last executing test programs: 7.230815108s ago: executing program 4 (id=846): r0 = socket(0xf, 0x3, 0x2) write(r0, &(0x7f0000a97ff0)="020baf010200000000067bbc8e1d4b48", 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000100)=0xfffffffffffffffe, 0x4) connect$inet(0xffffffffffffffff, &(0x7f00000006c0)={0x2, 0x0, @empty}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000900)=0xffffffffffffffff, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000380)='memory.stat\x00', 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001a40)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWCHAIN={0x20, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}]}}}, {0x24, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_XOR={0x4}, @NFTA_BITWISE_MASK={0x4}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xa8}}, 0x0) connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) sendfile(0xffffffffffffffff, r2, 0x0, 0x800) syz_init_net_socket$llc(0x1a, 0x1, 0x0) close(r0) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000078c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000001ac0)=[{0x0}, {&(0x7f0000000800)="3ce16adbb1", 0x5}, {&(0x7f00000008c0)="31f4", 0x2}, {&(0x7f0000000940)}, {&(0x7f0000001940)="31e73532e862d697c91e6ba57dfa12", 0xf}, {&(0x7f0000001a40)="c6b3048629", 0x5}], 0x6}}, {{0x0, 0x0, &(0x7f0000002ec0)}}, {{0x0, 0x0, &(0x7f0000003480)=[{0x0}, {&(0x7f00000030c0)="d1", 0x1}, {0x0}], 0x3}}], 0x4, 0x4008440) socketpair$unix(0x1, 0x5, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x1405, 0x1, 0x70bd29, 0x25dfdbfb, "", [{{0x8, 0x1, 0x2}, {0x8, 0x3, 0x1}}]}, 0x20}, 0x1, 0x0, 0x0, 0x200080c0}, 0x408a0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x48}}, 0x0) 7.059887876s ago: executing program 4 (id=847): socket$rxrpc(0x21, 0x2, 0xa) socket$inet6(0xa, 0x5, 0x0) r0 = socket(0x200000000000011, 0x2, 0x1) bind$packet(r0, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x8000}, 0x4) syz_emit_ethernet(0x6a, &(0x7f0000000000)=ANY=[@ANYRES16], 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000200000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffff0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x2, 0x2ff7afedf}, 0xc) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_LISTALL(r1, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1fffe}, 0xc, &(0x7f00000001c0)={&(0x7f0000000500)={0x14, 0x0, 0x200, 0x70bd2c, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x20000810) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x7bff, &(0x7f0000000180)={&(0x7f0000000140)=@delqdisc={0xfffffffffffffc9b}, 0x49d32d254ae22f79}}, 0x0) getsockopt$sock_buf(r3, 0x1, 0x1a, 0x0, &(0x7f0000000340)) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x4040004) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000001c0)="d8000000180081054e81f782db44b904021d005c06007c09e8fe55a10a0015400100142603600e1208000f0000000401a800160008000140090011", 0x3b}, {0x0}], 0x2}, 0x0) 6.192360576s ago: executing program 4 (id=852): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$x25(0x9, 0x2, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x3b00, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) pselect6(0x40, &(0x7f0000000200)={0x0, 0xfffffffffffffffe, 0xfffffffffffffffc, 0x3, 0x0, 0x0, 0x0, 0x1}, 0x0, &(0x7f0000000380)={0x1ff, 0x0, 0x0, 0x0, 0x8000000000000001, 0x1}, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r1, &(0x7f00000057c0)=[{{0x0, 0x0, 0x0}, 0xa1}], 0x1, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000380)={0x28, 0x2, 0x1, 0x5, 0x0, 0x0, {0x5, 0x0, 0x8}, [@CTA_FILTER={0x14, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x401}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x458}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000841}, 0x8000) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000000180), 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x68}}, 0x80) 5.494607798s ago: executing program 3 (id=858): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) unshare(0x68040200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000e80), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) socket$kcm(0x29, 0x2, 0x0) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000080)=0x10) socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f00000001c0)={r9, 0x9}, &(0x7f00000002c0)=0x8) 5.066068403s ago: executing program 4 (id=859): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000625ce5c1fb8c8576", @ANYRES16, @ANYBLOB="010027bd7000fbdbdf250f"], 0x14}, 0x1, 0x0, 0x0, 0x2004001}, 0x40004) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000740), r0) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000a00), r0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x1c, r2, 0x5ca089d70b3b92d, 0x70bd26, 0x25dfdbfd, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x804}, 0x4004040) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) r3 = socket$nl_audit(0x10, 0x3, 0x9) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x1f, &(0x7f0000000780)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x8, 0xf9, &(0x7f0000000440)=""/249, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000280)={0x4, 0xe, 0x1ff, 0xffffffff}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[0xffffffffffffffff], 0x0, 0x10, 0x100, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000140)='rtc_irq_set_freq\x00', r4, 0x0, 0x6}, 0x18) sendmsg$AUDIT_SET_FEATURE(r3, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x3fa, 0x100, 0x70bd25, 0x25dfdbfd, {0x1, 0x1, 0x1, 0x1}, ["", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) unshare(0x6a040000) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r5, 0x84, 0xb, &(0x7f0000000180)={0x3, 0x9, 0x9, 0x40, 0xa, 0x4, 0x0, 0x0, 0x29, 0x0, 0xf8, 0xff, 0x4, 0x73}, 0xe) shutdown(r5, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000440)=[@in={0x2, 0x0, @loopback}]}, &(0x7f00000001c0)=0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff00000000000000", @ANYRES32, @ANYBLOB="8700"/20, @ANYRES32=0x0, @ANYBLOB="000000000000ffffffe800"/21], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f00000006c0)=ANY=[@ANYRESHEX=r1, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, 0x0, &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 4.638125639s ago: executing program 1 (id=863): r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x403, 0x70bd29, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_PDP_HASHSIZE={0x8, 0x3, 0x1}]}}}]}, 0x38}}, 0x0) setsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, 0x0, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) shutdown(r2, 0x0) recvmmsg(r2, &(0x7f00000004c0), 0xf02, 0xf0, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000540)='rcu_utilization\x00', r3}, 0x18) bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x11}, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f00000001c0)=@generic={&(0x7f0000000180)='./file0\x00', 0x0, 0x10}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000001000030400000000fedbdf2500000300", @ANYRES32=0x0, @ANYBLOB="0000be281f000000200012800b00010067656e65766500001000028004000e0005000a0001"], 0x40}}, 0x0) r4 = socket$inet6(0xa, 0x3, 0x3c) socket(0x1e, 0x4, 0x0) writev(r4, &(0x7f0000000140)=[{0x0}, {&(0x7f0000000240)="61af1a3a5aaefcd37b2f8cc9527118bcab4015ed3e54ba8eb37c741d70bf144802ece1f9884efd48846381521597a1df066f9267fdeea5dd683d7e9ca920219558e9db5a9d71ad6b31eecc52f0f339d8cfe42654c55df7e986db5985c43ce873555d493251be86a91abcc01aceb5f5421dbb75a49ef831aa4b18e1e6b3d5279d96b714ed0ba178c1ff609e6cbb1220ab5fa69d91c3b22cf4a96d0675a5315795fac37799cd35d57ae1f28661938f40471a1ba0a049a6b326dc522dc513709b9de2464df7032f883ed7", 0xc9}], 0x2) 4.61094279s ago: executing program 2 (id=864): setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) shutdown(0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)}, &(0x7f0000000440)=0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000001c0)="00940a37", 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r2, 0x0, 0x0, 0x20, 0x0) sendto$unix(r1, &(0x7f0000000440)="36d9a32e92c131d730b1abaedb51eb66fd2d5b1f7eda4f0e859fdaf294bad70673813533d8bf1c6a77b65a7afdc01b29e73571071a68d5def5d7df839810da130b9348f4d9d407eb478d5bfb298c552a498271af70914e14ba9476fd2a0e47984c25ea20afab3064a748add27a7149e9c4705475bda2ecec9ec30214f28c5e16fd3f50f604f20232c534409e52bff64fc6ca0f5e254083aec2794b7216e002e87caf3d0fa7d04ff9e3b03e81595a04979594ff6ea888bf13de8e8f74c6178e31e47593732ae1a501ad3641d423195a788efdb643f50a8c8b9794a62f7b8dfa0fa7da9d391b92ce2a7f9fe0f9d584a3775f", 0x703d59595f6742a8, 0x800, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000340)={'ip6tnl0\x00', &(0x7f0000000600)={'syztnl1\x00', 0x0, 0x2f, 0x10, 0xad, 0x7, 0x8, @private1, @remote, 0x8, 0x8000, 0xc864, 0x40}}) recvfrom(r1, &(0x7f00000030c0)=""/4117, 0xffffffffffffffbf, 0x1, 0x0, 0xffffffffffffffb5) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x1) close(0xffffffffffffffff) sendmsg$802154_raw(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)="ebe60a4351", 0x5}, 0x1, 0x0, 0x0, 0x8008040}, 0x30008080) sendmmsg$alg(r1, &(0x7f0000002a40)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40004}], 0x1, 0x2010) r3 = socket$inet(0xa, 0x801, 0x84) r4 = accept4(r3, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(r4, 0x84, 0x11, &(0x7f0000000000)={0x0, 0x6}, &(0x7f00000003c0)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)}, &(0x7f0000000100)=0x10) 4.227554465s ago: executing program 1 (id=866): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0xe) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'dvmrp1\x00', 0x1}) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f00000000c0)={'netdevsim0\x00', @link_local}) sendmsg$nl_xfrm(r1, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000000040)=ANY=[@ANYBLOB="040100001a00010000000000fddbdf25fc0100000000000000000000000000017f0000010000000000000000000000004e240020fffd0000000020a032e000f2", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1414aa000000000000000000000000000000002b000000ac14141200000000000000000000000000000000000000000000000000000000fefffffffffffffffcffffffffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003350000020004fd2c0000000000000014000e"], 0x104}, 0x1, 0x0, 0x0, 0x50}, 0x4000) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r4, &(0x7f00000086c0)=[{{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f0000000380)=""/188, 0xbc}, {&(0x7f0000000840)=""/232, 0xe8}, {&(0x7f0000000440)=""/84, 0x54}, {&(0x7f0000000940)=""/4096, 0x1000}, {&(0x7f00000006c0)=""/243, 0xf3}, {&(0x7f00000007c0)=""/73, 0x49}], 0x6}, 0x80000000}], 0x3, 0x20, 0x0) r5 = socket$netlink(0x10, 0x3, 0x9) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="14000000ed03014000000000000000000000000a14000000fa03010100100000000000000000000a0154fce9a379deeaf5b76d7f365afbc56e6bf42f5113eec01a04c79ef664bafaa5e5b1d06a7d2bf9f292389487b66d4e049bdb9c1afe3458964926942938e50856a48a89231d1038d2bf93d743e0cd721e6b9b06b8ad7b64f63845e520a71cb74679200327448bf394ff3df4cdab966937a37aa0be452bd0b0f83b5a7f8f"], 0x28}}, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000240)={'caif0\x00'}) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000002140)={'wlan0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x17, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000720101000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r6) r9 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003d000b08d25a80648c7494f90324fc600b0002400a000900053582c137153e3719ac018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x1, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x30}, [@alu={0x4, 0x0, 0x9, 0x0, 0x0, 0x1, 0xffffffffffffffff}]}, &(0x7f00000002c0)='GPL\x00', 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$NL80211_CMD_DEL_STATION(r6, &(0x7f0000002240)={0x0, 0x0, &(0x7f0000002200)={&(0x7f0000000400)={0x24, r8, 0xa29, 0x70bd28, 0x1, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_MGMT_SUBTYPE={0x5}]}, 0x24}}, 0x4009000) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x15, 0x10, &(0x7f0000000040)=ANY=[@ANYRES8=r0, @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000001a00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 4.192734664s ago: executing program 3 (id=867): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000000)={0x1}, 0x8) close(r1) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$sock_linger(r2, 0x1, 0xd, 0x0, 0x0) shutdown(r2, 0x0) mmap(&(0x7f00005d3000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x18) mmap(&(0x7f00005da000/0x4000)=nil, 0x4000, 0x3, 0x11, 0xffffffffffffffff, 0xffffd000) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r3, 0x107, 0x5, 0x0, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/96, 0x2329000, 0x800}, 0x20) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) mmap(&(0x7f000086a000/0x2000)=nil, 0x2000, 0x4, 0x11, r0, 0x2000) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2, 0x2000000000032, 0xffffffffffffffff, 0x0) 3.72492062s ago: executing program 3 (id=868): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x2800, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r1, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={0x34, r1, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x20, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x43ef}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140) r2 = socket(0x2b, 0x80801, 0x1) sendmmsg(r2, 0x0, 0x0, 0x20000090) r3 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x3, {0x0, 0x0, 0x12, r4, {0x0, 0x6}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}}, 0x0) connect$netlink(0xffffffffffffffff, 0x0, 0x0) close(0x3) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) r6 = socket$xdp(0x2c, 0x3, 0x0) r7 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$int_in(r7, 0x5421, &(0x7f0000000100)=0x5) connect$netrom(r7, 0x0, 0x0) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000}, 0x20) syz_init_net_socket$ax25(0x3, 0x3, 0x0) socket$igmp(0x2, 0x3, 0x2) mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000006, 0x4ca31, 0xffffffffffffffff, 0xd1d1d000) 3.65091794s ago: executing program 0 (id=869): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000013c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000023c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-avx\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$kcm(r1, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r4}, 0x10) bind$inet6(0xffffffffffffffff, 0x0, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0x806000) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{r2}, &(0x7f0000000400), 0x0}, 0x20) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x100000c, 0x11, r2, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r5, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 3.645759679s ago: executing program 2 (id=870): r0 = socket$kcm(0x10, 0x2, 0x4) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x220c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000100)={0xa, 0x4e22, 0x5, @empty}, 0x1c) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000040)='ip6tnl0\x00', 0x10) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4}, 0x1c) bind$inet6(r5, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r7, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r8, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r9, 0x0) sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3e7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00121000a6400d0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) 3.388098463s ago: executing program 1 (id=871): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$kcm(0x29, 0x2, 0x0) write$cgroup_pressure(r1, &(0x7f0000000140)={'full'}, 0xfffffdef) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x5452, &(0x7f0000000000)) recvmmsg(r0, &(0x7f0000000300)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000000, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xffffffc1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, r2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000240)=@o_path={0x0, 