last executing test programs: 5m36.77177834s ago: executing program 1 (id=55): r0 = socket(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[], 0x84}, 0x1, 0x0, 0x0, 0x844}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00U\x00=\t\x00\x00\x00\x00\x00\x00\x00\x00\a\x00\x00\x00', @ANYRES32=r2], 0x58}}, 0x0) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[], 0x50}}, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 5m36.638559984s ago: executing program 1 (id=59): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000006c000000160a01020000000000000000010000000900010073797a30000000000900020073797a3000000000400003802c00038004000100766c616e31000000000000000000000014000100776c616e3100000000000000000000000800014000000000080002"], 0xfc}}, 0x0) write$tun(r0, &(0x7f0000000040)={@void, @void, @eth={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x30}, @val={@val={0x88a8, 0x2, 0x1, 0x1}, {0x8100, 0x2, 0x0, 0x4}}, {@ipv6={0x86dd, @udp={0x2, 0x6, "639eff", 0x8, 0x11, 0xff, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @mcast2, {[], {0x4e20, 0x4e23, 0x8}}}}}}}, 0x46) 5m36.208804501s ago: executing program 1 (id=65): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="01250020000000001c0012800b000100697036746e6c00000c00028008000100", @ANYRES32], 0x3c}, 0x9}, 0x0) write$tun(r0, &(0x7f00000003c0)={@val={0x0, 0x86dd}, @val={0x2, 0x3, 0x5, 0x9, 0xa, 0x40}, @mpls={[], @ipv6=@generic={0x8, 0x6, "3739ed", 0x28, 0x89, 0xff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast2, {[], "59c0ac5a142dbdbec6b7f2b65327cfd00f8bd3acba38414fcc35f63d64902ea8bb580250f9fdb4ec"}}}}, 0x5e) 5m35.784995089s ago: executing program 1 (id=74): socket$kcm(0xa, 0x3, 0x87) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x20, 0x10}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FWMARK={0x8, 0x14, 0x1}]}}}]}, 0x3c}}, 0x20000000) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003088700fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) 5m35.341411107s ago: executing program 1 (id=79): r0 = socket$netlink(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="070000000400000008020000210000"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000001850000001b000000b70000000000070095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r2}, 0x18) bind$netlink(r0, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbfb, 0x20}, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="a800000000010904000500000000000002000000240001801400018008000100e000000108000200ac1e01010c00028005000100000009002400028014000180080001000000010908000200ac1e00010c000280050001000000000044000f800800014000000006080003400000002b080003400000000808000240000000400800014000000000fb0001400000000708000140000044f10800034000000003080007"], 0xa8}}, 0x0) 5m34.955172235s ago: executing program 1 (id=85): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e20, @private=0xa010101}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000000400)={0x0, 0x38, "ec2ab3294c462a2b6389fba6926f0291739803b12a576b8938437e6218edc00c23ee285cfd0d59413e88105c0d72a707232c20538eaf313d"}, &(0x7f0000000000)=0x40) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x27) setsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000340)={r3, 0x5e423fb6}, 0x8) 5m34.817215023s ago: executing program 32 (id=85): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e20, @private=0xa010101}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000000400)={0x0, 0x38, "ec2ab3294c462a2b6389fba6926f0291739803b12a576b8938437e6218edc00c23ee285cfd0d59413e88105c0d72a707232c20538eaf313d"}, &(0x7f0000000000)=0x40) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x27) setsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000340)={r3, 0x5e423fb6}, 0x8) 3m33.42009336s ago: executing program 3 (id=2368): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r2) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/net\x00') syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r3, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) write$tun(r0, &(0x7f0000001240)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x0, 0x0, 0x14}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x1b, 0x2c, 0x66, 0x0, 0x40, 0x11, 0x0, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x1a}}, {0x4e20, 0x4e21, 0x18, 0x0, @wg=@data={0x4, 0x2, 0x8}}}}, 0x3a) 3m33.071542805s ago: executing program 3 (id=2372): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x40, 0x2c, 0xd3f, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r6, {0xf000, 0xffff}, {}, {0x2}}, [@filter_kind_options=@f_u32={{0x8}, {0x14, 0x2, [@TCA_U32_FLAGS={0x8, 0xb, 0x2}, @TCA_U32_HASH={0x8, 0x2, 0x5}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) 3m32.666842591s ago: executing program 3 (id=2375): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket(0x10, 0x3, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="400000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES64=r0], 0x40}}, 0x0) socket(0x400000000010, 0x3, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) ppoll(&(0x7f0000000500)=[{r2}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0x8000000000, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x3, 0x0, 0x0, 0x7fffffff, 0xfffffffffffffffc}, 0x0, 0x0) 3m31.735044314s ago: executing program 3 (id=2391): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) connect$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x30004}], 0x2) close(0x4) close(0x3) socket$inet6_udplite(0xa, 0x2, 0x88) socket$packet(0x11, 0x3, 0x300) 3m31.576754561s ago: executing program 3 (id=2392): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000496000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) mmap(&(0x7f00004f1000/0x3000)=nil, 0x3000, 0x2000006, 0x12, r0, 0x913e0000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00004f1000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0xa2ec9000) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x13, r2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00005d5000/0x2000)=nil, 0x2000, 0x3, 0x28011, r3, 0x0) mmap(&(0x7f0000867000/0x2000)=nil, 0x2000, 0x0, 0x11, r3, 0x1000) ioctl$FS_IOC_RESVSP(r0, 0x40305829, &(0x7f0000000180)={0x1100, 0x0, 0x52, 0x11000}) 3m31.422237854s ago: executing program 3 (id=2397): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)="b57523cb1a2c90d8acad2e2d98dfc9ea7a5843c3b63b683ced2b3266175599b779617e66e6b3e15c042be90635a2d36160bbf9a2edcacc0bbe015b84150a1928de94397894ff36aa430fc2a0814ba634308d6d0837250dfd1eca5383f9d151449743b1a0c4ffc51242a229c5d6d06f147a61d797ea7ffeda95b76f5623", 0x7d}, {&(0x7f00000001c0)="66f7", 0x4}, {&(0x7f0000000300)='l3', 0x7fffef80}], 0x3}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000080)={0x2, 0x3, 0x7, 0x6, 0x99b, 0x7e36, 0x4, 0x4}, &(0x7f00000000c0)=0x20) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000240)='pmap_register\x00', r3, 0x0, 0xf69}, 0x18) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r4, &(0x7f0000005cc0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x54, 0x3, 0x1, 0x301, 0x0, 0x0, {0xa, 0x0, 0x2}, [@CTA_FILTER={0x4}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0xc0}, 0x4000) 3m16.341441492s ago: executing program 33 (id=2397): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)="b57523cb1a2c90d8acad2e2d98dfc9ea7a5843c3b63b683ced2b3266175599b779617e66e6b3e15c042be90635a2d36160bbf9a2edcacc0bbe015b84150a1928de94397894ff36aa430fc2a0814ba634308d6d0837250dfd1eca5383f9d151449743b1a0c4ffc51242a229c5d6d06f147a61d797ea7ffeda95b76f5623", 0x7d}, {&(0x7f00000001c0)="66f7", 0x4}, {&(0x7f0000000300)='l3', 0x7fffef80}], 0x3}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000080)={0x2, 0x3, 0x7, 0x6, 0x99b, 0x7e36, 0x4, 0x4}, &(0x7f00000000c0)=0x20) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000240)='pmap_register\x00', r3, 0x0, 0xf69}, 0x18) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r4, &(0x7f0000005cc0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x54, 0x3, 0x1, 0x301, 0x0, 0x0, {0xa, 0x0, 0x2}, [@CTA_FILTER={0x4}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0xc0}, 0x4000) 2m41.293089616s ago: executing program 4 (id=2950): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, 0x2, {}, [@NL80211_ATTR_WIPHY_TX_POWER_LEVEL={0x8, 0x62, 0x9}, @NL80211_ATTR_WIPHY_RETRY_SHORT={0x5, 0x3d, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000084}, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'wp256\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x800) recvmmsg$unix(r4, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000100)=0x20, 0x4) connect$pptp(r4, &(0x7f0000000080)={0x18, 0x2, {0x0, @multicast2}}, 0x1e) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0}, 0x48) sendmsg$NL80211_CMD_SET_COALESCE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000040)={0x1c, r0, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x6c00}, 0x4040000) 2m41.100263665s ago: executing program 4 (id=2952): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='bic\x00', 0x4) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x0, 0x200000, 0x0, 0x0, 0xffffffff, 0x8003}}}}]}, 0x4c}}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x12, 0x0, 0x12) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 2m40.216863979s ago: executing program 4 (id=2973): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x6, 0x4, 0x3, 0x5, 0x0, 0xffffffffffffffff, 0x3}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0), &(0x7f0000000380), 0x1000fff, r0, 0x0, 0xa0028000}, 0x86) ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x400452c8, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000580)='sched_process_wait\x00', r1, 0x0, 0x81200}, 0x18) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r2}, 0x8) r4 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="85000000070000006a0a00ff000000000c00000000000000950000000000000018100000", @ANYRES32, @ANYBLOB="000000000000000005000000000000009500000000000000b1f8306e05d1e4aab009c16b5c05077115d0749619ca39f89974785ae0619b77c6585f678ac92a3b6b4148f56b43c3dd75d75f97c8f92f60a2def458df05e2fbfb3e849b2b3cffd4f29446ae60dd76654b2639b2bc14350706214a6ab7a712d4317fbc3ca01d0d3ed6110b3775903141a5091a4d3db8eb335414fbdb288aba73aaf6d18000a3a2a069cf7f9402e1425bb6bc370576aa1faea0fe222671ecf99038fce8dba53dcb11f87cca"], &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)={@ifindex, r4, 0x11, 0x0, 0x0, @void, @value=r3}, 0x20) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)=ANY=[], 0x10) 2m38.496955619s ago: executing program 4 (id=2984): socket$pppl2tp(0x18, 0x1, 0x1) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002000)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x14, 0x39, 0x301, 0x270bd24, 0x25dfdbfa, {0x1}}, 0x14}}, 0x4000000) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0x16c, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x4e21, 0x2, 0x2, 0x0, 0x0, 0x6c, 0x0, 0xee00}, {@in6=@private1, 0xfe, 0x32}, @in6=@ipv4={'\x00', '\xff\xff', @remote}, {0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x543}, {0x4, 0x7fffffffffffffff}, {}, 0x70bd2c, 0x3500, 0xa, 0x4, 0x0, 0x50}, [@algo_aead={0x5f, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x98, 0x60, "210466d38547aa140db9a200000000c538c7cb"}}, @encap={0x1c, 0x4, {0x2, 0x4e24, 0x4e24, @in6=@dev={0xfe, 0x80, '\x00', 0x2e}}}]}, 0x16c}, 0x1, 0x0, 0x0, 0x880}, 0x0) socketpair(0x1a, 0x6, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000800)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x20048010}, 0x30) syz_genetlink_get_family_id$devlink(&(0x7f0000000180), r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)=ANY=[@ANYBLOB="a03700002d00010026bd7000fcdbdf250400000005000b00", @ANYRES32=r4, @ANYBLOB="81120c"], 0x37a0}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) 2m38.287775916s ago: executing program 4 (id=2986): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000), 0x8) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000004c0)={0x114, 0x22, 0x1, 0x0, 0x0, "", [@nested={0x102, 0x0, 0x0, 0x1, [@typed={0xc, 0x10, 0x0, 0x0, @u64}, @typed={0x14, 0xc, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00'}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe8101000000cb748edb353d70010000008b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd"]}]}, 0x114}], 0x1}, 0x80) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="340000003c0007010000000000000000010000000400fc800c00018008000600ffff0000080002800400728008000900", @ANYRES32=r3], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r5, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000001940)={0x0, 0xf4}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x54, 0x10, 0xffffff1f, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x34080}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x2}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x7}, @IFLA_GRE_REMOTE={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x28}}]}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x54}}, 0x0) 2m38.064161031s ago: executing program 4 (id=2988): socket$inet_sctp(0x2, 0x5, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_route(0x10, 0x3, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000f40)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x78}, 0x0) sendmsg$NFC_CMD_DEV_UP(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010028bd70000700000002000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) 2m22.96737959s ago: executing program 34 (id=2988): socket$inet_sctp(0x2, 0x5, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_route(0x10, 0x3, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000f40)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x78}, 0x0) sendmsg$NFC_CMD_DEV_UP(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010028bd70000700000002000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) 1m3.164327947s ago: executing program 2 (id=3786): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000600)='ext4_nfs_commit_metadata\x00', r0, 0x0, 0xd}, 0x18) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000840)={'ipvlan0\x00', &(0x7f0000000800)=@ethtool_sset_info={0x37, 0x2, 0xfffffffffffffff8}}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) readv(r1, 0x0, 0x0) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) r5 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000100)={0x0, 0xffff, 0x18}, 0xc) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='blkio.bfq.sectors_recursive\x00', 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000880)=@bpf_ext={0x1c, 0x21, &(0x7f0000000bc0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3}, {}, {}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r5}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x81}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r6}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000300)={0x1, 0x3, 0xfffffffd, 0xa}, 0x10, 0xd281, r0, 0x0, &(0x7f00000005c0), 0x0, 0x10, 0x5}, 0x94) socket$nl_xfrm(0x10, 0x3, 0x6) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={0xffffffffffffffff, 0x27, 0x0, 0x0, 0x0, 0x0, 0x9, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r7}, 0x10) ppoll(&(0x7f0000000500)=[{r4}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 1m2.099288776s ago: executing program 2 (id=3795): r0 = socket$inet_smc(0x2b, 0x1, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x56) connect$inet(r0, &(0x7f0000000380)={0x2, 0x4e25, @dev={0xac, 0x14, 0x14, 0x3e}}, 0x10) sendmmsg(r0, &(0x7f0000006140)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000740)="65c6d96326a838047976a77611d4c4ecc94b3585c42786716ad7c93fd3a228e9a1cd93801f5b4033ea9ae2b561128c2893aba2af73f86ac4a65917672e186b297cada86c7b329c4831efa7d660040c757e6ce437d7853ac2cca9605a2e18bf6529e94453fac161511f4483dc8b5294583cc78cd79fb68fb57bd8697ac1639517070e92cd2d36932b0e26cf8fdd87e817f08f7d937282c63371e22e43e8ab5c2b3d851d147f260004a12512be6e3b6b48a430a4e4747a28d766c634658499181a54867295ad5496ef6eed69b0da6b885004a5bc869e", 0xd5}, {&(0x7f00000002c0)="b16b5d1ddcad4b5eedb9593060ada4a1778939f40388ef540871ce291c1010f3310edf7028093cf8709632cad4866d5e448d5385c80db3518564b1194247acfb3b463ee97c794123a991311e51e1790748a23c3301974b905bbd18b3e54cb3cc90c180fba7461df205130349d430083d2c66", 0x72}], 0x2}}], 0x1, 0x4000) close(r0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000002637850000007100000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r2, &(0x7f0000000600)={0x2, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x34}, 0x4}, 0x1c) sendmsg$AUDIT_GET(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x3e8, 0x100, 0x70bd25, 0x25dfdbfb, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x4040000}, 0x20004840) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x4e23, 0x7, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xffffffff}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r3, &(0x7f0000001200)=[{&(0x7f0000000080)}], 0x1) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={r4, 0x110, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x4a, 0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb7, 0x8, 0xffffffffffffffb9, &(0x7f0000000080)}}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x18) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000005, 0x3032, 0xffffffffffffffff, 0x0) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg$sock(r5, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001500)=[@mark={{0x14, 0x1, 0x24, 0x6}}], 0x18}, 0x80) unshare(0x6a040000) 1m1.822410456s ago: executing program 2 (id=3797): r0 = epoll_create1(0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e25, 0x0, @loopback, 0x18}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000180), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", "122000"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "2000a200009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) writev(r1, &(0x7f0000000600)=[{&(0x7f0000000200)='f', 0x1}], 0x1) recvfrom$inet6(r1, &(0x7f0000000300)=""/3, 0x3, 0x40000041, 0x0, 0x11) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)) syz_init_net_socket$llc(0x1a, 0x801, 0x0) r2 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd, 0x400000, 0x0, 0xffffffffffffff1b, 0x10000000368}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000500000001801000020786c3100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000005000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r6}, 0x10) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000100)={0x20000014}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000001400791048000000000069001c000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0xa3}, 0x21) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'rose0\x00'}) 1m0.652619921s ago: executing program 2 (id=3804): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) close(0xffffffffffffffff) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket$unix(0x1, 0x2, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xffffffed, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x5}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r6, {}, {0x2, 0xb}, {0xa, 0xb}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x80, 0x0, 0x5, 0x1, 0xc}, 0xb, 0xfffffffe, 0x8, 0x5, 0x9, 0x2, 0x9, 0xd, 0x8, 0x1, {0xffff1c72, 0x3, 0x1000, 0x101, 0xfffffffe, 0x5}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x2001c061}, 0x4008000) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 1m0.37079707s ago: executing program 2 (id=3808): socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, 0x0, 0x8) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) bind$inet6(0xffffffffffffffff, 0x0, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0x806000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={0x0, 0x0, 0x2a, 0x0, 0x1}, 0x28) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x100000c, 0x11, r1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, 0x0) unshare(0x6a040000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r5, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8, @multicast2}}, 0x24) sendmmsg(r5, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0) recvmmsg(r5, &(0x7f0000000d00), 0xf000, 0x10002, 0x0) 58.695606546s ago: executing program 2 (id=3825): r0 = socket(0x1d, 0x2, 0x6) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x730, 0x1d0, 0x5c8, 0x0, 0x5c8, 0x0, 0x6b0, 0x6b0, 0x6b0, 0x6b0, 0x6b0, 0x6, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @private0, [], [0xffffff00, 0x0, 0x0, 0x1f9814788dbf7ab2], 'veth1\x00', 'syz_tun\x00'}, 0x11e, 0xa8, 0x1d0, 0x1f000000, {0x0, 0x7}}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x0, 'unconfined\x00'}}}, {{@ipv6={@loopback, @dev, [], [], 'batadv_slave_0\x00', 'ip6gretap0\x00', {}, {}, 0x2b}, 0x0, 0x1e0, 0x208, 0x7400, {}, [@common=@rt={{0x138}, {0x0, [0x0, 0x5], 0x0, 0x0, 0x0, [@dev, @private2={0xfc, 0x2, '\x00', 0x1}, @remote, @private2, @private1, @dev, @dev={0xfe, 0x80, '\x00', 0x34}, @mcast2, @local, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0, @loopback, @mcast1, @private1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}]}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00', 0x0, {0x68}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@mcast2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x790) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b0000001f00000002040000ff03000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000100000000000000387af9006bfe06f722374dfc38000000000000000000"], 0x48) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="3c000023100003050000000000006c5a28ca36c9", @ANYRES32=0x0, @ANYBLOB="00000000400002001c0012800b00010069703667726500000c0002800600020063030000"], 0x3c}, 0x1, 0x2000, 0x0, 0x40}, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000400), 0x401, r2}, 0x38) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='xprt_reserve\x00', r3}, 0x18) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x2f, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000080050005000200000011000300686173683a69702c706f7274"], 0x4c}}, 0x2) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x54, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x84}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e22}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={r2, &(0x7f0000000340)="a9", &(0x7f0000000200)=""/31}, 0x20) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r1, 0x89fb, &(0x7f00000001c0)={'sit0\x00', 0x0}) getsockname$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000040)=0x14) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'wg1\x00'}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000140)={'ip_vti0\x00', &(0x7f0000000080)={'tunl0\x00', r7, 0x8, 0x7800, 0x800, 0xffffff80, {{0x5, 0x4, 0x2, 0x2f, 0x14, 0x64, 0x0, 0x7, 0x2f, 0x0, @private=0xa010100, @multicast1}}}}) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, 0x0) 43.372037617s ago: executing program 35 (id=3825): r0 = socket(0x1d, 0x2, 0x6) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x730, 0x1d0, 0x5c8, 0x0, 0x5c8, 0x0, 0x6b0, 0x6b0, 0x6b0, 0x6b0, 0x6b0, 0x6, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @private0, [], [0xffffff00, 0x0, 0x0, 