last executing test programs: 2.164179971s ago: executing program 1 (id=3758): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c0000006d00673c25bd7000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="9881040004680200180034801400351e64756d6d7930000000000000000000001400030069705f76746930"], 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$tun(r2, &(0x7f0000000000)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) unshare(0x20040600) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e22, 0x6}, 0x1c) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)=@newlink={0x40, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4048b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @broadcast}, @IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6, 0xe, 0x2}]}}}]}, 0x40}}, 0x0) 2.023655405s ago: executing program 1 (id=3761): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c00000007000000040000000000000e0400000000000000000000000100000d000000000400000004000000000000000000000404000000000000000000000a030000000000000061"], 0x0, 0x5b}, 0x28) (async) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) (async) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @private=0xa010101}, 0x10) (async) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe3}]}, 0x10) (async) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) (async) sendmmsg$inet(r0, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000ac0)="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", 0x4e9}], 0x1}}, {{&(0x7f0000000000)={0x2, 0x4e23, @empty}, 0x10, &(0x7f0000000a40)=[{0x0}, {0x0}, {&(0x7f0000000240)="c250e1d89471210865f09809e54c89a6345816fa495c498a27dd85babbaf", 0x1e}, {&(0x7f0000000440)="a7d35ad80b081663a15a77381c07a3d69245", 0x12}, {&(0x7f0000000980)="58016a08d3805029f18c7450d1a60f34eaa59d1e2cdd3b4274d6a2569ed615f0244e2b63193738463f0c89201566ede9f4ba09e1251c2eb9e322fbea612c5ebefd4546f663013ef4fd2c722dcd25f97915ec1a9d7e3109531ca18a9474dbeb9ffebe3370fb2f9b4c28ffa29d557f7e2710d9ec06451c143f2b25c3f989b3a3c1da2e9b10b46a2f4333be513abf28fb1c017de2a7a47cda704a3fcf0d6d4b587f6e3887725b6f8b51bef9fc2b3a0b0b140652e011f62b4bc6", 0xb8}, {&(0x7f0000000500)="0b91570b55d0be7e247c6cacfa99dd11b807baac34adaa065cc22b7ea66654e0284551446d2cc2", 0x27}], 0x6, &(0x7f0000000200)=[@ip_retopts={{0x10}}], 0x10}}], 0x2, 0x40) 1.991769139s ago: executing program 1 (id=3762): r0 = socket(0x2c, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) (async) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r2, 0x0, 0x40000000000}, 0x18) (async) unshare(0x22020400) (async) r3 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000280)="600000004e007f049eefc7b4d87c87406910f368911005ea366248266e311c32ba82fbd3eaef15cdd18a5e6d0d4452706ca39be850bc2da9e5d2", 0x3a}, {&(0x7f0000000180)="78cabf2dfb73fc0a512a0080f2dcb9fe06892544001100b8f9e6aaeb1ae2f6e8bcb5ee52bf06", 0x26}], 0x2}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@multicast1, 0x4e20, 0x0, 0xfffe, 0x200, 0x2}, {0x10000, 0x65ad, 0x1, 0x0, 0xfffffffffffffffc, 0x0, 0x8000000000000000, 0xfffffffffffffff7}, {0x2, 0x8, 0xfffffffffffffffc, 0x8}, 0x0, 0x0, 0x1, 0x0, 0x1}, {{@in6=@empty, 0x2, 0x6c}, 0xa, @in=@empty, 0x40000, 0x5, 0x0, 0xb7}}, 0xe8) (async) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=@newqdisc={0x2c, 0x24, 0x70b, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x12, r1, {0x0, 0x6}, {0xffff, 0xffff}, {0xd, 0x7}}, [@TCA_INGRESS_BLOCK={0xfffffffffffffe57, 0xd, 0x401}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x4, 0x5, &(0x7f0000000080)=ANY=[@ANYRESDEC=r1], &(0x7f00000006c0)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r6, 0x0, 0x36, 0x0, &(0x7f00000003c0)="e02742e8680d85cc970c2d2f86ddfd356fbefc38078b49f5e6bdbfc95f9a3dff8c1771865e1808c9c777b801f21fc42abd02c158f01a", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 1.819566588s ago: executing program 1 (id=3769): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x400}}}]}, 0x38}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@gettfilter={0x24, 0x2e, 0x1, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x2, 0xa}, {0x1, 0xfff1}, {0x7, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000090}, 0x4041080) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000100)=@newqdisc={0x24, 0x24, 0x4, 0x80000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x4, 0xe}, {0xc, 0xfff3}, {0x9, 0x1}}}, 0x24}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012806c616e009f6aaed96cf922c3d6196caa0c55e522a93edbbea8e2ce6f944aca7f960cf48aac299f75650b793fe92d296dc1cd0c21e9488940fd87a181aa4d84308ee8c9d6e10b18409a244ce3f11acb6a4594993a3f10743c88a97f4e775b9b6f4dfd829614053e97"], 0x50}}, 0x4008840) 1.58773665s ago: executing program 1 (id=3776): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'rose0\x00', 0x112}) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x80000001, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x8, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0xb}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {0x4}, {0x7, 0x0, 0xa}, {0x4, 0x0, 0x7, 0x2, 0x0, 0x0, 0x1d}, {0x18, 0x9, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xc, 0x9, 0x4}, {0x6, 0x0, 0x5, 0x8}}}, &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x2f, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) close(0x3) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x103}) 1.563588231s ago: executing program 2 (id=3778): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x9, 0x32, 0xffffffffffffffff, 0x34d4b000) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @mcast2, 0x5}, 0x1c) getsockopt$sock_buf(r1, 0x1, 0x19, &(0x7f0000002f80)=""/217, &(0x7f0000003080)=0xd9) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5021900000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a54000000060a09040000000000000000020000000900020073797a32000000000900010073797a300000000028000480240001800b000100657874686472000014000280080004400000007b08000640000000011400"], 0x7c}}, 0x804) 1.363958281s ago: executing program 2 (id=3782): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_PROMISC(r2, 0x6b, 0x2, &(0x7f0000000000)=0x5, 0xe) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="7a0a00ff0000000071109f000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x94) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000140)=0x80) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) r6 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r6, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r5, {0x2, 0x0, @rand_addr=0x64010100}, 0x2}}, 0x2e) setsockopt$SO_J1939_FILTER(r3, 0x6b, 0x1, &(0x7f0000000180)=[{0x2, 0x2, {0x0, 0x0, 0x4}, {0x2, 0x0, 0x1}, 0x1, 0xff}, {0x1, 0x0, {0x0, 0x0, 0x3}, {0x1, 0xff}, 0x2, 0xff}, {0x1, 0x0, {0x2, 0x1, 0x3}, {0x1, 0x0, 0x2}, 0x1, 0x2}, {0x2, 0x1, {}, {0x1, 0xff, 0x3}, 0xfe}, {0x3, 0x0, {0x2, 0x0, 0x4}, {0x2, 0x0, 0x2}, 0xff, 0xfe}], 0xa0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x1c, r1, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 1.363249744s ago: executing program 0 (id=3783): r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140010", @ANYRES8=0x0, @ANYBLOB="9df3035b1f"], 0x48}, 0x1, 0x0, 0x0, 0x4811}, 0x840) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) ioctl$EXT4_IOC_GETFSUUID(r0, 0x8008662c, &(0x7f0000000000)) 1.323315871s ago: executing program 1 (id=3785): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000600)={'gretap0\x00', &(0x7f0000000540)={'tunl0\x00', 0x0, 0x40, 0x8, 0xe1, 0x4, {{0x1f, 0x4, 0x3, 0x14, 0x7c, 0x67, 0x0, 0x6, 0x29, 0x0, @remote, @loopback, {[@rr={0x7, 0x13, 0x84, [@remote, @rand_addr=0x64010100, @broadcast, @broadcast]}, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x23, 0x6f, [@multicast1, @dev={0xac, 0x14, 0x14, 0x1e}, @dev={0xac, 0x14, 0x14, 0x1e}, @broadcast, @empty, @private=0xa010100, @broadcast, @broadcast]}, @ssrr={0x89, 0x2b, 0x3a, [@loopback, @remote, @empty, @multicast2, @loopback, @empty, @dev={0xac, 0x14, 0x14, 0x34}, @multicast1, @empty, @dev={0xac, 0x14, 0x14, 0x2a}]}]}}}}}) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000007c0)={{{@in, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6}}, &(0x7f0000000640)=0xe8) setsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000008c0)={{{@in=@private=0xa010101, @in=@multicast2, 0x4e21, 0x81, 0x4e23, 0xe000, 0xa, 0x0, 0x0, 0x29, r1, r3}, {0xc, 0xb23, 0x46ae757d, 0xff, 0x9, 0x67c, 0xd, 0x3}, {0x646, 0x3, 0x88, 0x8f}, 0xae4, 0x6e6bb1, 0x0, 0x1, 0x1, 0x1}, {{@in6=@mcast2, 0x4d5, 0x2b}, 0xa, @in6=@mcast2, 0x3501, 0x1, 0x1, 0x5, 0x10, 0x1, 0x8}}, 0xe8) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000b40)=ANY=[@ANYBLOB="7c00000000000000000100000000000012d2c7f726d9d500c878d15f9fa5b50900d337b22b309b007ae10221797a3fc0b73b10b895173c7b819f2f12443475a697ace3c3ff1085dc878329792da77bf045f141e4a88ce217cd8018b870f21d4d2c99"], 0x10) syz_emit_ethernet(0x6e, &(0x7f0000000340)={@multicast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "02adf7", 0x38, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @time_exceed={0x2, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "fd9063", 0x0, 0x3a, 0x0, @mcast1, @loopback={0x0, 0xffffac1414aa}, [], "1e520b4c951ee12e"}}}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x10, 0x8}, [@ldst={0x3, 0x0, 0x3, 0xa, 0x9, 0xff00}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport}, 0x94) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000d00)=@setlink={0x30, 0x13, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@IFLA_TARGET_NETNSID={0x8, 0x2e, 0x1}, @IFLA_NET_NS_FD={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$DCCPDIAG_GETSOCK(r5, &(0x7f0000000a40)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000700)={&(0x7f00000009c0)={0x54, 0x13, 0x300, 0x70bd26, 0x25dfdbfc, {0x3, 0x80, 0x4, 0x7, {0x4e20, 0x4e23, [0x3, 0x4, 0x3, 0x5], [0xc5a6, 0xa1de, 0x8, 0x4], r2, [0x5, 0xffffa35c]}, 0x4c4a9713, 0x4}, [@INET_DIAG_REQ_BYTECODE={0x5, 0x1, "8c"}]}, 0x54}, 0x1, 0x0, 0x0, 0xe615b4af702a802b}, 0x40) write$rfkill(r4, &(0x7f0000000080)={0x80, 0x0, 0x3, 0x1}, 0x8) r6 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf20000000000000160006003f1b48013d030100000000009500000000000000bc26000000000000bf67000000000000070600000fff07006702000003000000360600000ee600f0bf052000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a83683d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf5fe7030586"], &(0x7f0000000100)='GPL\x00'}, 0x48) r7 = socket(0x1e, 0x1, 0x0) listen(r7, 0x0) setsockopt$sock_timeval(r7, 0x1, 0x14, &(0x7f0000454ff0)={0x0, 0x2710}, 0x10) accept4$x25(r7, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb010018000000000000003000000030000000020000000000000001000004ffffffff00000000030000001100000000000000000000020000c9"], 0x0, 0x4a}, 0x28) sendmsg$inet(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000000)="5c00000014006b05c84e21000ab16d6e230675f802000000440002000800d30461bc24eeb556a705251e6182149a36c23d3b48dfd8cdbf9367b098fa51f60a64c9f408000000e786a6d0bdd70000b6c0504bb9189d9193e9bd1c1b78", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0500000004000000080000000c00000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000ca97960000100000ef8d876d83d3a4c6eb46ef30258b237216203dab6c4d985416040989e90dfe02d1e1e1e79d8b7a565cc1056a5342a63a2f45d4ea913aef83986b1abf6ab382523ecedcf5f1eaaed090639e7ebc6663dc52c1d0d2fc85b0ddd4bc886f52c220d557241a2382184606baf13188535ffdfb5b7673516244bc4a790cb47ecf3b1c4e5aace325f224432ebd3def34fa23f49adff1391ade1eaf0f58449247f625a5990c1a0881aba5b6dfc778b8c816883b56350e2920947bae4699ba32230190d688"], 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000a80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000003000000850000002300000095000000000000001173e846aa66bbf40ebd36060d52264bccc1bf086be1f056b459dc3962270ed286a60676640412e95714bbbf0f86c96f25f8e31bed01c909e8ddca723924f8d81ac5ce6d4335f162b591623db78ab7f6f45f1bc0beea"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x37) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_sctp(0xa, 0x5, 0x84) unshare(0x20000400) pselect6(0x4b, &(0x7f0000000040), &(0x7f00000000c0)={0x9}, 0x0, 0x0, 0x0) sendmsg$nl_xfrm(r10, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000400)=@delsa={0x3c, 0x11, 0x1, 0x70bd2c, 0x25dfdbfe, {@in6=@remote, 0x4d3, 0x8, 0x3c}, [@srcaddr={0x14, 0xd, @in=@multicast2}]}, 0x3c}}, 0x40) sendmsg$inet(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000000c0)="5c00000014006b05c84e21000ab16d6e230675f811000000440002005817d30461bc24eeb556a705251e6182149a36c23d3b48dfd8cdbf9367b098fa51f60a64c9f408000000e786a6d0bdd70000b6c0504bb9189d9193e9bd1c1b78", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x24000000) 1.311605544s ago: executing program 2 (id=3786): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ff00f5", 0x28, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x20, 0x0, 0x0, 0x0, {[@mptcp=@add_addr={0x1e, 0x25, 0x0, 0x11, 0x4, @broadcast, 0x9, "306fcfea2f1077"}]}}}}}}}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@ipv6_newaddr={0x48, 0x14, 0x1, 0xfffffffc, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_ADDRESS={0x14, 0x1, @mcast2}, @IFA_FLAGS={0x8, 0x8, 0x402}, @IFA_CACHEINFO={0x14, 0x6, {0x5, 0x7, 0x77eb488a, 0x5}}]}, 0x48}}, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000faffffff00000000000000180100002e20000000020000000000007b1af8ff00000000bfa10000000000000701000062ffffffb702000008000000b703000000000000850000a78286b33037bbbad0df7f715d5a4a000600000095", @ANYBLOB="75b70a362932b36ab680056a121cb8f0c946339992e2db76d0271ba05b7413ca10d139f9483c3c3b44340487684edba93fdfb1373c58b58cca581d3116dce03e12903ad1c46c24949faa55bb956fb334f125f3b94e8d3fffd329dc224443aea461c3109e8caf6e120de6f5dc58d52991359feebc4facf326cdbd8df35e186f06f6924324f8b33cd6ce3d49b6998684ee304d31c113d7293944dbcf201158f818872d49029be50ff7222fcee51d002ba917eb4e1a6529"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r3, 0x0, 0xd}, 0x18) r4 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r4, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r4, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x19, 0x4, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, [@call={0x85, 0x0, 0x0, 0x60}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) connect$vsock_stream(r5, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) r6 = accept(r4, 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@bloom_filter={0x1e, 0x9, 0x10001, 0x9, 0x20184, 0xffffffffffffffff, 0x1000, '\x00', r2, 0xffffffffffffffff, 0x0, 0x1, 0x2, 0x5}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r7, &(0x7f0000000300), &(0x7f00000002c0)=@tcp6=r6}, 0x47) recvmmsg(r6, &(0x7f0000000480)=[{{0x0, 0x0, 0x0}, 0x7}], 0x1, 0x12020, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000000c0)='sys_exit\x00', r8}, 0x18) getpeername$netlink(r6, 0x0, 0x0) sendmsg$IPSET_CMD_DESTROY(r6, 0x0, 0x40810) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x120, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000008c0), r9) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r9, &(0x7f0000000a00)={0x0, 0x2, &(0x7f00000009c0)={&(0x7f0000000900)={0x14, r10, 0xe2c40cf0776ef37, 0x0, 0x0, {0x5}}, 0x14}}, 0x0) 1.206132779s ago: executing program 0 (id=3789): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001a40)={0x11, 0x5, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83}, [@call={0x85, 0x0, 0x0, 0x11}, @call={0x85, 0x0, 0x0, 0xf}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001b40)={r0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x0, 0xfffffffc}}, 0x10) bind$tipc(r1, &(0x7f00000000c0)=@name={0x1e, 0x2, 0x0, {{0x40, 0x801}}}, 0x10) bind$tipc(r1, &(0x7f0000000140)=@name={0x1e, 0x2, 0xfffffffffffffffe, {{0x42, 0x2}}}, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="6c0100001000130700000000fcdbdf25200100000000000000000000000000012001000000002000000000000000000100006c00"/64, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="fc010000000000000000000000000000000000fe3200000000000000000000000000ffffac1414bb000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000050000000000000043050000000000000700000000000000ffffffffffffff7f000000000000000000000000000000000000000000000000000000002cbd70000635000002000400500000000000000060001200726663343130362867636d2861657329290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000060000000210466d38547aa140db9a200000000c538c7cb7a1c00040002"], 0x16c}, 0x1, 0x0, 0x0, 0x880}, 0x0) r3 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) setsockopt$bt_BT_POWER(r3, 0x112, 0x9, &(0x7f0000000080)=0x45, 0x1) 1.20518034s ago: executing program 2 (id=3790): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000047c0)={0x60, r2, 0x405, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000084}, 0x44084) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="2072cef13829c5c5c940000000000000f5ffffff000000000800010002000000"], 0x20}}, 0x0) unshare(0x68040200) socket$inet(0x2, 0x3, 0x7) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) epoll_create1(0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) ppoll(&(0x7f0000000500)=[{r4}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x2}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000540)=ANY=[@ANYBLOB="cd1242bdc9ea000000000000080049000040000800000001907864010102ffffffff01940401009404000094048fcbd9118507be5db652aa53c800000000000308b07800067f4345170fff0065b9f9f5290008ac1e0001ac141404"], 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r6 = socket(0x1e, 0x4, 0x0) r7 = socket(0x840000000002, 0x3, 0xff) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000000700000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r8, 0x18000000000002a0, 0xffffffffffffffe1, 0x60000000, &(0x7f0000000100)="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", 0x0, 0x6b, 0x60000000, 0x0, 0x0, &(0x7f0000000400)="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"}, 0xf) sendmmsg$inet(r7, 0x0, 0x0, 0x0) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) recvmmsg$unix(r6, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000980)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) sendmmsg(r6, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) setsockopt$SO_J1939_FILTER(r7, 0x6b, 0x1, &(0x7f00000003c0)=[{0x2, 0x0, {0x2, 0x1}, {0x0, 0x1}, 0xfd}, {0x0, 0x0, {0x1, 0x1, 0x1}, {0x1, 0xff, 0x3}, 0x2, 0xfe}, {0x2, 0x0, {0x1, 0xf0, 0x3}, {0x1, 0x1, 0x4}, 0xff, 0xfd}, {0x0, 0xffffffffffffffff, {0x1, 0xf0, 0x2}, {0x1, 0x0, 0x3}, 0x0, 0xff}, {0x2, 0x2, {0x2, 0xf0, 0x4}, {0x2, 0x1, 0x3}, 0xfe, 0xff}, {0x1, 0x3, {0x2, 0xf0, 0x3}, {0x0, 0xf0, 0x1}, 0xfe, 0xfe}, {0x1, 0x1, {0x0, 0x1, 0x3}, {0x1, 0x0, 0x3}, 0x1, 0x2}, {0x3, 0x3, {0x0, 0xf0, 0x3}, {0x1, 0xf0}, 0x2}], 0x100) close(0x4) 1.157472617s ago: executing program 0 (id=3791): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) r4 = socket(0x10, 0x3, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(r4, 0x84, 0xd, &(0x7f00000000c0), 0x4) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="7fff0000000000002800128009000100766c616e000000001800028006000100340200000c0002001f0000001e00000008000500", @ANYRES32=r3], 0x50}}, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r6 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r6, &(0x7f00000003c0)=[{{&(0x7f0000000000)={0x2, 0x0, @rand_addr=0x64010100}, 0x10, &(0x7f00000000c0)}}, {{&(0x7f0000000080)={0x2, 0x0, @multicast2}, 0x10, &(0x7f0000000140)}}], 0x2, 0x0) r7 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r6, 0x10e, 0x1, &(0x7f00000001c0)=0xd, 0x4) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r6, 0x84, 0x72, &(0x7f0000000040)={r8, 0x8788, 0x20}, 0xc) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000300)={r8, @in={{0x2, 0x4e23, @multicast2}}, 0x7, 0x9, 0x9, 0x2, 0x2, 0x8000, 0x2}, &(0x7f0000000040)=0x9c) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r9 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x8800, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYRES16=0x0, @ANYRESDEC, @ANYRESDEC=r2, @ANYRES8=r0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000c0000000900000000000000", @ANYRES32, @ANYBLOB="00001400002001000000f7000000c532f7ff0000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000008000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000002d00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00', r10}, 0x10) ioctl$PPPIOCNEWUNIT(r9, 0xc004743e, &(0x7f0000000100)) ioctl$PPPIOCSACTIVE(r9, 0x40107446, &(0x7f0000000240)={0x2, &(0x7f0000000200)=[{0x48, 0x0, 0x0, 0x2}, {0x6, 0x1, 0xfb, 0x2}]}) r11 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/net\x00') sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB="3c00000087dc041e84e2b661880aae4a45e205557aea901d3be02b5761d675ce296bdf8788", @ANYRES16=0x0, @ANYBLOB="010000000000000000000300000008000100", @ANYRES16=r5, @ANYBLOB="080002000000000008000400ac1414bb08000700", @ANYRES32=r11, @ANYRESOCT], 0x3c}, 0x1, 0x0, 0x0, 0xc4}, 0x0) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000440)={&(0x7f0000000500)=ANY=[@ANYBLOB="75001706", @ANYRES16=0x0, @ANYRES32=r1, @ANYRES32=r3, @ANYBLOB="05000d002b00000005000d002900000008000500e1000001"], 0x6c}, 0x1, 0x0, 0x0, 0x20004800}, 0x841) socket(0x1, 0x803, 0x0) 1.0201121s ago: executing program 4 (id=3794): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b000000000000000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000fdffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='signal_generate\x00', r0}, 