last executing test programs: 4.318334998s ago: executing program 3 (id=1918): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv6_newnexthop={0x28, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}, @NHA_ENCAP={0xc, 0x8, 0x0, 0x1, @ILA_ATTR_IDENT_TYPE={0x5}}]}, 0x28}}, 0x0) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000030c0)=[{&(0x7f0000000000), 0x10, 0x0}], 0x1, 0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x20) connect$l2tp6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x20) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000180)={r3}, 0xc) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RELOAD(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000002c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000000180000000000250001740e0001"], 0x3c}}, 0x0) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r8 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r8, 0x84, 0x2, &(0x7f0000000300), &(0x7f0000000340)=0x8) 3.461300284s ago: executing program 4 (id=1931): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='dctcp\x00', 0x6) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x0, 0x0}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007ed, &(0x7f0000008400)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x43}}, 0x10) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000300)=ANY=[], 0x44}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{}, [@TCA_NETEM_RATE64={0xc}]}}}]}, 0x58}}, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f0000000900)={@multicast2, @multicast2}, &(0x7f0000000940)=0xc) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="380000006d000100"/20, @ANYRES32=r6, @ANYBLOB="00ff00000000002018003480"], 0x38}}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000a00)={0x1, 0x0, 0x0}, 0x10) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, 0x0, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000340)='htcp\x00', 0x5) write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0xa89) 3.156146058s ago: executing program 3 (id=1935): r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x2, 0x4, 0x2}, 0x48) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) setsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x7d, 0x0, 0x0) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x3, &(0x7f00000001c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0700000000000000000005000000180001801400020073797a5f74756e000000000000000000180003800800040000000000080002002000000004000100080005"], 0x4c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x10, 0x11, 0x4000}, @TCA_FQ_QUANTUM={0x8, 0x3, 0x4000}]}}]}, 0x40}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000200)={'syztnl0\x00', &(0x7f0000000280)={'syztnl0\x00', 0x0, 0x80, 0x700, 0xfffffffd, 0x0, {{0xd, 0x4, 0x1, 0x4, 0x34, 0x68, 0x0, 0x0, 0x29, 0x0, @private=0xa010102, @multicast2, {[@timestamp={0x44, 0x18, 0x7a, 0x0, 0x5, [0x4, 0x9, 0x470, 0x3ff, 0x3]}, @generic={0x86, 0x8, "a0353d0fe35c"}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f00000004c0)={'gretap0\x00', &(0x7f0000000700)={'erspan0\x00', 0x0, 0x7800, 0x20, 0x0, 0xe, {{0x1b, 0x4, 0x0, 0x31, 0x6c, 0x65, 0x0, 0x6, 0x29, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x19}, {[@timestamp_prespec={0x44, 0x24, 0x5d, 0x3, 0xc, [{@multicast1, 0xba}, {@loopback, 0xe}, {@loopback, 0x3}, {@dev={0xac, 0x14, 0x14, 0x24}, 0x6}]}, @ssrr={0x89, 0xf, 0x32, [@broadcast, @broadcast, @private=0xa010102]}, @timestamp_addr={0x44, 0x24, 0x49, 0x1, 0x4, [{@rand_addr=0x64010102, 0x1ff}, {@rand_addr=0x64010102, 0x5}, {@broadcast, 0x7}, {@multicast2, 0x3}]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000500)={'batadv_slave_1\x00'}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'ipvlan1\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r8, 0x8916, &(0x7f0000000000)={@private2, 0x0, r9}) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000580)=ANY=[@ANYBLOB="6c0000001000390400"/20, @ANYRES32=r9, @ANYBLOB="01"], 0x6c}, 0x1, 0x0, 0x0, 0x10}, 0x0) 2.937333913s ago: executing program 0 (id=1936): sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0, 0x188}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000800)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16, @ANYBLOB="77ba"], 0x48}}, 0x0) unshare(0x22020600) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) preadv(r2, &(0x7f0000000000), 0x1000000000000359, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES64=r1, @ANYBLOB="010000000003"], 0x1c}, 0x1, 0x0, 0x0, 0x8001}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000d08000640ffffff000800034000000008580100000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000002c01038040000080080003400000000234000280300002"], 0x1ec}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000780), 0xb) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="180800001bc81a000000000000001e00851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222}, 0x78) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r2, 0xe0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000140)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x3, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0], 0x0, 0x5e, &(0x7f00000002c0)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000000540), &(0x7f0000000580), 0x8, 0xe5, 0x8, 0x8, &(0x7f00000005c0)}}, 0x10) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000740)={'syztnl1\x00', &(0x7f0000000840)={'gretap0\x00', r5, 0x80, 0x20, 0x7, 0x3, {{0x19, 0x4, 0x0, 0x9, 0x64, 0x66, 0x0, 0xf9, 0x2f, 0x0, @private=0xa010100, @broadcast, {[@ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0xc, 0x4d, 0x1, 0x1, [{@local}]}, @generic={0x82, 0x10, "4ce3a36526ba79e60a82b7e08b2b"}, @ra={0x94, 0x4, 0x1}, @rr={0x7, 0x17, 0x18, [@private=0xa010102, @multicast1, @dev={0xac, 0x14, 0x14, 0x1e}, @rand_addr=0x64010102, @rand_addr=0x64010101]}, @generic={0x83, 0x5, "139fe2"}, @lsrr={0x83, 0xf, 0xc4, [@rand_addr=0x64010102, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}]}]}}}}}) ioctl$SIOCX25SFACILITIES(r0, 0x89e3, &(0x7f00000007c0)={0x9, 0x3, 0x6, 0xb, 0x2, 0x81}) 2.516052013s ago: executing program 4 (id=1941): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) write(r3, &(0x7f0000000080)="29000000140005b7ff000000040860eb01cb02fcb2e4e6589b3e0ed7283f14b912685e684c42b9eeb9", 0x29) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_REG(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)={0x24, 0x0, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x64}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004001}, 0x0) close(r2) r5 = socket$caif_stream(0x25, 0x1, 0x3) recvmsg(r5, &(0x7f0000003b40)={0x0, 0x0, 0x0}, 0x12100) write$ppp(r1, &(0x7f0000000140)="81a8d55ecc82", 0x6) r6 = socket$inet6(0xa, 0x3, 0x87) connect$inet6(r6, &(0x7f00000000c0), 0x1c) splice(r0, 0x0, r2, 0x0, 0xfdef, 0x0) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r7, r7}, &(0x7f0000000300), &(0x7f0000000340)='%-010d \x00'}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x10, &(0x7f0000000480)=@framed={{}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1234}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r7}}]}, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r3, 0x10e, 0x5, &(0x7f0000000040)=0x4, 0x4) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[], 0x78}}, 0x4004084) 2.261212593s ago: executing program 4 (id=1953): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = socket(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000c40)="c10e020022003505d25a806f8c6394f90435fc60040011000a740100053582c137153e37024801", 0x27}], 0x1}, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-clmulni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030031000b12d25a80648c2594f90324fc60100c034002200600053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000080)={0x8}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000002c0)) socket(0x1d, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000380)={'vxcan0\x00'}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="54010000100013070000000000000000fe880000000000000000000000000001ff01000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000320000000000000000b80000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c001c000000000000000000ff010000000000000000000000000001"], 0x154}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x12, 0xd3, 0x8, 0x2}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r4, &(0x7f0000000300), 0x0}, 0x20) write(r1, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(r1, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) 2.208231257s ago: executing program 2 (id=1943): r0 = socket$netlink(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r0) sendmsg$NL80211_CMD_SET_QOS_MAP(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x6, 0xf, &(0x7f0000000540)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0xfdf}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8}, 0x90) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=ANY=[@ANYRES64=r2, @ANYRES16=r3, @ANYBLOB="05000000000088000300", @ANYRES32=r4, @ANYBLOB="00000000000000000000000000005bcdc79b38f4a82862c1f6d6dbd54ecc000023a8a5a73a8ac6cdbb7558735dee2969a1"], 0x30}}, 0x0) r5 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'lc\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x483, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'sh\x00'}, 0x2c) connect$inet(r1, &(0x7f0000003580)={0x2, 0x4e22, @dev}, 0x10) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e21, @empty}, 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e21, @empty}, 0x10) r6 = socket$pppl2tp(0x18, 0x1, 0x1) r7 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r6, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, r7, 0x1003, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x3a) getsockopt$bt_BT_SECURITY(r6, 0x111, 0x3, 0x0, 0x20001100) 1.923689563s ago: executing program 3 (id=1946): ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000104a5270b7357000000925e4a44", @ANYRES32, @ANYBLOB="0dfa130016000000240012000c00010000000000000000000c0002f60800000001180000080001"], 0x44}}, 0x0) r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000180)={'pim6reg1\x00', 0x2}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x20) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) bind$llc(r0, &(0x7f0000000140)={0x1a, 0x101, 0x7, 0xfd, 0x7, 0xf, @multicast}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x0, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x43}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r1], 0x48}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r4, @ANYBLOB='\x00\x00\x00\x00O'], 0x28}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) 1.863171059s ago: executing program 4 (id=1947): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[], &(0x7f0000000100)='GPL\x00'}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, 0x0, &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000003880)=ANY=[@ANYBLOB="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"], 0x0}, 0x90) socket$inet6_dccp(0xa, 0x6, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_EDITDEST(r1, 0x0, 0x489, &(0x7f0000000700)={{0x88, @rand_addr=0x64010102, 0x4e23, 0x3, 'lblc\x00', 0x0, 0xa3, 0xb}, {@loopback, 0x4e21, 0x3, 0x0, 0x40, 0x7fff}}, 0x44) listen(r0, 0x4) r2 = socket(0xa, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000080)=@broute={'broute\x00', 0x20, 0x2, 0x230, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200004c0], 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"]}, 0x2a8) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x4}, 0x8) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, 0x0, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c40)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000140)="03", 0x1}], 0x1}}], 0x1, 0x0) 1.571185413s ago: executing program 0 (id=1950): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv6_newnexthop={0x28, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}, @NHA_ENCAP={0xc, 0x8, 0x0, 0x1, @ILA_ATTR_IDENT_TYPE={0x5}}]}, 0x28}}, 0x0) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000030c0)=[{&(0x7f0000000000), 0x10, 0x0}], 0x1, 0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x20) connect$l2tp6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x20) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000180)={r3}, 0xc) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RELOAD(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000002c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000000180000000000250001740e0001"], 0x3c}}, 0x0) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r8 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r8, 0x84, 0x2, &(0x7f0000000300), &(0x7f0000000340)=0x8) 1.446758269s ago: executing program 3 (id=1951): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x52) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x5, &(0x7f0000000000)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0x3a}, [@call={0xb7}, @exit={0x95, 0x0, 0xc2}], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x90) 1.27195994s ago: executing program 2 (id=1955): socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r5, @ANYBLOB="0c00990000000000000000000800a100ffff0000080026008d03000008009f"], 0x40}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010000104000000000000c90000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008000300", @ANYRES32=0x0, @ANYBLOB="2000128008000100677470001400028008000100", @ANYRES32=r1, @ANYBLOB="08000200", @ANYRES32, @ANYBLOB], 0x48}}, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(0xffffffffffffffff, 0x0, 0x0) r6 = socket(0xa, 0x2, 0x0) bind$inet6(r6, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2={0xff, 0x5}}, 0x1c) r7 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r7, &(0x7f0000000040)={0x2, 0x4e20, @multicast1}, 0x10) r8 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r8, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback={0xff00000000000000}}, 0x1c) r9 = socket$netlink(0x10, 0x3, 0x4) writev(r9, &(0x7f0000000300)=[{&(0x7f0000000340)="580000001400192340834b80040d8c5602117436c379000000000000000058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100070c100000000000224e0000", 0x58}], 0x1) 1.15134198s ago: executing program 1 (id=1956): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000003c0)={'wpan1\x00', 0x0}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1e, 0xe, &(0x7f0000002040)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmmsg$unix(r5, &(0x7f0000003e80)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000009c0)="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", 0x70a}], 0x1}}], 0x1, 0x0) r6 = socket$kcm(0x2, 0xa, 0x2) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000240), 0x0, 0x80000000, 0x0, 0xd, 0x0, &(0x7f0000000400)="6784bd0ab2f5fc92b7a32fcb05", 0x0}, 0x50) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="034886dd090032000300300000006000000001002f0081e949b93897bc3b0000000000007d01ff020000000000000000000000000001120022eb3b7e6656de"], 0xfdef) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000ac0)={0x20, r7, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_SEC_LEVEL={0x4}]}, 0x20}}, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r8, 0x0) r9 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r9, 0x65, 0x2, &(0x7f0000000040), 0x4) 1.082508592s ago: executing program 2 (id=1957): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r1, 0x0, 0xb, &(0x7f00000000c0)=0x3, 0x4) syz_emit_ethernet(0x52, &(0x7f0000000100)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0xc, 0x0, 0x0, 0x3, 0x0, 0x0, {0xa, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @private, @dev, {[@cipso={0x86, 0xf, 0x0, [{0x0, 0x2}, {0x0, 0x5, "4eb8a6"}, {0x0, 0x2}]}, @ssrr={0x89, 0x3}]}}}}}}}, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x2040, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newsa={0x154, 0x10, 0x0, 0x0, 0x0, {{@in=@loopback, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@remote, 0x0, 0x32}, @in=@dev, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @encap={0x1c, 0x4, {0x2, 0x0, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @private}}}]}, 0x154}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)={0x0, 0x40}}, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0) ioctl$PPPIOCATTCHAN(r3, 0x40047438, &(0x7f0000000140)) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) ioctl$SIOCAX25ADDFWD(0xffffffffffffffff, 0x89ea, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000000)={0x4800}, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000003900)={0x24, 0x16, 0xa01, 0x0, 0x0, {0xa}, [@typed={0x4}, @typed={0xc, 0xa, 0x0, 0x0, @u64}]}, 0x24}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x48, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_GROUP_ADDR={0xa, 0x14, @link_local}, @IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x2}]}}}]}, 0x48}}, 0x0) 1.081939491s ago: executing program 3 (id=1958): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) r3 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r3, 0x84, 0x76, &(0x7f0000000280)={r2}, 0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f00000003c0)={r2, @in6={{0xa, 0x4e21, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x258b}}, 0x3, 0x7}, 0x90) r4 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) r5 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), r5) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xbf22}, 0x48) socket(0x2c, 0x3, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)={0x60, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x2}, @IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x60}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x80}]}, &(0x7f0000000100)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r6, &(0x7f0000000140), &(0x7f0000000080)=@udp6=r5}, 0x20) sendmsg$IPSET_CMD_FLUSH(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x3c, 0x4, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x800) 1.003914725s ago: executing program 0 (id=1959): syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000000200095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3}, 0x48) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xb, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000028000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000035090100000000009500000000070000b7020000000000007b9a00fe00000000b6090000000000a80700000050000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffff550000000800000018220000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7050000080000004608f0ff760000005d9800000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bind$alg(r1, 0x0, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r4, 0x800448f0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x800454dd, &(0x7f0000000100)) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) 890.685439ms ago: executing program 4 (id=1960): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000002400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000e"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r2, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x52) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0x3a}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0xb7}, @exit={0x95, 0x0, 0xc2}], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x70) 835.839739ms ago: executing program 2 (id=1961): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x6e20, 0x0, @ipv4={'\x00', '\xff\xff', @private}}, 0x1c) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r2, 0x29, 0x4b, 0x0, 0x0) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x6e20, 0x0, @loopback={0xfc}}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) r3 = socket(0x10, 0x2, 0x0) sendto$inet6(r3, &(0x7f00000007c0)="7800000018002507b9199b02ffff48000203be04020406050a02040c5c000900580006020a0000000d0085a168d0bf46d32345653600648d270005000a00000849935ade4a460c89b6ec0cff3959547f509058ba86c902007a00004a32000407160012000a0000000000e000e218d1dd3b6ed538f6523250", 0x78, 0x0, 0x0, 0xe0ffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00'}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x18, 0x0, 0x0, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_OURS={0x4}]}, 0x18}}, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'wlan0\x00'}) ioctl(r4, 0x8b22, &(0x7f0000000040)) 788.078624ms ago: executing program 4 (id=1962): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) r2 = socket$inet(0x2, 0x6, 0x0) setsockopt$inet_opts(r2, 0x0, 0x4, 0x0, 