0x0, 0x4020, r3}, 0x18) 3.282807096s ago: executing program 2 (id=872): socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x67) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x10, &(0x7f0000000c00)=ANY=[@ANYBLOB="18000000000000000000000000010000b7080000000000007b8af8ff00000000ad080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NET_DM_CMD_START(r1, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x14, 0x0, 0x400, 0x70bd25, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x80) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x3, 0x10004, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000008000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000002d00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$alg(0x26, 0x5, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a3000000000080002400000"], 0x7c}}, 0x10) bind$alg(r5, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r6 = accept4(r5, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r7, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r8, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 2.748794134s ago: executing program 1 (id=873): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x67) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000002c0)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYBLOB='6\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="addaced30a01a7fe46005a6cdee853229216446b411c8d9e63e3d3cdab8325cdc8faa5cb28989108c94e95"], 0x20) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) sendmsg$NET_DM_CMD_START(r0, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x14, 0x0, 0x400, 0x70bd25, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x80) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x3, 0x10004, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000008000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000002d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00', r3}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r6 = accept4(r5, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r7, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r8, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 2.704015665s ago: executing program 2 (id=874): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000640)=ANY=[@ANYBLOB="1c000000020305000000000000000000000000010800010001"], 0x1c}}, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, 0x0, 0x0) sendmmsg$sock(r1, 0x0, 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[], 0xa0}}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x440261, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) r4 = socket(0x1e, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$packet_add_memb(r3, 0x107, 0x1, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r6, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'veth0_vlan\x00', 0x0}) socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xe32b60fbedc7f0cc}, {0x7}, {0x0, 0xa}}}, 0x24}}, 0x0) 2.703088001s ago: executing program 3 (id=875): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) socket$kcm(0x2, 0xa, 0x2) socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x24004000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x50, r2, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x7ff, 0x70}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x50}, 0x1, 0x0, 0x0, 0x91}, 0x24044884) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$inet_sctp(0x2, 0x5, 0x84) syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) 2.270887999s ago: executing program 0 (id=876): r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x403, 0x70bd29, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_PDP_HASHSIZE={0x8, 0x3, 0x1}]}}}]}, 0x38}}, 0x0) setsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, 0x0, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) shutdown(r2, 0x0) recvmmsg(r2, &(0x7f00000004c0), 0xf02, 0xf0, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000540)='rcu_utilization\x00', r3}, 0x18) bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x11}, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f00000001c0)=@generic={&(0x7f0000000180)='./file0\x00', 0x0, 0x10}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000001000030400000000fedbdf2500000300", @ANYRES32=0x0, @ANYBLOB="0000be281f000000200012800b00010067656e65766500001000028004000e0005000a0001"], 0x40}}, 0x0) r4 = socket$inet6(0xa, 0x3, 0x3c) socket(0x1e, 0x4, 0x0) writev(r4, &(0x7f0000000140)=[{0x0}, {&(0x7f0000000240)="61af1a3a5aaefcd37b2f8cc9527118bcab4015ed3e54ba8eb37c741d70bf144802ece1f9884efd48846381521597a1df066f9267fdeea5dd683d7e9ca920219558e9db5a9d71ad6b31eecc52f0f339d8cfe42654c55df7e986db5985c43ce873555d493251be86a91abcc01aceb5f5421dbb75a49ef831aa4b18e1e6b3d5279d96b714ed0ba178c1ff609e6cbb1220ab5fa69d91c3b22cf4a96d0675a5315795fac37799cd35d57ae1f28661938f40471a1ba0a049a6b326dc522dc513709b9de2464df7032f883ed7", 0xc9}], 0x2) 2.01143693s ago: executing program 1 (id=877): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x6, 0x4, 0x240, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0), &(0x7f0000000380), 0xfff, r0, 0x0, 0xa0028000}, 0x38) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000000540)=ANY=[@ANYBLOB="e80100002e000305000000000000000017fe018ef5b54effe0d36fbe7dddcf7ef2dde4de3d49cc017c5a55b0828d39fe9e9a6acd6b344e93fc6519e52c2b7453648904a40d8af02ace0f09389ce53cbdb080d8598ab12f9f7bf3f9a55ed5a908dd22f7ea4f2bf2d71b2baac0f2494eb6ef6ab1ba7d7aa97f0701dcf500bf34d3aa4b3e8d6d000050f28efbece0c4e61c523601f22d8a6b69e6a3b39c4b9c1d1fdf9304b826ab58a9cc38d16826d749ffb6c840b144132b9fd33b72745a425fe08f3a0a5bc1a38fd93f91b062c0516aadad566bbe0f45772b18e82ef7fcf23c00000000000000", @ANYRES32=r1, @ANYBLOB="04000080ec005b80ee5c4e21864f48896e1bc8dbcb64793ad778573b950142d933f9c539b46e12f8ff611f1c3d04bee891b9cc77728e28ca3d25defda4ca40b6fadccf6e8fb420f30d9a4692c9c3d9a16b29f0ed6c6d4a2c7ce388cf7b16b6db23c8843da5605ffdc45d5277967ebab2a10176151f46a03e781deb07a86ee3d82420c404869e6f8a924b6d2c67afe25969cc3e492e26a3578a8e83b991494b958bb46744087241410d78f1c54012ea7e517a4fe7c8c6e2bc554abd2b2ed14df1fd44bf4b0e75a44acb9e34be3e504f0f33aeeca3e52c7fe84f2a9ea6d15f5c3eda089d076254a9a808003d00", @ANYRES32, @ANYBLOB='\x00'], 0x1e8}], 0x1}, 0x80) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a44, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r3, &(0x7f00000000c0), 0x9) sendfile(r3, r2, 0x0, 0x10000) unshare(0x0) r4 = socket$rds(0x15, 0x5, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r6, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8}, 0x4c) setsockopt$SO_RDS_TRANSPORT(r4, 0x114, 0x8, &(0x7f0000000380)=0x2, 0x4) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r8, 0x0) preadv(r8, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x12, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000036000000000000000000000091123700000000009500"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0xf, r8, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) 1.855853444s ago: executing program 2 (id=878): openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket(0x2, 0x3, 0x6) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000200000000"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x5, 0xe, 0x0, &(0x7f0000000000)="251200d800"/14, 0x0, 0x7ff, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0, 0x0, 0x4}, 0x18) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f0000000f00)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000015}, 0x4000) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r4, 0x11b, 0x3, &(0x7f00000001c0)=0x200000, 0x4) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, 0x0, 0x0) 1.855339534s ago: executing program 3 (id=879): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0xc}}, {0xa, 0x0, 0x0, @mcast2}, 0x0, {[0x7, 0x0, 0x0, 0x0, 0xfffffffe, 0x1ff]}}, 0x5c) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_udp(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet6(0x10, 0x3, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000280)=[{0x20, 0x0, 0x77, 0xfffff038}, {0x30}, {0x6, 0x0, 0x0, 0xfffffffe}]}, 0x10) sendmmsg(r4, &(0x7f0000001c00), 0x400000000000159, 0x40840) ioctl$int_in(r1, 0x5421, &(0x7f00000005c0)=0x7) setsockopt$bt_BT_FLUSHABLE(r3, 0x112, 0x8, &(0x7f0000000000), 0x4) r6 = socket$inet6(0xa, 0x3, 0x8000000003c) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x1c2, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x0) syz_80211_join_ibss(&(0x7f0000000240)='wlan0\x00', &(0x7f0000000380)=@random="536afa2fa2da0adca095ffbd284afe18b8a4d38dd83aacbe43ccd12f7e47", 0x1e, 0x1) connect$inet6(r6, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 1.854869738s ago: executing program 0 (id=888): r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x403, 0x70bd29, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_PDP_HASHSIZE={0x8, 0x3, 0x1}]}}}]}, 0x38}}, 0x0) setsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, 0x0, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) shutdown(r2, 0x0) recvmmsg(r2, &(0x7f00000004c0), 0xf02, 0xf0, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000540)='rcu_utilization\x00', r3}, 0x18) bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x11}, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f00000001c0)=@generic={&(0x7f0000000180)='./file0\x00', 0x0, 0x10}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000001000030400000000fedbdf2500000300", @ANYRES32=0x0, @ANYBLOB="0000be281f000000200012800b00010067656e65766500001000028004000e0005000a0001"], 0x40}}, 0x0) r4 = socket$inet6(0xa, 0x3, 0x3c) socket(0x1e, 0x4, 0x0) writev(r4, &(0x7f0000000140)=[{0x0}, {&(0x7f0000000240)="61af1a3a5aaefcd37b2f8cc9527118bcab4015ed3e54ba8eb37c741d70bf144802ece1f9884efd48846381521597a1df066f9267fdeea5dd683d7e9ca920219558e9db5a9d71ad6b31eecc52f0f339d8cfe42654c55df7e986db5985c43ce873555d493251be86a91abcc01aceb5f5421dbb75a49ef831aa4b18e1e6b3d5279d96b714ed0ba178c1ff609e6cbb1220ab5fa69d91c3b22cf4a96d0675a5315795fac37799cd35d57ae1f28661938f40471a1ba0a049a6b326dc522dc513709b9de2464df7032f883ed7", 0xc9}], 0x2) 1.750441783s ago: executing program 4 (id=880): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(0x0, r0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x1004e22}, 0x6e) socket$unix(0x1, 0x5, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$unix(r2, &(0x7f0000000240)=@file={0x1, './file0\x00'}, 0x6e) syz_genetlink_get_family_id$tipc2(&(0x7f0000000b80), 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) connect$netrom(0xffffffffffffffff, &(0x7f0000001580)={{0x3, @null, 0x6}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast]}, 0x48) ioctl$sock_SIOCETHTOOL(r1, 0x8946, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r3, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4044001}, 0x4044090) ioctl$PPPIOCGNPMODE(0xffffffffffffffff, 0x4008744b, 0x0) bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0) 1.049411407s ago: executing program 0 (id=881): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) write$cgroup_subtree(r0, &(0x7f00000002c0)={[{0x2b, 'net_prio'}, {0x2d, 'cpu'}, {0x2b, 'rlimit'}, {0x2d, 'hugetlb'}, {0x2d, 'net'}, {0x2d, 'cpuacct'}, {0x2b, 'devices'}, {0x2d, 'io'}, {0x2d, 'rdma'}]}, 0x41) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r1, &(0x7f0000000080)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8) listen(r1, 0x86a) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000080)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0, @void, @value, @void, @value}, 0x50) unshare(0x26000400) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f00000000c0)={'syztnl2\x00', 0x0, 0x4, 0x8, 0x0, 0x1000401, 0x1d, @private1={0xfc, 0x1, '\x00', 0x1}, @loopback={0xfec0ffff00000000, 0x2}, 0x20, 0x8, 0x3, 0x84}}) r3 = socket$inet6(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000190001000000000000000000021800000000fd000000ed0008000100ac1414000800080004"], 0x2c}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$rds(0x15, 0x5, 0x0) bind$rds(r5, &(0x7f00000001c0)={0x2, 0xfffd, @remote}, 0xfffffff1) sendmsg$rds(r5, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}], 0x1}}, @rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000004c0)}}], 0x90}, 0x0) read(r4, 0x0, 0x0) r6 = syz_init_net_socket$x25(0x9, 0x5, 0x0) getsockname(r6, 0x0, &(0x7f00000001c0)) sendmsg$IPSET_CMD_SAVE(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x1c, 0x8, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x10) sendto$inet6(r3, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 967.790062ms ago: executing program 3 (id=882): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)={0x2, 0x3, 0x0, 0x3, 0xb, 0x0, 0x0, 0x0, [@sadb_key={0x1, 0x9}, @sadb_address={0x3, 0x6}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x6, 0xb}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local={0xac, 0x14, 0x1d}}}]}, 0x58}, 0x1, 0x7}, 0x0) sendmsg$key(r0, 0x0, 0x4040000) r1 = accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000080), 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r3 = socket(0x10, 0x400000000080803, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f00000001c0)=@ethtool_ringparam={0x4, 0x0, 0x48, 0xfffffffe, 0xc11, 0x7, 0x20000, 0x0, 0xf}}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETOFFLOAD(r4, 0x400454c9, 0xba98575a95aeb70d) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r5) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x4, 0x3, &(0x7f0000000000)=@framed={{0x7a, 0xa, 0x0, 0xff00, 0x0, 0x71, 0x10, 0x39}}, &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x1d, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_devices(r2, &(0x7f0000000840)=ANY=[@ANYBLOB="1e0308004d6b71ef288563"], 0xffdd) syz_init_net_socket$rose(0xb, 0x5, 0x0) close(r4) close(0x4) setsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f00000000c0)={@ipv4={'\x00', '\xff\xff', @empty}}, 0x14) 763.285964ms ago: executing program 0 (id=883): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$kcm(0x29, 0x2, 0x0) write$cgroup_pressure(r1, &(0x7f0000000140)={'full'}, 0xfffffdef) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x5452, &(0x7f0000000000)) recvmmsg(r0, &(0x7f0000000300)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000000, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xffffffc1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, r2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000240)=@o_path={0x0, 0x0, 0x4020, r3}, 0x18) 619.831695ms ago: executing program 1 (id=884): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000240), 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f00000000c0), 0x10) sendmsg$can_bcm(r1, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r4, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r5, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@newlink={0x50, 0x10, 0x503, 0x0, 0x700, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @local}]}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x50}, 0x1, 0x0, 0x0, 0x800}, 0xc0b0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f00000017c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff7e, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r8, &(0x7f0000000200), 0x806000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r7, 0x0) 31.851886ms ago: executing program 4 (id=885): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x6, 0x4, 0x240, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0), &(0x7f0000000380), 0xfff, r0, 0x0, 0xa0028000}, 0x38) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="24000000f0315fab6acdb1e173526e2e00030500000000000000000800008008001c000600000008009300", @ANYRES32=r1, @ANYBLOB], 0x24}], 0x1}, 0x80) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a44, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r3, &(0x7f00000000c0), 0x9) sendfile(r3, r2, 0x0, 0x10000) unshare(0x20000400) r4 = socket$rds(0x15, 0x5, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(r4, 0x114, 0x8, &(0x7f0000000380)=0x2, 0x4) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) preadv(r5, 