0x1f9814788dbf7ab2], 'veth1\x00', 'syz_tun\x00'}, 0x11e, 0xa8, 0x1d0, 0x1f000000, {0x0, 0x7}}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x0, 'unconfined\x00'}}}, {{@ipv6={@loopback, @dev, [], [], 'batadv_slave_0\x00', 'ip6gretap0\x00', {}, {}, 0x2b}, 0x0, 0x1e0, 0x208, 0x7400, {}, [@common=@rt={{0x138}, {0x0, [0x0, 0x5], 0x0, 0x0, 0x0, [@dev, @private2={0xfc, 0x2, '\x00', 0x1}, @remote, @private2, @private1, @dev, @dev={0xfe, 0x80, '\x00', 0x34}, @mcast2, @local, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0, @loopback, @mcast1, @private1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}]}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00', 0x0, {0x68}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@mcast2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x790) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b0000001f00000002040000ff03000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000100000000000000387af9006bfe06f722374dfc38000000000000000000"], 0x48) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="3c000023100003050000000000006c5a28ca36c9", @ANYRES32=0x0, @ANYBLOB="00000000400002001c0012800b00010069703667726500000c0002800600020063030000"], 0x3c}, 0x1, 0x2000, 0x0, 0x40}, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000400), 0x401, r2}, 0x38) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='xprt_reserve\x00', r3}, 0x18) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x2f, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000080050005000200000011000300686173683a69702c706f7274"], 0x4c}}, 0x2) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x54, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x84}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e22}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={r2, &(0x7f0000000340)="a9", &(0x7f0000000200)=""/31}, 0x20) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r1, 0x89fb, &(0x7f00000001c0)={'sit0\x00', 0x0}) getsockname$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000040)=0x14) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'wg1\x00'}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000140)={'ip_vti0\x00', &(0x7f0000000080)={'tunl0\x00', r7, 0x8, 0x7800, 0x800, 0xffffff80, {{0x5, 0x4, 0x2, 0x2f, 0x14, 0x64, 0x0, 0x7, 0x2f, 0x0, @private=0xa010100, @multicast1}}}}) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, 0x0) 5.467424332s ago: executing program 5 (id=4095): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD_SELECTOR={0x5, 0xa, 0x3}, @TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0x2}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40010}, 0x4000010) r2 = socket$inet(0x2, 0x2, 0xfffffffc) r3 = socket$caif_stream(0x25, 0x1, 0x3) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r4, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000280)={'sit0\x00', &(0x7f0000000200)={'syztnl2\x00', 0x0, 0x8000, 0x8000, 0x8, 0x7, {{0x6, 0x4, 0x2, 0x13, 0x18, 0x66, 0x0, 0x6, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, {[@ssrr={0x89, 0x3, 0xd9}]}}}}}) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r4, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r4, 0x84, 0x18, &(0x7f0000000300), 0x8) r6 = socket$inet6_icmp(0xa, 0x2, 0x3a) connect$inet6(r6, &(0x7f0000000040)={0xa, 0x4e20, 0x5, @mcast2, 0x7}, 0x1c) sendto$inet6(r6, &(0x7f0000000240)="8000647d03000000", 0x8, 0x24000810, &(0x7f0000000200)={0xa, 0x6e1d, 0x6, @mcast1, 0xfffffffd}, 0x1c) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r8 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) r9 = socket$inet6(0xa, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r9, 0x8946, &(0x7f00000006c0)={'wlan0\x00', &(0x7f0000000880)=@ethtool_stats={0x11}}) write$tun(r7, 0x0, 0xfce) setsockopt$CAIFSO_REQ_PARAM(r3, 0x116, 0x80, 0x0, 0x0) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f00000000c0)='ip6_vti0\x00', 0x10) sendmmsg$inet(r2, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10, 0x0}}], 0x1, 0x0) 4.526006745s ago: executing program 6 (id=4103): r0 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f0000001ac0)={'vcan0\x00', 0x6}) r1 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1200000009000000080000000200000000000000", @ANYRES32=0x1, @ANYBLOB="0000000000000000000000bff9a3299648e7fdd7", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r3}, &(0x7f0000000180), &(0x7f0000000100)=r2}, 0x20) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r6, 0x10e, 0x3, &(0x7f00000000c0)=0xffff, 0x4) write(r6, &(0x7f0000000000)="240000001a005f0314f9f4070009040002000000010000000000000008000400", 0x20) recvmmsg(r6, &(0x7f00000019c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)=""/17, 0x11}, 0x7}], 0x1, 0x100, 0x0) ppoll(&(0x7f0000000500)=[{r4}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0xffffffff, 0x0, 0x0, 0x4, 0x2, 0x1}}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, 0x0, 0x0) sendmsg$nl_route(r7, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001800490400000000000014000a100000000000000100000008001e0001000000"], 0x24}}, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b400000000000000791048000000000071006400000000009500000000000000db74589d4b38cc306ac390649f72dea0e50e2317db042855d6c74ff3493c7e31e3f6c643155a8e2e01d50bc3347475750472719cc516fa14b769e7f385ba72c60242263c05ddab05e37efe81b8bffc35cdf2ac0d93263ff755d611c4cca1684b1470af6a83366aa430ad2d700b186da622d6fba70000000000000000000000000200"/173], &(0x7f0000003ff6)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYRESDEC=r0], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008001500b7040000000000008500000058"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0x1, 0x10}, {0xd}, {0xe, 0x10}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x400c800}, 0x0) 4.054521635s ago: executing program 5 (id=4109): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) unshare(0x62040200) r1 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$int_in(r1, 0x5421, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002021702500000000002020207b1af8ff00000000bfa10000951234d35864aa628023ce005f3d367c00000701fefff7ffffffb702000008000000b703003e6d000083850054308de8c7749781c53da224ccde11e158"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18) syz_init_net_socket$llc(0x1a, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x200000, 0x10, &(0x7f0000000000), 0x143}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) socket$l2tp6(0xa, 0x2, 0x73) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000000)=0xf) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000380)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}], 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_type(r3, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r4, &(0x7f0000000280), 0x9) r5 = openat$cgroup_procs(r3, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f0000000c40), 0x12) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="92", 0x1}], 0x1}, 0x3) r8 = openat$cgroup_ro(r6, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r8, &(0x7f0000000200)=0x1, 0x12) 3.336802832s ago: executing program 6 (id=4114): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x6000, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x50, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x24, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}, {0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}, {0x4}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xb4}}, 0x40) close(r2) r4 = socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0xfc0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) setsockopt$packet_drop_memb(r4, 0x107, 0x2, &(0x7f0000000180)={r5, 0x1, 0x6, @local}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_devices(r1, &(0x7f0000000840)=ANY=[@ANYBLOB="1e0308004d6b71ef288563"], 0xffdd) close(0x3) r6 = socket$packet(0x11, 0x2, 0x300) r7 = socket$can_raw(0x1d, 0x3, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, &(0x7f0000001540)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000001c0)=ANY=[@ANYBLOB="540000001000010029bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="8427000000000000140003006e657464657673696d3000000000000008002900449d00001800168014000180100006"], 0x54}, 0x1, 0x0, 0x0, 0x20000084}, 0x4804) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'erspan0\x00', 0x0}) sendto$packet(r6, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x11, 0x8848, r9, 0x1, 0x0, 0x6, @multicast}, 0x14) close(0x4) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000000)={'ip6tnl0\x00', 0x0}) 2.974976946s ago: executing program 5 (id=4116): socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x80000000000000a, 0x2, 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc000}, 0x40000) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) socket$nl_rdma(0x10, 0x3, 0x14) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000044}, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x8, 0x4, 0x4, 0x10002, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xffffffff, 0x0, 0x0, @void, @value, @void, @value=0x180}, 0x50) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x8, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000008, 0x10, r1, 0xf9f3c000) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x2) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f00000000c0)={0x100000011, @multicast2, 0x0, 0x0, 'wrr\x00', 0x19e172f08959ac4a, 0x10001, 0x47}, 0x2c) 2.721221718s ago: executing program 5 (id=4117): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) r2 = gettid() sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002400)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010028bd7000ffdbdf2514000000080001000100000008001c00", @ANYRES32=r2], 0x24}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000000) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_FIOSETOWN(r3, 0x8901, &(0x7f00000023c0)=r2) socket$nl_netfilter(0x10, 0x3, 0xc) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000002240), 0x0, 0x10002, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r4, 0x0, 0x20040000) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f0000000040)=@req3={0x0, 0x0, 0xfffffffe, 0x0, 0x100}, 0x1c) r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c00", @ANYRES16, @ANYRES32, @ANYBLOB="c46141a0c845c9a72f7680de078c359d26396001c6d7c4b4d80f82dfd579929490065b0673d5f6eab50456ad56aa44e8c6006d6ee93ff7"], 0x1c}}, 0x0) 2.628466918s ago: executing program 5 (id=4119): r0 = socket(0x2a, 0x2, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r1, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000300)=@ethtool_rxnfc={0x2f, 0x2, 0x6, {0xe, @usr_ip6_spec={@empty, @dev={0xfe, 0x80, '\x00', 0x24}, 0xfffffff8, 0x3d, 0xe}, {0x0, @remote, 0xe, 0x4, [0x7, 0x6]}, @ah_ip4_spec={@remote, @initdev={0xac, 0x1e, 0x40, 0x0}, 0x0, 0x5}, {0x0, @broadcast, 0x8, 0x5, [0xf, 0x9]}, 0xff, 0x3}}}) socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) socket$rds(0x15, 0x5, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) ppoll(&(0x7f0000000500)=[{r2}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f0000000440)={0x0, 0x0, 0x3, 0xfffffffffffffff9, 0x9, 0x0, 0x8000000000, 0x800000000}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x4, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000480)='cgroup.controllers\x00', 0x275a, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r5 = socket$inet(0xa, 0x801, 0x84) connect$inet(r5, 0x0, 0x0) listen(r5, 0x8) r6 = accept4(r5, 0x0, 0x0, 0x80000) setsockopt(r6, 0x84, 0x7f, &(0x7f00000001c0)="020000000980ffff", 0x8) unshare(0x62040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r4, 0x28, 0x1, &(0x7f0000000180)=0x5, 0x8) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000000)=ANY=[@ANYBLOB='fi'], &(0x7f0000000100)=0x28) setsockopt$inet_msfilter(r0, 0x0, 0x29, 0x0, 0x0) 2.549106079s ago: executing program 6 (id=4120): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x48}, {0x6, 0x37, 0x0, 0x9}]}, 0x10) syz_emit_ethernet(0x14d, &(0x7f0000000a40)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaabb8100000086dd6d4f022c011311fffc0200"], 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x9, 0x0, 0xffffffff}, 0x1c) recvmsg(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) setsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x8a, 0x0, 0x0) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x5, 0xe, 0x0, &(0x7f0000000000)="251200d800"/14, 0x0, 0x7ff, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 2.102145872s ago: executing program 6 (id=4127): bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x16, 0x0, 0x0, &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000000)={0x8001, 0x5, 0xde, 0xffff}, 0x8) sendto$inet6(r0, &(0x7f00000001c0)="ad", 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}}, 0x1c) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, 0x0, 0x0) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000004c0)=@allocspi={0x120, 0x16, 0x1, 0x0, 0x25dfdbff, {{{@in, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33}, {@in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x1, 0x32}, @in6=@empty, {0x0, 0x0, 0x10000000, 0x0, 0x8}, {0x2000000000000000}, {}, 0x0, 0x3505, 0x0, 0x0, 0x0, 0x1}}, [@address_filter={0x28, 0x1a, {@in=@dev={0xac, 0x14, 0x14, 0x29}, @in=@remote, 0x2, 0x4}}]}, 0x120}}, 0x0) socket$packet(0x11, 0x2, 0x300) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x24000044) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, 0x2b, 0xb, 0x0, 0x0, {0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x50800}, 0x0) sendmsg$NFT_BATCH(r2, 0x0, 0x0) sendmsg$NFT_BATCH(r2, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0xffffdfffffffffff, 0x800, 0xfffffffc, 0x1}, 0x20) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000005240), 0x4000095, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) connect$rose(0xffffffffffffffff, 0x0, 0x0) 1.735133377s ago: executing program 0 (id=4130): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r0, 0xfffffffc) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000180)={0x4, 0x4, 0xfffffffd, 0x1}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@ipv6_getroute={0x24, 0x1a, 0x101, 0x0, 0x0, {}, [@RTA_IIF={0x8, 0x1f}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) write(r2, &(0x7f0000000000)="240000001a005f0214f9f407000904ff80000000fe00000000020000080004000a000000", 0x24) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x14, r5, 0x7}, 0x14}}, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000300)={0xa, 0x4e21, 0xffffffff, @remote, 0x6}, 0x1c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000002c0)={'macvlan0\x00'}) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0100000000000000000001000000080001000300000014000480050003000100000005000300070000fc07000200"], 0x38}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES64=0x0], 0x44}, 0x1, 0x0, 0x0, 0x851}, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x4c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = accept(0xffffffffffffffff, &(0x7f0000000140)=@sco={0x1f, @fixed}, &(0x7f0000000080)=0x80) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYRES32=r9, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000400)=ANY=[@ANYRES64=r4, @ANYRES32, @ANYRES8=r10, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x14) 1.699929249s ago: executing program 6 (id=4132): socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r0, &(0x7f0000003580)={0x2, 0x0, @dev}, 0x10) close(0xffffffffffffffff) socket$inet6_sctp(0xa, 0x5, 0x84) socket(0x1d, 0x2, 0x6) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) ppoll(&(0x7f0000000500)=[{r1}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x1, 0x0, 0x7fffffff, 0x8000000000000, 0x0, 0x0, 0x1000000000000000}, 0x0, &(0x7f00000002c0)={0x3ff, 0x800, 0x5, 0x0, 0x1}, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000100)=0x9, 0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) syz_open_procfs$namespace(0x0, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) bind$inet6(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, 0x0, 0x0) sendmmsg(r3, &(0x7f0000000180), 0x4000190, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, 0x0, 0x0) 1.54341283s ago: executing program 7 (id=4133): socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) 1.51834468s ago: executing program 0 (id=4134): socket$inet_mptcp(0x2, 0x1, 0x106) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) socket$inet(0x2b, 0x801, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2, 0x0, 0x7}, 0x18) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.sectors\x00', 0x26e1, 0x0) close(r3) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$SIOCSIFHWADDR(r3, 0x8b26, &(0x7f0000000200)={'virt_wifi0\x00', @multicast}) 1.46444221s ago: executing program 5 (id=4135): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0xb, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000000)="05000000010001", 0x7) close(0x4) pipe(0x0) socket$nl_rdma(0x10, 0x3, 0x14) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000600)=ANY=[], 0x10448) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$FIDEDUPERANGE(r3, 0xc0189436, &(0x7f0000000100)=ANY=[]) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r4, 0x0, 0xf3a, 0x0) splice(r1, 0x0, r4, 0x0, 0x80, 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000000c0)=@deltaction={0x14, 0x31, 0x20, 0x70bd2c, 0x25dfdbf8}, 0x14}, 0x1, 0x0, 0x0, 0x40054}, 0x4020000) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f00000001c0)={0x0, 0x1, 0x6, @random="28b5522532a5"}, 0x63) r6 = socket$kcm(0x10, 0x2, 0x10) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r7, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)=[{0x0}], 0x1, 0x0, 0x0, 0x600}, 0x40010) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) 1.431516385s ago: executing program 0 (id=4136): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001600)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffb, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0xfffffffffffffff8}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r7, {}, {0x2, 0xb}, {0xd, 0xb}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8, 0x2, 0x1d96}}]}, 0x40}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 1.386632173s ago: executing program 7 (id=4137): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x48}, {0x6, 0x37, 0x0, 0x9}]}, 0x10) syz_emit_ethernet(0x14d, &(0x7f0000000a40)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaabb8100000086dd6d4f022c011311fffc0200"], 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x9, 0x0, 0xffffffff}, 0x1c) recvmsg(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) setsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x8a, 0x0, 0x0) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x5, 0xe, 0x0, &(0x7f0000000000)="251200d800"/14, 0x0, 0x7ff, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 1.206516374s ago: executing program 7 (id=4139): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c6572"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff1, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x40000006}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x5, 0x8, 0x4, 0x202, 0x1, 0x7}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0xe}, {0x2, 0xb}, {0xd, 0xd}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8, 0x2, 0x7}}]}, 0x40}}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 1.09663318s ago: executing program 0 (id=4140): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) r2 = gettid() sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002400)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010028bd7000ffdbdf2514000000080001000100000008001c00", @ANYRES32=r2], 0x24}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000000) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_FIOSETOWN(r3, 0x8901, &(0x7f00000023c0)=r2) socket$nl_netfilter(0x10, 0x3, 0xc) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000002240), 0x0, 0x10002, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r4, 0x0, 0x20040000) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f0000000040)=@req3={0x0, 0x0, 0xfffffffe, 0x0, 0x100}, 0x1c) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r6, 0x0, 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c00", @ANYRES16, @ANYRES32, @ANYBLOB="c46141a0c845c9a72f7680de078c359d26396001c6d7c4b4d80f82dfd579929490065b0673d5f6eab50456ad56aa44e8c6006d6ee93ff7"], 0x1c}}, 0x0) 1.039697844s ago: executing program 8 (id=4141): socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x80000000000000a, 0x2, 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc000}, 0x40000) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) socket$nl_rdma(0x10, 0x3, 0x14) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000044}, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x8, 0x4, 0x4, 0x10002, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xffffffff, 0x0, 0x0, @void, @value, @void, @value=0x180}, 0x50) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x8, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000008, 0x10, r1, 0xf9f3c000) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x2) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f00000000c0)={0x100000011, @multicast2, 0x0, 0x0, 'wrr\x00', 0x19e172f08959ac4a, 0x10001, 0x47}, 0x2c) 1.008171215s ago: executing program 0 (id=4142): socket$igmp6(0xa, 0x3, 0x2) r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) listen(r0, 0x0) connect$rose(r0, &(0x7f0000000040)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x40) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f00000000c0)={0x18, 0x0, {0x4, @multicast, 'bond0\x00'}}, 0x1e) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000840)=ANY=[@ANYBLOB="1802000040000000000000000000000085000000d100000095"], &(0x7f0000000000)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0x2c, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000801}, 0x94) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000010c0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x0) ioctl$SIOCX25SCALLUSERDATA(r2, 0x89e5, &(0x7f0000001240)={0x47, "5549fe4c073ee9a1271289fb526abb0d44e7a9cbb341d2cc2f410678268bdace2119c692719a40af626871ee3f9ef0af48757a4a39453ef342e4558e655515f50c8ea7e78808a795c961b638d4756904a0d2c50e514858790cb048ed853bf58c1e067da0905f414d2b6dcd8ef8220147048cdd07a7787a8dbefdc191d41436af"}) syz_emit_ethernet(0x66, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa1486dd60cb653e00303a0000000000000000000000ffffac14413c3cd69162e35700000000000000000001a10090780000000060256b5400000000ff010000000000000000000000000001fe80000000000000000000000000003b"], 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a0b0400000000000000000200000088000480240001800b000100736f636b6574000014000280080002400000000308000140000000024c0001800b00010065787468647200003c000280080002400000007508000340000000590800064000000002080006400000000108000440000000b905000200070000000500020007000000140001800a00010071756f7461000000040002800900010073797a30000000000900020073797a32"], 0x17c}}, 0x40880) recvmsg(r3, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r4, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, r6, 