0x18) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'nicvf0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000680)=ANY=[@ANYRESOCT=r0, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', r1, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0x3, 0x3}, 0x6) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="00000000009f2e4ff8f666f964f615f0000000000000000000001434f8", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000400)='signal_generate\x00', r5}, 0x18) r6 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000780)={0x0, 0x9000, 0x4, [0x0, 0x7fff, 0xb, 0x0]}, &(0x7f00000007c0)=0x10) setsockopt$inet_tcp_buf(r6, 0x6, 0xd, &(0x7f0000000000)='R', 0x1) setsockopt$inet_buf(r6, 0x0, 0x2a, 0x0, 0x0) r7 = accept(r6, &(0x7f00000004c0)=@x25={0x9, @remote}, &(0x7f0000000180)=0x80) ioctl$sock_kcm_SIOCKCMATTACH(r7, 0x89e0, &(0x7f0000000580)={r6, r0}) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 922.153357ms ago: executing program 0 (id=3796): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0a00000007000000060000008c"], 0x50) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@newsa={0x1b0, 0x10, 0x1, 0x0, 0x0, {{@in6=@private1, @in6=@loopback}, {@in=@broadcast, 0x0, 0x32}, @in6=@private1, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, {}, 0x0, 0x0, 0x2, 0x0, 0x0, 0xcd}, [@algo_crypt={0x48, 0x2, {{'cbc(aes)\x00'}}}, @replay_esn_val={0x1c}, @algo_auth_trunc={0x5c, 0x14, {{'cmac(aes)\x00'}, 0x80, 0x0, "b74a27a4f44bd05db8f139a0e0f8147b"}}]}, 0x1b0}}, 0x0) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) (async, rerun: 32) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000500000018110000", @ANYRESOCT=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18fbfdcd22c3d3dc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 32) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) (async, rerun: 64) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000340)=[@sack_perm, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @window={0x3, 0x0, 0x4}], 0x4) (async, rerun: 64) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r2}, 0x18) (async) sendmsg$NET_DM_CMD_STOP(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x404c081}, 0xc080) (async, rerun: 32) r4 = socket$kcm(0xa, 0x922000000003, 0x11) (rerun: 32) setsockopt$sock_attach_bpf(r4, 0x29, 0x24, &(0x7f00000000c0), 0x4) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)=ANY=[], 0x28}}, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={&(0x7f00000002c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0xcd, &(0x7f0000000040), 0x5}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x9, 0x5, 0x8, 0x40, 0x42}, 0x48) 820.271181ms ago: executing program 0 (id=3797): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) r1 = socket(0x2b, 0x80801, 0x1) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x6, 0x14, &(0x7f0000000b00)=ANY=[@ANYBLOB="1800"/15, @ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ffffffe}, 0x94) socket$inet_tcp(0x2, 0x1, 0x0) close(0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x50) r7 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000000c0)=ANY=[@ANYRES32=r6, @ANYRES32=r7], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r6}, &(0x7f00000006c0), &(0x7f0000000700)=r5}, 0x20) sendto$inet(r1, &(0x7f0000000780)="18c265e05811c2ae1d978d0424dddfe569a50b56d6a98b0e71ef1a753776a5b21ef37367af15f60e4704629d6b732a206a6656b1d20d974e98d255384aaeaf485b5e9e4824cc5a40c8cd0e233cfdc7a55cd4bd529f5079a7ee33d6fd2d4d525154990e1bf21a428d887cba7ae71df53c56e8bcc27a91170ca210ec5a398899ae0aea5a5f85274988ec6ac725dad49772deb7ef6d937716d9c4dfc272645c60b9c3620459096e84c67da13176fe56d35cb46c9dcaf3029f6f16ea58adecddb3684974390b18baca7251fd6493ec358618649bb0e6201aa07468579f311a9e51cd135bb658f5da40e59e18e2b8f54ed61905e654973fa006ae6f", 0xf9, 0x8d4, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0x0, 0xe, 0x0, &(0x7f00000003c0)="fdfc19d22a929603000000000000", 0x0, 0xa00, 0x0, 0x35, 0x0, 0x0, 0x0, 0xe, 0x0, 0x57}, 0x50) connect$phonet_pipe(r2, 0x0, 0x0) ioctl$SIOCPNENABLEPIPE(r2, 0x89ed, 0x0) r9 = socket$inet6_udplite(0xa, 0x2, 0x88) r10 = socket(0x10, 0x3, 0x0) ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0xee01) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000380)={&(0x7f0000000540)=ANY=[@ANYRESDEC, @ANYBLOB="67b75733a17a9bb9c0d09e48819865d2788e426aa788db5e48dfc27dd2bc3b4d4498c517fad74eed02d08ce51a57699247be00a2e987d88930df0637cba952eb75ff44f458d20ad7a53c34c6f2388d0ee18a45df9cfd9faea9dd9d3ef049bf3e65883f38c43296725349a5ca1a1308d8890ef667e70f4d80162584146258ca351dd51e7587c1aaacb86e76bbfacb1cf52ae9864ef889826df4763f78e3a41c98373f9648c7e8b30340cd1c3815bf03", @ANYBLOB="00022dbd7000fbdbdf250e00000008000300", @ANYRES32=0x0, @ANYBLOB="0c00060003000022c247b7bfadecf9000000"], 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x4800) sendto$inet6(r10, &(0x7f0000000000)="7800000018002507b9409b14ffff00000202be04020506056403040c5c0009003f0020010a0000000d0085a168216b46d32345653600648d270015000a00080049935ade4a460c89b6ec0cff3959547f509058ba86c902007a0000ad1818853422e45d000800000000000000e218d1ddf66ed538f2523250", 0x78, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x24008000}, 0x24000089) r11 = accept4$alg(r0, 0x0, 0x0, 0x0) read$alg(r11, &(0x7f00000012c0)=""/4109, 0x100d) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYRESDEC=0x0], 0x48) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000b40)=ANY=[@ANYRES8, @ANYRES8=r1, @ANYRESOCT=r3, @ANYRES32=0x0, @ANYRESOCT=0x0, @ANYRESOCT=r9, @ANYRESOCT=r7, @ANYRESHEX=r8], 0x50) 703.701398ms ago: executing program 4 (id=3798): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000001a40)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x12}}, @in={0x2, 0x0, @dev}, @in={0x2, 0x0, @local}, @in={0x2, 0x0, @multicast1}], 0x40) sendto$inet(r0, &(0x7f0000000080)="d301a5305d2c228e0971", 0xa, 0x0, &(0x7f0000000000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x44}}, 0x10) (async) r1 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r0}, 0x8) (async) unshare(0x8000400) (async) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-aes-aesni\x00'}, 0x58) (async) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000340)={&(0x7f0000000680)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="200028bd7000fbdbdf250200000008000a0002000000050013005300000099a5a1a21cb696dfc555153397c702eb246c427336b6b690456b"], 0x24}, 0x1, 0x0, 0x0, 0x8884}, 0x40000) (async) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) (async) r4 = accept$alg(r3, 0x0, 0x0) recvmmsg(r4, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000400)=""/208, 0xd0}], 0x1}}], 0x1, 0x0, 0x0) (async) sendmmsg$alg(r4, &(0x7f00000000c0)=[{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000001880)="70041bf1af037f02b0e2a31763fb27cf170a0cd27c99482f8378cae752292bd667bda71457062f3643862b46a3fdbd08fdf88d29190d0d3b2169152152d200e10e5ad49d2128ee09fde9724fe910be868caf447520d9a4966303722e0c2d6b263aa9e1f0a2d0e49cfec999b07c3edcf0ef9ff9b97610a1e4412d1ceb10711e4319a9654f3706a3cde5736edf4f3a9df2220e0c360641e47005e95c79d8fb3ca617422afeb3db296bb43b877578df43055af0ce81ff56ef655dcd1f91234faa0095e640dae030805d40c0322b57e9ea91", 0xd0}], 0x1, 0x0, 0x0, 0x30000040}], 0x1, 0x0) (async) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000180)=0x3) (async) ioctl$PPPIOCSMAXCID(r2, 0x40047451, &(0x7f0000000200)=0x8000) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x11, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="a3d53abf293e1175812217b761ab863d38fd75ee97a1d7eddc506ed86df0f0e9ab11ee2aa9efc27104beaaac3ecf240c90e230ec680f85c6cc3d008439103fe632d0a2ab2ee67be8df6fc728bcf284202a3d7af1127721f0328763a0e897307567530f0edaa4fcfc5ba29ad47d60ba77", @ANYBLOB="e4ca9f7d4fb455fc027408a1fa4347835cbbd956658f41b72b5138cfe7369ca41327f2511e07743b2193d2461266cde88a73480d07b923e21407ba369038b5e2ad7b5ad4d55f1ce859243a61e0b7bd690c7d6dfb6e1597438a7ceb57b65789db1259b138f52c3771a0bfcd1fb4830a695ac8c6f248724198bae8073525d302bfd9dabbd74d42116277b6209e399a2bf2e215862a5d79ec336c43860e7b18b053608d6924d87f5ca09294a0c5d4c5c4060166342cb8e34b7686fa9d8ca54d32d9ea2414dcfe3ac64f9539006a89e373db3679", @ANYRES16=r0], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x30}, 0x94) (async) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x10f, 0x8a, &(0x7f00000000c0), 0x4) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) unshare(0x10010800) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r7}, 0x10) (async) r8 = socket$inet6(0x10, 0x3, 0x0) (async) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r9}, 0x10) (async) sendto$inet6(r8, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x40, 0x0, 0x27) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$nl_audit(0x10, 0x3, 0x9) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000090000000d0000000000000205008e932833765d0e8c000000e1006100003e2e00"], &(0x7f00000000c0)=""/81, 0x2d, 0x51, 0x0, 0xffffffff, 0x10000, @value=r1}, 0x28) 646.756922ms ago: executing program 4 (id=3799): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'virt_wifi0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'virt_wifi0\x00', 0x0}) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000060a0b0400000000000000000200fffe540004802800018007000100637400001c0002800800014000000002080002400000000f05000300010000002800018007000100637400001c0002800800024000000011080004400000000c05000300010000000900010073797a30000000000900020073797a32"], 0xa8}, 0x1, 0x0, 0x0, 0x840}, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000000)={@remote, r2}, 0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@newtfilter={0x24, 0x11, 0xd27, 0x2000, 0x0, {0x0, 0x0, 0x74, r2, {}, {0xafabc05531515610, 0xfff3}, {0xf, 0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x1c005}, 0x4008054) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r4, 0x29, 0x24, &(0x7f00000000c0), 0x19) (async) setsockopt$sock_attach_bpf(r4, 0x29, 0x24, &(0x7f00000000c0), 0x19) sendmsg$kcm(r4, &(0x7f0000000000)={&(0x7f0000000400)=@l2tp6={0xa, 0x0, 0x7, @mcast1, 0x7}, 0x80, &(0x7f0000000480)=[{&(0x7f0000001540)="f4000900062b3325fe80000000000cd1", 0x10}, {&(0x7f0000000240)="45f289a31a11d10c1101fb2cc62ff73459000ec82c600374", 0x18}], 0x2}, 0x20000884) (async) sendmsg$kcm(r4, &(0x7f0000000000)={&(0x7f0000000400)=@l2tp6={0xa, 0x0, 0x7, @mcast1, 0x7}, 0x80, &(0x7f0000000480)=[{&(0x7f0000001540)="f4000900062b3325fe80000000000cd1", 0x10}, {&(0x7f0000000240)="45f289a31a11d10c1101fb2cc62ff73459000ec82c600374", 0x18}], 0x2}, 0x20000884) setsockopt$inet6_mreq(r1, 0x29, 0x1c, &(0x7f0000000040)={@remote, r2}, 0x14) 569.422138ms ago: executing program 3 (id=3801): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="500000000206030000000000000000000d0000000c000300686173683a69700005000400000000000900020073797a31000000000c000780080008400000005d05000500020000000500010006"], 0x50}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000740)={0x40, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0xfffffffe}}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x8}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) recvmsg(r4, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPSET_CMD_LIST(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) r5 = socket$unix(0x1, 0x2, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x4d2f02, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="120000000400000004000000"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r7, &(0x7f0000000340), &(0x7f00000002c0)=@tcp6=r6}, 0x20) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r9 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r9, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) recvmsg(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000003700)=""/4074, 0xfea}], 0x1}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@deltaction={0x70, 0x31, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@TCA_ACT_TAB={0x58, 0x1, [{0x10, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0x10, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0xe, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x400}}, {0x10, 0x18, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}]}, @TCA_ACT_TAB={0x4}]}, 0x70}}, 0x0) r10 = socket(0x1, 0x3, 0x0) setsockopt$sock_timeval(r10, 0x1, 0x14, &(0x7f0000000040)={0x0, 0x2710}, 0x10) recvmsg(r10, &(0x7f0000003780)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=@newtfilter={0x54, 0x2c, 0xd27, 0x30bd29, 0x40000002, {0x0, 0x0, 0x0, r8, {0x0, 0x6}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0x7}, {0x7, 0xffffffffffffff5c}}}]}]}]}}]}, 0x54}}, 0x0) 472.123675ms ago: executing program 0 (id=3802): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) (async) sendto$inet6(r0, &(0x7f00000000c0)="678a1f03f362349c4b8ff6ef26b19dbd3e0400d9668e5e89a4d7cd67f8dcbbd47f8df4faa8104b39c4eb7b7eccf9d72eda44e10dcc9f167a6e4e88da69c036bb643b6e543470bb9230aa354fabc6f4bada489d0de7423b90257071bd49221967b48f6d872509b75edba4850277b25e561f209159c97789431800e034d18642680ec46375135650740dac9e81c7c254b0845a54fad79d1d370cbbde86d3788ad5f6d3575c", 0xa4, 0x20, &(0x7f000005ffe4)={0xa, 0x4e25, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x2, @loopback, 0xfffffffd}}, 0x0, 0x0, 0x500, 0x0, 0x54, 0x6}, 0x9c) 470.377589ms ago: executing program 4 (id=3803): socket(0xa, 0x3, 0x3a) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r2}, 0x10) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000440)='\x00'/16, 0x10) accept4(r3, 0x0, 0x0, 0x80000) r4 = socket$netlink(0x10, 0x3, 0x10) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$inet6(r5, &(0x7f0000003b80)=[{{0x0, 0xd, &(0x7f00000003c0)=[{&(0x7f00000000c0)="e6", 0x1}], 0x1, 0x0, 0x0, 0x7000300}}, {{0x0, 0x500, &(0x7f0000000740)=[{&(0x7f0000000440)='&', 0x23fff}], 0x1}, 0xff03}], 0x4000070, 0x8000) r6 = socket$netlink(0x10, 0x3, 0x2) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r6, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000200), 0x4) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="ac0000000001010400000000000000000a0000003c0001802c000180140003000000000000000000000000000000000014000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8000000000000000000000000000aa0c00028005000100000000000800074000000000180006801400040020"], 0xac}, 0x1, 0x0, 0x0, 0x4000}, 0x4000894) socket(0x10, 0x803, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0x806000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={0x0, 0x0, 0x2a, 0x0, 0x1}, 0x28) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x100000c, 0x11, r0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="8a1ba1721b9f2257700a7c8e3c1cbf890000200000000401"], &(0x7f0000000300)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r8, 0x0, 0xfffffffffffffffe}, 0x18) r9 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r9, 0x0, 0x0) 360.644408ms ago: executing program 3 (id=3804): bind$unix(0xffffffffffffffff, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) listen(0xffffffffffffffff, 0x5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x6, &(0x7f0000000040)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000"], &(0x7f0000000000)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x40}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001000)={{0x14}, [@NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x54}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001000)={{0x14}, [@NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x54}}, 0x0) socket$unix(0x1, 0x1, 0x0) (async) r1 = socket$unix(0x1, 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f00000006c0)=ANY=[@ANYBLOB="9feb01001800000000000000169e7dafadbc300507000000002e2e61305f00"], 0x0, 0x1f, 0x0, 0x0, 0x4cee, 0x10000}, 0x28) unshare(0x22020400) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) r2 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r2, 0x0, 0x0) (async) sendmsg$kcm(r2, 0x0, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r2, 0x119, 0x1, &(0x7f00000000c0), 0x4) connect$unix(r1, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e) (async) connect$unix(r1, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e) socket$nl_sock_diag(0x10, 0x3, 0x4) (async) socket$nl_sock_diag(0x10, 0x3, 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a310000000068000000060a010400000000000000000100000008000b4000000000400004802800018007000100637400001c000280080001400000000108000240000000090500030000000000140001800a0001007265646972000000040002800900010073797a30"], 0xdc}, 0x1, 0x0, 0x0, 0x5090}, 0x4000000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={0x0, 0x0, 0x34}, 0x28) socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0xffffffffffffff62, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="280500003d0007010000000000000000017c0000040000000c0003800000080065580000040502"], 0x528}}, 0xc000) 282.627518ms ago: executing program 3 (id=3805): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) (async) setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, &(0x7f0000000000)=[{0x0, 0x0, {0x1, 0xff, 0x3}, {0x0, 0x1, 0x1}, 0xfd, 0xfd}, {0x3, 0x0, {0x1, 0x1, 0x4}, {0x0, 0x65ba71d274209aca, 0x2}, 0x2, 0xff}, {0x2, 0x3, {0x2, 0xff}, {}, 0xfd, 0xfd}, {0x2, 0x2, {0x2, 0x1, 0x4}, {0x0, 0xf0, 0x3}, 0xfe, 0xfd}], 0x80) (async, rerun: 64) syz_emit_ethernet(0x33e, &(0x7f0000000300)={@multicast, @remote, @void, {@ipv6={0x86dd, @gre_packet={0x3, 0x6, "5dba33", 0x308, 0x2f, 0xff, @empty, @mcast2, {[@routing={0x2f, 0xa, 0x2, 0xff, 0x0, [@mcast2, @remote, @private1, @loopback, @mcast1]}], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x880b, 0xf6, 0x0, [0x5], "20fb91ca1f6ef33bdb93220363731a6374b45c2b92acbb6200d6afdf874854c9bda7d1dcf9917df6c65145b30ae5aed29c8dc0e586d979777d0030852cfeee2ca98a7461018ea1e0c5f0721ca14791c3648cb19240c170eebe78f42d5f2c59ef098a7ede2c01b722375453f5498bbeebeb07258299730ea90948e1ce781c91017c14d37e1c9b12e5074063e4215b5a4be6892bd0939adbf3acb9ec21bda71711dd07a5a9512f14e30f729a9ad8c4e3e50f5ed75823df1ac42e33229ef75408002e3dd917d1a19e832e0b7bf4426ebf55ff58ffeb1ae17df948d6bb99584421601bbf5088a1733886b094b9720cdf4a5df82ac4f5b5a2"}, {0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800, [0x7, 0x1000, 0xa], "89cbb0a123ec6edbaa4b497893cfe94e0fb5bf8d879d97e54c949e685ee9d76ba33bae1550377b17983720660349"}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, [0x4, 0x7fff, 0x3], "bcacda403c250e7831a8a1f2c9d1eecbff849a9344d34370a8ce1a575d639c11d4248151d0b8be843cff18ca00d7aec87b3daafaaeda85266d75fe08bf13f386df2e36d46dc3e295cbec195ec07336291520c5d5564dc5c67739dc5821c9cf9f765b87b9c41a294f2bbc97ee42c54387a5a7489635d464a4f38dcb"}, {0x8, 0x88be, 0x4, {{0x2, 0x1, 0x40, 0x2, 0x1, 0x2, 0x4, 0x6}, 0x1, {0x2}}}, {0x8, 0x22eb, 0x2, {{0x7, 0x2, 0x4, 0x0, 0x1, 0x1, 0x0, 0x8}, 0x2, {0x0, 0x9, 0x3, 0x1d, 0x0, 0x0, 0x2}}}, {0x8, 0x6558, 0x1, "6ae83fb6e4d67929a95af6ce7bae2619e1d4dffea98f661e8e6a3131424158ffeed8e39da30378177b37a3df8f3c7e40e6a992a622fe3f1e76b34ecf1902329a47872757492818ab0a7cd636ffc5ff4d1daa17826e4915d5e99fc095f0bb0e919e73edc5dceba11dc7bc3cc188d62d749424010e2e67efcde1d22dce87c94b87f7f930de33e9da72444972439681ec2da547c0fcadfaae46d3f102a37cf4073f43d52b598c3965c3e0a95a2aa1ba308523ae0a132ee7d5c8990c0f6c8b8e75"}}}}}}}, 0x0) (rerun: 64) 195.748946ms ago: executing program 3 (id=3806): r0 = socket$kcm(0x10, 0x2, 0x4) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000940)=[{&(0x7f0000000400)=""/248, 0xf8}, {&(0x7f0000000840)=""/41, 0x29}, {&(0x7f0000000880)=""/62, 0x3e}, {&(0x7f00000008c0)}, {&(0x7f0000000900)=""/13, 0xd}], 0x5, 0x0, 0x0, 0x200000}, 0x1f00) (async) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) (async, rerun: 32) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000001c0)="39000000140081ae0000dc676f97daf01e2357f9ffffffffffffff0521018701546fabca1b4e8a06a6580e88370200c54c1960b89c40ebb373", 0x39}], 0x1}, 0x0) (async, rerun: 32) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0xffffffffffffffb0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000002b0009ef"], 0x14}}, 0x84) (async, rerun: 32) recvmmsg(r4, &(0x7f0000003bc0)=[{{0x0, 0x0, 0x0}, 0x8}], 0x1, 0x10000, 0x0) (rerun: 32) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000001080)='dctcp\x00', 0x6) (async) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) (async) sendto$inet(r3, 0x0, 0x0, 0x24040ffd, &(0x7f0000000440)={0x2, 0x4e23, @local}, 0x10) (async) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) pwritev(r5, &(0x7f0000000080)=[{&(0x7f00000002c0)='\x00!', 0x2}], 0xa, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000004c0)={0xffffffffffffffff, &(0x7f0000000400)="e8", &(0x7f0000000480)=@tcp6, 0x1}, 0x20) (async, rerun: 64) recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000540)=@sco={0x1f, @fixed}, 0x80, &(0x7f0000000340)=[{&(0x7f00000005c0)=""/219, 0xdb}, {&(0x7f00000006c0)=""/74, 0x4a}], 0x2, &(0x7f0000000740)=""/134, 0x86}, 0x40000021) (async, rerun: 64) sendto$inet(r3, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x182, 0x0, 0x27) (async) r6 = socket$nl_rdma(0x10, 0x3, 0x14) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async, rerun: 64) r8 = socket(0xa, 0x2, 0x0) (rerun: 64) getsockopt$nfc_llcp(r8, 0x88, 0xb, 0x0, 0x20000000) (async) r9 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000300)={'syzkaller1\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0xd}}) (async) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="1400000010000100000000000000000000000000000000010000000900010073797a30000000006c000000160a01020000000000000000010000000900010073797a30000000000900020073797a3000000000420003802c00038004000100766c616e31000000000000000000000014000100776c616e3100000000000000000000000800014000"/155], 