0x0) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @empty}, 0x10) write$cgroup_int(r1, &(0x7f0000000380), 0x12) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20\x00'}, 0x58) ioctl$BTRFS_IOC_SET_FEATURES(r3, 0x40309439, &(0x7f0000000200)={0x0, 0x7}) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_netrom_SIOCADDRT(r4, 0x890b, &(0x7f0000000000)={0x1, @null, @rose={'rose', 0x0}, 0x0, 'syz0\x00', @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x0, 0x0, [@null, @null, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}) unshare(0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f848100000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 657.458396ms ago: executing program 2 (id=1963): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) r2 = socket$inet(0x2, 0x6, 0x0) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @empty}, 0x10) write$cgroup_int(r1, &(0x7f0000000380), 0x12) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20\x00'}, 0x58) ioctl$BTRFS_IOC_SET_FEATURES(r3, 0x40309439, &(0x7f0000000200)={0x0, 0x7}) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x1, @null, @rose={'rose', 0x0}, 0x0, 'syz0\x00', @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x0, 0x0, [@null, @null, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}) unshare(0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f848100000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 625.560276ms ago: executing program 1 (id=1964): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) r2 = socket$inet(0x2, 0x6, 0x0) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @empty}, 0x10) write$cgroup_int(r1, &(0x7f0000000380), 0x12) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20\x00'}, 0x58) ioctl$BTRFS_IOC_SET_FEATURES(r3, 0x40309439, &(0x7f0000000200)={0x0, 0x7}) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_netrom_SIOCADDRT(r4, 0x890b, &(0x7f0000000000)={0x1, @null, @rose={'rose', 0x0}, 0x0, 'syz0\x00', @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x0, 0x0, [@null, @null, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}) unshare(0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f848100000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 529.079681ms ago: executing program 2 (id=1965): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="440000001a00010000000000000000000a000000", @ANYRES32=0x0, @ANYBLOB="00000000140003000700000000000000000000000000000014000100ff"], 0x44}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00'}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001e00), 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x4}, 0x38) recvmsg(r1, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x34}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180058000000000000000000000000009500040000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r3, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x10, 0x0, 0x40000}, 0x90) ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(0xffffffffffffffff, 0xf505, 0x0) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000001c0)="39000000140081ae0000dc676f97daf01e2357f9ffffffffffffff0521018701546fabca1b4e8a06a6580e88370200c54c1960b89c40ebb373", 0x39}], 0x1}, 0x0) 507.810219ms ago: executing program 1 (id=1966): socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.current\x00', 0x26e1, 0x0) close(r0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x0, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000002340)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34664c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbcebddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cfd7c3a1d37a6ab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ed8dba2f23b01a9aeb980aff9fa3a64709270c701db801f44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af4c0eb97fca585ec6bf58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef3b7cda42013d53046da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea2a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f76062adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b441233151122b41a8d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225a53072423b907c6682f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd1f539bd43007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711d7219ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a26c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29754f928c59306ce105ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc05fea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efdb36b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8"], &(0x7f0000000100)='GPL\x00'}, 0x90) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)={@cgroup=r1, 0xffffffffffffffff, 0x37, 0x0, 0x4}, 0x20) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0xfffffffffffffd78, &(0x7f0000000340)={&(0x7f0000000540)=@newsa={0x184, 0x10, 0x713, 0x0, 0x0, {{@in6=@remote, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in=@remote, 0x0, 0x33}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x4, {{'ecb(cipher_null)\x00'}}}, @algo_auth_trunc={0x4c, 0x14, {{'sha1\x00'}}}]}, 0x184}}, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'ipvlan1\x00', 0x3001}) r4 = socket$inet6(0xa, 0x80000, 0x4) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001900)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x6, '\x00', 0x0, r0, 0x3, 0x0, 0x5}, 0x48) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) recvmsg$kcm(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000017c0)=[{0x0}, {&(0x7f0000000200)=""/224, 0xe0}, {&(0x7f0000000340)=""/49, 0x31}, {&(0x7f00000003c0)=""/49, 0x31}, {&(0x7f0000000400)=""/68, 0x44}, {&(0x7f00000006c0)=""/4096, 0x1000}, {&(0x7f0000000480)=""/80, 0x50}, {&(0x7f0000000500)=""/104, 0x68}, {&(0x7f00000016c0)=""/227, 0xe3}], 0x9}, 0xf610c543476368ad) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x5c, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x5c}}, 0x0) 478.368946ms ago: executing program 0 (id=1967): ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000104a5270b7357000000925e4a44", @ANYRES32, @ANYBLOB="0dfa130016000000240012000c00010000000000000000000c0002f60800000001180000080001"], 0x44}}, 0x0) r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000180)={'pim6reg1\x00', 0x2}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x20) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) bind$llc(r0, &(0x7f0000000140)={0x1a, 0x101, 0x7, 0xfd, 0x7, 0xf, @multicast}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x0, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x43}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r1], 0x48}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r4, @ANYBLOB='\x00\x00\x00\x00O'], 0x28}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) 330.081156ms ago: executing program 0 (id=1968): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x52) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x5, &(0x7f0000000000)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0x3a}, [@call={0xb7}, @exit={0x95, 0x0, 0xc2}], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x90) 237.93919ms ago: executing program 1 (id=1969): r0 = socket(0x10, 0x2, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @private2}, 0x1c) pipe(&(0x7f0000000100)) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="540000001000030400e2ffffffffff0700000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006970766c616e0000140002800600020000000000060001000200000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x54}}, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x1b, 0x0, &(0x7f0000001a80)) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r5, 0x0) getpeername$l2tp6(r5, 0x0, &(0x7f0000000580)) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x8, &(0x7f00000000c0)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r5}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_genetlink_get_family_id$nfc(&(0x7f00000002c0), 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f0000000500)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=""/8, 0x14}}], 0x4b, 0x0, 0x0) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB='G\r\x00\x00\x00\x00\v\x00\x00\x00'], 0x24}}, 0x0) 237.599743ms ago: executing program 3 (id=1970): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@sack_perm, @window, @sack_perm, @sack_perm, @timestamp, @timestamp, @timestamp, @timestamp], 0x20000149) getsockopt$inet_int(r0, 0x0, 0x34, 0x0, &(0x7f00000001c0)) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005bc0), 0x0, 0x4000) bpf$ENABLE_STATS(0x20, 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, 0x0, &(0x7f0000000180)) setsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f00000003c0)={{{@in=@rand_addr=0x64010102, @in=@dev={0xac, 0x14, 0x14, 0x30}, 0x4e23, 0xb, 0x4e21, 0x0, 0x0, 0x30, 0x0, 0x67}, {0x4, 0x5, 0x7, 0x10001, 0x25c6, 0x7, 0x4, 0x5}, {0x1, 0xe, 0xcadb, 0x3ff}, 0x3, 0x0, 0x0, 0x0, 0x2, 0x2}, {{@in6=@mcast1, 0x4d6, 0xff}, 0xa, @in6=@local, 0x0, 0x0, 0x3, 0x0, 0x0, 0x64, 0x7fff}}, 0xe8) 162.67243ms ago: executing program 0 (id=1971): unshare(0x68060200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000020000000000000000000822"], &(0x7f0000000040)='syzkaller\x00'}, 0x90) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000980), 0xe) listen(r0, 0x0) accept4(r0, 0x0, 0x0, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) listen(r1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x3}, 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00', r2}, 0x10) accept4$tipc(r1, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r3 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r3, &(0x7f0000003f40)={0x0, 0x0, &(0x7f0000003f00)={&(0x7f0000000000)=@del={0xe0, 0x11, 0x1, 0x0, 0x0, {{'rfc7539esp(ofb(tea),blake2s-256-x86)\x00'}, '\x00', '\x00', 0x0, 0x400}}, 0xe0}}, 0x0) 96.234935ms ago: executing program 1 (id=1972): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000002400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000e"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r2, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x52) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0x3a}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0xb7}, @exit={0x95, 0x0, 0xc2}], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x70) 0s ago: executing program 1 (id=1973): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x6e20, 0x0, @ipv4={'\x00', '\xff\xff', @private}}, 0x1c) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r2, 0x29, 0x4b, &(0x7f0000000100)=0xfffffff7, 0x4) bind$inet6(r2, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) r3 = socket(0x10, 0x2, 0x0) sendto$inet6(r3, &(0x7f00000007c0)="7800000018002507b9199b02ffff48000203be04020406050a02040c5c000900580006020a0000000d0085a168d0bf46d32345653600648d270005000a00000849935ade4a460c89b6ec0cff3959547f509058ba86c902007a00004a32000407160012000a0000000000e000e218d1dd3b6ed538f6523250", 0x78, 0x0, 0x0, 0xe0ffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00'}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x18, 0x0, 0x0, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_OURS={0x4}]}, 0x18}}, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'wlan0\x00'}) ioctl(r4, 0x8b22, &(0x7f0000000040)) kernel console output (not intermixed with test programs): _0 may have been left with an inconsistent configuration, please check. [ 96.887135][ T5755] __nla_validate_parse: 4 callbacks suppressed [ 96.887152][ T5755] netlink: 16 bytes leftover after parsing attributes in process `syz.0.152'. [ 97.262639][ T5765] netlink: 'syz.3.157': attribute type 13 has an invalid length. [ 97.270432][ T5765] netlink: 24 bytes leftover after parsing attributes in process `syz.3.157'. [ 97.373646][ T5285] IPVS: starting estimator thread 0... [ 97.395403][ T5769] tipc: Started in network mode [ 97.400408][ T5769] tipc: Node identity ac1414aa, cluster identity 4711 [ 97.413976][ T5769] tipc: Enabled bearer , priority 10 [ 97.432230][ T5770] netlink: 4 bytes leftover after parsing attributes in process `syz.3.157'. [ 97.453188][ T5770] netlink: 'syz.3.157': attribute type 11 has an invalid length. [ 97.472159][ T5771] IPVS: using max 19 ests per chain, 45600 per kthread [ 97.505178][ T5770] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 97.514353][ T5770] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 97.523596][ T5770] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 97.532779][ T5770] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 97.540305][ T5776] syz.1.160 uses obsolete (PF_INET,SOCK_PACKET) [ 97.563185][ T5770] vxlan0: entered promiscuous mode [ 98.205963][ T5785] netlink: 'syz.4.162': attribute type 1 has an invalid length. [ 98.231940][ T5785] netlink: 112860 bytes leftover after parsing attributes in process `syz.4.162'. [ 98.262164][ T5789] netlink: 48 bytes leftover after parsing attributes in process `syz.3.165'. [ 98.281893][ T5785] netlink: 'syz.4.162': attribute type 1 has an invalid length. [ 98.533560][ T5285] tipc: Node number set to 2886997162 [ 98.686887][ T5807] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.169'. [ 99.764614][ T5827] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.772717][ T5827] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.226382][ T5286] IPVS: starting estimator thread 0... [ 101.272430][ T5865] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 101.343894][ T5863] IPVS: using max 17 ests per chain, 40800 per kthread [ 101.417387][ T5869] netlink: 8 bytes leftover after parsing attributes in process `syz.2.188'. [ 101.492454][ T5869] netlink: 4 bytes leftover after parsing attributes in process `syz.2.188'. [ 101.564184][ T4623] block nbd1: Receive control failed (result -107) [ 101.622891][ T5869] nbd1: detected capacity change from 0 to 256 [ 101.674739][ T5253] block nbd1: Dead connection, failed to find a fallback [ 101.704556][ T5253] block nbd1: shutting down sockets [ 101.736741][ T5253] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 101.768267][ T5253] Buffer I/O error on dev nbd1, logical block 0, async page read [ 101.785909][ T5253] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 101.802216][ T5253] Buffer I/O error on dev nbd1, logical block 0, async page read [ 101.810433][ T5253] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 101.826294][ T5253] Buffer I/O error on dev nbd1, logical block 0, async page read [ 101.836016][ T5253] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 101.846094][ T5253] Buffer I/O error on dev nbd1, logical block 0, async page read [ 101.858644][ T5253] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 101.868534][ T5253] Buffer I/O error on dev nbd1, logical block 0, async page read [ 101.877036][ T5253] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 101.887056][ T5253] Buffer I/O error on dev nbd1, logical block 0, async page read [ 101.895743][ T5253] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 101.905549][ T5253] Buffer I/O error on dev nbd1, logical block 0, async page read [ 101.914017][ T5253] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 101.925683][ T5253] Buffer I/O error on dev nbd1, logical block 0, async page read [ 101.935613][ T5253] ldm_validate_partition_table(): Disk read failed. [ 101.944623][ T5253] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 101.954471][ T5253] Buffer I/O error on dev nbd1, logical block 0, async page read [ 101.964715][ T5253] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 101.974488][ T5253] Buffer I/O error on dev nbd1, logical block 0, async page read [ 101.983208][ T5253] Dev nbd1: unable to read RDB block 0 [ 101.997397][ T5253] nbd1: unable to read partition table [ 102.016374][ T5253] ldm_validate_partition_table(): Disk read failed. [ 102.024621][ T5253] Dev nbd1: unable to read RDB block 0 [ 102.032977][ T5253] nbd1: unable to read partition table [ 103.121439][ T5885] : renamed from ipvlan1 [ 103.311735][ T5889] netlink: 80 bytes leftover after parsing attributes in process `syz.1.197'. [ 103.485435][ T5902] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 104.105773][ T5918] vlan2: entered promiscuous mode [ 104.110884][ T5918] bridge0: entered promiscuous mode [ 104.119336][ T5918] vlan2: entered allmulticast mode [ 104.126614][ T5918] bridge0: entered allmulticast mode [ 104.216084][ T5920] netlink: 24 bytes leftover after parsing attributes in process `syz.4.205'. [ 104.947087][ T5946] netlink: 20 bytes leftover after parsing attributes in process `syz.2.211'. [ 105.136619][ T5948] bridge0: entered promiscuous mode [ 105.166862][ T5948] bridge0: left promiscuous mode [ 105.631420][ T5962] netlink: 'syz.3.219': attribute type 12 has an invalid length. [ 105.716611][ T5965] Bluetooth: MGMT ver 1.23 [ 106.087409][ T66] tipc: Subscription rejected, illegal request [ 106.162472][ T5984] netlink: 20 bytes leftover after parsing attributes in process `syz.0.227'. [ 106.444782][ T5994] netlink: 'syz.4.230': attribute type 1 has an invalid length. [ 107.137366][ T6015] syzkaller0: create flow: hash 509272679 index 3 [ 107.226497][ T6014] Bluetooth: hci0: Opcode 0x0c20 failed: -112 [ 107.280677][ T6014] netlink: 20 bytes leftover after parsing attributes in process `syz.2.238'. [ 107.417274][ T6012] syzkaller0: delete flow: hash 509272679 index 3 [ 107.773467][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 108.327926][ T6037] netlink: 'syz.1.245': attribute type 7 has an invalid length. [ 108.335917][ T6037] netlink: 'syz.1.245': attribute type 8 has an invalid length. [ 108.347247][ T6037] netlink: 224 bytes leftover after parsing attributes in process `syz.1.245'. [ 109.181976][ T54] Bluetooth: hci0: command 0x0c20 tx timeout [ 109.189553][ T4623] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 109.233273][ T6041] netlink: 12 bytes leftover after parsing attributes in process `syz.2.247'. [ 109.319047][ T6044] bond1: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 109.355165][ T6044] bond1: (slave ip6gre1): Error -95 calling set_mac_address [ 109.410306][ T6051] netlink: 24 bytes leftover after parsing attributes in process `syz.3.251'. [ 109.552904][ T6055] netlink: 'syz.3.251': attribute type 1 has an invalid length. [ 109.565713][ T6052] netlink: 4 bytes leftover after parsing attributes in process `syz.3.251'. [ 109.591127][ T6055] netlink: 224 bytes leftover after parsing attributes in process `syz.3.251'. [ 109.613180][ T6052] netlink: 2 bytes leftover after parsing attributes in process `syz.3.251'. [ 109.674398][ T6055] netlink: 8 bytes leftover after parsing attributes in process `syz.3.251'. [ 109.865088][ T6060] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 109.917927][ T6069] dccp_invalid_packet: P.Data Offset(102) too large [ 110.131681][ T6076] netlink: 4 bytes leftover after parsing attributes in process `syz.3.259'. [ 110.153129][ T6073] netlink: 28 bytes leftover after parsing attributes in process `syz.1.258'. [ 110.791726][ T6098] netlink: 60 bytes leftover after parsing attributes in process `syz.1.267'. [ 111.115116][ T4623] block nbd2: Receive control failed (result -107) [ 111.171963][ T6100] nbd2: detected capacity change from 0 to 256 [ 111.205041][ T5253] block nbd2: Dead connection, failed to find a fallback [ 111.208103][ T6104] bridge0: entered promiscuous mode [ 111.219036][ T6104] macvtap0: entered promiscuous mode [ 111.232403][ T6108] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 111.237775][ T6104] macvtap0: entered allmulticast mode [ 111.243673][ T5253] block nbd2: shutting down sockets [ 111.252523][ T4623] Bluetooth: hci0: command 0x0c20 tx timeout [ 111.270149][ T5253] blk_print_req_error: 27 callbacks suppressed [ 111.270171][ T5253] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 111.272439][ T6104] bridge0: entered allmulticast mode [ 111.330818][ T5253] buffer_io_error: 27 callbacks suppressed [ 111.330839][ T5253] Buffer I/O error on dev nbd2, logical block 0, async page read [ 111.357180][ T6110] bridge0: left allmulticast mode [ 111.398794][ T6110] bridge0: left promiscuous mode [ 111.400860][ T5253] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 111.433658][ T6110] macvtap0: left promiscuous mode [ 111.456612][ T6110] macvtap0: left allmulticast mode [ 111.468192][ T5253] Buffer I/O error on dev nbd2, logical block 0, async page read [ 111.501620][ T5253] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 111.524699][ T5253] Buffer I/O error on dev nbd2, logical block 0, async page read [ 111.549826][ T5253] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 111.574235][ T5253] Buffer I/O error on dev nbd2, logical block 0, async page read [ 111.589582][ T5253] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 111.619679][ T5253] Buffer I/O error on dev nbd2, logical block 0, async page read [ 111.676290][ T5253] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 111.723379][ T5253] Buffer I/O error on dev nbd2, logical block 0, async page read [ 111.747693][ T5253] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 111.799496][ T5253] Buffer I/O error on dev nbd2, logical block 0, async page read [ 111.847220][ T5253] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 111.897775][ T5253] Buffer I/O error on dev nbd2, logical block 0, async page read [ 111.915433][ T5253] ldm_validate_partition_table(): Disk read failed. [ 111.941962][ T5253] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 111.951064][ T5253] Buffer I/O error on dev nbd2, logical block 0, async page read [ 111.991357][ T5253] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 112.011005][ T5253] Buffer I/O error on dev nbd2, logical block 0, async page read [ 112.040105][ T5253] Dev nbd2: unable to read RDB block 0 [ 112.060324][ T5253] nbd2: unable to read partition table [ 112.099391][ T5253] ldm_validate_partition_table(): Disk read failed. [ 112.116838][ T5253] Dev nbd2: unable to read RDB block 0 [ 112.130963][ T5253] nbd2: unable to read partition table [ 112.639680][ T6146] syzkaller0: entered promiscuous mode [ 112.654817][ T6146] syzkaller0: entered allmulticast mode [ 113.656553][ T54] Bluetooth: hci0: command 0x0c20 tx timeout [ 113.661956][ T4623] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 114.505438][ T6161] bridge0: entered promiscuous mode [ 114.526607][ T6161] bridge0: left promiscuous mode [ 114.680511][ T6162] syzkaller0: entered promiscuous mode [ 114.692749][ T6162] syzkaller0: entered allmulticast mode [ 116.910287][ T6215] netlink: 'syz.2.303': attribute type 10 has an invalid length. [ 116.973149][ T6215] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 116.990066][ T6215] team0: Port device netdevsim0 added [ 117.059048][ T6218] netlink: 'syz.2.303': attribute type 10 has an invalid length. [ 117.073139][ T6222] __nla_validate_parse: 5 callbacks suppressed [ 117.073160][ T6222] netlink: 20 bytes leftover after parsing attributes in process `syz.4.305'. [ 117.118464][ T6218] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 117.135869][ T6218] team0: Port device netdevsim0 removed [ 117.157392][ T6218] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 117.158017][ T6223] netlink: 8 bytes leftover after parsing attributes in process `syz.1.304'. [ 117.194185][ T6224] ip6t_rpfilter: unknown options [ 118.362266][ T6250] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 120.669761][ T6255] ip6gretap0: entered promiscuous mode [ 120.728035][ T6255] ip6gretap0: left promiscuous mode [ 121.014875][ T6270] netlink: zone id is out of range [ 121.058486][ T6270] netlink: zone id is out of range [ 121.076218][ T6270] netlink: zone id is out of range [ 121.103156][ T6270] netlink: zone id is out of range [ 121.134524][ T6270] netlink: set zone limit has 4 unknown bytes [ 122.011187][ T6313] netlink: 'syz.0.334': attribute type 1 has an invalid length. [ 122.320306][ T6316] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 122.342821][ T6316] bond1: (slave batadv1): Enslaving as a backup interface with an up link [ 122.426751][ T6319] bond1 (unregistering): (slave batadv1): Releasing backup interface [ 122.453170][ T6319] bond1 (unregistering): Released all slaves [ 122.546161][ T6320] pimreg: entered allmulticast mode [ 123.141614][ T6353] netlink: 64 bytes leftover after parsing attributes in process `syz.4.340'. [ 123.787741][ T6366] netlink: 4 bytes leftover after parsing attributes in process `syz.1.344'. [ 124.583475][ T6360] netlink: 'syz.4.343': attribute type 10 has an invalid length. [ 124.607600][ T6360] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.616789][ T6360] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.662432][ T6360] bridge0: port 2(bridge_slave_1) entered blocking state [ 124.669794][ T6360] bridge0: port 2(bridge_slave_1) entered listening state [ 124.677325][ T6360] bridge0: port 1(bridge_slave_0) entered blocking state [ 124.684847][ T6360] bridge0: port 1(bridge_slave_0) entered listening state [ 124.700741][ T6360] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 124.854987][ T6370] ebt_among: dst integrity fail: 200 [ 125.262422][ T6384] Bluetooth: hci3: invalid length 0, exp 2 for type 16 [ 125.416157][ T6392] IPVS: set_ctl: invalid protocol: 22 172.20.20.170:20001 [ 125.479543][ T6394] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.355'. [ 125.526917][ T6394] openvswitch: netlink: Multiple metadata blocks provided [ 126.038176][ T6412] netlink: 'syz.1.363': attribute type 12 has an invalid length. [ 126.309798][ T6422] netlink: 'syz.0.366': attribute type 2 has an invalid length. [ 126.330425][ T6422] netlink: 4 bytes leftover after parsing attributes in process `syz.0.366'. [ 126.454165][ T6426] netlink: zone id is out of range [ 126.482062][ T6426] netlink: zone id is out of range [ 126.497026][ T6426] netlink: zone id is out of range [ 126.505188][ T6426] netlink: zone id is out of range [ 126.510720][ T6426] netlink: zone id is out of range [ 126.521540][ T6426] netlink: zone id is out of range [ 126.530264][ T6426] netlink: zone id is out of range [ 126.549297][ T6426] netlink: zone id is out of range [ 126.559444][ T6426] netlink: zone id is out of range [ 126.567267][ T6426] netlink: zone id is out of range [ 126.614352][ T6430] netlink: 12 bytes leftover after parsing attributes in process `syz.2.367'. [ 126.889155][ T6435] bridge0: port 3(gretap0) entered blocking state [ 126.932741][ T6435] bridge0: port 3(gretap0) entered disabled state [ 126.952666][ T6435] gretap0: entered allmulticast mode [ 126.992813][ T6435] gretap0: entered promiscuous mode [ 127.002856][ T6441] delete_channel: no stack [ 127.014242][ T6435] bridge0: port 3(gretap0) entered blocking state [ 127.021093][ T6435] bridge0: port 3(gretap0) entered forwarding state [ 127.071588][ T6440] netlink: 4 bytes leftover after parsing attributes in process `syz.2.370'. [ 127.118175][ T6440] bridge0: entered promiscuous mode [ 127.128004][ T6440] macvtap1: entered promiscuous mode [ 127.142051][ T6440] macvtap1: entered allmulticast mode [ 127.158102][ T6440] bridge0: entered allmulticast mode [ 127.210263][ T6442] gretap0: left allmulticast mode [ 127.242064][ T6442] gretap0: left promiscuous mode [ 127.256483][ T6442] bridge0: port 3(gretap0) entered disabled state [ 127.289832][ T6445] bridge0: left allmulticast mode [ 127.298237][ T6445] bridge0: left promiscuous mode [ 127.411923][ T4623] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 127.412946][ T54] Bluetooth: hci0: command 0x0c20 tx timeout [ 127.564306][ T6461] netlink: 40 bytes leftover after parsing attributes in process `syz.3.376'. [ 128.480978][ T6481] syzkaller0: entered promiscuous mode [ 128.516249][ T6481] syzkaller0: entered allmulticast mode [ 128.947699][ T6501] netlink: 212 bytes leftover after parsing attributes in process `syz.2.387'. [ 130.540766][ T6500] tipc: Started in network mode [ 130.547462][ T6500] tipc: Node identity 020520bfa01a, cluster identity 4711 [ 130.555307][ T6500] tipc: Enabled bearer , priority 0 [ 130.650216][ T6502] tipc: Resetting bearer [ 130.904239][ T66] tipc: Resetting bearer [ 130.927281][ T6495] tipc: Resetting bearer [ 131.426169][ T6538] netlink: 'syz.3.396': attribute type 2 has an invalid length. [ 131.440208][ T6538] netlink: 'syz.3.396': attribute type 2 has an invalid length. [ 131.664354][ T5288] tipc: Node number set to 2719948991 [ 132.554388][ T6495] tipc: Disabling bearer [ 132.567261][ T6518] netlink: 'syz.0.391': attribute type 1 has an invalid length. [ 132.575937][ T6518] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 132.583562][ T6520] netlink: 40 bytes leftover after parsing attributes in process `syz.0.391'. [ 132.633614][ T6536] netlink: 19 bytes leftover after parsing attributes in process `syz.3.396'. [ 132.667404][ T6536] caif0: entered allmulticast mode [ 132.684200][ T6540] netlink: 24 bytes leftover after parsing attributes in process `syz.2.398'. [ 132.802158][ T6545] netlink: 'syz.1.400': attribute type 11 has an invalid length. [ 133.187056][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.309916][ T6570] netlink: 28 bytes leftover after parsing attributes in process `syz.2.406'. [ 133.528589][ T6574] batadv_slave_1: entered promiscuous mode [ 133.558204][ T6573] batadv_slave_1: left promiscuous mode [ 133.695036][ T6578] bridge0: port 3(bond0) entered blocking state [ 133.705936][ T6578] bridge0: port 3(bond0) entered disabled state [ 133.712682][ T6578] bond0: entered allmulticast mode [ 133.717945][ T6578] bond_slave_0: entered allmulticast mode [ 133.724566][ T6578] bond_slave_1: entered allmulticast mode [ 133.730439][ T6578] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 133.741624][ T6578] bond0: entered promiscuous mode [ 133.751028][ T6578] bond_slave_0: entered promiscuous mode [ 133.757105][ T6578] bond_slave_1: entered promiscuous mode [ 133.764870][ T6578] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 133.779137][ T6578] bridge0: port 3(bond0) entered blocking state [ 133.785582][ T6578] bridge0: port 3(bond0) entered forwarding state [ 134.053607][ T6596] netlink: 8 bytes leftover after parsing attributes in process `syz.2.412'. [ 134.446963][ T6605] netlink: 'syz.3.416': attribute type 11 has an invalid length. [ 134.594879][ T6612] smc: net device ip6_vti0 applied user defined pnetid SYZ0 [ 135.028385][ T6627] IPv6: sit1: Disabled Multicast RS [ 135.228426][ T6636] delete_channel: no stack [ 135.505592][ T6640] netlink: 'syz.0.429': attribute type 10 has an invalid length. [ 135.526520][ T6640] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 136.241009][ T6656] netlink: 20 bytes leftover after parsing attributes in process `syz.0.434'. [ 136.454788][ T6663] netlink: 12 bytes leftover after parsing attributes in process `syz.2.437'. [ 136.509375][ T6663] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 136.526765][ T6663] batadv0: entered promiscuous mode [ 136.563338][ T6663] team0: Port device batadv0 added [ 137.125831][ T6680] netlink: 60 bytes leftover after parsing attributes in process `syz.2.444'. [ 137.628451][ T6691] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 137.700268][ T6691] batman_adv: batadv0: Adding interface: ip6gretap1 [ 137.745729][ T6691] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 137.789861][ T6691] batman_adv: batadv0: Interface activated: ip6gretap1 [ 137.800798][ T6692] netlink: 4 bytes leftover after parsing attributes in process `syz.4.448'. [ 137.829201][ T6692] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 137.876306][ T6692] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 137.911589][ T6692] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 137.927799][ T6692] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 137.957379][ T6692] batman_adv: batadv0: Interface deactivated: ip6gretap1 [ 137.981876][ T6692] batman_adv: batadv0: Removing interface: ip6gretap1 [ 138.019414][ T6698] nbd: nbd2 already in use [ 138.043587][ T6698] block nbd2: NBD_DISCONNECT [ 138.073382][ T6698] block nbd2: Send disconnect failed -32 [ 138.323204][ T6703] netlink: 12 bytes leftover after parsing attributes in process `syz.0.452'. [ 138.325804][ T6700] netlink: 32 bytes leftover after parsing attributes in process `syz.3.451'. [ 138.451346][ T6707] bond1: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 138.505732][ T6707] bond1: (slave ip6gre1): Error -95 calling set_mac_address [ 139.027077][ T6729] ax25_connect(): syz.3.459 uses autobind, please contact jreuter@yaina.de [ 139.107796][ T6728] tipc: Started in network mode [ 139.120338][ T6728] tipc: Node identity ac1414aa, cluster identity 4711 [ 139.144010][ T6728] tipc: Enabled bearer , priority 10 [ 139.332779][ T54] Bluetooth: hci4: command 0x0405 tx timeout [ 140.213237][ C1] bridge0: port 1(bridge_slave_0) entered learning state [ 140.221827][ C1] bridge0: port 2(bridge_slave_1) entered learning state [ 140.262440][ T25] tipc: Node number set to 2886997162 [ 141.379863][ T6749] vlan2: entered promiscuous mode [ 141.393536][ T6749] nlmon0: entered promiscuous mode [ 141.422869][ T6749] bond0: (slave vlan2): Enslaving as an active interface with an up link [ 141.606643][ T6758] No such timeout policy "syz0" [ 141.839395][ T6766] bond_slave_0: entered promiscuous mode [ 141.845599][ T6766] bond_slave_1: entered promiscuous mode [ 141.888238][ T6766] macsec2: entered promiscuous mode [ 141.905164][ T6766] bond0: entered promiscuous mode [ 141.920487][ T6766] macsec2: entered allmulticast mode [ 141.938096][ T6766] bond0: entered allmulticast mode [ 141.943868][ T6766] bond_slave_0: entered allmulticast mode [ 141.949832][ T6766] bond_slave_1: entered allmulticast mode [ 141.969721][ T6766] bond0: left allmulticast mode [ 142.000659][ T6766] bond_slave_0: left allmulticast mode [ 142.006911][ T6766] bond_slave_1: left allmulticast mode [ 142.013136][ T6766] bond0: left promiscuous mode [ 142.019887][ T6766] bond_slave_0: left promiscuous mode [ 142.025477][ T6766] bond_slave_1: left promiscuous mode [ 142.184809][ T6764] syzkaller0: entered promiscuous mode [ 142.190611][ T6764] syzkaller0: entered allmulticast mode [ 144.066280][ T6786] netlink: 72 bytes leftover after parsing attributes in process `syz.4.478'. [ 144.081176][ T6786] netlink: 72 bytes leftover after parsing attributes in process `syz.4.478'. [ 144.095085][ T6787] netlink: 'syz.4.478': attribute type 10 has an invalid length. [ 144.121564][ T6787] team0: Port device netdevsim0 added [ 144.406944][ T6799] team_slave_0: entered promiscuous mode [ 144.413013][ T6799] team_slave_1: entered promiscuous mode [ 144.418864][ T6799] mac80211_hwsim hwsim5 wlan1: entered promiscuous mode [ 144.433764][ T6799] team0: Device macsec2 is already an upper device of the team interface [ 144.505637][ T6799] team_slave_0: left promiscuous mode [ 144.511165][ T6799] team_slave_1: left promiscuous mode [ 144.516924][ T6799] mac80211_hwsim hwsim5 wlan1: left promiscuous mode [ 145.185560][ T6825] netlink: 4 bytes leftover after parsing attributes in process `syz.0.490'. [ 146.798018][ T6883] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.510'. [ 146.853664][ T6882] netlink: 4 bytes leftover after parsing attributes in process `syz.0.509'. [ 146.961189][ T6891] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 147.306575][ T6900] netlink: 'syz.3.516': attribute type 10 has an invalid length. [ 147.347176][ T6900] team0: Port device netdevsim0 added [ 147.384486][ T6900] netlink: 'syz.3.516': attribute type 10 has an invalid length. [ 147.407288][ T6900] team0: Port device netdevsim0 removed [ 147.419526][ T6900] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 147.427805][ T6900] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 147.581538][ T6907] netlink: 8 bytes leftover after parsing attributes in process `syz.2.518'. [ 147.597310][ T6907] netlink: 4 bytes leftover after parsing attributes in process `syz.2.518'. [ 147.645132][ T54] block nbd2: Wrong magic (0xee000000) [ 147.703161][ T5235] block nbd2: NBD_DISCONNECT [ 147.711281][ T5235] block nbd2: shutting down sockets [ 148.042008][ T6921] netlink: 5 bytes leftover after parsing attributes in process `syz.2.523'. [ 148.372559][ T6933] netlink: 'syz.2.527': attribute type 8 has an invalid length. [ 148.583940][ T6940] netlink: 56 bytes leftover after parsing attributes in process `syz.1.530'. [ 149.516053][ T6963] netlink: 'syz.2.535': attribute type 15 has an invalid length. [ 149.540981][ T6967] bridge_slave_1: left allmulticast mode [ 149.562671][ T6967] bridge_slave_1: left promiscuous mode [ 149.572383][ T6967] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.362848][ T6993] lo speed is unknown, defaulting to 1000 [ 150.382003][ T6993] lo speed is unknown, defaulting to 1000 [ 150.406457][ T6993] lo speed is unknown, defaulting to 1000 [ 150.431159][ T6993] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 150.472212][ T6993] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 150.593701][ T6993] lo speed is unknown, defaulting to 1000 [ 150.608956][ T6993] lo speed is unknown, defaulting to 1000 [ 150.618540][ T6993] lo speed is unknown, defaulting to 1000 [ 150.628350][ T6993] lo speed is unknown, defaulting to 1000 [ 150.636751][ T6993] lo speed is unknown, defaulting to 1000 [ 151.133255][ T7021] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 151.370685][ T7032] tipc: Enabling of bearer <éb:b> rejected, media not registered [ 151.887692][ T7050] @ÿ: renamed from veth0_vlan (while UP) [ 152.128093][ T7058] netlink: 12 bytes leftover after parsing attributes in process `syz.1.564'. [ 152.311156][ T7057] bridge_slave_1: entered allmulticast mode [ 152.339260][ T7072] netlink: 'syz.2.567': attribute type 10 has an invalid length. [ 152.350048][ T7057] netlink: 64 bytes leftover after parsing attributes in process `syz.4.563'. [ 152.361277][ T7072] bridge0: port 3(bond0) entered disabled state [ 152.369479][ T7072] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.377523][ T7072] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.393650][ T7074] netlink: 'syz.0.568': attribute type 1 has an invalid length. [ 152.670726][ T7078] netlink: 'syz.0.570': attribute type 10 has an invalid length. [ 152.706812][ T7078] mac80211_hwsim hwsim9 wlan1: left allmulticast mode [ 152.760539][ T7078] team0: Port device wlan1 added [ 152.796558][ T7077] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 152.988616][ T7088] netlink: 28 bytes leftover after parsing attributes in process `syz.3.574'. [ 153.070191][ T7091] lo speed is unknown, defaulting to 1000 [ 153.227836][ T7099] netlink: 12 bytes leftover after parsing attributes in process `syz.1.577'. [ 153.916974][ T7119] netlink: 'syz.1.587': attribute type 10 has an invalid length. [ 153.958666][ T7119] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.967216][ T7119] bridge0: port 1(bridge_slave_0) entered disabled state [ 154.061168][ T7119] bridge0: left allmulticast mode [ 154.098001][ T7119] bridge0: left promiscuous mode [ 154.161237][ T7119] bridge0: port 2(bridge_slave_1) entered blocking state [ 154.168542][ T7119] bridge0: port 2(bridge_slave_1) entered forwarding state [ 154.176238][ T7119] bridge0: port 1(bridge_slave_0) entered blocking state [ 154.183513][ T7119] bridge0: port 1(bridge_slave_0) entered forwarding state [ 154.250409][ T7119] bridge0: entered allmulticast mode [ 154.256058][ T7119] bridge0: entered promiscuous mode [ 154.336113][ T7119] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 154.931507][ T7147] netlink: 210620 bytes leftover after parsing attributes in process `syz.4.595'. [ 154.979236][ T7142] lo speed is unknown, defaulting to 1000 [ 155.572276][ C1] bridge0: port 1(bridge_slave_0) entered forwarding state [ 155.579619][ C1] bridge0: topology change detected, propagating [ 156.241381][ T7192] netlink: 'syz.3.614': attribute type 11 has an invalid length. [ 156.285214][ T7195] netlink: 'syz.4.613': attribute type 12 has an invalid length. [ 156.960927][ T7209] netlink: 'syz.0.619': attribute type 10 has an invalid length. [ 156.987473][ T7209] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.995497][ T7209] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.024152][ T7211] netlink: 4 bytes leftover after parsing attributes in process `syz.2.621'. [ 157.626813][ T7231] netlink: 'syz.2.628': attribute type 10 has an invalid length. [ 157.637209][ T7231] netlink: 40 bytes leftover after parsing attributes in process `syz.2.628'. [ 157.742345][ T7233] netlink: 104 bytes leftover after parsing attributes in process `syz.2.628'. [ 157.786398][ T7235] netlink: 'syz.1.629': attribute type 13 has an invalid length. [ 157.837751][ T3943] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 157.847654][ T3943] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 157.980546][ T7241] netlink: 'syz.3.632': attribute type 10 has an invalid length. [ 158.010829][ T7241] macvlan0: entered promiscuous mode [ 158.020671][ T7241] macvlan0: entered allmulticast mode [ 158.039476][ T7241] veth1_vlan: entered allmulticast mode [ 158.055087][ T7241] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 158.087097][ T7242] xt_socket: unknown flags 0x8 [ 158.236272][ T7249] netlink: 24 bytes leftover after parsing attributes in process `syz.4.635'. [ 158.309234][ T7249] netlink: 4 bytes leftover after parsing attributes in process `syz.4.635'. [ 158.331904][ T7249] netlink: 2 bytes leftover after parsing attributes in process `syz.4.635'. [ 158.355094][ T7249] netlink: 'syz.4.635': attribute type 1 has an invalid length. [ 158.366497][ T7249] netlink: 224 bytes leftover after parsing attributes in process `syz.4.635'. [ 158.376729][ T7249] netlink: 8 bytes leftover after parsing attributes in process `syz.4.635'. [ 159.096538][ T7274] netlink: 152 bytes leftover after parsing attributes in process `syz.2.642'. [ 159.115071][ T7274] netlink: 8 bytes leftover after parsing attributes in process `syz.2.642'. [ 159.174374][ T3943] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.191322][ T7273] netlink: 4 bytes leftover after parsing attributes in process `syz.4.643'. [ 159.233534][ T7273] team_slave_0: entered promiscuous mode [ 159.239315][ T7273] team_slave_1: entered promiscuous mode [ 159.245099][ T7273] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 159.277422][ T7273] team_slave_0: left promiscuous mode [ 159.282968][ T7273] team_slave_1: left promiscuous mode [ 159.288441][ T7273] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 165.322944][ T7298] netlink: 'syz.0.663': attribute type 10 has an invalid length. [ 165.360574][ T7298] batman_adv: batadv0: Adding interface: team0 [ 165.403051][ T7298] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 165.476744][ T7298] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 165.498052][ T7300] netlink: 'syz.0.663': attribute type 10 has an invalid length. [ 165.531005][ T7303] Bluetooth: hci0: Opcode 0x0c20 failed: -112 [ 165.557227][ T7300] netlink: 2 bytes leftover after parsing attributes in process `syz.0.663'. [ 165.571677][ T7309] netlink: 20 bytes leftover after parsing attributes in process `syz.4.654'. [ 165.575617][ T7300] team0: entered promiscuous mode [ 165.591816][ T7300] team_slave_0: entered promiscuous mode [ 165.662903][ T7300] team_slave_1: entered promiscuous mode [ 165.702322][ T7300] mac80211_hwsim hwsim9 wlan1: entered promiscuous mode [ 165.817596][ T7299] block nbd64: NBD_DISCONNECT [ 165.843940][ T7300] 8021q: adding VLAN 0 to HW filter on device team0 [ 165.850934][ T7300] batman_adv: batadv0: Interface activated: team0 [ 165.893310][ T7300] batman_adv: batadv0: Interface deactivated: team0 [ 165.900177][ T7300] batman_adv: batadv0: Removing interface: team0 [ 165.936961][ T7300] bridge0: port 3(team0) entered blocking state [ 165.978382][ T7300] bridge0: port 3(team0) entered disabled state [ 166.002048][ T7300] team0: entered allmulticast mode [ 166.036582][ T7300] team_slave_0: entered allmulticast mode [ 166.085928][ T7300] team_slave_1: entered allmulticast mode [ 166.119875][ T7300] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode [ 166.319567][ T7331] netlink: 'syz.4.660': attribute type 3 has an invalid length. [ 166.370206][ T7331] netlink: 130984 bytes leftover after parsing attributes in process `syz.4.660'. [ 166.370561][ T7333] netlink: 4 bytes leftover after parsing attributes in process `syz.4.660'. [ 166.943127][ T7343] netlink: 16 bytes leftover after parsing attributes in process `syz.0.662'. [ 167.406270][ T7355] netlink: 4 bytes leftover after parsing attributes in process `syz.4.671'. [ 167.492046][ T4623] Bluetooth: hci0: command 0x0c20 tx timeout [ 167.498336][ T54] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 167.505865][ T7361] netlink: 'syz.3.667': attribute type 4 has an invalid length. [ 167.586662][ T7359] lo speed is unknown, defaulting to 1000 [ 167.618314][ T7364] netlink: 'syz.3.667': attribute type 4 has an invalid length. [ 167.710911][ T7369] bridge0: port 2(gretap0) entered blocking state [ 167.721998][ T7369] bridge0: port 2(gretap0) entered disabled state [ 167.738592][ T7369] gretap0: entered allmulticast mode [ 167.761957][ T7369] gretap0: entered promiscuous mode [ 167.771014][ T7369] bridge0: port 2(gretap0) entered blocking state [ 167.777669][ T7369] bridge0: port 2(gretap0) entered listening state [ 167.787380][ T7371] netlink: 24 bytes leftover after parsing attributes in process `syz.0.675'. [ 167.823921][ T7372] gretap0: left allmulticast mode [ 167.831204][ T7371] netlink: 20 bytes leftover after parsing attributes in process `syz.0.675'. [ 167.854820][ T7372] gretap0: left promiscuous mode [ 167.863642][ T7372] bridge0: port 2(gretap0) entered disabled state [ 168.383140][ T7388] batadv0: entered promiscuous mode [ 168.402389][ T7388] vlan3: entered promiscuous mode [ 168.449197][ T7388] batadv0: left promiscuous mode [ 168.613709][ T7390] lo speed is unknown, defaulting to 1000 [ 168.812952][ T7402] netlink: 'syz.3.683': attribute type 5 has an invalid length. [ 168.832772][ T7402] netlink: 8 bytes leftover after parsing attributes in process `syz.3.683'. [ 169.231303][ T7410] syzkaller0: entered allmulticast mode [ 169.572809][ T54] Bluetooth: hci0: command 0x0c20 tx timeout [ 170.214556][ T7450] netlink: 32 bytes leftover after parsing attributes in process `syz.0.701'. [ 170.525093][ T7448] lo speed is unknown, defaulting to 1000 [ 170.526994][ T7453] netlink: 'syz.4.700': attribute type 1 has an invalid length. [ 170.746769][ T7438] syz.3.697 (7438) used greatest stack depth: 18352 bytes left [ 170.782666][ T7461] lo speed is unknown, defaulting to 1000 [ 171.179380][ T7475] smc: net device lo applied user defined pnetid SYZ2 [ 171.386166][ T7477] net_ratelimit: 11 callbacks suppressed [ 171.386183][ T7477] do_dccp_getsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 171.911280][ T7491] netlink: 'syz.1.711': attribute type 15 has an invalid length. [ 172.021544][ T7497] ieee802154 phy0 wpan0: encryption failed: -22 [ 172.160168][ T7502] netlink: 'syz.1.716': attribute type 4 has an invalid length. [ 172.198431][ T58] IPVS: starting estimator thread 0... [ 172.210536][ T7502] netlink: 'syz.1.716': attribute type 4 has an invalid length. [ 172.215629][ T7504] __nla_validate_parse: 2 callbacks suppressed [ 172.215652][ T7504] netlink: 20 bytes leftover after parsing attributes in process `syz.4.717'. [ 172.242661][ T7502] netlink: 126032 bytes leftover after parsing attributes in process `syz.1.716'. [ 172.264741][ T7504] IPv6: NLM_F_REPLACE set, but no existing node found! [ 172.277287][ T7508] netlink: 'syz.3.718': attribute type 27 has an invalid length. [ 172.331882][ T7505] IPVS: using max 16 ests per chain, 38400 per kthread [ 172.551187][ T7517] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 172.790374][ T7528] netlink: 'syz.4.722': attribute type 10 has an invalid length. [ 172.873415][ T7528] Cannot find add_set index 0 as target [ 173.285025][ T7536] netlink: 8 bytes leftover after parsing attributes in process `syz.3.724'. [ 173.667038][ T7545] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 173.885497][ T7554] netlink: 4 bytes leftover after parsing attributes in process `syz.2.726'. [ 173.973757][ T7535] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 173.993630][ T7535] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 174.145681][ T7565] netlink: 16 bytes leftover after parsing attributes in process `syz.4.735'. [ 174.161925][ T7565] netlink: 96 bytes leftover after parsing attributes in process `syz.4.735'. [ 174.204049][ T7565] netlink: 68 bytes leftover after parsing attributes in process `syz.4.735'. [ 174.215689][ T7565] ipt_REJECT: TCP_RESET invalid for non-tcp [ 174.237089][ T7568] netlink: 'syz.3.736': attribute type 10 has an invalid length. [ 174.280996][ T7568] 8021q: adding VLAN 0 to HW filter on device team0 [ 174.291159][ T7568] team0: entered promiscuous mode [ 174.307795][ T7568] team_slave_0: entered promiscuous mode [ 174.319169][ T7568] team_slave_1: entered promiscuous mode [ 174.327407][ T7568] mac80211_hwsim hwsim5 wlan1: entered promiscuous mode [ 174.338264][ T7568] bond0: (slave team0): Enslaving as an active interface with an up link [ 174.549618][ T7577] bridge0: port 3(gretap0) entered blocking state [ 174.568953][ T7577] bridge0: port 3(gretap0) entered disabled state [ 174.584628][ T7577] gretap0: entered allmulticast mode [ 174.595867][ T7577] gretap0: entered promiscuous mode [ 174.607467][ T7577] bridge0: port 3(gretap0) entered blocking state [ 174.614131][ T7577] bridge0: port 3(gretap0) entered forwarding state [ 174.625924][ T7576] veth1_vlan: left allmulticast mode [ 174.643864][ T7576] bond0: (slave macvlan0): Releasing backup interface [ 174.659545][ T7583] syz.4.740[7583] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 174.659717][ T7583] syz.4.740[7583] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 174.679172][ T7582] gretap0: left allmulticast mode [ 174.710168][ T7582] gretap0: left promiscuous mode [ 174.722784][ T7582] bridge0: port 3(gretap0) entered disabled state [ 174.750083][ T7579] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 174.763869][ T7579] syz.4.740[7579] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 174.764054][ T7579] syz.4.740[7579] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 174.832550][ T7579] pim6reg1: entered promiscuous mode [ 174.876532][ T7579] pim6reg1: entered allmulticast mode [ 175.326068][ T7603] sctp: [Deprecated]: syz.2.748 (pid 7603) Use of int in maxseg socket option. [ 175.326068][ T7603] Use struct sctp_assoc_value instead [ 175.413170][ T7603] netlink: 184472 bytes leftover after parsing attributes in process `syz.2.748'. [ 175.720097][ T7621] netlink: 12 bytes leftover after parsing attributes in process `syz.4.753'. [ 175.744344][ T7621] netlink: 20 bytes leftover after parsing attributes in process `syz.4.753'. [ 175.827434][ T7626] xt_limit: Overflow, try lower: 262144/524288 [ 175.892169][ T4623] Bluetooth: hci4: command 0x0405 tx timeout [ 175.904523][ T7628] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 175.914891][ T7628] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 175.923512][ T7628] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 175.931104][ T7628] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 176.772046][ T7656] Cannot find set identified by id 0 to match [ 178.098124][ T7679] __nla_validate_parse: 3 callbacks suppressed [ 178.098149][ T7679] netlink: 4 bytes leftover after parsing attributes in process `syz.0.775'. [ 178.155138][ T7679] 8021q: adding VLAN 0 to HW filter on device team1 [ 178.215531][ T7679] netlink: 8 bytes leftover after parsing attributes in process `syz.0.775'. [ 178.616032][ T7691] syzkaller1: entered promiscuous mode [ 178.627427][ T7691] syzkaller1: entered allmulticast mode [ 178.929248][ T7697] lo speed is unknown, defaulting to 1000 [ 179.412249][ T4623] Bluetooth: hci0: command 0x0c20 tx timeout [ 179.418941][ T54] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 179.492620][ T7714] pim6reg: entered allmulticast mode [ 179.548255][ T7714] pim6reg: left allmulticast mode [ 179.593750][ T7723] sctp: [Deprecated]: syz.0.792 (pid 7723) Use of int in maxseg socket option. [ 179.593750][ T7723] Use struct sctp_assoc_value instead [ 179.620018][ T7723] netlink: 184472 bytes leftover after parsing attributes in process `syz.0.792'. [ 179.713775][ T7724] netlink: 12 bytes leftover after parsing attributes in process `syz.2.802'. [ 179.773723][ T7729] IPv6: Can't replace route, no match found [ 179.818052][ T7721] bridge2: entered promiscuous mode [ 179.829856][ T7721] team0: Port device bridge2 added [ 180.006451][ T7724] netlink: 8 bytes leftover after parsing attributes in process `syz.2.802'. [ 180.031410][ T7724] bridge2: entered allmulticast mode [ 180.031591][ T7735] netlink: 130 bytes leftover after parsing attributes in process `syz.4.796'. [ 181.128113][ T7769] vlan2: entered promiscuous mode [ 181.158234][ T7769] bond0: (slave vlan2): Enslaving as an active interface with an up link [ 181.273393][ T7772] netlink: 20 bytes leftover after parsing attributes in process `syz.2.807'. [ 181.283836][ T7773] bridge_slave_1: left allmulticast mode [ 181.299910][ T7773] bridge_slave_1: left promiscuous mode [ 181.315498][ T7773] bridge0: port 2(bridge_slave_1) entered disabled state [ 182.635528][ T7817] lo speed is unknown, defaulting to 1000 [ 183.775726][ T7837] netlink: 24 bytes leftover after parsing attributes in process `syz.3.830'. [ 183.959100][ T7840] netlink: 9 bytes leftover after parsing attributes in process `syz.4.829'. [ 183.986693][ T7840] 0·: renamed from hsr0 (while UP) [ 183.999743][ T7840] 0·: entered allmulticast mode [ 184.017606][ T7840] hsr_slave_0: entered allmulticast mode [ 184.031962][ T7840] hsr_slave_1: entered allmulticast mode [ 184.043232][ T7840] A link change request failed with some changes committed already. Interface 70· may have been left with an inconsistent configuration, please check. [ 184.421927][ T7850] macvlan0: entered allmulticast mode [ 184.452297][ T7850] veth1_vlan: entered allmulticast mode [ 184.471293][ T7853] netlink: 24 bytes leftover after parsing attributes in process `syz.4.833'. [ 184.522338][ T7853] veth1_vlan: left allmulticast mode [ 184.603185][ T7853] macvlan0 (unregistering): left allmulticast mode [ 184.640025][ T7857] netlink: 'syz.2.835': attribute type 1 has an invalid length. [ 184.656700][ T7857] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.835'. [ 185.267720][ T7879] netlink: 'syz.0.841': attribute type 10 has an invalid length. [ 185.324677][ T7879] netdevsim netdevsim0 netdevsim0: left allmulticast mode [ 185.414092][ T7879] team0: Device netdevsim0 failed to register rx_handler [ 185.723839][ T7899] bridge0: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 185.784369][ T7899] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.792129][ T7899] bridge0: port 1(bridge_slave_0) entered disabled state [ 185.859400][ T7899] bridge0: left promiscuous mode [ 185.906392][ T7901] netlink: 4 bytes leftover after parsing attributes in process `syz.0.848'. [ 185.971646][ T7897] lo speed is unknown, defaulting to 1000 [ 186.949475][ T7938] veth1_vlan: left promiscuous mode [ 186.963055][ T7938] veth1_vlan: entered promiscuous mode [ 187.009205][ T7938] macvlan1: entered promiscuous mode [ 187.049172][ T7938] team0: Port device macvlan1 added [ 187.206900][ T7933] vlan3: entered promiscuous mode [ 187.249446][ T7933] bond0: (slave vlan3): Enslaving as an active interface with an up link [ 187.422277][ T7948] netlink: 4 bytes leftover after parsing attributes in process `syz.0.865'. [ 187.521422][ T7948] netlink: 4 bytes leftover after parsing attributes in process `syz.0.865'. [ 187.641530][ T7956] Bluetooth: hci3: invalid length 0, exp 2 for type 0 [ 187.811944][ T54] Bluetooth: hci0: Opcode 0x0401 failed: -110 [ 187.819480][ T54] Bluetooth: hci0: command 0x0c20 tx timeout [ 187.949465][ T7962] netlink: 20 bytes leftover after parsing attributes in process `syz.1.870'. [ 187.999038][ T7965] netlink: 32 bytes leftover after parsing attributes in process `syz.4.869'. [ 188.009648][ T7965] tipc: Invalid UDP bearer configuration [ 188.009717][ T7965] tipc: Enabling of bearer rejected, failed to enable media [ 188.210978][ T7978] bridge0: port 2(gretap0) entered blocking state [ 188.225920][ T7978] bridge0: port 2(gretap0) entered disabled state [ 188.245176][ T7978] gretap0: entered allmulticast mode [ 188.253027][ T7978] gretap0: entered promiscuous mode [ 188.262228][ T7978] bridge0: port 2(gretap0) entered blocking state [ 188.268850][ T7978] bridge0: port 2(gretap0) entered listening state [ 188.283012][ T7981] gretap0: left allmulticast mode [ 188.288117][ T7981] gretap0: left promiscuous mode [ 188.299015][ T7981] bridge0: port 2(gretap0) entered disabled state [ 188.650520][ T7988] ieee802154 phy0 wpan0: encryption failed: -90 [ 188.741359][ T7992] bridge0: entered promiscuous mode [ 188.848658][ T7992] netlink: 8 bytes leftover after parsing attributes in process `syz.3.879'. [ 189.143845][ T7991] bridge0: left promiscuous mode [ 189.572831][ T8016] netlink: 8 bytes leftover after parsing attributes in process `syz.0.886'. [ 189.620570][ T8017] netlink: 4 bytes leftover after parsing attributes in process `syz.3.885'. [ 189.652115][ T8019] netlink: 'syz.2.887': attribute type 1 has an invalid length. [ 189.671281][ T8017] netlink: 4 bytes leftover after parsing attributes in process `syz.3.885'. [ 189.702196][ T8017] netlink: 4 bytes leftover after parsing attributes in process `syz.3.885'. [ 189.992922][ T8031] netlink: 40 bytes leftover after parsing attributes in process `syz.2.890'. [ 190.159619][ T8042] netlink: 96 bytes leftover after parsing attributes in process `syz.4.888'. [ 190.384372][ T8045] netlink: 'syz.1.894': attribute type 11 has an invalid length. [ 190.611598][ T8061] netlink: 4 bytes leftover after parsing attributes in process `syz.2.897'. [ 190.668330][ T8061] 8021q: adding VLAN 0 to HW filter on device team1 [ 190.696710][ T8069] netlink: 8 bytes leftover after parsing attributes in process `syz.2.897'. [ 191.033462][ T8081] set match dimension is over the limit! [ 191.082291][ T8087] bridge0: port 4(gretap0) entered blocking state [ 191.119783][ T8087] bridge0: port 4(gretap0) entered disabled state [ 191.141127][ T8087] gretap0: entered allmulticast mode [ 191.191683][ T8087] gretap0: entered promiscuous mode [ 191.358703][ T8088] gretap0: left allmulticast mode [ 191.416286][ T8088] gretap0: left promiscuous mode [ 191.510271][ T8088] bridge0: port 4(gretap0) entered disabled state [ 191.976788][ T8120] netlink: 4 bytes leftover after parsing attributes in process `syz.1.907'. [ 192.757613][ T8157] netlink: 'syz.2.914': attribute type 25 has an invalid length. [ 192.793158][ T8157] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 192.802123][ T8157] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 192.810866][ T8157] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 192.819871][ T8157] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 194.170980][ T8207] lo speed is unknown, defaulting to 1000 [ 194.369368][ T8215] openvswitch: netlink: Flow actions attr not present in new flow. [ 194.448516][ T8217] lo speed is unknown, defaulting to 1000 [ 194.630232][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 195.132550][ T8240] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 195.931545][ T8257] __nla_validate_parse: 5 callbacks suppressed [ 195.931568][ T8257] netlink: 8 bytes leftover after parsing attributes in process `syz.3.942'. [ 196.615992][ T8278] netlink: 4 bytes leftover after parsing attributes in process `syz.3.949'. [ 196.692257][ T5247] Bluetooth: hci1: command 0x0406 tx timeout [ 196.698546][ T5247] Bluetooth: hci0: command 0x0c20 tx timeout [ 196.704857][ T5239] Bluetooth: hci2: command 0x0406 tx timeout [ 196.710986][ T5239] Bluetooth: hci3: command 0x0406 tx timeout [ 196.846356][ T8282] netlink: 28 bytes leftover after parsing attributes in process `syz.4.950'. [ 196.872927][ T8282] netlink: 8 bytes leftover after parsing attributes in process `syz.4.950'. [ 196.882592][ T8282] vlan0: entered promiscuous mode [ 196.970691][ T8290] netlink: 8 bytes leftover after parsing attributes in process `syz.1.953'. [ 197.098761][ T8294] netlink: 4 bytes leftover after parsing attributes in process `syz.1.953'. [ 197.190536][ T8300] netlink: 16 bytes leftover after parsing attributes in process `syz.0.956'. [ 197.322949][ T8303] lo speed is unknown, defaulting to 1000 [ 197.630063][ T8300] netlink: 'syz.0.956': attribute type 10 has an invalid length. [ 198.076955][ T8323] netlink: 4 bytes leftover after parsing attributes in process `syz.3.965'. [ 198.795027][ T8332] netlink: 'syz.3.969': attribute type 5 has an invalid length. [ 199.049064][ T8338] Cannot find add_set index 3 as target [ 199.774057][ T8350] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.974'. [ 199.792802][ T8350] openvswitch: netlink: Tunnel attr 11525 out of range max 16 [ 201.500212][ T8382] bond0: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 202.032515][ T8400] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 202.932851][ T8422] team0: Device vlan2 is already an upper device of the team interface [ 203.002225][ T8425] Bluetooth: hci3: expected 2 bytes, got 7 bytes [ 203.267493][ T8427] vxcan0: entered promiscuous mode [ 203.273553][ T8427] vlan2: entered promiscuous mode [ 203.287993][ T8427] vxcan0: left promiscuous mode [ 203.963710][ T8452] netlink: 'syz.4.1009': attribute type 1 has an invalid length. [ 203.971624][ T8452] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1009'. [ 204.030057][ T8456] netlink: 'syz.3.1011': attribute type 22 has an invalid length. [ 204.070672][ T8456] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1011'. [ 205.317092][ T8495] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1023'. [ 205.355208][ T8495] bond_slave_0: entered promiscuous mode [ 205.361434][ T8495] bond_slave_1: entered promiscuous mode [ 205.367526][ T8495] bridge0: entered promiscuous mode [ 205.407011][ T8495] macvtap1: entered promiscuous mode [ 205.427266][ T8495] bond0: entered promiscuous mode [ 205.452836][ T8495] macvtap1: entered allmulticast mode [ 205.468885][ T8495] bond0: entered allmulticast mode [ 205.479102][ T8495] bond_slave_0: entered allmulticast mode [ 205.493792][ T8495] bond_slave_1: entered allmulticast mode [ 205.510347][ T8495] bridge0: entered allmulticast mode [ 205.526114][ T8501] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 205.532244][ T8495] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 205.554438][ T8496] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1023'. [ 205.571002][ T8496] bond0: left allmulticast mode [ 205.579827][ T8496] bond_slave_0: left allmulticast mode [ 205.586341][ T8496] bond_slave_1: left allmulticast mode [ 205.592675][ T8496] bridge0: left allmulticast mode [ 205.598047][ T8496] bond0: left promiscuous mode [ 205.604860][ T8496] bond_slave_0: left promiscuous mode [ 205.610366][ T8496] bond_slave_1: left promiscuous mode [ 205.616287][ T8496] bridge0: left promiscuous mode [ 205.633416][ T8496] macvtap1: left promiscuous mode [ 205.639325][ T8496] macvtap1: left allmulticast mode [ 206.017255][ T8512] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1028'. [ 206.124308][ T8516] xt_hashlimit: max too large, truncated to 1048576 [ 206.454000][ T8523] sctp: [Deprecated]: syz.4.1031 (pid 8523) Use of int in max_burst socket option deprecated. [ 206.454000][ T8523] Use struct sctp_assoc_value instead [ 206.694498][ T8535] netlink: 'syz.1.1034': attribute type 10 has an invalid length. [ 206.755806][ T8535] team0: Port device netdevsim0 added [ 206.809732][ T8532] netlink: 'syz.1.1034': attribute type 10 has an invalid length. [ 206.819283][ T8532] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 206.864294][ T8532] team0: Port device netdevsim0 removed [ 206.878260][ T8531] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1036'. [ 207.269850][ T8554] syz.4.1042[8554] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 207.270244][ T8554] syz.4.1042[8554] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 207.482945][ T8564] Cannot find del_set index 0 as target [ 207.623927][ T8566] netlink: 'syz.4.1047': attribute type 10 has an invalid length. [ 207.675194][ T8566] netlink: 'syz.4.1047': attribute type 1 has an invalid length. [ 207.697992][ T8566] netlink: 616 bytes leftover after parsing attributes in process `syz.4.1047'. [ 207.722180][ T8566] netlink: 'syz.4.1047': attribute type 10 has an invalid length. [ 207.769008][ T8566] team0: Port device netdevsim0 removed [ 207.799528][ T8566] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 208.140800][ T8585] netlink: 'syz.1.1053': attribute type 1 has an invalid length. [ 208.153162][ T8585] netlink: 'syz.1.1053': attribute type 1 has an invalid length. [ 208.170650][ T8585] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1053'. [ 208.417927][ T8595] netlink: 188 bytes leftover after parsing attributes in process `syz.4.1057'. [ 208.431207][ T8595] netlink: 'syz.4.1057': attribute type 1 has an invalid length. [ 208.630059][ T8600] --map-set only usable from mangle table [ 208.813678][ T8605] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1061'. [ 208.848689][ T8605] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 208.861481][ T8605] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 209.126156][ T8617] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1065'. [ 210.294859][ T8654] Bluetooth: hci3: invalid length 0, exp 2 for type 18 [ 210.426080][ T8660] vlan4: entered promiscuous mode [ 210.445678][ T8660] syz_tun: entered promiscuous mode [ 210.478093][ T8660] team0: Port device vlan4 added [ 210.557710][ T8667] veth1_macvtap: left promiscuous mode [ 210.924415][ T8675] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1088'. [ 210.992031][ T8675] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1088'. [ 211.019584][ T8675] block nbd4: Unsupported socket: shutdown callout must be supported. [ 211.153180][ T8685] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1090'. [ 211.411399][ T8696] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1095'. [ 211.622837][ T8701] sctp: [Deprecated]: syz.2.1095 (pid 8701) Use of struct sctp_assoc_value in delayed_ack socket option. [ 211.622837][ T8701] Use struct sctp_sack_info instead [ 212.065490][ T8703] x_tables: duplicate underflow at hook 2 [ 212.527896][ T8720] validate_nla: 1 callbacks suppressed [ 212.527922][ T8720] netlink: 'syz.1.1103': attribute type 4 has an invalid length. [ 212.562319][ T8720] netlink: 'syz.1.1103': attribute type 4 has an invalid length. [ 212.582018][ T8720] netlink: 126032 bytes leftover after parsing attributes in process `syz.1.1103'. [ 212.595149][ T8710] lo speed is unknown, defaulting to 1000 [ 212.645595][ T8714] netlink: 188 bytes leftover after parsing attributes in process `syz.3.1099'. [ 212.685245][ T8714] netlink: 'syz.3.1099': attribute type 1 has an invalid length. [ 212.765731][ T8724] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1104'. [ 212.806199][ T8726] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1105'. [ 212.995516][ T8729] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1106'. [ 213.026183][ T8731] netlink: 'syz.1.1107': attribute type 10 has an invalid length. [ 213.096128][ T8731] 8021q: adding VLAN 0 to HW filter on device team0 [ 213.108236][ T8731] bond0: (slave team0): Enslaving as an active interface with an up link [ 213.446602][ T942] IPVS: starting estimator thread 0... [ 213.513165][ T8742] tipc: Started in network mode [ 213.521973][ T8742] tipc: Node identity ac1414aa, cluster identity 4711 [ 213.539689][ T8742] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 213.552240][ T8744] IPVS: using max 16 ests per chain, 38400 per kthread [ 213.569820][ T8742] tipc: Enabled bearer , priority 10 [ 213.672097][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 213.822393][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 213.886011][ T8755] netlink: 'syz.3.1116': attribute type 7 has an invalid length. [ 213.949030][ T8755] netlink: 'syz.3.1116': attribute type 39 has an invalid length. [ 213.961860][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 214.083826][ T8760] bridge2: port 1(gretap1) entered blocking state [ 214.101838][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 214.127740][ T8760] bridge2: port 1(gretap1) entered disabled state [ 214.140846][ T8760] gretap1: entered allmulticast mode [ 214.151673][ T8760] gretap1: entered promiscuous mode [ 214.173773][ T8762] netlink: 'syz.3.1116': attribute type 7 has an invalid length. [ 214.190585][ T8762] netlink: 'syz.3.1116': attribute type 39 has an invalid length. [ 214.241957][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 214.381855][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 214.412945][ T8771] tun0: tun_chr_ioctl cmd 1074025677 [ 214.418703][ T8771] tun0: linktype set to 776 [ 214.521890][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 214.586684][ T8777] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1123'. [ 214.662477][ T58] tipc: Node number set to 2886997162 [ 214.801935][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 214.908872][ T8790] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1129'. [ 215.071962][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 215.145422][ T8799] Cannot find add_set index 0 as target [ 215.579788][ T8811] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1137'. [ 215.624809][ T8811] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1137'. [ 215.635137][ T8815] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1137'. [ 215.647443][ T8815] ipt_REJECT: TCP_RESET invalid for non-tcp [ 215.882494][ T8798] delete_channel: no stack [ 216.167877][ T8822] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1141'. [ 216.284124][ T8826] Cannot find set identified by id 0 to match [ 216.807905][ T8841] lo speed is unknown, defaulting to 1000 [ 216.850571][ T8847] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1152'. [ 216.860212][ T8847] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1152'. [ 216.944498][ T8849] netlink: 'syz.1.1153': attribute type 21 has an invalid length. [ 216.971295][ T8849] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1153'. [ 217.011908][ T8849] netlink: 'syz.1.1153': attribute type 5 has an invalid length. [ 217.057525][ T8849] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1153'. [ 217.190171][ T8851] vcan0: entered promiscuous mode [ 217.212226][ T8851] vlan4: entered promiscuous mode [ 217.217522][ T8851] vlan4: entered allmulticast mode [ 217.240071][ T8851] vcan0: entered allmulticast mode [ 217.264412][ T8851] vcan0: left allmulticast mode [ 217.275462][ T8851] vcan0: left promiscuous mode [ 217.523407][ T54] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 217.539365][ T54] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 217.549494][ T54] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 217.558672][ T54] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 217.568899][ T54] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 217.578669][ T54] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 217.606454][ T8859] bridge0: port 2(gretap0) entered blocking state [ 217.613246][ T8859] bridge0: port 2(gretap0) entered disabled state [ 217.619925][ T8859] gretap0: entered allmulticast mode [ 217.663386][ T8859] gretap0: entered promiscuous mode [ 217.669364][ T8859] bridge0: port 2(gretap0) entered blocking state [ 217.676016][ T8859] bridge0: port 2(gretap0) entered listening state [ 217.704073][ T8865] gretap0: left allmulticast mode [ 217.727008][ T8865] gretap0: left promiscuous mode [ 217.786136][ T8865] bridge0: port 2(gretap0) entered disabled state [ 217.836625][ T8857] lo speed is unknown, defaulting to 1000 [ 218.212053][ T8879] bond2: entered allmulticast mode [ 218.270404][ T8875] bond2 (unregistering): left allmulticast mode [ 218.279536][ T8875] bond2 (unregistering): Released all slaves [ 218.404990][ T8884] pim6reg: entered allmulticast mode [ 218.692004][ C1] net_ratelimit: 4 callbacks suppressed [ 218.692044][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 218.725435][ T8886] 8021q: adding VLAN 0 to HW filter on device team2 [ 218.869230][ T8857] chnl_net:caif_netlink_parms(): no params data found [ 219.130656][ T8900] vlan4: entered promiscuous mode [ 219.154047][ T8900] vlan4: entered allmulticast mode [ 219.159248][ T8900] dummy0: entered allmulticast mode [ 219.173685][ T8900] dummy0: left allmulticast mode [ 219.219866][ T8904] macvtap1: entered promiscuous mode [ 219.226998][ T8904] macvtap1: entered allmulticast mode [ 219.232790][ T8904] syz_tun: entered allmulticast mode [ 219.239909][ T8905] netlink: 'syz.1.1171': attribute type 10 has an invalid length. [ 219.271464][ T8905] bond0: (slave team0): Releasing backup interface [ 219.282730][ T8905] batman_adv: batadv0: Adding interface: team0 [ 219.289044][ T8905] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 219.319099][ T8905] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 219.339584][ T8906] syz_tun: left allmulticast mode [ 219.348047][ T8907] netlink: 'syz.1.1171': attribute type 10 has an invalid length. [ 219.357308][ T8907] team0: entered promiscuous mode [ 219.381033][ T8907] team_slave_0: entered promiscuous mode [ 219.387270][ T8907] team_slave_1: entered promiscuous mode [ 219.398167][ T8907] 8021q: adding VLAN 0 to HW filter on device team0 [ 219.428589][ T8907] batman_adv: batadv0: Interface activated: team0 [ 219.448370][ T8907] batman_adv: batadv0: Interface deactivated: team0 [ 219.480787][ T8907] batman_adv: batadv0: Removing interface: team0 [ 219.510473][ T8907] bridge0: port 3(team0) entered blocking state [ 219.524846][ T8907] bridge0: port 3(team0) entered disabled state [ 219.531605][ T8907] team0: entered allmulticast mode [ 219.539137][ T8907] team_slave_0: entered allmulticast mode [ 219.548042][ T8907] team_slave_1: entered allmulticast mode [ 219.652092][ T5240] Bluetooth: hci5: command tx timeout [ 219.727498][ T8857] bridge0: port 1(bridge_slave_0) entered blocking state [ 219.742061][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 219.753700][ T8857] bridge0: port 1(bridge_slave_0) entered disabled state [ 219.761060][ T8857] bridge_slave_0: entered allmulticast mode [ 219.805894][ T8857] bridge_slave_0: entered promiscuous mode [ 219.818229][ T8928] netlink: 'syz.4.1178': attribute type 1 has an invalid length. [ 219.828279][ T8857] bridge0: port 2(bridge_slave_1) entered blocking state [ 219.836132][ T8857] bridge0: port 2(bridge_slave_1) entered disabled state [ 219.847878][ T8857] bridge_slave_1: entered allmulticast mode [ 219.857881][ T8857] bridge_slave_1: entered promiscuous mode [ 219.867343][ T8927] bridge_slave_1: left allmulticast mode [ 219.879945][ T8927] bridge_slave_1: left promiscuous mode [ 219.886401][ T8927] bridge0: port 2(bridge_slave_1) entered disabled state [ 220.018854][ T8857] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 220.044569][ T8933] netlink: 'syz.1.1180': attribute type 10 has an invalid length. [ 220.091671][ T8933] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode [ 220.099774][ T8933] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode [ 220.114064][ T8933] team0: Port device wlan1 added [ 220.125003][ T8857] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 220.151526][ T8936] __nla_validate_parse: 7 callbacks suppressed [ 220.151547][ T8936] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1179'. [ 220.197085][ T8936] 8021q: adding VLAN 0 to HW filter on device team2 [ 220.240991][ T8933] netlink: 'syz.1.1180': attribute type 10 has an invalid length. [ 220.280226][ T8934] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1179'. [ 220.319645][ T8857] team0: Port device team_slave_0 added [ 220.330032][ T8857] team0: Port device team_slave_1 added [ 220.401417][ T8857] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 220.416289][ T8857] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 220.454100][ T8857] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 220.470315][ T8857] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 220.487535][ T8857] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 220.528560][ T8857] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 220.685544][ T8857] hsr_slave_0: entered promiscuous mode [ 220.720200][ T8857] hsr_slave_1: entered promiscuous mode [ 220.754991][ T8857] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 220.763344][ T8857] Cannot create hsr debugfs directory [ 220.772004][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 221.363842][ T8960] netlink: 'syz.1.1189': attribute type 1 has an invalid length. [ 221.392875][ T8857] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.416651][ T8957] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1188'. [ 221.426606][ T8957] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1188'. [ 221.565359][ T8857] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.679711][ T8964] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1192'. [ 221.736213][ T54] Bluetooth: hci5: command tx timeout [ 221.790679][ T8857] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.855151][ T8971] vlan4: entered promiscuous mode [ 221.860597][ T8971] vlan4: entered allmulticast mode [ 221.866377][ T8971] team0: entered allmulticast mode [ 221.871646][ T8971] team_slave_1: entered allmulticast mode [ 221.880437][ T8971] batadv0: entered allmulticast mode [ 221.901135][ T8971] team0: left allmulticast mode [ 221.910327][ T8971] team_slave_1: left allmulticast mode [ 221.930731][ T8971] batadv0: left allmulticast mode [ 222.084270][ T8857] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.410592][ T8857] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 222.450469][ T8857] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 222.581904][ T8857] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 222.627460][ T8857] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 222.747078][ T8997] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1202'. [ 222.970889][ T9003] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1204'. [ 223.057534][ T8857] 8021q: adding VLAN 0 to HW filter on device bond0 [ 223.098719][ T9008] siw: device registration error -23 [ 223.167793][ T8857] 8021q: adding VLAN 0 to HW filter on device team0 [ 223.220562][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 223.227844][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 223.291158][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 223.298456][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 223.440101][ T8857] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 223.731984][ T5240] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 223.736354][ T54] Bluetooth: hci0: command 0x0c20 tx timeout [ 223.744501][ T5240] Bluetooth: hci0: Opcode 0x0401 failed: -110 [ 223.809494][ T9033] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1211'. [ 223.819012][ T5240] Bluetooth: hci5: command tx timeout [ 224.113896][ T9039] bridge0: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 224.130858][ T9039] bridge0: entered allmulticast mode [ 224.141258][ T8857] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 224.243935][ T8857] veth0_vlan: entered promiscuous mode [ 224.279611][ T8857] veth1_vlan: entered promiscuous mode [ 224.452893][ T8857] veth0_macvtap: entered promiscuous mode [ 224.480938][ T8857] veth1_macvtap: entered promiscuous mode [ 224.557929][ T8857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 224.579666][ T9052] siw: device registration error -23 [ 224.591552][ T8857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.629285][ T8857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 224.664341][ T8857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.677388][ T8857] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 224.704877][ T8857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 224.747477][ T8857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.776900][ T8857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 224.800898][ T8857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.820880][ T8857] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 224.840108][ T9056] netlink: 'syz.4.1218': attribute type 10 has an invalid length. [ 224.900751][ T9056] wlan1: mtu less than device minimum [ 224.929292][ T9061] netlink: 'syz.4.1218': attribute type 10 has an invalid length. [ 224.938807][ T9061] wlan1: mtu less than device minimum [ 224.949709][ T9063] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1220'. [ 224.998207][ T9063] 8021q: adding VLAN 0 to HW filter on device team1 [ 225.014195][ T8857] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.030334][ T8857] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.049903][ T8857] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.068551][ T8857] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.081603][ T9062] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1220'. [ 225.232731][ T9067] macvlan1: entered promiscuous mode [ 225.238913][ T9067] macvlan1: entered allmulticast mode [ 225.275064][ T9067] veth1_vlan: entered allmulticast mode [ 225.292361][ T9067] team0: Port device macvlan1 added [ 225.350266][ T9069] bond0: (slave vlan3): Enslaving as an active interface with an up link [ 225.543651][ T2480] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 225.575198][ T2480] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 225.688581][ T9076] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1226'. [ 225.688737][ T1064] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 225.734174][ T1064] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 225.769211][ T9081] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1227'. [ 225.779064][ T9079] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1223'. [ 225.812525][ T54] Bluetooth: hci0: command 0x0c20 tx timeout [ 