0x0, 0x0, 0x0, 0x0) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r6, &(0x7f0000000000)="3b000300010010", 0x7) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) recvmsg$can_bcm(r6, &(0x7f0000002480)={0x0, 0x0, &(0x7f0000002400)=[{&(0x7f0000000140)=""/6, 0x6}], 0x1}, 0x100) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x12, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000036000000000000000000000091123700000000009500"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0xf, r5, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) 30.716827ms ago: executing program 0 (id=886): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) getpeername$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000001c0)=0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x6, 0x0, @void, @value}, 0x28) unshare(0x40020000) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000e40)=ANY=[@ANYBLOB="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"/3576], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='rcu_utilization\x00', r0, 0x0, 0x2}, 0x18) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="080000020001000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000ffffffff00"/21], 0x50) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000000c0), 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r2 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r3 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r3, 0x400448c8, &(0x7f00000000c0)={r1, r1, 0x206, 0x0, 0x0, 0x2, 0x84, 0x8, 0x3, 0x801, 0x0, 0x8, 'syz1\x00'}) socket$kcm(0x2, 0x1, 0x84) ioctl$sock_bt_hidp_HIDPCONNDEL(r2, 0x400448c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}) 0s ago: executing program 2 (id=887): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x6, 0x4, 0x240, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0), &(0x7f0000000380), 0xfff, r0, 0x0, 0xa0028000}, 0x38) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000000040)={0x24, 0x2e, 0x503, 0x0, 0x0, "", [@nested={0x4}, @typed={0x8, 0x11c, 0x0, 0x0, @u32=0x6}, @typed={0x8, 0x93, 0x0, 0x0, @fd=r1}]}, 0x24}], 0x1}, 0x80) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a44, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r3, &(0x7f00000000c0), 0x9) sendfile(r3, r2, 0x0, 0x10000) unshare(0x20000400) r4 = socket$rds(0x15, 0x5, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(r4, 0x114, 0x8, &(0x7f0000000380)=0x2, 0x4) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) preadv(r5, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.239' (ED25519) to the list of known hosts. [ 78.770033][ T5817] cgroup: Unknown subsys name 'net' [ 78.900344][ T5817] cgroup: Unknown subsys name 'cpuset' [ 78.909697][ T5817] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 80.515177][ T5817] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 83.113314][ T55] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 83.122050][ T55] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 83.126946][ T5838] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 83.129972][ T55] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 83.137813][ T5838] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 83.144598][ T55] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 83.158691][ T55] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 83.161623][ T5838] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 83.167118][ T55] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 83.174474][ T5838] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 83.201165][ T5839] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 83.208824][ T5839] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 83.217625][ T5845] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 83.220783][ T5839] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 83.256527][ T5839] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 83.256599][ T5845] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 83.286437][ T5845] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 83.291208][ T5847] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 83.300219][ T5141] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 83.308848][ T5845] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 83.316571][ T5847] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 83.324447][ T5835] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 83.326514][ T5141] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 83.342415][ T5141] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 83.358843][ T5141] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 84.006806][ T5827] chnl_net:caif_netlink_parms(): no params data found [ 84.033372][ T5833] chnl_net:caif_netlink_parms(): no params data found [ 84.143164][ T5840] chnl_net:caif_netlink_parms(): no params data found [ 84.185649][ T5829] chnl_net:caif_netlink_parms(): no params data found [ 84.276267][ T5828] chnl_net:caif_netlink_parms(): no params data found [ 84.353102][ T5833] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.360994][ T5833] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.368873][ T5833] bridge_slave_0: entered allmulticast mode [ 84.376429][ T5833] bridge_slave_0: entered promiscuous mode [ 84.385275][ T5833] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.392619][ T5833] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.399874][ T5833] bridge_slave_1: entered allmulticast mode [ 84.407728][ T5833] bridge_slave_1: entered promiscuous mode [ 84.487068][ T5827] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.494258][ T5827] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.501595][ T5827] bridge_slave_0: entered allmulticast mode [ 84.509314][ T5827] bridge_slave_0: entered promiscuous mode [ 84.559109][ T5833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.571851][ T5833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.587226][ T5827] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.594451][ T5827] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.602019][ T5827] bridge_slave_1: entered allmulticast mode [ 84.609494][ T5827] bridge_slave_1: entered promiscuous mode [ 84.645756][ T5840] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.653068][ T5840] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.661173][ T5840] bridge_slave_0: entered allmulticast mode [ 84.668814][ T5840] bridge_slave_0: entered promiscuous mode [ 84.726338][ T5840] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.733899][ T5840] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.741716][ T5840] bridge_slave_1: entered allmulticast mode [ 84.749794][ T5840] bridge_slave_1: entered promiscuous mode [ 84.804437][ T5827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.841080][ T5833] team0: Port device team_slave_0 added [ 84.847895][ T5829] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.855095][ T5829] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.862447][ T5829] bridge_slave_0: entered allmulticast mode [ 84.870275][ T5829] bridge_slave_0: entered promiscuous mode [ 84.881922][ T5827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.926849][ T5840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.940198][ T5840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.952428][ T5833] team0: Port device team_slave_1 added [ 84.958881][ T5829] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.967076][ T5829] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.974286][ T5829] bridge_slave_1: entered allmulticast mode [ 84.982272][ T5829] bridge_slave_1: entered promiscuous mode [ 85.014903][ T5828] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.022134][ T5828] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.029432][ T5828] bridge_slave_0: entered allmulticast mode [ 85.036951][ T5828] bridge_slave_0: entered promiscuous mode [ 85.102714][ T5827] team0: Port device team_slave_0 added [ 85.109098][ T5828] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.116914][ T5828] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.124112][ T5828] bridge_slave_1: entered allmulticast mode [ 85.131892][ T5828] bridge_slave_1: entered promiscuous mode [ 85.152605][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.162517][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.188775][ T5833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.230588][ T5829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.242044][ T5827] team0: Port device team_slave_1 added [ 85.267433][ T5828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.280191][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.287263][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.307355][ T55] Bluetooth: hci1: command tx timeout [ 85.317701][ T5833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.340574][ T5840] team0: Port device team_slave_0 added [ 85.349827][ T5840] team0: Port device team_slave_1 added [ 85.358328][ T5829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.383869][ T5828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.393235][ T55] Bluetooth: hci3: command tx timeout [ 85.396321][ T5838] Bluetooth: hci0: command tx timeout [ 85.399298][ T55] Bluetooth: hci2: command tx timeout [ 85.404402][ T5141] Bluetooth: hci4: command tx timeout [ 85.479909][ T5828] team0: Port device team_slave_0 added [ 85.488921][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.496063][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.524806][ T5827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.537902][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.544892][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.572192][ T5827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.613355][ T5828] team0: Port device team_slave_1 added [ 85.639442][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.646723][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.672961][ T5840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.686520][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.693507][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.719921][ T5840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.734264][ T5829] team0: Port device team_slave_0 added [ 85.743745][ T5829] team0: Port device team_slave_1 added [ 85.812330][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.819452][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.846208][ T5828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.864106][ T5833] hsr_slave_0: entered promiscuous mode [ 85.871186][ T5833] hsr_slave_1: entered promiscuous mode [ 85.894492][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.901832][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.928150][ T5828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.982241][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.989401][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.015806][ T5829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.061615][ T5827] hsr_slave_0: entered promiscuous mode [ 86.068558][ T5827] hsr_slave_1: entered promiscuous mode [ 86.074818][ T5827] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 86.083353][ T5827] Cannot create hsr debugfs directory [ 86.098980][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.105950][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.134940][ T5829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.167010][ T5840] hsr_slave_0: entered promiscuous mode [ 86.173417][ T5840] hsr_slave_1: entered promiscuous mode [ 86.180253][ T5840] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 86.187928][ T5840] Cannot create hsr debugfs directory [ 86.302448][ T5828] hsr_slave_0: entered promiscuous mode [ 86.309802][ T5828] hsr_slave_1: entered promiscuous mode [ 86.315911][ T5828] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 86.324120][ T5828] Cannot create hsr debugfs directory [ 86.398437][ T5829] hsr_slave_0: entered promiscuous mode [ 86.404992][ T5829] hsr_slave_1: entered promiscuous mode [ 86.411723][ T5829] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 86.419454][ T5829] Cannot create hsr debugfs directory [ 86.984439][ T5833] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 87.023133][ T5833] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 87.048287][ T5833] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 87.075006][ T5833] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 87.153897][ T5828] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 87.194853][ T5828] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 87.225469][ T5828] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 87.256517][ T5828] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 87.303361][ T5840] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 87.352974][ T5840] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 87.363380][ T5840] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 87.386663][ T5141] Bluetooth: hci1: command tx timeout [ 87.396725][ T5840] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 87.467482][ T5141] Bluetooth: hci2: command tx timeout [ 87.467639][ T55] Bluetooth: hci4: command tx timeout [ 87.472936][ T5834] Bluetooth: hci0: command tx timeout [ 87.478532][ T5838] Bluetooth: hci3: command tx timeout [ 87.502386][ T5827] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 87.514148][ T5827] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 87.543387][ T5827] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 87.563541][ T5827] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 87.598006][ T5833] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.683528][ T5829] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 87.712163][ T5833] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.721978][ T5829] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 87.740590][ T5829] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 87.770994][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.778441][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.792747][ T5829] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 87.820479][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.851454][ T2127] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.858761][ T2127] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.890885][ T5828] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.951879][ T4578] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.959130][ T4578] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.988142][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.995331][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.028922][ T5840] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.098062][ T5840] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.161859][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.169190][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.181193][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.188430][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.290082][ T5827] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.384047][ T5829] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.437515][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.450620][ T5827] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.489838][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.497844][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.528132][ T5829] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.563289][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.570513][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.585983][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.593198][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.680431][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.687832][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.828558][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.835923][ T5833] veth0_vlan: entered promiscuous mode [ 88.907460][ T5833] veth1_vlan: entered promiscuous mode [ 88.974543][ T5840] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.102011][ T5833] veth0_macvtap: entered promiscuous mode [ 89.134036][ T5833] veth1_macvtap: entered promiscuous mode [ 89.211442][ T5840] veth0_vlan: entered promiscuous mode [ 89.231838][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.262669][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.337829][ T5840] veth1_vlan: entered promiscuous mode [ 89.359771][ T5827] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.375043][ T5833] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.385079][ T5833] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.394217][ T5833] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.403195][ T5833] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.461158][ T5829] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.468423][ T5838] Bluetooth: hci1: command tx timeout [ 89.519753][ T5840] veth0_macvtap: entered promiscuous mode [ 89.547049][ T55] Bluetooth: hci3: command tx timeout [ 89.547202][ T5834] Bluetooth: hci2: command tx timeout [ 89.552511][ T55] Bluetooth: hci4: command tx timeout [ 89.567051][ T5838] Bluetooth: hci0: command tx timeout [ 89.593879][ T5840] veth1_macvtap: entered promiscuous mode [ 89.603879][ T5828] veth0_vlan: entered promiscuous mode [ 89.642294][ T5827] veth0_vlan: entered promiscuous mode [ 89.687613][ T5827] veth1_vlan: entered promiscuous mode [ 89.695797][ T1146] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.710791][ T5828] veth1_vlan: entered promiscuous mode [ 89.722663][ T1146] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.762908][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.775915][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.790707][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.832919][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.845753][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.857839][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.884169][ T5840] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.893390][ T5840] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.902876][ T5840] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.911742][ T5840] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.930353][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.941870][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.962631][ T5827] veth0_macvtap: entered promiscuous mode [ 89.978258][ T5829] veth0_vlan: entered promiscuous mode [ 90.015236][ T5827] veth1_macvtap: entered promiscuous mode [ 90.037448][ T5828] veth0_macvtap: entered promiscuous mode [ 90.058033][ T5829] veth1_vlan: entered promiscuous mode [ 90.103167][ T5828] veth1_macvtap: entered promiscuous mode [ 90.128035][ T5833] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 90.159715][ T5827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.175444][ T5827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.185378][ T5827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.197986][ T5827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.209624][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.220591][ T5827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.232058][ T5827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.242361][ T5827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.252960][ T5827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.264266][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.289297][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.300110][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.311701][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.322593][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.332807][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.343442][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.355006][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.365854][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.382252][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.392901][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.409440][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.420535][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.438481][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.450926][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.512129][ T5827] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.521215][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.531766][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.539827][ T5827] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.553875][ T5827] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.564537][ T5827] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.599991][ T5828] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.646080][ T5828] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.654837][ T5828] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.696107][ T5828] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.770282][ T5829] veth0_macvtap: entered promiscuous mode [ 90.845019][ T5829] veth1_macvtap: entered promiscuous mode [ 90.951973][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.981246][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.085214][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.125365][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.147937][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.166099][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.201277][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.242324][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.266058][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.299291][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.310262][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.321215][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.335299][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.365166][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.375967][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.385952][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.398101][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.411510][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.422131][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.444358][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.455088][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.474691][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.488481][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.498477][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.527958][ T5829] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.546778][ T5838] Bluetooth: hci1: command tx timeout [ 91.553532][ T5829] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.562950][ T5829] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.572131][ T5829] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.629304][ T5838] Bluetooth: hci4: command tx timeout [ 91.629399][ T55] Bluetooth: hci0: command tx timeout [ 91.634826][ T5838] Bluetooth: hci2: command tx timeout [ 91.642371][ T55] Bluetooth: hci3: command tx timeout [ 91.664519][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.679605][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.718821][ T5925] netlink: 136 bytes leftover after parsing attributes in process `syz.2.3'. [ 91.728232][ T5925] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 91.774642][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.804927][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.967342][ T975] cfg80211: failed to load regulatory.db [ 92.001800][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.037792][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.192546][ T4578] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.205178][ T4578] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.349490][ T5932] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5'. [ 93.446930][ T5990] netlink: 'syz.2.12': attribute type 16 has an invalid length. [ 93.454660][ T5990] netlink: 'syz.2.12': attribute type 17 has an invalid length. [ 93.874801][ T5990] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 94.079673][ T6001] syz.2.12 (6001) used greatest stack depth: 19816 bytes left [ 94.159521][ T6006] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13'. [ 94.334217][ T6006] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.429337][ T6009] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14'. [ 94.599067][ T6018] netlink: 8 bytes leftover after parsing attributes in process `syz.0.17'. [ 94.638790][ T6006] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.852042][ T6024] netlink: 36 bytes leftover after parsing attributes in process `syz.1.19'. [ 94.865065][ T6028] Zero length message leads to an empty skb [ 94.879084][ T6006] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.905849][ T6024] Driver unsupported XDP return value 0 on prog (id 15) dev N/A, expect packet loss! [ 94.967137][ T6028] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.057249][ T6006] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.171002][ T6028] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.325817][ T6028] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.568976][ T6028] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.570791][ T6035] netlink: 8 bytes leftover after parsing attributes in process `syz.1.24'. [ 95.652152][ T6035] vlan2: entered promiscuous mode [ 95.661992][ T6035] bond0: entered promiscuous mode [ 95.667722][ T6035] bond_slave_0: entered promiscuous mode [ 95.673741][ T6035] bond_slave_1: entered promiscuous mode [ 95.742360][ T6006] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.782203][ T6006] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.796422][ T6039] netlink: 40 bytes leftover after parsing attributes in process `syz.2.25'. [ 95.825366][ T6006] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.960121][ T6006] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.112711][ T6048] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 96.130810][ T6028] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.167569][ T6049] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 96.168541][ T6028] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.231247][ T6028] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.269289][ T6028] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.349943][ T6054] netlink: 4 bytes leftover after parsing attributes in process `syz.2.30'. [ 96.391143][ T6054] netlink: 4 bytes leftover after parsing attributes in process `syz.2.30'. [ 96.851079][ T6060] syzkaller0: entered promiscuous mode [ 96.852167][ T6061] syz.2.32 uses obsolete (PF_INET,SOCK_PACKET) [ 96.864313][ T6060] syzkaller0: entered allmulticast mode [ 97.862339][ T6079] netlink: 4 bytes leftover after parsing attributes in process `syz.1.40'. [ 97.934803][ T6079] netlink: 12 bytes leftover after parsing attributes in process `syz.1.40'. [ 98.423729][ T6100] IPv6: Can't replace route, no match found [ 98.544527][ T6100] sch_tbf: peakrate 2 is lower than or equals to rate 2 ! [ 100.116384][ T6143] netlink: 8 bytes leftover after parsing attributes in process `syz.3.63'. [ 100.151043][ T6143] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 100.170182][ T6143] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 32 [ 100.189272][ T6143] No such timeout policy "syz0" [ 100.483565][ T6148] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 100.493004][ T6153] netlink: 'syz.3.67': attribute type 1 has an invalid length. [ 100.558536][ T6150] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 100.615136][ T6151] netlink: 'syz.0.66': attribute type 30 has an invalid length. [ 100.625170][ T6158] netlink: 20 bytes leftover after parsing attributes in process `syz.4.69'. [ 100.634201][ T6156] team_slave_0: entered promiscuous mode [ 100.634226][ T6156] team_slave_0: entered allmulticast mode [ 100.651187][ T6158] netlink: 32 bytes leftover after parsing attributes in process `syz.4.69'. [ 100.656575][ T6151] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 100.668462][ T6151] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 100.676869][ T6151] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 100.685209][ T6151] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 100.698922][ T6151] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 100.707560][ T6151] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 100.717544][ T6151] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 100.725966][ T6151] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 100.762214][ T6159] tipc: Started in network mode [ 100.767678][ T6159] tipc: Node identity cac4f39edf88, cluster identity 4711 [ 100.775732][ T6159] tipc: Enabled bearer , priority 0 [ 100.870039][ T6155] syzkaller0: entered promiscuous mode [ 100.875593][ T6155] syzkaller0: entered allmulticast mode [ 100.884421][ T6155] tipc: Resetting bearer [ 101.122145][ T6154] tipc: Resetting bearer [ 101.858045][ T5882] tipc: Node number set to 357364638 [ 102.929479][ T6154] tipc: Disabling bearer [ 103.144469][ T6199] netlink: 1 bytes leftover after parsing attributes in process `syz.2.83'. [ 103.453498][ T6214] Bluetooth: MGMT ver 1.23 [ 103.718204][ T6224] netlink: 'syz.4.90': attribute type 39 has an invalid length. [ 103.834913][ T6227] netlink: 12 bytes leftover after parsing attributes in process `syz.0.91'. [ 104.174045][ T6233] netlink: 12 bytes leftover after parsing attributes in process `syz.3.93'. [ 104.577120][ T6255] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 104.587521][ T6255] TCP: tcp_parse_options: Illegal window scaling value 195 > 14 received [ 105.461916][ T6279] netlink: 8 bytes leftover after parsing attributes in process `syz.3.106'. [ 105.497540][ T6281] netlink: 4 bytes leftover after parsing attributes in process `syz.2.105'. [ 106.134090][ T6307] sit0: entered promiscuous mode [ 106.166648][ T6305] nbd: device at index 0 is going down [ 106.189141][ T6307] netlink: 'syz.4.112': attribute type 1 has an invalid length. [ 106.211245][ T6307] netlink: 1 bytes leftover after parsing attributes in process `syz.4.112'. [ 106.404083][ T6311] TCP: tcp_parse_options: Illegal window scaling value 254 > 14 received [ 106.478861][ T6311] Bluetooth: MGMT ver 1.23 [ 106.504048][ T6314] netlink: 8 bytes leftover after parsing attributes in process `syz.2.114'. [ 106.731823][ T6320] netlink: 'syz.1.117': attribute type 1 has an invalid length. [ 107.035230][ T6327] vlan3: entered promiscuous mode [ 107.066108][ T6327] netdevsim netdevsim1 netdevsim1: entered promiscuous mode [ 107.073684][ T6327] vlan3: entered allmulticast mode [ 107.096872][ T6327] netdevsim netdevsim1 netdevsim1: entered allmulticast mode [ 107.116959][ T6330] netlink: 'syz.3.120': attribute type 4 has an invalid length. [ 107.293318][ T6335] tipc: Started in network mode [ 107.301509][ T6335] tipc: Node identity b2323d338824, cluster identity 4711 [ 107.320257][ T6335] tipc: Enabled bearer , priority 0 [ 107.332145][ T6335] syzkaller0: entered promiscuous mode [ 107.339290][ T6335] syzkaller0: entered allmulticast mode [ 107.501366][ T6344] netlink: 28 bytes leftover after parsing attributes in process `syz.0.125'. [ 107.514786][ T6344] netlink: 28 bytes leftover after parsing attributes in process `syz.0.125'. [ 107.861199][ T6340] tipc: Resetting bearer [ 107.908177][ T6344] dummy0: entered promiscuous mode [ 107.926491][ T6344] dummy0: left promiscuous mode [ 108.013868][ T6334] tipc: Resetting bearer [ 108.085781][ T6334] tipc: Disabling bearer [ 108.532937][ T6372] netlink: 'syz.3.136': attribute type 13 has an invalid length. [ 108.891880][ T6372] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.900619][ T6372] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.592301][ T6372] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 109.681404][ T6372] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 110.070818][ T6372] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.101164][ T6372] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.130549][ T6372] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.163243][ T6372] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.638536][ T6399] syzkaller0: entered promiscuous mode [ 110.645869][ T6399] syzkaller0: entered allmulticast mode [ 113.670333][ T6410] lo speed is unknown, defaulting to 1000 [ 113.688141][ T6423] netlink: 'syz.2.151': attribute type 11 has an invalid length. [ 113.699969][ T6423] netlink: 36 bytes leftover after parsing attributes in process `syz.2.151'. [ 113.800202][ T6410] lo speed is unknown, defaulting to 1000 [ 113.822335][ T6410] lo speed is unknown, defaulting to 1000 [ 113.874200][ T6410] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 113.970346][ T6410] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 114.090951][ T6432] Cannot find add_set index 0 as target [ 114.149987][ T6410] lo speed is unknown, defaulting to 1000 [ 114.172564][ T6410] lo speed is unknown, defaulting to 1000 [ 114.210861][ T6410] lo speed is unknown, defaulting to 1000 [ 114.251020][ T6410] lo speed is unknown, defaulting to 1000 [ 114.270482][ T6410] lo speed is unknown, defaulting to 1000 [ 114.585152][ T6441] netlink: 4 bytes leftover after parsing attributes in process `syz.2.159'. [ 114.625143][ T6441] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 114.812152][ T6441] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 116.129056][ T6479] vlan5: entered promiscuous mode [ 116.134163][ T6479] vlan4: entered promiscuous mode [ 116.190394][ T6479] gretap0: entered promiscuous mode [ 116.759618][ T6491] bpq0: entered promiscuous mode [ 116.778447][ T6491] bpq0: entered allmulticast mode [ 117.538423][ T6505] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 117.920416][ T6518] netlink: 4 bytes leftover after parsing attributes in process `syz.4.187'. [ 117.989321][ T6518] ipvlan2: entered promiscuous mode [ 118.019775][ T6518] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 118.052223][ T6518] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 118.080026][ T6520] netlink: 8 bytes leftover after parsing attributes in process `syz.2.188'. [ 118.108138][ T6520] netlink: 8 bytes leftover after parsing attributes in process `syz.2.188'. [ 118.133597][ T6520] netlink: 8 bytes leftover after parsing attributes in process `syz.2.188'. [ 118.194260][ T6523] netlink: 8 bytes leftover after parsing attributes in process `syz.2.188'. [ 118.216188][ T6526] netlink: 8 bytes leftover after parsing attributes in process `syz.1.190'. [ 118.232997][ T6523] netlink: 8 bytes leftover after parsing attributes in process `syz.2.188'. [ 118.285166][ T6526] pim6reg9: entered allmulticast mode [ 118.570137][ T6532] netlink: 24 bytes leftover after parsing attributes in process `syz.1.193'. [ 118.588848][ T6531] bridge0: entered promiscuous mode [ 118.595873][ T6531] vlan2: entered promiscuous mode [ 118.790037][ T6534] netlink: 8 bytes leftover after parsing attributes in process `syz.4.192'. [ 118.843783][ T6534] netlink: 4 bytes leftover after parsing attributes in process `syz.4.192'. [ 118.908770][ T6538] syzkaller1: entered promiscuous mode [ 118.960715][ T6534] netlink: 'syz.4.192': attribute type 12 has an invalid length. [ 118.975351][ T6538] syzkaller1: entered allmulticast mode [ 119.030385][ T6546] lo speed is unknown, defaulting to 1000 [ 119.119320][ T6549] syzkaller0: entered promiscuous mode [ 119.124944][ T6549] syzkaller0: entered allmulticast mode [ 119.178560][ T6555] bpq0: left promiscuous mode [ 119.196253][ T6555] bpq0: left allmulticast mode [ 119.776942][ T6567] xt_TCPMSS: Only works on TCP SYN packets [ 120.455859][ T6571] x_tables: duplicate underflow at hook 1 [ 122.042307][ T6581] xt_hashlimit: size too large, truncated to 1048576 [ 122.148757][ T6585] IPVS: length: 78 != 8 [ 122.267667][ T6574] lo speed is unknown, defaulting to 1000 [ 122.409070][ T6592] netlink: 'syz.4.208': attribute type 1 has an invalid length. [ 122.716585][ T6592] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 122.807874][ T6597] veth3: entered promiscuous mode [ 122.831287][ T6597] bond1: (slave veth3): Enslaving as a backup interface with a down link [ 123.447790][ T6613] x_tables: duplicate underflow at hook 1 [ 124.205180][ T47] IPVS: starting estimator thread 0... [ 124.346545][ T6626] IPVS: using max 27 ests per chain, 64800 per kthread [ 124.707719][ T6638] netlink: 12 bytes leftover after parsing attributes in process `syz.2.221'. [ 124.743392][ T6638] netlink: 12 bytes leftover after parsing attributes in process `syz.2.221'. [ 124.790409][ T6638] netlink: 20 bytes leftover after parsing attributes in process `syz.2.221'. [ 125.120227][ T6651] lo speed is unknown, defaulting to 1000 [ 125.597555][ T6665] netlink: 8 bytes leftover after parsing attributes in process `syz.3.229'. [ 125.680816][ T6662] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 125.704115][ T6662] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 125.728653][ T6662] bond0 (unregistering): Released all slaves [ 125.773725][ T6667] warning: `syz.2.230' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 126.103781][ T6681] rdma_op ffff8880305859f0 conn xmit_rdma 0000000000000000 [ 126.141581][ T6678] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 126.194719][ T6687] netlink: 104 bytes leftover after parsing attributes in process `syz.1.237'. [ 126.475397][ T6692] vlan3: entered promiscuous mode [ 126.495549][ T6692] bond0: entered promiscuous mode [ 126.508045][ T6692] bond_slave_0: entered promiscuous mode [ 126.522856][ T6692] bond_slave_1: entered promiscuous mode [ 126.729140][ T6711] netlink: 4 bytes leftover after parsing attributes in process `syz.3.245'. [ 127.123903][ T6716] lo speed is unknown, defaulting to 1000 [ 127.267607][ T6721] netlink: 'syz.3.248': attribute type 1 has an invalid length. [ 128.240483][ T6731] netlink: zone id is out of range [ 128.260920][ T6731] netlink: zone id is out of range [ 128.264754][ T6733] openvswitch: netlink: Key type 134 is out of range max 32 [ 128.277933][ T6731] netlink: zone id is out of range [ 128.286332][ T6731] netlink: zone id is out of range [ 128.301752][ T6731] netlink: zone id is out of range [ 128.313259][ T6731] netlink: zone id is out of range [ 128.384563][ T6731] netlink: set zone limit has 4 unknown bytes [ 128.679701][ T6739] netlink: 4 bytes leftover after parsing attributes in process `syz.4.254'. [ 129.131587][ T6745] netlink: 12 bytes leftover after parsing attributes in process `syz.1.258'. [ 129.299421][ T6745] 8021q: adding VLAN 0 to HW filter on device bond1 [ 129.396738][ T6751] netlink: 12 bytes leftover after parsing attributes in process `syz.0.259'. [ 129.449111][ T6749] vlan5: entered allmulticast mode [ 129.496109][ T6749] bond1: entered allmulticast mode [ 130.951053][ T6770] netlink: 'syz.4.262': attribute type 16 has an invalid length. [ 130.964269][ T6768] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.981051][ T6770] netlink: 'syz.4.262': attribute type 17 has an invalid length. [ 131.006209][ T6768] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.231059][ T6770] bridge0: port 1(bridge_slave_0) entered blocking state [ 131.238490][ T6770] bridge0: port 1(bridge_slave_0) entered forwarding state [ 131.278047][ T6770] bridge0: port 2(bridge_slave_1) entered blocking state [ 131.285327][ T6770] bridge0: port 2(bridge_slave_1) entered forwarding state [ 131.789012][ T6778] pim6reg1: entered promiscuous mode [ 131.794398][ T6778] pim6reg1: entered allmulticast mode [ 131.871728][ T6781] netlink: 16 bytes leftover after parsing attributes in process `syz.0.267'. [ 131.962961][ T6781] netlink: 20 bytes leftover after parsing attributes in process `syz.0.267'. [ 132.031011][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 132.041157][ T5882] IPVS: starting estimator thread 0... [ 132.061719][ T6784] vlan2: entered promiscuous mode [ 132.076585][ T6784] vlan2: entered allmulticast mode [ 132.088841][ T6784] hsr_slave_1: entered allmulticast mode [ 132.088949][ T6787] netlink: 4 bytes leftover after parsing attributes in process `syz.4.268'. [ 132.112794][ T6780] lo speed is unknown, defaulting to 1000 [ 132.146265][ T6786] IPVS: using max 27 ests per chain, 64800 per kthread [ 132.188843][ T6781] geneve2: entered allmulticast mode [ 132.451102][ T6791] netlink: 'syz.1.270': attribute type 13 has an invalid length. [ 132.865035][ T6791] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.872849][ T6791] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.921275][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.928234][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.215007][ T6791] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 133.261229][ T6791] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 134.018579][ T6791] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.031219][ T6791] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.042148][ T6791] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.054652][ T6791] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.120428][ T5882] lo speed is unknown, defaulting to 1000 [ 134.147571][ T6794] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 134.156224][ T5882] syz2: Port: 1 Link DOWN [ 134.226519][ T6815] netlink: 368 bytes leftover after parsing attributes in process `syz.4.274'. [ 134.260950][ T6815] netlink: 4 bytes leftover after parsing attributes in process `syz.4.274'. [ 134.544585][ T6714] Set syz1 is full, maxelem 65536 reached [ 135.136679][ T6843] wg2: entered promiscuous mode [ 135.150629][ T6843] wg2: entered allmulticast mode [ 135.200156][ T6846] IPv6: Can't replace route, no match found [ 135.209512][ T6846] sch_tbf: peakrate 2 is lower than or equals to rate 2 ! [ 135.346875][ T6847] lo speed is unknown, defaulting to 1000 [ 135.585869][ T6852] lo speed is unknown, defaulting to 1000 [ 136.640136][ T53] team0: Port device team_slave_0 removed [ 137.334079][ T6897] netlink: 32 bytes leftover after parsing attributes in process `syz.2.302'. [ 137.349321][ T6897] netlink: 152 bytes leftover after parsing attributes in process `syz.2.302'. [ 137.368609][ T6897] bridge0: port 3(macvlan1) entered blocking state [ 137.382399][ T6897] bridge0: port 3(macvlan1) entered disabled state [ 137.390945][ T6897] macvlan1: entered allmulticast mode [ 137.428870][ T6897] veth1_vlan: entered allmulticast mode [ 137.468400][ T6897] macvlan1: entered promiscuous mode [ 137.974112][ T6897] bridge0: port 3(macvlan1) entered blocking state [ 137.980877][ T6897] bridge0: port 3(macvlan1) entered forwarding state [ 138.050155][ T6897] netlink: 152 bytes leftover after parsing attributes in process `syz.2.302'. [ 138.330184][ T6905] tipc: Enabled bearer , priority 0 [ 138.559154][ T6905] syzkaller0: entered promiscuous mode [ 138.574175][ T6905] syzkaller0: entered allmulticast mode [ 138.590710][ T6905] tipc: Resetting bearer [ 138.709525][ T6904] tipc: Resetting bearer [ 138.938791][ T6932] netlink: 'syz.0.314': attribute type 13 has an invalid length. [ 140.238736][ T6904] tipc: Disabling bearer [ 140.267445][ T6928] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 140.276527][ T6928] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 140.285240][ T6928] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 140.294277][ T6928] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 140.304702][ T6928] vxlan0: entered promiscuous mode [ 140.310982][ T6928] bond0: (slave vxlan0): Enslaving as an active interface with an up link [ 140.514589][ T6942] netlink: 8 bytes leftover after parsing attributes in process `syz.1.317'. [ 140.591648][ T5836] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 140.630922][ T6932] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.638741][ T6932] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.705107][ T6944] netlink: 8 bytes leftover after parsing attributes in process `syz.2.318'. [ 140.815230][ T6932] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 140.833194][ T6932] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 141.075324][ T6932] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.085070][ T6932] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.097765][ T6932] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.126186][ T6932] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.167753][ T6944] dummy0: entered promiscuous mode [ 141.179707][ T6944] bridge0: port 4(macvlan2) entered blocking state [ 141.210625][ T6944] bridge0: port 4(macvlan2) entered disabled state [ 141.246599][ T6944] macvlan2: entered allmulticast mode [ 141.276302][ T6944] dummy0: entered allmulticast mode [ 141.308578][ T6944] macvlan2: entered promiscuous mode [ 141.337385][ T6944] bridge0: port 4(macvlan2) entered blocking state [ 141.344382][ T6944] bridge0: port 4(macvlan2) entered forwarding state [ 141.597170][ T6953] syzkaller0: entered promiscuous mode [ 141.602740][ T6953] syzkaller0: entered allmulticast mode [ 141.644948][ T6956] netlink: 'syz.3.323': attribute type 7 has an invalid length. [ 141.838801][ T6956] : entered promiscuous mode [ 141.899063][ T6958] lo speed is unknown, defaulting to 1000 [ 143.307539][ T6962] veth0_to_bridge: entered promiscuous mode [ 143.327514][ T6969] veth0_to_bridge: left promiscuous mode [ 143.444514][ T6975] netlink: 8 bytes leftover after parsing attributes in process `syz.4.328'. [ 143.469158][ T6977] netlink: 28 bytes leftover after parsing attributes in process `syz.3.329'. [ 143.482382][ T6977] netlink: 28 bytes leftover after parsing attributes in process `syz.3.329'. [ 143.628571][ T55] Bluetooth: hci4: command tx timeout [ 143.935188][ T6990] netlink: 4 bytes leftover after parsing attributes in process `syz.2.333'. [ 143.983340][ T6993] lo speed is unknown, defaulting to 1000 [ 143.996924][ T6993] lo speed is unknown, defaulting to 1000 [ 144.004889][ T6993] lo speed is unknown, defaulting to 1000 [ 144.464559][ T6999] tipc: Failed to remove unknown binding: 66,1,1/357364638:3723465437/3723465439 [ 144.506203][ T6999] tipc: Failed to remove unknown binding: 66,1,1/357364638:3723465437/3723465439 [ 144.536200][ T6999] tipc: Failed to remove unknown binding: 66,1,1/357364638:3723465437/3723465439 [ 144.556312][ T6993] infiniband syz0: set down [ 144.561149][ T6993] infiniband syz0: added lo [ 144.573337][ T6808] lo speed is unknown, defaulting to 1000 [ 144.617772][ T6993] RDS/IB: syz0: added [ 144.623145][ T6993] smc: adding ib device syz0 with port count 1 [ 144.629840][ T6993] smc: ib device syz0 port 1 has pnetid [ 144.640951][ T6993] lo speed is unknown, defaulting to 1000 [ 144.648786][ T5883] lo speed is unknown, defaulting to 1000 [ 144.779336][ T7003] tipc: Enabled bearer , priority 0 [ 144.817953][ T7003] syzkaller0: entered promiscuous mode [ 144.836413][ T7003] syzkaller0: entered allmulticast mode [ 144.913360][ T7003] tipc: Resetting bearer [ 144.980108][ T7002] tipc: Resetting bearer [ 145.100705][ T7002] tipc: Disabling bearer [ 145.332982][ T7013] lo speed is unknown, defaulting to 1000 [ 145.368369][ T6993] lo speed is unknown, defaulting to 1000 [ 145.422937][ T7016] netlink: 4 bytes leftover after parsing attributes in process `syz.1.343'. [ 145.915714][ T7013] lo speed is unknown, defaulting to 1000 [ 146.753864][ T7036] netlink: 'syz.2.350': attribute type 39 has an invalid length. [ 146.822995][ T6993] lo speed is unknown, defaulting to 1000 [ 146.882143][ T7041] vlan5: entered promiscuous mode [ 146.897589][ T7041] bridge0: entered promiscuous mode [ 147.417656][ T7059] netlink: 'syz.1.358': attribute type 1 has an invalid length. [ 147.583217][ T7059] 8021q: adding VLAN 0 to HW filter on device bond2 [ 147.624616][ T7060] bond2: (slave ip6gretap1): making interface the new active one [ 147.643858][ T7060] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link [ 