0x0) mmap(&(0x7f00007a6000/0x3000)=nil, 0x3000, 0x100000c, 0x22051, r6, 0x0) setsockopt$TIPC_SRC_DROPPABLE(r3, 0x10f, 0x80, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'hsr0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@bridge_delneigh={0x1c, 0x1d, 0xf07, 0x0, 0x0, {0x7, 0x0, 0x0, r7, 0x0, 0xd2, 0xb}}, 0x1c}}, 0x0) accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x10) 955.558412ms ago: executing program 8 (id=4143): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[], 0x48) bpf$MAP_DELETE_ELEM(0x15, &(0x7f0000000040)={r1, 0x0, 0x20000000}, 0x20) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000100)={'wpan0\x00'}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x2a}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="2c0000000f14010028bd05000000df250800030046000000080001000000000009004500756d616400000000"], 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x20008000) socket$unix(0x1, 0x5, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r6, @ANYBLOB="06001500070000000c00168008000100", @ANYRESDEC=r2], 0x38}}, 0x10) r7 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000780)={0x1c, r9, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100000000000000000001000000500008804c00008024000100861da818f611cd8994034d7f413dc957630e5493c285aca40065cb6311be696b24000200491bc0be1dc1f88092e741a88b64f6dd9218ad21b44b472e44f1d0807ee6675c14000200776730000000000000000000000000000d6ead9d770541ce6a8a1c0a8ec420f4de2f389aff75e089a10d59387e1cd1b313c50195bb15910dd98c8de928a036299fc6cd668be9808e260d420d66127627d383fbb791b8e556beeb0a59b92c2de998e368f089c0828c47799a3ba3874b58ef7599318ce9830e0d4cd1aaab6ae90737fc51a551ff1c44"], 0x78}, 0x1, 0x0, 0x0, 0x4004840}, 0x40804) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r3}, 0x10) socketpair(0x18, 0x0, 0x2, &(0x7f0000000000)) 954.751948ms ago: executing program 7 (id=4144): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x1, 0x0, 0x0, @vifc_lcl_ifindex, @dev={0xac, 0x14, 0x14, 0x2e}}, 0x10) setsockopt$inet_mreq(r2, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x2a, &(0x7f0000000180)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @echo_reply={0x0, 0x0, 0x0, 0x64, 0xd2}}}}}, 0x0) r4 = socket(0x2, 0x80805, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r5, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) sendmmsg$inet_sctp(r4, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB], 0x30, 0x4040001}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r4, 0x84, 0x1b, &(0x7f0000000240)={r6}, &(0x7f0000000280)=0x8) setsockopt$MRT_ADD_MFC_PROXY(r3, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xfffffff7, 0x4, 0x40000006}, 0x3c) unshare(0x62040200) write$tun(0xffffffffffffffff, 0x0, 0x3e) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000740)={"8c3ef01be86258108b331b07f91efab2", 0x0, 0x0, {0x6, 0x40}, {0x3, 0x1}, 0x6, [0x3, 0x5, 0x9, 0x7, 0x7, 0x5, 0x10, 0x953, 0x1, 0x4, 0x8, 0x9000000000000000, 0x2, 0x4, 0x2, 0x5]}) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000007c0)=ANY=[@ANYBLOB="280300002d00090027bd70000000000004000000130317"], 0x328}}, 0x84) 711.333909ms ago: executing program 0 (id=4145): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r2 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r2, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYRESOCT=r1], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r4}, 0x10) close(r3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x5, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000004830000000000000fa40000007010000080020007500feff0000820095"], &(0x7f0000000100)='GPL\x00', 0x3, 0xfa, &(0x7f00000007c0)=""/250, 0x0, 0x8}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=@bloom_filter={0x1e, 0x0, 0xc, 0xe, 0x40040, r0, 0xd5e0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0xfffffff9, 0x3, 0x2}, 0x50) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r7, r8, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r7}, &(0x7f00000006c0), &(0x7f0000000700)=r6}, 0x20) sendmsg$inet(r5, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd8073a46b08b94214d816f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb4147000001000000008f2b9000f22425e4097ed62cbc891061017cfa6f6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe68db8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3542646bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r10 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r10, 0x29, 0x1000000000021, 0x0, 0x0) sendmmsg(r10, &(0x7f0000001500)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @ipv4={'\x00', '\xff\xff', @loopback}, 0x4, 0x1}, 0x80, 0x0}}], 0x1, 0x0) getpid() sendmsg$netlink(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000003e00)=[{&(0x7f0000000200)={0x114, 0x2e, 0x1, 0x0, 0x0, "", [@nested={0x101, 0x0, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64=0x3}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00'}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe8101000000010000008b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd"]}]}, 0x114}, {0x0}], 0x2}, 0x84) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r11, &(0x7f0000000800)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000680)={&(0x7f0000000780)=ANY=[@ANYBLOB="44000000040601040000000000000000070000050500010007000000050001000700000005000100070000000900020073797a32000000cb0900020073797a3100000000"], 0x44}, 0x1, 0x0, 0x0, 0xc080}, 0xe821651e0a1b45fc) 710.918253ms ago: executing program 8 (id=4146): socket$inet_mptcp(0x2, 0x1, 0x106) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) socket$inet(0x2b, 0x801, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.sectors\x00', 0x26e1, 0x0) close(r2) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$SIOCSIFHWADDR(r2, 0x8b26, &(0x7f0000000200)={'virt_wifi0\x00', @multicast}) 706.133255ms ago: executing program 6 (id=4147): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) unshare(0x62040200) r1 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$int_in(r1, 0x5421, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002021702500000000002020207b1af8ff00000000bfa10000951234d35864aa628023ce005f3d367c00000701fefff7ffffffb702000008000000b703003e6d000083850054308de8c7749781c53da224ccde11e1586e8521a654fc2538faaff61c75b305f68d9e6e226e602f10e29e98c99a9db3afbe80cf"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x200000, 0x10, &(0x7f0000000000), 0x143}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) sendto$llc(r3, &(0x7f0000000180)="ccd0b1195f16b94bb92206c5e70b0b148b7bfbf7b57bb1c57d7138d231a4ac738a2ed63659dc6899cc1e321965e3d2b442", 0x31, 0x0, &(0x7f00000001c0)={0x1a, 0x312, 0x7f, 0x1, 0x3, 0x6, @broadcast}, 0x10) socket$l2tp6(0xa, 0x2, 0x73) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000000)=0xf) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000380)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}], 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_type(r4, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r5, &(0x7f0000000280), 0x9) r6 = openat$cgroup_procs(r4, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f0000000c40), 0x12) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r9, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x2) sendmsg$inet(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="92", 0x1}], 0x1}, 0x3) r10 = openat$cgroup_ro(r7, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r10, &(0x7f0000000200)=0x1, 0x12) 575.968074ms ago: executing program 8 (id=4148): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x305200, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0xfffffffd, 0xc5, 0xe23, 0x1, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x80000, {0x0, 0x0, 0x0, r7, {}, {0xffe6, 0xb}, {0xfff2, 0x3}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008080) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 316.5016ms ago: executing program 7 (id=4149): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x48}, {0x6, 0x37, 0x0, 0x9}]}, 0x10) syz_emit_ethernet(0x14d, &(0x7f0000000a40)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaabb8100000086dd6d4f022c011311fffc0200"], 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x9, 0x0, 0xffffffff}, 0x1c) recvmsg(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) setsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x8a, 0x0, 0x0) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x5, 0xe, 0x0, &(0x7f0000000000)="251200d800"/14, 0x0, 0x7ff, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 289.794449ms ago: executing program 8 (id=4150): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001600)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffb, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0xfffffffffffffff8}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r7, {}, {0x2, 0xb}, {0xd, 0xb}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8, 0x2, 0x1d96}}]}, 0x40}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 69.430725ms ago: executing program 7 (id=4151): socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x1, 0x0, 0x0, @vifc_lcl_ifindex, @dev={0xac, 0x14, 0x14, 0x2e}}, 0x10) setsockopt$inet_mreq(r2, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x2a, &(0x7f0000000180)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @echo_reply={0x0, 0x0, 0x0, 0x64, 0xd2}}}}}, 0x0) 0s ago: executing program 8 (id=4152): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) r2 = gettid() sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002400)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010028bd7000ffdbdf2514000000080001000100000008001c00", @ANYRES32=r2], 0x24}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000000) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_FIOSETOWN(r3, 0x8901, &(0x7f00000023c0)=r2) socket$nl_netfilter(0x10, 0x3, 0xc) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000002240), 0x0, 0x10002, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r4, 0x0, 0x20040000) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f0000000040)=@req3={0x0, 0x0, 0xfffffffe, 0x0, 0x100}, 0x1c) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r6, 0x0, 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c00", @ANYRES16, @ANYRES32, @ANYBLOB="c46141a0c845c9a72f7680de078c359d26396001c6d7c4b4d80f82dfd579929490065b0673d5f6eab50456ad56aa44e8c6006d6ee93ff7"], 0x1c}}, 0x0) kernel console output (not intermixed with test programs): 1.037426][T14317] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 271.091378][T14320] netlink: 'syz.6.3110': attribute type 1 has an invalid length. [ 271.138851][T14320] bond6: (slave ip6gretap2): Enslaving as a backup interface with an up link [ 271.153394][T14325] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 271.181956][T14320] veth5: entered promiscuous mode [ 271.190778][T14320] bond6: (slave veth5): Enslaving as a backup interface with a down link [ 271.202286][T14320] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3110'. [ 271.212832][T14320] 8021q: adding VLAN 0 to HW filter on device bond6 [ 271.213447][ T6178] bond6: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 271.241060][T14325] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 271.288656][T14329] tipc: Enabled bearer , priority 0 [ 271.304739][T14325] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 271.319947][T14329] syzkaller0: entered promiscuous mode [ 271.328437][T14329] syzkaller0: entered allmulticast mode [ 271.346554][T14325] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 271.368742][T14329] tipc: Resetting bearer [ 271.378757][T14328] tipc: Resetting bearer [ 271.391603][ T6178] bond6: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 271.403457][T14328] tipc: Disabling bearer [ 271.427399][ T2894] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 271.442268][ T6178] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 271.457971][ T6178] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 271.476958][ T6178] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 271.535996][T14333] netlink: 'syz.6.3115': attribute type 1 has an invalid length. [ 271.557240][T14333] 8021q: adding VLAN 0 to HW filter on device bond7 [ 271.577876][T14333] 8021q: adding VLAN 0 to HW filter on device bond7 [ 271.586424][T14333] bond7: (slave vcan1): The slave device specified does not support setting the MAC address [ 271.598126][T14333] bond7: (slave vcan1): Error -95 calling set_mac_address [ 271.630851][T14335] macvlan2: entered promiscuous mode [ 271.636408][T14335] macvlan2: entered allmulticast mode [ 271.642883][T14335] bond7: entered promiscuous mode [ 271.648540][T14335] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 271.657319][T14335] bond7: left promiscuous mode [ 271.875333][ T30] audit: type=1800 audit(1756479782.467:7): pid=14338 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.3116" name="memory.events" dev="tmpfs" ino=538 res=0 errno=0 [ 271.911787][T14344] lo speed is unknown, defaulting to 1000 [ 271.931859][T14344] wg1 speed is unknown, defaulting to 1000 [ 272.359489][T14352] netlink: 'syz.6.3120': attribute type 3 has an invalid length. [ 272.514682][T14358] tipc: Enabled bearer , priority 0 [ 272.522799][T14358] syzkaller0: entered promiscuous mode [ 272.528318][T14358] syzkaller0: entered allmulticast mode [ 272.563566][T14358] tipc: Resetting bearer [ 272.580612][T14357] tipc: Resetting bearer [ 272.590185][T14357] tipc: Disabling bearer [ 272.707419][T14365] netem: change failed [ 272.866596][T14367] tipc: Enabled bearer , priority 0 [ 272.897039][T14367] syzkaller0: entered promiscuous mode [ 272.920569][T14367] syzkaller0: entered allmulticast mode [ 272.957759][T14367] tipc: Resetting bearer [ 272.977240][T14366] tipc: Resetting bearer [ 273.034617][T14366] tipc: Disabling bearer [ 273.143868][T14375] lo speed is unknown, defaulting to 1000 [ 273.191901][T14375] wg1 speed is unknown, defaulting to 1000 [ 273.308580][T14378] tipc: Enabled bearer , priority 0 [ 273.318608][T14378] syzkaller0: entered promiscuous mode [ 273.325414][T14378] syzkaller0: entered allmulticast mode [ 273.360068][T14378] tipc: Resetting bearer [ 273.390507][T14377] tipc: Resetting bearer [ 273.397837][T14377] tipc: Disabling bearer [ 273.676630][T14385] tipc: Enabled bearer , priority 0 [ 273.684508][T14385] syzkaller0: entered promiscuous mode [ 273.699650][T14385] syzkaller0: entered allmulticast mode [ 273.721791][T14384] tipc: Resetting bearer [ 273.764310][T14384] tipc: Disabling bearer [ 273.908076][T14400] tipc: Enabled bearer , priority 0 [ 273.922781][T14400] syzkaller0: entered promiscuous mode [ 273.934129][T14400] syzkaller0: entered allmulticast mode [ 273.941064][T14403] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3137'. [ 273.977336][T14400] tipc: Resetting bearer [ 273.992836][T14399] tipc: Resetting bearer [ 273.999899][T14399] tipc: Disabling bearer [ 274.056198][ T5858] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 274.056269][T14405] netlink: 'syz.0.3138': attribute type 11 has an invalid length. [ 274.063886][ T5858] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 274.091521][ T5858] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 274.109659][ T5858] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 274.119000][ T5858] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 274.181623][T14406] lo speed is unknown, defaulting to 1000 [ 274.188430][T14406] wg1 speed is unknown, defaulting to 1000 [ 274.204513][T14414] IPVS: length: 49 != 24 [ 274.288139][T14418] tipc: Enabled bearer , priority 0 [ 274.308948][T14421] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3144'. [ 274.328351][T14418] syzkaller0: entered promiscuous mode [ 274.334397][T14418] syzkaller0: entered allmulticast mode [ 274.365876][T14416] tipc: Resetting bearer [ 274.374631][T14416] tipc: Disabling bearer [ 274.446683][T14406] chnl_net:caif_netlink_parms(): no params data found [ 274.479028][T14424] netlink: 'syz.6.3145': attribute type 11 has an invalid length. [ 274.510997][T14424] netlink: 52 bytes leftover after parsing attributes in process `syz.6.3145'. [ 274.553888][T14428] lo speed is unknown, defaulting to 1000 [ 274.615166][T14428] wg1 speed is unknown, defaulting to 1000 [ 274.620706][T14406] bridge0: port 1(bridge_slave_0) entered blocking state [ 274.628385][T14406] bridge0: port 1(bridge_slave_0) entered disabled state [ 274.636499][T14406] bridge_slave_0: entered allmulticast mode [ 274.645121][T14406] bridge_slave_0: entered promiscuous mode [ 274.653549][T14406] bridge0: port 2(bridge_slave_1) entered blocking state [ 274.661084][T14406] bridge0: port 2(bridge_slave_1) entered disabled state [ 274.668629][T14406] bridge_slave_1: entered allmulticast mode [ 274.676441][T14406] bridge_slave_1: entered promiscuous mode [ 274.721601][T14406] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 274.767320][T14406] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 274.837614][T14406] team0: Port device team_slave_0 added [ 274.859636][T14406] team0: Port device team_slave_1 added [ 274.924428][T14406] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 274.941022][T14406] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 274.968490][T14406] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 274.981924][T14406] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 274.989018][T14406] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 275.016233][T14406] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 275.045467][T14442] netlink: 128 bytes leftover after parsing attributes in process `syz.6.3149'. [ 275.089922][T14406] hsr_slave_0: entered promiscuous mode [ 275.097694][T14406] hsr_slave_1: entered promiscuous mode [ 275.105374][T14406] debugfs: 'hsr0' already exists in 'hsr' [ 275.112768][T14406] Cannot create hsr debugfs directory [ 275.175754][T14441] lo speed is unknown, defaulting to 1000 [ 275.216068][T14441] wg1 speed is unknown, defaulting to 1000 [ 275.256061][T14446] lo speed is unknown, defaulting to 1000 [ 275.301943][T14446] wg1 speed is unknown, defaulting to 1000 [ 275.545138][T14406] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 275.614562][T14406] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 275.643376][T14406] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 275.674701][T14455] bond3: (slave erspan0): Releasing active interface [ 275.693261][T14455] ip6gretap1: entered promiscuous mode [ 275.713857][T14455] bridge_slave_0: left allmulticast mode [ 275.719564][T14455] bridge_slave_0: left promiscuous mode [ 275.751398][T14455] bridge0: port 1(bridge_slave_0) entered disabled state [ 275.760762][T14455] bridge_slave_1: left allmulticast mode [ 275.766499][T14455] bridge_slave_1: left promiscuous mode [ 275.795899][T14455] bridge0: port 2(bridge_slave_1) entered disabled state [ 275.825372][T14455] bond0: (slave bond_slave_0): Releasing backup interface [ 275.834195][T14455] bond0: (slave bond_slave_1): Releasing backup interface [ 275.847662][T14455] team0: Port device team_slave_0 removed [ 275.855800][T14455] team0: Port device team_slave_1 removed [ 275.862210][T14455] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 275.870162][T14455] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 275.893076][T14455] bond1: (slave bridge2): Releasing active interface [ 275.903701][T14455] bond2: (slave gretap1): Releasing active interface [ 275.910717][T14455] gretap1: left allmulticast mode [ 275.919239][T14455] bond3: (slave ip6gretap1): Releasing active interface [ 275.926770][T14455] bond3: (slave ip6gretap1): the permanent HWaddr of slave - b2:c7:57:b0:45:1c - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 275.951899][T14455] ip6gretap1: left promiscuous mode [ 275.965515][T14455] bond3: (slave veth3): Releasing active interface [ 275.994070][T14455] bond4: (slave bond5): Releasing backup interface [ 276.010385][T14455] bond4: (slave bond5): the permanent HWaddr of slave - 4a:83:db:9c:85:cf - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 276.040428][T14455] bond4: (slave gretap2): making interface the new active one [ 276.057849][T14455] bond4: (slave gretap2): Releasing backup interface [ 276.080231][T14455] bond6: (slave ip6gretap2): Removing an active aggregator [ 276.088637][T14455] bond6: (slave ip6gretap2): Releasing backup interface [ 276.104484][T14455] bond6: (slave ip6gretap2): the permanent HWaddr of slave - 56:34:dc:a2:04:44 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 276.144517][T14455] bond6: (slave veth5): Releasing backup interface [ 276.210444][ T5859] Bluetooth: hci6: command tx timeout [ 276.240023][T14406] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 276.369500][T14468] lo speed is unknown, defaulting to 1000 [ 276.420817][T14468] wg1 speed is unknown, defaulting to 1000 [ 276.432065][ T5908] IPVS: starting estimator thread 0... [ 276.435108][T14406] 8021q: adding VLAN 0 to HW filter on device bond0 [ 276.524096][T14470] IPVS: using max 39 ests per chain, 93600 per kthread [ 276.628991][T14406] 8021q: adding VLAN 0 to HW filter on device team0 [ 276.650170][T14472] tipc: Enabled bearer , priority 0 [ 276.684964][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 276.692150][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 276.727360][T14472] tipc: Resetting bearer [ 276.756941][T14485] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3157'. [ 276.777508][T14471] tipc: Resetting bearer [ 276.788663][T14471] tipc: Disabling bearer [ 276.798533][ T2894] bridge0: port 2(bridge_slave_1) entered blocking state [ 276.805795][ T2894] bridge0: port 2(bridge_slave_1) entered forwarding state [ 276.897138][T14496] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3160'. [ 276.906627][T14491] tipc: Enabled bearer , priority 0 [ 276.919126][T14487] syzkaller0: entered promiscuous mode [ 276.925049][T14487] syzkaller0: entered allmulticast mode [ 276.949375][T14490] tipc: Enabling of bearer rejected, already enabled [ 276.968844][T14487] tipc: Resetting bearer [ 276.979050][T14486] tipc: Resetting bearer [ 276.992730][T14486] tipc: Disabling bearer [ 277.068808][T14502] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3160'. [ 277.248851][T14406] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 277.299921][T14510] tipc: Enabled bearer , priority 0 [ 277.349033][T14510] syzkaller0: entered promiscuous mode [ 277.356554][T14510] syzkaller0: entered allmulticast mode [ 277.366829][T14510] tipc: Resetting bearer [ 277.388208][T14507] tipc: Resetting bearer [ 277.405748][T14507] tipc: Disabling bearer [ 277.419845][T14517] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3167'. [ 277.439031][T14517] bridge0: entered allmulticast mode [ 277.445295][T14517] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3167'. [ 277.459818][T14517] bridge0 (unregistering): left allmulticast mode [ 277.588093][T14525] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.652649][T14525] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.717987][T14406] veth0_vlan: entered promiscuous mode [ 