0xfc}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async) write$tun(0xffffffffffffffff, &(0x7f00000003c0)={@val={0x0, 0x9200}, @void, @ipv4=@tipc={{0x6, 0x4, 0x1, 0x7, 0x36, 0x66, 0x0, 0x1, 0x6, 0x0, @multicast2, @empty, {[@end]}}, @payload_conn={{{0x1e, 0x0, 0x1, 0x0, 0x0, 0x6, 0x2, 0x2, 0x2, 0x0, 0x2, 0x6, 0x2, 0x0, 0x9, 0x6, 0x3, 0x4e20, 0x4e20}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}, 0x3a) (async) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x30, 0x1410, 0x1, 0x70bd2c, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x24044836}, 0xc094) 184.256136ms ago: executing program 2 (id=3807): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) (async) unshare(0x22020400) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_buf(r2, 0x6, 0x1a, 0xffffffffffffffff, &(0x7f0000000300)) (async) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x20, 0x0, 0x2, 0x401, 0x0, 0x0, {0x2, 0x0, 0x4}, [@CTA_EXPECT_TUPLE={0x4}, @CTA_EXPECT_MASK={0x4}, @CTA_EXPECT_MASTER={0x4}]}, 0x20}}, 0x0) (async) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000001800010d00000000000000850a000000000000000500000014000500200100000000000000000100000000001c00090008000000", @ANYRES32=r3], 0x4c}}, 0x40000) (async) socket$rds(0x15, 0x5, 0x0) sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0xfc) 149.613039ms ago: executing program 4 (id=3808): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6(0xa, 0x3, 0x20) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}, 0x1c) (async) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast1}, 0x18) (async) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)={0x2c, 0x40, 0x107, 0xfffffffe, 0xfffffffe, {0x17, 0x7c}, [@nested={0x4, 0x342}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x8, 0x2, 0x0, 0x1, [@nested={0x4, 0xf}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2004c000}, 0xc000) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), 0xffffffffffffffff) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c56c85a43000900000000000400000003000000"], 0x14}}, 0x24000044) sendmsg$IEEE802154_LLSEC_GETPARAMS(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, r3, 0x800, 0x70bd25, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x48081}, 0x88c0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xb, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0xf102, 0x0, 0x0, 0x0, 0x2000}, [@printk={@p, {0x3, 0x3, 0x6}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x40}, {0x85, 0x0, 0x0, 0xca}}]}, &(0x7f0000000400)='GPL\x00', 0x1, 0xd8, &(0x7f0000000440)=""/216}, 0x94) (async) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) setsockopt(r0, 0x400, 0x1, &(0x7f0000000300)="470f3724df7d078cc4a433d5af8fa6ff83eaf2a62606c8ca83baff7eacd67e177274478391775767660f06b3fbc947bbedb5b019", 0x34) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@call={0x85, 0x0, 0x0, 0x20}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x25, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={0xffffffffffffffff, 0x58, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$sock_inet6_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f00000002c0)={@private1, 0x5b, r6}) 87.953331ms ago: executing program 3 (id=3809): socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket(0x10, 0x3, 0x0) epoll_create1(0x0) (async) socket(0x1, 0x80802, 0x0) r0 = epoll_create1(0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_generic(0x10, 0x3, 0x10) (async) shutdown(r1, 0x0) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e22, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in={{0x2, 0x4e21, @remote}}}, &(0x7f0000000040)=0x84) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) socket$packet(0x11, 0x2, 0x300) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="64002f91918cc6e56a9800"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r3, @ANYRES32=r0, @ANYRES32, @ANYRES32=r2], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) 87.455751ms ago: executing program 2 (id=3810): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a3000000000400000001b0a01080000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a30"], 0xd8}}, 0x80) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x1041, 0x0, 0x0) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r1}, 0x10) (async) unshare(0x62040200) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) (async) setsockopt$packet_fanout_data(r2, 0x107, 0x16, &(0x7f0000000100)={0x1, &(0x7f0000000540)=[{0x6, 0x37, 0x0, 0x9}]}, 0x10) (async) unshare(0x22020400) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r3, 0x107, 0x16, &(0x7f0000000100)={0x1, &(0x7f0000000180)=[{0x6}]}, 0x10) openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) 66.30255ms ago: executing program 3 (id=3811): r0 = socket(0x15, 0x5, 0x0) r1 = socket(0x2b, 0x80801, 0x1) connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e23, 0xab, @empty, 0x1}, 0x1c) setsockopt$IP_VS_SO_SET_ZERO(r1, 0x0, 0x480, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000080)={@broadcast, @empty, 0x0}, &(0x7f0000000180)=0xc) sendmsg$nl_route_sched(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000200)=@getchain={0x34, 0x66, 0x200, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0xd, 0xfff2}, {0x0, 0x8}, {0xfff8, 0xffe1}}, [{0x8}, {0x8, 0xb, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x48885}, 0x40000) socket$inet(0x2, 0x80800, 0x8) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x7, &(0x7f00000002c0)=0x8, 0x4) connect$l2tp6(r0, &(0x7f0000000740)={0xa, 0x0, 0x0, @private1}, 0x20) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x96}, 0x1c) sendmsg(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd", 0x5}], 0x1, 0x0, 0x0, 0x11000000}, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000000), 0x4) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000000), 0x8) r7 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000000), 0x4) r8 = socket$l2tp(0x2, 0x2, 0x73) sendto$inet(r8, 0x0, 0xfffffffffffffea5, 0x24000001, &(0x7f0000000040)={0x2, 0x3f, @loopback}, 0x10) sendmsg$kcm(r7, &(0x7f00000000c0)={&(0x7f0000000100)=@qipcrtr={0x2a, 0x4, 0x1}, 0x80, &(0x7f0000000500)=[{&(0x7f00000006c0)="27031c00160014000000002f1eafacf706e105400000894f00050005ee0b80558ddbba9b37242d37a518fc9c5be50eaf07c3650596", 0xfdac}], 0x1}, 0x4) 0s ago: executing program 4 (id=3812): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x4000002, 0x3032, 0xffffffffffffffff, 0x2a1cf000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], 0x0}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000d00)=ANY=[], &(0x7f0000000740)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000a80)='mm_page_free_batched\x00', r1}, 0x18) r2 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000568000/0x2000)=nil, 0x1000000, 0x0, 0x11, r2, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xffffffc1) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, r3, 0x0) mmap(&(0x7f0000ba5000/0x3000)=nil, 0x3000, 0x8, 0x22051, r3, 0x0) (async) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaf1}, 0x8) (async, rerun: 64) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async, rerun: 64) sendmmsg$inet6(r0, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x70, &(0x7f0000000580)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x0) (async) sendmmsg$inet6(r0, &(0x7f0000002740)=[{{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f0000000300)="9b", 0x1}, {0x0}], 0x2}}, {{0x0, 0x0, &(0x7f0000001b00)=[{&(0x7f00000017c0)="f00924a100767ff70d6297cd9fac1ec3f751", 0x12}, {0x0}], 0x2}}], 0x2, 0x20000010) (async, rerun: 32) r4 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)={0x30, r5, 0x5, 0x0, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_SETUP={0x8, 0x70, [@NL80211_MESH_SETUP_IE={0x4}]}]}, 0x30}}, 0x0) (async) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r1, &(0x7f0000000400)="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", &(0x7f00000005c0)=""/185}, 0x20) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x40810, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x24000011}, 0x4000000) (async) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000006c0015000000d9fece23b82004000000", @ANYRES32=r8, @ANYBLOB="00008000000000001800348005"], 0x38}, 0x1, 0x300}, 0x0) r9 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r9, &(0x7f0000000140), 0x4924b68, 0x0) (async) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000001c0)={0x0, 0xffff, 0x1, [0x6]}, 0xa) kernel console output (not intermixed with test programs): asing backup interface [ 287.316772][T14212] 8021q: adding VLAN 0 to HW filter on device bond0 [ 287.368750][T14225] !: renamed from dummy0 [ 287.391384][T14223] __nla_validate_parse: 18 callbacks suppressed [ 287.391403][T14223] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2193'. [ 287.456725][T14232] wg1 speed is unknown, defaulting to 1000 [ 287.540335][T14242] netlink: 'syz.0.2199': attribute type 13 has an invalid length. [ 287.594563][T14244] netlink: 3 bytes leftover after parsing attributes in process `syz.0.2199'. [ 287.655253][T14245] syz.0.2199 uses old SIOCAX25GETINFO [ 287.831895][ T7874] wg1 speed is unknown, defaulting to 1000 [ 287.858873][ T7874] syz0: Port: 1 Link DOWN [ 287.912402][T14247] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 287.936655][T14247] tipc: Enabling of bearer rejected, already enabled [ 287.997195][T14251] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2202'. [ 288.106627][T14258] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2204'. [ 288.127046][T14260] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2205'. [ 288.282741][T14282] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2212'. [ 288.338670][T14287] block nbd0: NBD_DISCONNECT [ 288.349092][T14287] block nbd0: Send disconnect failed -32 [ 288.350400][T14282] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2212'. [ 288.380548][T14287] block nbd0: shutting down sockets [ 288.414623][ C0] blk_print_req_error: 138 callbacks suppressed [ 288.414642][ C0] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 288.430009][ C0] buffer_io_error: 138 callbacks suppressed [ 288.430026][ C0] Buffer I/O error on dev nbd0, logical block 0, async page read [ 288.443719][ C0] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 288.452798][ C0] Buffer I/O error on dev nbd0, logical block 1, async page read [ 288.460597][ C0] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 288.469682][ C0] Buffer I/O error on dev nbd0, logical block 2, async page read [ 288.477487][ C0] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 288.486555][ C0] Buffer I/O error on dev nbd0, logical block 3, async page read [ 288.517635][ T5847] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 288.527666][ T5847] Buffer I/O error on dev nbd0, logical block 0, async page read [ 288.537158][ T5847] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 288.545855][T14310] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2219'. [ 288.546297][ T5847] Buffer I/O error on dev nbd0, logical block 1, async page read [ 288.591375][ T5847] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 288.601595][ T5847] Buffer I/O error on dev nbd0, logical block 2, async page read [ 288.611241][ T5847] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 288.629854][ T5847] Buffer I/O error on dev nbd0, logical block 3, async page read [ 288.640251][ T5847] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 288.648214][T14318] tipc: Enabling of bearer rejected, already enabled [ 288.652709][ T5847] Buffer I/O error on dev nbd0, logical block 0, async page read [ 288.668934][ T5847] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 288.681199][ T5847] Buffer I/O error on dev nbd0, logical block 1, async page read [ 288.713223][ T5847] ldm_validate_partition_table(): Disk read failed. [ 288.723666][ T5847] Dev nbd0: unable to read RDB block 0 [ 288.732319][ T5847] nbd0: unable to read partition table [ 288.748929][ T5847] ldm_validate_partition_table(): Disk read failed. [ 288.755391][T14325] netlink: 180 bytes leftover after parsing attributes in process `syz.4.2224'. [ 288.764892][ T5847] Dev nbd0: unable to read RDB block 0 [ 288.776976][ T5847] nbd0: unable to read partition table [ 288.812954][T14325] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2224'. [ 288.884643][ T5847] udevd[5847]: failed to send result of seq 13869 to main daemon: Connection refused [ 289.211943][T14362] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.296433][T14362] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.387947][T14362] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.440878][T14391] netlink: 'syz.2.2241': attribute type 4 has an invalid length. [ 289.459225][T14394] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on [ 289.507218][T14362] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.576841][T13556] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.596937][T13556] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.649802][T13556] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.695373][ T13] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.988731][T14427] tipc: Enabled bearer , priority 0 [ 290.013143][T14427] syzkaller0: entered promiscuous mode [ 290.021353][T14429] RDS: rds_bind could not find a transport for ::ffff:100.1.1.2, load rds_tcp or rds_rdma? [ 290.038423][T14427] syzkaller0: entered allmulticast mode [ 290.057714][T14427] tipc: Resetting bearer [ 290.082014][T14426] tipc: Resetting bearer [ 290.105675][T14426] tipc: Disabling bearer [ 290.112299][T14374] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 290.179141][T14432] syzkaller0: entered promiscuous mode [ 290.213206][T14432] syzkaller0: entered allmulticast mode [ 290.239841][T14431] tipc: Enabled bearer , priority 0 [ 290.288177][T14438] wg1 speed is unknown, defaulting to 1000 [ 290.347596][T14431] tipc: Resetting bearer [ 290.464050][T14431] tipc: Disabling bearer [ 290.591342][T14446] wg1 speed is unknown, defaulting to 1000 [ 290.834990][ T13] net_ratelimit: 25 callbacks suppressed [ 290.835011][ T13] bond1: (slave ip6gretap2): failed to get link speed/duplex [ 290.916458][T14441] syzkaller0: entered promiscuous mode [ 290.922112][T14441] syzkaller0: entered allmulticast mode [ 290.966339][ T74] bond1: (slave ip6gretap2): failed to get link speed/duplex [ 291.094674][ T74] bond1: (slave ip6gretap2): failed to get link speed/duplex [ 291.161523][T14472] validate_nla: 1 callbacks suppressed [ 291.161541][T14472] netlink: 'syz.1.2262': attribute type 1 has an invalid length. [ 291.204302][ T74] bond1: (slave ip6gretap2): failed to get link speed/duplex [ 291.334433][T13557] bond1: (slave ip6gretap2): failed to get link speed/duplex [ 291.374237][T14489] tap0: tun_chr_ioctl cmd 1074025677 [ 291.379741][T14489] tap0: linktype set to 780 [ 291.454474][ T74] bond1: (slave ip6gretap2): failed to get link speed/duplex [ 291.584292][ T74] bond1: (slave ip6gretap2): failed to get link speed/duplex [ 291.621215][T14494] wg1 speed is unknown, defaulting to 1000 [ 291.726209][T13556] bond1: (slave ip6gretap2): failed to get link speed/duplex [ 291.798112][T14514] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 291.904718][T13555] bond1: (slave ip6gretap2): failed to get link speed/duplex [ 292.034045][ T74] bond1: (slave ip6gretap2): failed to get link speed/duplex [ 292.262481][T14539] netlink: 'syz.4.2281': attribute type 1 has an invalid length. [ 292.472593][T14549] netlink: 'syz.2.2283': attribute type 3 has an invalid length. [ 292.563219][T14552] sctp: [Deprecated]: syz.2.2284 (pid 14552) Use of int in max_burst socket option. [ 292.563219][T14552] Use struct sctp_assoc_value instead [ 292.810337][T14559] netlink: 'syz.3.2286': attribute type 1 has an invalid length. [ 292.829410][T14559] __nla_validate_parse: 10 callbacks suppressed [ 292.829430][T14559] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2286'. [ 292.859505][T14561] pim6reg1: entered promiscuous mode [ 292.876273][T14561] pim6reg1: entered allmulticast mode [ 293.029835][T14573] netlink: 'syz.0.2292': attribute type 2 has an invalid length. [ 293.055907][T14581] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2290'. [ 293.062319][T14573] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2292'. [ 293.078982][T14581] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2290'. [ 293.407711][T14610] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2302'. [ 293.475691][T14611] netlink: 'syz.1.2300': attribute type 1 has an invalid length. [ 293.655481][T14620] pim6reg1: entered allmulticast mode [ 293.980914][T14631] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2310'. [ 294.010533][T14631] erspan0: entered promiscuous mode [ 294.022920][T14631] vlan4: entered promiscuous mode [ 294.118443][T14633] tipc: Enabled bearer , priority 0 [ 294.141737][T14640] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2313'. [ 294.147964][T14633] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2311'. [ 294.153735][T14640] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2313'. [ 294.170354][T14640] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2313'. [ 294.263526][T14635] wg1 speed is unknown, defaulting to 1000 [ 294.275133][T14632] tipc: Resetting bearer [ 294.359780][T14632] tipc: Disabling bearer [ 294.382970][T14636] wg1 speed is unknown, defaulting to 1000 [ 294.582235][T14657] wg1 speed is unknown, defaulting to 1000 [ 294.589565][T14664] netlink: 'syz.1.2321': attribute type 1 has an invalid length. [ 294.823063][T14678] RDS: rds_bind could not find a transport for fc01::10, load rds_tcp or rds_rdma? [ 294.862612][T14681] team0: Port device sit3 added [ 294.941825][T14678] 8021q: adding VLAN 0 to HW filter on device team0 [ 295.165414][T14701] tipc: Enabling of bearer rejected, failed to enable media [ 295.178215][T14701] xt_socket: unknown flags 0xd0 [ 295.278304][T14709] veth0: entered promiscuous mode [ 295.294787][T14711] veth0 (unregistering): left promiscuous mode [ 295.460345][T14717] sctp: [Deprecated]: syz.2.2336 (pid 14717) Use of int in max_burst socket option. [ 295.460345][T14717] Use struct sctp_assoc_value instead [ 295.917970][T13556] net_ratelimit: 37 callbacks suppressed [ 295.917991][T13556] bond1: (slave ip6gretap2): failed to get link speed/duplex [ 296.133989][T13557] bond1: (slave ip6gretap2): failed to get link speed/duplex [ 296.160302][T14746] tipc: Enabling of bearer rejected, failed to enable media [ 296.171235][T14746] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 296.179918][T14746] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 296.196670][T14743] wg1 speed is unknown, defaulting to 1000 [ 296.213055][T14741] wg1 speed is unknown, defaulting to 1000 [ 296.222454][T14750] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 296.307270][T14753] wg1 speed is unknown, defaulting to 1000 [ 296.444160][T13557] bond1: (slave ip6gretap2): failed to get link speed/duplex [ 296.634489][ T74] bond1: (slave ip6gretap2): failed to get link speed/duplex [ 296.739579][T14768] sch_fq: defrate 0 ignored. [ 296.773436][T14771] dvmrp1: tun_chr_ioctl cmd 1074025677 [ 296.782830][T14771] dvmrp1: linktype set to 769 [ 296.804285][T14771] dvmrp1: tun_chr_ioctl cmd 1074025677 [ 296.809864][T14771] dvmrp1: linktype set to 782 [ 296.834258][ T13] bond1: (slave ip6gretap2): failed to get link speed/duplex [ 296.865464][T14780] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 297.128011][ T13] bond1: (slave ip6gretap2): failed to get link speed/duplex [ 297.264317][T13555] bond1: (slave ip6gretap2): failed to get link speed/duplex [ 297.374455][T13556] bond1: (slave ip6gretap2): failed to get link speed/duplex [ 297.857565][T14847] __nla_validate_parse: 14 callbacks suppressed [ 297.857584][T14847] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2371'. [ 297.946649][T14851] wg1 speed is unknown, defaulting to 1000 [ 297.977836][T14847] vti0: entered promiscuous mode [ 297.983863][T14847] vti0: entered allmulticast mode [ 298.244713][T14861] siw: device registration error -23 [ 298.414272][T14866] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2377'. [ 298.477417][T14866] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2377'. [ 298.550251][T14866] netlink: 'syz.3.2377': attribute type 7 has an invalid length. [ 298.650107][T14877] Bluetooth: MGMT ver 1.23 [ 298.738417][T14882] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.2381'. [ 298.753568][T14882] netlink: 240 bytes leftover after parsing attributes in process `syz.1.2381'. [ 298.785408][T14885] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2382'. [ 298.796693][T14882] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.2381'. [ 298.807698][T14885] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2382'. [ 298.897447][T14894] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2383'. [ 299.225865][T14920] wg1 speed is unknown, defaulting to 1000 [ 299.486065][T14943] netlink: 'syz.4.2393': attribute type 7 has an invalid length. [ 299.646988][T14948] tipc: Enabled bearer , priority 0 [ 299.686654][ T5857] Bluetooth: hci4: link tx timeout [ 299.692103][ T5857] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 299.707041][T14958] syzkaller0: entered