147.647547][ T7066] sctp: [Deprecated]: syz.4.360 (pid 7066) Use of struct sctp_assoc_value in delayed_ack socket option. [ 147.647547][ T7066] Use struct sctp_sack_info instead [ 147.702851][ T7062] wireguard0: entered promiscuous mode [ 147.742527][ T6993] lo speed is unknown, defaulting to 1000 [ 148.049431][ T7070] netlink: zone id is out of range [ 148.054617][ T7070] netlink: zone id is out of range [ 148.086567][ T7070] netlink: zone id is out of range [ 148.091777][ T7070] netlink: zone id is out of range [ 148.113044][ T7070] netlink: zone id is out of range [ 148.127028][ T7072] xt_hashlimit: size too large, truncated to 1048576 [ 148.136316][ T7070] netlink: zone id is out of range [ 148.145613][ T7070] netlink: zone id is out of range [ 148.175525][ T7070] netlink: zone id is out of range [ 148.181516][ T7070] netlink: zone id is out of range [ 148.182801][ T7073] delete_channel: no stack [ 148.186773][ T7070] netlink: zone id is out of range [ 148.315748][ T6993] lo speed is unknown, defaulting to 1000 [ 148.607042][ T7079] bond0: option arp_interval: invalid value (18446744071883598865) [ 148.645549][ T7079] bond0: option arp_interval: allowed values 0 - 2147483647 [ 149.015673][ T7084] netlink: 16 bytes leftover after parsing attributes in process `syz.2.366'. [ 149.494943][ T7099] sctp: [Deprecated]: syz.4.369 (pid 7099) Use of struct sctp_assoc_value in delayed_ack socket option. [ 149.494943][ T7099] Use struct sctp_sack_info instead [ 149.534509][ T7086] lo speed is unknown, defaulting to 1000 [ 149.555125][ T7095] netlink: 'syz.4.369': attribute type 1 has an invalid length. [ 149.717674][ T7095] 8021q: adding VLAN 0 to HW filter on device bond1 [ 149.844884][ T7099] bond1: (slave gretap1): making interface the new active one [ 149.894534][ T7099] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 149.932197][ T7086] lo speed is unknown, defaulting to 1000 [ 149.952117][ T7081] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 150.001296][ T7099] syz.4.369 (7099) used greatest stack depth: 19048 bytes left [ 150.825575][ T7147] sock: sock_timestamping_bind_phc: sock not bind to device [ 151.091212][ T7157] netlink: 28 bytes leftover after parsing attributes in process `syz.0.381'. [ 151.112149][ T7157] netlink: 28 bytes leftover after parsing attributes in process `syz.0.381'. [ 151.206942][ T7157] team0: entered promiscuous mode [ 151.216138][ T7157] team_slave_1: entered promiscuous mode [ 151.229966][ T7157] team0: left promiscuous mode [ 151.234806][ T7157] team_slave_1: left promiscuous mode [ 151.282832][ T7162] netlink: 28 bytes leftover after parsing attributes in process `syz.4.383'. [ 151.311124][ T7162] netlink: 28 bytes leftover after parsing attributes in process `syz.4.383'. [ 151.392823][ T7162] dummy0: entered promiscuous mode [ 151.415034][ T7162] dummy0: left promiscuous mode [ 151.831155][ T7178] netdevsim netdevsim2 netdevsim2: entered allmulticast mode [ 153.643365][ T7248] netlink: 8 bytes leftover after parsing attributes in process `syz.1.401'. [ 154.032272][ T7261] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 154.175475][ T7259] lo speed is unknown, defaulting to 1000 [ 154.211799][ T7258] lo speed is unknown, defaulting to 1000 [ 154.225698][ T7259] lo speed is unknown, defaulting to 1000 [ 154.677005][ T7279] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 154.850091][ T7288] netlink: 'syz.2.409': attribute type 1 has an invalid length. [ 155.104505][ T7288] 8021q: adding VLAN 0 to HW filter on device bond1 [ 155.184290][ T7300] netlink: 'syz.0.410': attribute type 23 has an invalid length. [ 155.239929][ T7293] bond1: (slave ip6gretap1): making interface the new active one [ 155.276724][ T7293] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 155.651044][ T7309] netlink: 4 bytes leftover after parsing attributes in process `syz.1.412'. [ 155.833238][ T7314] vlan2: entered promiscuous mode [ 155.846936][ T7314] syz_tun: entered promiscuous mode [ 155.857268][ T7314] vlan2: entered allmulticast mode [ 155.868845][ T7314] syz_tun: entered allmulticast mode [ 155.904369][ T7318] sctp: [Deprecated]: syz.4.418 (pid 7318) Use of struct sctp_assoc_value in delayed_ack socket option. [ 155.904369][ T7318] Use struct sctp_sack_info instead [ 155.931889][ T7258] lo speed is unknown, defaulting to 1000 [ 156.164073][ T7328] tipc: Failed to remove unknown binding: 66,1,1/357364638:986749/986751 [ 156.207846][ T7328] tipc: Failed to remove unknown binding: 66,1,1/357364638:986749/986751 [ 156.778691][ T7345] bond_slave_0: entered allmulticast mode [ 156.870611][ T7347] netlink: 'syz.0.427': attribute type 10 has an invalid length. [ 156.887228][ T7347] team0: Device ipvlan1 failed to register rx_handler [ 157.724762][ T7366] netlink: 12 bytes leftover after parsing attributes in process `syz.2.432'. [ 158.001859][ T7371] netlink: 4 bytes leftover after parsing attributes in process `syz.0.436'. [ 158.099667][ T7371] macvtap1: entered promiscuous mode [ 158.136462][ T7371] team0: entered promiscuous mode [ 158.142169][ T7371] team_slave_1: entered promiscuous mode [ 158.153004][ T7371] macvtap1: entered allmulticast mode [ 158.207262][ T7371] team0: entered allmulticast mode [ 158.227084][ T7371] team_slave_1: entered allmulticast mode [ 158.303937][ T7371] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 158.334741][ T7377] team0: left allmulticast mode [ 158.356852][ T7377] team_slave_1: left allmulticast mode [ 158.363164][ T7377] team0: left promiscuous mode [ 158.370592][ T7377] team_slave_1: left promiscuous mode [ 158.485184][ T7382] lo speed is unknown, defaulting to 1000 [ 158.513033][ T7382] lo speed is unknown, defaulting to 1000 [ 158.534610][ T7386] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 158.710782][ T7391] lo speed is unknown, defaulting to 1000 [ 159.204601][ T7391] lo speed is unknown, defaulting to 1000 [ 159.421116][ T7407] netlink: 20 bytes leftover after parsing attributes in process `syz.4.446'. [ 159.632288][ T7407] netlink: 20 bytes leftover after parsing attributes in process `syz.4.446'. [ 160.178264][ T7428] lo speed is unknown, defaulting to 1000 [ 160.211887][ T7428] lo speed is unknown, defaulting to 1000 [ 160.212424][ T7423] lo speed is unknown, defaulting to 1000 [ 160.763191][ T7439] lo speed is unknown, defaulting to 1000 [ 161.004757][ T7423] lo speed is unknown, defaulting to 1000 [ 161.623655][ T7439] lo speed is unknown, defaulting to 1000 [ 163.323618][ T5999] IPVS: starting estimator thread 0... [ 163.416078][ T7482] IPVS: using max 25 ests per chain, 60000 per kthread [ 163.428014][ T7487] netlink: 8 bytes leftover after parsing attributes in process `syz.4.463'. [ 163.466496][ T7487] netlink: 4 bytes leftover after parsing attributes in process `syz.4.463'. [ 163.660083][ T7487] netlink: 56 bytes leftover after parsing attributes in process `syz.4.463'. [ 164.391018][ T7518] vcan0: tx drop: invalid sa for name 0x0000000000000003 [ 164.584253][ T7524] net_ratelimit: 1 callbacks suppressed [ 164.584276][ T7524] openvswitch: netlink: Message has 24 unknown bytes. [ 164.597096][ T7524] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 164.613706][ T7518] sit0: left promiscuous mode [ 164.659526][ T7518] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.666874][ T7518] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.817974][ T7518] wg2: left promiscuous mode [ 164.827954][ T7518] wg2: left allmulticast mode [ 164.985068][ T7518] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 165.003205][ T7518] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 165.272275][ T7518] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.280805][ T7518] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.295588][ T7518] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.304775][ T7518] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.363934][ T7518] veth3: left promiscuous mode [ 165.409735][ T7480] tipc: Started in network mode [ 165.436238][ T7480] tipc: Node identity ac1414aa, cluster identity 4711 [ 165.444205][ T7480] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 165.465861][ T7480] tipc: Enabled bearer , priority 10 [ 165.576476][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 165.668768][ T7533] netlink: 4 bytes leftover after parsing attributes in process `syz.0.481'. [ 165.716087][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 165.840285][ T7543] openvswitch: netlink: VXLAN extension 0 has unexpected len 4 expected 0 [ 165.844292][ T7544] netlink: 'syz.0.474': attribute type 17 has an invalid length. [ 165.857874][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 165.996110][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 166.021678][ T7549] netlink: 8 bytes leftover after parsing attributes in process `syz.3.477'. [ 166.037740][ T7549] netlink: 8 bytes leftover after parsing attributes in process `syz.3.477'. [ 166.114437][ T7552] netlink: 'syz.3.477': attribute type 1 has an invalid length. [ 166.123529][ T7552] netlink: 'syz.3.477': attribute type 2 has an invalid length. [ 166.132077][ T7552] netlink: 4 bytes leftover after parsing attributes in process `syz.3.477'. [ 166.141029][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 166.276215][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 166.393030][ T7559] netlink: 'syz.3.479': attribute type 4 has an invalid length. [ 166.566952][ T5911] tipc: Node number set to 2886997162 [ 166.586213][ T5838] Bluetooth: hci4: command 0x0405 tx timeout [ 166.639186][ T30] audit: type=1107 audit(1745954293.528:2): pid=7562 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='1' [ 166.640814][ T7564] hsr0 speed is unknown, defaulting to 1000 [ 166.703095][ T7564] hsr0 speed is unknown, defaulting to 1000 [ 166.714133][ T7564] hsr0 speed is unknown, defaulting to 1000 [ 166.801701][ T7564] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 166.941806][ T7564] hsr0 speed is unknown, defaulting to 1000 [ 167.006772][ T7575] syzkaller0: create flow: hash 476130562 index 1 [ 167.050386][ T7564] hsr0 speed is unknown, defaulting to 1000 [ 167.299233][ T7564] hsr0 speed is unknown, defaulting to 1000 [ 167.315262][ T7569] syzkaller0: delete flow: hash 476130562 index 1 [ 167.383187][ T7584] netlink: 8 bytes leftover after parsing attributes in process `syz.2.487'. [ 167.408639][ T7584] netlink: 4 bytes leftover after parsing attributes in process `syz.2.487'. [ 167.458755][ T7584] netlink: 'syz.2.487': attribute type 1 has an invalid length. [ 167.494125][ T7584] netlink: 10 bytes leftover after parsing attributes in process `syz.2.487'. [ 167.527638][ T7584] nbd: socks must be embedded in a SOCK_ITEM attr [ 167.542432][ T7584] block nbd1: shutting down sockets [ 168.882553][ T7564] hsr0 speed is unknown, defaulting to 1000 [ 168.892835][ T7564] hsr0 speed is unknown, defaulting to 1000 [ 168.902471][ T7589] siw: device registration error -23 [ 169.171562][ T7609] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 169.592752][ T7622] lo speed is unknown, defaulting to 1000 [ 169.626150][ C1] net_ratelimit: 5 callbacks suppressed [ 169.626172][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 169.643512][ T7631] netlink: 'syz.0.501': attribute type 4 has an invalid length. [ 169.819854][ T7638] netlink: zone id is out of range [ 170.077113][ T7645] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 170.666855][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 170.934261][ T7622] hsr0 speed is unknown, defaulting to 1000 [ 171.711664][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 171.737144][ T7694] __nla_validate_parse: 2 callbacks suppressed [ 171.737163][ T7694] netlink: 4 bytes leftover after parsing attributes in process `syz.2.512'. [ 171.768873][ T7694] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 171.794563][ T7694] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 171.856319][ T7698] netlink: 4 bytes leftover after parsing attributes in process `syz.0.513'. [ 172.747450][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 172.751012][ T7720] lo speed is unknown, defaulting to 1000 [ 172.889338][ T7725] netlink: 24 bytes leftover after parsing attributes in process `syz.3.519'. [ 172.905221][ T7727] netlink: 20 bytes leftover after parsing attributes in process `syz.1.520'. [ 173.085456][ T7737] netlink: 20 bytes leftover after parsing attributes in process `syz.3.522'. [ 173.624284][ T7755] IPv6: NLM_F_REPLACE set, but no existing node found! [ 173.786307][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 173.986539][ T7720] hsr0 speed is unknown, defaulting to 1000 [ 173.995519][ T7732] siw: device registration error -23 [ 174.076656][ T7721] netlink: 12 bytes leftover after parsing attributes in process `syz.0.518'. [ 174.747211][ T7786] netlink: 'syz.2.530': attribute type 1 has an invalid length. [ 174.826128][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 174.970657][ T7795] bond2: (slave gretap1): making interface the new active one [ 174.984536][ T7795] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 175.815782][ T7815] netlink: 8 bytes leftover after parsing attributes in process `syz.4.536'. [ 175.866037][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 176.828915][ T7824] syzkaller0: entered promiscuous mode [ 176.854958][ T7824] syzkaller0: entered allmulticast mode [ 176.906175][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 177.946311][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 177.989460][ T7876] netlink: 4 bytes leftover after parsing attributes in process `syz.4.547'. [ 178.987322][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 179.974808][ T7876] bridge_slave_1: left allmulticast mode [ 179.981065][ T7876] bridge_slave_1: left promiscuous mode [ 179.988188][ T7876] bridge0: port 2(bridge_slave_1) entered disabled state [ 180.002075][ T7876] bridge_slave_0: left allmulticast mode [ 180.008122][ T7876] bridge_slave_0: left promiscuous mode [ 180.014062][ T7876] bridge0: port 1(bridge_slave_0) entered disabled state [ 180.026245][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 180.127349][ T7903] netlink: 8 bytes leftover after parsing attributes in process `syz.2.551'. [ 180.176113][ T7897] veth0_to_bridge: entered promiscuous mode [ 180.185439][ T7898] veth0_to_bridge: left promiscuous mode [ 180.601852][ T7922] netlink: 4 bytes leftover after parsing attributes in process `syz.3.558'. [ 180.632864][ T7924] veth0_to_bridge: vlans aren't supported yet for dev_uc|mc_add() [ 180.755210][ T7931] netlink: 4 bytes leftover after parsing attributes in process `syz.4.560'. [ 181.066045][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 181.352921][ T7935] netlink: 4 bytes leftover after parsing attributes in process `syz.2.561'. [ 181.371409][ T7935] team_slave_0: entered promiscuous mode [ 181.377553][ T7935] team_slave_1: entered promiscuous mode [ 181.386364][ T7935] macvtap1: entered promiscuous mode [ 181.391712][ T7935] team0: entered promiscuous mode [ 181.406740][ T7935] macvtap1: entered allmulticast mode [ 181.422912][ T7935] team0: entered allmulticast mode [ 181.454117][ T7935] team_slave_0: entered allmulticast mode [ 181.466500][ T7935] team_slave_1: entered allmulticast mode [ 181.477455][ T7935] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 181.528471][ T7938] team0: left allmulticast mode [ 181.533513][ T7938] team_slave_0: left allmulticast mode [ 181.579835][ T7938] team_slave_1: left allmulticast mode [ 181.598596][ T7938] team0: left promiscuous mode [ 181.622529][ T7938] team_slave_0: left promiscuous mode [ 181.628447][ T7938] team_slave_1: left promiscuous mode [ 181.829065][ T7944] netlink: 8 bytes leftover after parsing attributes in process `syz.1.565'. [ 181.856436][ T7944] netlink: 4 bytes leftover after parsing attributes in process `syz.1.565'. [ 181.889108][ T7944] netlink: 'syz.1.565': attribute type 1 has an invalid length. [ 181.911206][ T7944] netlink: 10 bytes leftover after parsing attributes in process `syz.1.565'. [ 181.947691][ T7951] netlink: 'syz.2.568': attribute type 4 has an invalid length. [ 181.983263][ T55] block nbd1: Receive control failed (result -107) [ 182.073202][ T7951] netlink: 8 bytes leftover after parsing attributes in process `syz.2.568'. [ 182.106117][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 182.289761][ T7957] ?Hm: renamed from lo [ 182.625565][ T7965] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !寿$UvyآDUDw}zR3 [ 183.156127][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 184.186030][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 184.508608][ T55] Bluetooth: hci0: Opcode 0x0401 failed: -110 [ 185.226065][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 185.241351][ T8042] netlink: 'syz.1.594': attribute type 39 has an invalid length. [ 185.573886][ T8050] netlink: 'syz.4.596': attribute type 1 has an invalid length. [ 185.725143][ T8049] lo speed is unknown, defaulting to 1000 [ 185.754975][ T8057] dummy0 speed is unknown, defaulting to 1000 [ 185.772994][ T8055] 8021q: adding VLAN 0 to HW filter on device bond0 [ 185.790555][ T8057] dummy0 speed is unknown, defaulting to 1000 [ 185.812170][ T8047] bond0: entered promiscuous mode [ 185.866739][ T8047] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 185.894438][ T8047] bond0: left promiscuous mode [ 186.003964][ T8057] dummy0 speed is unknown, defaulting to 1000 [ 186.242346][ T8071] nbd: must specify at least one socket [ 186.266081][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 186.431192][ T5974] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 186.454443][ T5974] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 186.680203][ T8049] hsr0 speed is unknown, defaulting to 1000 [ 186.717632][ T8057] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 186.825567][ T8057] dummy0 speed is unknown, defaulting to 1000 [ 186.878140][ T8057] dummy0 speed is unknown, defaulting to 1000 [ 186.985084][ T8096] netlink: 'syz.3.605': attribute type 1 has an invalid length. [ 187.128778][ T8057] dummy0 speed is unknown, defaulting to 1000 [ 187.137644][ T8107] IPv6: Can't replace route, no match found [ 187.208379][ T8096] 8021q: adding VLAN 0 to HW filter on device bond1 [ 187.306138][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 187.354660][ T8103] bond1: (slave veth3): Enslaving as an active interface with a down link [ 187.419000][ T8107] bond1: (slave dummy0): making interface the new active one [ 187.453471][ T8107] dummy0: entered promiscuous mode [ 187.471314][ T8107] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 187.505028][ T8057] dummy0 speed is unknown, defaulting to 1000 [ 187.559037][ T8057] dummy0 speed is unknown, defaulting to 1000 [ 187.572883][ T8057] dummy0 speed is unknown, defaulting to 1000 [ 187.680443][ T8125] lo speed is unknown, defaulting to 1000 [ 188.356184][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 188.431019][ T8153] netlink: 'syz.1.617': attribute type 29 has an invalid length. [ 188.466064][ T8153] netlink: 8 bytes leftover after parsing attributes in process `syz.1.617'. [ 188.808583][ T8168] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input7 [ 188.970219][ T8127] veth0_to_bridge: entered promiscuous mode [ 189.026391][ T8174] netlink: 4 bytes leftover after parsing attributes in process `syz.3.620'. [ 189.337381][ T8125] hsr0 speed is unknown, defaulting to 1000 [ 189.373830][ T8125] dummy0 speed is unknown, defaulting to 1000 [ 189.386062][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 189.470525][ T8124] veth0_to_bridge: left promiscuous mode [ 190.426170][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 190.758385][ T8231] lo speed is unknown, defaulting to 1000 [ 191.263328][ T8244] netlink: 'syz.4.635': attribute type 1 has an invalid length. [ 191.466030][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 191.771028][ T8245] bond2 (unregistering): Released all slaves [ 191.907689][ T8246] 8021q: adding VLAN 0 to HW filter on device bond2 [ 191.919788][ T8231] hsr0 speed is unknown, defaulting to 1000 [ 191.931072][ T8231] dummy0 speed is unknown, defaulting to 1000 [ 192.144973][ T8256] bond1: (slave dummy0): Releasing active interface [ 192.153687][ T8256] dummy0: left promiscuous mode [ 192.164814][ T8256] bridge_slave_0: left allmulticast mode [ 192.172860][ T8256] bridge_slave_0: left promiscuous mode [ 192.195340][ T8256] bridge0: port 1(bridge_slave_0) entered disabled state [ 192.240080][ T8256] bridge_slave_1: left allmulticast mode [ 192.266630][ T8256] bridge_slave_1: left promiscuous mode [ 192.276479][ T8256] bridge0: port 2(bridge_slave_1) entered disabled state [ 192.307114][ T8256] bond0: (slave bond_slave_0): Releasing backup interface [ 192.349887][ T8256] bond0: (slave bond_slave_1): Releasing backup interface [ 192.364505][ T8256] team0: Port device team_slave_0 removed [ 192.374570][ T8256] team0: Port device team_slave_1 removed [ 192.381937][ T8256] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 192.390546][ T8266] netlink: 8 bytes leftover after parsing attributes in process `syz.4.639'. [ 192.401638][ T8266] netlink: 52 bytes leftover after parsing attributes in process `syz.4.639'. [ 192.402230][ T8256] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 192.422563][ T8256] bond1: (slave veth3): Releasing active interface [ 192.516134][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 192.559588][ T8267] bridge0: port 4(macvlan2) entered disabled state [ 192.566456][ T8267] bridge0: port 3(macvlan1) entered disabled state [ 192.573648][ T8267] bridge0: port 2(bridge_slave_1) entered disabled state [ 192.581594][ T8267] bridge0: port 1(bridge_slave_0) entered disabled state [ 192.823527][ T8267] veth1_vlan: left allmulticast mode [ 192.870776][ T8267] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.883478][ T8267] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.895369][ T8267] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.908780][ T8267] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.943275][ T8275] siw: device registration error -23 [ 192.985822][ T8267] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 192.995497][ T8267] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 193.004591][ T8267] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 193.013634][ T8267] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 193.040759][ T8267] dummy0: left allmulticast mode [ 193.106097][ T8267] macvtap1: left promiscuous mode [ 193.115285][ T8267] macvtap1: left allmulticast mode [ 193.204633][ T8282] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input8 [ 193.348828][ T8277] lo speed is unknown, defaulting to 1000 [ 193.546088][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 193.918127][ T8297] xt_CT: No such helper "syz1" [ 194.410231][ T8277] hsr0 speed is unknown, defaulting to 1000 [ 194.419118][ T8277] dummy0 speed is unknown, defaulting to 1000 [ 194.586081][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 195.206500][ T8335] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 195.372949][ T8327] lo speed is unknown, defaulting to 1000 [ 195.551886][ T8335] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 195.626077][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 196.211645][ T8356] netlink: 40 bytes leftover after parsing attributes in process `syz.0.664'. [ 196.404124][ T8359] macsec1: entered promiscuous mode [ 196.427258][ T8359] dummy0: entered promiscuous mode [ 196.439467][ T8359] macsec1: entered allmulticast mode [ 196.466502][ T8359] dummy0: entered allmulticast mode [ 196.496517][ T8359] dummy0: left allmulticast mode [ 196.536227][ T8359] dummy0: left promiscuous mode [ 196.666034][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 196.772552][ T8330] lo speed is unknown, defaulting to 1000 [ 196.776431][ T8327] hsr0 speed is unknown, defaulting to 1000 [ 196.852925][ T8360] vlan2: entered promiscuous mode [ 196.883477][ T8360] mac80211_hwsim hwsim9 wlan1: entered promiscuous mode [ 196.923588][ T8360] vlan2: entered allmulticast mode [ 196.962410][ T8360] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode [ 197.007146][ T8327] dummy0 speed is unknown, defaulting to 1000 [ 197.699135][ T8389] netlink: 'syz.0.673': attribute type 1 has an invalid length. [ 197.716054][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 197.826191][ T8330] hsr0 speed is unknown, defaulting to 1000 [ 197.866441][ T8397] netlink: 'syz.2.674': attribute type 1 has an invalid length. [ 197.876847][ T8394] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 198.158973][ T5991] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 198.159050][ T8389] 8021q: adding VLAN 0 to HW filter on device bond1 [ 198.221627][ T8330] dummy0 speed is unknown, defaulting to 1000 [ 198.283000][ T1146] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 198.351394][ T8394] veth3: entered promiscuous mode [ 198.381208][ T8394] bond1: (slave veth3): Enslaving as a backup interface with a down link [ 198.492945][ T8402] bridge0: port 3(gretap0) entered blocking state [ 198.534688][ T8402] bridge0: port 3(gretap0) entered disabled state [ 198.576451][ T8402] gretap0: entered allmulticast mode [ 198.667586][ T8413] netlink: 'syz.0.677': attribute type 1 has an invalid length. [ 198.746072][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 198.760220][ T8409] lo speed is unknown, defaulting to 1000 [ 199.677291][ T8421] Bluetooth: hci3: Opcode 0x0401 failed: -4 [ 199.786041][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 199.843787][ T8417] lo speed is unknown, defaulting to 1000 [ 200.411336][ T8414] lo speed is unknown, defaulting to 1000 [ 200.483358][ T8456] netlink: 4 bytes leftover after parsing attributes in process `syz.2.682'. [ 200.826082][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 200.877861][ T8467] netlink: 8 bytes leftover after parsing attributes in process `syz.2.683'. [ 200.924226][ T8414] hsr0 speed is unknown, defaulting to 1000 [ 200.951573][ T8417] hsr0 speed is unknown, defaulting to 1000 [ 200.957056][ T8414] dummy0 speed is unknown, defaulting to 1000 [ 200.960384][ T8409] hsr0 speed is unknown, defaulting to 1000 [ 201.066278][ T55] Bluetooth: hci3: command 0x0401 tx timeout [ 201.180508][ T8417] dummy0 speed is unknown, defaulting to 1000 [ 201.284967][ T8409] dummy0 speed is unknown, defaulting to 1000 [ 201.866082][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 202.906101][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 203.061742][ T8496] bridge_slave_0: left allmulticast mode [ 203.071489][ T8496] bridge_slave_0: left promiscuous mode [ 203.116548][ T8496] bridge0: port 1(bridge_slave_0) entered disabled state [ 203.170136][ T8496] bridge_slave_1: left allmulticast mode [ 203.188965][ T8496] bridge_slave_1: left promiscuous mode [ 203.194939][ T8496] bridge0: port 2(bridge_slave_1) entered disabled state [ 203.291779][ T8496] bond0: (slave bond_slave_0): Releasing backup interface [ 203.302676][ T8496] bond0: (slave bond_slave_1): Releasing backup interface [ 203.323636][ T8496] team0: Port device team_slave_1 removed [ 203.333199][ T8496] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 203.343106][ T8496] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 203.353682][ T8496] bond1: (slave ip6gretap1): Removing an active aggregator [ 203.365576][ T8496] bond1: (slave ip6gretap1): Releasing backup interface [ 203.372861][ T8496] bond1: (slave ip6gretap1): the permanent HWaddr of slave - c6:24:b9:35:ed:67 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 203.442240][ T8496] bond1: (slave veth3): Releasing backup interface [ 203.523111][ T8501] bridge0: port 1(vlan2) entered blocking state [ 203.535687][ T8501] bridge0: port 1(vlan2) entered disabled state [ 203.559655][ T8501] vlan2: entered allmulticast mode [ 203.573967][ T8501] bond0: entered allmulticast mode [ 203.587210][ T8501] vlan2: entered promiscuous mode [ 203.593500][ T8501] bond0: entered promiscuous mode [ 203.770750][ T8518] netlink: 248 bytes leftover after parsing attributes in process `syz.2.694'. [ 203.928693][ T8524] gretap0: left allmulticast mode [ 203.934269][ T8524] bridge0: port 3(gretap0) entered disabled state [ 203.946352][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 203.989061][ T8524] bridge_slave_0: left allmulticast mode [ 203.994942][ T8524] bridge_slave_0: left promiscuous mode [ 204.009316][ T8524] bridge0: port 1(bridge_slave_0) entered disabled state [ 204.039957][ T8524] bridge_slave_1: left allmulticast mode [ 204.050399][ T8524] bridge_slave_1: left promiscuous mode [ 204.057672][ T8524] bridge0: port 2(bridge_slave_1) entered disabled state [ 204.061800][ T8531] netlink: 8 bytes leftover after parsing attributes in process `syz.4.698'. [ 204.075455][ T8531] netlink: 4 bytes leftover after parsing attributes in process `syz.4.698'. [ 204.089320][ T8524] bond0: (slave bond_slave_0): Releasing backup interface [ 204.090123][ T8531] netlink: 'syz.4.698': attribute type 1 has an invalid length. [ 204.116352][ T8531] netlink: 10 bytes leftover after parsing attributes in process `syz.4.698'. [ 204.127450][ T8524] bond_slave_0: left promiscuous mode [ 204.136730][ T8524] bond0: (slave bond_slave_1): Releasing backup interface [ 204.150028][ T8524] bond_slave_1: left promiscuous mode [ 204.166967][ T8531] nbd: socks must be embedded in a SOCK_ITEM attr [ 204.173998][ T8531] block nbd2: shutting down sockets [ 204.187681][ T8524] team0: Port device team_slave_0 removed [ 204.201319][ T8524] team0: Port device team_slave_1 removed [ 204.208901][ T8524] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 204.217520][ T8524] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 204.232324][ T8524] bond2: (slave ip6gretap1): Releasing active interface [ 204.384106][ T8536] netlink: 'syz.4.700': attribute type 29 has an invalid length. [ 204.986162][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 205.884465][ T8583] netlink: 60 bytes leftover after parsing attributes in process `syz.1.711'. [ 206.026091][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 206.676750][ T5834] Bluetooth: hci2: command 0x0406 tx timeout [ 206.679373][ T5835] Bluetooth: hci1: command 0x0406 tx timeout [ 206.682862][ T5834] Bluetooth: hci3: command 0x0401 tx timeout [ 207.015893][ T8617] bridge_slave_0: left allmulticast mode [ 207.024541][ T8617] bridge_slave_0: left promiscuous mode [ 207.066042][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 207.165870][ T8617] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.222566][ T8617] bridge_slave_1: left allmulticast mode [ 207.294723][ T8617] bridge_slave_1: left promiscuous mode [ 207.339128][ T10] hid-generic 0005:0458:0009.0001: unknown main item tag 0x0 [ 207.357505][ T8617] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.395425][ T8617] bond0: (slave bond_slave_0): Releasing backup interface [ 207.420305][ T10] hid-generic 0005:0458:0009.0001: hidraw0: BLUETOOTH HID v0.09 Device [syz0] on aa:aa:aa:aa:aa:aa [ 207.466804][ T8617] bond_slave_0: left promiscuous mode [ 207.491338][ T8617] bond0: (slave bond_slave_1): Releasing backup interface [ 207.511332][ T8617] bond_slave_1: left promiscuous mode [ 207.542768][ T8617] team0: Port device team_slave_0 removed [ 207.562682][ T8617] team0: Port device team_slave_1 removed [ 207.577924][ T8617] macvlan1: left allmulticast mode [ 207.596264][ T8617] macvlan1: left promiscuous mode [ 207.604537][ T8617] bridge0: port 3(macvlan1) entered disabled state [ 207.625271][ T8617] bond0: (slave vxlan0): Releasing backup interface [ 207.646610][ T8617] vxlan0: left promiscuous mode [ 207.654040][ T8617] macvlan2: left allmulticast mode [ 207.676336][ T8617] macvlan2: left promiscuous mode [ 207.681664][ T8617] bridge0: port 4(macvlan2) entered disabled state [ 207.719848][ T8617] bond1: (slave ip6gretap1): Releasing active interface [ 207.742391][ T8617] bond2: (slave gretap1): Releasing active interface [ 207.764858][ T8630] bridge0: port 1(vlan3) entered blocking state [ 