277.729376][T14406] veth1_vlan: entered promiscuous mode [ 277.749150][T14525] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.806438][T14525] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.836960][T14533] netlink: 'syz.0.3170': attribute type 10 has an invalid length. [ 277.846641][T14406] veth0_macvtap: entered promiscuous mode [ 277.858367][T14406] veth1_macvtap: entered promiscuous mode [ 277.866162][T14534] tipc: Enabled bearer , priority 0 [ 277.874198][T14534] syzkaller0: entered promiscuous mode [ 277.879819][T14534] syzkaller0: entered allmulticast mode [ 277.923619][T14534] tipc: Resetting bearer [ 277.931939][T14532] tipc: Resetting bearer [ 277.939365][T14532] tipc: Disabling bearer [ 277.984658][ T6178] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.010369][ T6178] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.030794][ T6178] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.054917][ T6178] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.081890][T14406] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 278.106130][T14406] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 278.127076][ T6182] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.139392][ T6182] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.148983][ T6182] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.175306][ T6182] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.246170][ T6182] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 278.265462][ T6182] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 278.290482][ T5859] Bluetooth: hci6: command tx timeout [ 278.310119][ T6178] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 278.321007][ T6178] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 278.617266][T14549] lo speed is unknown, defaulting to 1000 [ 278.626203][T14549] wg1 speed is unknown, defaulting to 1000 [ 278.650200][T14552] netlink: 'syz.2.3174': attribute type 1 has an invalid length. [ 278.734908][T14559] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3176'. [ 278.749045][T14552] 8021q: adding VLAN 0 to HW filter on device bond8 [ 278.874229][T14560] bond8: (slave veth21): Enslaving as an active interface with a down link [ 278.899902][T14561] bond7: (slave veth17): Releasing active interface [ 278.964203][T14552] gretap3: entered promiscuous mode [ 279.022170][T14552] bond8: (slave gretap3): making interface the new active one [ 279.044098][T14552] bond8: (slave gretap3): Enslaving as an active interface with an up link [ 279.078430][T14565] A link change request failed with some changes committed already. Interface bond1 may have been left with an inconsistent configuration, please check. [ 279.148470][T14560] macvlan0: entered promiscuous mode [ 279.157394][T14560] macvlan0: entered allmulticast mode [ 279.173447][T14560] bond8: entered promiscuous mode [ 279.183169][T14560] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 279.191882][T14560] bond8: (slave macvlan0): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 279.214685][T14560] bond8: left promiscuous mode [ 279.345842][T14572] tipc: Enabled bearer , priority 0 [ 279.364592][T14568] syzkaller0: entered promiscuous mode [ 279.378411][T14568] syzkaller0: entered allmulticast mode [ 279.442499][T14580] tc_dump_action: action bad kind [ 279.464132][T14568] tipc: Resetting bearer [ 279.486371][T14567] tipc: Resetting bearer [ 279.498197][T14567] tipc: Disabling bearer [ 279.868005][T14599] siw: device registration error -23 [ 280.031314][T14605] tipc: Enabled bearer , priority 0 [ 280.041276][T14606] tipc: Enabled bearer , priority 0 [ 280.049528][T14605] syzkaller0: entered promiscuous mode [ 280.066005][T14605] syzkaller0: entered allmulticast mode [ 280.077810][T14606] syzkaller0: entered promiscuous mode [ 280.085726][T14606] syzkaller0: entered allmulticast mode [ 280.112541][T14605] tipc: Resetting bearer [ 280.161707][T14606] tipc: Resetting bearer [ 280.169870][T14604] tipc: Resetting bearer [ 280.179528][T14604] tipc: Disabling bearer [ 280.193935][T14603] tipc: Resetting bearer [ 280.201896][T14603] tipc: Disabling bearer [ 280.280181][T14612] netlink: 'syz.5.3189': attribute type 1 has an invalid length. [ 280.326467][T14609] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3189'. [ 280.371421][ T5859] Bluetooth: hci6: command tx timeout [ 280.385853][T14609] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3189'. [ 280.412064][T14609] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 280.433765][T14609] gretap1: entered promiscuous mode [ 280.592585][T14622] tipc: Enabling of bearer rejected, already enabled [ 280.745598][T14629] netlink: 'syz.2.3195': attribute type 4 has an invalid length. [ 280.758327][T14631] tipc: Started in network mode [ 280.770798][T14631] tipc: Node identity 62033e13026f, cluster identity 4711 [ 280.778150][T14631] tipc: Enabled bearer , priority 0 [ 280.788589][T14631] syzkaller0: entered promiscuous mode [ 280.794518][T14631] syzkaller0: entered allmulticast mode [ 280.827317][T14631] tipc: Resetting bearer [ 280.849144][T14630] tipc: Resetting bearer [ 280.878292][T14630] tipc: Disabling bearer [ 280.946521][T14633] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3197'. [ 281.049871][T14640] tipc: New replicast peer: 255.255.255.255 [ 281.059518][T14640] tipc: Enabled bearer , priority 10 [ 281.069546][T14640] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3199'. [ 281.126527][T14644] netlink: 277 bytes leftover after parsing attributes in process `syz.2.3201'. [ 281.152045][T14642] lo speed is unknown, defaulting to 1000 [ 281.197059][T14650] lo speed is unknown, defaulting to 1000 [ 281.206599][T14650] wg1 speed is unknown, defaulting to 1000 [ 281.215876][T14642] wg1 speed is unknown, defaulting to 1000 [ 281.317735][T14657] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 281.542442][T14668] tipc: Enabled bearer , priority 0 [ 281.604708][T14668] syzkaller0: entered promiscuous mode [ 281.622683][T14668] syzkaller0: entered allmulticast mode [ 281.956066][T14666] batadv2: entered promiscuous mode [ 281.999617][T14675] tipc: Resetting bearer [ 282.012204][T14667] tipc: Resetting bearer [ 282.021676][T14667] tipc: Disabling bearer [ 282.199814][T14685] netlink: 27 bytes leftover after parsing attributes in process `syz.0.3216'. [ 282.211104][T14688] netlink: 'syz.2.3215': attribute type 1 has an invalid length. [ 282.267503][T14688] 8021q: adding VLAN 0 to HW filter on device bond9 [ 282.333084][T14693] bond9: (slave ip6gretap0): making interface the new active one [ 282.432035][T14693] bond9: (slave ip6gretap0): Enslaving as an active interface with an up link [ 282.450559][ T5859] Bluetooth: hci6: command tx timeout [ 282.501558][T14688] veth23: entered promiscuous mode [ 282.514456][T14688] bond9: (slave veth23): Enslaving as an active interface with a down link [ 282.548778][T14693] erspan0: entered allmulticast mode [ 282.593858][ T3708] tipc: Node number set to 1183184975 [ 282.617514][T14693] bond9: (slave erspan0): Enslaving as an active interface with an up link [ 282.638932][T14708] syz_tun: left allmulticast mode [ 282.705493][T14711] syz_tun: entered allmulticast mode [ 282.774652][T14711] dvmrp1: entered allmulticast mode [ 282.814272][T14710] syz_tun: left allmulticast mode [ 282.956715][T14720] macsec1: entered promiscuous mode [ 282.962441][T14720] dummy0: entered promiscuous mode [ 282.967892][T14720] macsec1: entered allmulticast mode [ 282.973940][T14720] dummy0: entered allmulticast mode [ 282.981659][T14720] dummy0: left allmulticast mode [ 282.986739][T14720] dummy0: left promiscuous mode [ 283.261788][T14732] bridge_slave_0: left allmulticast mode [ 283.267729][T14732] bridge_slave_0: left promiscuous mode [ 283.275253][T14732] bridge0: port 1(bridge_slave_0) entered disabled state [ 283.297003][T14732] bridge_slave_1: left allmulticast mode [ 283.314001][T14732] bridge_slave_1: left promiscuous mode [ 283.327451][T14734] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3228'. [ 283.341754][T14732] bridge0: port 2(bridge_slave_1) entered disabled state [ 283.380120][T14732] bond0: (slave bond_slave_0): Releasing backup interface [ 283.402030][T14732] bond0: (slave bond_slave_1): Releasing backup interface [ 283.427967][T14732] team0: Failed to send options change via netlink (err -105) [ 283.475508][T14732] team0: Failed to send port change of device team_slave_0 via netlink (err -105) [ 283.511838][T14732] team0: Port device team_slave_0 removed [ 283.545255][T14732] team0: Failed to send options change via netlink (err -105) [ 283.576752][T14732] team0: Failed to send port change of device team_slave_1 via netlink (err -105) [ 283.610152][T14732] team0: Port device team_slave_1 removed [ 283.633844][T14732] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 283.661678][T14732] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 283.686576][T14732] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 283.698763][T14732] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 283.760765][T14734] team0: Failed to send options change via netlink (err -105) [ 283.785444][T14734] team0: Mode changed to "loadbalance" [ 283.820123][T14739] tipc: Enabled bearer , priority 0 [ 283.859585][T14737] syzkaller0: entered promiscuous mode [ 283.892926][T14737] syzkaller0: entered allmulticast mode [ 283.942102][T14737] tipc: Resetting bearer [ 283.969340][T14736] tipc: Resetting bearer [ 284.025288][T14736] tipc: Disabling bearer [ 284.224296][T14749] tipc: Enabled bearer , priority 0 [ 284.245600][T14749] syzkaller0: entered promiscuous mode [ 284.265777][T14749] syzkaller0: entered allmulticast mode [ 284.299526][T14749] tipc: Resetting bearer [ 284.319937][T14747] tipc: Resetting bearer [ 284.341169][T14747] tipc: Disabling bearer [ 284.663233][T14761] syzkaller1: entered promiscuous mode [ 284.669072][T14761] syzkaller1: entered allmulticast mode [ 284.912621][T14765] lo speed is unknown, defaulting to 1000 [ 284.919869][T14765] wg1 speed is unknown, defaulting to 1000 [ 285.191296][T14773] bond0: (slave rose0): Error: Slave does not support XDP [ 285.247543][T14774] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3239'. [ 285.364805][T14776] lo speed is unknown, defaulting to 1000 [ 285.382179][T14776] wg1 speed is unknown, defaulting to 1000 [ 285.506369][T14784] macsec1: entered promiscuous mode [ 285.538366][T14783] lo speed is unknown, defaulting to 1000 [ 285.550524][T14781] block nbd2: server does not support multiple connections per device. [ 285.564734][T14783] wg1 speed is unknown, defaulting to 1000 [ 285.565764][T14781] block nbd2: shutting down sockets [ 286.055847][T14796] lo speed is unknown, defaulting to 1000 [ 286.062740][T14796] wg1 speed is unknown, defaulting to 1000 [ 286.698887][T14805] tipc: Enabling of bearer rejected, already enabled [ 286.748662][T14783] netlink: 152 bytes leftover after parsing attributes in process `syz.5.3242'. [ 286.817270][T14808] tipc: Enabling of bearer rejected, already enabled [ 287.050377][T14812] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3247'. [ 287.075577][T14810] lo speed is unknown, defaulting to 1000 [ 287.083044][T14812] ip6tnl0: entered promiscuous mode [ 287.088411][T14812] ip6tnl0: entered allmulticast mode [ 287.121102][T14810] wg1 speed is unknown, defaulting to 1000 [ 287.153944][T14815] netlink: 'syz.5.3248': attribute type 2 has an invalid length. [ 287.399138][T14826] openvswitch: netlink: IP tunnel dst address not specified [ 287.634406][T14829] tipc: Enabled bearer , priority 0 [ 287.645638][T14837] syzkaller0: entered promiscuous mode [ 287.656979][T14837] syzkaller0: entered allmulticast mode [ 287.678222][T14827] lo speed is unknown, defaulting to 1000 [ 287.693569][T14829] tipc: Resetting bearer [ 287.702799][T14827] wg1 speed is unknown, defaulting to 1000 [ 287.708966][T14828] tipc: Resetting bearer [ 287.718594][T14828] tipc: Disabling bearer [ 287.779356][T14832] syz_tun: entered promiscuous mode [ 287.797029][T14832] 8021q: adding VLAN 0 to HW filter on device team0 [ 287.810133][T14832] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 287.891595][T14836] lo speed is unknown, defaulting to 1000 [ 287.902478][T14836] wg1 speed is unknown, defaulting to 1000 [ 287.914799][T14843] netlink: 48 bytes leftover after parsing attributes in process `syz.6.3255'. [ 288.408195][T14858] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 288.466021][T14858] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 288.525962][T14858] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 288.600591][ T30] audit: type=1800 audit(1756479799.187:8): pid=14855 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.3257" name="memory.events" dev="tmpfs" ino=3297 res=0 errno=0 [ 288.680072][T14858] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 288.797825][ T6182] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 288.815533][ T6182] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 288.844646][ T6182] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 288.892938][ T6182] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 289.025442][T14867] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3262'. [ 289.113378][T14875] batadv0: entered promiscuous mode [ 289.167547][T14875] vlan2: entered promiscuous mode [ 289.222359][T14880] netlink: 216 bytes leftover after parsing attributes in process `syz.5.3265'. [ 289.234696][T14880] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3265'. [ 289.252360][T14877] lo speed is unknown, defaulting to 1000 [ 289.254949][T14880] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3265'. [ 289.325877][T14881] lo speed is unknown, defaulting to 1000 [ 289.346286][T14877] wg1 speed is unknown, defaulting to 1000 [ 289.380004][T14885] mac80211_hwsim hwsim5 syzkaller0: left allmulticast mode [ 289.406415][T14881] wg1 speed is unknown, defaulting to 1000 [ 289.446372][ T5864] hid-generic 0005:16BF:5505.0001: unknown main item tag 0x0 [ 289.462322][ T5864] hid-generic 0005:16BF:5505.0001: unknown main item tag 0x0 [ 289.508754][ T5864] hid-generic 0005:16BF:5505.0001: reserved main item tag 0xe [ 289.538422][T14894] tipc: Enabling of bearer rejected, already enabled [ 289.549364][ T5864] hid-generic 0005:16BF:5505.0001: hidraw0: BLUETOOTH HID vc3.b8 Device [syz0] on aa:aa:aa:aa:aa:aa [ 289.558477][T14894] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode [ 289.570439][ T5859] Bluetooth: hci6: command tx timeout [ 289.589440][T14894] tipc: Resetting bearer [ 289.679395][T14900] netlink: 'syz.7.3271': attribute type 10 has an invalid length. [ 289.679728][T14891] syzkaller0: entered promiscuous mode [ 289.696386][T14891] syzkaller0: entered allmulticast mode [ 289.735924][T14900] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 290.014757][T14910] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3273'. [ 290.042870][T14911] mac80211_hwsim hwsim5 syzkaller0: left allmulticast mode [ 290.275284][T14918] tipc: Enabled bearer , priority 0 [ 290.452465][T14918] syzkaller0: entered promiscuous mode [ 290.458239][T14918] syzkaller0: entered allmulticast mode [ 290.603666][T14918] tipc: Resetting bearer [ 290.659764][T14924] lo speed is unknown, defaulting to 1000 [ 290.682628][T14917] tipc: Resetting bearer [ 290.747930][T14917] tipc: Disabling bearer [ 290.843303][T14924] wg1 speed is unknown, defaulting to 1000 [ 290.890117][T14929] netlink: 'syz.0.3279': attribute type 10 has an invalid length. [ 290.946984][T14929] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3279'. [ 291.056840][T14929] team0: Failed to send options change via netlink (err -105) [ 291.070017][T14929] team0: Port device geneve0 added [ 291.095743][ T6178] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.197408][ T6178] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.214552][T14938] netlink: 'syz.0.3282': attribute type 1 has an invalid length. [ 291.215698][ T6178] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.354068][T14938] 8021q: adding VLAN 0 to HW filter on device bond8 [ 291.396799][ T6178] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.447106][T14941] bond8: (slave geneve3): making interface the new active one [ 291.459996][T14941] bond8: (slave geneve3): Enslaving as an active interface with an up link [ 291.549511][T14945] bond8: entered promiscuous mode [ 291.554914][T14945] geneve3: entered promiscuous mode [ 291.592839][T14947] bond9: (slave erspan0): Releasing active interface [ 291.599720][T14947] ip6gretap0: entered promiscuous mode [ 291.636818][T14947] bond7: (slave bridge13): Releasing active interface [ 291.672962][T14947] bond8: (slave veth21): Releasing active interface [ 291.679787][T14947] bond8: (slave veth21): the permanent HWaddr of slave - 2e:d9:5d:4c:20:54 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 291.704068][T14947] bond8: (slave gretap3): Releasing active interface [ 291.708907][T14958] netlink: 'syz.5.3286': attribute type 10 has an invalid length. [ 291.768290][T14947] bond9: (slave ip6gretap0): Releasing active interface [ 291.775954][T14947] bond9: (slave ip6gretap0): the permanent HWaddr of slave - fa:2e:62:a6:ec:a5 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 291.798488][T14947] ip6gretap0: left promiscuous mode [ 291.891743][T14947] bond9: (slave veth23): Releasing active interface [ 291.962265][T14949] 8021q: adding VLAN 0 to HW filter on device bond1 [ 292.056279][T14950] team0: Mode changed to "loadbalance" [ 292.217623][T14951] netdevsim netdevsim7 netdevsim0: entered promiscuous mode [ 292.230961][T14951] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 292.259740][T14951] bond1: (slave macvlan2): Enslaving as a backup interface with an up link [ 292.281667][ T1106] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 292.407236][ T59] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 292.469179][T14954] bond0: (slave netdevsim0): Releasing backup interface [ 292.564258][T14954] netdevsim netdevsim7 netdevsim0: left promiscuous mode [ 292.585290][T14954] bond1: (slave macvlan2): Removing an active aggregator [ 292.615606][T14954] bond1: (slave macvlan2): Releasing backup interface [ 292.879468][T14990] netlink: 'syz.5.3291': attribute type 1 has an invalid length. [ 292.994135][T14990] 8021q: adding VLAN 0 to HW filter on device bond8 [ 293.091133][ T5858] Bluetooth: hci6: command 0x0405 tx timeout [ 293.097635][T14997] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3293'. [ 293.141196][T14995] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 293.160919][ T5908] IPVS: starting estimator thread 0... [ 293.282194][T14999] IPVS: using max 44 ests per chain, 105600 per kthread [ 293.355339][T15001] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3294'. [ 293.386149][T15004] lo speed is unknown, defaulting to 1000 [ 293.403338][T15001] batadv0: entered promiscuous mode [ 293.430147][T15001] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 293.442762][T15006] netlink: 277 bytes leftover after parsing attributes in process `syz.7.3295'. [ 293.458154][T15001] batadv0: left promiscuous mode [ 293.529461][T15004] wg1 speed is unknown, defaulting to 1000 [ 293.558568][T14916] Set syz1 is full, maxelem 65536 reached [ 293.794957][T15013] netlink: 'syz.5.3299': attribute type 1 has an invalid length. [ 293.866284][T15013] 8021q: adding VLAN 0 to HW filter on device bond9 [ 293.867196][T15019] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3300'. [ 293.882623][T15019] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3300'. [ 294.044961][T15017] lo speed is unknown, defaulting to 1000 [ 294.058751][T15019] ip6tnl1: entered promiscuous mode [ 294.119059][T15019] ip6tnl1: entered allmulticast mode [ 294.174173][T15017] wg1 speed is unknown, defaulting to 1000 [ 294.511536][T15031] syzkaller0: entered promiscuous mode [ 294.558555][T15031] syzkaller0: entered allmulticast mode [ 294.593751][T15031] tipc: Enabled bearer , priority 0 [ 294.623593][T15031] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 294.737480][T15031] tipc: Resetting bearer [ 294.760665][T15030] tipc: Resetting bearer [ 294.798889][T15042] netlink: 'syz.2.3304': attribute type 10 has an invalid length. [ 294.831744][T15030] tipc: Disabling bearer [ 294.856218][T15044] netlink: 'syz.2.3304': attribute type 10 has an invalid length. [ 294.897403][T15038] lo speed is unknown, defaulting to 1000 [ 294.917139][T15044] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3304'. [ 294.932386][T15042] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 294.964830][T15042] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 295.089887][T15038] wg1 speed is unknown, defaulting to 1000 [ 295.112997][T15044] batadv0: entered promiscuous mode [ 295.134935][T15044] batadv0: entered allmulticast mode [ 295.170506][ T5858] Bluetooth: hci6: command 0x0405 tx timeout [ 295.181085][T15044] bond0: (slave batadv0): Releasing backup interface [ 295.303400][T15044] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 295.529489][T15056] netlink: 36 bytes leftover after parsing attributes in process `syz.7.3307'. [ 295.562651][T15056] 8021q: VLANs not supported on ipvlan1 [ 295.624940][T15056] macsec1: entered promiscuous mode [ 295.659890][T15056] macsec1: entered allmulticast mode [ 296.412971][T15069] tipc: Enabled bearer , priority 0 [ 296.434751][T15069] syzkaller0: entered promiscuous mode [ 296.469021][T15069] syzkaller0: entered allmulticast mode [ 296.551454][T15069] sch_tbf: burst 151 is lower than device syzkaller0 mtu (1514) ! [ 296.629104][T15069] tipc: Resetting bearer [ 296.667562][T15069] tipc: Resetting bearer [ 296.684485][T15069] tipc: Disabling bearer [ 296.847770][T15076] lo speed is unknown, defaulting to 1000 [ 296.885064][T15080] tipc: Enabled bearer , priority 0 [ 296.905269][T15080] syzkaller0: entered promiscuous mode [ 296.928847][T15080] syzkaller0: entered allmulticast mode [ 296.939124][T15076] wg1 speed is unknown, defaulting to 1000 [ 297.019041][T15080] tipc: Resetting bearer [ 297.090968][T15079] tipc: Resetting bearer [ 297.112323][T15079] tipc: Disabling bearer [ 297.208027][T15084] lo speed is unknown, defaulting to 1000 [ 297.227065][T15084] wg1 speed is unknown, defaulting to 1000 [ 297.409277][T15096] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3317'. [ 297.635051][T15110] tipc: Enabled bearer , priority 0 [ 297.651173][T15110] syzkaller0: entered promiscuous mode [ 297.663218][T15110] syzkaller0: entered allmulticast mode [ 297.683923][T15110] tipc: Resetting bearer [ 297.694963][T15109] tipc: Resetting bearer [ 297.703635][T15109] tipc: Disabling bearer [ 297.870842][T15119] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3321'. [ 298.104998][T15126] syzkaller0: entered promiscuous mode [ 298.112901][T15126] syzkaller0: entered allmulticast mode [ 298.148886][T15126] tipc: Enabled bearer , priority 0 [ 298.333681][T15142] netlink: 'syz.5.3328': attribute type 13 has an invalid length. [ 298.345652][T15142] netlink: 'syz.5.3328': attribute type 17 has an invalid length. [ 298.373959][T15135] v: renamed from ip6_vti0 [ 298.390113][T15139] tipc: Resetting bearer [ 298.392079][T15144] netlink: 'syz.2.3327': attribute type 1 has an invalid length. [ 298.412167][T15125] tipc: Resetting bearer [ 298.424647][T15125] tipc: Disabling bearer [ 298.609439][T15142] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 298.654943][T15144] 8021q: adding VLAN 0 to HW filter on device bond10 [ 298.684533][T15140] bond10: (slave geneve4): making interface the new active one [ 298.697347][T15140] bond10: (slave geneve4): Enslaving as an active interface with an up link [ 298.729438][ T37] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 298.748749][ T37] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 298.758866][T15138] lo speed is unknown, defaulting to 1000 [ 298.764988][ T12] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 298.795462][T15150] tipc: Enabled bearer , priority 0 [ 298.820792][ T12] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 298.831977][T15138] wg1 speed is unknown, defaulting to 1000 [ 298.873764][T15150] syzkaller0: entered promiscuous mode [ 298.879288][T15150] syzkaller0: entered allmulticast mode [ 298.936398][T15164] netlink: 'syz.7.3333': attribute type 1 has an invalid length. [ 299.001053][T15166] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3334'. [ 299.018761][T15167] netlink: 132 bytes leftover after parsing attributes in process `syz.7.3333'. [ 299.077009][T15153] tipc: Resetting bearer [ 299.137567][T15149] tipc: Resetting bearer [ 299.163764][T15149] tipc: Disabling bearer [ 299.297157][T15175] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 299.458627][T15184] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3340'. [ 299.858409][T15194] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3341'. [ 299.872340][T15195] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3339'. [ 300.537436][T15199] lo speed is unknown, defaulting to 1000 [ 300.547885][T15199] wg1 speed is unknown, defaulting to 1000 [ 300.555389][T15201] batman_adv: batadv0: Adding interface: dummy0 [ 300.569588][T15201] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 300.615438][T15203] lo speed is unknown, defaulting to 1000 [ 300.626652][T15201] batman_adv: batadv0: Adding interface: ip6gretap2 [ 300.644091][T15201] batman_adv: batadv0: The MTU of interface ip6gretap2 is too small (1434) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1500. [ 300.674344][T15201] batman_adv: batadv0: Interface activated: ip6gretap2 [ 300.775779][T15211] tipc: Enabled bearer , priority 0 [ 300.819860][T15203] wg1 speed is unknown, defaulting to 1000 [ 300.839818][T15210] netlink: zone id is out of range [ 300.845721][T15210] netlink: zone id is out of range [ 300.860396][T15210] netlink: zone id is out of range [ 300.880667][T15210] netlink: zone id is out of range [ 300.895851][T15210] netlink: zone id is out of range [ 300.907614][T15210] netlink: zone id is out of range [ 300.940790][T15210] netlink: zone id is out of range [ 300.946138][T15210] netlink: zone id is out of range [ 300.960419][T15207] tipc: Resetting bearer [ 301.003689][T15206] tipc: Disabling bearer [ 301.114200][T15217] tipc: Enabled bearer , priority 0 [ 301.151814][T15217] syzkaller0: entered promiscuous mode [ 301.157343][T15217] syzkaller0: entered allmulticast mode [ 301.222899][T15225] tipc: Resetting bearer [ 301.255146][T15216] tipc: Resetting bearer [ 301.278239][T15216] tipc: Disabling bearer [ 301.384511][T15230] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3349'. [ 301.488853][T15237] netlink: 'syz.2.3352': attribute type 10 has an invalid length. [ 301.520996][ T12] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 301.624700][T15237] 8021q: adding VLAN 0 to HW filter on device team0 [ 301.667491][T15237] bond0: (slave team0): Enslaving as an active interface with an up link [ 301.862369][T15248] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3353'. [ 302.139869][T15252] lo speed is unknown, defaulting to 1000 [ 302.153349][T15252] wg1 speed is unknown, defaulting to 1000 [ 302.185105][T15266] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3360'. [ 302.195499][T15266] netlink: 'syz.0.3360': attribute type 30 has an invalid length. [ 302.203305][T15254] macvtap1: entered allmulticast mode [ 302.208980][T15254] mac80211_hwsim hwsim28 wlan0: entered allmulticast mode [ 302.224029][T15254] mac80211_hwsim hwsim28 wlan0: left allmulticast mode [ 302.289793][T15266] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3360'. [ 302.289838][ T6182] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 302.312450][T15266] netlink: 'syz.0.3360': attribute type 30 has an invalid length. [ 302.377783][ T6182] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 302.404216][ T6182] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 302.417073][ T6182] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 302.553565][T15278] lo speed is unknown, defaulting to 1000 [ 302.566914][T15278] wg1 speed is unknown, defaulting to 1000 [ 302.730233][T15285] veth0_to_batadv: Caught tx_queue_len zero misconfig [ 302.909373][T15291] netlink: 60 bytes leftover after parsing attributes in process `syz.7.3364'. [ 303.218545][T15299] tipc: Enabled bearer , priority 0 [ 303.241233][T15299] syzkaller0: entered promiscuous mode [ 303.247220][T15299] syzkaller0: entered allmulticast mode [ 303.270088][T15299] tipc: Resetting bearer [ 303.312788][T15297] tipc: Resetting bearer [ 303.334041][T15297] tipc: Disabling bearer [ 303.353476][T15306] lo speed is unknown, defaulting to 1000 [ 303.372736][T15306] wg1 speed is unknown, defaulting to 1000 [ 303.444655][T15311] erspan0: left allmulticast mode [ 303.507068][T15311] ip6tnl0: left promiscuous mode [ 303.517437][T15311] ip6tnl0: left allmulticast mode [ 303.536339][T15311] 8021q: adding VLAN 0 to HW filter on device bond0 [ 303.559943][T15311] batman_adv: batadv0: Interface activated: dummy0 [ 303.654880][ T5858] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 303.699371][T15311] net_ratelimit: 38 callbacks suppressed [ 303.699383][T15311] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 303.782411][T15307] lo speed is unknown, defaulting to 1000 [ 303.810906][T15315] lo speed is unknown, defaulting to 1000 [ 303.817772][T15315] wg1 speed is unknown, defaulting to 1000 [ 303.856798][T15307] wg1 speed is unknown, defaulting to 1000 [ 304.097698][T15334] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3375'. [ 304.186622][T15339] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3375'. [ 304.200721][T15337] tipc: Enabling of bearer rejected, already enabled [ 304.227617][T15337] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode [ 304.241237][T15337] tipc: Resetting bearer [ 304.289930][T15342] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3378'. [ 304.359083][T15347] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci6/hci6:200/input6 [ 304.560132][T15358] lo speed is unknown, defaulting to 1000 [ 304.570667][T15358] wg1 speed is unknown, defaulting to 1000 [ 304.583869][T15364] netlink: 240 bytes leftover after parsing attributes in process `syz.0.3381'. [ 304.616271][T15362] lo speed is unknown, defaulting to 1000 [ 304.638288][T15362] wg1 speed is unknown, defaulting to 1000 [ 304.848595][T15373] tipc: Enabling of bearer rejected, already enabled [ 304.857734][T15374] netlink: 'syz.5.3386': attribute type 12 has an invalid length. [ 304.875079][T15373] mac80211_hwsim hwsim5 syzkaller0: Caught tx_queue_len zero misconfig [ 305.191698][T15384] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3390'. [ 305.204995][T15384] veth0: entered promiscuous mode [ 305.231194][T15384] veth0: left promiscuous mode [ 305.346734][ T30] audit: type=1800 audit(1756479815.937:9): pid=15385 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.3389" name="memory.events" dev="tmpfs" ino=804 res=0 errno=0 [ 305.557660][T15405] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3393'. [ 305.612998][T15402] lo speed is unknown, defaulting to 1000 [ 305.619442][T15402] wg1 speed is unknown, defaulting to 1000 [ 305.642528][ T59] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 305.662763][T15413] syzkaller0: entered promiscuous mode [ 305.675941][T15413] syzkaller0: entered allmulticast mode [ 306.568001][T15436] batadv_slave_0: entered promiscuous mode [ 306.584391][T15436] hsr1: Slave A (syz_tun) is not up; please bring it up to get a fully working HSR network [ 306.602601][T15436] hsr1: Slave B (batadv_slave_0) is not up; please bring it up to get a fully working HSR network [ 306.614717][T15436] hsr1: entered allmulticast mode [ 306.621437][T15436] syz_tun: entered allmulticast mode [ 306.639264][T15436] batadv_slave_0: entered allmulticast mode [ 306.731993][T15444] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3401'. [ 306.869284][T15452] dummy0: left promiscuous mode [ 306.887191][T15452] batadv0: left promiscuous mode [ 306.900393][T15452] batadv0: left allmulticast mode [ 306.949720][T15452] ip6erspan0: left promiscuous mode [ 307.007854][T15452] bond3: left promiscuous mode [ 307.068606][T15452] bond0: left promiscuous mode [ 307.092639][T15452] bond0: left allmulticast mode [ 307.109345][T15452] ipvlan2: left allmulticast mode [ 307.124669][T15452] bond6: left allmulticast mode [ 307.151353][T15452] veth17: left promiscuous mode [ 307.157707][T15452] bond8: left promiscuous mode [ 307.173747][T15452] geneve3: left promiscuous mode [ 307.195383][T15452] hsr1: left allmulticast mode [ 307.200207][T15452] batadv_slave_0: left allmulticast mode [ 307.234768][T15460] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 307.269769][T15462] bond0: (slave team0): Releasing backup interface [ 307.270930][T15460] netlink: 'syz.2.3407': attribute type 10 has an invalid length. [ 307.384950][T15462] batman_adv: batadv0: Interface deactivated: dummy0 [ 307.394993][T15462] batman_adv: batadv0: Removing interface: dummy0 [ 307.485215][T15462] bond10: (slave geneve4): Releasing active interface [ 307.507823][T15462] batman_adv: batadv0: Interface deactivated: ip6gretap2 [ 307.526417][T15462] batman_adv: batadv0: Removing interface: ip6gretap2 [ 307.540110][ T6167] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 307.549156][ T6167] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.567929][T15460] mac80211_hwsim hwsim5 wlan1: left allmulticast mode [ 307.594869][T15460] bond0: (slave wlan1): Opening slave failed [ 307.636391][ T6167] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 307.650468][ T6167] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.670681][ T6167] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 307.679952][ T6167] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.706710][ T6167] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 307.722079][ T6167] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.782971][ T6167] netdevsim netdevsim2 eth0: unset [1, 1] type 2 family 0 port 6081 - 0 [ 307.800124][ T6167] netdevsim netdevsim2 eth1: unset [1, 1] type 2 family 0 port 6081 - 0 [ 307.825158][ T6167] netdevsim netdevsim2 eth2: unset [1, 1] type 2 family 0 port 6081 - 0 [ 307.853551][ T6167] netdevsim netdevsim2 eth3: unset [1, 1] type 2 family 0 port 6081 - 0 [ 307.950171][T15484] lo speed is unknown, defaulting to 1000 [ 307.989394][T15484] wg1 speed is unknown, defaulting to 1000 [ 308.083992][T15490] tipc: Enabled bearer , priority 0 [ 308.138159][T15495] syzkaller0: entered promiscuous mode [ 308.163130][T15495] syzkaller0: entered allmulticast mode [ 308.229280][T15490] tipc: Resetting bearer [ 308.238744][T15489] tipc: Resetting bearer [ 308.246972][T15489] tipc: Disabling bearer [ 308.319782][T15500] erspan0: left allmulticast mode [ 308.335904][T15500] vlan2: left promiscuous mode [ 308.341470][T15500] vlan2: left allmulticast mode [ 308.346471][T15500] hsr_slave_1: left allmulticast mode [ 308.368313][T15500] veth3: left promiscuous mode [ 308.382650][T15500] geneve2: left promiscuous mode [ 308.387750][T15500] geneve2: left allmulticast mode [ 308.399864][T15500] veth5: left promiscuous mode [ 308.409188][ T59] netdevsim netdevsim6 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.441907][T15505] lo speed is unknown, defaulting to 1000 [ 308.447723][ T59] netdevsim netdevsim6 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.481031][ T59] netdevsim netdevsim6 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.530450][T15505] wg1 speed is unknown, defaulting to 1000 [ 308.535592][ T37] netdevsim netdevsim6 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.651241][T15510] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3419'. [ 309.065930][T15519] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3420'. [ 309.110616][T15519] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3420'. [ 309.282358][T15535] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3425'. [ 309.887677][T15551] tipc: Enabled bearer , priority 0 [ 309.902097][T15551] syzkaller0: entered promiscuous mode [ 309.909408][T15551] syzkaller0: entered allmulticast mode [ 309.967249][T15551] tipc: Resetting bearer [ 310.013445][T15550] tipc: Resetting bearer [ 310.027202][T15550] tipc: Disabling bearer [ 310.509536][T15563] netlink: 'syz.0.3433': attribute type 13 has an invalid length. [ 310.531187][T15563] netlink: 'syz.0.3433': attribute type 17 has an invalid length. [ 310.655414][T15451] Set syz1 is full, maxelem 65536 reached [ 310.846106][T15563] 8021q: adding VLAN 0 to HW filter on device team0 [ 310.874742][T15563] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 310.903138][T15574] tipc: Enabling of bearer rejected, already enabled [ 311.026285][T15580] tipc: Enabling of bearer rejected, already enabled [ 311.187149][T15588] tipc: Enabling of bearer rejected, already enabled [ 311.353338][T15599] tipc: Enabling of bearer rejected, already enabled [ 311.426711][T15602] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.527578][T15602] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.595696][T15602] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.687200][T15610] netlink: 'syz.6.3448': attribute type 10 has an invalid length. [ 311.705852][T15602] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.728359][T15610] 8021q: adding VLAN 0 to HW filter on device team0 [ 311.741847][T15610] bond0: (slave team0): Enslaving as an active interface with a down link [ 311.756450][T15612] tipc: Enabling of bearer rejected, already enabled [ 311.823711][ T12] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.847691][ T12] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.920888][ T12] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.944876][T15617] lo speed is unknown, defaulting to 1000 [ 311.952089][ T12] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.963220][T15621] tipc: Enabling of bearer rejected, already enabled [ 311.972993][T15617] wg1 speed is unknown, defaulting to 1000 [ 312.076437][T15626] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3452'. [ 312.092585][T15626] dummy0: entered promiscuous mode [ 312.098095][T15626] macvtap1: entered promiscuous mode [ 312.103800][T15626] macvtap1: entered allmulticast mode [ 312.109401][T15626] dummy0: entered allmulticast mode [ 312.408964][T15642] syzkaller0: entered promiscuous mode [ 312.432168][T15642] syzkaller0: entered allmulticast mode [ 312.446175][T15644] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3454'. [ 312.818152][T15663] syzkaller0: entered promiscuous mode [ 312.824083][T15663] syzkaller0: entered allmulticast mode [ 312.829683][T15667] netlink: 100 bytes leftover after parsing attributes in process `syz.2.3463'. [ 312.940466][T15670] netlink: 'syz.6.3464': attribute type 1 has an invalid length. [ 312.965055][T15670] 8021q: adding VLAN 0 to HW filter on device bond8 [ 312.994903][T15670] bond8: (slave bridge4): making interface the new active one [ 313.004262][T15670] bond8: (slave bridge4): Enslaving as an active interface with an up link [ 313.035049][T15670] bond8: (slave vlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 313.132181][T15678] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3466'. [ 313.173223][T15680] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3467'. [ 313.531674][T15694] lo speed is unknown, defaulting to 1000 [ 313.538631][T15694] wg1 speed is unknown, defaulting to 1000 [ 314.413962][T15718] tipc: Resetting bearer [ 314.449509][T15722] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3478'. [ 314.457539][T15720] team0: Mode changed to "activebackup" [ 314.742347][T15743] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3483'. [ 315.159793][T15752] tipc: Enabled bearer , priority 0 [ 315.193133][T15752] syzkaller0: entered promiscuous mode [ 315.198744][T15752] syzkaller0: entered allmulticast mode [ 315.225334][T15751] tipc: Resetting bearer [ 315.242499][T15751] tipc: Disabling bearer [ 315.349602][T15758] RDS: rds_bind could not find a transport for ::ffff:172.30.1.1, load rds_tcp or rds_rdma? [ 315.366690][T15758] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3485'. [ 315.632233][T15765] tipc: Enabled bearer , priority 0 [ 315.639848][T15765] syzkaller0: entered promiscuous mode [ 315.647079][T15765] syzkaller0: entered allmulticast mode [ 315.661213][T15765] tipc: Resetting bearer [ 315.677137][T15761] tipc: Resetting bearer [ 315.707940][T15761] tipc: Disabling bearer [ 315.794569][T15767] veth19: entered promiscuous mode [ 316.293010][T15783] team0: Failed to send options change via netlink (err -105) [ 316.451735][T15784] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3499'. [ 316.466298][T15783] team0: Failed to send options change via netlink (err -105) [ 316.569999][T15783] team0: Mode changed to "activebackup" [ 316.614932][T15785] lo speed is unknown, defaulting to 1000 [ 316.654804][T15790] tipc: Enabled bearer , priority 0 [ 316.662415][T15790] syzkaller0: entered promiscuous mode [ 316.670224][T15790] syzkaller0: entered allmulticast mode [ 316.725334][T15785] wg1 speed is unknown, defaulting to 1000 [ 316.732588][T15789] tipc: Resetting bearer [ 316.738806][T15791] netlink: 'syz.0.3492': attribute type 7 has an invalid length. [ 316.749982][T15789] tipc: Disabling bearer [ 316.960423][T15791] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3492'. [ 317.030001][T15794] tipc: Enabled bearer , priority 0 [ 317.037576][T15794] syzkaller0: entered promiscuous mode [ 317.043216][T15794] syzkaller0: entered allmulticast mode [ 317.052789][T15793] tipc: Resetting bearer [ 317.068613][T15793] tipc: Disabling bearer [ 317.254995][T15804] siw: device registration error -23 [ 317.264682][T15804] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3497'. [ 317.464863][T15809] lo speed is unknown, defaulting to 1000 [ 317.472566][T15809] wg1 speed is unknown, defaulting to 1000 [ 317.499861][T15812] netlink: 360 bytes leftover after parsing attributes in process `syz.7.3501'. [ 317.539489][T15812] lo speed is unknown, defaulting to 1000 [ 317.548068][T15812] wg1 speed is unknown, defaulting to 1000 [ 317.714547][T15818] lo speed is unknown, defaulting to 1000 [ 317.721816][T15818] wg1 speed is unknown, defaulting to 1000 [ 317.732484][T15823] netlink: 'syz.7.3505': attribute type 1 has an invalid length. [ 317.734391][T15820] tipc: Enabled bearer , priority 0 [ 317.792106][T15820] syzkaller0: entered promiscuous mode [ 317.809785][T15820] syzkaller0: entered allmulticast mode [ 317.853858][T15821] lo speed is unknown, defaulting to 1000 [ 317.867250][T15820] tipc: Resetting bearer [ 317.908254][T15821] wg1 speed is unknown, defaulting to 1000 [ 317.949213][T15819] tipc: Resetting bearer [ 318.016329][T15819] tipc: Disabling bearer [ 318.042171][T15831] tipc: Enabled bearer , priority 0 [ 318.061861][T15831] syzkaller0: entered promiscuous mode [ 318.067611][T15831] syzkaller0: entered allmulticast mode [ 318.093679][T15833] tipc: Enabled bearer , priority 0 [ 318.113043][T15831] tipc: Resetting bearer [ 318.119515][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 318.127703][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 318.139680][T15833] syzkaller0: entered promiscuous mode [ 318.147009][T15833] syzkaller0: entered allmulticast mode [ 318.164827][T15830] tipc: Resetting bearer [ 318.173940][T15830] tipc: Disabling bearer [ 318.228321][T15833] tipc: Resetting bearer [ 318.258890][T15832] tipc: Resetting bearer [ 318.286983][T15832] tipc: Disabling bearer [ 318.396407][T15840] lo speed is unknown, defaulting to 1000 [ 318.407440][T15840] wg1 speed is unknown, defaulting to 1000 [ 318.774583][T15866] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3515'. [ 318.983777][T15870] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3517'. [ 319.572874][T15895] tipc: Enabled bearer , priority 0 [ 319.605858][T15895] syzkaller0: entered promiscuous mode [ 319.620380][T15895] syzkaller0: entered allmulticast mode [ 319.639217][T15899] mac80211_hwsim hwsim5 syzkaller0: left allmulticast mode [ 319.657361][T15899] tipc: Resetting bearer [ 319.704511][T15895] tipc: Resetting bearer [ 319.730708][T15903] lo speed is unknown, defaulting to 1000 [ 319.737537][T15903] wg1 speed is unknown, defaulting to 1000 [ 319.764626][T15894] tipc: Resetting bearer [ 319.778336][T15894] tipc: Disabling bearer [ 319.831968][T15907] netlink: 'syz.2.3526': attribute type 10 has an invalid length. [ 319.841457][T15907] bond0: (slave wlan1): Opening slave failed [ 319.951999][T15907] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 320.065693][T15917] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3529'. [ 320.206924][T15917] netlink: 84 bytes leftover after parsing attributes in process `syz.2.3529'. [ 320.400050][T15917] lo speed is unknown, defaulting to 1000 [ 320.424255][T15917] wg1 speed is unknown, defaulting to 1000 [ 320.692982][T15928] netlink: 'syz.0.3531': attribute type 10 has an invalid length. [ 320.865127][T15938] tipc: Enabling of bearer rejected, failed to enable media [ 320.875446][T15938] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3535'. [ 320.879082][T15933] lo speed is unknown, defaulting to 1000 [ 320.895037][T15933] wg1 speed is unknown, defaulting to 1000 [ 321.178063][T15950] tipc: Enabled bearer , priority 0 [ 321.209778][T15950] syzkaller0: entered promiscuous mode [ 321.215957][T15942] lo speed is unknown, defaulting to 1000 [ 321.226667][T15950] syzkaller0: entered allmulticast mode [ 321.251737][T15942] wg1 speed is unknown, defaulting to 1000 [ 321.258318][T15952] lo speed is unknown, defaulting to 1000 [ 321.306698][T15950] tipc: Resetting bearer [ 321.330748][T15949] tipc: Resetting bearer [ 321.366240][T15949] tipc: Disabling bearer [ 321.447141][T15960] lo speed is unknown, defaulting to 1000 [ 321.456934][T15952] wg1 speed is unknown, defaulting to 1000 [ 321.465508][T15966] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3542'. [ 321.530585][T15960] wg1 speed is unknown, defaulting to 1000 [ 321.697147][T15958] lo speed is unknown, defaulting to 1000 [ 321.733638][T15958] wg1 speed is unknown, defaulting to 1000 [ 321.749764][T15968] lo speed is unknown, defaulting to 1000 [ 321.811694][T15968] wg1 