promiscuous mode [ 299.720108][T14958] syzkaller0: entered allmulticast mode [ 299.866959][T14948] tipc: Resetting bearer [ 299.879649][T14966] wg1 speed is unknown, defaulting to 1000 [ 300.056244][T14947] tipc: Resetting bearer [ 300.128778][T14947] tipc: Disabling bearer [ 300.140387][T14995] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2406'. [ 300.174447][T14996] netlink: 'syz.4.2405': attribute type 2 has an invalid length. [ 300.253141][T15000] (unnamed net_device) (uninitialized): option mode: invalid value (254) [ 300.435561][T15002] team0 (unregistering): left promiscuous mode [ 300.441768][T15002] batadv2: left promiscuous mode [ 300.471790][T15022] netlink: 'syz.1.2411': attribute type 15 has an invalid length. [ 300.563539][T15002] team0 (unregistering): Port device batadv2 removed [ 300.839107][T15051] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 300.959286][T15051] tipc: Enabled bearer , priority 0 [ 300.979632][T15056] syzkaller1: entered promiscuous mode [ 300.986511][T15056] syzkaller1: entered allmulticast mode [ 300.996038][T15051] syzkaller0: entered promiscuous mode [ 301.001690][T15051] syzkaller0: entered allmulticast mode [ 301.024173][ T13] net_ratelimit: 19 callbacks suppressed [ 301.024190][ T13] bond1: (slave ip6gretap2): failed to get link speed/duplex [ 301.056168][T15051] tipc: Resetting bearer [ 301.072189][T15065] wg1 speed is unknown, defaulting to 1000 [ 301.087441][T15050] tipc: Resetting bearer [ 301.110783][T15050] tipc: Disabling bearer [ 301.264225][ T13] bond1: (slave ip6gretap2): failed to get link speed/duplex [ 301.360651][T15084] macsec1: entered promiscuous mode [ 301.366082][T15084] batadv0: entered promiscuous mode [ 301.378649][T15084] macsec1: entered allmulticast mode [ 301.389900][T15084] batadv0: entered allmulticast mode [ 301.409912][T15084] batadv0: left allmulticast mode [ 301.419188][T15084] batadv0: left promiscuous mode [ 301.439770][T15088] 8021q: VLANs not supported on wlan1 [ 301.454441][T13555] bond1: (slave ip6gretap2): failed to get link speed/duplex [ 301.564717][T13556] bond1: (slave ip6gretap2): failed to get link speed/duplex [ 301.667147][T15098] wg1 speed is unknown, defaulting to 1000 [ 301.724010][T13556] bond1: (slave ip6gretap2): failed to get link speed/duplex [ 301.746549][T15107] IPVS: set_ctl: invalid protocol: 58 100.1.1.2:20003 [ 301.774651][ T5871] Bluetooth: hci4: command 0x0405 tx timeout [ 302.034190][T13559] bond1: (slave ip6gretap2): failed to get link speed/duplex [ 302.144187][ T74] bond1: (slave ip6gretap2): failed to get link speed/duplex [ 302.172230][T15130] netlink: 'syz.0.2441': attribute type 5 has an invalid length. [ 302.254772][ T74] bond1: (slave ip6gretap2): failed to get link speed/duplex [ 302.388746][T13559] bond1: (slave ip6gretap2): failed to get link speed/duplex [ 302.493653][T15142] wg1 speed is unknown, defaulting to 1000 [ 302.664375][T13559] bond1: (slave ip6gretap2): failed to get link speed/duplex [ 303.058415][T15176] __nla_validate_parse: 8 callbacks suppressed [ 303.058433][T15176] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2452'. [ 303.091014][T15177] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2454'. [ 303.451571][T15196] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2458'. [ 303.632517][T15204] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2460'. [ 303.756255][T15206] netlink: 1 bytes leftover after parsing attributes in process `syz.1.2461'. [ 303.793694][T15206] rdma_rxe: rxe_newlink: failed to add lo [ 303.814173][T15205] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 304.096761][T15227] syz_tun: entered allmulticast mode [ 304.112042][T15227] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2466'. [ 304.172502][T15227] syz_tun (unregistering): left allmulticast mode [ 304.358519][T15246] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2471'. [ 304.403479][T15246] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2471'. [ 304.503307][T15243] wg1 speed is unknown, defaulting to 1000 [ 304.534397][T15264] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2474'. [ 304.931757][T15296] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2486'. [ 304.958277][T15301] _ÐZ`Ô€@: entered promiscuous mode [ 304.971380][T15296] IPVS: Error connecting to the multicast addr [ 305.449331][T15337] wg1 speed is unknown, defaulting to 1000 [ 305.531516][T15332] wg1 speed is unknown, defaulting to 1000 [ 305.620501][T15342] sctp: [Deprecated]: syz.4.2500 (pid 15342) Use of int in maxseg socket option. [ 305.620501][T15342] Use struct sctp_assoc_value instead [ 305.780889][T15345] wg1 speed is unknown, defaulting to 1000 [ 305.897631][T15358] netlink: 'syz.1.2499': attribute type 13 has an invalid length. [ 305.973995][T15358] netlink: 'syz.1.2499': attribute type 17 has an invalid length. [ 306.041845][T15362] IPVS: Error connecting to the multicast addr [ 306.100607][T15358] bridge0: port 1(erspan0) entered blocking state [ 306.107205][T15358] bridge0: port 1(erspan0) entered forwarding state [ 306.117312][T15358] 8021q: adding VLAN 0 to HW filter on device bond0 [ 306.127149][T15358] 8021q: adding VLAN 0 to HW filter on device team0 [ 306.138111][T15358] net_ratelimit: 26 callbacks suppressed [ 306.138121][T15358] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 306.165845][T15352] wg1 speed is unknown, defaulting to 1000 [ 306.254106][ T12] bond1: (slave ip6gretap2): failed to get link speed/duplex [ 306.494138][T13559] bond1: (slave ip6gretap2): failed to get link speed/duplex [ 306.587587][T15398] macvlan2: entered allmulticast mode [ 306.593014][T15398] veth1_vlan: entered allmulticast mode [ 306.634436][T15398] veth1_vlan: left allmulticast mode [ 306.704480][T13557] bond1: (slave ip6gretap2): failed to get link speed/duplex [ 306.839404][T15399] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 306.854804][ T74] bond1: (slave ip6gretap2): failed to get link speed/duplex [ 306.984440][ T12] bond1: (slave ip6gretap2): failed to get link speed/duplex [ 307.094197][T15425] netlink: 'syz.3.2522': attribute type 1 has an invalid length. [ 307.124781][T13556] bond1: (slave ip6gretap2): failed to get link speed/duplex [ 307.200338][T15425] 8021q: adding VLAN 0 to HW filter on device bond4 [ 307.256196][T15426] 8021q: adding VLAN 0 to HW filter on device bond4 [ 307.293469][T15426] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address [ 307.296148][T15435] netlink: 'syz.0.2523': attribute type 10 has an invalid length. [ 307.313298][T15426] bond4: (slave vxcan3): Error -95 calling set_mac_address [ 307.333844][T15437] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 307.360556][T15434] bridge5: entered allmulticast mode [ 307.374094][T13555] bond1: (slave ip6gretap2): failed to get link speed/duplex [ 307.391846][T15438] netlink: 'syz.0.2523': attribute type 10 has an invalid length. [ 307.438029][T15438] bond0: (slave 0!): Enslaving as an active interface with an up link [ 307.494638][T13559] bond1: (slave ip6gretap2): failed to get link speed/duplex [ 307.614010][T13556] bond1: (slave ip6gretap2): failed to get link speed/duplex [ 307.689260][T15454] netlink: 'syz.3.2532': attribute type 83 has an invalid length. [ 308.143069][T15483] __nla_validate_parse: 16 callbacks suppressed [ 308.143088][T15483] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2537'. [ 308.311357][T15492] netlink: 'syz.3.2541': attribute type 2 has an invalid length. [ 308.327426][T15492] þ: entered promiscuous mode [ 308.541029][T15456] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 308.548217][T15507] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2545'. [ 308.565878][T15456] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 308.616667][T15456] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 308.622687][T15456] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 308.664811][T15456] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 308.670810][T15456] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 308.711952][T15456] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 308.721401][T15456] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 308.845316][T15529] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2549'. [ 308.856298][T15531] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2549'. [ 309.083117][T15544] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2551'. [ 309.132752][T15544] netlink: 'syz.0.2551': attribute type 5 has an invalid length. [ 309.237975][T15568] netlink: 'syz.2.2556': attribute type 32 has an invalid length. [ 309.268085][T15568] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2556'. [ 309.302096][T15568] (unnamed net_device) (uninitialized): Setting coupled_control to off (0) [ 309.745478][T15589] netlink: 'syz.3.2564': attribute type 10 has an invalid length. [ 309.859326][T15599] syzkaller1: entered promiscuous mode [ 309.872566][T15599] syzkaller1: entered allmulticast mode [ 309.917456][T15596] kthread_run failed with err -4 [ 310.063605][T15615] nbd: must specify a size in bytes for the device [ 310.358274][T15643] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2576'. [ 310.367392][T15644] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2576'. [ 310.485501][T15657] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2580'. [ 310.521338][T15660] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2581'. [ 310.641661][T15663] wg1 speed is unknown, defaulting to 1000 [ 311.164261][T13559] net_ratelimit: 29 callbacks suppressed [ 311.164281][T13559] bond1: (slave ip6gretap2): failed to get link speed/duplex [ 311.179038][T15701] validate_nla: 2 callbacks suppressed [ 311.179055][T15701] netlink: 'syz.2.2593': attribute type 10 has an invalid length. [ 311.204516][T15701] !: entered promiscuous mode [ 311.210948][T15701] bridge0: port 1(0!) entered blocking state [ 311.218809][T15701] bridge0: port 1(0!) entered disabled state [ 311.225255][T15701] !: entered allmulticast mode [ 311.309406][T15707] netlink: 'syz.1.2597': attribute type 6 has an invalid length. [ 311.324442][T13556] bond1: (slave ip6gretap2): failed to get link speed/duplex [ 311.334401][T15707] netlink: 'syz.1.2597': attribute type 5 has an invalid length. [ 311.365937][T15717] veth0_to_bridge: entered promiscuous mode [ 311.396619][T15710] veth0_to_bridge: left promiscuous mode [ 311.434099][T13556] bond1: (slave ip6gretap2): failed to get link speed/duplex [ 311.555349][T13555] bond1: (slave ip6gretap2): failed to get link speed/duplex [ 311.684467][T13559] bond1: (slave ip6gretap2): failed to get link speed/duplex [ 311.746277][T15752] netlink: 'syz.2.2610': attribute type 2 has an invalid length. [ 311.769571][T15752] tipc: Enabling of bearer rejected, failed to enable media [ 311.814497][T13559] bond1: (slave ip6gretap2): failed to get link speed/duplex [ 311.945952][T13559] bond1: (slave ip6gretap2): failed to get link speed/duplex [ 312.039114][T15765] wg1 speed is unknown, defaulting to 1000 [ 312.055868][T13559] bond1: (slave ip6gretap2): failed to get link speed/duplex [ 312.185399][T13559] bond1: (slave ip6gretap2): failed to get link speed/duplex [ 312.304084][T13557] bond1: (slave ip6gretap2): failed to get link speed/duplex [ 312.458477][T15805] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 312.541172][T15807] netem: change failed [ 312.569761][T15811] wg1 speed is unknown, defaulting to 1000 [ 312.571142][T15817] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 312.602960][T15817] bridge0: port 1(erspan0) entered disabled state [ 312.632849][T15810] wg1 speed is unknown, defaulting to 1000 [ 313.214534][T15840] __nla_validate_parse: 6 callbacks suppressed [ 313.214551][T15840] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2633'. [ 313.346939][T15845] tipc: Enabled bearer , priority 0 [ 313.422427][T15845] tipc: Disabling bearer [ 313.468423][T15854] bridge10: entered allmulticast mode [ 313.667538][T15869] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2641'. [ 313.677970][T15870] netlink: 'syz.0.2641': attribute type 10 has an invalid length. [ 313.735990][T15870] bond0: (slave wlan1): Opening slave failed [ 313.758181][T15866] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2643'. [ 314.020092][T15899] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2650'. [ 314.067335][T15899] IPv6: sit1: Disabled Multicast RS [ 314.068791][T15909] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2652'. [ 314.114872][T15899] sit1: entered allmulticast mode [ 314.131288][T15901] netlink: 244 bytes leftover after parsing attributes in process `syz.0.2650'. [ 314.170418][T15919] tipc: Enabled bearer , priority 0 [ 314.222330][T15922] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2657'. [ 314.286574][T15929] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2659'. [ 314.763683][T15959] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2667'. [ 314.780684][T15959] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2667'. [ 314.792499][T15959] mac80211_hwsim hwsim9 wlan0: left promiscuous mode [ 314.799672][T15959] bond5: left promiscuous mode [ 314.805826][T15959] bond8: left promiscuous mode [ 315.065681][T15972] syzkaller0: tun_chr_ioctl cmd 1074812117 [ 315.159349][T15979] wg1 speed is unknown, defaulting to 1000 [ 315.198722][T15985] netlink: 'syz.1.2673': attribute type 1 has an invalid length. [ 316.174587][ T74] net_ratelimit: 27 callbacks suppressed [ 316.174606][ T74] bond1: (slave ip6gretap2): failed to get link speed/duplex [ 316.291461][T16037] wg1 speed is unknown, defaulting to 1000 [ 316.374376][T13555] bond1: (slave ip6gretap2): failed to get link speed/duplex [ 316.585417][T13555] bond1: (slave ip6gretap2): failed to get link speed/duplex [ 316.627244][T16062] syzkaller1: entered promiscuous mode [ 316.633033][T16062] syzkaller1: entered allmulticast mode [ 316.714240][T13556] bond1: (slave ip6gretap2): failed to get link speed/duplex [ 316.844849][ T49] bond1: (slave ip6gretap2): failed to get link speed/duplex [ 316.984227][ T3025] bond1: (slave ip6gretap2): failed to get link speed/duplex [ 317.085696][T16101] netlink: 'syz.3.2703': attribute type 16 has an invalid length. [ 317.104007][T16101] netlink: 'syz.3.2703': attribute type 17 has an invalid length. [ 317.148458][T16101] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 317.184129][T13559] bond1: (slave ip6gretap2): failed to get link speed/duplex [ 317.297564][T13559] bond1: (slave ip6gretap2): failed to get link speed/duplex [ 317.454462][ T12] bond1: (slave ip6gretap2): failed to get link speed/duplex [ 317.470065][T16125] syzkaller1: entered promiscuous mode [ 317.478024][T16125] syzkaller1: entered allmulticast mode [ 317.519235][T16127] wg1 speed is unknown, defaulting to 1000 [ 318.270891][T16185] __nla_validate_parse: 229 callbacks suppressed [ 318.270910][T16185] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2727'. [ 318.307676][T16190] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2727'. [ 318.736659][T16220] wg1 speed is unknown, defaulting to 1000 [ 318.833006][T16227] veth0_to_team: entered promiscuous mode [ 318.848934][T16227] veth0_to_team: entered allmulticast mode [ 318.947369][T16231] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2740'. [ 319.012798][T16231] wg1 speed is unknown, defaulting to 1000 [ 319.535370][T16252] netlink: 'syz.1.2746': attribute type 1 has an invalid length. [ 319.652646][ T12] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.676797][ T12] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.696837][ T12] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.715135][ T12] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.737029][T16260] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2748'. [ 319.986442][T16268] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2750'. [ 320.019918][T16278] netlink: 47 bytes leftover after parsing attributes in process `syz.0.2752'. [ 320.074828][T16280] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2753'. [ 320.113256][T16280] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2753'. [ 320.237831][T16286] syz_tun: left promiscuous mode [ 320.247164][T16286] 8021q: adding VLAN 0 to HW filter on device bond0 [ 320.274561][ T7874] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 320.325395][T16293] tipc: Enabled bearer , priority 0 [ 320.380478][T16293] tipc: Disabling bearer [ 320.392132][T16299] netlink: 'syz.1.2761': attribute type 10 has an invalid length. [ 320.401043][T16299] veth0_vlan: left promiscuous mode [ 320.408151][T16299] veth0_vlan: entered promiscuous mode [ 320.414545][T16299] team0: Device veth0_vlan failed to register rx_handler [ 320.512009][T16306] netlink: 'syz.2.2763': attribute type 1 has an invalid length. [ 320.548340][T16306] 8021q: adding VLAN 0 to HW filter on device bond12 [ 320.592396][T16306] bond12: (slave geneve2): making interface the new active one [ 320.603834][T16306] bond12: (slave geneve2): Enslaving as an active interface with an up link [ 320.612838][ T12] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.627930][ T12] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.643142][T16314] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2766'. [ 320.645304][ T12] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.667414][T16314] netlink: 'syz.4.2766': attribute type 1 has an invalid length. [ 320.671326][ T12] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.712307][T16314] 8021q: adding VLAN 0 to HW filter on device bond10 [ 320.733852][T16320] 8021q: adding VLAN 0 to HW filter on device bond10 [ 320.741607][T16320] bond10: (slave vxcan1): The slave device specified does not support setting the MAC address [ 320.753505][T16320] bond10: (slave vxcan1): Error -95 calling set_mac_address [ 320.858165][T16326] netlink: 788 bytes leftover after parsing attributes in process `syz.0.2769'. [ 320.921510][T13557] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 320.940090][T13557] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 320.954007][T13557] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 320.989591][ T49] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 321.000953][T13557] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 321.135437][ T7874] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 321.246513][T13557] net_ratelimit: 28 callbacks suppressed [ 321.246535][T13557] bond1: (slave ip6gretap2): failed to get link speed/duplex [ 321.371394][T16350] netlink: 'syz.2.2778': attribute type 1 has an invalid length. [ 321.382688][T16353] netlink: 'syz.2.2778': attribute type 1 has an invalid length. [ 321.390648][ T12] bond1: (slave ip6gretap2): failed to get link speed/duplex [ 321.504591][ T12] bond1: (slave ip6gretap2): failed to get link speed/duplex [ 321.575273][T16366] (unnamed net_device) (uninitialized): option ad_select: invalid value (34) [ 321.614616][ T12] bond1: (slave ip6gretap2): failed to get link speed/duplex [ 321.734426][ T12] bond1: (slave ip6gretap2): failed to get link speed/duplex [ 321.864613][T13559] bond1: (slave ip6gretap2): failed to get link speed/duplex [ 321.972720][T16390] netlink: 'syz.0.2791': attribute type 21 has an invalid length. [ 321.981879][T13557] bond1: (slave ip6gretap2): failed to get link speed/duplex [ 322.014689][ T12] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 322.037768][ T12] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 322.083158][T16395] openvswitch: netlink: Message has 20 unknown bytes. [ 322.090434][T16395] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 322.096070][ T49] bond1: (slave ip6gretap2): failed to get link speed/duplex [ 322.188994][T16407] team0: No ports can be present during mode change [ 322.243318][T16413] netlink: 'syz.1.2796': attribute type 21 has an invalid length. [ 322.614566][T16431] erspan0: left allmulticast mode [ 322.638891][T16431] erspan0: left promiscuous mode [ 322.649180][T16431] bridge0: port 1(erspan0) entered disabled state [ 322.657419][T16432] netlink: 'syz.3.2802': attribute type 10 has an invalid length. [ 322.680438][ T7874] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 322.740410][T16432] tipc: Resetting bearer [ 322.746991][T16432] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 322.766884][T16432] batadv0: entered promiscuous mode [ 322.772308][T16432] batadv0: entered allmulticast mode [ 322.779780][T16432] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 322.828619][T16437] tap0: tun_chr_ioctl cmd 1074025677 [ 322.837384][T16437] tap0: linktype set to 823 [ 323.030151][T16447] wg1 speed is unknown, defaulting to 1000 [ 323.162707][T16457] netlink: 'syz.0.2812': attribute type 11 has an invalid length. [ 323.202136][T16460] netlink: 'syz.2.2813': attribute type 3 has an invalid length. [ 323.418191][T16465] "syz.0.2814" (16465) uses obsolete ecb(arc4) skcipher [ 323.494986][T16473] wg1 speed is unknown, defaulting to 1000 [ 323.791959][T16504] netlink: 'syz.3.2823': attribute type 1 has an invalid length. [ 323.791996][T16505] wg1 speed is unknown, defaulting to 1000 [ 324.080799][T16512] 8021q: adding VLAN 0 to HW filter on device bond5 [ 324.145068][T16504] bond5 (unregistering): Released all slaves [ 324.196251][T16523] __nla_validate_parse: 8 callbacks suppressed [ 324.196268][T16523] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2825'. [ 