225.818688][ T5240] Bluetooth: hci0: Opcode 0x0401 failed: -110 [ 225.893230][ T5240] Bluetooth: hci5: command tx timeout [ 226.189338][ T9094] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1232'. [ 226.296882][ T9094] 8021q: adding VLAN 0 to HW filter on device team2 [ 226.322052][ T9096] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1232'. [ 226.513676][ T9087] syz.0.1149[9087] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 226.513862][ T9087] syz.0.1149[9087] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 226.844354][ T9101] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 226.869407][ T9100] bond0: (slave bond_slave_0): Releasing backup interface [ 226.910822][ T9087] syz.0.1149[9087] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 226.910992][ T9087] syz.0.1149[9087] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 226.985476][ T9099] (unnamed net_device) (uninitialized): option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 227.071431][ T9087] pim6reg1: entered promiscuous mode [ 227.077824][ T9087] pim6reg1: entered allmulticast mode [ 227.500643][ T9118] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1237'. [ 227.573997][ T9123] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1239'. [ 227.601025][ T9118] bond1: entered allmulticast mode [ 227.628382][ T9118] bond1 (unregistering): left allmulticast mode [ 227.644378][ T9118] bond1 (unregistering): Released all slaves [ 227.740466][ T9129] pim6reg: entered allmulticast mode [ 227.747101][ T9128] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1240'. [ 227.759517][ T9128] tipc: Invalid UDP bearer configuration [ 227.759577][ T9128] tipc: Enabling of bearer rejected, failed to enable media [ 227.891862][ T5240] Bluetooth: hci0: command 0x0c20 tx timeout [ 227.903284][ T9132] netlink: 'syz.3.1242': attribute type 10 has an invalid length. [ 228.055088][ T9138] netlink: 'syz.3.1242': attribute type 10 has an invalid length. [ 228.850298][ T9155] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1249'. [ 228.916519][ T9155] 8021q: adding VLAN 0 to HW filter on device team3 [ 228.934540][ T9157] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1249'. [ 229.136777][ T9163] 8021q: adding VLAN 0 to HW filter on device team1 [ 229.407496][ T9171] 8021q: adding VLAN 0 to HW filter on device team2 [ 229.713664][ T9184] netlink: 'syz.2.1262': attribute type 10 has an invalid length. [ 229.811535][ T9184] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode [ 229.855067][ T9184] team0: Port device wlan1 added [ 229.867330][ T9190] netlink: 'syz.2.1262': attribute type 10 has an invalid length. [ 230.129604][ T9192] 8021q: adding VLAN 0 to HW filter on device team4 [ 230.171154][ T9199] syz.1.1267[9199] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 230.172547][ T9199] syz.1.1267[9199] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 230.202273][ T9199] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 230.258919][ T9204] syz.1.1267[9204] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 230.259101][ T9204] syz.1.1267[9204] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 230.311117][ T9199] pim6reg1: entered promiscuous mode [ 230.328707][ T9199] pim6reg1: entered allmulticast mode [ 230.494403][ T9207] 8021q: adding VLAN 0 to HW filter on device team3 [ 230.674126][ T9217] netlink: 'syz.1.1271': attribute type 25 has an invalid length. [ 230.710475][ T9217] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 230.719619][ T9217] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 230.728931][ T9217] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 230.737810][ T9217] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 230.813620][ T9215] lo speed is unknown, defaulting to 1000 [ 230.986823][ T9226] __nla_validate_parse: 12 callbacks suppressed [ 230.986848][ T9226] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1274'. [ 231.003372][ T9226] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1274'. [ 231.762267][ T9240] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1281'. [ 231.858023][ T9240] 8021q: adding VLAN 0 to HW filter on device team3 [ 231.887584][ T9241] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1281'. [ 232.179670][ T9252] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1294'. [ 232.242838][ T9252] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1294'. [ 232.729797][ T9261] netlink: 'syz.0.1284': attribute type 10 has an invalid length. [ 232.888623][ T9261] team0: Port device wlan1 added [ 232.921880][ T9266] netlink: 'syz.0.1284': attribute type 10 has an invalid length. [ 233.088092][ T9263] lo speed is unknown, defaulting to 1000 [ 233.530032][ T9283] (unnamed net_device) (uninitialized): option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 233.616514][ T9283] bond0: (slave bond_slave_0): Releasing backup interface [ 235.588500][ T9346] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1317'. [ 235.662921][ T9351] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1317'. [ 235.750022][ T9354] netlink: 'syz.3.1319': attribute type 10 has an invalid length. [ 235.893456][ T9358] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1320'. [ 235.987089][ T9361] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1332'. [ 236.309091][ T9374] do_dccp_getsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 236.712711][ T9387] netlink: 'syz.2.1329': attribute type 4 has an invalid length. [ 236.910620][ T9389] netlink: 'syz.0.1328': attribute type 10 has an invalid length. [ 236.937822][ T9389] netlink: 'syz.0.1328': attribute type 10 has an invalid length. [ 236.969662][ T9398] netlink: 'syz.1.1333': attribute type 5 has an invalid length. [ 237.048695][ T9400] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1334'. [ 237.142780][ T9400] 8021q: adding VLAN 0 to HW filter on device team4 [ 237.151416][ T9401] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1334'. [ 237.718418][ T9422] netlink: 'syz.4.1344': attribute type 10 has an invalid length. [ 237.838641][ T9422] 8021q: adding VLAN 0 to HW filter on device team0 [ 237.862874][ T9422] bond0: (slave team0): Enslaving as an active interface with an up link [ 237.956308][ T9429] pim6reg1: entered promiscuous mode [ 237.968753][ T9429] pim6reg1: entered allmulticast mode [ 238.083240][ T9434] netlink: 'syz.4.1347': attribute type 5 has an invalid length. [ 238.296106][ T9441] team0: Device vlan4 is already an upper device of the team interface [ 238.637633][ T9451] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1352'. [ 238.688167][ T9451] 8021q: adding VLAN 0 to HW filter on device team3 [ 238.721398][ T9451] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1352'. [ 238.834870][ T9458] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1351'. [ 240.115591][ T9494] IPv6: Can't replace route, no match found [ 240.323853][ T9498] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1365'. [ 240.477429][ T9498] 8021q: adding VLAN 0 to HW filter on device team5 [ 240.499636][ T9504] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1365'. [ 240.630294][ T9514] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1371'. [ 241.015995][ T9517] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1385'. [ 241.036275][ T9522] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 241.072236][ T9522] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 241.098158][ T9519] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 241.125133][ T9517] 8021q: adding VLAN 0 to HW filter on device team4 [ 241.135999][ T9523] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1385'. [ 241.700751][ T9536] netlink: 'syz.1.1378': attribute type 6 has an invalid length. [ 242.391248][ T9547] netlink: 'syz.2.1384': attribute type 5 has an invalid length. [ 242.448050][ T9553] netlink: 'syz.4.1387': attribute type 4 has an invalid length. [ 242.557204][ T9544] macvlan2: entered allmulticast mode [ 242.563566][ T9544] mac80211_hwsim hwsim14 wlan0: entered promiscuous mode [ 242.571162][ T9544] mac80211_hwsim hwsim14 wlan0: entered allmulticast mode [ 242.589157][ T9544] team0: Port device macvlan2 added [ 242.599783][ T9558] bond0: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 242.780281][ T9561] __nla_validate_parse: 1 callbacks suppressed [ 242.780305][ T9561] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1389'. [ 242.828869][ T9561] 8021q: adding VLAN 0 to HW filter on device team5 [ 242.841083][ T9564] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1389'. [ 243.045985][ T9568] xt_hashlimit: max too large, truncated to 1048576 [ 244.264239][ T9592] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1409'. [ 244.349875][ T9592] 8021q: adding VLAN 0 to HW filter on device team6 [ 244.379532][ T9594] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1409'. [ 244.720289][ T9600] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1411'. [ 244.805576][ T9600] 8021q: adding VLAN 0 to HW filter on device team7 [ 244.836459][ T9601] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1411'. [ 245.023631][ T9604] netlink: 'syz.2.1401': attribute type 10 has an invalid length. [ 245.117654][ T9607] netlink: 'syz.4.1402': attribute type 22 has an invalid length. [ 245.152685][ T9607] netlink: 2 bytes leftover after parsing attributes in process `syz.4.1402'. [ 245.246473][ T9609] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 245.332974][ T9614] sctp: [Deprecated]: syz.2.1404 (pid 9614) Use of struct sctp_assoc_value in delayed_ack socket option. [ 245.332974][ T9614] Use struct sctp_sack_info instead [ 245.429420][ T9619] netlink: 'syz.4.1405': attribute type 10 has an invalid length. [ 245.453072][ T9619] bond0: (slave netdevsim0): Releasing backup interface [ 245.466069][ T9619] team0: Port device netdevsim0 added [ 245.544872][ T9623] netlink: 'syz.1.1406': attribute type 10 has an invalid length. [ 245.554106][ T9623] netdevsim netdevsim1 netdevsim0: left allmulticast mode [ 245.572787][ T9623] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 245.580900][ T9623] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 245.600933][ T9623] team0: Port device netdevsim0 added [ 245.611432][ T9615] netlink: 'syz.4.1405': attribute type 10 has an invalid length. [ 245.622213][ T9615] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 245.629860][ T9624] netlink: 'syz.1.1406': attribute type 1 has an invalid length. [ 245.649608][ T9624] netlink: 616 bytes leftover after parsing attributes in process `syz.1.1406'. [ 245.659499][ T9615] team0: Port device netdevsim0 removed [ 245.673588][ T9620] bond0: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 245.698962][ T9623] netlink: 'syz.1.1406': attribute type 10 has an invalid length. [ 245.709972][ T9626] xt_hashlimit: max too large, truncated to 1048576 [ 245.719120][ T9623] netdevsim netdevsim1 netdevsim0: left allmulticast mode [ 245.729629][ T9623] team0: Failed to send options change via netlink (err -105) [ 245.737925][ T9623] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 245.749211][ T9623] team0: Port device netdevsim0 removed [ 245.759190][ T9623] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 245.769533][ T9623] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 246.445416][ T9637] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1414'. [ 246.614528][ T9637] 8021q: adding VLAN 0 to HW filter on device team6 [ 246.660331][ T9643] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1414'. [ 246.739608][ T9646] netlink: 'syz.1.1419': attribute type 10 has an invalid length. [ 246.778400][ T9646] team0: left allmulticast mode [ 246.792245][ T9646] team_slave_0: left allmulticast mode [ 246.797812][ T9646] team_slave_1: left allmulticast mode [ 246.805846][ T9646] mac80211_hwsim hwsim7 wlan1: left allmulticast mode [ 246.813828][ T9646] macvlan1: left allmulticast mode [ 246.819130][ T9646] veth1_vlan: left allmulticast mode [ 246.826574][ T9646] team0: left promiscuous mode [ 246.831501][ T9646] team_slave_0: left promiscuous mode [ 246.839574][ T9646] team_slave_1: left promiscuous mode [ 246.846287][ T9646] mac80211_hwsim hwsim7 wlan1: left promiscuous mode [ 246.853794][ T9646] macvlan1: left promiscuous mode [ 246.859684][ T9646] bridge0: port 3(team0) entered disabled state [ 246.875627][ T9646] 8021q: adding VLAN 0 to HW filter on device team0 [ 246.885704][ T9646] bond0: (slave team0): Enslaving as an active interface with an up link [ 248.282022][ T9675] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1429'. [ 248.339380][ T9675] 8021q: adding VLAN 0 to HW filter on device team8 [ 248.464837][ T9683] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1431'. [ 248.516535][ T9666] syz.4.1423 (9666) used greatest stack depth: 18128 bytes left [ 248.549390][ T9683] 8021q: adding VLAN 0 to HW filter on device team4 [ 248.622648][ T9687] netlink: 'syz.0.1426': attribute type 10 has an invalid length. [ 248.642659][ T9687] team0: Port device netdevsim0 added [ 248.666948][ T9687] netlink: 'syz.0.1426': attribute type 10 has an invalid length. [ 248.691550][ T9687] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 248.824929][ T9687] team0: Port device netdevsim0 removed [ 249.030089][ T9693] netlink: 'syz.2.1443': attribute type 10 has an invalid length. [ 249.282150][ T9701] netlink: 'syz.2.1435': attribute type 4 has an invalid length. [ 249.305571][ T9701] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1435'. [ 249.580640][ T9712] netlink: 'syz.3.1432': attribute type 4 has an invalid length. [ 249.659174][ T9717] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1438'. [ 249.676460][ T9717] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 249.689190][ T9717] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 249.754834][ T9721] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1441'. [ 249.790017][ T9721] 8021q: adding VLAN 0 to HW filter on device team9 [ 250.017268][ T9727] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1444'. [ 250.049820][ T9727] 8021q: adding VLAN 0 to HW filter on device team10 [ 250.704996][ T9735] netlink: 'syz.2.1447': attribute type 10 has an invalid length. [ 251.042959][ T9747] SET target dimension over the limit! [ 251.130463][ T9752] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1453'. [ 251.356010][ T9757] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1457'. [ 251.525328][ T9762] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1458'. [ 251.591981][ T9762] 8021q: adding VLAN 0 to HW filter on device team1 [ 251.840294][ T9765] netlink: 'syz.3.1460': attribute type 10 has an invalid length. [ 252.016199][ T9767] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1461'. [ 252.198290][ T9767] macvtap2: entered promiscuous mode [ 252.204933][ T9767] macvtap2: entered allmulticast mode [ 252.210373][ T9767] bond0: entered allmulticast mode [ 252.229663][ T9767] bond_slave_0: entered allmulticast mode [ 252.253226][ T9767] bond_slave_1: entered allmulticast mode [ 252.259799][ T9767] vlan2: entered allmulticast mode [ 252.269819][ T9767] nlmon0: entered allmulticast mode [ 252.277867][ T9767] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 252.314216][ T9767] team0: entered allmulticast mode [ 252.319695][ T9767] team_slave_0: entered allmulticast mode [ 252.328123][ T9767] team_slave_1: entered allmulticast mode [ 252.356147][ T9767] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 252.377064][ T9767] macvlan1: entered allmulticast mode [ 252.439266][ T9767] veth1_vlan: entered allmulticast mode [ 252.457624][ T9767] vlan4: entered allmulticast mode [ 252.479817][ T9767] syz_tun: entered allmulticast mode [ 252.497338][ T9767] vlan3: entered allmulticast mode [ 252.515579][ T9767] 8021q: adding VLAN 0 to HW filter on device macvtap2 [ 252.535747][ T9772] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 252.548277][ T9772] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 252.569059][ T9773] bond0: left allmulticast mode [ 252.579667][ T9773] bond_slave_0: left allmulticast mode [ 252.586204][ T9773] bond_slave_1: left allmulticast mode [ 252.592573][ T9773] vlan2: left allmulticast mode [ 252.597647][ T9773] nlmon0: left allmulticast mode [ 252.604332][ T9773] netdevsim netdevsim3 netdevsim0: left allmulticast mode [ 252.611653][ T9773] vlan3: left allmulticast mode [ 252.618293][ T9773] team0: left allmulticast mode [ 252.624079][ T9773] team_slave_0: left allmulticast mode [ 252.629975][ T9773] team_slave_1: left allmulticast mode [ 252.636967][ T9773] mac80211_hwsim hwsim5 wlan1: left allmulticast mode [ 252.644928][ T9773] macvlan1: left allmulticast mode [ 252.650307][ T9773] veth1_vlan: left allmulticast mode [ 252.659847][ T9773] vlan4: left allmulticast mode [ 252.666447][ T9773] syz_tun: left allmulticast mode [ 252.675392][ T9773] macvtap2: left promiscuous mode [ 252.680869][ T9773] macvtap2: left allmulticast mode [ 253.194421][ T9798] Bluetooth: hci3: invalid length 0, exp 2 for type 18 [ 253.293503][ T9805] netlink: 'syz.1.1471': attribute type 10 has an invalid length. [ 253.394563][ T9807] __nla_validate_parse: 4 callbacks suppressed [ 253.394588][ T9807] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1472'. [ 253.758191][ T9819] netlink: 'syz.3.1473': attribute type 10 has an invalid length. [ 253.799696][ T9819] bond0: (slave netdevsim0): Releasing backup interface [ 253.825127][ T9819] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 253.855373][ T9819] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 253.864161][ T9819] team0: Port device netdevsim0 added [ 253.875366][ T9825] netlink: 'syz.3.1473': attribute type 10 has an invalid length. [ 253.883826][ T9825] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 253.894231][ T9825] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 253.950989][ T9825] team0: Port device netdevsim0 removed [ 254.064785][ T9830] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1480'. [ 254.263584][ T9835] bond0: entered promiscuous mode [ 254.276670][ T9835] bond_slave_1: entered promiscuous mode [ 254.287605][ T9835] bridge0: entered promiscuous mode [ 254.295771][ T9835] team0: entered promiscuous mode [ 254.300890][ T9835] team_slave_0: entered promiscuous mode [ 254.307886][ T9835] team_slave_1: entered promiscuous mode [ 254.315955][ T9829] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1479'. [ 254.336534][ T9837] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1482'. [ 254.355131][ T9835] vlan2: entered promiscuous mode [ 254.389984][ T9837] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 254.392230][ T9833] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1479'. [ 254.408993][ T9837] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 254.454760][ T9834] bond0: left promiscuous mode [ 254.459685][ T9834] bond_slave_1: left promiscuous mode [ 254.466373][ T9834] bridge0: left promiscuous mode [ 254.472315][ T9834] team0: left promiscuous mode [ 254.477141][ T9834] team_slave_0: left promiscuous mode [ 254.491026][ T9834] team_slave_1: left promiscuous mode [ 254.776718][ T9844] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1488'. [ 254.877575][ T9846] Bluetooth: hci3: invalid length 0, exp 2 for type 18 [ 255.228781][ T9859] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1493'. [ 255.298509][ T9859] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1493'. [ 255.654996][ T9873] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1497'. [ 255.705657][ T9873] bond_slave_1: entered promiscuous mode [ 255.712626][ T9873] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 255.729522][ T9873] macvtap1: entered promiscuous mode [ 255.744143][ T9873] bond0: entered promiscuous mode [ 255.755682][ T9873] bridge0: entered promiscuous mode [ 255.762878][ T9873] vlan3: entered promiscuous mode [ 255.768419][ T9873] team0: entered promiscuous mode [ 255.777112][ T9873] team_slave_0: entered promiscuous mode [ 255.786592][ T9873] team_slave_1: entered promiscuous mode [ 255.795696][ T9873] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode [ 255.803314][ T9873] macvlan1: entered promiscuous mode [ 255.810333][ T9873] macvtap1: entered allmulticast mode [ 255.824579][ T9873] bond0: entered allmulticast mode [ 255.824946][ T9880] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1499'. [ 255.830050][ T9873] bond_slave_1: entered allmulticast mode [ 255.845553][ T9873] vlan3: entered allmulticast mode [ 255.850924][ T9873] team0: entered allmulticast mode [ 255.856726][ T9873] team_slave_0: entered allmulticast mode [ 255.862923][ T9873] team_slave_1: entered allmulticast mode [ 255.868955][ T9873] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode [ 255.886374][ T9873] macvlan1: entered allmulticast mode [ 255.900494][ T9873] veth1_vlan: entered allmulticast mode [ 255.908149][ T9873] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 255.921912][ T9873] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 255.950428][ T9878] bond0: left allmulticast mode [ 255.966661][ T9878] bond_slave_1: left allmulticast mode [ 255.980077][ T9878] vlan3: left allmulticast mode [ 255.991327][ T9878] netdevsim netdevsim1 netdevsim0: left allmulticast mode [ 255.993023][ T9886] sctp: [Deprecated]: syz.3.1492 (pid 9886) Use of struct sctp_assoc_value in delayed_ack socket option. [ 255.993023][ T9886] Use struct sctp_sack_info instead [ 255.999616][ T9878] team0: left allmulticast mode [ 256.029421][ T9878] team_slave_0: left allmulticast mode [ 256.035677][ T9878] team_slave_1: left allmulticast mode [ 256.038661][ T9867] sctp: [Deprecated]: syz.0.1484 (pid 9867) Use of int in max_burst socket option deprecated. [ 256.038661][ T9867] Use struct sctp_assoc_value instead [ 256.041473][ T9878] mac80211_hwsim hwsim7 wlan1: left allmulticast mode [ 256.067217][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.085073][ T9878] macvlan1: left allmulticast mode [ 256.090628][ T9878] veth1_vlan: left allmulticast mode [ 256.101413][ T9878] bond0: left promiscuous mode [ 256.109144][ T9878] bridge0: left promiscuous mode [ 256.123617][ T9878] vlan3: left promiscuous mode [ 256.130568][ T9878] team0: left promiscuous mode [ 256.137913][ T9878] team_slave_0: left promiscuous mode [ 256.144535][ T9878] team_slave_1: left promiscuous mode [ 256.150426][ T9878] mac80211_hwsim hwsim7 wlan1: left promiscuous mode [ 256.158080][ T9878] macvlan1: left promiscuous mode [ 256.164770][ T9878] bond_slave_1: left promiscuous mode [ 256.170762][ T9878] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 256.179108][ T9878] macvtap1: left promiscuous mode [ 256.194912][ T9878] macvtap1: left allmulticast mode [ 256.249551][ T9877] bridge5: entered promiscuous mode [ 256.259268][ T9877] bridge5: entered allmulticast mode [ 256.673160][ T9899] wg2: entered promiscuous mode [ 256.681649][ T9899] wg2: entered allmulticast mode [ 256.989151][ T9913] veth1_macvtap: left promiscuous mode [ 257.380529][ T9926] netlink: 'syz.1.1512': attribute type 7 has an invalid length. [ 257.388830][ T9926] netlink: 'syz.1.1512': attribute type 39 has an invalid length. [ 257.460106][ T9926] bridge3: port 1(gretap1) entered blocking state [ 257.469065][ T9926] bridge3: port 1(gretap1) entered disabled state [ 257.476513][ T9926] gretap1: entered allmulticast mode [ 257.484381][ T9926] gretap1: entered promiscuous mode [ 257.496416][ T9927] netlink: 'syz.1.1512': attribute type 7 has an invalid length. [ 257.504446][ T9927] netlink: 'syz.1.1512': attribute type 39 has an invalid length. [ 258.398553][ T9957] xt_bpf: check failed: parse error [ 258.747369][ T9967] __nla_validate_parse: 7 callbacks suppressed [ 258.747396][ T9967] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1528'. [ 258.763238][ T9972] netlink: 'syz.3.1524': attribute type 10 has an invalid length. [ 258.845057][ T9977] Bluetooth: hci3: unsupported parameter 64512 [ 258.862036][ T9977] Bluetooth: hci3: invalid length 0, exp 2 for type 14 [ 258.973527][ T9981] x_tables: duplicate underflow at hook 2 [ 258.978228][ T9976] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1531'. [ 259.032532][ T9973] hsr0: entered promiscuous mode [ 259.148026][ T9978] hsr_slave_0: left promiscuous mode [ 259.157810][ T9978] hsr_slave_1: left promiscuous mode [ 259.333133][ T9978] hsr0 (unregistering): left promiscuous mode [ 260.139341][T10012] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1542'. [ 260.318135][T10022] netlink: 'syz.0.1543': attribute type 10 has an invalid length. [ 260.418973][T10022] 8021q: adding VLAN 0 to HW filter on device team0 [ 260.448734][T10022] bond0: (slave team0): Enslaving as an active interface with an up link [ 260.648709][T10032] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1547'. [ 260.730646][T10032] 8021q: adding VLAN 0 to HW filter on device team6 [ 260.782026][T10034] dummy0: entered promiscuous mode [ 260.822880][T10034] batadv0: entered promiscuous mode [ 260.839508][T10034] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 260.847962][T10034] Cannot create hsr debugfs directory [ 260.857265][T10032] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1547'. [ 261.069571][T10049] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1563'. [ 261.489522][T10063] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1557'. [ 261.518961][T10063] vxlan1: entered promiscuous mode [ 261.611114][T10072] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1559'. [ 261.868935][T10079] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1564'. [ 262.030779][T10079] 8021q: adding VLAN 0 to HW filter on device team7 [ 262.045010][T10084] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1564'. [ 262.363676][T10090] xt_ecn: cannot match TCP bits for non-tcp packets [ 262.383757][T10090] xt_l2tp: v2 tid > 0xffff: 150994944 [ 262.462762][T10099] lo speed is unknown, defaulting to 1000 [ 262.833884][T10109] netlink: 'syz.2.1574': attribute type 21 has an invalid length. [ 262.859831][T10109] netlink: 'syz.2.1574': attribute type 5 has an invalid length. [ 263.053719][T10119] sctp: [Deprecated]: syz.1.1573 (pid 10119) Use of struct sctp_assoc_value in delayed_ack socket option. [ 263.053719][T10119] Use struct sctp_sack_info instead [ 263.177385][T10123] netlink: 'syz.2.1577': attribute type 1 has an invalid length. [ 263.204572][T10123] nbd: illegal input index 19464200 [ 263.951510][T10148] __nla_validate_parse: 4 callbacks suppressed [ 263.951533][T10148] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1583'. [ 264.035428][T10149] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1582'. [ 264.117809][T10153] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1584'. [ 264.122567][T10155] openvswitch: netlink: Unknown key attributes 2 [ 264.231295][T10157] wg2: entered promiscuous mode [ 264.237228][T10157] wg2: entered allmulticast mode [ 264.256254][T10153] team0: Port device bridge4 added [ 264.278924][T10163] vlan4: entered promiscuous mode [ 264.292835][T10153] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1584'. [ 264.302680][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 264.311357][T10153] bridge4: entered promiscuous mode [ 264.319510][T10153] bridge4: entered allmulticast mode [ 264.338946][T10158] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1579'. [ 264.442004][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 264.567716][T10158] 8021q: adding VLAN 0 to HW filter on device team8 [ 264.621946][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 264.644567][T10158] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1579'. [ 264.818361][T10171] syz.2.1590[10171] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 264.818658][T10171] syz.2.1590[10171] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 264.836051][T10171] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 264.864708][T10171] syz.2.1590[10171] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 264.864888][T10171] syz.2.1590[10171] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 264.886358][T10171] pim6reg1: entered promiscuous mode [ 264.910145][T10171] pim6reg1: entered allmulticast mode [ 265.046435][T10173] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1591'. [ 265.360345][T10182] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1595'. [ 265.380853][T10182] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1595'. [ 265.453112][T10187] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1592'. [ 265.571985][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 265.643182][T10194] IPv6: sit2: Disabled Multicast RS [ 265.678107][T10197] IPVS: set_ctl: invalid protocol: 136 100.1.1.2:20003 [ 265.760832][T10200] netlink: 'syz.1.1600': attribute type 1 has an invalid length. [ 265.778125][T10203] sctp: [Deprecated]: syz.0.1592 (pid 10203) Use of struct sctp_assoc_value in delayed_ack socket option. [ 265.778125][T10203] Use struct sctp_sack_info instead [ 265.976928][T10207] netlink: 'syz.1.1602': attribute type 10 has an invalid length. [ 266.073256][T10209] 8021q: adding VLAN 0 to HW filter on device team11 [ 266.418278][T10216] vlan2: entered promiscuous mode [ 266.435956][T10216] bond0: (slave vlan2): Opening slave failed [ 267.341604][T10234] 8021q: adding VLAN 0 to HW filter on device team12 [ 267.738860][T10250] pim6reg1: entered promiscuous mode [ 267.749183][T10250] pim6reg1: entered allmulticast mode [ 267.774066][T10251] xt_TCPMSS: Only works on TCP SYN packets [ 267.811421][T10249] tipc: Enabled bearer , priority 10 [ 268.659307][T10276] vlan5: entered promiscuous mode [ 268.668817][T10276] dummy0: entered promiscuous mode [ 268.681442][T10276] team0: Port device vlan5 added [ 268.965505][T10284] __nla_validate_parse: 10 callbacks suppressed [ 268.965528][T10284] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1632'. [ 269.012271][T10284] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1632'. [ 269.216213][T10295] debugfs: Directory 'netdev:nicvf0' with parent 'phy3' already present! [ 269.359923][T10300] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1640'. [ 269.510470][T10307] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1639'. [ 269.589682][T10310] netlink: 'syz.2.1643': attribute type 1 has an invalid length. [ 270.158402][T10331] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1650'. [ 270.229085][T10335] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1646'. [ 270.274208][T10336] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1650'. [ 270.292694][T10336] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1650'. [ 270.498146][T10335] 8021q: adding VLAN 0 to HW filter on device team3 [ 270.507447][T10337] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1646'. [ 270.843571][T10354] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1657'. [ 271.082525][T10355] 8021q: adding VLAN 0 to HW filter on device team9 [ 271.211236][T10370] 8021q: adding VLAN 0 to HW filter on device team7 [ 272.986462][T10415] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 273.062304][T10414] xt_CT: No such helper "snmp" [ 273.537932][T10426] bond_slave_1: entered promiscuous mode [ 273.544147][T10426] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 273.572665][T10426] macvtap2: entered promiscuous mode [ 273.578172][T10426] bond0: entered promiscuous mode [ 273.603915][T10426] bridge0: entered promiscuous mode [ 273.609758][T10426] vlan3: entered promiscuous mode [ 273.615577][T10426] team0: entered promiscuous mode [ 273.621031][T10426] team_slave_0: entered promiscuous mode [ 273.632311][T10426] team_slave_1: entered promiscuous mode [ 273.641669][T10426] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode [ 273.658912][T10426] macvlan1: entered promiscuous mode [ 273.671057][T10426] macvtap2: entered allmulticast mode [ 273.680341][T10426] bond0: entered allmulticast mode [ 273.689438][T10426] bond_slave_1: entered allmulticast mode [ 273.699763][T10426] vlan3: entered allmulticast mode [ 273.710044][T10426] team0: entered allmulticast mode [ 273.718141][T10426] team_slave_0: entered allmulticast mode [ 273.728922][T10426] team_slave_1: entered allmulticast mode [ 273.737327][T10426] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode [ 273.747391][T10426] macvlan1: entered allmulticast mode [ 273.755445][T10426] veth1_vlan: entered allmulticast mode [ 273.767444][T10426] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 273.780481][T10426] 8021q: adding VLAN 0 to HW filter on device macvtap2 [ 273.819512][T10429] bond0: left allmulticast mode [ 273.825219][T10429] bond_slave_1: left allmulticast mode [ 273.831123][T10429] vlan3: left allmulticast mode [ 273.836820][T10429] netdevsim netdevsim1 netdevsim0: left allmulticast mode [ 273.844424][T10429] team0: left allmulticast mode [ 273.849616][T10429] team_slave_0: left allmulticast mode [ 273.870720][T10429] team_slave_1: left allmulticast mode [ 273.876655][T10429] mac80211_hwsim hwsim7 wlan1: left allmulticast mode [ 273.892186][T10429] macvlan1: left allmulticast mode [ 273.897711][T10429] veth1_vlan: left allmulticast mode [ 273.904773][T10429] bond0: left promiscuous mode [ 273.910130][T10429] bridge0: left promiscuous mode [ 273.918161][T10429] vlan3: left promiscuous mode [ 273.926861][T10429] team0: left promiscuous mode [ 273.932750][T10429] team_slave_0: left promiscuous mode [ 273.938786][T10429] team_slave_1: left promiscuous mode [ 273.953728][T10429] mac80211_hwsim hwsim7 wlan1: left promiscuous mode [ 273.961272][T10429] macvlan1: left promiscuous mode [ 273.975857][T10429] bond_slave_1: left promiscuous mode [ 273.983088][T10429] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 274.004512][T10429] macvtap2: left promiscuous mode [ 274.009827][T10429] macvtap2: left allmulticast mode [ 274.032152][T10431] __nla_validate_parse: 10 callbacks suppressed [ 274.032174][T10431] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1683'. [ 274.099986][T10431] 8021q: adding VLAN 0 to HW filter on device team5 [ 274.124123][T10432] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1683'. [ 274.720796][T10447] Bluetooth: hci3: invalid length 0, exp 2 for type 19 [ 274.930733][T10449] bridge0: port 1(bridge_slave_0) entered disabled state [ 275.094283][T10457] veth1_macvtap: left promiscuous mode [ 275.317845][T10458] ip6_tunnel: non-ECT from 0000:0000:0000:0000:0000:ffff:e000:0001 with DS=0xe [ 275.354263][T10458] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1682'. [ 275.389767][T10458] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for erspan1 [ 275.495718][T10461] netlink: 'syz.0.1688': attribute type 1 has an invalid length. [ 275.509015][T10461] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1688'. [ 276.353045][T10465] ipt_ECN: cannot use operation on non-tcp rule [ 276.491422][T10467] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1696'. [ 276.521575][T10467] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 276.562377][T10467] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 276.603216][T10471] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 277.063981][T10481] geneve3: entered promiscuous mode [ 277.070101][T10481] geneve3: entered allmulticast mode [ 277.146878][T10489] netlink: 'syz.2.1701': attribute type 10 has an invalid length. [ 277.185693][T10489] bond0: (slave netdevsim0): Releasing backup interface [ 277.199331][T10489] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 277.209504][T10489] netdevsim netdevsim2 netdevsim0: left allmulticast mode [ 277.220459][T10489] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 277.229421][T10489] team0: Port device netdevsim0 added [ 277.236677][T10491] netlink: 'syz.2.1701': attribute type 10 has an invalid length. [ 277.264770][T10491] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 277.289964][T10491] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 277.338307][T10491] team0: Port device netdevsim0 removed [ 277.430119][T10497] netlink: 18 bytes leftover after parsing attributes in process `syz.1.1704'. [ 277.465290][T10497] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1704'. [ 277.553841][T10500] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1705'. [ 278.497177][T10518] netlink: 'syz.4.1709': attribute type 4 has an invalid length. [ 278.512025][T10518] netlink: 17 bytes leftover after parsing attributes in process `syz.4.1709'. [ 278.539852][T10518] xt_recent: Unsupported userspace flags (00000042) [ 278.653063][T10530] netlink: 'syz.2.1716': attribute type 10 has an invalid length. [ 278.661668][T10530] netdevsim netdevsim2 netdevsim0: left allmulticast mode [ 278.680072][T10530] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 278.691655][T10530] team0: Port device netdevsim0 added [ 278.738606][T10520] netlink: 'syz.2.1716': attribute type 10 has an invalid length. [ 278.747058][T10520] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 278.757110][T10520] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 278.776044][T10520] team0: Port device netdevsim0 removed [ 279.108198][T10540] netlink: 'syz.0.1719': attribute type 7 has an invalid length. [ 279.117104][T10540] netlink: 'syz.0.1719': attribute type 5 has an invalid length. [ 279.126160][T10540] netlink: 17 bytes leftover after parsing attributes in process `syz.0.1719'. [ 279.401109][T10554] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1724'. [ 279.418679][T10556] netlink: 'syz.1.1725': attribute type 3 has an invalid length. [ 279.430124][T10556] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.1725'. [ 279.640011][T10557] sctp: [Deprecated]: syz.2.1720 (pid 10557) Use of int in max_burst socket option deprecated. [ 279.640011][T10557] Use struct sctp_assoc_value instead [ 281.083906][T10605] delete_channel: no stack [ 281.090230][T10607] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 281.113015][T10607] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 281.369246][T10621] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1746'. [ 281.457437][T10625] netlink: 'syz.3.1744': attribute type 3 has an invalid length. [ 281.611284][T10635] netlink: 'syz.0.1743': attribute type 9 has an invalid length. [ 281.832013][T10635] netlink: 'syz.0.1743': attribute type 7 has an invalid length. [ 281.839954][T10625] netlink: 'syz.3.1744': attribute type 1 has an invalid length. [ 281.970995][T10650] xt_CONNSECMARK: invalid mode: 0 [ 282.008223][T10650] x_tables: ip6_tables: DNPT target: used from hooks FORWARD, but only usable from PREROUTING/OUTPUT [ 282.032532][T10652] netlink: 92 bytes leftover after parsing attributes in process `syz.2.1751'. [ 282.054263][T10635] netlink: 'syz.0.1743': attribute type 8 has an invalid length. [ 282.069326][T10636] can: request_module (can-proto-0) failed. [ 282.077147][T10625] netlink: 181400 bytes leftover after parsing attributes in process `syz.3.1744'. [ 282.104668][T10655] netlink: 148 bytes leftover after parsing attributes in process `syz.4.1753'. [ 282.201025][T10656] netlink: 'syz.4.1753': attribute type 11 has an invalid length. [ 282.357389][T10663] Bluetooth: hci3: invalid length 0, exp 2 for type 21 [ 282.558676][T10669] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1756'. [ 282.601092][T10669] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1756'. [ 282.863145][T10678] lo speed is unknown, defaulting to 1000 [ 283.018726][T10683] lo speed is unknown, defaulting to 1000 [ 283.772851][T10708] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1768'. [ 283.861361][T10710] 8021q: adding VLAN 0 to HW filter on device team13 [ 284.528738][T10734] __nla_validate_parse: 3 callbacks suppressed [ 284.528763][T10734] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1777'. [ 284.574590][T10734] 8021q: adding VLAN 0 to HW filter on device team8 [ 284.654512][T10734] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1777'. [ 284.763517][T10741] netlink: 'syz.4.1779': attribute type 10 has an invalid length. [ 284.860462][T10744] netlink: 'syz.4.1780': attribute type 10 has an invalid length. [ 284.936891][T10746] netlink: 'syz.2.1781': attribute type 4 has an invalid length. [ 285.192685][T10753] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1784'. [ 285.227227][T10753] 8021q: adding VLAN 0 to HW filter on device team9 [ 285.245353][T10753] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1784'. [ 285.321660][T10755] debugfs: Directory 'netdev:nicvf0' with parent 'phy3' already present! [ 285.570844][T10765] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1789'. [ 285.658782][T10765] 8021q: adding VLAN 0 to HW filter on device team10 [ 285.676305][T10769] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1789'. [ 285.746339][T10773] netlink: 'syz.1.1791': attribute type 10 has an invalid length. [ 285.925300][T10775] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1792'. [ 286.052193][T10786] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1797'. [ 286.098850][T10786] 8021q: adding VLAN 0 to HW filter on device team6 [ 286.187014][T10786] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1797'. [ 286.603782][T10810] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1802'. [ 286.800668][T10817] netlink: 