speed is unknown, defaulting to 1000 [ 321.913412][T15975] tipc: Enabling of bearer rejected, already enabled [ 321.930083][T15975] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode [ 321.985874][T15977] lo speed is unknown, defaulting to 1000 [ 322.027897][T15977] wg1 speed is unknown, defaulting to 1000 [ 322.204178][T15980] lo speed is unknown, defaulting to 1000 [ 322.215760][T15980] wg1 speed is unknown, defaulting to 1000 [ 322.232032][T15987] lo speed is unknown, defaulting to 1000 [ 322.265027][T15987] wg1 speed is unknown, defaulting to 1000 [ 322.667218][T15999] netlink: 56 bytes leftover after parsing attributes in process `syz.5.3550'. [ 322.698770][T15999] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3550'. [ 322.950834][T16007] tipc: Enabled bearer , priority 0 [ 322.976710][T16007] syzkaller0: entered promiscuous mode [ 322.990911][T16007] syzkaller0: entered allmulticast mode [ 323.042901][T16007] tipc: Resetting bearer [ 323.068681][T16006] tipc: Resetting bearer [ 323.096906][T16006] tipc: Disabling bearer [ 323.295551][T16019] tipc: Enabled bearer , priority 0 [ 323.311013][T16019] syzkaller0: entered promiscuous mode [ 323.325571][T16019] syzkaller0: entered allmulticast mode [ 323.370050][T16019] tipc: Resetting bearer [ 323.376136][T16019] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 323.395928][T16018] tipc: Resetting bearer [ 323.413278][T16018] tipc: Disabling bearer [ 323.603600][T16030] lo speed is unknown, defaulting to 1000 [ 323.634200][T16030] wg1 speed is unknown, defaulting to 1000 [ 323.657596][T16035] tipc: Enabled bearer , priority 0 [ 323.679181][T16033] lo speed is unknown, defaulting to 1000 [ 323.693646][T16033] wg1 speed is unknown, defaulting to 1000 [ 323.722771][T16035] tipc: Resetting bearer [ 323.802654][T16043] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3559'. [ 323.817089][T16031] tipc: Disabling bearer [ 323.829187][T16043] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3559'. [ 324.132220][T16026] mpoa:mpoad_close: () going down [ 324.726902][T16067] netlink: 'syz.2.3568': attribute type 1 has an invalid length. [ 324.760090][T16067] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3568'. [ 325.012985][T16071] netlink: 248 bytes leftover after parsing attributes in process `syz.6.3569'. [ 325.288676][T16081] netlink: 248 bytes leftover after parsing attributes in process `syz.0.3573'. [ 325.404335][T16087] tipc: Enabling of bearer rejected, already enabled [ 325.692050][T16095] lo speed is unknown, defaulting to 1000 [ 325.698737][T16095] wg1 speed is unknown, defaulting to 1000 [ 325.746776][ T5858] Bluetooth: hci6: link tx timeout [ 325.752122][ T5858] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa [ 325.754570][T16097] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3579'. [ 325.759923][ T5859] Bluetooth: hci6: link tx timeout [ 325.777397][ T5859] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa [ 325.785342][ T5859] Bluetooth: hci6: link tx timeout [ 325.791473][T16099] tipc: Enabled bearer , priority 0 [ 325.793255][ T5859] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa [ 325.799209][T16099] syzkaller0: entered promiscuous mode [ 325.806477][ T5859] Bluetooth: hci6: link tx timeout [ 325.817321][ T5859] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa [ 325.827580][ T5859] Bluetooth: hci6: link tx timeout [ 325.832886][ T5859] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa [ 325.835295][T16099] syzkaller0: entered allmulticast mode [ 325.849314][ T5859] Bluetooth: hci6: link tx timeout [ 325.854599][ T5859] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa [ 325.862442][ T5859] Bluetooth: hci6: link tx timeout [ 325.867590][ T5859] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa [ 325.886806][T16105] netlink: 'syz.2.3580': attribute type 16 has an invalid length. [ 325.894846][T16105] netlink: 'syz.2.3580': attribute type 17 has an invalid length. [ 326.007896][T16112] IPv6: NLM_F_REPLACE set, but no existing node found! [ 326.018986][T16105] tipc: Resetting bearer [ 326.056652][T16105] dummy0: left allmulticast mode [ 326.062723][T16109] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3580'. [ 326.106661][T16104] tipc: Resetting bearer [ 326.118697][ T59] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 256 - 0 [ 326.132909][T16098] tipc: Resetting bearer [ 326.144852][T16098] tipc: Disabling bearer [ 326.159833][ T59] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 256 - 0 [ 326.175094][ T59] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 256 - 0 [ 326.192970][T16117] lo speed is unknown, defaulting to 1000 [ 326.199064][ T59] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 256 - 0 [ 326.210117][T16111] lo speed is unknown, defaulting to 1000 [ 326.218054][T16117] wg1 speed is unknown, defaulting to 1000 [ 326.229239][T16111] wg1 speed is unknown, defaulting to 1000 [ 326.280868][T16120] tipc: Enabled bearer , priority 0 [ 326.330176][T16120] tipc: Resetting bearer [ 326.348824][T16119] tipc: Disabling bearer [ 326.578217][T16129] netlink: 'syz.7.3584': attribute type 16 has an invalid length. [ 326.586506][T16129] netlink: 'syz.7.3584': attribute type 17 has an invalid length. [ 326.609936][T16129] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 326.638869][T16131] tipc: Enabled bearer , priority 0 [ 326.657714][T16131] tipc: Resetting bearer [ 326.681952][T16130] tipc: Disabling bearer [ 326.914518][T16142] dvmrp0: entered allmulticast mode [ 327.052366][T16152] tipc: Enabling of bearer rejected, already enabled [ 327.308122][T16158] tun0: tun_chr_ioctl cmd 2148045848 [ 327.314906][T16158] tun0: tun_chr_ioctl cmd 21731 [ 327.447934][T16160] tipc: Enabling of bearer rejected, already enabled [ 327.729772][T16166] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3597'. [ 327.811074][ T5859] Bluetooth: hci6: command 0x0405 tx timeout [ 327.990558][T16172] tipc: Enabling of bearer rejected, already enabled [ 328.003329][T16172] tipc: Resetting bearer [ 328.126212][T16180] tipc: Enabled bearer , priority 0 [ 328.145985][T16180] syzkaller0: entered promiscuous mode [ 328.155782][T16180] syzkaller0: entered allmulticast mode [ 328.174683][T16185] dvmrp8: entered allmulticast mode [ 328.195376][T16180] tipc: Resetting bearer [ 328.205655][T16178] tipc: Resetting bearer [ 328.215905][T16178] tipc: Disabling bearer [ 328.239251][T16185] lo speed is unknown, defaulting to 1000 [ 328.247245][T16185] wg1 speed is unknown, defaulting to 1000 [ 328.249802][ T6178] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x7 [ 328.306541][T16191] tipc: Enabled bearer , priority 0 [ 328.326653][T16191] tipc: Resetting bearer [ 328.350535][T16189] tipc: Disabling bearer [ 328.525493][T16205] lo speed is unknown, defaulting to 1000 [ 328.536661][T16205] wg1 speed is unknown, defaulting to 1000 [ 328.584924][T16208] lo speed is unknown, defaulting to 1000 [ 328.593671][T16208] wg1 speed is unknown, defaulting to 1000 [ 329.233609][T16226] lo speed is unknown, defaulting to 1000 [ 329.243504][T16226] wg1 speed is unknown, defaulting to 1000 [ 329.601765][T16243] syzkaller0: create flow: hash 1344139633 index 1 [ 329.619766][ T12] syzkaller0: tun_net_xmit 76 [ 329.627755][ T12] syzkaller0: tun_net_xmit 48 [ 329.638750][T16248] tipc: Enabled bearer , priority 0 [ 329.642512][ T9036] syzkaller0: tun_net_xmit 76 [ 329.666145][T16248] tipc: Resetting bearer [ 329.673992][T16247] tipc: Disabling bearer [ 329.682980][T16233] syzkaller0: delete flow: hash 1344139633 index 1 [ 329.763860][T16256] tipc: Enabling of bearer rejected, already enabled [ 329.792579][T16253] tipc: Resetting bearer [ 330.019027][T16266] tipc: Enabling of bearer rejected, failed to enable media [ 330.182998][T16279] netlink: 'syz.6.3626': attribute type 5 has an invalid length. [ 330.462515][T16277] lo speed is unknown, defaulting to 1000 [ 330.531362][T16277] wg1 speed is unknown, defaulting to 1000 [ 330.664491][T16286] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3627'. [ 330.852392][T16290] tipc: Enabled bearer , priority 0 [ 330.863305][T16290] tipc: Resetting bearer [ 330.876661][T16289] tipc: Disabling bearer [ 331.055996][T16302] tipc: Enabled bearer , priority 0 [ 331.116864][T16302] tipc: Resetting bearer [ 331.128140][T16301] tipc: Disabling bearer [ 331.189567][T16306] lo speed is unknown, defaulting to 1000 [ 331.271487][T16306] wg1 speed is unknown, defaulting to 1000 [ 331.458421][T16310] lo speed is unknown, defaulting to 1000 [ 331.469141][T16310] wg1 speed is unknown, defaulting to 1000 [ 331.531129][T16307] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3635'. [ 331.867987][T16311] lo speed is unknown, defaulting to 1000 [ 331.972884][T16311] wg1 speed is unknown, defaulting to 1000 [ 331.979949][T16317] mac80211_hwsim hwsim5 syzkaller0: left promiscuous mode [ 331.991272][T16317] mac80211_hwsim hwsim5 syzkaller0: left allmulticast mode [ 332.016149][T16321] lo speed is unknown, defaulting to 1000 [ 332.060376][T16321] wg1 speed is unknown, defaulting to 1000 [ 332.090964][T16324] tipc: Enabled bearer , priority 0 [ 332.099423][T16324] syzkaller0: entered promiscuous mode [ 332.110371][T16324] syzkaller0: entered allmulticast mode [ 332.242620][T16324] tipc: Resetting bearer [ 332.248873][T16331] tipc: Enabled bearer , priority 0 [ 332.285741][T16323] tipc: Resetting bearer [ 332.302796][T16323] tipc: Disabling bearer [ 332.321355][T16331] tipc: Resetting bearer [ 332.335408][T16330] tipc: Disabling bearer [ 332.349664][T16335] dvmrp8: entered allmulticast mode [ 332.391445][T16335] lo speed is unknown, defaulting to 1000 [ 332.398408][T16335] wg1 speed is unknown, defaulting to 1000 [ 333.070843][T16363] syzkaller0: create flow: hash 1344139633 index 1 [ 333.201501][T16358] syzkaller0: delete flow: hash 1344139633 index 1 [ 334.327394][T16394] ip6tnl1: left promiscuous mode [ 334.344817][T16394] ip6tnl1: left allmulticast mode [ 334.351794][T16394] macsec1: left promiscuous mode [ 334.357387][T16394] macsec1: left allmulticast mode [ 334.497752][ T2894] netdevsim netdevsim7 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.525189][ T2894] netdevsim netdevsim7 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.551574][T16412] tipc: Enabled bearer , priority 10 [ 334.578996][T16405] lo speed is unknown, defaulting to 1000 [ 334.579014][ T6178] netdevsim netdevsim7 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.622944][T16405] wg1 speed is unknown, defaulting to 1000 [ 334.623266][ T6178] netdevsim netdevsim7 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.688357][T16416] tipc: Enabling of bearer rejected, failed to enable media [ 335.633756][T16430] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 335.855284][T16461] tipc: New replicast peer: 255.255.255.255 [ 335.869412][T16461] tipc: Enabled bearer , priority 10 [ 335.953690][T16467] tipc: Enabled bearer , priority 0 [ 335.993725][T16467] syzkaller0: entered promiscuous mode [ 335.999243][T16467] syzkaller0: entered allmulticast mode [ 336.030465][T16467] tipc: Resetting bearer [ 336.046708][T16466] tipc: Resetting bearer [ 336.086227][T16466] tipc: Disabling bearer [ 336.299759][T16477] tipc: Enabling of bearer rejected, already enabled [ 336.354881][T16477] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode [ 336.397188][T16477] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode [ 336.543489][T16488] atomic_op ffff888031a9f198 conn xmit_atomic 0000000000000000 [ 336.726085][T16494] veth0_vlan: left promiscuous mode [ 336.764057][T16494] veth0_vlan: entered promiscuous mode [ 337.080695][ T44] tipc: Node number set to 610819504 [ 337.148086][T16500] netlink: 'syz.6.3680': attribute type 1 has an invalid length. [ 337.227731][T16500] 8021q: adding VLAN 0 to HW filter on device bond9 [ 337.238863][T16503] bond9: (slave wlan0): Enslaving as an active interface with a down link [ 337.267224][T16500] vlan3: entered allmulticast mode [ 337.272822][T16500] veth1: entered allmulticast mode [ 337.278849][T16500] bond9: (slave vlan3): Opening slave failed [ 337.432226][T16505] tipc: Enabled bearer , priority 0 [ 337.443222][T16505] syzkaller0: entered promiscuous mode [ 337.451804][T16505] syzkaller0: entered allmulticast mode [ 337.481665][T16505] tipc: Resetting bearer [ 337.500162][T16504] tipc: Resetting bearer [ 337.509876][T16504] tipc: Disabling bearer [ 337.584539][T16512] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3685'. [ 337.611192][T16512] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3685'. [ 337.670621][T16519] lo speed is unknown, defaulting to 1000 [ 337.677453][T16519] wg1 speed is unknown, defaulting to 1000 [ 337.696404][T16523] smc: net device bond0 applied user defined pnetid SYZ2 [ 337.792514][T16522] geneve3: entered promiscuous mode [ 337.809618][ T141] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 337.834925][ T141] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 337.847817][ T141] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 337.865204][ T141] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 337.926675][T16539] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3693'. [ 337.936401][T16539] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3693'. [ 337.952393][T16541] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3694'. [ 337.961640][T16541] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3694'. [ 337.982104][T16541] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3694'. [ 338.007885][T16541] netlink: 'syz.6.3694': attribute type 9 has an invalid length. [ 338.021792][T16539] bond2: entered promiscuous mode [ 338.026887][T16539] bond2: entered allmulticast mode [ 338.036290][T16541] netlink: 'syz.6.3694': attribute type 7 has an invalid length. [ 338.040293][T16539] 8021q: adding VLAN 0 to HW filter on device bond2 [ 338.044698][T16541] netlink: 'syz.6.3694': attribute type 8 has an invalid length. [ 338.137810][T16539] lo speed is unknown, defaulting to 1000 [ 338.155004][T16539] wg1 speed is unknown, defaulting to 1000 [ 338.218246][T16548] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3696'. [ 338.537543][T16561] ipvlan2: entered promiscuous mode [ 338.574058][T16564] tipc: Enabled bearer , priority 0 [ 339.041764][T16567] syzkaller0: entered promiscuous mode [ 339.047631][T16567] syzkaller0: entered allmulticast mode [ 339.057990][T16569] tipc: Resetting bearer [ 339.155405][T16563] tipc: Resetting bearer [ 339.194255][T16563] tipc: Disabling bearer [ 339.586756][T16579] tipc: Enabling of bearer rejected, already enabled [ 340.611547][T16586] lo speed is unknown, defaulting to 1000 [ 340.662138][T16586] wg1 speed is unknown, defaulting to 1000 [ 340.692074][T16589] lo speed is unknown, defaulting to 1000 [ 340.885346][T16589] wg1 speed is unknown, defaulting to 1000 [ 341.519138][T16607] syzkaller1: entered promiscuous mode [ 341.535930][T16607] syzkaller1: entered allmulticast mode [ 341.741172][T16613] syzkaller0: entered promiscuous mode [ 341.746751][T16613] syzkaller0: entered allmulticast mode [ 341.789393][T16612] tipc: Enabled bearer , priority 0 [ 341.814469][T16609] tipc: Resetting bearer [ 341.824221][T16608] tipc: Resetting bearer [ 341.856620][T16608] tipc: Disabling bearer [ 342.133275][T16626] netlink: 'syz.5.3714': attribute type 4 has an invalid length. [ 342.277488][T16628] lo speed is unknown, defaulting to 1000 [ 342.311049][T16628] wg1 speed is unknown, defaulting to 1000 [ 342.340544][T16631] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3716'. [ 342.478012][T16635] vlan2: entered promiscuous mode [ 342.489059][T16635] vlan2: entered allmulticast mode [ 342.504298][T16635] hsr_slave_1: entered allmulticast mode [ 342.577757][T16635] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3717'. [ 342.591791][T16637] netlink: 248 bytes leftover after parsing attributes in process `syz.7.3718'. [ 342.670331][T16628] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3715'. [ 342.813243][T16643] tipc: Enabled bearer , priority 10 [ 343.303093][T16657] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3723'. [ 343.329415][T16656] tipc: Enabled bearer , priority 0 [ 343.349987][T16656] syzkaller0: entered promiscuous mode [ 343.367768][T16656] syzkaller0: entered allmulticast mode [ 343.394306][T16656] tipc: Resetting bearer [ 343.416854][T16654] tipc: Resetting bearer [ 343.456845][T16654] tipc: Disabling bearer [ 343.930387][ T44] tipc: Node number set to 642725185 [ 343.970432][ T5859] Bluetooth: hci6: command 0x0405 tx timeout [ 344.296637][T16678] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3731'. [ 344.983919][T16689] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3734'. [ 345.548096][T16708] tipc: Enabled bearer , priority 0 [ 345.578750][T16708] syzkaller0: entered promiscuous mode [ 345.595390][T16708] syzkaller0: entered allmulticast mode [ 345.629583][T16709] tipc: Resetting bearer [ 345.640853][T16707] tipc: Resetting bearer [ 345.727841][T16707] tipc: Disabling bearer [ 345.763915][T16711] lo speed is unknown, defaulting to 1000 [ 345.785240][T16711] wg1 speed is unknown, defaulting to 1000 [ 345.949041][T16719] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3740'. [ 346.175391][T16725] netlink: 'syz.0.3741': attribute type 16 has an invalid length. [ 346.183912][T16725] netlink: 'syz.0.3741': attribute type 17 has an invalid length. [ 346.222654][T16725] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 346.857984][T16733] batadv0: left promiscuous mode [ 346.867546][T16733] batadv0: left allmulticast mode [ 346.904697][T16733] mac80211_hwsim hwsim5 wlan1: left allmulticast mode [ 346.941543][T16733] veth17: left promiscuous mode [ 346.966150][T16733] tipc: Resetting bearer [ 346.995363][T16733] mac80211_hwsim hwsim5 syzkaller0: left promiscuous mode [ 347.061313][T16733] mac80211_hwsim hwsim5 syzkaller0: left allmulticast mode [ 347.088054][T16740] netlink: 56 bytes leftover after parsing attributes in process `syz.7.3745'. [ 347.153140][T16733] geneve3: left promiscuous mode [ 347.158156][T16733] geneve3: left allmulticast mode [ 347.165548][T16733] gretap3: left promiscuous mode [ 347.189054][T16733] veth23: left promiscuous mode [ 347.349149][T16740] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3745'. [ 347.391532][T16733] macsec1: left promiscuous mode [ 347.413813][T16733] macvtap1: left promiscuous mode [ 347.440539][T16733] macvtap1: left allmulticast mode [ 347.884266][T16750] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3747'. [ 348.115471][T16761] syzkaller1: entered promiscuous mode [ 348.133083][T16761] syzkaller1: entered allmulticast mode [ 348.283660][T16764] tipc: Enabled bearer , priority 0 [ 348.312840][T16764] syzkaller0: entered promiscuous mode [ 348.347672][T16764] syzkaller0: entered allmulticast mode [ 348.375988][T16764] tipc: Resetting bearer [ 348.383992][T16766] lo speed is unknown, defaulting to 1000 [ 348.392932][T16763] tipc: Resetting bearer [ 348.409077][T16763] tipc: Disabling bearer [ 348.429420][T16766] wg1 speed is unknown, defaulting to 1000 [ 348.446458][T16771] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 348.487575][T16771] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3753'. [ 349.101180][T16784] netlink: 'syz.2.3757': attribute type 16 has an invalid length. [ 349.109376][T16784] netlink: 'syz.2.3757': attribute type 17 has an invalid length. [ 349.163301][T16784] 8021q: adding VLAN 0 to HW filter on device bond0 [ 349.213149][T16784] 8021q: adding VLAN 0 to HW filter on device team0 [ 349.223512][T16784] dummy0: left promiscuous mode [ 349.234430][T16784] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 349.524820][T16792] lo speed is unknown, defaulting to 1000 [ 349.615316][T16792] wg1 speed is unknown, defaulting to 1000 [ 349.711108][T16798] lo speed is unknown, defaulting to 1000 [ 349.718308][T16798] wg1 speed is unknown, defaulting to 1000 [ 350.418577][T16828] netlink: 'syz.6.3764': attribute type 1 has an invalid length. [ 350.426573][T16828] netlink: 224 bytes leftover after parsing attributes in process `syz.6.3764'. [ 350.666889][T16836] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3765'. [ 350.703034][T16834] tipc: Enabled bearer , priority 0 [ 350.793073][T16834] syzkaller0: entered promiscuous mode [ 350.800088][T16834] syzkaller0: entered allmulticast mode [ 350.945631][T16834] tipc: Resetting bearer [ 351.074059][T16833] tipc: Resetting bearer [ 351.102934][T16833] tipc: Disabling bearer [ 351.142188][T16849] lo speed is unknown, defaulting to 1000 [ 351.149018][T16849] wg1 speed is unknown, defaulting to 1000 [ 352.445270][T16890] netlink: 48 bytes leftover after parsing attributes in process `syz.6.3776'. [ 352.645517][T16899] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3781'. [ 352.669838][T16900] tipc: Enabled bearer , priority 0 [ 352.694213][T16900] syzkaller0: entered promiscuous mode [ 352.712276][T16900] syzkaller0: entered allmulticast mode [ 352.743524][ T2894] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 352.745488][T16900] tipc: Resetting bearer [ 352.763692][T16897] tipc: Resetting bearer [ 352.764927][ T2894] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 352.795585][T16897] tipc: Disabling bearer [ 352.952528][T16908] IPVS: stopping backup sync thread 16910 ... [ 352.958834][T16910] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 8, id = 0 [ 352.996226][T16908] netlink: 260 bytes leftover after parsing attributes in process `syz.0.3783'. [ 353.032747][T16908] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3783'. [ 353.061845][T16908] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3783'. [ 353.671603][T16926] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3787'. [ 353.762974][T16926] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3787'. [ 353.819862][T16923] netlink: 104 bytes leftover after parsing attributes in process `syz.7.3787'. [ 354.264578][T16945] tipc: Enabled bearer , priority 0 [ 354.272284][T16945] syzkaller0: entered promiscuous mode [ 354.277789][T16945] syzkaller0: entered allmulticast mode [ 354.294946][T16944] tipc: Resetting bearer [ 354.303295][T16944] tipc: Disabling bearer [ 354.527752][T16949] lo speed is unknown, defaulting to 1000 [ 354.535285][T16949] wg1 speed is unknown, defaulting to 1000 [ 354.623791][T16955] tap0: tun_chr_ioctl cmd 1074025677 [ 354.629462][T16955] tap0: linktype set to 0 [ 354.958091][T16968] lo speed is unknown, defaulting to 1000 [ 355.066084][T16968] wg1 speed is unknown, defaulting to 1000 [ 355.960611][T16982] tipc: Enabling of bearer rejected, already enabled [ 355.982647][T16982] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode [ 356.007467][T16982] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode [ 356.026154][T16985] netlink: 248 bytes leftover after parsing attributes in process `syz.5.3805'. [ 356.053758][T16982] tipc: Resetting bearer [ 356.146863][T16991] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 356.311334][T16991] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 356.400043][T16991] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 