324.344683][T16529] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2828'. [ 324.368697][T16527] wg1 speed is unknown, defaulting to 1000 [ 324.454991][T16535] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2829'. [ 324.771197][T16562] netlink: 'syz.0.2839': attribute type 3 has an invalid length. [ 324.785317][T16551] syzkaller1: entered allmulticast mode [ 324.907441][T16576] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2841'. [ 325.252207][T16596] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2847'. [ 325.275774][T16602] can: request_module (can-proto-5) failed. [ 325.316612][T16596] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2847'. [ 325.547449][T16625] tipc: Enabling of bearer rejected, already enabled [ 325.742320][T16639] netlink: 'syz.1.2859': attribute type 2 has an invalid length. [ 325.774239][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 325.867362][T16639] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2859'. [ 326.198735][T16669] netlink: 786 bytes leftover after parsing attributes in process `syz.2.2869'. [ 326.314714][T13555] net_ratelimit: 28 callbacks suppressed [ 326.314732][T13555] bond1: (slave ip6gretap2): failed to get link speed/duplex [ 326.326432][T16688] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2872'. [ 326.454855][ T12] bond1: (slave ip6gretap2): failed to get link speed/duplex [ 326.501299][T16685] wg1 speed is unknown, defaulting to 1000 [ 326.704128][ T49] bond1: (slave ip6gretap2): failed to get link speed/duplex [ 326.784501][T16684] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 326.815897][ T49] bond1: (slave ip6gretap2): failed to get link speed/duplex [ 326.830954][T16705] wg1 speed is unknown, defaulting to 1000 [ 326.843366][ T5860] syz_tun (unregistering): left allmulticast mode [ 326.879085][T16707] wg1 speed is unknown, defaulting to 1000 [ 326.923292][ T5871] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 326.945522][ T5871] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 326.963700][ T5871] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 326.982474][ T5871] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 327.015149][T13555] bond1: (slave ip6gretap2): failed to get link speed/duplex [ 327.044446][ T5871] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 327.070160][ T5857] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 327.082370][ T5857] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 327.091921][ T5857] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 327.096753][T16725] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2880'. [ 327.118547][ T5857] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 327.133426][ T5857] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 327.165320][ T74] bond1: (slave ip6gretap2): failed to get link speed/duplex [ 327.246318][T16714] wg1 speed is unknown, defaulting to 1000 [ 327.252430][T16731] syzkaller1: entered promiscuous mode [ 327.259277][T16731] syzkaller1: entered allmulticast mode [ 327.477871][ T49] team0: Port device sit3 removed [ 327.544295][ T49] dvmrp0 (unregistering): left allmulticast mode [ 327.818673][ T49] bond0 (unregistering): Released all slaves [ 327.831304][ T49] bond1 (unregistering): Released all slaves [ 327.848235][ T49] bond2 (unregistering): Released all slaves [ 327.860782][ T49] bond3 (unregistering): Released all slaves [ 327.871714][ T49] bond4 (unregistering): Released all slaves [ 327.884977][ T49] bond5 (unregistering): Released all slaves [ 327.900508][ T49] bond6 (unregistering): Released all slaves [ 327.911084][ T49] bond7 (unregistering): Released all slaves [ 327.928069][ T49] bond8 (unregistering): Released all slaves [ 327.941969][ T49] bond9 (unregistering): Released all slaves [ 327.953241][ T49] bond10 (unregistering): Released all slaves [ 327.969652][T16738] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 327.980347][T16738] gretap1: entered promiscuous mode [ 327.986007][T16738] gretap1: entered allmulticast mode [ 328.001558][T16745] sch_tbf: burst 2 is lower than device lo mtu (11337746) ! [ 328.012531][T16746] sch_tbf: burst 2 is lower than device lo mtu (11337746) ! [ 328.024302][T16746] sch_tbf: burst 2 is lower than device lo mtu (11337746) ! [ 328.098118][ T49] tipc: Disabling bearer [ 328.103532][ T49] tipc: Disabling bearer [ 328.129985][T16760] netlink: 'syz.2.2890': attribute type 1 has an invalid length. [ 328.154313][ T49] tipc: Left network mode [ 328.158744][T13555] bond1: (slave ip6gretap2): failed to get link speed/duplex [ 328.173476][T16760] netlink: 'syz.2.2890': attribute type 1 has an invalid length. [ 328.187988][ T49] IPVS: stopping backup sync thread 10731 ... [ 328.290126][T16775] openvswitch: netlink: Message has 8 unknown bytes. [ 328.323295][T16758] wg1 speed is unknown, defaulting to 1000 [ 328.330030][ T74] bond1: (slave ip6gretap2): failed to get link speed/duplex [ 328.379055][T16714] chnl_net:caif_netlink_parms(): no params data found [ 328.943921][ T49] hsr_slave_0: left promiscuous mode [ 328.958316][ T49] hsr_slave_1: left promiscuous mode [ 329.034619][ T49] pimreg (unregistering): left allmulticast mode [ 329.215305][ T5871] Bluetooth: hci3: command tx timeout [ 329.282101][T16809] __nla_validate_parse: 5 callbacks suppressed [ 329.282117][T16809] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2898'. [ 329.314047][T16808] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2898'. [ 329.427466][T16819] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2901'. [ 329.682939][T16714] bridge0: port 1(bridge_slave_0) entered blocking state [ 329.690305][T16714] bridge0: port 1(bridge_slave_0) entered disabled state [ 329.704752][T16714] bridge_slave_0: entered allmulticast mode [ 329.712235][T16714] bridge_slave_0: entered promiscuous mode [ 329.758664][T16714] bridge0: port 2(bridge_slave_1) entered blocking state [ 329.774266][T16714] bridge0: port 2(bridge_slave_1) entered disabled state [ 329.791604][T16714] bridge_slave_1: entered allmulticast mode [ 329.798986][T16714] bridge_slave_1: entered promiscuous mode [ 329.908852][T16834] netlink: 176 bytes leftover after parsing attributes in process `syz.3.2903'. [ 329.918058][ T74] bond1: (slave ip6gretap2): failed to get link speed/duplex [ 329.930973][T16834] netlink: 176 bytes leftover after parsing attributes in process `syz.3.2903'. [ 329.941824][T16839] Unsupported ieee802154 address type: 0 [ 329.943041][T16714] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 329.952585][T16839] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2904'. [ 329.969917][T16714] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 329.985048][T16834] netlink: 176 bytes leftover after parsing attributes in process `syz.3.2903'. [ 330.015784][T16834] netlink: 176 bytes leftover after parsing attributes in process `syz.3.2903'. [ 330.029732][T16841] netlink: 'syz.2.2905': attribute type 2 has an invalid length. [ 330.029868][T16834] netlink: 176 bytes leftover after parsing attributes in process `syz.3.2903'. [ 330.050177][T16834] netlink: 176 bytes leftover after parsing attributes in process `syz.3.2903'. [ 330.075131][T16714] team0: Port device team_slave_0 added [ 330.089883][T16844] netlink: 'syz.2.2905': attribute type 2 has an invalid length. [ 330.125600][T16841] þ: entered promiscuous mode [ 330.140315][T16714] team0: Port device team_slave_1 added [ 330.237983][T16714] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 330.252872][T16714] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 330.289739][T16714] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 330.357982][T16861] syzkaller1: entered promiscuous mode [ 330.363473][T16861] syzkaller1: entered allmulticast mode [ 330.379814][T16714] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 330.388824][T16861] netlink: 'syz.2.2910': attribute type 9 has an invalid length. [ 330.397210][T16714] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 330.423242][T16714] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 330.489262][T16867] 8021q: adding VLAN 0 to HW filter on device bond5 [ 330.538664][T16881] netlink: 'syz.3.2918': attribute type 303 has an invalid length. [ 330.586634][T16881] netlink: 'syz.3.2918': attribute type 5 has an invalid length. [ 330.633167][T16877] wg1 speed is unknown, defaulting to 1000 [ 330.645670][T16714] hsr_slave_0: entered promiscuous mode [ 330.680421][T16714] hsr_slave_1: entered promiscuous mode [ 330.766158][T16891] netlink: 'syz.2.2920': attribute type 11 has an invalid length. [ 330.800692][T16891] !: left allmulticast mode [ 330.805685][T16891] !: left promiscuous mode [ 330.810322][T16891] bridge0: port 1(0!) entered disabled state [ 330.826782][T16891] bond12: (slave geneve2): Releasing active interface [ 330.863361][ T12] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.882052][ T12] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.914915][ T12] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.923280][ T12] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.294137][ T5871] Bluetooth: hci3: command tx timeout [ 331.446945][T16938] IPVS: set_ctl: invalid protocol: 1 224.0.0.2:65535 [ 331.454344][ T3025] net_ratelimit: 10 callbacks suppressed [ 331.454360][ T3025] bond1: (slave ip6gretap2): failed to get link speed/duplex [ 331.497975][T16714] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 331.576239][T16714] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 331.610373][T16714] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 331.659645][T16714] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 332.080320][ T3025] bond1: (slave ip6gretap2): failed to get link speed/duplex [ 332.126810][T16968] wg1 speed is unknown, defaulting to 1000 [ 332.197559][T16714] 8021q: adding VLAN 0 to HW filter on device bond0 [ 332.253581][T17000] wg1 speed is unknown, defaulting to 1000 [ 332.262283][T16714] 8021q: adding VLAN 0 to HW filter on device team0 [ 332.276635][ T74] bond1: (slave ip6gretap2): failed to get link speed/duplex [ 332.301602][T13556] bridge0: port 1(bridge_slave_0) entered blocking state [ 332.308720][T13556] bridge0: port 1(bridge_slave_0) entered forwarding state [ 332.334727][T17005] wg1 speed is unknown, defaulting to 1000 [ 332.338207][ T3025] bridge0: port 2(bridge_slave_1) entered blocking state [ 332.345355][T16998] netlink: 'syz.0.2949': attribute type 21 has an invalid length. [ 332.347620][ T3025] bridge0: port 2(bridge_slave_1) entered forwarding state [ 332.475290][T13555] bond1: (slave ip6gretap2): failed to get link speed/duplex [ 332.646691][ T74] bond1: (slave ip6gretap2): failed to get link speed/duplex [ 332.678822][T17013] sctp: [Deprecated]: syz.0.2951 (pid 17013) Use of struct sctp_assoc_value in delayed_ack socket option. [ 332.678822][T17013] Use struct sctp_sack_info instead [ 332.784187][T13555] bond1: (slave ip6gretap2): failed to get link speed/duplex [ 332.827288][T17020] pimreg: entered allmulticast mode [ 332.842484][T16714] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 332.914393][ T74] bond1: (slave ip6gretap2): failed to get link speed/duplex [ 333.044346][ T74] bond1: (slave ip6gretap2): failed to get link speed/duplex [ 333.174507][T13555] bond1: (slave ip6gretap2): failed to get link speed/duplex [ 333.229352][ T49] IPVS: stop unused estimator thread 0... [ 333.267819][T17052] bond0: (slave 0!): Releasing backup interface [ 333.275785][T17052] bond0: (slave 0!): the permanent HWaddr of slave - aa:aa:aa:aa:aa:24 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 333.297163][T17052] !: left allmulticast mode [ 333.301758][T17052] !: left promiscuous mode [ 333.323391][T17052] bond0: (slave batadv0): Releasing backup interface [ 333.330955][T17052] batadv0: left allmulticast mode [ 333.336291][T17052] batadv0: left promiscuous mode [ 333.341397][T17052] tipc: Resetting bearer [ 333.354802][T17052] tipc: Resetting bearer [ 333.362552][T17052] bond1: (slave ip6gretap2): Removing an active aggregator [ 333.370118][T17052] bond1: (slave ip6gretap2): Releasing backup interface [ 333.377480][ T5871] Bluetooth: hci3: command tx timeout [ 333.450436][T17055] A link change request failed with some changes committed already. Interface bond4 may have been left with an inconsistent configuration, please check. [ 333.725525][T16714] veth0_vlan: entered promiscuous mode [ 333.749235][T16714] veth1_vlan: entered promiscuous mode [ 333.795291][T17074] netlink: 'syz.3.2966': attribute type 1 has an invalid length. [ 333.803032][T17074] netlink: 'syz.3.2966': attribute type 2 has an invalid length. [ 333.822563][T17077] netlink: 'syz.0.2967': attribute type 9 has an invalid length. [ 333.855408][T17077] macvlan0: entered promiscuous mode [ 333.860785][T17077] hsr0: entered promiscuous mode [ 333.866165][T17077] macvlan0: entered allmulticast mode [ 333.871618][T17077] hsr0: entered allmulticast mode [ 333.881002][T17077] hsr_slave_0: entered allmulticast mode [ 333.891267][T17077] hsr_slave_1: entered allmulticast mode [ 333.941191][T16714] veth0_macvtap: entered promiscuous mode [ 333.952139][T16714] veth1_macvtap: entered promiscuous mode [ 333.999784][T16714] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 334.013316][T16714] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 334.025687][T17089] netlink: 'syz.0.2970': attribute type 4 has an invalid length. [ 334.045189][T17089] netlink: 'syz.0.2970': attribute type 4 has an invalid length. [ 334.063387][T13555] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.085938][T13555] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.100881][T13555] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.119158][T13555] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.159866][T13555] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 334.171053][T13555] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 334.209086][T13555] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 334.220825][T13555] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 334.362342][T17110] __nla_validate_parse: 40 callbacks suppressed [ 334.362357][T17110] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2976'. [ 334.424920][T17115] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2978'. [ 334.554250][T17118] netlink: 'syz.3.2979': attribute type 9 has an invalid length. [ 334.561993][T17118] netlink: 'syz.3.2979': attribute type 7 has an invalid length. [ 334.572998][T17118] netlink: 'syz.3.2979': attribute type 8 has an invalid length. [ 334.613946][T17122] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2980'. [ 334.640426][T17124] wg1 speed is unknown, defaulting to 1000 [ 335.312532][ T5857] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 335.322094][ T5857] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 335.332151][ T5857] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 335.364283][ T5857] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 335.371721][ T5857] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 335.457648][ T5871] Bluetooth: hci3: command tx timeout [ 335.584389][T13557] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 335.613170][T17154] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 335.667088][T13557] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 335.689712][T17151] wg1 speed is unknown, defaulting to 1000 [ 335.771610][T13557] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 335.843684][T17166] syzkaller1: entered promiscuous mode [ 335.864065][T17166] syzkaller1: entered allmulticast mode [ 335.882851][T13557] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 336.127006][T17176] netlink: 'syz.3.2997': attribute type 1 has an invalid length. [ 336.581910][T17079] Set syz1 is full, maxelem 65536 reached [ 336.734179][T13555] wlan1: Trigger new scan to find an IBSS to join [ 336.915944][T13557] bond0 (unregistering): Released all slaves [ 336.925991][T13557] bond1 (unregistering): Released all slaves [ 336.934676][T13557] bond2 (unregistering): Released all slaves [ 336.944397][T13557] bond3 (unregistering): Released all slaves [ 336.955416][T13557] bond4 (unregistering): Released all slaves [ 336.966936][T13557] bond5 (unregistering): Released all slaves [ 336.980831][T13557] bond6 (unregistering): Released all slaves [ 336.990495][T13557] bond7 (unregistering): Released all slaves [ 337.000793][T13557] bond8 (unregistering): Released all slaves [ 337.010428][T13557] bond9 (unregistering): Released all slaves [ 337.019796][T13557] bond10 (unregistering): Released all slaves [ 337.030934][T13557] bond11 (unregistering): Released all slaves [ 337.040415][T13557] bond12 (unregistering): Released all slaves [ 337.052629][T17176] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 337.062123][T17182] tipc: Enabling of bearer rejected, already enabled [ 337.083481][T17151] chnl_net:caif_netlink_parms(): no params data found [ 337.154267][T13557] þ: left promiscuous mode [ 337.221677][T17199] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode [ 337.229559][T17199] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode [ 337.240061][T17199] tipc: Resetting bearer [ 337.251464][T13557] tipc: Left network mode [ 337.315569][T17205] ip6gretap1: entered promiscuous mode [ 337.454039][ T5871] Bluetooth: hci4: command tx timeout [ 337.473440][T17151] bridge0: port 1(bridge_slave_0) entered blocking state [ 337.496647][T17221] sctp: [Deprecated]: syz.1.3006 (pid 17221) Use of struct sctp_assoc_value in delayed_ack socket option. [ 337.496647][T17221] Use struct sctp_sack_info instead [ 337.500416][T17151] bridge0: port 1(bridge_slave_0) entered disabled state [ 337.520481][T17151] bridge_slave_0: entered allmulticast mode [ 337.529351][T17224] netlink: 'syz.3.3007': attribute type 10 has an invalid length. [ 337.529735][T17151] bridge_slave_0: entered promiscuous mode [ 337.545140][ T5871] Bluetooth: hci3: command tx timeout [ 337.552162][T17151] bridge0: port 2(bridge_slave_1) entered blocking state [ 337.561047][T17151] bridge0: port 2(bridge_slave_1) entered disabled state [ 337.568435][T17151] bridge_slave_1: entered allmulticast mode [ 337.575308][T17151] bridge_slave_1: entered promiscuous mode [ 337.577559][T17224] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3007'. [ 337.663379][T17151] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 337.677279][T17224] veth0_vlan: left promiscuous mode [ 337.682494][T17224] veth0_vlan: entered promiscuous mode [ 337.688786][T17224] veth0_vlan: entered allmulticast mode [ 337.699595][T17224] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 337.728514][T17151] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 337.821958][T17151] team0: Port device team_slave_0 added [ 337.830145][T17151] team0: Port device team_slave_1 added [ 337.850454][T17236] wg1 speed is unknown, defaulting to 1000 [ 337.877098][T17245] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3010'. [ 337.877186][T17151] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 337.902212][T17151] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 337.943236][T17151] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 337.961442][T13557] hsr_slave_0: left promiscuous mode [ 337.967498][T13557] hsr_slave_1: left promiscuous mode [ 337.985172][T13557] pim6reg9 (unregistering): left allmulticast mode [ 338.098263][T17151] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 338.107423][T17151] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 338.133551][T17151] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 338.159883][ T12] tipc: Resetting bearer [ 338.228621][T17259] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3016'. [ 338.243575][T17151] hsr_slave_0: entered promiscuous mode [ 338.250236][T17259] netlink: 277 bytes leftover after parsing attributes in process `syz.3.3016'. [ 338.278390][T17151] hsr_slave_1: entered promiscuous mode [ 338.284543][T17151] debugfs: 'hsr0' already exists in 'hsr' [ 338.290303][T17151] Cannot create hsr debugfs directory [ 338.312577][T17257] netlink: 176 bytes leftover after parsing attributes in process `syz.0.3015'. [ 338.322370][T17265] syzkaller1: entered promiscuous mode [ 338.328744][T17265] syzkaller1: entered allmulticast mode [ 338.373459][T17259] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3016'. [ 338.406957][T17259] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3016'. [ 338.481279][T13557] IPVS: stop unused estimator thread 0... [ 338.731325][T17301] vlan0: entered promiscuous mode [ 338.762218][T17301] vlan0: entered allmulticast mode [ 338.768785][T17301] hsr_slave_1: entered allmulticast mode [ 338.797051][T17307] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.838351][T17309] veth1_to_team: entered allmulticast mode [ 338.846280][T17307] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.873528][T17151] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 338.894639][T17151] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 338.909202][T17151] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 338.910626][T17311] validate_nla: 3 callbacks suppressed [ 338.910641][T17311] netlink: 'syz.0.3029': attribute type 10 has an invalid length. [ 338.938590][T17307] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.988758][T17151] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 339.019020][T17307] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.141912][T17151] 