [ 314.513268][ T66] team_add_slave+0x83b/0x28b0 [ 314.518563][ T66] do_set_master+0x579/0x730 [ 314.523671][ T66] do_setlink+0xf76/0x4390 [ 314.528640][ T66] rtnl_newlink+0x17e2/0x1fe0 [ 314.533838][ T66] rtnetlink_rcv_msg+0x80f/0xd70 [ 314.539291][ T66] netlink_rcv_skb+0x208/0x480 [ 314.544575][ T66] netlink_unicast+0x7f8/0x9a0 [ 314.550136][ T66] netlink_sendmsg+0x8c3/0xcd0 [ 314.555417][ T66] __sock_sendmsg+0x221/0x270 [ 314.560607][ T66] ____sys_sendmsg+0x523/0x860 [ 314.565880][ T66] __sys_sendmsg+0x271/0x360 [ 314.571066][ T66] do_syscall_64+0xf3/0x210 [ 314.576079][ T66] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 314.582500][ T66] [ 314.582500][ T66] -> #0 (team->team_lock_key#10){+.+.}-{4:4}: [ 314.590785][ T66] validate_chain+0xa69/0x24e0 [ 314.596059][ T66] __lock_acquire+0xad5/0xd80 [ 314.601251][ T66] lock_acquire+0x116/0x2f0 [ 314.606268][ T66] __mutex_lock+0x1a5/0x10c0 [ 314.611370][ T66] team_port_change_check+0x51/0x1e0 [ 314.617164][ T66] team_device_event+0x437/0x5b0 [ 314.622618][ T66] notifier_call_chain+0x1a5/0x3f0 [ 314.628263][ T66] netif_state_change+0x12b/0x1b0 [ 314.633807][ T66] linkwatch_do_dev+0x112/0x170 [ 314.639185][ T66] __linkwatch_run_queue+0x63b/0x940 [ 314.645000][ T66] linkwatch_event+0x4c/0x60 [ 314.650106][ T66] process_scheduled_works+0xac3/0x18e0 [ 314.656176][ T66] worker_thread+0x870/0xd50 [ 314.661278][ T66] kthread+0x7b7/0x940 [ 314.665856][ T66] ret_from_fork+0x4b/0x80 [ 314.670780][ T66] ret_from_fork_asm+0x1a/0x30 [ 314.676053][ T66] [ 314.676053][ T66] other info that might help us debug this: [ 314.676053][ T66] [ 314.686271][ T66] Possible unsafe locking scenario: [ 314.686271][ T66] [ 314.693716][ T66] CPU0 CPU1 [ 314.699076][ T66] ---- ---- [ 314.704429][ T66] lock(&dev_instance_lock_key#20); [ 314.709727][ T66] lock(team->team_lock_key#10); [ 314.717275][ T66] lock(&dev_instance_lock_key#20); [ 314.725075][ T66] lock(team->team_lock_key#10); [ 314.730101][ T66] [ 314.730101][ T66] *** DEADLOCK *** [ 314.730101][ T66] [ 314.738235][ T66] 4 locks held by kworker/u8:4/66: [ 314.743340][ T66] #0: ffff88801b089148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x990/0x18e0 [ 314.755024][ T66] #1: ffffc90001567c60 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9cb/0x18e0 [ 314.765991][ T66] #2: ffffffff900fd608 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 314.774951][ T66] #3: ffff88806a734d30 (&dev_instance_lock_key#20){+.+.}-{4:4}, at: __linkwatch_run_queue+0x616/0x940 [ 314.786001][ T66] [ 314.786001][ T66] stack backtrace: [ 314.791887][ T66] CPU: 0 UID: 0 PID: 66 Comm: kworker/u8:4 Not tainted 6.15.0-rc2-syzkaller-00282-gd861a5dbb960 #0 PREEMPT(full) [ 314.791906][ T66] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 314.791917][ T66] Workqueue: events_unbound linkwatch_event [ 314.791931][ T66] Call Trace: [ 314.791937][ T66] [ 314.791943][ T66] dump_stack_lvl+0x241/0x360 [ 314.791966][ T66] ? __pfx_dump_stack_lvl+0x10/0x10 [ 314.791986][ T66] ? __pfx__printk+0x10/0x10 [ 314.792005][ T66] ? print_lock+0x171/0x1a0 [ 314.792028][ T66] print_circular_bug+0x2e1/0x300 [ 314.792044][ T66] check_noncircular+0x142/0x160 [ 314.792062][ T66] validate_chain+0xa69/0x24e0 [ 314.792085][ T66] __lock_acquire+0xad5/0xd80 [ 314.792107][ T66] lock_acquire+0x116/0x2f0 [ 314.792125][ T66] ? team_port_change_check+0x51/0x1e0 [ 314.792145][ T66] __mutex_lock+0x1a5/0x10c0 [ 314.792160][ T66] ? team_port_change_check+0x51/0x1e0 [ 314.792180][ T66] ? team_port_change_check+0x51/0x1e0 [ 314.792194][ T66] ? bond_netdev_event+0xe0/0xfb0 [ 314.792209][ T66] ? __pfx___mutex_lock+0x10/0x10 [ 314.792227][ T66] ? __asan_memset+0x23/0x50 [ 314.792247][ T66] team_port_change_check+0x51/0x1e0 [ 314.792264][ T66] team_device_event+0x437/0x5b0 [ 314.792278][ T66] ? notifier_call_chain+0x15a/0x3f0 [ 314.792293][ T66] notifier_call_chain+0x1a5/0x3f0 [ 314.792308][ T66] netif_state_change+0x12b/0x1b0 [ 314.792326][ T66] ? __pfx_netif_state_change+0x10/0x10 [ 314.792346][ T66] ? rfc2863_policy+0x1ce/0x3f0 [ 314.792359][ T66] linkwatch_do_dev+0x112/0x170 [ 314.792372][ T66] __linkwatch_run_queue+0x63b/0x940 [ 314.792386][ T66] ? __pfx___mutex_lock+0x10/0x10 [ 314.792402][ T66] ? __pfx___linkwatch_run_queue+0x10/0x10 [ 314.792419][ T66] ? process_scheduled_works+0x9cb/0x18e0 [ 314.792439][ T66] linkwatch_event+0x4c/0x60 [ 314.792455][ T66] process_scheduled_works+0xac3/0x18e0 [ 314.792487][ T66] ? __pfx_process_scheduled_works+0x10/0x10 [ 314.792514][ T66] ? assign_work+0x367/0x3d0 [ 314.792536][ T66] worker_thread+0x870/0xd50 [ 314.792554][ T66] ? __kthread_parkme+0x1a8/0x200 [ 314.792569][ T66] ? __pfx_worker_thread+0x10/0x10 [ 314.792600][ T66] kthread+0x7b7/0x940 [ 314.792619][ T66] ? __pfx_worker_thread+0x10/0x10 [ 314.792635][ T66] ? __pfx_kthread+0x10/0x10 [ 314.792652][ T66] ? __pfx_kthread+0x10/0x10 [ 314.792669][ T66] ? __pfx_kthread+0x10/0x10 [ 314.792687][ T66] ? __pfx_kthread+0x10/0x10 [ 314.792704][ T66] ? _raw_spin_unlock_irq+0x23/0x50 [ 314.792727][ T66] ? lockdep_hardirqs_on+0x9d/0x150 [ 314.792744][ T66] ? __pfx_kthread+0x10/0x10 [ 314.792762][ T66] ret_from_fork+0x4b/0x80 [ 314.792777][ T66] ? __pfx_kthread+0x10/0x10 [ 314.792795][ T66] ret_from_fork_asm+0x1a/0x30 [ 314.792817][ T66] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 315.102519][T15599] team0: Port device netdevsim0 removed [ 315.103280][ T5853] Bluetooth: hci0: command tx timeout [ 315.195054][T15599] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 315.288170][T15599] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 315.334515][T15599] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 315.454325][T10530] syz_tun (unregistering): left promiscuous mode [ 315.525484][ T66] bridge0: port 1(vlan2) entered blocking state [ 315.531819][ T66] bridge0: port 1(vlan2) entered forwarding state [ 315.652056][ T66] netdevsim netdevsim8 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 315.662540][ T66] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.727474][ T66] netdevsim netdevsim8 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 315.737263][ T66] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.775998][ T66] netdevsim netdevsim8 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 315.786162][ T66] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.848339][ T66] netdevsim netdevsim8 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 315.858928][ T66] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.124757][ T66] bond0 (unregistering): Released all slaves [ 316.134129][ T66] bond1 (unregistering): Released all slaves [ 316.143075][ T66] bond2 (unregistering): Released all slaves [ 316.152007][ T66] bond3 (unregistering): Released all slaves [ 316.163498][ T66] bond4 (unregistering): Released all slaves [ 316.176983][ T66] bond5 (unregistering): Released all slaves [ 316.187342][ T66] bond6 (unregistering): Released all slaves [ 316.255756][ T66] bond7 (unregistering): Released all slaves [ 316.504060][ T66] team0: left promiscuous mode [ 316.517008][ T66] veth1_vlan: left promiscuous mode [ 316.522291][ T66] veth0_vlan: left promiscuous mode [ 317.257778][ T66] IPVS: stop unused estimator thread 0... [ 317.514788][ T66] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.566484][ T66] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.607609][ T66] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.651373][ T66] bond0: (slave netdevsim0): Releasing backup interface [ 317.660222][ T66] netdevsim netdevsim1 netdevsim0 (unregistering): left promiscuous mode [ 317.668727][ T66] netdevsim netdevsim1 netdevsim0 (unregistering): left allmulticast mode [ 317.677935][ T66] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.690275][ T13] bridge0: port 1(vlan2) entered disabled state [ 317.731230][ T66] bridge_slave_1: left allmulticast mode [ 317.737012][ T66] bridge_slave_1: left promiscuous mode [ 317.742662][ T66] bridge0: port 2(bridge_slave_1) entered disabled state [ 317.750562][ T66] bridge_slave_0: left allmulticast mode [ 317.756431][ T66] bridge_slave_0: left promiscuous mode [ 317.762059][ T66] bridge0: port 1(bridge_slave_0) entered disabled state [ 317.770770][ T66] vlan2: left promiscuous mode [ 317.775612][ T66] bond0: left promiscuous mode [ 317.780485][ T66] bridge0: port 1(vlan2) entered disabled state [ 318.025940][ T66] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 318.035629][ T66] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 318.045064][ T66] bond0 (unregistering): Released all slaves [ 318.117392][ T66] bond0 (unregistering): Released all slaves [ 318.536459][ T66] hsr_slave_0: left promiscuous mode [ 318.542071][ T66] hsr_slave_1: left promiscuous mode [ 318.547702][ T66] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 318.555211][ T66] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 318.567338][ T66] hsr_slave_0: left promiscuous mode [ 318.572983][ T66] hsr_slave_1: left promiscuous mode [ 318.581369][ T66] veth1_macvtap: left promiscuous mode [ 318.587000][ T66] veth0_macvtap: left promiscuous mode [ 318.592573][ T66] veth1_vlan: left promiscuous mode [ 318.597957][ T66] veth0_vlan: left promiscuous mode [ 318.716389][ T66] team0 (unregistering): Port device team_slave_1 removed [ 318.736492][ T66] team0 (unregistering): Port device team_slave_0 removed