356.464692][T16991] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 356.490967][T16998] lo speed is unknown, defaulting to 1000 [ 356.575898][ T6167] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 356.630493][ T6167] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 356.665836][ T6167] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 356.700545][T16998] wg1 speed is unknown, defaulting to 1000 [ 356.700704][ T6167] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 357.450223][T17026] lo speed is unknown, defaulting to 1000 [ 357.514530][T17026] wg1 speed is unknown, defaulting to 1000 [ 357.723204][T17032] netlink: 'syz.5.3813': attribute type 1 has an invalid length. [ 357.732255][T17032] netlink: 'syz.5.3813': attribute type 1 has an invalid length. [ 357.740028][T17032] netlink: 224 bytes leftover after parsing attributes in process `syz.5.3813'. [ 357.858887][T17034] lo speed is unknown, defaulting to 1000 [ 357.867021][T17034] wg1 speed is unknown, defaulting to 1000 [ 358.260045][T17049] tipc: Enabled bearer , priority 0 [ 358.267966][T17049] syzkaller0: entered promiscuous mode [ 358.273575][T17049] syzkaller0: entered allmulticast mode [ 358.484670][T17048] tipc: Resetting bearer [ 358.516459][T17048] tipc: Disabling bearer [ 358.651022][T17055] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3819'. [ 358.897567][T17062] netlink: 248 bytes leftover after parsing attributes in process `syz.6.3821'. [ 358.947875][T17061] syzkaller0: entered promiscuous mode [ 358.984352][T17061] syzkaller0: entered allmulticast mode [ 359.737421][T17084] syzkaller0: create flow: hash 1344139633 index 1 [ 359.878573][T17080] syzkaller0: delete flow: hash 1344139633 index 1 [ 359.957797][T17086] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 360.105365][T17090] tipc: Enabled bearer , priority 0 [ 360.115270][T17090] syzkaller0: entered promiscuous mode [ 360.121702][T17090] syzkaller0: entered allmulticast mode [ 360.132835][T17088] tipc: Resetting bearer [ 360.143062][T17088] tipc: Disabling bearer [ 360.237161][T17097] wg1 speed is unknown, defaulting to 1000 [ 360.459768][T17105] netlink: 'syz.6.3835': attribute type 2 has an invalid length. [ 360.479404][T17105] k›*·]‘: entered promiscuous mode [ 360.521874][T17105] erspan0: entered promiscuous mode [ 360.553277][T17105] 8021q: adding VLAN 0 to HW filter on device bond0 [ 360.566478][T17105] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 360.618349][T17105] veth0_to_team: entered promiscuous mode [ 360.627679][T17105] veth0_to_team: entered allmulticast mode [ 373.237260][T17118] wg1 speed is unknown, defaulting to 1000 [ 373.621493][ T5859] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 373.629053][ T5859] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 373.637144][ T5859] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 373.645339][ T5859] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 373.653740][ T5181] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 373.681345][T17138] wg1 speed is unknown, defaulting to 1000 [ 373.726265][T17139] wg1 speed is unknown, defaulting to 1000 [ 373.797908][T17136] wg1 speed is unknown, defaulting to 1000 [ 374.173731][T17147] tipc: Enabled bearer , priority 0 [ 374.195330][T17147] tipc: Resetting bearer [ 374.292801][T17145] tipc: Disabling bearer [ 374.314130][T17158] netlink: 'syz.0.3844': attribute type 1 has an invalid length. [ 374.323159][T17139] chnl_net:caif_netlink_parms(): no params data found [ 374.340536][T17158] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3844'. [ 374.483290][T17159] wg1 speed is unknown, defaulting to 1000 [ 374.532563][T17162] netlink: 32 bytes leftover after parsing attributes in process `syz.7.3848'. [ 374.656306][T17166] netlink: 32 bytes leftover after parsing attributes in process `syz.7.3848'. [ 374.816537][T17139] bridge0: port 1(bridge_slave_0) entered blocking state [ 374.832649][T17139] bridge0: port 1(bridge_slave_0) entered disabled state [ 374.839935][T17139] bridge_slave_0: entered allmulticast mode [ 374.862745][T17139] bridge_slave_0: entered promiscuous mode [ 374.886510][T17139] bridge0: port 2(bridge_slave_1) entered blocking state [ 374.894937][T17139] bridge0: port 2(bridge_slave_1) entered disabled state [ 374.902604][T17139] bridge_slave_1: entered allmulticast mode [ 374.909524][T17139] bridge_slave_1: entered promiscuous mode [ 375.130072][T17182] netlink: 'syz.0.3849': attribute type 10 has an invalid length. [ 375.267555][T17139] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 375.282050][T17172] wg1 speed is unknown, defaulting to 1000 [ 375.307082][T17139] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 375.385781][T17139] team0: Port device team_slave_0 added [ 375.399809][T17139] team0: Port device team_slave_1 added [ 375.463828][T17139] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 375.476432][T17139] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 375.503094][T17139] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 375.541745][T17139] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 375.571491][T17139] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 375.622499][T17139] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 375.654816][T17189] netlink: 3 bytes leftover after parsing attributes in process `syz.6.3852'. [ 375.713734][T17139] hsr_slave_0: entered promiscuous mode [ 375.730908][T17139] hsr_slave_1: entered promiscuous mode [ 375.745446][ T5181] Bluetooth: hci7: command tx timeout [ 375.748000][T17139] debugfs: 'hsr0' already exists in 'hsr' [ 375.769863][T17139] Cannot create hsr debugfs directory [ 375.817283][T17189] batadv1: entered promiscuous mode [ 375.868965][T17189] batadv1: entered allmulticast mode [ 376.414987][T17139] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 376.435980][T17139] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 376.475716][T17139] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 376.497984][T17139] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 376.590867][T17213] netlink: 'syz.6.3857': attribute type 4 has an invalid length. [ 376.620731][T17209] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3856'. [ 376.644123][T17209] netlink: 216 bytes leftover after parsing attributes in process `syz.0.3856'. [ 376.906369][T17139] 8021q: adding VLAN 0 to HW filter on device bond0 [ 376.962384][T17139] 8021q: adding VLAN 0 to HW filter on device team0 [ 376.979201][ T6182] bridge0: port 1(bridge_slave_0) entered blocking state [ 376.986392][ T6182] bridge0: port 1(bridge_slave_0) entered forwarding state [ 377.012732][ T6182] bridge0: port 2(bridge_slave_1) entered blocking state [ 377.019928][ T6182] bridge0: port 2(bridge_slave_1) entered forwarding state [ 377.109857][T17222] netlink: 'syz.5.3858': attribute type 1 has an invalid length. [ 377.131201][T17139] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 377.185194][T17222] netlink: 224 bytes leftover after parsing attributes in process `syz.5.3858'. [ 377.554368][T17139] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 377.810896][ T5181] Bluetooth: hci7: command tx timeout [ 377.968126][T17238] wg1 speed is unknown, defaulting to 1000 [ 378.025841][T17242] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3862'. [ 378.657837][T17139] veth0_vlan: entered promiscuous mode [ 378.702888][T17139] veth1_vlan: entered promiscuous mode [ 378.861604][T17139] veth0_macvtap: entered promiscuous mode [ 378.926433][T17237] wg1 speed is unknown, defaulting to 1000 [ 378.983683][T17139] veth1_macvtap: entered promiscuous mode [ 379.627830][T17139] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 379.846977][T17276] netlink: 'syz.5.3867': attribute type 1 has an invalid length. [ 379.890886][ T5858] Bluetooth: hci7: command tx timeout [ 379.915391][T17139] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 379.936096][ T30] audit: type=1800 audit(1756479890.517:10): pid=17281 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.3866" name="memory.events" dev="tmpfs" ino=1358 res=0 errno=0 [ 379.992583][T17285] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci7/hci7:200/input7 [ 380.032308][ T6178] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.064806][ T6178] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.076760][T17283] netlink: 'syz.7.3868': attribute type 4 has an invalid length. [ 380.099980][T17283] netlink: 152 bytes leftover after parsing attributes in process `syz.7.3868'. [ 380.144234][ T6178] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.166708][ T6178] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.223771][T17283] Ã: renamed from bond0 [ 380.275268][T17295] smc: net device bond0 erased user defined pnetid SYZ2 [ 380.327751][T17295] bond0 (unregistering): (slave team0): Releasing backup interface [ 380.355749][T17295] bond0 (unregistering): Released all slaves [ 380.546732][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 380.571595][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 380.625506][T17299] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3873'. [ 380.655743][ T141] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 380.666889][ T141] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 380.851094][ T5858] Bluetooth: hci5: command 0x0405 tx timeout [ 380.988584][T17312] netlink: 248 bytes leftover after parsing attributes in process `syz.8.3836'. [ 381.112528][T17317] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 381.182952][T17315] wg1 speed is unknown, defaulting to 1000 [ 381.612192][T17322] tipc: Resetting bearer [ 381.701416][T17322] veth19: left promiscuous mode [ 381.980987][ T5181] Bluetooth: hci7: command tx timeout [ 382.039878][T17337] netlink: 'syz.5.3877': attribute type 1 has an invalid length. [ 382.233649][T17337] 8021q: adding VLAN 0 to HW filter on device bond10 [ 382.261309][T17346] netlink: 'syz.7.3881': attribute type 2 has an invalid length. [ 382.404460][T17346] k›*·]‘: entered promiscuous mode [ 382.457313][T17337] veth35: entered promiscuous mode [ 382.491375][T17341] bond6: (slave geneve2): Releasing active interface [ 382.613309][T17350] 8021q: adding VLAN 0 to HW filter on device à [ 382.673156][T17350] 8021q: adding VLAN 0 to HW filter on device team0 [ 382.736480][T17350] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 382.909367][T17343] wg1 speed is unknown, defaulting to 1000 [ 383.144635][T17359] veth0_to_team: entered promiscuous mode [ 383.173409][T17359] veth0_to_team: entered allmulticast mode [ 383.264654][T17361] syz_tun: entered allmulticast mode [ 383.341519][T17365] wg1 speed is unknown, defaulting to 1000 [ 383.764972][T17369] netlink: 'syz.6.3886': attribute type 21 has an invalid length. [ 383.811415][T17369] ipvlan2: entered promiscuous mode [ 384.039691][T17380] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3888'. [ 384.147845][T17382] netlink: 'syz.5.3890': attribute type 1 has an invalid length. [ 384.358524][T17389] wg1 speed is unknown, defaulting to 1000 [ 384.739096][T17400] netlink: 'syz.5.3894': attribute type 10 has an invalid length. [ 384.786438][T17400] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 384.797813][T17400] batadv0: entered promiscuous mode [ 384.804348][T17400] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 384.817027][T17402] syzkaller1: entered allmulticast mode [ 385.360215][T17408] wg1 speed is unknown, defaulting to 1000 [ 385.586499][T17405] wg1 speed is unknown, defaulting to 1000 [ 385.811407][T17420] syzkaller0: entered promiscuous mode [ 385.817210][T17420] syzkaller0: entered allmulticast mode [ 385.825389][T17429] (unnamed net_device) (uninitialized): option ad_user_port_key: invalid value (65535) [ 385.838348][T17429] (unnamed net_device) (uninitialized): option ad_user_port_key: allowed values 0 - 1023 [ 385.868860][T17416] syzkaller0: entered promiscuous mode [ 385.878196][T17416] syzkaller0: entered allmulticast mode [ 386.817420][T17447] netlink: 'syz.7.3901': attribute type 10 has an invalid length. [ 386.853856][T17442] wg1 speed is unknown, defaulting to 1000 [ 386.928131][T17447] 8021q: adding VLAN 0 to HW filter on device team0 [ 386.939913][T17447] Ã: (slave team0): Enslaving as an active interface with an up link [ 386.993583][T17450] !: renamed from dummy0 [ 387.502341][T17471] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3905'. [ 387.626670][T17458] wg1 speed is unknown, defaulting to 1000 [ 388.020782][T17489] netlink: 'syz.8.3907': attribute type 2 has an invalid length. [ 388.049865][T17482] netlink: 136 bytes leftover after parsing attributes in process `syz.6.3916'. [ 388.076389][T17489] k›*·]‘: entered promiscuous mode [ 388.153649][T17491] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 388.305426][T17485] veth0_to_team: entered promiscuous mode [ 388.314434][T17485] veth0_to_team: entered allmulticast mode [ 388.573907][T17496] netlink: 'syz.8.3908': attribute type 10 has an invalid length. [ 388.612429][T17496] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 388.653895][T17496] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 388.836030][T17498] tipc: Enabled bearer , priority 0 [ 388.875425][T17498] tipc: Resetting bearer [ 388.946993][T17497] tipc: Disabling bearer [ 389.095246][T17506] syzkaller0: entered promiscuous mode [ 389.127370][T17506] syzkaller0: entered allmulticast mode [ 389.223334][T17513] netlink: 464 bytes leftover after parsing attributes in process `syz.0.3913'. [ 389.243159][T17513] netlink: 9 bytes leftover after parsing attributes in process `syz.0.3913'. [ 389.259900][T17511] netlink: 'syz.8.3912': attribute type 1 has an invalid length. [ 389.287123][T17513] 0·: renamed from hsr0 [ 389.297857][T17513] 0·: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 389.309479][T17513] 0·: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 389.329427][T17513] 0·: entered allmulticast mode [ 389.335737][T17513] hsr_slave_0: entered allmulticast mode [ 389.377578][T17513] hsr_slave_1: entered allmulticast mode [ 389.419328][T17513] A link change request failed with some changes committed already. Interface 70· may have been left with an inconsistent configuration, please check. [ 389.546855][T17524] netlink: 72 bytes leftover after parsing attributes in process `syz.7.3917'. [ 389.568880][T17521] netlink: 'syz.5.3914': attribute type 4 has an invalid length. [ 389.626970][T17524] wg1 speed is unknown, defaulting to 1000 [ 390.122264][T17538] wg1 speed is unknown, defaulting to 1000 [ 390.131778][T17539] netlink: 'syz.5.3921': attribute type 4 has an invalid length. [ 390.512301][T17550] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 390.535042][T17543] wg1 speed is unknown, defaulting to 1000 [ 390.579675][T17550] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3924'. [ 390.783630][T17553] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 391.062804][T17564] wg1 speed is unknown, defaulting to 1000 [ 391.244142][T17568] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3929'. [ 391.370008][T17568] bridge0: port 1(veth3) entered blocking state [ 391.382100][T17568] bridge0: port 1(veth3) entered disabled state [ 391.403327][T17568] veth3: entered allmulticast mode [ 391.461112][T17568] veth3: entered promiscuous mode [ 391.487958][T17570] bridge0: port 2(veth0_to_bond) entered blocking state [ 391.521025][T17570] bridge0: port 2(veth0_to_bond) entered disabled state [ 391.571372][T17570] veth0_to_bond: entered allmulticast mode [ 391.588798][T17570] veth0_to_bond: entered promiscuous mode [ 391.627381][T17572] vlan2: entered allmulticast mode [ 391.643150][T17572] veth1: entered allmulticast mode [ 391.655683][T17572] bridge0: port 3(vlan2) entered blocking state [ 391.670728][T17572] bridge0: port 3(vlan2) entered disabled state [ 391.685844][T17572] vlan2: entered promiscuous mode [ 391.700873][T17572] veth1: entered promiscuous mode [ 391.775537][T17575] syzkaller0: create flow: hash 1344139633 index 1 [ 391.865547][T17573] syzkaller0: delete flow: hash 1344139633 index 1 [ 392.063993][T17585] netlink: 'syz.5.3931': attribute type 5 has an invalid length. [ 392.087590][T17579] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3931'. [ 392.246207][T17590] syzkaller0: entered promiscuous mode [ 392.269293][T17590] syzkaller0: entered allmulticast mode [ 392.288832][T17595] netlink: 'syz.8.3934': attribute type 1 has an invalid length. [ 392.328495][T17595] netlink: 224 bytes leftover after parsing attributes in process `syz.8.3934'. [ 392.639040][T17602] netlink: 'syz.0.3936': attribute type 13 has an invalid length. [ 392.680539][T17602] netlink: 'syz.0.3936': attribute type 17 has an invalid length. [ 392.788345][T17602] 8021q: adding VLAN 0 to HW filter on device team0 [ 392.826028][T17602] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 392.932380][T17605] wg1 speed is unknown, defaulting to 1000 [ 392.984408][T17607] wg1 speed is unknown, defaulting to 1000 [ 393.279220][T17600] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 393.334224][T17625] netlink: 'syz.7.3941': attribute type 2 has an invalid length. [ 393.365936][T17625] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 393.614816][ T37] syzkaller0: tun_net_xmit 76 [ 393.615155][T17631] syzkaller0: create flow: hash 1344139633 index 1 [ 393.619957][ T37] syzkaller0: tun_net_xmit 48 [ 393.640461][T16115] syzkaller0: tun_net_xmit 76 [ 393.673773][T17630] syzkaller0: delete flow: hash 1344139633 index 1 [ 393.911675][T17633] wg1 speed is unknown, defaulting to 1000 [ 394.221712][T17653] Unsupported ieee802154 address type: 0 [ 394.555622][T17650] wireguard0: entered promiscuous mode [ 394.572533][T17650] wireguard0: entered allmulticast mode [ 394.954315][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 394.974239][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 395.146378][T17675] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3954'. [ 395.190169][T17675] wg1 speed is unknown, defaulting to 1000 [ 395.229261][T17679] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3955'. [ 395.243043][T17679] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3955'. [ 395.262677][T17679] batadv0: entered promiscuous mode [ 395.275760][T17679] team0: entered promiscuous mode [ 395.289550][T17679] debugfs: 'hsr1' already exists in 'hsr' [ 395.310477][T17679] Cannot create hsr debugfs directory [ 395.322935][T17679] hsr1: Slave A (batadv0) is not up; please bring it up to get a fully working HSR network [ 395.335174][T17679] hsr1: Slave B (team0) is not up; please bring it up to get a fully working HSR network [ 395.356364][T17679] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 395.547045][T17687] wg1 speed is unknown, defaulting to 1000 [ 395.744678][T17686] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 395.763341][T17690] wg1 speed is unknown, defaulting to 1000 [ 395.849749][T17697] wg1 speed is unknown, defaulting to 1000 [ 395.880552][T17698] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3960'. [ 396.020689][T17699] 8021q: adding VLAN 0 to HW filter on device bond1 [ 396.029576][T17699] bond0: (slave bond1): Enslaving as an active interface with an up link [ 396.233556][T17714] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3963'. [ 396.391534][ T5858] block nbd2: Receive control failed (result -32) [ 396.452382][T17721] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 396.485665][T17716] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3967'. [ 396.751742][T17725] tipc: Started in network mode [ 396.756680][T17725] tipc: Node identity ac14140f, cluster identity 4711 [ 396.782091][T17725] tipc: New replicast peer: 255.255.255.255 [ 396.790939][T17725] tipc: Enabled bearer , priority 10 [ 396.858686][T17729] netlink: 'syz.0.3971': attribute type 10 has an invalid length. [ 397.209365][T17741] macsec0: entered promiscuous mode [ 397.215626][T17741] macsec0: entered allmulticast mode [ 397.222868][T17741] veth1_macvtap: entered allmulticast mode [ 397.229013][T17741] macsec0: left promiscuous mode [ 397.234582][T17741] macsec0: left allmulticast mode [ 397.239867][T17741] veth1_macvtap: left allmulticast mode [ 397.429448][T17751] tipc: Enabling of bearer rejected, already enabled [ 397.668200][T17756] netlink: 'syz.6.3977': attribute type 1 has an invalid length. [ 397.694520][T17756] netlink: 140 bytes leftover after parsing attributes in process `syz.6.3977'. [ 397.719836][T17756] netlink: 96 bytes leftover after parsing attributes in process `syz.6.3977'. [ 397.911683][T16115] tipc: Node number set to 2886997007 [ 397.966380][T17763] syz_tun: left allmulticast mode [ 397.972693][T17763] dvmrp8: left allmulticast mode [ 398.013870][T17764] wg1 speed is unknown, defaulting to 1000 [ 398.130440][ T5858] Bluetooth: hci7: command 0x0405 tx timeout [ 398.395560][T17770] wg1 speed is unknown, defaulting to 1000 [ 398.402415][ T9016] IPVS: starting estimator thread 0... [ 398.521311][T17773] IPVS: using max 34 ests per chain, 81600 per kthread [ 398.670706][T17778] netlink: 1360 bytes leftover after parsing attributes in process `syz.6.3985'. [ 398.691500][T17778] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3985'. [ 399.304729][T17796] syzkaller0: create flow: hash 1344139633 index 1 [ 399.363029][ T141] syzkaller0: tun_net_xmit 76 [ 399.379091][ T141] syzkaller0: tun_net_xmit 48 [ 399.390537][T16115] syzkaller0: tun_net_xmit 76 [ 399.448059][T17797] tipc: Enabling of bearer rejected, failed to enable media [ 399.462338][T17785] syzkaller0: delete flow: hash 1344139633 index 1 [ 399.476022][T17804] netlink: 'syz.7.3993': attribute type 10 has an invalid length. [ 399.983003][T17826] syzkaller1: entered promiscuous mode [ 400.000316][T17826] syzkaller1: entered allmulticast mode [ 400.123124][T17828] 8021q: adding VLAN 0 to HW filter on device bond2 [ 400.163993][T17836] syz_tun: entered allmulticast mode [ 400.188549][T17832] wg1 speed is unknown, defaulting to 1000 [ 400.235620][T17836] dvmrp8: entered allmulticast mode [ 400.248477][T17833] wg1 speed is unknown, defaulting to 1000 [ 400.445325][T17836] wg1 speed is unknown, defaulting to 1000 [ 400.665228][T17846] __nla_validate_parse: 2 callbacks suppressed [ 400.665261][T17846] netlink: 40 bytes leftover after parsing attributes in process `syz.6.4002'. [ 400.840924][T17846] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 400.909647][T17835] syz_tun: left allmulticast mode [ 400.915866][T17835] dvmrp8: left allmulticast mode [ 400.961545][T17846] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 401.048779][T17855] wg1 speed is unknown, defaulting to 1000 [ 401.074499][T17846] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 401.119424][T17851] wg1 speed is unknown, defaulting to 1000 [ 401.282912][T17846] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 401.297384][T17859] syzkaller0: create flow: hash 1344139633 index 1 [ 401.331317][ T2894] syzkaller0: tun_net_xmit 76 [ 401.348032][ T2894] syzkaller0: tun_net_xmit 48 [ 401.360768][ T44] syzkaller0: tun_net_xmit 76 [ 401.383950][T17858] syzkaller0: delete flow: hash 