8021q: adding VLAN 0 to HW filter on device bond0 [ 339.167535][T13557] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.181905][T13557] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.196619][T13557] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.323966][ T49] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.358190][T17151] 8021q: adding VLAN 0 to HW filter on device team0 [ 339.400111][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 339.407241][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 339.463851][T17331] infiniband syz2: set down [ 339.470138][T17331] infiniband syz2: added batadv_slave_1 [ 339.482502][ T74] bridge0: port 2(bridge_slave_1) entered blocking state [ 339.489611][ T74] bridge0: port 2(bridge_slave_1) entered forwarding state [ 339.521615][T17331] RDS/IB: syz2: added [ 339.527562][T17331] smc: adding ib device syz2 with port count 1 [ 339.532686][T17340] netlink: 'syz.3.3035': attribute type 1 has an invalid length. [ 339.533839][T17331] smc: ib device syz2 port 1 has pnetid [ 339.547998][ T5871] Bluetooth: hci4: command tx timeout [ 339.719402][T17340] bond8: (slave bridge4): making interface the new active one [ 339.730675][T17340] bond8: (slave bridge4): Enslaving as an active interface with an up link [ 339.959914][T17151] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 339.972596][T17357] __nla_validate_parse: 5 callbacks suppressed [ 339.972618][T17357] netlink: 96 bytes leftover after parsing attributes in process `syz.0.3040'. [ 340.030246][T17151] veth0_vlan: entered promiscuous mode [ 340.056556][T17151] veth1_vlan: entered promiscuous mode [ 340.070230][T17359] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3039'. [ 340.115137][T17151] veth0_macvtap: entered promiscuous mode [ 340.136893][T17151] veth1_macvtap: entered promiscuous mode [ 340.172802][T17151] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 340.201785][T17151] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 340.260483][ T74] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.290072][ T74] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.322688][T13556] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.366869][T13556] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.431243][T13555] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 340.439181][T13555] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 340.485539][T13555] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 340.496771][T13555] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 340.595706][T17387] veth0_to_team: entered promiscuous mode [ 340.862622][T17404] vlan2: entered promiscuous mode [ 340.887258][T17404] vlan2: entered allmulticast mode [ 340.902574][T17404] hsr_slave_1: entered allmulticast mode [ 340.944319][T17412] wg1 speed is unknown, defaulting to 1000 [ 341.001167][T17416] vlan2: entered promiscuous mode [ 341.045665][T17416] bond0: entered promiscuous mode [ 341.129404][T17415] syzkaller0: entered promiscuous mode [ 341.146934][T17415] syzkaller0: entered allmulticast mode [ 341.179452][ T5857] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 341.187986][ T5857] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 341.195237][ T5857] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 341.204062][ T5857] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 341.211547][ T5857] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 341.236437][T17404] wg1 speed is unknown, defaulting to 1000 [ 341.265854][T17423] wg1 speed is unknown, defaulting to 1000 [ 341.614422][ T5857] Bluetooth: hci4: command tx timeout [ 341.906907][T17445] tipc: Bearer : already 2 bearers with priority 10 [ 341.914734][T17445] tipc: Bearer : trying with adjusted priority [ 341.928988][T17445] tipc: New replicast peer: 255.255.255.255 [ 341.944252][T17445] tipc: Enabled bearer , priority 9 [ 342.137383][T17448] wg1 speed is unknown, defaulting to 1000 [ 342.201801][T17423] chnl_net:caif_netlink_parms(): no params data found [ 342.347755][T17423] bridge0: port 1(bridge_slave_0) entered blocking state [ 342.357697][T17423] bridge0: port 1(bridge_slave_0) entered disabled state [ 342.365219][T17423] bridge_slave_0: entered allmulticast mode [ 342.372065][T17423] bridge_slave_0: entered promiscuous mode [ 342.412027][T17423] bridge0: port 2(bridge_slave_1) entered blocking state [ 342.419336][T17423] bridge0: port 2(bridge_slave_1) entered disabled state [ 342.427637][T17423] bridge_slave_1: entered allmulticast mode [ 342.440260][T17423] bridge_slave_1: entered promiscuous mode [ 342.477002][T17423] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 342.506969][T17423] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 342.750724][T17472] syz_tun: entered allmulticast mode [ 342.770320][T17423] team0: Port device team_slave_0 added [ 342.782316][T17472] dvmrp8: entered allmulticast mode [ 342.789297][T17423] team0: Port device team_slave_1 added [ 342.816792][T17423] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 342.828496][T17423] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 342.855765][T17423] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 342.879933][T17423] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 342.888822][T17423] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 342.915503][T17423] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 342.940114][T17472] wg1 speed is unknown, defaulting to 1000 [ 343.029379][ T30] audit: type=1800 audit(1756064669.062:11): pid=17483 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3067" name="memory.events" dev="tmpfs" ino=3099 res=0 errno=0 [ 343.053145][T17483] netlink: 'syz.1.3067': attribute type 21 has an invalid length. [ 343.070302][T17483] netlink: 'syz.1.3067': attribute type 1 has an invalid length. [ 343.125860][T17471] syz_tun: left allmulticast mode [ 343.130989][T17471] dvmrp8: left allmulticast mode [ 343.181329][T17491] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3069'. [ 343.190874][T17491] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3069'. [ 343.239648][T17423] hsr_slave_0: entered promiscuous mode [ 343.277533][T17501] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3072'. [ 343.290436][T17423] hsr_slave_1: entered promiscuous mode [ 343.296338][ T5857] Bluetooth: hci0: command tx timeout [ 343.308138][T17423] debugfs: 'hsr0' already exists in 'hsr' [ 343.314089][T17423] Cannot create hsr debugfs directory [ 343.331307][T17499] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 343.389814][T17509] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3073'. [ 343.434603][T17510] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3073'. [ 343.444147][T17509] netlink: 34 bytes leftover after parsing attributes in process `syz.1.3073'. [ 343.512504][T17518] netlink: 'syz.4.3075': attribute type 9 has an invalid length. [ 343.520787][T17518] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3075'. [ 343.544594][T17518] hsr0: entered promiscuous mode [ 343.549623][T17518] macvlan2: entered promiscuous mode [ 343.556023][T17518] macvlan2: entered allmulticast mode [ 343.561452][T17518] hsr0: entered allmulticast mode [ 343.568365][T17518] hsr_slave_0: entered allmulticast mode [ 343.572488][T17523] netlink: 'syz.4.3075': attribute type 64 has an invalid length. [ 343.591827][ T7864] IPVS: starting estimator thread 0... [ 343.611709][T17423] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.630450][T17526] netlink: 84 bytes leftover after parsing attributes in process `syz.2.3078'. [ 343.692704][T17423] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.695252][ T5857] Bluetooth: hci4: command tx timeout [ 343.705793][T17524] IPVS: using max 47 ests per chain, 112800 per kthread [ 343.768319][T17423] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.829114][T17423] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.848223][T17533] pimreg: left allmulticast mode [ 343.976462][T17533] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 343.997074][T17423] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 344.025857][T17423] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 344.036468][T17423] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 344.058452][T17423] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 344.192898][T17423] 8021q: adding VLAN 0 to HW filter on device bond0 [ 344.218110][T17423] 8021q: adding VLAN 0 to HW filter on device team0 [ 344.238831][T13556] bridge0: port 1(bridge_slave_0) entered blocking state [ 344.245945][T13556] bridge0: port 1(bridge_slave_0) entered forwarding state [ 344.273202][T13556] bridge0: port 2(bridge_slave_1) entered blocking state [ 344.280319][T13556] bridge0: port 2(bridge_slave_1) entered forwarding state [ 344.388748][T17576] netlink: 'syz.2.3093': attribute type 1 has an invalid length. [ 344.397029][T17581] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_0, syncid = 0, id = 0 [ 344.625942][T17606] ‚: renamed from bond_slave_0 [ 344.689462][T17423] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 344.776756][T17423] veth0_vlan: entered promiscuous mode [ 344.793702][T17423] veth1_vlan: entered promiscuous mode [ 344.838568][T17627] TCP: tcp_parse_options: Illegal window scaling value 128 > 14 received [ 344.844296][T17622] syzkaller0: entered promiscuous mode [ 344.852589][T17622] syzkaller0: entered allmulticast mode [ 344.988592][T17423] veth0_macvtap: entered promiscuous mode [ 345.008797][T17423] veth1_macvtap: entered promiscuous mode [ 345.044067][T17423] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 345.060846][T17423] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 345.073449][T13559] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.156452][T13559] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.168365][T13559] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.177831][T13559] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.270403][T13559] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 345.279709][T13559] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 345.315733][ T9250] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 345.327896][ T9250] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 345.477798][T17663] __nla_validate_parse: 6 callbacks suppressed [ 345.477814][T17663] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3116'. [ 345.566477][T17666] wg1 speed is unknown, defaulting to 1000 [ 345.664418][T17674] netlink: 248 bytes leftover after parsing attributes in process `syz.4.3120'. [ 346.020453][T17692] gretap0: entered promiscuous mode [ 346.037385][T17693] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 346.054768][T17692] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3125'. [ 346.077539][T17692] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3125'. [ 346.087691][ T5871] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 346.109649][ T5871] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 346.133088][ T5871] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 346.141899][ T5871] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 346.151258][ T5871] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 346.241063][T17694] wg1 speed is unknown, defaulting to 1000 [ 346.241639][T17700] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3127'. [ 346.343699][T17709] wg1 speed is unknown, defaulting to 1000 [ 346.536314][T17719] netlink: 'syz.3.3128': attribute type 29 has an invalid length. [ 346.546087][T17720] syzkaller1: entered promiscuous mode [ 346.551676][T17720] syzkaller1: entered allmulticast mode [ 346.710122][T17694] chnl_net:caif_netlink_parms(): no params data found [ 346.938672][T17694] bridge0: port 1(bridge_slave_0) entered blocking state [ 346.946512][T17694] bridge0: port 1(bridge_slave_0) entered disabled state [ 346.954407][T17694] bridge_slave_0: entered allmulticast mode [ 346.961216][T17694] bridge_slave_0: entered promiscuous mode [ 346.969419][T17694] bridge0: port 2(bridge_slave_1) entered blocking state [ 346.992454][T17694] bridge0: port 2(bridge_slave_1) entered disabled state [ 347.003256][T17694] bridge_slave_1: entered allmulticast mode [ 347.011020][T17694] bridge_slave_1: entered promiscuous mode [ 347.098327][T17694] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 347.120495][T17694] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 347.148202][T17745] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3136'. [ 347.175544][T17740] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3135'. [ 347.236796][T17740] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 347.238823][T17694] team0: Port device team_slave_0 added [ 347.271276][T17694] team0: Port device team_slave_1 added [ 347.314819][T17694] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 347.322094][T17694] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 347.351327][T17694] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 347.370127][T17694] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 347.377485][T17694] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 347.382781][T17763] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 347.404357][T17694] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 347.448721][T17761] geneve2: entered promiscuous mode [ 347.455026][T17761] geneve2: entered allmulticast mode [ 347.502032][T17771] wg1: entered promiscuous mode [ 347.507271][T17771] wg1: entered allmulticast mode [ 347.545026][T17694] hsr_slave_0: entered promiscuous mode [ 347.559847][T17694] hsr_slave_1: entered promiscuous mode [ 347.581183][T17694] debugfs: 'hsr0' already exists in 'hsr' [ 347.598375][T17694] Cannot create hsr debugfs directory [ 347.743079][T17784] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3146'. [ 347.756236][T17784] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3146'. [ 347.802858][T17788] netlink: 'syz.3.3145': attribute type 1 has an invalid length. [ 347.881588][T17794] netlink: 'syz.3.3148': attribute type 10 has an invalid length. [ 347.890854][T17792] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3147'. [ 348.110800][T17694] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 348.132094][T17694] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 348.163741][T17694] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 348.174548][ T5871] Bluetooth: hci2: command tx timeout [ 348.211767][T17694] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 348.336875][T17823] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 348.623158][T17841] netlink: 'syz.2.3160': attribute type 5 has an invalid length. [ 348.707213][T17694] 8021q: adding VLAN 0 to HW filter on device bond0 [ 348.729939][T17694] 8021q: adding VLAN 0 to HW filter on device team0 [ 348.743344][T13557] bridge0: port 1(bridge_slave_0) entered blocking state [ 348.750482][T13557] bridge0: port 1(bridge_slave_0) entered forwarding state [ 348.792603][ T3025] bridge0: port 2(bridge_slave_1) entered blocking state [ 348.799860][ T3025] bridge0: port 2(bridge_slave_1) entered forwarding state [ 348.984649][T17851] pim6reg1: entered promiscuous mode [ 348.990118][T17851] pim6reg1: entered allmulticast mode [ 349.028109][T17694] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 349.077094][T17694] veth0_vlan: entered promiscuous mode [ 349.106112][T17694] veth1_vlan: entered promiscuous mode [ 349.147328][T17694] veth0_macvtap: entered promiscuous mode [ 349.158209][T17694] veth1_macvtap: entered promiscuous mode [ 349.181183][T17694] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 349.196129][T17694] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 349.209101][T13557] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.221548][T13557] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.235214][T13556] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.253056][T13556] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.511302][T13557] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 349.553141][T13557] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 349.588829][T13555] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 349.598072][T13555] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 349.621051][T17882] wg1 speed is unknown, defaulting to 1000 [ 349.648411][T17884] tipc: Started in network mode [ 349.653403][T17884] tipc: Node identity 362b0058a327, cluster identity 4711 [ 349.664109][T17884] tipc: Enabled bearer , priority 0 [ 349.812341][T17883] tipc: Disabling bearer [ 350.254363][ T5871] Bluetooth: hci2: command tx timeout [ 350.275925][T17920] pimreg: entered allmulticast mode [ 350.572926][ T5857] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 350.580884][ T5857] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 350.588199][ T5857] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 350.600191][ T5857] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 350.607796][ T5857] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 350.672192][T17937] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 350.697757][T17947] wg1 speed is unknown, defaulting to 1000 [ 350.863225][T17947] chnl_net:caif_netlink_parms(): no params data found [ 350.915830][T17947] bridge0: port 1(bridge_slave_0) entered blocking state [ 350.923008][T17947] bridge0: port 1(bridge_slave_0) entered disabled state [ 350.937154][T17947] bridge_slave_0: entered allmulticast mode [ 350.944817][T17947] bridge_slave_0: entered promiscuous mode [ 350.952691][T17947] bridge0: port 2(bridge_slave_1) entered blocking state [ 350.960149][T17947] bridge0: port 2(bridge_slave_1) entered disabled state [ 350.968441][T17947] bridge_slave_1: entered allmulticast mode [ 350.976582][T17947] bridge_slave_1: entered promiscuous mode [ 351.003765][T17947] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 351.016550][T17947] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 351.045482][T17947] team0: Port device team_slave_0 added [ 351.053178][T17947] team0: Port device team_slave_1 added [ 351.073507][T17947] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 351.080862][T17947] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 351.106835][T17947] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 351.122789][T17947] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 351.131573][T17947] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 351.164309][T17947] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 351.165225][T17970] __nla_validate_parse: 9 callbacks suppressed [ 351.165238][T17970] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3184'. [ 351.198195][T17970] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 351.218898][T17947] hsr_slave_0: entered promiscuous mode [ 351.226997][T17947] hsr_slave_1: entered promiscuous mode [ 351.234191][T17947] debugfs: 'hsr0' already exists in 'hsr' [ 351.240007][T17947] Cannot create hsr debugfs directory [ 351.278954][T17973] netlink: 'syz.2.3185': attribute type 8 has an invalid length. [ 351.329891][T17947] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.397542][T17979] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3188'. [ 351.410462][T17982] IPVS: sync thread started: state = BACKUP, mcast_ifn = batadv0, syncid = 0, id = 0 [ 351.426504][T17947] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.488175][T17988] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3188'. [ 351.505926][T17986] can: request_module (can-proto-5) failed. [ 351.519979][T17986] workqueue: name exceeds WQ_NAME_LEN. Truncating to: žÀ^–>º>ùMv^µâ侦¸ÑKc'A¥»– [ 351.551460][T17947] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.637961][T17947] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.663566][T17997] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3194'. [ 351.770671][T17947] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 351.797193][T17947] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 351.822387][T17947] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 351.840499][T17947] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 351.866140][T18016] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3201'. [ 351.958272][T17947] 8021q: adding VLAN 0 to HW filter on device bond0 [ 351.972489][T18032] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3198'. [ 351.990154][T18034] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 351.996703][T17947] 8021q: adding VLAN 0 to HW filter on device team0 [ 352.009039][T18032] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3198'. [ 352.022513][T13555] bridge0: port 1(bridge_slave_0) entered blocking state [ 352.029652][T13555] bridge0: port 1(bridge_slave_0) entered forwarding state [ 352.057446][T13555] bridge0: port 2(bridge_slave_1) entered blocking state [ 352.064579][T13555] bridge0: port 2(bridge_slave_1) entered forwarding state [ 352.101476][T17947] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 352.119753][T18040] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 352.318758][T17947] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 352.334502][ T5857] Bluetooth: hci2: command tx timeout [ 352.377747][T17947] veth0_vlan: entered promiscuous mode [ 352.392455][T17947] veth1_vlan: entered promiscuous mode [ 352.421449][T17947] veth0_macvtap: entered promiscuous mode [ 352.434773][T17947] veth1_macvtap: entered promiscuous mode [ 352.475209][T17947] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 352.504799][T17947] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 352.522483][ T49] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.545073][ T49] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.554997][ T49] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.566115][T13555] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.613704][T13555] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 352.621839][T13555] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 352.648932][ T9250] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 352.658542][ T9250] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 352.664009][ T5857] Bluetooth: hci1: command tx timeout [ 353.070743][T18083] netlink: 'syz.0.3214': attribute type 10 has an invalid length. [ 353.087545][T18083] team0: Device ipvlan1 failed to register rx_handler [ 353.131516][T18084] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3214'. [ 353.142060][T18088] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3214'. [ 353.156858][T18083] netlink: zone id is out of range [ 353.159943][T18089] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3215'. [ 353.162185][T18083] netlink: zone id is out of range [ 353.177977][T18083] netlink: zone id is out of range [ 353.184196][T18083] netlink: zone id is out of range [ 353.189450][T18083] netlink: zone id is out of range [ 353.197858][T18083] netlink: zone id is out of range [ 353.198605][T18089] team_slave_0: entered promiscuous mode [ 353.208680][T18089] team_slave_1: entered promiscuous mode [ 353.251585][T18089] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 353.269303][T18089] team_slave_0: left promiscuous mode [ 353.274775][T18089] team_slave_1: left promiscuous mode [ 353.521576][T18103] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 353.713381][T18114] wg1 speed is unknown, defaulting to 1000 [ 353.878364][T18135] tipc: Started in network mode [ 353.883247][T18135] tipc: Node identity 9664486164fe, cluster identity 4711 [ 353.890973][T18135] tipc: Enabled bearer , priority 0 [ 353.900551][T18135] syzkaller0: entered promiscuous mode [ 353.906707][T18135] syzkaller0: entered allmulticast mode [ 353.926913][T18135] tipc: Resetting bearer [ 353.936505][T18135] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 354.366566][T18144] syz_tun: entered allmulticast mode [ 354.386316][T18144] wg1 speed is unknown, defaulting to 1000 [ 354.414709][ T5857] Bluetooth: hci2: command tx timeout [ 354.431060][T18145] netlink: 'syz.0.3231': attribute type 23 has an invalid length. [ 354.502015][T18143] syz_tun: left allmulticast mode [ 354.734491][ T5857] Bluetooth: hci1: command tx timeout [ 354.748340][T18134] tipc: Resetting bearer [ 354.755320][T18134] tipc: Disabling bearer [ 354.811656][T18170] syzkaller0: entered promiscuous mode [ 354.837831][T18170] syzkaller0: entered allmulticast mode [ 354.846100][T18169] tipc: Enabled bearer , priority 0 [ 354.880495][T18170] tipc: Resetting bearer [ 354.899458][T18170] tipc: Disabling bearer [ 355.073622][T18193] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 355.081499][T18193] batadv_slave_1: entered promiscuous mode [ 355.292324][T18198] netlink: 'syz.4.3246': attribute type 5 has an invalid length. [ 355.535023][ T5857] Bluetooth: hci0: command tx timeout [ 355.781800][T18243] tipc: Started in network mode [ 355.796127][T18243] tipc: Node identity 82d49362cbaa, cluster identity 4711 [ 355.824484][T18243] tipc: Enabled bearer , priority 0 [ 355.860585][T18248] syzkaller0: entered promiscuous mode [ 355.879429][T18248] syzkaller0: entered allmulticast mode [ 355.918962][T18243] tipc: Resetting bearer [ 355.942032][T18242] tipc: Resetting bearer [ 355.960600][T18242] tipc: Disabling bearer [ 356.125990][T18272] syzkaller0: entered promiscuous mode [ 356.132193][T18272] syzkaller0: entered allmulticast mode [ 356.144925][T18281] FAULT_INJECTION: forcing a failure. [ 356.144925][T18281] name failslab, interval 1, probability 0, space 0, times 1 [ 356.159402][T18281] CPU: 1 UID: 0 PID: 18281 Comm: syz.4.3268 Not tainted syzkaller #0 PREEMPT(full) [ 356.159426][T18281] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 356.159445][T18281] Call Trace: [ 356.159451][T18281] [ 356.159458][T18281] dump_stack_lvl+0x189/0x250 [ 356.159481][T18281] ? __pfx____ratelimit+0x10/0x10 [ 356.159506][T18281] ? __pfx_dump_stack_lvl+0x10/0x10 [ 356.159524][T18281] ? __pfx__printk+0x10/0x10 [ 356.159548][T18281] ? fs_reclaim_acquire+0x7d/0x100 [ 356.159572][T18281] ? rcu_is_watching+0x15/0xb0 [ 356.159588][T18281] ? __pfx___might_resched+0x10/0x10 [ 356.159603][T18281] ? lock_acquire+0x5f/0x360 [ 356.159627][T18281] should_fail_ex+0x414/0x560 [ 356.159659][T18281] should_failslab+0xa8/0x100 [ 356.159683][T18281] kmem_cache_alloc_noprof+0x73/0x3c0 [ 356.159704][T18281] ? ptlock_alloc+0x20/0x70 [ 356.159727][T18281] ptlock_alloc+0x20/0x70 [ 356.159748][T18281] pte_alloc_one+0x7d/0x170 [ 356.159767][T18281] __pte_alloc+0x25/0x1a0 [ 356.159784][T18281] __handle_mm_fault+0x49b3/0x5440 [ 356.159812][T18281] ? __pfx___handle_mm_fault+0x10/0x10 [ 356.159833][T18281] ? rcu_is_watching+0x15/0xb0 [ 356.159857][T18281] ? find_vma+0xe7/0x160 [ 356.159880][T18281] ? __pfx_find_vma+0x10/0x10 [ 356.159902][T18281] handle_mm_fault+0x40a/0x8e0 [ 356.159931][T18281] do_user_addr_fault+0x764/0x1390 [ 356.159962][T18281] exc_page_fault+0x76/0xf0 [ 356.159986][T18281] asm_exc_page_fault+0x26/0x30 [ 356.160003][T18281] RIP: 0010:rep_movs_alternative+0xf/0x90 [ 356.160024][T18281] Code: c4 10 e9 c4 09 04 00 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 83 f9 40 73 44 83 f9 08 73 25 85 c9 74 0f <8a> 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 e9 8d 09 04 00 66 2e [ 356.160039][T18281] RSP: 0018:ffffc90003a0fc10 EFLAGS: 00050202 [ 356.160056][T18281] RAX: 00007ffffffff001 RBX: 0000000000000004 RCX: 0000000000000004 [ 356.160069][T18281] RDX: 0000000000000001 RSI: 0000200000000080 RDI: ffff888057872320 [ 356.160081][T18281] RBP: ffff888057872320 R08: 0000000000000003 R09: 0000000000000004 [ 356.160093][T18281] R10: dffffc0000000000 R11: ffffed100af0e464 R12: 0000000000000004 [ 356.160105][T18281] R13: 0000000000000007 R14: ffff888057872320 R15: 0000200000000080 [ 356.160125][T18281] _copy_from_user+0x7a/0xb0 [ 356.160149][T18281] ip_options_get+0x136/0x4c0 [ 356.160171][T18281] do_ip_setsockopt+0x1d9b/0x2d00 [ 356.160195][T18281] ? __pfx_do_ip_setsockopt+0x10/0x10 [ 356.160215][T18281] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 356.160243][T18281] ? aa_sk_perm+0x81e/0x950 [ 356.160266][T18281] ? rcu_is_watching+0x15/0xb0 [ 356.160283][T18281] ? __pfx_aa_sk_perm+0x10/0x10 [ 356.160305][T18281] ? lock_release+0x4b/0x3e0 [ 356.160327][T18281] ? aa_sock_opt_perm+0xff/0x1b0 [ 356.160344][T18281] ip_setsockopt+0x66/0x110 [ 356.160364][T18281] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 356.160388][T18281] do_sock_setsockopt+0x179/0x1b0 [ 356.160408][T18281] __x64_sys_setsockopt+0x13f/0x1b0 [ 356.160427][T18281] do_syscall_64+0xfa/0x3b0 [ 356.160443][T18281] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 356.160460][T18281] ? clear_bhb_loop+0x60/0xb0 [ 356.160479][T18281] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 356.160495][T18281] RIP: 0033:0x7faa8e18ebe9 [ 356.160508][T18281] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 356.160522][T18281] RSP: 002b:00007faa8f088038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 356.160540][T18281] RAX: ffffffffffffffda RBX: 00007faa8e3b5fa0 RCX: 00007faa8e18ebe9 [ 356.160553][T18281] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000003 [ 356.160564][T18281] RBP: 00007faa8f088090 R08: 0000000000000004 R09: 0000000000000000 [ 356.160575][T18281] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000001 [ 356.160586][T18281] R13: 00007faa8e3b6038 R14: 00007faa8e3b5fa0 R15: 00007ffeeecd7768 [ 356.160605][T18281] [ 356.566281][T18285] bridge0: port 2(bridge_slave_1) entered disabled state [ 356.573725][T18285] bridge0: port 1(bridge_slave_0) entered disabled state [ 356.613216][ T30] audit: type=1800 audit(1756064682.642:12): pid=18290 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3271" name="blkio.bfq.io_queued_recursive" dev="tmpfs" ino=413 res=0 errno=0 [ 356.756860][T18285] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 356.770720][T18285] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 356.814125][ T5857] Bluetooth: hci1: command tx timeout [ 356.849627][ T74] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.883237][ T74] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.895668][ T74] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.060648][ T74] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.214114][T18332] RDS: rds_bind could not find a transport for 100:806:aaaa:aaaa:aaaa::, load rds_tcp or rds_rdma? [ 357.231295][T18329] syzkaller0: entered promiscuous mode [ 357.237217][T18329] syzkaller0: entered allmulticast mode [ 357.369765][T18341] __nla_validate_parse: 8 callbacks suppressed [ 357.369778][T18341] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3285'. [ 357.765134][T18376] bridge2: entered promiscuous mode [ 357.770425][T18376] bridge2: entered allmulticast mode [ 357.804980][T18376] team0: Port device bridge2 added [ 357.916028][T18392] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3298'. [ 358.033815][T18404] netlink: 1 bytes leftover after parsing attributes in process `syz.4.3302'. [ 358.377372][T18434] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3312'. [ 358.392860][T18436] veth0: entered promiscuous mode [ 358.415083][T18434] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3312'. [ 358.488500][T18427] veth0: left promiscuous mode [ 358.529415][T18453] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3314'. [ 358.569715][T18440] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 358.608593][T18459] net_ratelimit: 21 callbacks suppressed [ 358.608609][T18459] IPv4: Oversized IP packet from 127.202.26.0 [ 358.694242][T18462] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 358.774991][T18476] netlink: 'syz.4.3322': attribute type 10 has an invalid length. [ 358.804995][T18476] team0: Port device dummy0 added [ 358.815890][T18476] netlink: 'syz.4.3322': attribute type 10 has an invalid length. [ 358.841245][T18476] team0: Port device dummy0 removed [ 358.858177][T18476] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 358.869266][T18484] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3325'. [ 358.891857][T18484] netlink: 'syz.1.3325': attribute type 12 has an invalid length. [ 358.904433][ T5857] Bluetooth: hci1: command tx timeout [ 358.910718][T18488] Bluetooth: MGMT ver 1.23 [ 358.919458][T18488] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3326'. [ 358.923781][T18484] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3325'. [ 358.929590][ T12] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 358.948647][T18484] netlink: 'syz.1.3325': attribute type 12 has an invalid length. [ 358.961783][ T12] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 358.975534][ T12] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 358.989034][ T12] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 359.092959][T18497] wg1 speed is unknown, defaulting to 1000 [ 359.156758][T18508] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3332'. [ 359.193029][T18508] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 359.297326][T18506] siw: device registration error -23 [ 359.514036][T18535] bridge3: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 359.877489][T18553] macsec1: entered promiscuous mode [ 359.883232][T18553] ip6gretap0: entered promiscuous mode [ 359.888930][T18553] macsec1: entered allmulticast mode [ 359.894520][T18553] ip6gretap0: entered allmulticast mode [ 361.046814][T18626] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 361.087449][T18626] tipc: Failed to remove unknown binding: 66,1,1/0:206518681/206518683 [ 361.110866][ T7648] IPVS: starting estimator thread 0... [ 361.132119][T18626] tipc: Failed to remove unknown binding: 66,1,1/0:206518681/206518683 [ 361.140867][T18626] tipc: Failed to remove unknown binding: 66,1,1/0:206518681/206518683 [ 361.204515][T18634] IPVS: using max 40 ests per chain, 96000 per kthread [ 361.552586][T18671] netlink: 'syz.0.3379': attribute type 1 has an invalid length. [ 361.662407][T18680] mac80211_hwsim hwsim48 wlan1: entered allmulticast mode [ 361.697952][T18682] tipc: Enabled bearer , priority 0 [ 361.705461][T18682] syzkaller0: entered promiscuous mode [ 361.710929][T18682] syzkaller0: entered allmulticast mode [ 361.768674][T18682] tipc: Resetting bearer [ 361.801693][T18679] tipc: Resetting bearer [ 361.819219][T18679] tipc: Disabling bearer [ 361.991059][T18695] wg1 speed is unknown, defaulting to 1000 [ 362.130093][T18705] batadv1: entered promiscuous mode [ 362.835649][T18737] __nla_validate_parse: 17 callbacks suppressed [ 362.835667][T18737] netlink: 148 bytes leftover after parsing attributes in process `syz.4.3398'. [ 363.039807][T18743] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 363.047638][T18743] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 363.214553][T18750] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 363.311722][T18761] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3403'. [ 363.360152][T18769] netlink: 'syz.4.3403': attribute type 13 has an invalid length. [ 363.442136][T18769] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 363.476817][T18778] netlink: 'syz.3.3405': attribute type 15 has an invalid length. [ 363.948253][T18797] _ÐZ`Ô€@S: entered promiscuous mode [ 364.035059][T18806] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3414'. [ 364.070986][T18815] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3415'. [ 364.071938][T18816] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3415'. [ 364.129696][T18820] veth1_to_bond: entered allmulticast mode [ 364.142558][T18820] bond_slave_1: entered promiscuous mode [ 364.158262][T18820] bond_slave_1: left promiscuous mode [ 364.165829][T18820] veth1_to_bond: left allmulticast mode [ 364.227457][T18826] bpq0: entered promiscuous mode [ 364.269699][T18830] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3421'. [ 364.317858][T18833] bridge4: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 364.584484][T18856] pim6reg: entered allmulticast mode [ 364.592752][T18856] pim6reg: left allmulticast mode [ 364.888436][T18864] RDS: rds_bind could not find a transport for fc02::1, load rds_tcp or rds_rdma? [ 364.938145][T18866] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3434'. [ 364.969616][T18866] netlink: 'syz.0.3434': attribute type 1 has an invalid length. [ 364.978476][T18866] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3434'. [ 364.987638][T18866] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3434'. [ 364.998501][T18866] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 365.008884][T18866] gretap1: entered promiscuous mode [ 365.059558][T18875] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3437'. [ 365.116831][T18880] netlink: 'syz.0.3438': attribute type 14 has an invalid length. [ 365.128589][T18880] netlink: 'syz.0.3438': attribute type 13 has an invalid length. [ 365.350688][T18907] netlink: 'syz.1.3448': attribute type 13 has an invalid length. [ 365.360983][T18907] netlink: 'syz.1.3448': attribute type 17 has an invalid length. [ 365.453683][T18907] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 365.642208][T18928] wg1 speed is unknown, defaulting to 1000 [ 366.000807][T18954] wg1 speed is unknown, defaulting to 1000 [ 366.122069][T18958] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 366.132473][T18958] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.259799][T18958] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 366.282902][T18958] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.293818][T18971] netlink: 'syz.2.3464': attribute type 21 has an invalid length. [ 366.372979][T18958] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 366.391186][T18958] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.455397][T18958] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 366.482076][T18958] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.659131][ T1151] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 366.675451][ T1151] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.689685][ T1151] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 366.705492][ T1151] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.720875][ T1151] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 366.739446][ T1151] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.770485][ T12] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 366.783239][T18990] IPVS: set_ctl: invalid protocol: 135 172.20.20.36:20001 [ 366.803617][ T12] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.273647][T19026] 8021q: VLANs not supported on caif0 [ 367.292227][T19028] wg1 speed is unknown, defaulting to 1000 [ 367.583506][T19046] bridge0: port 1(bridge_slave_0) entered disabled state [ 367.592548][T19046] bridge0: port 2(bridge_slave_1) entered disabled state [ 367.887741][T19068] wg1 speed is unknown, defaulting to 1000 [ 367.907340][T19083] macsec2: entered promiscuous mode [ 367.934490][T19083] erspan0: entered promiscuous mode [ 368.075662][T19083] erspan0: left promiscuous mode [ 368.347416][T19117] pim6reg9: entered allmulticast mode [ 368.646492][T19119] syzkaller0: mtu less than device minimum [ 368.783156][T19138] nft_compat: unsupported protocol 5 [ 368.894300][T19145] wg1 speed is unknown, defaulting to 1000 [ 368.929070][T13555] nci: nci_rx_work: unknown MT 0x1 [ 368.931982][T19151] : entered promiscuous mode [ 369.341637][T19162] pim6reg1: entered promiscuous mode [ 369.347059][T19162] pim6reg1: entered allmulticast mode [ 369.537277][T19166] __nla_validate_parse: 19 callbacks suppressed [ 369.537293][T19166] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3514'. [ 369.603538][T19166] 8021q: adding VLAN 0 to HW filter on device bond2 [ 369.622302][T19166] team0: Port device bond2 added [ 369.920509][T19189] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3522'. [ 369.948543][T19189] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3522'. [ 370.003189][ T30] audit: type=1804 audit(1756064696.002:13): pid=19191 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.3518" name="/newroot/95/cgroup.controllers" dev="tmpfs" ino=501 res=1 errno=0 [ 370.033435][ T30] audit: type=1800 audit(1756064696.002:14): pid=19191 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3518" name="cgroup.controllers" dev="tmpfs" ino=501 res=0 errno=0 [ 370.068270][T19189] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3522'. [ 370.119682][T19189] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3522'. [ 370.130339][T19198] tipc: Started in network mode [ 370.135295][T19198] tipc: Node identity d23714e2cd11, cluster identity 4711 [ 370.142511][T19198] tipc: Enabled bearer , priority 0 [ 370.157610][T19198] syzkaller0: entered promiscuous mode [ 370.171856][T19198] syzkaller0: entered allmulticast mode [ 370.190616][T19189] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3522'. [ 370.223075][T19189] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3522'. [ 370.244221][T19189] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3522'. [ 370.263339][T19189] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3522'. [ 370.266457][T19199] tipc: Resetting bearer [ 370.317081][T19189] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3522'. [ 370.328690][T19197] tipc: Resetting bearer [ 370.337700][T19197] tipc: Disabling bearer [ 370.475806][T19227] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 370.554275][T19237] netlink: 'syz.3.3535': attribute type 1 has an invalid length. [ 370.592600][T19242] netlink: 'syz.2.3537': attribute type 29 has an invalid length. [ 370.611835][T19242] netlink: 'syz.2.3537': attribute type 29 has an invalid length. [ 370.650105][T19244] wg1 speed is unknown, defaulting to 1000 [ 370.661434][T19245] wg1 speed is unknown, defaulting to 1000 [ 370.742264][T19250] (unnamed net_device) (uninitialized): option arp_interval: mode dependency failed, not supported in mode balance-tlb(5) [ 370.802262][T19250] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 371.109463][T19286] ksmbd: Unknown IPC event: 3, ignore. [ 371.226045][T19288] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 371.240342][T19288] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 371.282495][T19288] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 371.291680][T19288] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 371.877185][T19319] wg1 speed is unknown, defaulting to 1000 [ 371.975590][T19327] wg1 speed is unknown, defaulting to 1000 [ 372.383725][T19353] 8021q: adding VLAN 0 to HW filter on device bond2 [ 372.411647][T19353] bond2: entered promiscuous mode [ 372.418389][T19353] macvlan2: entered promiscuous mode [ 372.423688][T19353] macvlan2: entered allmulticast mode [ 372.431676][T19353] bond2: entered allmulticast mode [ 372.437308][T19353] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 373.308099][T19393] mac80211_hwsim hwsim51 wlan1: entered allmulticast mode [ 373.372403][T19393] bridge_slave_0: left allmulticast mode [ 373.383963][T19393] bridge_slave_0: left promiscuous mode [ 373.389756][T19393] bridge0: port 1(bridge_slave_0) entered disabled state [ 373.399781][T19399] netlink: 'syz.1.3577': attribute type 10 has an invalid length. [ 373.444106][T19393] bridge_slave_1: left allmulticast mode [ 373.449764][T19393] bridge_slave_1: left promiscuous mode [ 373.457942][T19393] bridge0: port 2(bridge_slave_1) entered disabled state [ 373.627644][T19393] bond0: (slave bond_slave_0): Releasing backup interface [ 373.637879][T19393] bond0: (slave bond_slave_1): Releasing backup interface [ 373.699728][T19393] team0: Port device team_slave_0 removed [ 373.711709][T19393] team0: Port device team_slave_1 removed [ 373.720230][T19393] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 373.727777][T19393] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 373.737042][T19393] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 373.755111][T19399] mac80211_hwsim hwsim51 wlan1: left allmulticast mode [ 373.764689][T19399] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 455.353721][T18132] bond4 (unregistering): (slave erspan0): Releasing active interface [ 455.686644][T18132] tipc: Disabling bearer [ 455.882947][T18132] bond0 (unregistering): (slave batadv_slave_0): Releasing backup interface [ 455.892539][T18132] bond0 (unregistering): (slave 0!): Releasing backup interface [ 455.901512][T18132] bond0 (unregistering): Released all slaves [ 455.910059][T18132] bond1 (unregistering): Released all slaves [ 455.921417][T18132] bond2 (unregistering): Released all slaves [ 455.931037][T18132] bond3 (unregistering): (slave veth5): Releasing active interface [ 455.939760][T18132] bond3 (unregistering): Released all slaves [ 455.952717][T18132] bond4 (unregistering): (slave veth9): Releasing active interface [ 455.962642][T18132] bond4 (unregistering): Released all slaves [ 455.971559][T18132] bond5 (unregistering): Released all slaves [ 456.030330][T18132] : left promiscuous mode [ 456.084775][T18132] þ: left promiscuous mode [ 456.124984][T18132] k›*·]‘: left promiscuous mode [ 456.184833][T18132] tipc: Disabling bearer [ 456.190208][T18132] tipc: Left network mode [ 456.440346][T18132] hsr_slave_0: left promiscuous mode [ 456.447697][T18132] hsr_slave_1: left promiscuous mode [ 456.457170][T18132] hsr0: left allmulticast mode [ 456.461939][T18132] hsr0: left promiscuous mode [ 456.890207][T18132] IPVS: stop unused estimator thread 0... [ 457.374023][ T5871] Bluetooth: hci3: command 0x0406 tx timeout [ 462.494092][ T5871] Bluetooth: hci4: command 0x0406 tx timeout [ 472.734002][ T5871] Bluetooth: hci2: command 0x0406 tx timeout [ 478.386163][T19402] netlink: 'syz.1.3580': attribute type 5 has an invalid length. [ 478.396634][T19402] __nla_validate_parse: 68 callbacks suppressed [ 478.396650][T19402] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3580'. [ 478.433595][T19409] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3579'. [ 478.434276][T19402] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3580'. [ 478.445304][T19410] netlink: 248 bytes leftover after parsing attributes in process `syz.3.3582'. [ 478.602306][T19418] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3585'. [ 478.613338][T19402] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3580'. [ 478.642056][T19402] veth1_macvtap: left promiscuous mode [ 478.746387][T19426] IPVS: set_ctl: invalid protocol: 43 172.20.20.170:20001 [ 478.802293][T19430] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3590'. [ 478.829828][T19432] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3589'. [ 478.933528][T19430] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 479.004637][T19430] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 479.081847][T19430] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 479.170676][T19430] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 479.213301][T19441] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3592'. [ 479.223457][T19442] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3592'. [ 479.277615][T13555] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 479.288297][T13555] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 479.316423][T18128] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 479.344148][T18128] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 479.388776][T19462] netlink: 'syz.0.3597': attribute type 1 has an invalid length. [ 479.416211][T19465] netlink: 'syz.2.3598': attribute type 1 has an invalid length. [ 479.430204][T19465] bridge0: port 1(bridge_slave_0) entered disabled state [ 479.447267][T19470] syzkaller1: entered promiscuous mode [ 479.452795][T19470] syzkaller1: entered allmulticast mode [ 480.497003][T19531] pimreg: entered allmulticast mode [ 480.519017][T19531] pimreg: left allmulticast mode [ 480.541106][T19537] xt_policy: too many policy elements [ 480.924329][T19572] netlink: 'syz.0.3618': attribute type 1 has an invalid length. [ 481.033504][T19575] tipc: Enabling of bearer rejected, failed to enable media [ 481.129911][T19581] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20001 [ 481.356755][T19596] mac80211_hwsim hwsim47 wlan0: entered promiscuous mode [ 481.364124][T19596] macsec1: entered promiscuous mode [ 481.369701][T19596] macsec1: entered allmulticast mode [ 481.378058][T19596] mac80211_hwsim hwsim47 wlan0: entered allmulticast mode [ 481.887308][T19653] mac80211_hwsim hwsim50 wlan0: entered promiscuous mode [ 481.897526][T19653] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 482.682281][T19682] Bluetooth: MGMT ver 1.23 [ 482.982641][T19706] 8021q: adding VLAN 0 to HW filter on device bond1 [ 482.992743][T19706] bond1 (unregistering): Released all slaves [ 483.103076][T19715] bond1 (unregistering): Released all slaves [ 483.487017][T19741] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 483.504602][T19741] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 483.599309][T19741] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 483.619638][T19741] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 483.690056][T19741] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 483.701474][T19741] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 483.779394][T19741] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 483.814003][T19741] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 483.850920][T19765] __nla_validate_parse: 11 callbacks suppressed [ 483.850938][T19765] netlink: 80 bytes leftover after parsing attributes in process `syz.4.3667'. [ 483.902758][T19768] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3667'. [ 483.907780][T19765] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3667'. [ 483.973173][ T12] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 483.984044][ T12] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 483.992221][ T12] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 483.998657][T19765] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3667'. [ 484.000577][ T12] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 484.017952][ T12] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 484.026173][ T12] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 484.034766][ T12] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 484.042938][ T12] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 484.103862][T19771] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3668'. [ 484.115277][T19771] netem: unknown loss type 12 [ 484.123166][T19771] netem: change failed [ 484.302747][T19781] tc_dump_action: action bad kind [ 484.370996][T19783] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3671'. [ 484.389457][T19783] tipc: Enabling of bearer rejected, failed to enable media [ 484.666583][T19807] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3677'. [ 484.744412][T19818] netlink: 'syz.3.3680': attribute type 6 has an invalid length. [ 484.852522][T19815] netlink: 'syz.1.3681': attribute type 29 has an invalid length. [ 484.876708][T19815] netlink: 'syz.1.3681': attribute type 29 has an invalid length. [ 484.894567][T19815] netlink: 'syz.1.3681': attribute type 29 has an invalid length. [ 484.902538][T19815] netlink: 'syz.1.3681': attribute type 29 has an invalid length. [ 484.957249][T19837] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3681'. [ 484.987550][T19815] netlink: 'syz.1.3681': attribute type 29 has an invalid length. [ 484.993285][T19837] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3681'. [ 485.030112][T19837] netlink: 'syz.1.3681': attribute type 6 has an invalid length. [ 485.039149][T19815] netlink: 'syz.1.3681': attribute type 29 has an invalid length. [ 485.065123][T19815] netlink: 'syz.1.3681': attribute type 29 has an invalid length. [ 485.074497][T19839] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3681'. [ 485.083708][T19815] netlink: 'syz.1.3681': attribute type 29 has an invalid length. [ 485.542558][T19849] IPVS: set_ctl: invalid protocol: 8 224.0.0.1:20002 [ 485.684621][T19859] sch_tbf: burst 88 is lower than device veth3 mtu (1514) ! [ 485.761242][T19866] tipc: Started in network mode [ 485.783969][T19866] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 485.814620][T19866] tipc: Enabling of bearer rejected, failed to enable media [ 486.068195][T19897] tipc: Enabled bearer , priority 0 [ 486.107843][T19892] tipc: Resetting bearer [ 486.160810][T19892] tipc: Disabling bearer [ 486.254143][T19780] Bluetooth: hci1: command 0x0405 tx timeout [ 486.498183][T19930] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 486.813173][T18132] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 486.825200][T18132] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 486.838266][T18132] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 486.851496][T18132] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 487.120149][T19954] team0: Port device geneve0 added [ 487.418968][T19981] 8021q: adding VLAN 0 to HW filter on device bond1 [ 487.473163][T19981] bond_slave_0: entered promiscuous mode [ 487.478953][T19981] bond_slave_1: entered promiscuous mode [ 487.488872][T19981] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 487.499754][T19981] bond1: (slave macvlan0): Enslaving as a backup interface with an up link [ 487.525210][T19981] bridge_slave_0: left allmulticast mode [ 487.531119][T19981] bridge_slave_0: left promiscuous mode [ 487.537024][T19981] bridge0: port 1(bridge_slave_0) entered disabled state [ 487.551078][T19981] bridge_slave_1: left allmulticast mode [ 487.559553][T19981] bridge_slave_1: left promiscuous mode [ 487.568745][T19981] bridge0: port 2(bridge_slave_1) entered disabled state [ 487.589710][T19981] bond0: (slave bond_slave_0): Releasing backup interface [ 487.608394][T19981] bond_slave_0: left promiscuous mode [ 487.628242][T19981] bond0: (slave bond_slave_1): Releasing backup interface [ 487.652915][T19981] bond_slave_1: left promiscuous mode [ 487.667246][T19981] team0: Port device team_slave_0 removed [ 487.686313][T19981] team0: Port device team_slave_1 removed [ 487.702974][T19981] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 487.711278][T19981] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 487.720131][T19981] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 487.730159][T19981] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 487.751601][T19981] bond1: (slave macvlan0): Removing an active aggregator [ 487.769186][T19981] bond1: (slave macvlan0): Releasing backup interface [ 487.910915][T20021] tipc: Enabled bearer , priority 0 [ 487.932294][T20021] syzkaller0: entered promiscuous mode [ 487.947283][T20021] syzkaller0: entered allmulticast mode [ 487.988067][T20026] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 487.996172][T20026] netdevsim netdevsim3 netdevsim0: left allmulticast mode [ 488.003753][T20026] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 488.022918][T20021] tipc: Resetting bearer [ 488.044455][T20020] tipc: Resetting bearer [ 488.063347][T20020] tipc: Disabling bearer [ 488.396335][T20050] netlink: zone id is out of range [ 488.401554][T20050] netlink: zone id is out of range [ 488.407157][T20050] netlink: zone id is out of range [ 488.412312][T20050] netlink: zone id is out of range [ 488.417825][T20050] netlink: zone id is out of range [ 488.422938][T20050] netlink: zone id is out of range [ 488.428608][T20050] netlink: zone id is out of range [ 488.433752][T20050] netlink: zone id is out of range [ 488.438931][T20050] netlink: zone id is out of range [ 488.602457][T20056] bpq0: left promiscuous mode [ 488.950395][T20069] __nla_validate_parse: 16 callbacks suppressed [ 488.950413][T20069] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3749'. [ 489.049003][T20076] tipc: Enabled bearer , priority 0 [ 489.058652][T20076] syzkaller0: entered promiscuous mode [ 489.070889][T20076] syzkaller0: entered allmulticast mode [ 489.167122][T20088] tipc: Resetting bearer [ 489.176500][T20089] lo: Caught tx_queue_len zero misconfig [ 489.210500][T20074] tipc: Resetting bearer [ 489.218916][T20074] tipc: Disabling bearer [ 489.256597][T20096] tipc: Enabled bearer , priority 0 [ 489.269006][T20096] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3756'. [ 489.280049][T20096] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3756'. [ 489.307509][T20102] tipc: Enabling of bearer rejected, failed to enable media [ 489.323872][T20096] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3756'. [ 489.359795][T20096] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3756'. [ 489.373335][T20109] syzkaller0: entered promiscuous mode [ 489.397205][T20109] syzkaller0: entered allmulticast mode [ 489.417124][T20096] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3756'. [ 489.440855][T20094] tipc: Resetting bearer [ 489.465184][T20094] tipc: Disabling bearer [ 489.477617][T20118] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3762'. [ 489.489142][T20123] IPVS: length: 100 != 20450672 [ 489.561232][T20131] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3767'. [ 489.587920][T20132] tipc: Enabled bearer , priority 0 [ 489.588879][T20137] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3766'. [ 489.702802][T20149] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3770'. [ 489.714464][T20125] tipc: Disabling bearer [ 489.912150][T20165] validate_nla: 26 callbacks suppressed [ 489.912167][T20165] netlink: 'syz.0.3779': attribute type 1 has an invalid length. [ 490.074654][T20171] RDS: rds_bind could not find a transport for 2001::2, load rds_tcp or rds_rdma? [ 490.150795][T13555] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 490.171726][T13555] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 490.183690][T20185] tipc: Resetting bearer [ 490.254644][T13555] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 490.267324][T13555] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 490.284399][T20191] netlink: 'syz.1.3785': attribute type 2 has an invalid length. [ 490.301265][T20191] netlink: 'syz.1.3785': attribute type 2 has an invalid length. [ 490.339824][T20203] vlan2: entered promiscuous mode [ 490.345301][T20203] vlan2: entered allmulticast mode [ 490.350527][T20203] hsr_slave_1: entered allmulticast mode [ 490.977320][T20185] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 490.985723][T20185] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 491.048627][T20185] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 491.064225][T20185] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 491.085636][ T30] audit: type=1800 audit(1756064817.112:15): pid=20257 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.3803" name="memory.events" dev="tmpfs" ino=965 res=0 errno=0 [ 491.293842][T20185] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 491.316981][T20185] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 491.349511][T20185] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 491.394180][T20185] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 491.442337][T20293] RDS: rds_bind could not find a transport for fe88::4, load rds_tcp or rds_rdma? [ 491.466225][T20185] Oops: general protection fault, probably for non-canonical address 0xdffffc000000000b: 0000 [#1] SMP KASAN PTI [ 491.478134][T20185] KASAN: null-ptr-deref in range [0x0000000000000058-0x000000000000005f] [ 491.486600][T20185] CPU: 1 UID: 0 PID: 20185 Comm: syz.1.3785 Not tainted syzkaller #0 PREEMPT(full) [ 491.495976][T20185] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 491.506040][T20185] RIP: 0010:klist_remove+0x14a/0x340 [ 491.511337][T20185] Code: 4d 89 f5 49 c1 ed 03 43 80 7c 3d 00 00 74 08 4c 89 f7 e8 69 1e b3 f6 4d 8b 26 49 83 e4 fe 49 8d 7c 24 58 48 89 f8 48 c1 e8 03 <42> 80 3c 38 00 74 05 e8 4a 1e b3 f6 49 8b 44 24 58 48 89 44 24 08 [ 491.530936][T20185] RSP: 0018:ffffc9000d477820 EFLAGS: 00010202 [ 491.536991][T20185] RAX: 000000000000000b RBX: ffff88802c2e9e00 RCX: 0000000000000000 [ 491.544948][T20185] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000058 [ 491.552903][T20185] RBP: ffffc9000d477908 R08: ffffffff8f8a0003 R09: 1ffffffff1f14000 [ 491.560858][T20185] R10: dffffc0000000000 R11: fffffbfff1f14001 R12: 0000000000000000 [ 491.568834][T20185] R13: 1ffff1100a921b0c R14: ffff88805490d860 R15: dffffc0000000000 [ 491.576825][T20185] FS: 00007fdae9b396c0(0000) GS:ffff888125d18000(0000) knlGS:0000000000000000 [ 491.585736][T20185] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 491.592339][T20185] CR2: 00007faa8eee56c0 CR3: 0000000073806000 CR4: 00000000003526f0 [ 491.600306][T20185] Call Trace: [ 491.603567][T20185] [ 491.606482][T20185] ? __pfx_klist_remove+0x10/0x10 [ 491.611499][T20185] ? __pfx_kobject_move+0x10/0x10 [ 491.616506][T20185] ? get_device_parent+0x366/0x3a0 [ 491.621606][T20185] device_move+0x193/0x700 [ 491.626009][T20185] hci_conn_del_sysfs+0xb8/0x170 [ 491.630932][T20185] hci_conn_del+0x9b7/0xd60 [ 491.635427][T20185] hci_conn_hash_flush+0x191/0x230 [ 491.640522][T20185] hci_dev_close_sync+0xaef/0x1330 [ 491.645629][T20185] ? __pfx_hci_dev_close_sync+0x10/0x10 [ 491.651163][T20185] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 491.657044][T20185] hci_dev_do_close+0x2f/0x90 [ 491.661701][T20185] hci_rfkill_set_block+0x21d/0x2e0 [ 491.666884][T20185] ? __pfx_hci_rfkill_set_block+0x10/0x10 [ 491.672588][T20185] rfkill_set_block+0x1cf/0x440 [ 491.677429][T20185] rfkill_fop_write+0x44b/0x570 [ 491.682265][T20185] ? __pfx_rfkill_fop_write+0x10/0x10 [ 491.687624][T20185] ? __pfx_security_file_permission+0x10/0x10 [ 491.693684][T20185] ? rw_verify_area+0x255/0x4d0 [ 491.698520][T20185] ? __pfx_rfkill_fop_write+0x10/0x10 [ 491.703874][T20185] vfs_write+0x27e/0xb30 [ 491.708112][T20185] ? __pfx_vfs_write+0x10/0x10 [ 491.712862][T20185] ? lock_release+0x4b/0x3e0 [ 491.717441][T20185] ? __fget_files+0x2a/0x420 [ 491.722010][T20185] ? __fget_files+0x3a0/0x420 [ 491.726664][T20185] ? __fget_files+0x2a/0x420 [ 491.731235][T20185] ksys_write+0x145/0x250 [ 491.735552][T20185] ? __pfx_ksys_write+0x10/0x10 [ 491.740386][T20185] ? rcu_is_watching+0x15/0xb0 [ 491.745132][T20185] ? rcu_is_watching+0x15/0xb0 [ 491.749884][T20185] do_syscall_64+0xfa/0x3b0 [ 491.754379][T20185] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 491.760426][T20185] ? clear_bhb_loop+0x60/0xb0 [ 491.765086][T20185] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 491.770960][T20185] RIP: 0033:0x7fdae8d8ebe9 [ 491.775372][T20185] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 491.794962][T20185] RSP: 002b:00007fdae9b39038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 491.803368][T20185] RAX: ffffffffffffffda RBX: 00007fdae8fb5fa0 RCX: 00007fdae8d8ebe9 [ 491.811322][T20185] RDX: 0000000000000008 RSI: 0000200000000080 RDI: 0000000000000004 [ 491.819275][T20185] RBP: 00007fdae8e11e19 R08: 0000000000000000 R09: 0000000000000000 [ 491.827227][T20185] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 491.835179][T20185] R13: 00007fdae8fb6038 R14: 00007fdae8fb5fa0 R15: 00007ffeb128c808 [ 491.843142][T20185] [ 491.846152][T20185] Modules linked in: [ 491.850987][T20185] ---[ end trace 0000000000000000 ]--- [ 491.858790][T20185] RIP: 0010:klist_remove+0x14a/0x340 [ 491.864395][T20185] Code: 4d 89 f5 49 c1 ed 03 43 80 7c 3d 00 00 74 08 4c 89 f7 e8 69 1e b3 f6 4d 8b 26 49 83 e4 fe 49 8d 7c 24 58 48 89 f8 48 c1 e8 03 <42> 80 3c 38 00 74 05 e8 4a 1e b3 f6 49 8b 44 24 58 48 89 44 24 08 [ 491.884709][T20185] RSP: 0018:ffffc9000d477820 EFLAGS: 00010202 [ 491.891103][T20185] RAX: 000000000000000b RBX: ffff88802c2e9e00 RCX: 0000000000000000 [ 491.921913][T20185] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000058 [ 491.940820][T20185] RBP: ffffc9000d477908 R08: ffffffff8f8a0003 R09: 1ffffffff1f14000 [ 491.949695][T20185] R10: dffffc0000000000 R11: fffffbfff1f14001 R12: 0000000000000000 [ 491.958579][T20185] R13: 1ffff1100a921b0c R14: ffff88805490d860 R15: dffffc0000000000 [ 491.966701][T20185] FS: 00007fdae9b396c0(0000) GS:ffff888125d18000(0000) knlGS:0000000000000000 [ 491.975872][T20185] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 491.982543][T20185] CR2: 00007faa8f067d58 CR3: 0000000073806000 CR4: 00000000003526f0 [ 491.990692][T20185] Kernel panic - not syncing: Fatal exception [ 491.996993][T20185] Kernel Offset: disabled [ 492.001311][T20185] Rebooting in 86400 seconds..