'syz.4.1804': attribute type 10 has an invalid length. [ 286.962050][T10827] netlink: 'syz.4.1806': attribute type 10 has an invalid length. [ 287.005955][T10827] team0: Port device wlan1 added [ 287.055502][T10829] netlink: 'syz.3.1808': attribute type 6 has an invalid length. [ 287.247321][T10837] 8021q: adding VLAN 0 to HW filter on device team11 [ 287.584062][T10849] netlink: 'syz.4.1816': attribute type 10 has an invalid length. [ 288.053477][ C0] Dead loop on virtual device ipvlan1, fix it urgently! [ 288.056306][ T66] Dead loop on virtual device ipvlan1, fix it urgently! [ 288.133192][T10874] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0) [ 288.276998][T10880] netlink: 'syz.4.1830': attribute type 10 has an invalid length. [ 288.645821][T10894] tap0: tun_chr_ioctl cmd 2147767507 [ 288.684682][T10896] netlink: 'syz.4.1835': attribute type 1 has an invalid length. [ 289.284270][T10920] netlink: 'syz.4.1843': attribute type 10 has an invalid length. [ 289.668997][T10939] Bluetooth: hci3: invalid length 0, exp 2 for type 20 [ 289.925823][T10949] lo: entered allmulticast mode [ 289.933531][T10949] __nla_validate_parse: 11 callbacks suppressed [ 289.933554][T10949] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1852'. [ 290.108191][T10953] lo speed is unknown, defaulting to 1000 [ 290.255298][T10957] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1854'. [ 290.383721][T10967] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1856'. [ 290.574442][T10969] netlink: 'syz.1.1855': attribute type 10 has an invalid length. [ 290.608184][T10975] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1858'. [ 291.029478][T10986] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1865'. [ 291.056228][T10986] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1865'. [ 291.122487][T10988] Bluetooth: hci3: invalid length 0, exp 2 for type 19 [ 291.203575][T10995] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1869'. [ 291.223261][T10995] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1869'. [ 291.338123][T10999] netlink: 'syz.2.1871': attribute type 10 has an invalid length. [ 291.524045][T11005] ipt_ECN: cannot use operation on non-tcp rule [ 291.635026][T11016] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1874'. [ 291.646115][T11016] bridge0: left allmulticast mode [ 291.695420][T11020] xt_HMARK: spi-set and port-set can't be combined [ 291.989010][T11029] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1880'. [ 292.215775][T11035] netlink: 'syz.4.1883': attribute type 10 has an invalid length. [ 292.326281][T11039] ipt_ECN: cannot use operation on non-tcp rule [ 292.336126][T11040] netlink: 'syz.1.1884': attribute type 9 has an invalid length. [ 292.352974][T11040] netlink: 'syz.1.1884': attribute type 7 has an invalid length. [ 292.363749][T11040] netlink: 'syz.1.1884': attribute type 8 has an invalid length. [ 292.710458][T11053] netlink: 'syz.0.1886': attribute type 1 has an invalid length. [ 292.890029][T11059] trusted_key: syz.4.1894 sent an empty control message without MSG_MORE. [ 292.921096][T11061] netlink: 'syz.2.1895': attribute type 10 has an invalid length. [ 293.020724][T11064] tap0: tun_chr_ioctl cmd 1074025675 [ 293.026790][T11064] tap0: persist enabled [ 293.032774][T11064] netlink: 'syz.4.1897': attribute type 21 has an invalid length. [ 293.043592][T11064] netlink: 'syz.4.1897': attribute type 20 has an invalid length. [ 293.395255][T11082] xt_bpf: check failed: parse error [ 293.519765][T11087] netlink: 'syz.1.1905': attribute type 10 has an invalid length. [ 293.544960][T11087] bond0: (slave netdevsim0): Releasing backup interface [ 293.564532][T11087] team0: Port device netdevsim0 added [ 293.579699][T11087] netlink: 'syz.1.1905': attribute type 10 has an invalid length. [ 293.613706][T11087] team0: Port device netdevsim0 removed [ 293.635473][T11087] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 293.828609][ T63] Dead loop on virtual device ipvlan1, fix it urgently! [ 294.070347][T11100] lo speed is unknown, defaulting to 1000 [ 295.679906][T11127] __nla_validate_parse: 18 callbacks suppressed [ 295.679931][T11127] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1929'. [ 295.704409][T11127] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1929'. [ 295.808060][T11133] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1919'. [ 296.076146][T11134] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1918'. [ 296.682222][T11162] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1932'. [ 296.695721][T11162] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1932'. [ 296.861286][T11172] netlink: 18 bytes leftover after parsing attributes in process `syz.2.1934'. [ 296.887993][T11172] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1934'. [ 297.064047][T11179] netlink: 312 bytes leftover after parsing attributes in process `syz.1.1937'. [ 297.261243][T11178] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1936'. [ 297.749944][T11194] validate_nla: 5 callbacks suppressed [ 297.749969][T11194] netlink: 'syz.4.1953': attribute type 3 has an invalid length. [ 297.785247][T11194] netlink: 'syz.4.1953': attribute type 1 has an invalid length. [ 297.987972][T11199] can: request_module (can-proto-0) failed. [ 298.031585][T11206] netlink: 'syz.1.1944': attribute type 10 has an invalid length. [ 298.154994][T11209] IPVS: set_ctl: invalid protocol: 136 100.1.1.2:20003 [ 298.733114][T11232] unknown channel width for channel at 909000KHz? [ 298.740206][T11232] unknown channel width for channel at 909000KHz? [ 298.937023][ T11] Dead loop on virtual device ipvlan1, fix it urgently! [ 298.940809][T11237] netlink: 'syz.2.1957': attribute type 10 has an invalid length. [ 299.325754][T11253] netlink: 'syz.4.1962': attribute type 10 has an invalid length. [ 299.374774][T11255] netlink: 'syz.2.1963': attribute type 10 has an invalid length. [ 299.384801][T11257] netlink: 'syz.1.1964': attribute type 10 has an invalid length. [ 299.831193][T11275] lo speed is unknown, defaulting to 1000 [ 304.702960][ T11] Dead loop on virtual device ipvlan1, fix it urgently! [ 310.456075][ T63] Dead loop on virtual device ipvlan1, fix it urgently! [ 316.214329][ T11] Dead loop on virtual device ipvlan1, fix it urgently! [ 317.496649][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 321.974293][ T3943] Dead loop on virtual device ipvlan1, fix it urgently! [ 327.739317][ T11] Dead loop on virtual device ipvlan1, fix it urgently! [ 333.506545][ T63] Dead loop on virtual device ipvlan1, fix it urgently! [ 339.265657][ T63] Dead loop on virtual device ipvlan1, fix it urgently! [ 340.078074][ T54] Bluetooth: hci4: command 0x0405 tx timeout [ 345.023817][ T3943] Dead loop on virtual device ipvlan1, fix it urgently! [ 350.774669][ T11] Dead loop on virtual device ipvlan1, fix it urgently! [ 353.332696][ C0] Dead loop on virtual device ipvlan1, fix it urgently! [ 356.563693][ T3943] Dead loop on virtual device ipvlan1, fix it urgently! [ 362.333831][ T3943] Dead loop on virtual device ipvlan1, fix it urgently! [ 368.054006][ T3943] Dead loop on virtual device ipvlan1, fix it urgently! [ 373.174905][ T1064] Dead loop on virtual device ipvlan1, fix it urgently! [ 378.953504][ T3943] Dead loop on virtual device ipvlan1, fix it urgently! [ 384.082579][ T3943] Dead loop on virtual device ipvlan1, fix it urgently! [ 389.843299][ T63] Dead loop on virtual device ipvlan1, fix it urgently! [ 395.573565][ T11] Dead loop on virtual device ipvlan1, fix it urgently! [ 401.492395][ T5240] Bluetooth: hci5: command 0x0405 tx timeout [ 414.784428][ T63] Dead loop on virtual device ipvlan1, fix it urgently! [ 419.902699][ T11] Dead loop on virtual device ipvlan1, fix it urgently! [ 425.013792][ T63] Dead loop on virtual device ipvlan1, fix it urgently! [ 430.153970][ T3943] Dead loop on virtual device ipvlan1, fix it urgently! [ 435.194092][ T3943] Dead loop on virtual device ipvlan1, fix it urgently! [ 441.045187][ T11] Dead loop on virtual device ipvlan1, fix it urgently! [ 446.772687][ T11] Dead loop on virtual device ipvlan1, fix it urgently! [ 452.534478][ T1064] Dead loop on virtual device ipvlan1, fix it urgently! [ 456.372045][ T30] INFO: task syz.3.1970:11277 blocked for more than 143 seconds. [ 456.379862][ T30] Not tainted 6.11.0-rc5-syzkaller-00735-g670726a8262e #0 [ 456.491789][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 456.500546][ T30] task:syz.3.1970 state:D stack:27360 pid:11277 tgid:11272 ppid:5242 flags:0x00000004 [ 456.631724][ T30] Call Trace: [ 456.635117][ T30] [ 456.638359][ T30] __schedule+0x1800/0x4a60 [ 456.711748][ T30] ? __pfx___schedule+0x10/0x10 [ 456.716774][ T30] ? __pfx_lock_release+0x10/0x10 [ 456.790010][ T30] ? __lock_sock+0x1c8/0x330 [ 456.831721][ T30] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 456.837631][ T30] ? schedule+0x90/0x320 [ 456.911863][ T30] schedule+0x14b/0x320 [ 456.916122][ T30] __lock_sock+0x1cd/0x330 [ 456.920615][ T30] ? __pfx___lock_sock+0x10/0x10 [ 457.001775][ T30] ? __pfx_autoremove_wake_function+0x10/0x10 [ 457.007933][ T30] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 457.081761][ T30] ? lock_sock_nested+0x6a/0x100 [ 457.086811][ T30] lock_sock_nested+0x9e/0x100 [ 457.151810][ T30] do_ip_getsockopt+0x14ab/0x2940 [ 457.156938][ T30] ? __pfx_do_ip_getsockopt+0x10/0x10 [ 457.251678][ T30] ? __lock_acquire+0x137a/0x2040 [ 457.256801][ T30] ? __pfx_validate_chain+0x10/0x10 [ 457.321805][ T30] ? cgroup_rstat_updated+0x13b/0xc60 [ 457.327269][ T30] ? aa_label_sk_perm+0x4f0/0x6d0 [ 457.391689][ T30] ? __pfx_cgroup_rstat_updated+0x10/0x10 [ 457.397495][ T30] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 457.481760][ T30] ? count_memcg_event_mm+0x94/0x420 [ 457.487146][ T30] ? __pfx___might_resched+0x10/0x10 [ 457.561754][ T30] ip_getsockopt+0xed/0x2e0 [ 457.566355][ T30] ? __pfx_ip_getsockopt+0x10/0x10 [ 457.571515][ T30] ? aa_sk_perm+0x96d/0xab0 [ 457.654719][ T30] tcp_getsockopt+0x163/0x1c0 [ 457.659496][ T30] ? __pfx_tcp_getsockopt+0x10/0x10 [ 457.731756][ T30] ? aa_sock_opt_perm+0x79/0x120 [ 457.736785][ T30] ? sock_common_getsockopt+0x2e/0xb0 [ 457.811681][ T30] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 457.817721][ T30] do_sock_getsockopt+0x373/0x850 [ 457.921765][ T30] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 457.927427][ T30] ? __fget_files+0x3f6/0x470 [ 457.991786][ T30] __sys_getsockopt+0x271/0x330 [ 457.996738][ T30] ? __pfx___sys_getsockopt+0x10/0x10 [ 458.071828][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 458.078254][ T30] ? exc_page_fault+0x590/0x8c0 [ 458.151813][ T30] __x64_sys_getsockopt+0xb5/0xd0 [ 458.156938][ T30] do_syscall_64+0xf3/0x230 [ 458.161511][ T30] ? clear_bhb_loop+0x35/0x90 [ 458.251829][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 458.257834][ T30] RIP: 0033:0x7fc16f579ef9 [ 458.293108][ T63] Dead loop on virtual device ipvlan1, fix it urgently! [ 458.341824][ T30] RSP: 002b:00007fc170388038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 458.350411][ T30] RAX: ffffffffffffffda RBX: 00007fc16f716058 RCX: 00007fc16f579ef9 [ 458.471670][ T30] RDX: 0000000000000034 RSI: 0000000000000000 RDI: 0000000000000003 [ 458.479977][ T30] RBP: 00007fc16f5e793e R08: 00000000200001c0 R09: 0000000000000000 [ 458.581671][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 458.589989][ T30] R13: 0000000000000001 R14: 00007fc16f716058 R15: 00007ffea5857d38 [ 458.701822][ T30] [ 458.704932][ T30] [ 458.704932][ T30] Showing all locks held in the system: [ 458.801835][ T30] 1 lock held by khungtaskd/30: [ 458.806760][ T30] #0: ffffffff8e938320 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 458.911878][ T30] 2 locks held by getty/4989: [ 458.916631][ T30] #0: ffff88802f9510a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 459.011933][ T30] #1: ffffc90002f062f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6ac/0x1e00 [ 459.111753][ T30] 2 locks held by syz.3.1970/11273: [ 459.117026][ T30] 1 lock held by syz.3.1970/11277: [ 459.212061][ T30] #0: ffff88805c0f6458 (sk_lock-AF_INET){+.+.}-{0:0}, at: do_ip_getsockopt+0x14ab/0x2940 [ 459.291753][ T30] 1 lock held by syz.0.1971/11274: [ 459.296934][ T30] #0: ffff88802f1d1e18 (&mm->mmap_lock){++++}-{3:3}, at: vm_mmap_pgoff+0x17c/0x3d0 [ 459.392048][ T30] 3 locks held by syz.0.1971/11276: [ 459.397314][ T30] 1 lock held by udevd/11286: [ 459.452054][ T30] [ 459.454442][ T30] ============================================= [ 459.454442][ T30] [ 459.561750][ T30] NMI backtrace for cpu 0 [ 459.566160][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-rc5-syzkaller-00735-g670726a8262e #0 [ 459.576717][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 459.586891][ T30] Call Trace: [ 459.590198][ T30] [ 459.593156][ T30] dump_stack_lvl+0x241/0x360 [ 459.598050][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 459.603284][ T30] ? __pfx__printk+0x10/0x10 [ 459.607901][ T30] ? vprintk_emit+0x667/0x7c0 [ 459.612618][ T30] ? __pfx_vprintk_emit+0x10/0x10 [ 459.617679][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 459.622742][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 459.628212][ T30] ? _printk+0xd5/0x120 [ 459.632409][ T30] ? __pfx__printk+0x10/0x10 [ 459.637030][ T30] ? __wake_up_klogd+0xcc/0x110 [ 459.641910][ T30] ? __pfx__printk+0x10/0x10 [ 459.646516][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 459.651572][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 459.657568][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 459.663570][ T30] watchdog+0xff4/0x1040 [ 459.667831][ T30] ? watchdog+0x1ea/0x1040 [ 459.672289][ T30] ? __pfx_watchdog+0x10/0x10 [ 459.676984][ T30] kthread+0x2f0/0x390 [ 459.681071][ T30] ? __pfx_watchdog+0x10/0x10 [ 459.685774][ T30] ? __pfx_kthread+0x10/0x10 [ 459.690382][ T30] ret_from_fork+0x4b/0x80 [ 459.694816][ T30] ? __pfx_kthread+0x10/0x10 [ 459.699419][ T30] ret_from_fork_asm+0x1a/0x30 [ 459.704234][ T30] [ 459.708255][ T30] Sending NMI from CPU 0 to CPUs 1: [ 459.713572][ C1] NMI backtrace for cpu 1 [ 459.713586][ C1] CPU: 1 UID: 0 PID: 5216 Comm: sshd Not tainted 6.11.0-rc5-syzkaller-00735-g670726a8262e #0 [ 459.713608][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 459.713619][ C1] RIP: 0010:__sanitizer_cov_trace_switch+0xbc/0x120 [ 459.713651][ C1] Code: c2 49 39 d2 74 71 4c 8b 74 d6 10 65 8b 05 b4 44 70 7e 25 00 01 ff 00 74 11 3d 00 01 00 00 75 de 41 83 bb 1c 16 00 00 00 74 d4 <41> 8b 83 f8 15 00 00 83 f8 03 75 c8 49 8b 8b 00 16 00 00 45 8b bb [ 459.713672][ C1] RSP: 0018:ffffc9000232f640 EFLAGS: 00000046 [ 459.713688][ C1] RAX: 0000000000000000 RBX: 0000000000000001 RCX: 0000000000000000 [ 459.713699][ C1] RDX: 0000000000000000 RSI: ffffffff8e7a3e20 RDI: 0000000000000001 [ 459.713711][ C1] RBP: ffffffff90a1ca6c R08: 0000000000000005 R09: ffffffff814140bf [ 459.713725][ C1] R10: 0000000000000003 R11: ffff888022a0bc00 R12: ffffc9000232f8b8 [ 459.713738][ C1] R13: dffffc0000000000 R14: 0000000000000000 R15: 1ffff92000465ee8 [ 459.713751][ C1] FS: 00007fc7bc4d9800(0000) GS:ffff8880b9300000(0000) knlGS:0000000000000000 [ 459.713768][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 459.713781][ C1] CR2: 0000000020145000 CR3: 000000001f944000 CR4: 00000000003506f0 [ 459.713797][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 459.713808][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 459.713819][ C1] Call Trace: [ 459.713826][ C1] [ 459.713833][ C1] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 459.713858][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 459.713885][ C1] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 459.713908][ C1] ? nmi_handle+0x2a/0x5a0 [ 459.713936][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 459.713959][ C1] ? nmi_handle+0x14f/0x5a0 [ 459.713976][ C1] ? nmi_handle+0x2a/0x5a0 [ 459.713994][ C1] ? __sanitizer_cov_trace_switch+0xbc/0x120 [ 459.714025][ C1] ? default_do_nmi+0x63/0x160 [ 459.714049][ C1] ? exc_nmi+0x123/0x1f0 [ 459.714073][ C1] ? end_repeat_nmi+0xf/0x53 [ 459.714099][ C1] ? unwind_next_frame+0x196f/0x2a00 [ 459.714129][ C1] ? __sanitizer_cov_trace_switch+0xbc/0x120 [ 459.714155][ C1] ? __sanitizer_cov_trace_switch+0xbc/0x120 [ 459.714182][ C1] ? __sanitizer_cov_trace_switch+0xbc/0x120 [ 459.714208][ C1] [ 459.714214][ C1] [ 459.714221][ C1] unwind_next_frame+0x196f/0x2a00 [ 459.714254][ C1] ? stack_trace_save+0x118/0x1d0 [ 459.714278][ C1] ? stack_trace_save+0x118/0x1d0 [ 459.714298][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 459.714322][ C1] arch_stack_walk+0x151/0x1b0 [ 459.714344][ C1] ? kasan_save_track+0x3f/0x80 [ 459.714371][ C1] stack_trace_save+0x118/0x1d0 [ 459.714394][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 459.714417][ C1] ? mark_lock+0x9a/0x350 [ 459.714442][ C1] ? __might_fault+0xaa/0x120 [ 459.714472][ C1] kasan_save_track+0x3f/0x80 [ 459.714527][ C1] ? kmem_cache_alloc_noprof+0x1fd/0x2a0 [ 459.714547][ C1] __kasan_slab_alloc+0x66/0x80 [ 459.714573][ C1] ? __sigqueue_alloc+0x42e/0x540 [ 459.714593][ C1] kmem_cache_alloc_noprof+0x135/0x2a0 [ 459.714614][ C1] __sigqueue_alloc+0x42e/0x540 [ 459.714638][ C1] __send_signal_locked+0x22f/0xdc0 [ 459.714657][ C1] ? __lock_task_sighand+0x29/0x2d0 [ 459.714677][ C1] group_send_sig_info+0x292/0x310 [ 459.714698][ C1] ? __pfx_group_send_sig_info+0x10/0x10 [ 459.714718][ C1] ? __pfx_signal_setup_done+0x10/0x10 [ 459.714743][ C1] bpf_send_signal_common+0x2dd/0x430 [ 459.714770][ C1] ? __pfx_bpf_send_signal_common+0x10/0x10 [ 459.714794][ C1] ? __pfx___cant_migrate+0x10/0x10 [ 459.714822][ C1] ? bpf_trace_run2+0x1fc/0x540 [ 459.714841][ C1] bpf_send_signal+0x19/0x30 [ 459.714869][ C1] bpf_prog_7ba5217f62dcd359+0x40/0x44 [ 459.714886][ C1] bpf_trace_run2+0x2ec/0x540 [ 459.714910][ C1] ? __pfx_bpf_trace_run2+0x10/0x10 [ 459.714929][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 459.714955][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 459.714981][ C1] ? do_syscall_64+0x100/0x230 [ 459.715002][ C1] trace_sys_enter+0x93/0xd0 [ 459.715023][ C1] syscall_trace_enter+0xf8/0x150 [ 459.715042][ C1] do_syscall_64+0xcc/0x230 [ 459.715061][ C1] ? clear_bhb_loop+0x35/0x90 [ 459.715087][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 459.715109][ C1] RIP: 0033:0x7fc7bc086ad9 [ 459.715124][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 90 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 c7 c0 0f 00 00 00 0f 05 <48> 81 ec b8 00 00 00 41 89 f9 48 89 f0 49 89 d0 48 85 f6 0f 84 be [ 459.715139][ C1] RSP: 002b:00007ffc73861c40 EFLAGS: 00000246 ORIG_RAX: 000000000000000f [ 459.715161][ C1] RAX: ffffffffffffffda RBX: 0000000000060001 RCX: 00007fc7bc086ad9 [ 459.715174][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 459.715185][ C1] RBP: 0000558d8831b260 R08: 0000000000000000 R09: 0000000000000000 [ 459.715196][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000558d58ee2aa4 [ 459.715209][ C1] R13: 000000000000016f R14: 0000558d58ee33e8 R15: 00007ffc73862258 [ 459.715232][ C1] [ 460.491886][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 460.498809][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-rc5-syzkaller-00735-g670726a8262e #0 [ 460.509350][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 460.519452][ T30] Call Trace: [ 460.522760][ T30] [ 460.525725][ T30] dump_stack_lvl+0x241/0x360 [ 460.530461][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 460.535707][ T30] ? __pfx__printk+0x10/0x10 [ 460.540328][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 460.546366][ T30] ? vscnprintf+0x5d/0x90 [ 460.550739][ T30] panic+0x349/0x860 [ 460.554670][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 460.560865][ T30] ? __pfx_panic+0x10/0x10 [ 460.565313][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 460.570726][ T30] ? __irq_work_queue_local+0x137/0x410 [ 460.576308][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 460.581712][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 460.587903][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 460.594115][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 460.600323][ T30] watchdog+0x1033/0x1040 [ 460.604718][ T30] ? watchdog+0x1ea/0x1040 [ 460.609191][ T30] ? __pfx_watchdog+0x10/0x10 [ 460.613913][ T30] kthread+0x2f0/0x390 [ 460.618036][ T30] ? __pfx_watchdog+0x10/0x10 [ 460.622754][ T30] ? __pfx_kthread+0x10/0x10 [ 460.627390][ T30] ret_from_fork+0x4b/0x80 [ 460.631853][ T30] ? __pfx_kthread+0x10/0x10 [ 460.636493][ T30] ret_from_fork_asm+0x1a/0x30 [ 460.641324][ T30] [ 460.644621][ T30] Kernel Offset: disabled [ 460.649044][ T30] Rebooting in 86400 seconds..