1344139633 index 1 [ 401.517118][T17862] tipc: Enabling of bearer rejected, failed to enable media [ 401.585037][T17846] Failed to register nexthop notifier [ 401.877864][T17883] syzkaller0: entered promiscuous mode [ 401.887564][T17883] syzkaller0: entered allmulticast mode [ 401.898845][T17886] netlink: 48 bytes leftover after parsing attributes in process `syz.6.4008'. [ 401.926159][T17881] netlink: 144 bytes leftover after parsing attributes in process `syz.8.4009'. [ 402.120027][T17894] wg1 speed is unknown, defaulting to 1000 [ 402.634390][T17912] wg1 speed is unknown, defaulting to 1000 [ 402.794118][T17923] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4018'. [ 402.847339][T17929] netlink: 'syz.0.4018': attribute type 4 has an invalid length. [ 403.010598][ C0] Unknown status report in ack skb [ 403.095436][T17938] tipc: Enabling of bearer rejected, failed to enable media [ 403.678097][T17967] gretap3: entered promiscuous mode [ 403.706175][T17967] netlink: 'syz.6.4030': attribute type 7 has an invalid length. [ 403.865762][T17972] wg1 speed is unknown, defaulting to 1000 [ 404.102023][T17984] wg1 speed is unknown, defaulting to 1000 [ 404.241997][T17986] wg1 speed is unknown, defaulting to 1000 [ 404.339308][T17985] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 404.648274][T18002] bridge0: port 2(bridge_slave_1) entered disabled state [ 404.655843][T18002] bridge0: port 1(bridge_slave_0) entered disabled state [ 404.712599][T18002] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 404.725275][T18002] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 404.936468][T18004] tipc: Enabling of bearer rejected, failed to enable media [ 404.987378][ T6167] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.004206][ T6167] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.109017][ T6167] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.141105][ T6167] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.171000][T18030] tipc: Enabling of bearer rejected, failed to enable media [ 405.361633][T18036] tipc: Enabling of bearer rejected, failed to enable media [ 405.451546][T18040] netlink: 'syz.5.4042': attribute type 1 has an invalid length. [ 405.460825][T18040] netlink: 'syz.5.4042': attribute type 1 has an invalid length. [ 405.468599][T18040] netlink: 224 bytes leftover after parsing attributes in process `syz.5.4042'. [ 406.225698][T18074] netlink: 'syz.5.4050': attribute type 3 has an invalid length. [ 406.267307][T18074] syz_tun: entered allmulticast mode [ 406.302375][T18074] siw: device registration error -23 [ 406.347720][T18074] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 406.418390][ T30] audit: type=1800 audit(1756479916.997:11): pid=18070 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.4047" name="memory.events" dev="tmpfs" ino=4335 res=0 errno=0 [ 406.423637][T18072] syz_tun: left allmulticast mode [ 406.545571][T18085] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0 [ 406.562949][T18083] IPVS: stopping backup sync thread 18085 ... [ 406.784736][T18091] wg1 speed is unknown, defaulting to 1000 [ 406.795394][T18095] wg1 speed is unknown, defaulting to 1000 [ 406.902913][T18100] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci7/hci7:200/input8 [ 406.934778][T18101] tipc: Enabling of bearer rejected, failed to enable media [ 407.024490][T18112] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4059'. [ 407.078150][T18099] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 407.235822][T18090] wg1 speed is unknown, defaulting to 1000 [ 407.477390][T18132] tipc: New replicast peer: 255.255.255.255 [ 407.487241][T18132] tipc: Enabled bearer , priority 10 [ 407.524299][T18134] wg1 speed is unknown, defaulting to 1000 [ 407.600631][T18140] netlink: 'syz.5.4065': attribute type 1 has an invalid length. [ 407.710923][T18140] netlink: 'syz.5.4065': attribute type 1 has an invalid length. [ 407.916988][T18145] netlink: 'syz.5.4065': attribute type 1 has an invalid length. [ 408.045076][T18145] 8021q: adding VLAN 0 to HW filter on device bond11 [ 408.106881][T18150] bond11: (slave wlan0): Enslaving as an active interface with a down link [ 408.235181][T18140] vlan2: entered allmulticast mode [ 408.244768][T18140] veth1: entered allmulticast mode [ 408.254766][T18140] bond11: (slave vlan2): Opening slave failed [ 408.281438][T18158] dvmrp8: entered allmulticast mode [ 408.504356][T18158] wg1 speed is unknown, defaulting to 1000 [ 408.573598][T18167] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4072'. [ 408.652469][T18175] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4071'. [ 408.722218][T18174] netlink: 68 bytes leftover after parsing attributes in process `syz.5.4073'. [ 409.316176][T18183] tipc: Enabling of bearer rejected, failed to enable media [ 409.328967][T18157] dvmrp8: left allmulticast mode [ 409.356839][T18171] wg1 speed is unknown, defaulting to 1000 [ 409.537794][T18204] team0: entered promiscuous mode [ 409.555344][T18204] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4076'. [ 409.615848][T18204] Ã: (slave team0): Releasing backup interface [ 409.628267][T18204] team0 (unregistering): left promiscuous mode [ 409.755195][T18218] wg1 speed is unknown, defaulting to 1000 [ 409.887135][T18222] IPVS: Scheduler module ip_vs_sip not found [ 409.897155][T18226] tipc: Enabling of bearer rejected, failed to enable media [ 409.914247][T18226] syzkaller0: entered promiscuous mode [ 409.919997][T18226] syzkaller0: entered allmulticast mode [ 410.295527][T18239] tipc: Enabling of bearer rejected, failed to enable media [ 410.588103][T18251] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 410.658357][T18253] wg1 speed is unknown, defaulting to 1000 [ 410.752748][T18258] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4087'. [ 410.840069][T18262] wg1 speed is unknown, defaulting to 1000 [ 411.111978][T18277] syzkaller1: entered promiscuous mode [ 411.117525][T18277] syzkaller1: entered allmulticast mode [ 411.649312][T18287] tipc: Enabled bearer , priority 0 [ 411.660576][T18287] tipc: Resetting bearer [ 411.668926][T18286] tipc: Disabling bearer [ 412.173158][T18311] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 412.232216][T18315] netlink: 256 bytes leftover after parsing attributes in process `syz.0.4108'. [ 412.246524][T18315] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4108'. [ 412.257168][T18315] syz_tun: left allmulticast mode [ 412.264435][T18315] dvmrp1: left allmulticast mode [ 412.271827][T18316] netlink: 'syz.6.4103': attribute type 16 has an invalid length. [ 412.279714][T18316] netlink: 'syz.6.4103': attribute type 17 has an invalid length. [ 412.295630][T18316] 8021q: adding VLAN 0 to HW filter on device team0 [ 412.306890][T18316] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 412.336771][T18317] rdma_rxe: rxe_newlink: failed to add lo [ 412.373667][T18317] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 412.512150][T18319] wg1 speed is unknown, defaulting to 1000 [ 412.630922][T18322] tipc: Enabled bearer , priority 0 [ 412.649115][T18322] tipc: Resetting bearer [ 412.660785][T18321] tipc: Disabling bearer [ 413.727717][T18340] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 414.058768][T18350] wg1 speed is unknown, defaulting to 1000 [ 414.433312][T18365] syz_tun: entered allmulticast mode [ 414.461836][T18365] dvmrp8: entered allmulticast mode [ 414.474405][T18363] tipc: Enabling of bearer rejected, failed to enable media [ 414.489287][T18363] syzkaller0: entered promiscuous mode [ 414.499512][T18363] syzkaller0: entered allmulticast mode [ 414.517716][T18364] syz_tun: left allmulticast mode [ 414.524174][T18364] dvmrp8: left allmulticast mode [ 414.658084][T18370] wg1 speed is unknown, defaulting to 1000 [ 414.921027][T18382] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4130'. [ 415.117999][T18392] wg1 speed is unknown, defaulting to 1000 [ 415.185738][T18405] syzkaller0: entered promiscuous mode [ 415.194431][T18405] syzkaller0: entered allmulticast mode [ 415.345080][T18414] syz_tun: entered allmulticast mode [ 415.363239][T18414] dvmrp8: entered allmulticast mode [ 415.369097][T18413] tipc: Enabling of bearer rejected, failed to enable media [ 415.379801][T18412] syz_tun: left allmulticast mode [ 415.389229][T18412] dvmrp8: left allmulticast mode [ 415.424011][T18413] syzkaller0: entered promiscuous mode [ 415.429581][T18413] syzkaller0: entered allmulticast mode [ 415.534150][T18421] netlink: 'syz.0.4142': attribute type 2 has an invalid length. [ 415.590179][T18423] syz_tun: entered allmulticast mode [ 415.605605][T18423] dvmrp8: entered allmulticast mode [ 415.648692][T18423] wg1 speed is unknown, defaulting to 1000 [ 415.679581][T18431] netlink: 'syz.7.4144': attribute type 23 has an invalid length. [ 415.876565][T18433] netlink: 96 bytes leftover after parsing attributes in process `syz.0.4145'. [ 416.000175][T18436] wg1 speed is unknown, defaulting to 1000 [ 416.016414][T18442] syzkaller0: entered promiscuous mode [ 416.022729][T18442] syzkaller0: entered allmulticast mode [ 416.072309][T18422] syz_tun: left allmulticast mode [ 416.078071][T18422] dvmrp8: left allmulticast mode [ 416.228396][T18438] netlink: 'syz.0.4145': attribute type 1 has an invalid length. [ 416.237720][T18438] netlink: 'syz.0.4145': attribute type 1 has an invalid length. [ 416.247616][T18438] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4145'. [ 416.358025][T18450] syzkaller0: entered promiscuous mode [ 416.364156][T18450] syzkaller0: entered allmulticast mode [ 416.517113][T18454] syz_tun: entered allmulticast mode [ 416.531754][ T31] INFO: task syz.4.2988:13947 blocked for more than 143 seconds. [ 416.539554][ T31] Not tainted syzkaller #0 [ 416.596050][T18454] dvmrp8: entered allmulticast mode [ 416.609882][T18453] syz_tun: left allmulticast mode [ 416.629845][T18453] dvmrp8: left allmulticast mode [ 416.682394][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 416.695764][ T31] task:syz.4.2988 state:D stack:25192 pid:13947 tgid:13946 ppid:5863 task_flags:0x400140 flags:0x00004004 [ 416.720921][ T31] Call Trace: [ 416.725435][ T31] [ 416.729032][ T31] __schedule+0x1798/0x4cc0 [ 416.736480][ T31] ? __pfx___schedule+0x10/0x10 [ 416.752370][ T31] ? schedule+0x91/0x360 [ 416.759952][ T31] ? rcu_is_watching+0x15/0xb0 [ 416.772836][ T31] ? lock_release+0x4b/0x3e0 [ 416.778102][ T31] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 416.788795][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 416.797462][ T31] schedule+0x165/0x360 [ 416.805357][ T31] schedule_preempt_disabled+0x13/0x30 [ 416.812515][ T31] __mutex_lock+0x7e6/0x1350 [ 416.817451][ T31] ? __mutex_lock+0x5bb/0x1350 [ 416.825986][ T31] ? nfsd_nl_threads_set_doit+0x2cb/0x960 [ 416.834070][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 416.839406][ T31] ? rcu_is_watching+0x15/0xb0 [ 416.848844][ T31] ? net_generic+0x1e/0x240 [ 416.856003][ T31] ? lock_release+0x4b/0x3e0 [ 416.864451][ T31] ? net_generic+0x1e/0x240 [ 416.869504][ T31] ? net_generic+0x1e/0x240 [ 416.875676][ T31] nfsd_nl_threads_set_doit+0x2cb/0x960 [ 416.884465][ T31] genl_family_rcv_msg_doit+0x212/0x300 [ 416.892143][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 416.898545][ T31] ? bpf_lsm_capable+0x9/0x20 [ 416.907446][ T31] ? security_capable+0x7e/0x2e0 [ 416.915048][ T31] genl_rcv_msg+0x60e/0x790 [ 416.920069][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 416.930001][ T31] ? __kasan_slab_alloc+0x6c/0x80 [ 416.937246][ T31] ? __pfx_nfsd_nl_threads_set_doit+0x10/0x10 [ 416.946836][ T31] ? __netlink_lookup+0xbd/0x810 [ 416.954718][ T31] ? rcu_is_watching+0x15/0xb0 [ 416.959998][ T31] netlink_rcv_skb+0x208/0x470 [ 416.969626][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 416.976846][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 416.986961][ T31] ? lock_release+0x4b/0x3e0 [ 416.993018][ T31] ? down_read+0x1ad/0x2e0 [ 416.997895][ T31] genl_rcv+0x28/0x40 [ 417.005105][ T31] netlink_unicast+0x82f/0x9e0 [ 417.014900][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 417.024540][ T31] ? netlink_sendmsg+0x642/0xb30 [ 417.029873][ T31] ? skb_put+0x11b/0x210 [ 417.037024][ T31] netlink_sendmsg+0x805/0xb30 [ 417.045653][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 417.052506][ T31] ? futex_unqueue+0x22/0x240 [ 417.057719][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 417.073487][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 417.080087][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 417.088105][ T31] __sock_sendmsg+0x21c/0x270 [ 417.100102][ T31] ____sys_sendmsg+0x505/0x830 [ 417.109135][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 417.117949][ T31] ? import_iovec+0x74/0xa0 [ 417.124810][ T31] ___sys_sendmsg+0x21f/0x2a0 [ 417.133844][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 417.139519][ T31] ? futex_wait+0x285/0x360 [ 417.148377][ T31] ? __fget_files+0x2a/0x420 [ 417.159581][ T31] ? __fget_files+0x3a0/0x420 [ 417.168515][ T31] __x64_sys_sendmsg+0x19b/0x260 [ 417.177870][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 417.181262][ T5181] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 417.184688][ T31] ? rcu_is_watching+0x15/0xb0 [ 417.199328][ T31] ? rcu_is_watching+0x15/0xb0 [ 417.205101][ T31] do_syscall_64+0xfa/0x3b0 [ 417.214840][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 417.222698][ T31] ? clear_bhb_loop+0x60/0xb0 [ 417.227823][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 417.239053][ T31] RIP: 0033:0x7f757df8ebe9 [ 417.245336][ T31] RSP: 002b:00007f757eeb7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 417.258828][ T31] RAX: ffffffffffffffda RBX: 00007f757e1b5fa0 RCX: 00007f757df8ebe9 [ 417.267846][ T31] RDX: 0000000000008004 RSI: 0000200000000180 RDI: 0000000000000008 [ 417.281695][ T31] RBP: 00007f757e011e19 R08: 0000000000000000 R09: 0000000000000000 [ 417.293923][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 417.304726][ T31] R13: 00007f757e1b6038 R14: 00007f757e1b5fa0 R15: 00007fff7afb3f38 [ 417.317175][ T31] [ 417.333083][ T31] INFO: lockdep is turned off. [ 417.348358][ T31] NMI backtrace for cpu 0 [ 417.348388][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 417.348416][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 417.348430][ T31] Call Trace: [ 417.348438][ T31] [ 417.348448][ T31] dump_stack_lvl+0x189/0x250 [ 417.348480][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 417.348505][ T31] ? __pfx__printk+0x10/0x10 [ 417.348541][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 417.348571][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 417.348598][ T31] ? __pfx__printk+0x10/0x10 [ 417.348629][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 417.348664][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 417.348693][ T31] watchdog+0xf93/0xfe0 [ 417.348725][ T31] ? watchdog+0x1de/0xfe0 [ 417.348764][ T31] kthread+0x70e/0x8a0 [ 417.348792][ T31] ? __pfx_watchdog+0x10/0x10 [ 417.348819][ T31] ? __pfx_kthread+0x10/0x10 [ 417.348846][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 417.348874][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 417.348904][ T31] ? __pfx_kthread+0x10/0x10 [ 417.348943][ T31] ret_from_fork+0x3f9/0x770 [ 417.348965][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 417.348988][ T31] ? __switch_to_asm+0x39/0x70 [ 417.349013][ T31] ? __switch_to_asm+0x33/0x70 [ 417.349038][ T31] ? __pfx_kthread+0x10/0x10 [ 417.349064][ T31] ret_from_fork_asm+0x1a/0x30 [ 417.349099][ T31] [ 417.349133][ T31] Sending NMI from CPU 0 to CPUs 1: [ 417.502346][ C1] NMI backtrace for cpu 1 [ 417.502364][ C1] CPU: 1 UID: 0 PID: 14406 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 417.502384][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 417.502396][ C1] RIP: 0010:__sanitizer_cov_trace_pc+0x37/0x70 [ 417.502426][ C1] Code: 08 60 a0 92 65 8b 15 e8 b4 e0 10 81 e2 00 01 ff 00 74 11 81 fa 00 01 00 00 75 35 83 b9 3c 16 00 00 00 74 2c 8b 91 18 16 00 00 <83> fa 02 75 21 48 8b 91 20 16 00 00 48 8b 32 48 8d 7e 01 8b 89 1c [ 417.502441][ C1] RSP: 0018:ffffc90003987028 EFLAGS: 00000046 [ 417.502458][ C1] RAX: ffffffff81c389fb RBX: ffff88801d6d25b0 RCX: ffff888050e8bc00 [ 417.502472][ C1] RDX: 0000000000000000 RSI: ffffffff8e18ed80 RDI: 0000000000000004 [ 417.502484][ C1] RBP: 00000061354cf69d R08: ffff888050e8bc00 R09: 0000000000000020 [ 417.502505][ C1] R10: 000000000000001f R11: 0000000000000000 R12: ffff88801d6d2010 [ 417.502516][ C1] R13: ffff88801d6d2010 R14: 00000061354d4b62 R15: 00000000000005b4 [ 417.502529][ C1] FS: 0000555587f5c500(0000) GS:ffff888125d1a000(0000) knlGS:0000000000000000 [ 417.502544][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 417.502556][ C1] CR2: 00007ffdbb4a7be8 CR3: 000000007e9c6000 CR4: 00000000003526f0 [ 417.502572][ C1] Call Trace: [ 417.502579][ C1] [ 417.502586][ C1] rb_read_data_buffer+0x44b/0x580 [ 417.502616][ C1] check_buffer+0x28a/0x750 [ 417.502643][ C1] __rb_reserve_next+0x592/0xdb0 [ 417.502677][ C1] ring_buffer_lock_reserve+0xbb5/0x1010 [ 417.502698][ C1] ? rb_commit+0x781/0x7e0 [ 417.502723][ C1] trace_event_buffer_lock_reserve+0x1d0/0x6f0 [ 417.502743][ C1] ? tracing_gen_ctx_irq_test+0xc6/0x160 [ 417.502763][ C1] trace_event_buffer_reserve+0x248/0x340 [ 417.502785][ C1] ? __pfx_trace_event_buffer_reserve+0x10/0x10 [ 417.502804][ C1] ? bpf_try_get_buffers+0x91/0x170 [ 417.502831][ C1] trace_event_raw_event_bpf_trace_printk+0x100/0x260 [ 417.502850][ C1] ? __pfx_trace_event_raw_event_bpf_trace_printk+0x10/0x10 [ 417.502883][ C1] ? __asan_memcpy+0x40/0x70 [ 417.502904][ C1] ? bstr_printf+0xa7c/0xb70 [ 417.502929][ C1] trace_bpf_trace_printk+0x170/0x1d0 [ 417.502956][ C1] bpf_trace_printk+0x11e/0x190 [ 417.502974][ C1] ? __pfx_bpf_trace_printk+0x10/0x10 [ 417.502992][ C1] ? bpf_trace_run1+0x181/0x4b0 [ 417.503012][ C1] ? rcu_is_watching+0x15/0xb0 [ 417.503030][ C1] ? lock_acquire+0x5f/0x360 [ 417.503060][ C1] ? rcu_is_watching+0x15/0xb0 [ 417.503077][ C1] ? lock_release+0x4b/0x3e0 [ 417.503106][ C1] bpf_prog_9e1c00255e17e72e+0x39/0x3f [ 417.503122][ C1] bpf_trace_run1+0x27f/0x4b0 [ 417.503144][ C1] ? __pfx_css_rstat_updated+0x10/0x10 [ 417.503161][ C1] ? bpf_trace_run1+0x181/0x4b0 [ 417.503184][ C1] ? __pfx_bpf_trace_run1+0x10/0x10 [ 417.503207][ C1] ? __pfx___calc_delta+0x10/0x10 [ 417.503232][ C1] ? __bpf_trace_rcu_utilization+0x94/0xf0 [ 417.503253][ C1] __bpf_trace_rcu_utilization+0xa1/0xf0 [ 417.503271][ C1] ? __pfx___bpf_trace_rcu_utilization+0x10/0x10 [ 417.503290][ C1] ? rcu_qs+0xc4/0x170 [ 417.503305][ C1] ? __pfx_rcu_qs+0x10/0x10 [ 417.503320][ C1] ? __switch_to+0xdae/0x1670 [ 417.503347][ C1] trace_rcu_utilization+0x1ad/0x1d0 [ 417.503366][ C1] rcu_note_context_switch+0xdc1/0x1140 [ 417.503391][ C1] ? __pfx___switch_to+0x10/0x10 [ 417.503419][ C1] ? rcu_is_watching+0x15/0xb0 [ 417.503439][ C1] ? rcu_is_watching+0x15/0xb0 [ 417.503455][ C1] ? __pfx_rcu_note_context_switch+0x10/0x10 [ 417.503482][ C1] ? rcu_is_watching+0x15/0xb0 [ 417.503510][ C1] __schedule+0x35d/0x4cc0 [ 417.503536][ C1] ? do_raw_spin_unlock+0x122/0x240 [ 417.503560][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 417.503585][ C1] ? ktime_get+0x3e/0x1f0 [ 417.503608][ C1] ? debug_object_activate+0x2e2/0x420 [ 417.503632][ C1] ? __pfx___schedule+0x10/0x10 [ 417.503655][ C1] ? rcu_is_watching+0x15/0xb0 [ 417.503673][ C1] ? schedule+0x91/0x360 [ 417.503694][ C1] ? rcu_is_watching+0x15/0xb0 [ 417.503714][ C1] ? lock_release+0x4b/0x3e0 [ 417.503739][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 417.503767][ C1] schedule+0x165/0x360 [ 417.503793][ C1] do_nanosleep+0x1c7/0x600 [ 417.503816][ C1] ? do_nanosleep+0x7f/0x600 [ 417.503838][ C1] ? __pfx_do_nanosleep+0x10/0x10 [ 417.503861][ C1] ? __hrtimer_setup+0x187/0x210 [ 417.503876][ C1] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 417.503896][ C1] hrtimer_nanosleep+0x169/0x360 [ 417.503913][ C1] ? __might_fault+0xb0/0x130 [ 417.503938][ C1] ? __pfx_hrtimer_nanosleep+0x10/0x10 [ 417.503957][ C1] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 417.503976][ C1] ? __pfx_get_timespec64+0x10/0x10 [ 417.504001][ C1] ? blkcg_maybe_throttle_current+0x1ab/0xb40 [ 417.504034][ C1] __se_sys_clock_nanosleep+0x2ee/0x380 [ 417.504062][ C1] ? __pfx___se_sys_clock_nanosleep+0x10/0x10 [ 417.504088][ C1] ? rcu_is_watching+0x15/0xb0 [ 417.504107][ C1] ? rcu_is_watching+0x15/0xb0 [ 417.504126][ C1] do_syscall_64+0xfa/0x3b0 [ 417.504142][ C1] ? rcu_is_watching+0x15/0xb0 [ 417.504158][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 417.504176][ C1] ? clear_bhb_loop+0x60/0xb0 [ 417.504196][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 417.504213][ C1] RIP: 0033:0x7f75b13c14a5 [ 417.504227][ C1] Code: 24 0c 89 3c 24 48 89 4c 24 18 e8 f6 54 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 8b 74 24 0c 8b 3c 24 b8 e6 00 00 00 0f 05 <44> 89 c7 48 89 04 24 e8 4f 55 ff ff 48 8b 04 24 48 83 c4 28 f7 d8 [ 417.504242][ C1] RSP: 002b:00007ffc53cdc800 EFLAGS: 00000293 ORIG_RAX: 00000000000000e6 [ 417.504260][ C1] RAX: ffffffffffffffda RBX: 0000000000000273 RCX: 00007f75b13c14a5 [ 417.504272][ C1] RDX: 00007ffc53cdc840 RSI: 0000000000000000 RDI: 0000000000000000 [ 417.504283][ C1] RBP: 00007ffc53cdc8ac R08: 0000000000000000 R09: 0000000000000000 [ 417.504294][ C1] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000001388 [ 417.504305][ C1] R13: 00000000000927c0 R14: 0000000000065b4d R15: 00007ffc53cdc900 [ 417.504325][ C1] [ 417.505383][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 418.088915][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 418.098039][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 418.108109][ T31] Call Trace: [ 418.111403][ T31] [ 418.114349][ T31] dump_stack_lvl+0x99/0x250 [ 418.118965][ T31] ? __asan_memcpy+0x40/0x70 [ 418.123568][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 418.128859][ T31] ? __pfx__printk+0x10/0x10 [ 418.133469][ T31] vpanic+0x281/0x750 [ 418.137473][ T31] ? __pfx_vpanic+0x10/0x10 [ 418.141992][ T31] ? rcu_is_watching+0x15/0xb0 [ 418.146762][ T31] ? preempt_schedule+0xae/0xc0 [ 418.151628][ T31] ? preempt_schedule_common+0x83/0xd0 [ 418.157107][ T31] panic+0xb9/0xc0 [ 418.160835][ T31] ? __pfx_panic+0x10/0x10 [ 418.165261][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 418.171161][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 418.177334][ T31] watchdog+0xfd2/0xfe0 [ 418.181507][ T31] ? watchdog+0x1de/0xfe0 [ 418.185852][ T31] kthread+0x70e/0x8a0 [ 418.189934][ T31] ? __pfx_watchdog+0x10/0x10 [ 418.194623][ T31] ? __pfx_kthread+0x10/0x10 [ 418.199222][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 418.204436][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 418.209652][ T31] ? __pfx_kthread+0x10/0x10 [ 418.214273][ T31] ret_from_fork+0x3f9/0x770 [ 418.218875][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 418.224014][ T31] ? __switch_to_asm+0x39/0x70 [ 418.228806][ T31] ? __switch_to_asm+0x33/0x70 [ 418.233591][ T31] ? __pfx_kthread+0x10/0x10 [ 418.238197][ T31] ret_from_fork_asm+0x1a/0x30 [ 418.242984][ T31] [ 418.246406][ T31] Kernel Offset: disabled [ 418.250734][ T31] Rebooting in 86400 seconds..