207.807979][ T8630] bridge0: port 1(vlan3) entered disabled state [ 207.825297][ T8630] vlan3: entered allmulticast mode [ 207.833191][ T8630] bond0: entered allmulticast mode [ 208.106172][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 208.579522][ T8674] lo speed is unknown, defaulting to 1000 [ 208.858340][ T8679] 8021q: adding VLAN 0 to HW filter on device bond0 [ 208.899848][ T8679] 8021q: adding VLAN 0 to HW filter on device team0 [ 208.919058][ T8679] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 208.954945][ T24] lo speed is unknown, defaulting to 1000 [ 208.999239][ T8646] tipc: Enabling of bearer rejected, already enabled [ 209.008788][ T24] syz0: Port: 1 Link ACTIVE [ 209.042017][ T8674] hsr0 speed is unknown, defaulting to 1000 [ 209.043198][ T24] lo speed is unknown, defaulting to 1000 [ 209.057949][ T8674] dummy0 speed is unknown, defaulting to 1000 [ 209.156156][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 209.606786][ T8703] vlan5: entered promiscuous mode [ 209.611889][ T8703] team0: entered promiscuous mode [ 210.186038][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 210.577249][ T8738] netlink: 8 bytes leftover after parsing attributes in process `syz.0.748'. [ 210.713065][ T8744] pim6reg9: entered allmulticast mode [ 210.852360][ T8751] netlink: 4 bytes leftover after parsing attributes in process `syz.4.749'. [ 211.112679][ T8758] netlink: 8 bytes leftover after parsing attributes in process `syz.1.752'. [ 211.212643][ T8760] vlan2: entered promiscuous mode [ 211.226183][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 211.230255][ T8760] batadv0: entered promiscuous mode [ 211.348049][ T8762] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 211.487447][ T8762] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 211.496561][ T8765] netlink: 44 bytes leftover after parsing attributes in process `syz.2.754'. [ 211.507065][ T8762] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 211.707023][ T8772] netlink: 56 bytes leftover after parsing attributes in process `syz.3.758'. [ 211.913610][ T8775] lo speed is unknown, defaulting to 1000 [ 212.267385][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 212.324455][ T8787] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 212.408567][ T8787] netlink: 476 bytes leftover after parsing attributes in process `syz.0.762'. [ 212.421533][ T8787] bond_slave_0: entered promiscuous mode [ 212.428174][ T8787] netlink: 64 bytes leftover after parsing attributes in process `syz.0.762'. [ 212.446383][ T8787] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 212.678150][ T8797] netlink: 'syz.1.765': attribute type 1 has an invalid length. [ 212.814658][ T8800] RDS: rds_bind could not find a transport for fc00::1, load rds_tcp or rds_rdma? [ 213.316134][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 213.365099][ T8782] Bluetooth: hci3: Opcode 0x0401 failed: -4 [ 214.110202][ T55] Bluetooth: hci3: command 0x0401 tx timeout [ 214.346071][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 214.531833][ T8797] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 214.553668][ T8775] hsr0 speed is unknown, defaulting to 1000 [ 214.609403][ T8775] dummy0 speed is unknown, defaulting to 1000 [ 214.933183][ T8819] vlan2: entered promiscuous mode [ 215.318580][ T8821] lo speed is unknown, defaulting to 1000 [ 215.387223][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 215.965882][ T8821] hsr0 speed is unknown, defaulting to 1000 [ 216.008769][ T8821] dummy0 speed is unknown, defaulting to 1000 [ 216.079277][ T8839] lo speed is unknown, defaulting to 1000 [ 216.209290][ T8845] netlink: 204 bytes leftover after parsing attributes in process `syz.2.780'. [ 216.436048][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 216.569763][ T55] Bluetooth: hci4: link tx timeout [ 216.576637][ T55] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 216.602194][ T8848] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 216.616546][ T8848] syzkaller0: Linktype set failed because interface is up [ 216.626396][ T10] syzkaller0: tun_net_xmit 76 [ 216.665694][ T8823] lo speed is unknown, defaulting to 1000 [ 216.691922][ T8848] syzkaller0: create flow: hash 2787905275 index 0 [ 217.469414][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 217.579257][ T8865] netlink: del zone limit has 4 unknown bytes [ 217.874555][ T8871] netlink: 60 bytes leftover after parsing attributes in process `syz.2.787'. [ 218.510118][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 218.563030][ T8823] hsr0 speed is unknown, defaulting to 1000 [ 218.587333][ T8839] hsr0 speed is unknown, defaulting to 1000 [ 218.593994][ T8823] dummy0 speed is unknown, defaulting to 1000 [ 218.607695][ T8847] syzkaller0 (unregistered): delete flow: hash 2787905275 index 0 [ 218.627358][ T8839] dummy0 speed is unknown, defaulting to 1000 [ 218.666585][ T5141] Bluetooth: hci4: command 0x0405 tx timeout [ 218.771273][ T8875] netlink: 28 bytes leftover after parsing attributes in process `syz.2.789'. [ 219.377654][ T8889] team0: Port device team_slave_0 removed [ 219.487948][ T8889] team0: Port device team_slave_1 removed [ 219.501258][ T8889] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 219.529808][ T8889] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 219.546107][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 219.585156][ T8889] bond1: (slave ip6gretap1): Releasing backup interface [ 219.614848][ T8889] bond1: (slave ip6gretap1): the permanent HWaddr of slave - ee:51:4f:d8:52:e5 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 219.665328][ T8889] bond1: (slave veth3): Releasing backup interface [ 219.998496][ T8894] siw: device registration error -23 [ 220.000883][ T8898] netlink: 4 bytes leftover after parsing attributes in process `syz.2.796'. [ 220.051844][ T8897] netlink: 60 bytes leftover after parsing attributes in process `syz.1.795'. [ 220.137376][ T8904] batadv_slave_1: entered promiscuous mode [ 220.249482][ T8904] netlink: 28 bytes leftover after parsing attributes in process `syz.3.797'. [ 220.373146][ T8904] netlink: 'syz.3.797': attribute type 7 has an invalid length. [ 220.398183][ T8906] vlan2: left allmulticast mode [ 220.423829][ T8906] bond0: left allmulticast mode [ 220.455224][ T8906] vlan2: left promiscuous mode [ 220.475326][ T8906] bond0: left promiscuous mode [ 220.490151][ T8906] bridge0: port 1(vlan2) entered disabled state [ 220.556171][ T8904] netlink: 'syz.3.797': attribute type 8 has an invalid length. [ 220.563882][ T8904] netlink: 4 bytes leftover after parsing attributes in process `syz.3.797'. [ 220.586040][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 220.643150][ T8904] ip6gretap0: entered promiscuous mode [ 220.681457][ T8904] syz_tun: entered promiscuous mode [ 220.726742][ T8904] gretap0: entered promiscuous mode [ 220.734042][ T8904] hsr1: Slave A (ip6gretap0) is not up; please bring it up to get a fully working HSR network [ 220.751726][ T8904] hsr1: Slave B (syz_tun) is not up; please bring it up to get a fully working HSR network [ 220.776159][ T8904] hsr1: Interlink (gretap0) is not up; please bring it up to get a fully working HSR network [ 220.835738][ T8903] batadv_slave_1: left promiscuous mode [ 221.045204][ T8931] netlink: 'syz.3.802': attribute type 11 has an invalid length. [ 221.357757][ T8941] netlink: 4 bytes leftover after parsing attributes in process `syz.4.805'. [ 221.626157][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 221.763299][ T8955] lo speed is unknown, defaulting to 1000 [ 221.792514][ T8959] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 221.945839][ T8965] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 221.954626][ T8965] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 221.963019][ T8965] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 221.972036][ T8965] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 221.993890][ T8965] team0: Port device vxlan0 added [ 222.179705][ T8967] netlink: 48 bytes leftover after parsing attributes in process `syz.3.812'. [ 222.282868][ T8967] vti0: entered promiscuous mode [ 222.310496][ T8967] netlink: 12 bytes leftover after parsing attributes in process `syz.3.812'. [ 222.666147][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 222.701890][ T8976] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 222.711083][ T8976] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 222.719695][ T8976] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 222.728161][ T8976] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 222.817281][ T8976] team0: Port device vxlan0 removed [ 222.953082][ T8955] hsr0 speed is unknown, defaulting to 1000 [ 222.995792][ T8955] dummy0 speed is unknown, defaulting to 1000 [ 223.706070][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 223.900782][ T9008] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 224.372631][ T9009] netdevsim netdevsim2 netdevsim2 (unregistering): left allmulticast mode [ 224.746077][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 224.819216][ T9034] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 224.979492][ T9036] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 225.014171][ T9036] netlink: 224 bytes leftover after parsing attributes in process `syz.0.829'. [ 225.297118][ T9049] vlan3: left allmulticast mode [ 225.305312][ T9049] bond0: left allmulticast mode [ 225.318787][ T9049] bridge0: port 1(vlan3) entered disabled state [ 225.786208][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 226.491788][ T9078] netlink: 'syz.3.840': attribute type 1 has an invalid length. [ 226.826305][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 226.890766][ T9092] netlink: 4 bytes leftover after parsing attributes in process `syz.3.855'. [ 227.668975][ T9115] netlink: 4 bytes leftover after parsing attributes in process `syz.1.850'. [ 227.876204][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 228.799695][ T9162] lo speed is unknown, defaulting to 1000 [ 228.916061][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 229.382078][ T9175] lo speed is unknown, defaulting to 1000 [ 229.391150][ T9162] hsr0 speed is unknown, defaulting to 1000 [ 229.423790][ T9162] dummy0 speed is unknown, defaulting to 1000 [ 229.946016][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 230.257679][ T9211] netlink: 'syz.1.866': attribute type 9 has an invalid length. [ 230.267108][ T9211] netlink: 'syz.1.866': attribute type 1 has an invalid length. [ 230.313191][ T9211] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.866'. [ 230.449558][ T9224] tipc: New replicast peer: 255.255.255.255 [ 230.457782][ T9224] tipc: Enabled bearer , priority 10 [ 230.467659][ T9175] hsr0 speed is unknown, defaulting to 1000 [ 230.484391][ T9175] dummy0 speed is unknown, defaulting to 1000 [ 230.986062][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 231.139970][ T30] audit: type=1800 audit(1745954358.018:3): pid=9232 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.869" name="memory.events" dev="tmpfs" ino=932 res=0 errno=0 [ 231.464301][ T9258] netlink: 'syz.3.875': attribute type 10 has an invalid length. [ 231.490230][ T9256] netlink: 4 bytes leftover after parsing attributes in process `syz.2.874'. [ 232.036036][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 232.252559][ T9290] netlink: 452 bytes leftover after parsing attributes in process `syz.1.877'. [ 233.066208][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 233.288242][ T9319] syzkaller0: create flow: hash 476130562 index 1 [ 233.568379][ T9329] netlink: 'syz.1.884': attribute type 1 has an invalid length. [ 233.638465][ T9323] syzkaller0: delete flow: hash 476130562 index 1 [ 234.116113][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 234.320906][ T9354] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input9 [ 234.907236][ T53] wlan0: Trigger new scan to find an IBSS to join [ 234.920632][ T53] ------------[ cut here ]------------ [ 234.940876][ T53] UBSAN: array-index-out-of-bounds in net/mac80211/scan.c:1208:5 [ 234.964234][ T53] index 0 is out of range for type 'struct ieee80211_channel *[] __counted_by(n_channels)' (aka 'struct ieee80211_channel *[]') [ 234.983690][ T53] CPU: 1 UID: 0 PID: 53 Comm: kworker/u8:3 Not tainted 6.15.0-rc3-syzkaller-00618-gff61a4a5dfc2 #0 PREEMPT(full) [ 234.983735][ T53] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 234.983756][ T53] Workqueue: events_unbound cfg80211_wiphy_work [ 234.983808][ T53] Call Trace: [ 234.983820][ T53] [ 234.983829][ T53] dump_stack_lvl+0x189/0x250 [ 234.983868][ T53] ? __pfx_dump_stack_lvl+0x10/0x10 [ 234.983897][ T53] ? __pfx__printk+0x10/0x10 [ 234.983933][ T53] ubsan_epilogue+0xa/0x40 [ 234.983953][ T53] __ubsan_handle_out_of_bounds+0xe9/0xf0 [ 234.983986][ T53] ieee80211_request_ibss_scan+0x600/0x8b0 [ 234.984029][ T53] ieee80211_ibss_work+0xde7/0x1060 [ 234.984064][ T53] ? __pfx_ieee80211_ibss_work+0x10/0x10 [ 234.984102][ T53] ? ieee80211_iface_work+0xf39/0xfe0 [ 234.984130][ T53] ? rcu_is_watching+0x15/0xb0 [ 234.984166][ T53] cfg80211_wiphy_work+0x2dc/0x460 [ 234.984197][ T53] ? process_scheduled_works+0x9ec/0x17a0 [ 234.984231][ T53] process_scheduled_works+0xadb/0x17a0 [ 234.984296][ T53] ? __pfx_process_scheduled_works+0x10/0x10 [ 234.984347][ T53] worker_thread+0x8a0/0xda0 [ 234.984383][ T53] ? __kthread_parkme+0x7b/0x200 [ 234.984415][ T53] kthread+0x70e/0x8a0 [ 234.984443][ T53] ? __pfx_worker_thread+0x10/0x10 [ 234.984461][ T53] ? __pfx_kthread+0x10/0x10 [ 234.984486][ T53] ? __pfx_kthread+0x10/0x10 [ 234.984509][ T53] ? _raw_spin_unlock_irq+0x23/0x50 [ 234.984531][ T53] ? lockdep_hardirqs_on+0x9c/0x150 [ 234.984556][ T53] ? __pfx_kthread+0x10/0x10 [ 234.984586][ T53] ret_from_fork+0x4b/0x80 [ 234.984603][ T53] ? __pfx_kthread+0x10/0x10 [ 234.984622][ T53] ret_from_fork_asm+0x1a/0x30 [ 234.984655][ T53] [ 234.984662][ T53] ---[ end trace ]--- [ 235.149047][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 235.169029][ T53] Kernel panic - not syncing: UBSAN: panic_on_warn set ... [ 235.176663][ T53] CPU: 1 UID: 0 PID: 53 Comm: kworker/u8:3 Not tainted 6.15.0-rc3-syzkaller-00618-gff61a4a5dfc2 #0 PREEMPT(full) [ 235.188756][ T53] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 235.198846][ T53] Workqueue: events_unbound cfg80211_wiphy_work [ 235.205155][ T53] Call Trace: [ 235.208460][ T53] [ 235.211415][ T53] dump_stack_lvl+0x99/0x250 [ 235.216207][ T53] ? __asan_memcpy+0x40/0x70 [ 235.220812][ T53] ? __pfx_dump_stack_lvl+0x10/0x10 [ 235.226065][ T53] ? __pfx__printk+0x10/0x10 [ 235.230909][ T53] panic+0x2db/0x790 [ 235.234850][ T53] ? __pfx_panic+0x10/0x10 [ 235.239370][ T53] ? _printk+0xcf/0x120 [ 235.243547][ T53] ? __pfx__printk+0x10/0x10 [ 235.248351][ T53] check_panic_on_warn+0x89/0xb0 [ 235.253584][ T53] __ubsan_handle_out_of_bounds+0xe9/0xf0 [ 235.259330][ T53] ieee80211_request_ibss_scan+0x600/0x8b0 [ 235.265426][ T53] ieee80211_ibss_work+0xde7/0x1060 [ 235.270739][ T53] ? __pfx_ieee80211_ibss_work+0x10/0x10 [ 235.276481][ T53] ? ieee80211_iface_work+0xf39/0xfe0 [ 235.281879][ T53] ? rcu_is_watching+0x15/0xb0 [ 235.286669][ T53] cfg80211_wiphy_work+0x2dc/0x460 [ 235.291814][ T53] ? process_scheduled_works+0x9ec/0x17a0 [ 235.297609][ T53] process_scheduled_works+0xadb/0x17a0 [ 235.303242][ T53] ? __pfx_process_scheduled_works+0x10/0x10 [ 235.309271][ T53] worker_thread+0x8a0/0xda0 [ 235.313899][ T53] ? __kthread_parkme+0x7b/0x200 [ 235.318852][ T53] kthread+0x70e/0x8a0 [ 235.322939][ T53] ? __pfx_worker_thread+0x10/0x10 [ 235.328146][ T53] ? __pfx_kthread+0x10/0x10 [ 235.332770][ T53] ? __pfx_kthread+0x10/0x10 [ 235.337477][ T53] ? _raw_spin_unlock_irq+0x23/0x50 [ 235.342706][ T53] ? lockdep_hardirqs_on+0x9c/0x150 [ 235.347931][ T53] ? __pfx_kthread+0x10/0x10 [ 235.352535][ T53] ret_from_fork+0x4b/0x80 [ 235.356960][ T53] ? __pfx_kthread+0x10/0x10 [ 235.361562][ T53] ret_from_fork_asm+0x1a/0x30 [ 235.366359][ T53] [ 235.369687][ T53] Kernel Offset: disabled [ 235.374074][ T53] Rebooting in 86400 seconds..